andarsoftware.com

HTML metadata

Title: Andar Software | Nonprofit Fundraising & Donor Relations
Description: Since 1988, Andar Software has developed technology that improves fundraising and donor relationship management at nonprofit organizations.
Language: en-US
Canonical: https://andarsoftware.com/

Open Graph

url: https://andarsoftware.com/
title: Andar Software | Nonprofit Fundraising & Donor Relations
locale: en_US
site name: Andar Software
description: Since 1988, Andar Software has developed technology that improves fundraising and donor relationship management at nonprofit organizations.

Technology

Server: nginx
CMS: WordPress

Analytics

Google Tag Manager

Third-party hosts loaded (10)

c0.wp.com×3
js-na2.hs-scripts.com×2
s0.wp.com×2
stats.wp.com×2
www.googletagmanager.com×2
jetpack.wordpress.com×1
public-api.wordpress.com×1
secure.gravatar.com×1
widgets.wp.com×1
wp.me×1

Social

Contact

Email

Phone

18774793780

Registration

Registrar

GoDaddy.com, LLC

Created

2017-06-26

Expires

2029-06-26 1132 days left

Updated

2024-05-28

Name servers

eleanor.ns.cloudflare.com
theo.ns.cloudflare.com

DNS records live

NS

eleanor.ns.cloudflare.com
theo.ns.cloudflare.com

MX

0 andarsoftware-com.mail.protection.outlook.com

TXT

have-i-been-pwned-verification=9cea9ec0507a4e36990706274b84582e
bicuvoX6qDFwT2RcsL9A76E2Svjjv5sGIFxKu2Dmpi9pWZHvoEYIzw545CmtYFt4f4tM1I4lfSFNjSa9/IyrbQ==

Email authentication strong

SPF

v=spf1 ip4:161.129.71.64/26 ip4:192.40.179.129 ip4:192.40.179.130 ip4:192.40.179.131 ip4:199.246.24.128 ip4:199.246.24.125 ip4:199.15.213.62 ip4:199.15.213.63 ip4:62.146.231.137 include:spf.ourvolaris.com include:_spf.smtp.com include:fdspfus.freshemail.io include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+myXeTEa+hVcsB/jprUk/eASxZrYrE380z4TwvHFu0vtUdFy0ZzaJmvY0WIto9oZVqFjzgQBeWW57…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

WR1

from 2026-04-09 to 2026-07-08

Expires in 48 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://andarsoftware.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(self), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' https://js-na2.hsadspixel.net https://snap.licdn.com https://ajax.googleapis.com https://*.wp.com https://*.googletagmanager.com https://*.google-analytics.com https://*.hs-scripts.com https://secure.gravatar.com https://*.marketo.net https://*.hs-analytics.net https://*.hs-banner.net https://*.hs-banner.com https://*.hscollectedforms.net https://*.survicate.com https://*.hsforms.net https://elements.oxy.host 'unsafe-inline'; connect-src 'self' https://static.hsappstatic.net https://px.ads.linkedin.com https://api-na2.hubapi.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://elements.oxy.host https://*.hsforms.com https://hubspot-forms-static-embed-na2.s3.amazonaws.com https://www.google-analytics.com https://pixel.wp.com https://*.marketo.net https://*.mktoresp.com https://*.hscollectedforms.net https://*.googletagmanager.com; style-src 'self' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://elements.oxy.h
strict-transport-security: max-age=31536000
cross-origin-opener-policy: unsafe-none
cross-origin-embedder-policy: unsafe-none; report-to='default'
cross-origin-resource-policy: cross-origin