caasco.com

.com crawl

First seen 2026-05-01 · Last seen 2026-05-18 · ok HTTP/1.1 200 2912 ms crawled 2026-05-08

US · 147.154.3.128 · AS31898 Oracle Corporation

Reputation 100/100

Classifying

HTML metadata

Title: Home - CAA South Central Ontario
Description: Since 1903, we've worked on being a force of good in all the communities we serve. CAA provides a range of services including roadside assistance, insurance, discounts on travel, hotels, rental cars, retail services, and more.
Language: en
Canonical: https://www.caasco.com/

Open Graph

url: https://www.caasco.com/
title: CAA - Driven by Good™.

Technology

Server: ZENEDGE

Analytics

Google Tag Manager

Third-party hosts loaded (6)

www.google.com×2
code.jquery.com×1
maps.google.com×1
s7.addthis.com×1
static.curatu.ai×1
www.googletagmanager.com×1

Social

Registration

Registrar

Amazon Registrar, Inc.

Created

1996-02-15

Expires

2028-02-16 637 days left

Updated

2024-05-23

Name servers

ns-1140.awsdns-14.org
ns-2000.awsdns-58.co.uk
ns-252.awsdns-31.com
ns-653.awsdns-17.net

DNS records live

NS

ns-1140.awsdns-14.org
ns-2000.awsdns-58.co.uk
ns-252.awsdns-31.com
ns-653.awsdns-17.net

TXT

trend-micro-v1-domain-verification.f2fdf2b4494d2f5eebad504c9ff68ca8=3310a06a-4821-419b-a54d-aaf039ec8589
google-site-verification=Pl3C-V7RnWd_ElQnr0qpvarb42m5Gxan4FngDV1b6cI

Email authentication no MX

SPF: v=spf1 include:spf.caasco.ca include:spf.smtp2go.com include:spf.protection.outlook.com include:servers.mcsv.net ~all
softfail (~all)
DMARC: v=DMARC1; p=none; fo=1; rua=mailto:2ffdab4d@mxtoolbox.dmarc-report.com; ruf=mailto:2ffdab4d@forensics.dmarc-report.com;
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

COMODO RSA Organization Validation Secure Server CA

from 2025-05-26 to 2026-05-27

Expires in 7 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.caasco.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://eventbrite.ca.ca https://www.caascotravel.com https://api.tstllc.net https://copilotstudio.microsoft.com code.jquery.com googletagmanager.com bat.bing.com connect.facebook.net s.pinimg.com ct.pinterest.com youtube.com https://www.youtube.com *.g.doubleclick.net www.google-analytics.com *.google.com *.doubleclick.net play.google.com itunes.apple.com google.com google.ca script.hotjar.com spin.js.org static.soulmachines.com www3.moneris.com esqa.moneris.com cse.google.com *.formstack.com static.formstack.com caasco.formstack.com *.abtasty.com *.auth.test.caasco.com; font-src 'self' cdnjs.cloudflare.com fonts.gstatic.com script.hotjar.com maxcdn.bootstrapcdn.com *.kampyle.com *.medallia.ca https://caaccg.containers.piwik.pro *.abtasty.com *.auth.test.caasco.com; style-src 'self' 'unsafe-inline' *.soulmachines.com fonts.googleapis.com https://shop.aaacarbatteries.com fonts.gstatic.com maxcdn.bootstrapcdn.com cdnjs.cloudfare.com static.curatu.ai https://www.goog
strict-transport-security: max-age=31536000;