indexo.dev

trufinance.app

.app crawl

First seen 2026-05-02 · Last seen 2026-05-02 · ok HTTP/1.1 200 2175 ms crawled 2026-05-09

EG · 101.46.71.53 · AS136907 HUAWEI CLOUDS

Reputation 95/100 weak security headers

sector finance type app saas

HTML metadata

Title
TRU - Manage finances on your terms
Description
TRU app is your way customize your payment plans and control your installments on your terms and conditions
Language
en
Canonical
https://trufinance.app

Open Graph

title
TRU - Manage finances on your terms
locale
en
site name
TRU
description
TRU app is your way customize your payment plans and control your installments on your terms and conditions

Technology

Server
elb
CMS
Nuxt
Fonts
  • Google Fonts

Third-party hosts loaded (6)

  • fonts.googleapis.com×1
  • intercom.help×1
  • s3.amazonaws.com×1
  • unpkg.com×1
  • www.facebook.com×1
  • www.google.com×1

DNS records live

NS
  • chip.ns.cloudflare.com
  • kelly.ns.cloudflare.com
MX
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
TXT
Show 4 TXT records
  • facebook-domain-verification=16230yqfr94hjh9juk70zqz75gre5n
  • google-site-verification=95z9h-UdFUAa7KoAtrbA3AZXytlVbuq4MmP-eJhyfVM
  • google-site-verification=T2y7ZlIgXx0B-Qtw0vC07nUWo7vNYjxLTuQRZkYNpeQ
  • google-site-verification=aJoyazVZXy20CqlLG0ohCqXh8PV54I8mIqkfC6LPaSY

Email authentication strong

SPF
v=spf1 include:dc-aa8e722993._spfm.trufinance.app ~all
softfail (~all)
DMARC
v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@trufinance.app
policy: quarantine
DKIM
  • google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhQ1tdhVfNsd58ZJZke7DwG3JhTuOESqVq6Q9AHSDhq/jNXm0kv4ZCjkxVeYhcBW9rTCtyQ5rlQlzq…
  • s1: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDivTwMAoaHRHYOqseFzCfdFPY7hpXUMvnkYw6xegCXEfG0AqIzS2BSV6Qe/oqSTG0iPrNgFN3P/iwsBTXgTUYv3r…
  • s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZe3iKIz+oELkybT6hdPnJBZewO9Zm2tRfmCGAM64RNYa84ZY1CYo29CFcSSdLPgWIOOreKyvt20kkkXD79kOYen…
selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36
from 2025-11-05 to 2026-12-07
Expires in 201 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://trufinance.app/

findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy

Linked from (1)