indexo.dev

mytommy.com

.com crawl

First seen 2026-04-27 · Last seen 2026-05-21 · ok HTTP/1.1 200 2710 ms crawled 2026-05-21

US · 162.159.137.54 · AS13335 Cloudflare, Inc.

Reputation 95/100 weak security headers

sector b2b services type app saas

HTML metadata

Title
Tommy - Free Staff Scheduling, Messaging & Time Clock
Description
Employee scheduling and time clock software. Get the best staff app for your team with schedules, messaging, time cards and more.
Language
en-US
Generator
Site Kit by Google 1.179.0
Canonical
https://mytommy.com/
Translations
  • en ×2

Open Graph

url
https://mytommy.com/
title
Tommy - Free Staff Scheduling, Messaging & Time Clock Software
locale
en_US
site name
MyTommy.com
description
Employee scheduling and time clock software. Get the best staff app for your team with schedules, messaging, time cards and more.

Technology

CDN
Cloudflare
CMS
WordPress 1.179.0 outdated (current 6.8)
jQuery
3.7.1
Stack
PHP
Analytics
  • Google Tag Manager

Third-party hosts loaded (2)

  • www.googletagmanager.com×3
  • gmpg.org×1

Social

Contact

Phone

Registration

Registrar
GoDaddy.com, LLC
Created
2012-08-10
Expires
2027-08-10 445 days left
Updated
2023-07-14
Name servers
  • ns-1132.awsdns-13.org
  • ns-1755.awsdns-27.co.uk
  • ns-405.awsdns-50.com
  • ns-805.awsdns-36.net

DNS records live

NS
  • ns-1132.awsdns-13.org
  • ns-1755.awsdns-27.co.uk
  • ns-405.awsdns-50.com
  • ns-805.awsdns-36.net
MX
  • 0 smtp.secureserver.net
  • 10 mailstore1.secureserver.net
Verified for
  • Google
  • Meta

Email authentication strong

SPF
not published
DMARC
v=DMARC1; p=quarantine; sp=none; rua=mailto:08754c901f5a.a@dmarcinput.com; ruf=mailto:08754c901f5a.f@dmarcinput.com; adkim=r; aspf=r; fo=0; pct=5
policy: quarantine · pct=5 · sp=none
DKIM
no key found at common selectors

Certificate (current)

WE1
from 2026-04-24 to 2026-07-23
Expires in 62 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://mytommy.com/

present
  • permissions-policy
findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
Header values
permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")

Links to (5)

Linked from (1)