caionline.org

HTML metadata

Title: Community Associations Institute (CAI) | Support & Resources for HOAs | Community Associations Institute
Description: Discover CAI, the leading authority for community associations. Access expert resources, education, and advocacy for HOAs, condos, and co-ops.
Language: en
Canonical: https://www.caionline.org/

Open Graph

url: /homepage
title: Community Associations Institute (CAI) | Support & Resources for HOAs
site name: CAI
description: Discover CAI, the leading authority for community associations. Access expert resources, education, and advocacy for HOAs, condos, and co-ops.

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (6)

www.googletagmanager.com×3
assets.adobedtm.com×2
fonts.googleapis.com×2
cdn.commoninja.com×1
fonts.gstatic.com×1
servedby.revive-adserver.net×1

Social

Contact

Address: Street Address: 6402

Registration

Registrar

GoDaddy.com, LLC

Created

1997-02-03

Expires

2028-02-04 626 days left

Updated

2026-03-02

Name servers

ns17.domaincontrol.com
ns18.domaincontrol.com

DNS records live

NS

ns17.domaincontrol.com
ns18.domaincontrol.com

MX

0 caionline-org.mail.protection.outlook.com

TXT

Show 7 TXT records

_wygity19dgc8nq42eewrzxmqsppmrn9
google-site-verification=o-H0YSc9LStGl-MKnqnLfZz0qbzaPQq4imcYnTIFaBI
ms-domain-verification=db7b60ae-6c3e-464a-ac76-05ae7ed67b60
apple-domain-verification=wzeZzTlORWKE8TN8
kc6h6ufhitnbicft1pd7sg1je9
ZOOM_verify_a5JBDMHTWJKDcbadGnJMEH
o3paaems34orte32e5gdmjbt0n

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:servers.mcsv.net include:spf.commbrands.com include:sendgrid.net include:_spf.votervoice.net include:spf.us.exclaimer.net include:spf.hosting.americaneagle.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:rua_reports@caionline.org,mailto:dmarc_agg@vali.email; ruf=mailto:ruf_reports@caionline.org; fo=1; adkim=r; aspf=r;

policy: quarantine

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDjQ+hMPrdXoWqSj+cIF5uWWIOqVqfQEmeU7lfuLYQN//99y6DraW5KSSiXfmVVMMA6sedevVetoKj/9TlYiu…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy79JQzn3Uecr1mgs8zrlX+n2oTB47s8g30If5RTuRM+/FpNMjM3aq/6fJR6kFgZGPq56020MBoGb2+9rpA…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDB9OGWT/+WMPAR/15Pq26hWL8u5vxO2SIKnqJ4v5YtfH7gq2cYsMb+8F1PE3R7/ZaX6yGWCciiKuV2/aMaRxMJZz…

selectors probed

Certificate (current)

RapidSSL TLS RSA CA G1

from 2025-09-08 to 2026-10-10

Expires in 144 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.caionline.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src *.ae-admin.com *.caionline.org *.idevdesign.net localhost:* 'unsafe-inline' 'unsafe-eval'; script-src *.googleapis.com *.surveymonkey.com *.gstatic.com *.google.com *.getsitecontrol.com *.twitter.com *.googletagmanager.com *.govhawk.com *.revive-adserver.net connect.facebook.net snap.licdn.com tracking.magnetmail.net *.ae-admin.com *.idevdesign.net *.tableau.com *.calendarwiz.com *.votervoice.net *.simplemaps.com donorbox.org *.doubleclick.net *.adobedtm.com *.kickfire.com *.callrail.com *.sociabble.com *.caionline.org *.commoninja.com *.simpli.fi localhost:* 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src *.googleapis.com *.govhawk.com *.cloudflare.com *.ae-admin.com *.caionline.org *.idevdesign.net localhost:* 'unsafe-inline'; worker-src 'unsafe-inline'; frame-ancestors *.ae-admin.com *.caionline.org *.idevdesign.net localhost:*; font-src * data: 'unsafe-inline'
strict-transport-security: max-age=31536000; includeSubDomains