boatus.com

HTML metadata

Title: Boat Owner's Association of The United States | BoatUS
Description: Explore BoatUS for boat insurance, towing membership via TowBoatUS services, and other boat owners association benefits.
Language: en
Canonical: https://www.boatus.com

Open Graph

url: https://www.boatus.com
title: Boat Owner's Association of The United States | BoatUS
site name: BoatUS
description: BoatUS provides boat insurance, water & roadside boat towing, boat lettering, & more! Discover why over half a million boaters trust our boating association.

Technology

Server: volt-adc
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Contact

Phone

800-283-2883

Registration

Registrar

Key-Systems GmbH

Created

1995-06-01

Expires

2027-05-31 377 days left

Updated

2026-04-29

Name servers

cbru.br.ns.els-gms.att.net
cmtu.mt.ns.els-gms.att.net

DNS records live

NS

cbru.br.ns.els-gms.att.net
cmtu.mt.ns.els-gms.att.net

MX

15 mxa-00306701.gslb.pphosted.com
15 mxb-00306701.gslb.pphosted.com

TXT

Show 10 TXT records

globalsign-domain-verification=F5FD7BABB407C8B7A9D4591D1C71AD26
google-site-verification=E5DoWfzkKYIoYzEDL0CjcOCn3kEbJesLoAX_wafFOg0
globalsign-domain-verification=0B906008E179483A8202DE9A5CB007F1
zscaler-verification-941050-16122025-766hYpphfv
aws-domain-controls-verification=a3556907-2948-4691-b7ea-b4006c207996
MS=E20E357135EE843C98EC7700C0599E641BF488AE
MS=ms87825653
prod-boatus-cd.azurewebsites.net
knowbe4-site-verification=4b983413f58c41b00e1876d3387619b9
MS=ms37025819

Email authentication strong

SPF

v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com include:helpscoutemail.com include:aspmx.pardot.com include:mail.zendesk.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;

policy: reject (enforced)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAVO6Ux4I/Ic0nBnpV7gAZ70LkHKXNTjgtq/RW4olVsnn3n6RSZqQIyze8IcsNf4T96fbo16slB1X0NtkP…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxeNI6N5nqfW+p6ldo5QN6YQ1Kss54nBp2AD0+7WcQ/tsw47fj5fdixT/olsN4ZA+lGx0fTqyhJ1zOyXEiiv1mD8…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2026-04-17 to 2026-11-02

Expires in 167 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://boatus.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: no-referrer-when-downgrade
permissions-policy: accelerometer=(), camera=(), gyroscope=(), microphone=(), usb=()
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' ; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: *.amazonaws.com *.adobedtm.com *.bazaarvoice.com *.geico.com *.boatus.com *.cloud.geico.net *.google.com *.googleapis.com *.gstatic.com *.omtrdc.net *.optimizely.com *.qualaroo.com *.ringcentral.com *.youtube.com https://*.amazon-adsystem.com https://*.bing.com https://*.branch.io https://*.ceros.com https://*.clarity.ms https://*.cloudflare.com https://*.cookielaw.org https://capig.datah04.com https://boatus.pxf.io https://*.demdex.net https://*.doubleclick.net https://*.evergage.com https://*.facebook.com https://*.force.com https://*.google-analytics.com https://*.instagram.com https://*.onetrust.com https://*.qualtrics.com
strict-transport-security: max-age=63072000; includeSubDomains; preload