dodopizza.ee
Grade A+ · 90/100 · 5/6 security headers present
Security Score
Security Headers
CSP Violations
Issues Found
Recommendations
CSP Analysis
default-src 'self' 'unsafe-inline' blob: data: https://pay.dodois.com https://pay.dodois.io https://google.com/pay https://pay.google.com/about https://pay.google.com https://pay.dodois.ru https://*.nspk.ru https://*.cloudtips.ru https://cdn.dodostatic.net https://cdn.dodostatic.com https://media.dodostatic.net https://media.dodostatic.com https://eventstream.dodopizza.com https://globalapi.dodopizza.com https://publicapi.dodois.io https://*.ivideon.com https://*.extcam.com https://cdn.jsdelivr.net/npm/[email protected]/dist/hls.min.js https://*.mindbox.ru https://api.mindbox.cloud https://api.maestra.io https://www.google.com https://www.google.ru https://www.google.de https://www.google.ee https://www.google.lt https://www.google.com.ng https://www.google.pl https://www.google.ro https://www.google.si https://www.google.ae https://www.google.am https://www.google.rs https://www.google.com.tr https://www.google.com.cy https://www.google.hr https://www.google.bg https://www.google.az https://www.google.ge https://www.google.co.id https://www.google.com.vn https://www.google.by https://www.google.kg https://www.google.kz https://www.google.co.uz https://www.google.tj https://googleusercontent.com https://gstatic.com https://google-analytics.com https://googlevideo.com https://googleapis.com https://doubleclick.net https://*.tile.openstreetmap.org https://maps.googleapis.com https://maps.gstatic.com https://www.googletagmanager.com https://tagmanager.google.com https://optimize.google.com https://firebaseinstallations.googleapis.com https://firebaseremoteconfig.googleapis.com https://firebase.googleapis.com https://analytics.google.com https://*.analytics.google.com https://*.google-analytics.com https://www.googleadservices.com https://fonts.googleapis.com https://fonts.gstatic.com https://ssl.gstatic.com https://www.gstatic.com https://fcmregistrations.googleapis.com https://*.doubleclick.net https://pagead2.googlesyndication.com https://yandex.ru https://an.yandex.ru https://mc.yandex.ru https://mc.yandex.com https://mc.yandex.com.tr https://metrika.yandex.ru https://yastatic.net https://captcha-api.yandex.ru https://enterprise.api-maps.yandex.ru https://core-renderer-tiles.maps.yandex.net https://connect.facebook.net https://www.facebook.com https://analytics.tiktok.com https://dodopizza428687.typeform.com https://embed.typeform.com https://control.dodois.io https://new.oprosso.net https://*.inappstory.com https://*.inappstory.ru https://x01.aidata.io https://ssp.bestssp.com https://pixel.onaudience.com https://ssp.adriver.ru https://us.ck-ie.com https://inv-nets.admixer.net https://cdn.admixer.net https://ads.betweendigital.com https://ib.adnxs.com https://dmg.digitaltarget.ru https://*.weborama.fr https://top-fwz1.mail.ru https://privacy-cs.mail.ru https://ad.mail.ru https://vk.com https://login.vk.com https://static.ads-twitter.com https://analytics.twitter.com https://t.co https://sc-static.net https://tr.snapchat.com https://event.2performant.com https://config.confirmic.com https://apipub.confirmic.com https://consent-manager.confirmic.com https://api.rollbar.com https://cdn.jsdelivr.net/gh/orestbida/ https://ad.new-programmatic.com/ https://*.hybrid.ai https://dsp.upravel.com https://tag.rutarget.ru https://cdn.rutarget.ru https://www.artfut.com https://ct-mod-front01.calltouch.net https://static.terratraf.io https://mod.calltouch.ru https://static.bumlam.com https://static.user-red.com https://sync.bumlam.com https://soloway.ru https://tags.soloway.ru https://ad.adriver.ru https://bs.serving-sys.ru https://z.asbmit.com https://ad.admitad.com https://pafutos.com https://lenkmio.com https://artfut.com https://accesstrade.vn https://*.accesstrade.vn https://qtuzld.com https://x.cnt.my https://script.google.com/macros/s/AKfycbwNLMcFQWjG7iMA5WwfAfcPSTqzHS63jiM1pHbhENNC6QBY8NeltTu5zo1JNU5NZml0YQ/exec https://script.googleusercontent.com/macros/echo https://dodopizza.edna.ru wss://dodopizza.edna.ru https://lewisje.github.io/fonts/emojiSymb.woff2 https://lewisje.github.io/fonts/emojiSymb.woff;frame-ancestors 'self' webvisor.com *.webvisor.com metrika.yandex.ru metrika.yandex.by metrica.yandex.com metrica.yandex.com.tr;upgrade-insecure-requests ;connect-src https://dodopizza.ru/favicon.ico 'self' 'unsafe-inline' blob: data: https://pay.dodois.com https://pay.dodois.io https://google.com/pay https://pay.google.com/about https://pay.google.com https://pay.dodois.ru https://*.nspk.ru https://*.cloudtips.ru https://cdn.dodostatic.net https://cdn.dodostatic.com https://media.dodostatic.net https://media.dodostatic.com https://eventstream.dodopizza.com https://globalapi.dodopizza.com https://publicapi.dodois.io https://*.ivideon.com https://*.extcam.com https://cdn.jsdelivr.net/npm/[email protected]/dist/hls.min.js https://*.mindbox.ru https://api.mindbox.cloud https://api.maestra.io https://www.google.com https://www.google.ru https://www.google.de https://www.google.ee https://www.google.lt https://www.google.com.ng https://www.google.pl https://www.google.ro https://www.google.si https://www.google.ae https://www.google.am https://www.google.rs https://www.google.com.tr https://www.google.com.cy https://www.google.hr https://www.google.bg https://www.google.az https://www.google.ge https://www.google.co.id https://www.google.com.vn https://www.google.by https://www.google.kg https://www.google.kz https://www.google.co.uz https://www.google.tj https://googleusercontent.com https://gstatic.com https://google-analytics.com https://googlevideo.com https://googleapis.com https://doubleclick.net https://*.tile.openstreetmap.org https://maps.googleapis.com https://maps.gstatic.com https://www.googletagmanager.com https://tagmanager.google.com https://optimize.google.com https://firebaseinstallations.googleapis.com https://firebaseremoteconfig.googleapis.com https://firebase.googleapis.com https://analytics.google.com https://*.analytics.google.com https://*.google-analytics.com https://www.googleadservices.com https://fonts.googleapis.com https://fonts.gstatic.com https://ssl.gstatic.com https://www.gstatic.com https://fcmregistrations.googleapis.com https://*.doubleclick.net https://pagead2.googlesyndication.com https://yandex.ru https://an.yandex.ru https://mc.yandex.ru https://mc.yandex.com https://mc.yandex.com.tr https://metrika.yandex.ru https://yastatic.net https://captcha-api.yandex.ru https://enterprise.api-maps.yandex.ru https://core-renderer-tiles.maps.yandex.net https://connect.facebook.net https://www.facebook.com https://analytics.tiktok.com https://dodopizza428687.typeform.com https://embed.typeform.com https://control.dodois.io https://new.oprosso.net https://*.inappstory.com https://*.inappstory.ru https://x01.aidata.io https://ssp.bestssp.com https://pixel.onaudience.com https://ssp.adriver.ru https://us.ck-ie.com https://inv-nets.admixer.net https://cdn.admixer.net https://ads.betweendigital.com https://ib.adnxs.com https://dmg.digitaltarget.ru https://*.weborama.fr https://top-fwz1.mail.ru https://privacy-cs.mail.ru https://ad.mail.ru https://vk.com https://login.vk.com https://static.ads-twitter.com https://analytics.twitter.com https://t.co https://sc-static.net https://tr.snapchat.com https://event.2performant.com https://config.confirmic.com https://apipub.confirmic.com https://consent-manager.confirmic.com https://api.rollbar.com https://cdn.jsdelivr.net/gh/orestbida/ https://ad.new-programmatic.com/ https://*.hybrid.ai https://dsp.upravel.com https://tag.rutarget.ru https://cdn.rutarget.ru https://www.artfut.com https://ct-mod-front01.calltouch.net https://static.terratraf.io https://mod.calltouch.ru https://static.bumlam.com https://static.user-red.com https://sync.bumlam.com https://soloway.ru https://tags.soloway.ru https://ad.adriver.ru https://bs.serving-sys.ru https://z.asbmit.com https://ad.admitad.com https://pafutos.com https://lenkmio.com https://artfut.com https://accesstrade.vn https://*.accesstrade.vn https://qtuzld.com https://x.cnt.my https://script.google.com/macros/s/AKfycbwNLMcFQWjG7iMA5WwfAfcPSTqzHS63jiM1pHbhENNC6QBY8NeltTu5zo1JNU5NZml0YQ/exec https://script.googleusercontent.com/macros/echo https://dodopizza.edna.ru wss://dodopizza.edna.ru https://lewisje.github.io/fonts/emojiSymb.woff2 https://lewisje.github.io/fonts/emojiSymb.woff
Directive Analysis
Security Headers
Restricts which browser features (camera, microphone, geolocation) the page can use, limiting attack surface.
How to add it:
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"Rules > Transform Rules > HTTP Response Header Modification > Set Permissions-Policy valuestrict-origin-when-cross-origin
Controls how much referrer information is sent with requests, preventing data leaks to third parties.
max-age=31536000; includeSubDomains; preload
Forces browsers to use HTTPS for all future requests, preventing man-in-the-middle attacks and SSL stripping.
nosniff
Prevents browsers from MIME-sniffing responses away from the declared Content-Type, blocking drive-by downloads.
SAMEORIGIN
Prevents the page from being embedded in iframes, protecting against clickjacking attacks.
0
Legacy XSS filter for older browsers. Modern browsers use CSP instead. Set to "0" to avoid false positives.
1 recommended security header is missing on dodopizza.ee.
Beyond headers: infrastructure exposure
via OSN, our sister projectSecurity headers protect the browser. OSN maps what's exposed underneath — servers, open ports, known CVEs, DNS and WHOIS.
dodopizza.ee
3 scans since 7/18/2025
Latest: 90/100
Total Scans
3
Latest Score
90/100
First Scan
7/18/2025
Last Scan
7/18/2025
Score Trend
Security score progression over 2 scans
Show off your security grade
Embed this badge on your site or README. It updates automatically after each scan and links back to this report.
<a href="https://headertest.com/results/dodopizza.ee" title="Security headers grade for dodopizza.ee — HeaderTest">
<img src="https://headertest.com/api/badge/dodopizza.ee" alt="HeaderTest security grade: A+ (90/100) for dodopizza.ee" />
</a>[](https://headertest.com/results/dodopizza.ee)