indexo.dev

totodo.app

.app crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 2830 ms crawled 2026-05-19

NL · 23.97.162.202 · AS8075 Microsoft Corporation

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title
To To-Do — Keep Your Life in Sync | Tasks, Planner & AI
Description
To To-Do unifies family, work, and personal goals in one app. Offline mode, real-time collaboration, and AI assistance across web, iOS, and Android.
Canonical
https://totodo.app/

Open Graph

url
https://totodo.app
title
To To-Do — Keep Your Life in Sync | Tasks, Planner & AI
site name
To To-Do
description
All-in-one productivity app: tasks, lists, projects, shopping, reminders, AI assistance and real-time collaboration. Available on iOS, Android, and Web.

Technology

Server
Microsoft-IIS
CMS
Next.js
Analytics
  • Google Tag Manager

Third-party hosts loaded (3)

  • apps.apple.com×1
  • play.google.com×1
  • www.googletagmanager.com×1

DNS records live

NS
  • ns1.loopia.se
  • ns2.loopia.se
MX
  • 1 totodo-app.mail.protection.outlook.com
TXT
  • tiktok-developers-site-verification=8ZmrTy0Lun5d3MjUyxAuI8EZg5HRHIhJ
Verified for
  • Microsoft 365

Email authentication partial

SPF
v=spf1 include:spf.protection.outlook.com -all
strict (-all)
DMARC
v=DMARC1; p=none;
policy: none (monitoring only)
DKIM
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX4W0PqXQ7VvteYGHExAnNxsfKCE2Z7borRRrLjNtjOehkScmjImWVISvTq4kER3WLbMkOzAglLKZ8HyJf…
  • s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbQh/tWie8eG69UHFeklq8vNwCQSW2y5FeinktB4VSrIq2KjfcfSi6hHM41cX8ogVjuZIEMvB6WixRDIJe…
selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1
from 2026-02-22 to 2026-08-23
Expires in 94 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://totodo.app/

findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy

Linked from (1)