aaos.org

HTML metadata

Title: American Academy of Orthopaedic Surgeons AAOS
Description: The American Academy of Orthopaedic Surgeons (AAOS) provides education programs for orthopaedic surgeons and allied health professionals, champions and advances the highest quality musculoskeletal care for patients, and is the authoritative source of information on bone and joint conditions, treatments and related issues.
Language: en

Open Graph

url: https://www.aaos.org/
title: American Academy of Orthopaedic Surgeons AAOS
description: The American Academy of Orthopaedic Surgeons (AAOS) provides education programs for orthopaedic surgeons and allied health professionals, champions and advances the highest quality musculoskeletal care for patients, and is the authoritative source of information on bone and joint conditions, treatments and related issues.

Technology

Analytics

Google Tag Manager

Ads

Google Ads (DoubleClick)

Third-party hosts loaded (5)

cdn.jsdelivr.net×2
s3.amazonaws.com×1
securepubads.g.doubleclick.net×1
www.googletagmanager.com×1
www.googletagservices.com×1

Social

Contact

Phone

Address

9400 West Higgins RoadRosemont, Illinois 60018Phone: 847.823.7186Fax: 847.823.8125

Registration

Registrar

Network Solutions, LLC

Created

1995-04-10

Expires

2030-04-11 1422 days left

Updated

2020-04-11

Name servers

pdns77.ultradns.org
pdns77.ultradns.biz
pdns77.ultradns.com
pdns77.ultradns.net

DNS records live

NS

pdns77.ultradns.biz
pdns77.ultradns.com
pdns77.ultradns.net
pdns77.ultradns.org

MX

10 us-smtp-inbound-1.mimecast.com
10 us-smtp-inbound-2.mimecast.com

TXT

Show 8 TXT records

u9qaldq2mql9d1rt9jmjehkecg
vj0013j1qf909m7s1276lfmjkg
ckcwlk137r3yflnrdcxq0158hk85rxjz
aaos-app-prod-epi01.azurewebsites.net
anthropic-domain-verification-be05b9=uL1xpplzLMutxwAnYUVw8ISPN
google-site-verification=tiQ8Qv39ziNUZMS7JHZ68iYfUw85TiMdBvYyPUIJwfo
google-site-verification=uUgOipwYJpqgIFu5-AIcbqns_1UvmG75Eupg_XaaNJ8
atlassian-domain-verification=wbf1x9dfLXyZJIfwl8mC+3JONdGjc1zbKpYCUQmAC2FLhlv/0IMAAYmh1Tm/a2Hc

Email authentication strong

SPF

v=spf1 redirect=ciqi3fw7._spf._d.mim.ec

no all qualifier

DMARC

v=DMARC1; p=reject; rua=mailto:5394e379141c673@rep.dmarcanalyzer.com; ruf=mailto:5394e379141c673@for.dmarcanalyzer.com; sp=reject; fo=1;

policy: reject (enforced) · sp=reject

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFLQJo4zlJMtEBzmvBt+FMzihtpeiWITjoZJSUKjPA2vFumKvWUz5h0R9+x9sblsrMdVl+ChryGuicqMqp…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06c/3Lb9ReduiNBrnzzpA865GSVvFki+aY1MVjLADADea0M/cIbRDm0iM6lxoeZFBYf5w8nIaaqhXvfkS+…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

Go Daddy Secure Certificate Authority - G2

from 2025-07-31 to 2026-09-01

Expires in 105 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.aaos.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
weak frame protection
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN, SAMEORIGIN
permissions-policy: geolocation=(), microphone=(), camera=()
x-content-type-options: nosniff, nosniff
content-security-policy: upgrade-insecure-requests; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; object-src 'none';, default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' api.b2c.com/ws/v/48313q6podqm86256ptw api.b2c.com https://48752163.fs1.hubspotusercontent-na1.net https://aaos.applicant-tracking.com https://aaos.disqus.com https://aaos.webauthor.com https://aaos.webauthorxm.com https://ajax.googleapis.com https://api.b2c.com https://assets.map.brightcove.com https://assets.primepay-recruit.com https://c.disquscdn.com https://c.sharethis.mgr.consensu.org https://cdn.datatables.net https://cdn.feathr.co https://cdn.jsdelivr.net https://cdn.optimizely.com https://cdn.shooju.com https://cdnjs.cloudflare.com https://code.jquery.com https://connect.facebook.net https://count-server.sharethis.com https://d1vl91sh9bpatf.cloudfront.net https://d3k8n8jihns708.cloudfront.net https://dc.services.visualstudio.com https://dev.visualwebsiteoptimizer.com https://ep2.adtrafficquality.google ht
strict-transport-security: max-age=31536000; includeSubDomains