Allowed
Domain intelligence
Security Report for
A closer look at this domain’s security, infrastructure, and public records. Findings first, with the evidence behind every result.
Explore the reportWebsite Security
HTTPS, browser protections, DNS controls and known threats
Grade F #44 of 74
Important protections are missing
Several public security settings need attention. Start with the highest-value fixes below.
F57/100
Secure connection
Weak30/40
Browser protections
Weak5/30
Domain protection
Weak7/15
Known threats
Strong15/15
Fix these first
- 1
Content security policy
0/10To earn 10/10, send an enforced Content-Security-Policy header with script-src or default-src limited to 'self' and exact required hosts. Start in report-only mode, fix violations, then enforce the policy; report-only alone earns partial points.
- 2
DNSSEC
0/8To earn 8/8, enable DNSSEC at the DNS provider and publish its DS record through the registrar; then confirm the delegation validates without errors.
- 3
HTTP redirects to HTTPS
0/5To earn 5/5, return a 301 or 308 from every HTTP URL to the same path and query on HTTPS.
Strongest results
-
HTTPS response
15/15HTTPS returned status 404.
-
Valid TLS certificate
10/10The TLS certificate is valid for this domain.
-
Certificate authority restriction
7/7CAA records restrict certificate issuance.
All 15 security checks
Every result is shown, with what it means and how to fix it.
Working 15/15
HTTPS response
HTTPS returned status 404.
Working 10/10
Valid TLS certificate
The TLS certificate is valid for this domain.
Needs attention 0/5
HTTP redirects to HTTPS
HTTP does not redirect to HTTPS.
To earn 5/5, return a 301 or 308 from every HTTP URL to the same path and query on HTTPS.
Working 5/5
Modern TLS
TLSv1.3 was negotiated.
Needs attention 0/5
Strict transport security
Strict-Transport-Security is missing.
To earn 5/5, send Strict-Transport-Security: max-age=15552000 or a larger max-age on HTTPS responses; 31536000 is a common one-year value.
Needs attention 0/10
Content security policy
Content-Security-Policy is missing.
To earn 10/10, send an enforced Content-Security-Policy header with script-src or default-src limited to 'self' and exact required hosts. Start in report-only mode, fix violations, then enforce the policy; report-only alone earns partial points.
Needs attention 0/5
Frame protection
No enforced frame restriction was found.
To earn 5/5, add frame-ancestors 'none' (or 'self' if same-site framing is required) to the enforced Content-Security-Policy. X-Frame-Options: DENY or SAMEORIGIN is also accepted.
Needs attention 0/5
Content type protection
X-Content-Type-Options: nosniff is missing.
To earn 5/5, send X-Content-Type-Options: nosniff on the homepage response.
Working 5/5
Referrer policy
Referrer-Policy uses no-referrer.
Needs attention 0/5
Browser permissions policy
Permissions-Policy is missing.
To earn 5/5, disable all three tested capabilities: Permissions-Policy: camera=(), microphone=(), geolocation=(). Add separate directives for capabilities the site intentionally allows.
Needs attention 0/8
DNSSEC
DNSSEC validation data was not found.
To earn 8/8, enable DNSSEC at the DNS provider and publish its DS record through the registrar; then confirm the delegation validates without errors.
Working 7/7
Certificate authority restriction
CAA records restrict certificate issuance.
Working 6/6
Known malware reports
No active malware-distribution URL was reported.
Working 5/5
Threat-blocking DNS
3 threat-protection resolvers returned the domain.
Working 4/4
Domain blocklists
The domain did not match the checked domain blocklists.
This dated automated check does not verify the business, its content, or every page. The score describes the configuration observed during this scan.
Badges and embed code
Embed code
<a href="https://requestguard.com/domain/app-analytics-services.com/">
<img src="https://requestguard.com/domain/app-analytics-services.com/badges/security.svg" alt="Website security grade for app-analytics-services.com" width="160" height="44" loading="lazy" decoding="async" fetchpriority="low">
</a>Embed code
<a href="https://requestguard.com/domain/app-analytics-services.com/#infrastructure">
<img src="https://requestguard.com/domain/app-analytics-services.com/badges/location.svg" alt="Network location for app-analytics-services.com" width="160" height="44" loading="lazy" decoding="async" fetchpriority="low">
</a>Embed code
<a href="https://requestguard.com/domain/app-analytics-services.com/">
<img src="https://requestguard.com/domain/app-analytics-services.com/badges/trust.svg" alt="Trust badge for app-analytics-services.com" width="160" height="44" loading="lazy" decoding="async" fetchpriority="low">
</a>Embed code
<a href="https://requestguard.com/domain/app-analytics-services.com/#whois">
<img src="https://requestguard.com/domain/app-analytics-services.com/badges/domain-rating.svg" alt="Domain Rating for app-analytics-services.com" width="160" height="44" loading="lazy" decoding="async" fetchpriority="low">
</a> Use these results through the API
API requests require a workspace key and a plan with Lookups access.
The hosted badge updates after a manual scan. A downloaded badge stays static and avoids contacting RequestGuard on page views.
Search visibility
Homepage signals that can affect crawling and indexing
Obstacles found
The crawler found technical obstacles that may prevent access or indexing. Start with the flagged checks below.
6 homepage checks · Unscored
Observed request
Obstacle
Automated crawler access
The homepage returned HTTP 404, which says that the page is missing.
Serve the intended homepage with HTTP 200, then request validation in Google Search Console.
Clear
Indexing directives
No Google noindex directive was found in the response headers or sampled HTML.
Clear
robots.txt homepage rule
robots.txt returned HTTP 404. Google treats this as no crawl restrictions because the response is not 429.
Review
Canonical URL
No HTML canonical link was found. This is not a block, but it leaves the preferred URL less explicit.
Add one absolute, self-referencing canonical URL to the homepage.
Obstacle
Search-readable HTML
The sampled homepage response used HTTP 404, so indexable page content was not available.
Return the public homepage content with HTTP 200.
Review
Sitemap discovery
No XML sitemap declaration or conventional /sitemap.xml response was found. A sitemap is optional, but it helps discovery for new sites.
Publish an XML sitemap and declare it in robots.txt or submit it in Google Search Console.
This is not a Google index lookup. RequestGuard tests public signals with an identified automated crawler. Only URL Inspection for a verified Google Search Console property can confirm Google's last crawl, selected canonical, and indexing decision.
Open Google's URL Inspection guideCached result
Public exposure
Sensitive files and public administrative interfaces
Not checked—run a website scan.
Checks 100 common paths and up to 50 technology-specific paths. Opening this report does not start exposure checks.
These are bounded, unauthenticated crawler observations, not a penetration test. A public login is not automatically a vulnerability. Secret values are discarded. Findings do not affect your security score.
Server Infrastructure
Resolved addresses, networks, and hosting providers
DNS Records
A, AAAA, MX, and resolving certificate hostnames, with other record types on demand
Email & DNS Security
MX, SPF, DMARC, DNSSEC, and CAA posture
WHOIS & Registrar
Registration details via RDAP
Registered 2.8 years ago
Registration history and published ownership records. Domain age and Domain Rating are context, not a security verdict.
Registrar
Markmonitor Inc.
IANA #292 www.markmonitor.com/about-us/
Registration dates
Domain age
2.8 years
Created
Dec 21, 2023
Updated
Sep 20, 2026
Expires
Dec 21, 2026
Registrant
Privacy protectedIdentity is hidden by a privacy service — standard practice under GDPR and similar laws, not on its own a sign of anything suspicious.
Name REDACTED REGISTRANT
Organization Google LLC
Email REDACTED FOR PRIVACY
Phone REDACTED FOR PRIVACY
Location 
REDACTED FOR PRIVACY, US
REDACTED FOR PRIVACY, US Some of the data in this object has been removed.
Domain status
Registry status codes — green means the owner locked out unauthorized changes
Update locked Transfer locked Delete locked
Checked
Reputation & DNS filtering
Resolver behavior, domain datasets, and server-IP evidence
1 policy block
Resolver finding
AdGuard Default blocks DNS resolution
Ads, tracking, or security policy; the exact category is not attributable.
- Policy
- Ads, tracking, or threat policy
- Checked
Resolver filtering records provider behavior. It does not by itself prove that a domain is malicious.
Resolver matrix
Five public filtering policies compared with neutral DNS
Threat protection
Malware and phishing policy
Ads & tracking
Mixed privacy and security policy
Ads, tracking, or security policy; the exact category is not attributable.
Family / content
Content and security policy
Allowed
Reputation datasets
URL and domain-list evidence, separate from resolver policy
URLhaus No match
Reported malware-distribution URLs
SURBL (via URLhaus) Unavailable
URLhaus metadata; this is not a direct SURBL query
Spamhaus DBL (via URLhaus) Unavailable
URLhaus metadata; this is not a direct Spamhaus DBL query
Server-IP DNSBL checks & threat feeds 74.125.29.101
DNSBL and network-feed matches do not determine the domain verdict. Shared hosting, reverse proxies, and CDNs can put unrelated domains on the same address.
Barracuda
b.barracudacentral.org
SpamCop
bl.spamcop.net
UCEPROTECT L1
dnsbl-1.uceprotect.net
DroneBL
dnsbl.dronebl.org
Unavailable
Unavailable
Unavailable
Unavailable
Unavailable
Unavailable
NextDNS and other custom profiles are not tested because their result depends on enabled lists, security settings, and parental controls. Check the provider log for the exact rule.
Cached result