appraisalpilot.app — domain check, WHOIS, DNS & reputation

HTML metadata

Title: AppraisalPilot
Description: The intern that handles your UAD 3.6 typing. Photos in, draft descriptions out — you review every word. Built for appraisers who are staying.
Language: en

Open Graph

url: https://appraisalpilot.app
title: AppraisalPilot — It's the intern. You're the supervisor.
description: The intern that handles your UAD 3.6 typing. Photos in, draft descriptions out — you review every word. Built for appraisers who are staying.

Technology

CDN: Netlify

Third-party hosts loaded (2)

widgets.leadconnectorhq.com×1
www.facebook.com×1

DNS records live

NS

ns33.domaincontrol.com
ns34.domaincontrol.com

MX

10 mxa.mailgun.org
20 mxb.mailgun.org
30 mxa.mailgun.org

Email authentication strong

SPF: v=spf1 include:spf.leadconnectorhq.com include:mailgun.org ~all
softfail (~all)
DMARC: v=DMARC1; p=quarantine; adkim=r; aspf=r; rua=mailto:dmarc_rua@onsecureserver.net;
policy: quarantine
DKIM: no key found at common selectors

Certificate (current)

YE1

from 2026-06-09 to 2026-09-07

Expires in 78 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://appraisalpilot.app/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: camera=(self), microphone=(self), geolocation=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: https://connect.facebook.net https://widgets.leadconnectorhq.com https://stcdn.leadconnectorhq.com https://services.leadconnectorhq.com https://www.google.com https://www.gstatic.com https://cdn.socket.io; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://stcdn.leadconnectorhq.com https://widgets.leadconnectorhq.com https://fonts.bunny.net; img-src 'self' data: blob: https://*.supabase.co https://www.facebook.com https://assets.cdn.filesafe.space https://stcdn.leadconnectorhq.com https://maps.googleapis.com https://maps.gstatic.com; font-src 'self' https://stcdn.leadconnectorhq.com https://fonts.bunny.net; connect-src 'self' https://*.supabase.co https://services.leadconnectorhq.com https://widgets.leadconnectorhq.com https://stcdn.leadconnectorhq.com https://services.msgsndr.com https://*.facebook.com https://*.facebook.net https://*.fbcdn.net https://*.on.aws https://*.run.app
strict-transport-security: max-age=63072000; includeSubDomains; preload

Linked from (1)

valuationexpo.com×1

Use this data via API

Everything on this page for appraisalpilot.app is available as JSON from the indexo.dev REST & MCP API.

curl "https://indexo.dev/api/v1/domains/appraisalpilot.app" \
  -H "X-API-Key: idx_..."

Read the docs & get a free key →

Add a badge to your site

Own appraisalpilot.app? Show it's tracked on indexo.dev and link visitors straight to this page.

<a href="https://indexo.dev/appraisalpilot.app" target="_blank" rel="noopener">
  <img src="https://indexo.dev/appraisalpilot.app/badge.svg" alt="indexo.dev — appraisalpilot.app">
</a>