icbc.com

HTML metadata

Title

ICBC — Insurance Corporation of British Columbia

Description

At ICBC, our job is making sure the auto insurance system works for all road users.

Language

en

Canonical

https://icbc.com

Translations

en
pa
zh

Open Graph

title: ICBC — Insurance Corporation of British Columbia
description: At ICBC, our job is making sure the auto insurance system works for all road users.

Technology

CDN: Cloudflare
CMS: Next.js

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (3)

images.ctfassets.net×13
use.typekit.net×2
www.googletagmanager.com×1

Social

Contact

Phone

Registration

Registrar

Network Solutions, LLC

Created

1995-06-04

Expires

2030-06-03 1474 days left

Updated

2025-04-04

Name servers

chelsea.ns.cloudflare.com
ruben.ns.cloudflare.com

DNS records live

NS

chelsea.ns.cloudflare.com
ruben.ns.cloudflare.com

MX

10 icbc-com.mail.protection.outlook.com

TXT

Show 5 TXT records

successfactors-site-verification=OTEyNzk5YjYwYWRhN2JjYmMwYTEyODdiMzI4OTc0ODAwOGZjMzVkNTA2MjE2OTkxNGMxNTkyYmI4MWFjNzhmOA==
wp-noop://
xXaQmHMZCg7m9DZyVjqh0RIxRR7ca7zJPe+yKa/uDM5uWHUlYVjg/TALK+MRR4s/ZYU3/ZN9rgqrshaPo/oYMA==
MS=9CC5AB59D6EE002AB44DC6C3DFD114C711780613
cisco-site-verification=8ab0a27a-4de0-4155-ad5b-8146dcc5af48

Verified for

Adobe
Apple
Atlassian
Dynatrace
Microsoft
Miro

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:_spf.qualtrics.com include:_spf-dc17.sapsf.com ip4:198.162.234.30 -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:administrator@icbc.com; ruf=mailto:administrator@icbc.com; fo=1

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMbLN0HuYysZakeJSznPAM0Z6iJpOzyZqcfjswm2vJsqGKGLDKSdH3hdUDmiim0mYcNbfb22wjDJcorKP2Li…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC11+Vw0XLxo0q5J6qQUaNwmP6cn2KF6fe3aDzbftzZOFx55V3SrE01HW4mYxIMH4oj0W6So+mGg7YnxmSO/U…

selectors probed

Certificate (current)

E7

from 2026-04-03 to 2026-07-02

Expires in 42 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://icbc.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

short HSTS max-age
CSP uses wildcard sources

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self), microphone=(), camera=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; img-src *.googleusercontent.com *.qualtrics.com https://*.attribution.adswizz.com https://*.g.doubleclick.net https://*.google-analytics.com https://*.google.ca https://google.com https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://googletagmanager.com https://*.gstatic.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://ade.googlesyndication.com https://pagead2.googlesyndication.com https://www.googleadservices.com i.ytimg.com images.ctfassets.net www.facebook.com data: 'self'; child-src www.googletagmanager.com 'self'; font-src use.typekit.net https://fonts.gstatic.com data: 'self'; form-action https://www.icbcsurveys.com 'self'; frame-src *.google.com https://www.googletagmanager.com bid.g.doubleclick.net https://*.fls.doubleclick.net td.doubleclick.net https://insight.adsrvr.org https://match.adsrvr.org/ issuu.com e.issuu.com https://www.icbcsurveys.com open.spotify.com www.youtube.com 'self'; media-src 'se
strict-transport-security: max-age=0
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: same-site