Propertydata.orangecountygov.com presents itself as a portal for Orange County real property information, letting users log in to view assessment data, tax maps, and property images. On the surface, it has some reassuring features: a 19-year web history, an about page, and a legal disclosure. But two things stand out as red flags for a government-adjacent site. First, the SSL certificate is about to expire in just two days. That means the encrypted connection you rely on to keep your login details safe could break any moment. Second, there's no obvious contact information on the homepage. If this is an official county service, you'd expect a phone number or email clearly posted. The .com domain instead of .gov is also worth noting, though some local governments do use commercial domains. If you're considering using this site, check whether the certificate gets renewed soon and look for a contact page before entering any personal information.
No — propertydata.orangecountygov.com doesn't look safe
In plain English
This site looks like it could be a legitimate Orange County property information service, but the combination of an SSL certificate expiring in two days and a lack of visible contact details makes it hard to trust right now. The domain being a .com rather than a .gov adds another layer of uncertainty. I'd advise holding off on logging in until those issues are resolved.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
The SSL certificate expires in just two days, which is a critical oversight for any site that handles property data. While the connection uses modern encryption now, letting the certificate lapse would leave visitors exposed, and the server still accepts outdated TLS versions with known flaws. This suggests the site isn't being actively maintained.
The domain has been around for 19 years and the site claims to be run by Orange County government, but the use of a .com address instead of a .gov is unusual. The WHOIS data for the parent domain isn't clear, though the long web archive history lends some credibility.
No blacklist issues, no Google Safe Browsing flags, and an archive history stretching back to 2007. For a site that appears to be a long-standing government service, the reputation signals are solid.
An about page and a legal entity disclosure are present, but no contact information is visible on the homepage. For a government-related service, the lack of a clear phone number or email address on the landing page is a noticeable gap.
Privacy policy and terms of service are published, along with a business disclosure page. That meets the baseline expectations for a site that asks users to log in and view property records.
The site is hosted on a standard residential ISP network, which is odd for a government portal. There's no email server set up, no DNSSEC, and few security headers. It works but isn't built with much attention to backend best practices.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.