appraisers.org

HTML metadata

Title: Home
Description: ASA
Language: en
Generator: Sitefinity 15.3.8522.0 DX
Canonical: https://www.appraisers.org

Open Graph

url: https://www.appraisers.org
title: Home
site name: www.appraisers.org
description: ASA

Technology

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (4)

fonts.googleapis.com×2
fonts.gstatic.com×1
js.hs-scripts.com×1
www.googletagmanager.com×1

Social

Contact

Email

asainfo@appraisers.org

Phone

18002728258

DNS records live

NS

ns79.worldnic.com
ns80.worldnic.com

MX

0 appraisers-org.mail.protection.outlook.com

TXT

mandrill_verify.L-N6RjrY9Jt5PfUeyzzsSw
24fp618d0svfo3qrknqevlq1ot
WUQWt2Ecctk5Wves8DhaGWVIqZLymsjGAmJMxPRFajaGNBhZGAdfH6PCaPS7Da257RG8l7EuGpdL5V2WLQcQYQ==

Verified for

Apple
Atlassian
Google
Perplexity

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:msgfocus.com include:_spf.pcbscloud.com include:mailgun.org include:jangomail.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc@appraisers.org; ruf=mailto:dmarc@appraisers.org

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KqNWElHmAuqxFwDE5UAWZmyCw0GnfmFjAQzF3P5vb0ATxxhon4mEK5PAbB5ZjysoBlVzf46ezzsxU…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCrBG2YxEYtGK/9us4D+fBZEACnHtaeWktlQVQcQoEWyPnh+QwTIg1BzBMWejVK4Yimv1xQU4nA+BUnxAayS…

selectors probed

Certificate (current)

R13

from 2026-04-12 to 2026-07-11

Expires in 40 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.appraisers.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src *.googleapis.com *.gstatic.com www.google.com apis.google.com *.google-analytics.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js cdnjs.cloudflare.com https://www.googletagmanager.com/ https://extend.vimeocdn.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com *.msecnd.net www.votervoice.net js.usemessages.com js.hscollectedforms.net js.hs-banner.com js-na1.hs-scripts.com *.surveymonkey.com https://jsd-widget.atlassian.com 'self' web-chat.nativechat.com https://cdn.insight.sitefinity.com https://dec.azureedge.net https://player.vimeo.com/api/player.js https://www.youtube.com/iframe_api cdn.ampproject.org 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.gstatic.com kendo.cdn.telerik.com w
strict-transport-security: max-age=31536000; includeSubDomains