Skip to main content
SGSiteGraph

truecar.com

Access to this page has been denied

Last scanned Jul 25, 2026, 10:25 AM · 2 views

80

Overall score

Great

Summary

px-captcha. This website uses WordPress hosted on AWS behind CloudFront CDN. SEO is fair (70/100) and accessibility is excellent (90/100). Security scores fair (65/100) and performance excellent (100/100). Top issue: Missing canonical link.

px-captcha

United States
Hosted on AWS

Top issues to fix

8 issues found · 3 high priority

  • Missing Strict-Transport-Security header

    Security

    Add HSTS so browsers always use HTTPS — this closes the protocol-downgrade attack window.

  • Missing Content-Security-Policy header

    Security

    Add a CSP to control which sources can run scripts — the strongest single defense against XSS.

  • No H1 heading found

    SEO

    Add exactly one H1 describing the page's main topic — it anchors the document outline for search engines and screen readers.

  • Missing X-Content-Type-Options header

    Security

    Add X-Content-Type-Options: nosniff to stop MIME-sniffing attacks.

  • Missing X-Frame-Options header

    Security

    Add X-Frame-Options (or a CSP frame-ancestors rule) to prevent clickjacking via hidden iframes.

  • Missing canonical link

    SEO

    Add <link rel="canonical"> so search engines know which URL variant to index.

+2 more issues — details in the sections below.

70

SEO

4 issue(s) found

100

Performance

446 ms

65

Security

HTTPS & header checks

90

Accessibility

1 issue(s) found

Not enough scan history yet to show a trend — check back after this site has been re-scanned a few more times.

Organization

Company details published in this site's own structured data.

px-captcha

Contact

Email, phone, and address published on this site's own pages.

Source: https://www.truecar.com/contact-us

Meta tags

Title
Access to this page has been denied
Description
px-captcha
Canonical
Language
en
Charset
utf-8
Viewport
width=device-width, initial-scale=1
Robots meta
Manifest

OpenGraph & Twitter Card

OpenGraph

og:title
—
og:description
—
og:type
—
og:url
—

Twitter Card

twitter:card
—
twitter:title
—
twitter:description
—

Technologies

Detected frameworks, languages, and tools.

WordPress

Hosting & CDN

Hosting provider
AWS
CDN provider
CloudFront
IP address
3.174.255.85
ASN
AS16509 (AMAZON-02 - Amazon.com, Inc., US)

DNS records

TypeValue
A
  • 3.174.255.85
  • 3.174.255.62
  • 3.174.255.104
  • 3.174.255.67
AAAA—
MX—
TXT—
NS—
CAA—
CNAME—
IPv6 supportNo

TLS / SSL certificate

Version
TLS 1.3
Issuer
Amazon
Subject
truecar.com
Valid from
Feb 18, 2026
Valid to
Mar 18, 2027
Days until expiry
236
SAN domains
truecar.com, *.truecar.com

Security headers

  • Strict-Transport-SecurityMissing
  • Content-Security-PolicyMissing
  • X-Frame-OptionsMissing
  • X-Content-Type-OptionsMissing
  • Referrer-PolicyMissing
  • Permissions-PolicyMissing

Compression: none · 0 cookie(s) observed

Content & assets

Headings

H1 0 · H2 0 · H3 0

Links

0 internal · 0 external · 0 broken

Images

0 total · 0 missing alt

Scripts / Styles

1 scripts · 0 stylesheets

JS / CSS size

5.4 KB · 0 B

Page size

5.7 KB

Robots.txt & Sitemap

robots.txt
Found
Disallow rules
29
sitemap.xml
Found
URLs in sitemap
-1

SEO issues

  • Missing canonical link
  • No H1 heading found
  • No structured data (JSON-LD) found
  • Missing OpenGraph tags

Accessibility issues

  • No H1 heading found

Scan details

Requested URL
https://truecar.com
Final URL
https://www.truecar.com/
HTTP status
403
HTTP version
HTTP/2
Response time
446 ms
HTML size
5.7 KB
Redirect chain
https://truecar.com → https://www.truecar.com/

See something wrong on this report? Request a correction

Related websites

Same technology stack

ebi.ac.uk

EMBL-EBI homepage | EMBL-EBI

100
wordpressapachegoogle-analytics
JANET - Jisc Services Limited, GB

goiq.com

GoIQ - Affordable CRM Made for Small Businesses

100
wordpressphpcloudflare-analytics
Cloudflare· Cloudflare

codesnippets.pro

Code Snippets for WordPress

100
wordpressphpmeta-pixel
Cloudflare· Cloudflare

websiteplanet.com

Website Planet | Free Guides to Create & Launch Your Website

100
wordpressgoogle-analytics
Cloudflare· Cloudflare

legitscript.com

LegitScript Monitoring & Certification Solutions

100
wordpressjquerybootstrap
Cloudflare· Cloudflare

neo4j.com

Neo4j Graph Intelligence Platform

100
wordpresscloudflare-analyticsjquery
Cloudflare· Cloudflare

Same hosting provider

chronoseconds.com

Chronoseconds | Buy & Sell Pre-Owned Luxury Watches

100
wordpressnextjsgoogle-analytics
AWS· Netlify

taronga.org.au

Taronga Conservation Society Australia | Taronga Zoo

100
AWS· Cloudflare

secureauth.com

SecureAuth | Continuous Identity Authority

100
google-analytics
AWS· Cloudflare

highereducation.com

Home - Higher Education

100
wordpressnextjs
AWS· Cloudflare

byside.com

Composable Digital Experience Platform | CoreMedia CMS

100
apachegoogle-analytics
AWS· CloudFront

surveyplanet.com

Free Online Survey Maker | Unlimited Surveys | Surveyplanet

100
google-analyticssvelte
AWS· CloudFront

Frequently asked questions

What technology does truecar.com use?
truecar.com is built with WordPress.
Is truecar.com secure (HTTPS)?
Yes. truecar.com uses TLS 1.3 with a certificate issued by Amazon, valid until Mar 18, 2027.
Who hosts truecar.com?
truecar.com is hosted on AWS, behind CloudFront CDN.
What is truecar.com's SEO score?
truecar.com scored 70/100 for SEO in the latest analysis (fair).
What is truecar.com's overall website score?
truecar.com has an overall SiteGraph score of 80/100, combining SEO, performance, security, and accessibility.