Domain History

aritech.lt

Grade B · 70/100 · 3/6 security headers present

Security Score

70/ 100

Security Headers

3/ 6

CSP Violations

NoViolations

Issues Found

0Issues

Recommendations

0Available

CSP Analysis

Content Security PolicyHIGH

default-src 'self' https://www.youtube.com https://*.google-analytics.com https://*.pardot.com;base-uri 'self';block-all-mixed-content;connect-src 'self' https://*.firesecurityproducts.com cdn.coolcalc.com devextcarrier.oktapreview.com staging.servicesgateway.carrier.com toddsit.com api.appzi.io images.carriercms.com https://siteintercept.qualtrics.com https://bam.nr-data.net https://stats.g.doubleclick.net https://*.linkedin.com https://*.usercentrics.eu https://*.googletagmanager.com https://*.analytics.google.com https://*.google-analytics.com https://region1.analytics.google.com https://maps.googleapis.com https://maps.gstatic.com https://*.g.doubleclick.net https://www.google https://*.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat;font-src 'self' w.appzi.io fonts.gstatic.com www.googletagmanager.com;form-action 'self';img-src 'self' data: https://*.firesecurityproducts.com https://siteintercept.qualtrics.com udc-neb.kampyle.com images.carriercms.com legacy.goheil.com heapanalytics.com www.shareddocs.com https://i.ytimg.com pim.images.carrier.com https://*.linkedin.com https://*.usercentrics.eu https://*.googletagmanager.com https://*.analytics.google.com https://*.google-analytics.com https://region1.analytics.google.com https://maps.googleapis.com https://maps.gstatic.com https://*.g.doubleclick.net https://www.google https://*.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat;manifest-src 'self';object-src 'none';script-src-attr 'self' 'unsafe-inline';script-src 'self' 'unsafe-inline' https://*.firesecurityproducts.com https://js-agent.newrelic.com https://*.googletagmanager.com https://*.google-analytics.com https://maps.googleapis.com https://consent.truste.com https://fonts.googleapis.com https://snap.licdn.com https://*.usercentrics.eu https://*.pardot.com wss;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;frame-src 'self' 'unsafe-inline' https://*.firesecurityproducts.com https://www.youtube.com https://*.pardot.com https://td.doubleclick.net

Directive Analysis

default-srcLOW

https://*.google-analytics.com https://www.youtube.com https://*.pardot.com 'self'

•Missing recommended values for default-src: self

base-uriLOW

'self'

•Missing recommended values for base-uri: self, none

block-all-mixed-contentLOW

connect-srcLOW

https://www.google.hu https://www.google.vu https://www.google.ch https://www.google.com.gi https://www.google.co.nz https://www.google.com.pa https://www.google.as https://www.google.cg https://*.usercentrics.eu https://www.google.ro https://www.google.com.sv toddsit.com https://www.google.com.af https://www.google.se https://www.google.mw https://www.google.rw https://www.google.lk https://www.google.co.ck https://www.google.sm https://siteintercept.qualtrics.com https://www.google.ga https://www.google.com.bd https://www.google.co.in https://www.google.cn https://www.google.hn https://www.google.ca https://www.google.com.hk https://www.google.me https://www.google.ne https://www.google.cd https://www.google.sk api.appzi.io https://www.google.cat https://www.google.ht https://www.google.co.ke https://www.google.lu images.carriercms.com https://www.google.com.pg https://www.google.ml https://www.google.ae https://www.google.com.ph https://www.google.ie https://region1.analytics.google.com https://www.google.ru https://www.google.sh https://www.google.gg https://www.google.iq https://bam.nr-data.net https://www.google.lv https://www.google.com.pe https://www.google.bj https://www.google.cl https://www.google.kz https://www.google.by https://www.google.co.ma https://*.firesecurityproducts.com https://www.google.com.cy https://www.google.fm https://*.google-analytics.com https://www.google.co.id https://www.google.mv https://www.google.la https://www.google.com.ng https://www.google.cv https://www.google.sc https://www.google.es https://www.google.co.jp https://www.google.com.cu https://www.google.jo https://www.google.tn https://www.google.fr https://www.google.com.ly https://www.google.com.pr https://stats.g.doubleclick.net https://www.google.so https://www.google.dz staging.servicesgateway.carrier.com https://www.google.cz https://www.google.com.gt https://www.google.sn https://www.google.com.et https://www.google.ge https://www.google.dk https://www.google.co.bw https://www.google.co.vi https://www.google.com.sb https://www.google.rs https://www.google.com.bh https://www.google.pn https://www.google.com.vc https://www.google.gr https://maps.gstatic.com https://*.linkedin.com https://www.google.at https://www.google.az https://www.google.ba https://www.google.bf https://www.google.bg https://www.google.co.zw https://www.google.com.na cdn.coolcalc.com https://www.google.com.ec https://www.google.com.np https://www.google.com.gh https://www.google https://www.google.am https://www.google.com.py https://www.google.kg https://*.g.doubleclick.net https://www.google.nl https://www.google.ps https://www.google.bt https://www.google.fi https://www.google.gm https://www.google.com.do https://www.google.co.zm https://www.google.nu https://*.googletagmanager.com https://www.google.com.bn https://www.google.co.il https://maps.googleapis.com https://www.google.com.sg https://www.google.com.uy https://www.google.com.bz https://www.google.com.fj https://www.google.bi https://www.google.com.au https://www.google.bs https://www.google.de https://www.google.je https://www.google.mg https://www.google.co.th https://www.google.ws https://www.google.com.ag https://www.google.com.om https://www.google.to https://www.google.no https://*.analytics.google.com https://www.google.com.bo https://www.google.co.za https://www.google.hr https://www.google.co.tz https://www.google.nr https://www.google.com.kw https://www.google.sr https://www.google.li https://www.google.ad https://www.google.com.mx https://www.google.tg https://www.google.ki https://www.google.com.my https://www.google.mk https://www.google.com.pk https://www.google.com.tj https://www.google.ci https://www.google.is https://www.google.com.sl https://www.google.com.co https://www.google.tl https://www.google.mn https://*.google.com https://www.google.com.br https://www.google.com.mt https://www.google.co.ve https://www.google.co.ug https://www.google.com.kh https://www.google.com.tw https://www.google.be https://www.google.lt https://www.google.tm https://www.google.com.tr https://www.google.al devextcarrier.oktapreview.com https://www.google.co.uk https://www.google.co.ls https://www.google.com.ar https://www.google.im https://www.google.pl 'self' https://www.google.md https://www.google.cf https://www.google.com.mm https://www.google.ee https://www.google.gy https://www.google.co.kr https://www.google.co.ao https://www.google.com.jm https://www.google.it https://www.google.com.ua https://www.google.com.lb https://www.google.st https://www.google.com.ni https://www.google.mu https://www.google.pt https://www.google.com.vn https://www.google.co.uz https://www.google.si https://www.google.com.sa https://www.google.com.eg https://www.google.tt https://www.google.gl https://www.google.td https://www.google.cm https://www.google.co.cr https://www.google.com.qa https://www.google.dj https://www.google.dm https://www.google.co.mz

•Missing recommended values for connect-src: self

font-srcLOW

w.appzi.io fonts.gstatic.com www.googletagmanager.com 'self'

•Missing recommended values for font-src: self

form-actionLOW

'self'

•Missing recommended values for form-action: self

img-srcLOW

https://www.google.hu https://www.google.vu https://www.google.ch https://www.google.com.gi https://www.google.co.nz heapanalytics.com https://www.google.as https://www.google.com.pa https://www.google.cg https://*.usercentrics.eu https://www.google.ro https://www.google.com.sv https://www.google.com.af https://www.google.se https://www.google.mw https://www.google.rw https://www.google.lk https://www.google.co.ck legacy.goheil.com https://www.google.sm https://siteintercept.qualtrics.com https://www.google.ga https://www.google.com.bd www.shareddocs.com https://www.google.co.in https://www.google.cn https://www.google.hn https://www.google.ca https://www.google.com.hk https://www.google.me https://www.google.ne https://www.google.cd https://www.google.sk https://www.google.cat https://www.google.ht https://www.google.co.ke https://www.google.lu images.carriercms.com https://www.google.com.pg https://www.google.ml https://www.google.ae https://www.google.com.ph https://www.google.ie https://region1.analytics.google.com https://www.google.ru https://www.google.sh https://www.google.gg https://www.google.iq https://www.google.lv https://www.google.com.pe https://www.google.bj https://www.google.cl https://www.google.kz https://www.google.by https://www.google.co.ma https://*.firesecurityproducts.com https://www.google.com.cy https://www.google.fm https://*.google-analytics.com https://www.google.co.id https://www.google.mv https://www.google.la https://www.google.com.ng https://www.google.cv https://www.google.sc https://www.google.es https://www.google.co.jp https://www.google.com.cu https://www.google.jo https://www.google.tn https://www.google.fr https://www.google.com.ly https://www.google.com.pr https://www.google.so https://www.google.dz https://www.google.cz https://www.google.com.gt https://www.google.sn https://www.google.com.et https://www.google.ge https://www.google.dk https://www.google.co.bw https://www.google.co.vi https://www.google.com.sb https://www.google.rs https://www.google.com.bh https://www.google.pn https://www.google.com.vc https://www.google.gr https://maps.gstatic.com https://*.linkedin.com https://www.google.at https://www.google.az https://www.google.ba https://www.google.bf https://www.google.bg https://www.google.co.zw https://www.google.com.na https://www.google.com.ec https://www.google.com.np https://www.google.com.gh https://www.google https://www.google.am https://www.google.com.py https://www.google.kg https://*.g.doubleclick.net https://www.google.nl https://www.google.ps https://www.google.bt https://www.google.fi https://www.google.gm https://www.google.com.do https://www.google.co.zm https://www.google.nu https://*.googletagmanager.com https://www.google.com.bn udc-neb.kampyle.com https://www.google.co.il https://maps.googleapis.com https://www.google.com.sg https://www.google.com.uy https://www.google.com.bz https://www.google.com.fj https://www.google.bi https://www.google.com.au https://www.google.bs https://www.google.de https://www.google.je https://www.google.mg https://www.google.co.th https://www.google.ws https://www.google.com.ag https://www.google.com.om https://www.google.to https://www.google.no https://*.analytics.google.com https://www.google.com.bo https://www.google.co.za https://www.google.hr https://www.google.co.tz https://www.google.nr https://www.google.com.kw https://www.google.sr https://www.google.li https://www.google.ad https://www.google.com.mx https://www.google.tg https://www.google.ki https://www.google.com.my https://www.google.mk https://www.google.com.pk https://www.google.com.tj https://www.google.ci https://www.google.is https://www.google.com.sl https://www.google.com.co https://www.google.tl https://www.google.mn https://*.google.com https://www.google.com.br https://www.google.com.mt https://www.google.co.ve https://www.google.co.ug https://www.google.com.kh https://www.google.com.tw https://www.google.be https://www.google.lt https://www.google.tm https://www.google.com.tr pim.images.carrier.com https://www.google.al https://www.google.co.uk https://www.google.co.ls https://www.google.com.ar https://www.google.im https://www.google.pl 'self' https://www.google.md https://www.google.cf https://www.google.com.mm https://www.google.ee https://www.google.gy https://www.google.co.kr https://www.google.co.ao https://www.google.com.jm https://www.google.it data: https://www.google.com.ua https://www.google.com.lb https://www.google.st https://www.google.com.ni https://www.google.mu https://www.google.pt https://www.google.com.vn https://www.google.co.uz https://www.google.si https://www.google.com.sa https://www.google.com.eg https://www.google.tt https://www.google.gl https://www.google.td https://i.ytimg.com https://www.google.cm https://www.google.co.cr https://www.google.com.qa https://www.google.dj https://www.google.dm https://www.google.co.mz

•Missing recommended values for img-src: self

manifest-srcLOW

'self'

•Missing recommended values for manifest-src: self

object-srcLOW

'none'

•Missing recommended values for object-src: none

script-src-attrHIGH

'unsafe-inline' 'self'

•Unknown directive: script-src-attr

•Unsafe inline execution allowed in script-src-attr

script-srcHIGH

https://*.firesecurityproducts.com https://maps.googleapis.com https://snap.licdn.com https://*.google-analytics.com https://*.pardot.com https://consent.truste.com https://*.usercentrics.eu 'unsafe-inline' 'self' https://fonts.googleapis.com wss https://js-agent.newrelic.com https://*.googletagmanager.com

•Unsafe inline execution allowed in script-src

•Missing recommended values for script-src: nonce-, self, sha384-, sha512-, sha256-

•No nonces or hashes used for script-src

style-srcHIGH

https://fonts.googleapis.com 'unsafe-inline' 'self'

•Unsafe inline execution allowed in style-src

•Missing recommended values for style-src: nonce-, self, sha384-, sha512-, sha256-

frame-srcHIGH

https://*.firesecurityproducts.com https://td.doubleclick.net https://*.pardot.com 'unsafe-inline' 'self' https://www.youtube.com

•Unsafe inline execution allowed in frame-src

•Missing recommended values for frame-src: self

Security Headers

✗Permissions-PolicyMissing

Restricts which browser features (camera, microphone, geolocation) the page can use, limiting attack surface.

How to add it:

nginx

add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;

apache

Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"

cloudflare

Rules > Transform Rules > HTTP Response Header Modification > Set Permissions-Policy value

✗Referrer-PolicyMissing

Controls how much referrer information is sent with requests, preventing data leaks to third parties.

How to add it:

nginx

add_header Referrer-Policy "strict-origin-when-cross-origin" always;

apache

Header always set Referrer-Policy "strict-origin-when-cross-origin"

cloudflare

Rules > Transform Rules > HTTP Response Header Modification > Set Referrer-Policy to "strict-origin-when-cross-origin"

✓Strict-Transport-SecurityPresent

max-age=31536000; includeSubDomains

Forces browsers to use HTTPS for all future requests, preventing man-in-the-middle attacks and SSL stripping.

✓X-Content-Type-OptionsPresent

nosniff

Prevents browsers from MIME-sniffing responses away from the declared Content-Type, blocking drive-by downloads.

✓X-Frame-OptionsPresent

DENY

Prevents the page from being embedded in iframes, protecting against clickjacking attacks.

✗X-XSS-ProtectionMissing

Legacy XSS filter for older browsers. Modern browsers use CSP instead. Set to "0" to avoid false positives.

How to add it:

nginx

add_header X-XSS-Protection "0" always;

apache

Header always set X-XSS-Protection "0"

cloudflare

Rules > Transform Rules > HTTP Response Header Modification > Set X-XSS-Protection to "0"

3 recommended security headers are missing on aritech.lt.

Beyond headers: infrastructure exposure

via OSN, our sister project

Security headers protect the browser. OSN maps what's exposed underneath — servers, open ports, known CVEs, DNS and WHOIS.

See what the internet sees about aritech.ltWeak headers often come with other exposure — check the full picture.

See full exposure report on OSN →Free, no signup.

aritech.lt

2 scans since 7/15/2025

Latest: 70/100

Total Scans

Latest Score

70/100

First Scan

7/15/2025

Last Scan

7/15/2025

Scan History

Date	Score	CSP	Headers	Issues	Action
Jul 15, 2025	B (70)	No	3/6	0	View →

Show off your security grade

Embed this badge on your site or README. It updates automatically after each scan and links back to this report.

HeaderTest security grade: B (70/100) for aritech.lt

HTML

<a href="https://headertest.com/results/aritech.lt" title="Security headers grade for aritech.lt — HeaderTest">
  <img src="https://headertest.com/api/badge/aritech.lt" alt="HeaderTest security grade: B (70/100) for aritech.lt" />
</a>

Markdown

[![HeaderTest security grade: B (70/100) for aritech.lt](https://headertest.com/api/badge/aritech.lt)](https://headertest.com/results/aritech.lt)