wsba.org

HTML metadata

Title: The Washington State Bar Association Home
Description: The Washington State Bar Association's home on the Internet. Our newly redesigned site offers information on becoming a licensed legal professional in Washington and member benefits.
Language: en
Generator: Sitefinity 15.3.8523.0 DX
Canonical: https://wsba.org

Technology

Server: Microsoft-IIS
CMS: WordPress

Analytics

Google Tag Manager

Third-party hosts loaded (2)

i0.wp.com×5
www.googletagmanager.com×2

Social

Contact

Email

Phone

Registration

Registrar

Network Solutions, LLC

Created

1995-11-10

Expires

2034-11-09 3095 days left

Updated

2024-11-15

Name servers

alice.ns.cloudflare.com
piotr.ns.cloudflare.com

DNS records live

NS

alice.ns.cloudflare.com
piotr.ns.cloudflare.com

MX

10 wsba-org.mail.protection.outlook.com
15 mxa.mailgun.org
15 mxb.mailgun.org

TXT

Show 11 TXT records

googlesiteverification= IRe58UfVbJHCp2ldIV1wtNOLIrJq4upNyLxVhaUsg
s4smvr5vdhc0s0nhn12g5bmg1
t9toee36fmc35773m9sbte9i42
0ed1fe018a9c3923c0f8794e28bcda27839d6fe940
MS=ms63466287
apple-domain-verification=cUzsBEQWuISJzOWg
atlassian-domain-verification=6R9IUvaKy7FDug317mxGQm9HdmO5ZuLJP5I/1QptBdYH9hVdUa2VMswkq7lBdQpv
dflctocqmihb5lte3b3lpikucr
dropbox-domain-verification=htb5kkt2wnjc
google-site-verification=IRe58UfVbJHCp2ldIV1w-tNOLIrJq4upNyLxVha-Usg
google-site-verification=Ta8mKBEuKZCGUXJu1kkizh-9KZOkf_JP4rWE5zkThoI

Email authentication strong

SPF

v=spf1 include:mailgun.org include:spf.protection.outlook.com include:_spf.regroupcloud.com v=spf1 mx include:_spf.salesforce.com ip4:208.185.235.0/24 ip4:208.185.229.0/24 ip4:205.201.44.193/32 ip4:64.132.221.30/32 ip4:205.169.94.26/32 -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:wsbadmarc@wsba.org; ruf=mailto:wsbadmarc@wsba.org

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMPCQLLokLe9TBBCgBduXlnLiamrkclqm9gyBMS6cGKwAWjGNzrOrDIEX6NpJF/mRQhwUSrpdbdYx/…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-02-13 to 2026-08-14

Expires in 86 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://wsba.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' *.azurewebsites.net; script-src *.googleapis.com *.gstatic.com apis.google.com *.google-analytics.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js www.googletagmanager.com https://cdn.insight.sitefinity.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com unpkg.com/@frontify/ *.cloudinary.com *.msecnd.net https://wsba.app.box.com cdnjs.cloudflare.com *.google.com *.limelight.com 'self' web-chat.nativechat.com cdn.ampproject.org 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.gstatic.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com https://cdn.insight.sitefinity.com https://dec.azureedge.net 'self' web-chat.nativechat.com 'unsafe-inline'; img-src *.gstatic.com *.googleap
strict-transport-security: max-age=31536000; includeSubDomains