Other
Yes, staging.tier.app has an average score of 65, indicating some risks. The platform Dott focuses on improving mobility in cities by providing clean rides for everyone.
Verisite checked staging.tier.app on July 4, 2026 and gave it a trust score of 39/100. Out of 81 checks, 47 passed, with 11 warning(s) and 23 failed check(s).
staging.tier.app
Last checked 6 days ago
Part of tier.app
39
/100
Trust Score
Insufficient
8
Passed
1
Warning
4
Failed
Security Headers
Checks HTTP security headers and cookie security configuration.
Many security headers are missing. This website is vulnerable to common attacks.
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
Critical exposures found: sensitive files are publicly accessible.
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
No suspicious content detected on the page.
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
Valid SSL certificate found (expires 2026-08-11).
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
This domain has been registered since 2018-07-19.
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
Tracking is present but a consent mechanism was detected.
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
Business data is well represented on the website.
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
No reviews or trust seal found.
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
This domain was not found on any known fraud or phishing lists.
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
No outdated or vulnerable software detected.
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
Email authentication is poorly configured. The domain is vulnerable to email spoofing.
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
Network configuration is secure and well optimized.
DNS & Server
Checks DNS records, server information and hosting details.
No MX records found. The domain cannot receive email.
Security Headers
Checks HTTP security headers and cookie security configuration.
20/100
Many security headers are missing. This website is vulnerable to common attacks.
- Domain
- staging.tier.app
- Cookies
-
- Total: 0
- Issues:
- Secure cookies: 0
- Insecure cookies: 0
- HSTS max-age
- 63072000
- Missing headers
- Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy
- HSTS preload
- Yes
- Used browser fallback
- No
- Referrer-Policy
- No
- X-Frame-Options
- No
- HSTS includes subdomains
- Yes
- Permissions-Policy
- No
- X-Content-Type-Options
- No
- Content-Security-Policy
- No
- Strict-Transport-Security
- Yes
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
100/100
No outdated or vulnerable software detected.
- Detected CMS
-
- Name: WordPress
- Slug: wordpress
- Version:
- Detected: Yes
- Confidence: high
- Domain
- staging.tier.app
- Detected CMS
- WordPress
- JavaScript libraries
-
- Select2 — 4.0.13
- Pages scanned
- 1
- Vulnerable libraries
- Server technology
-
- Server: Apache
- Powered by:
- X generator:
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
20/100
Critical exposures found: sensitive files are publicly accessible.
- Domain
- staging.tier.app
- Exposures
-
- /.svn/entries — critical — SVN repository exposed
- /elmah.axd — high — .NET error log exposed
- /debug/default/view — high — Debug panel exposed
- /.DS_Store — medium — macOS directory structure exposed
- Robots.txt analysis
-
- Exists: No
- Interesting paths:
- Paths checked
- 18
- Exposures found
- 4
- Directory listing enabled
- No
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
0/100
Email authentication is poorly configured. The domain is vulnerable to email spoofing.
- SPF
-
- Exists: No
- Policy:
- Record:
- Mechanisms:
- Policy label:
- Authorized senders:
- DKIM
-
- Found: No
- Selectors:
- DMARC
-
- Exists: No
- Policy:
- Record:
- Percentage:
- Policy label:
- Has reporting: No
- Subdomain policy:
- Domain
- staging.tier.app
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
100/100
This domain has been registered since 2018-07-19.
- Domain
- tier.app
- Registrar
- united-domains AG
- Registered
- 2018-07-19
- Age (days)
- 2869
- Expires
- 2026-07-19
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
96/100
Tracking is present but a consent mechanism was detected.
- Domain
- staging.tier.app
- Detected trackers
- Google Tag Manager, Google Analytics (gtag)
- Pages scanned
- 1
- Total cookies
- 0
- Third-party trackers found
- 2
- Consent platform
- OneTrust
- Tracking cookies
- Consent mechanism detected
- Yes
- Tracking cookies found
- 0
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
100/100
Network configuration is secure and well optimized.
- Domain
- staging.tier.app
- Open ports
- HTTP version
- HTTP/2
- Mixed content domains
- Pages scanned
- 3
- Redirect chain
- http://staging.tier.app, https://ridedott.com/
- HTTP/2 support
- Yes
- HTTP/3 support
- No
- Open ports found
- 0
- Redirect loop detected
- No
- Mixed content resources
- 0
- Redirect chain length
- 2
- HTTP redirects to HTTPS
- Yes
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
80/100
No suspicious content detected on the page.
- Domain
- staging.tier.app
- Cryptominer scripts
- Pages scanned
- 2
- External form domains
- External script sources
- www.googletagmanager.com, cdn.cookielaw.org, ridedott.com, cdnjs.cloudflare.com, maps.googleapis.com, unpkg.com, kit.fontawesome.com, cdn.jsdelivr.net
- Obfuscation patterns
- 0
- Cryptominers detected
- 0
- Suspicious iframe details
-
- https://www.googletagmanager.com/ns.html?id=GTM-ML62P5M — Hidden iframe
- https://www.googletagmanager.com/ns.html?id=GTM-ML62P5M — Hidden iframe — /press-release
- External form targets
- 0
- Obfuscated code patterns
- External script domains
- 8
- Suspicious iframes
- 2
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
75/100
Business data is well represented on the website.
- Domain
- staging.tier.app
- Email address present
- No
- Phone number present
- No
- Terms and conditions present
- Yes
- Chamber of Commerce number found
- No
- Terms and conditions page
- /algemene-voorwaarden
- VAT number found
- No
- Physical address present
- Yes
- Pages scanned
- 45
- Return policy present
- Yes
- Return policy page
- /retourbeleid
- Privacy policy present
- Yes
- Privacy policy page
- /privacybeleid
- Contact details found
- 1
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
10/100
No reviews or trust seal found.
- Domain
- staging.tier.app
- Kiyoh trust seal found
- No
- Trust seal present
- No
- Trustpilot page
- https://www.trustpilot.com/review/staging.tier.app
- Trustpilot profile found
- No
- WebwinkelKeur trust seal found
- No
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
100/100
This domain was not found on any known fraud or phishing lists.
- Checked domain
- staging.tier.app
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
100/100
Valid SSL certificate found (expires 2026-08-11).
- Expiry date
- 2026-08-11
- Issuer
- Let's Encrypt
- Subject
- *.ridedott.com
- Valid until
- 2026-08-11
- Valid from
- 2026-05-13
- TLS version
- TLSv1.3
- Serial number
- 06F2991DC140B0F95FBE2E7FA10FB08F3B3B
DNS & Server
Checks DNS records, server information and hosting details.
65/100
No MX records found. The domain cannot receive email.
- IP Address
- 34.120.123.221
- SPF record
- No
- IPv6 support
- No
- DMARC record
- No
- DNSSEC
- Yes
- MX Records
- Nameservers
- Reverse DNS
- 221.123.120.34.bc.googleusercontent.com
- IP Addresses
- 34.120.123.221
- IPv6 Addresses
- Hosting provider
- Google Cloud
About this website
Dott is a platform aimed at enhancing urban mobility by offering clean rides for everyone. They are currently active in 40 cities across Europe and Israel, with plans for further expansion. Their goal is to create a more livable environment through sustainable transportation solutions.
Dott has several key facts that influence its trustworthiness. While they score well on technology (100) and SSL security (100), there are several areas where they fail, such as security headers and email authentication. This can lead to concrete risks for users.
What our scores mean for you
The low scores in security headers and email authentication indicate a risk that your data may not be adequately protected on this site. This could lead to unauthorized access to your personal information. Additionally, there are warnings regarding network and content security, which may indicate partial issues affecting trust.
What this means
Verisite is an independent platform that conducts automated trust checks on websites. For visitors, this means you should be cautious when sharing personal information on staging.tier.app, given the identified risks. For Dott, this indicates a need to improve their security measures to ensure customer trust.
Frequently asked questions
Does staging.tier.app have a valid SSL certificate?
Yes, staging.tier.app has a valid SSL certificate, ensuring a secure connection.
Has staging.tier.app ever been reported for fraud?
No external red flags have been found indicating fraud for staging.tier.app.
Why are security headers important?
Security headers help protect your data while browsing. Their absence can lead to vulnerabilities.
What does a score of 65 mean?
A score of 65 indicates some risks but also positive aspects like good technology.
What is the impact of missing email authentication?
Without email authentication, malicious actors may gain access to your account.
What are the warnings about network and content security?
These warnings indicate potential issues that could affect trust in the site.