← All Results
Domain History

franklintempleton.lt

Grade B · 70/100 · 3/6 security headers present

Security Score

B
70/ 100

Security Headers

3/ 6

CSP Violations

NoViolations

Issues Found

0Issues

Recommendations

0Available

CSP Analysis

Content Security PolicyHIGH
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.brightcove.com *.brightcove.net *.decibelinsight.com *.decibelinsight.net *.doubleclick.net *.franklintempleton.com *.ftsites.com *.kampyle.com *.marketo.com *.marketo.net *.mktoutil.com *.qualtrics.com *.twimg.com *.yimg.com *.ads.linkedin.com *.linkedin.oribi.io *.linkedin.com *.doubleclick.net *.googleads.g.doubleclick.net ads-twitter.com ads-api.twitter.com analytics.twitter.com www.googleadservices.com trc.taboola.com www.clarity.ms up.pixel.ad connect.facebook.net munchkin.marketo.net www.googletagmanager.com www.googleadservices.com www.google.com www.clarity.ms classify.gofurther.com assets.adoberesources.net up.pixel.ad lonrtp1-cdn.marketo.com static.ads-twitter.com snap.licdn.com p.adsymptotic.com sjs.bizographics.com amplify.outbrain.com apps.mypurecloud.com assets.adoberesources.net bat.bing.com browser-update.org cdn.cookielaw.org cdn.decibelinsight.net classify.gofurther.com connect.facebook.net munchkin.marketo.net pixel.mathtag.com documentcloud.adobe.com platform.twitter.com resources.digital-cloud-west.medallia.com schema.apolloplatform.com script.mfilterit.net siteimproveanalytics.com snap.licdn.com ssl.google-analytics.com static.ads-twitter.com static.cloudflareinsights.com tr.outbrain.com up.pixel.ad vjs.zencdn.net wss://*.decibelinsight.com wss://*.decibelinsight.net www.clarity.ms *.taboola.com www.google-analytics.com www.googletagmanager.com www.googleadservices.com www.google.com zn9nsigbnk054lp8n-frk.siteintercept.qualtrics.com js.adsrvr.org *.adsrvr.org ;  connect-src 'self' *.adobe.io *.akamaihd.net *.apolloplatform.com *.clarity.ms *.analytics.google.com *.apolloplatform.com *.boltdns.net *.brightcove.com *.brightcove.net *.brightcovecdn.com *.browser-intake-datadoghq.com *.decibelinsight.com *.decibelinsight.net *.doubleclick.net *.franklintempleton.com *.frk.com *.ftsites.com *.fti-cloud.com *.g.doubleclick.net *.google-analytics.com *.google.com *.googletagmanager.com *.kampyle.com *.launchdarkly.com *.marketo.com *.mktoresp.com *.mktoutil.com *.onetrust.com *.onetrust.io *.qualtrics.com *.cloudhub.io *.widen.net *.widencdn.net *.yimg.com px.ads.linkedin.com js.adsrvr.org insight.adsrvr.org servedby.flashtalking.com *.ads.linkedin.com *.linkedin.oribi.io *.linkedin.com *.doubleclick.net *.googleads.g.doubleclick.net ads-twitter.com ads-api.twitter.com analytics.twitter.com *.digital-cloud-west.medallia.com analytics-fe.digital-cloud-west.medallia.com www.google.com www.googletagmanager.com api.intentiq.com session-replay.browser-intake-datadoghq.com 848-iap-939.mktoresp.com bat.bing.net px.ads.linkedin.com snap.licdn.com p.adsymptotic.com sjs.bizographics.com 848-iap-939.mktoresp.com adservice.google.com bat.bing.com cdn.cookielaw.org cdn.linkedin.oribi.io classify.gofurther.com dc.services.visualstudio.com fti.wsodqa.com hummingbirdwebsocket-va7.cloud.adobe.io n85sog88a3.execute-api.us-east-1.amazonaws.com qhqt7tkknl.execute-api.us-east-1.amazonaws.com pdswebapi.fti-cloud.com pixel.mathtag.com px.ads.linkedin.com resources.digital-cloud-west.medallia.com s.yimg.com siteimproveanalytics.com wss://*.decibelinsight.com wss://*.decibelinsight.net *.taboola.com www.facebook.com www.fti.wallst.com wss://*.adobe.io www.google-analytics.com www.google.ae www.google.at www.google.be www.google.bg www.google.ca www.google.ch www.google.cn www.google.co.il www.google.co.in www.google.co.jp www.google.co.kr www.google.co.nz www.google.co.th www.google.co.uk www.google.co.za www.google.com.au www.google.com.bn www.google.com.br www.google.com.cy www.google.com.hk www.google.com.im www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ph www.google.com.pr www.google.com.sg www.google.com.sl www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.cz www.google.de www.google.dk www.google.ee www.google.es www.google.fi www.google.fr www.google.gr www.google.hu www.google.ie www.google.it www.google.jo www.google.li www.google.lt www.google.lu www.google.lv www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.ru www.google.si www.google.sk ;  img-src 'self' data: *.adsymptotic.com *.akamaihd.net *.analytics.google.com *.boltdns.net *.brightcove.com *.cookielaw.org *.doubleclick.net *.facebook.com *.fti-cloud.com *.franklintempleton.com *.g.doubleclick.net *.google-analytics.com *.google.co.in *.google.co.uk *.google.com *.google.pl *.googleapis.com *.googletagmanager.com *.googletagmanager.com *.googleads.g.doubleclick.net  *.gstatic.com *.kampyle.com *.linkedin.com *.qualtrics.com *.siteimproveanalytics.io *.stocksnap.io *.twimg.com *.widen.net *.widencdn.net www.dianomi.com sync.intentiq.com connect.facebook.net t.co www.facebook.com ad.doubleclick.net analytics.twitter.com px.ads.linkedin.com analytics.twitter.com bat.bing.com browser-update.org c.bing.com c.clarity.ms classify.gofurther.com d21y75miwcfqoq.cloudfront.net di.rlcdn.com fa.aidemsrv.com fml-x.com franklintempletonprod.widen.net pixel.mathtag.com pixel.sitescout.com platform.twitter.com px.ads.linkedin.com r.turn.com resources.digital-cloud-west.medallia.com rtp-static.marketo.com sp.analytics.yahoo.com syndication.twitter.com t.co tr.outbrain.com tk-static.fml-x.com www.google-analytics.com www.google.ae www.google.at www.google.be www.google.bg www.google.ca www.google.ch www.google.cn www.google.co.il www.google.co.in www.google.co.jp www.google.co.kr www.google.co.nz www.google.co.th www.google.co.uk www.google.co.za www.google.com.ar www.google.com.au www.google.com.bn www.google.com.br www.google.com.cy www.google.com.hk www.google.com.im www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ph www.google.com.pr www.google.com.sg www.google.com.sl www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.cz www.google.de www.google.dk www.google.ee www.google.es www.google.fi www.google.fr www.google.gr www.google.hu www.google.ie www.google.it www.google.jo www.google.li www.google.lt www.google.lu www.google.lv www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.ru www.google.si www.google.sk assets.adoberesources.net lh3.googleusercontent.com ;  font-src 'self' data: *.franklintempleton.com *.ftsites.com fonts.googleapis.com fonts.gstatic.com templeton.com *.franklintempleton.com *.franklintempleton.lu *.typekit.net ;  style-src 'self' 'unsafe-inline' *.franklintempleton.com *.ftsites.com *.googletagmanager.com *.kampyle.com *.marketo.com fonts.googleapis.com fonts.gstatic.com platform.twitter.com *.typekit.net ;  worker-src blob: *.decibel.net ;  frame-ancestors 'none' ;
Directive Analysis
script-srcHIGH
*.marketo.com *.mktoutil.com 'self' www.googleadservices.com tr.outbrain.com classify.gofurther.com vjs.zencdn.net *.taboola.com js.adsrvr.org amplify.outbrain.com cdn.decibelinsight.net *.kampyle.com platform.twitter.com assets.adoberesources.net www.googletagmanager.com pixel.mathtag.com *.linkedin.com ssl.google-analytics.com *.brightcove.com static.ads-twitter.com apps.mypurecloud.com wss://*.decibelinsight.net 'unsafe-eval' *.linkedin.oribi.io documentcloud.adobe.com www.clarity.ms *.ftsites.com ads-twitter.com *.doubleclick.net sjs.bizographics.com p.adsymptotic.com cdn.cookielaw.org up.pixel.ad snap.licdn.com *.decibelinsight.net trc.taboola.com *.yimg.com ads-api.twitter.com *.twimg.com *.qualtrics.com *.decibelinsight.com siteimproveanalytics.com *.marketo.net munchkin.marketo.net analytics.twitter.com *.franklintempleton.com www.google.com resources.digital-cloud-west.medallia.com browser-update.org wss://*.decibelinsight.com www.google-analytics.com static.cloudflareinsights.com 'unsafe-inline' *.ads.linkedin.com lonrtp1-cdn.marketo.com schema.apolloplatform.com script.mfilterit.net bat.bing.com *.googleads.g.doubleclick.net zn9nsigbnk054lp8n-frk.siteintercept.qualtrics.com connect.facebook.net *.brightcove.net *.adsrvr.org
•Unsafe eval() execution allowed in script-src
•Unsafe inline execution allowed in script-src
•Missing recommended values for script-src: sha256-, self, sha384-, nonce-, sha512-
•No nonces or hashes used for script-src
connect-srcLOW
www.google.li www.google.com.sl js.adsrvr.org classify.gofurther.com *.taboola.com www.google.com.tr www.google.pl *.launchdarkly.com *.browser-intake-datadoghq.com *.widen.net www.google.ee *.brightcove.com wss://*.decibelinsight.net www.google.it www.google.com.hk www.google.fr *.fti-cloud.com *.onetrust.io *.ftsites.com p.adsymptotic.com www.google.co.uk www.google.ch www.google.fi www.google.si www.google.ae www.google.lt pdswebapi.fti-cloud.com www.google.co.za www.google.com.bn qhqt7tkknl.execute-api.us-east-1.amazonaws.com analytics-fe.digital-cloud-west.medallia.com www.google.com.au www.google.hu www.google.com *.widencdn.net api.intentiq.com *.google-analytics.com session-replay.browser-intake-datadoghq.com www.google.co.th www.google.lv www.google.co.jp www.google.ie *.apolloplatform.com www.google.com.ph www.google.lu www.google.ru *.cloudhub.io *.kampyle.com www.google.com.cy s.yimg.com www.google.com.ua pixel.mathtag.com px.ads.linkedin.com www.google.nl www.google.co.nz www.google.com.pr *.doubleclick.net sjs.bizographics.com *.g.doubleclick.net www.google.com.my cdn.cookielaw.org www.google.ro *.googletagmanager.com *.yimg.com *.decibelinsight.com www.google.at hummingbirdwebsocket-va7.cloud.adobe.io n85sog88a3.execute-api.us-east-1.amazonaws.com www.google.es siteimproveanalytics.com *.clarity.ms *.frk.com www.google.com.mt www.google.be dc.services.visualstudio.com www.google-analytics.com wss://*.adobe.io www.google.pt *.mktoresp.com *.google.com *.brightcove.net *.onetrust.com *.boltdns.net *.brightcovecdn.com *.linkedin.com www.google.cn *.analytics.google.com www.google.com.br ads-twitter.com www.google.com.im snap.licdn.com bat.bing.net fti.wsodqa.com cdn.linkedin.oribi.io *.qualtrics.com www.facebook.com analytics.twitter.com *.franklintempleton.com insight.adsrvr.org resources.digital-cloud-west.medallia.com *.digital-cloud-west.medallia.com wss://*.decibelinsight.com *.ads.linkedin.com www.google.com.mx *.akamaihd.net *.googleads.g.doubleclick.net *.adobe.io www.google.cz adservice.google.com *.marketo.com *.mktoutil.com 'self' www.google.com.sg 848-iap-939.mktoresp.com www.google.jo www.google.sk www.googletagmanager.com www.google.no *.linkedin.oribi.io www.google.co.in www.google.de www.google.gr www.google.co.kr servedby.flashtalking.com www.google.com.tw *.decibelinsight.net www.google.ca ads-api.twitter.com www.google.bg www.google.co.il bat.bing.com www.google.dk www.google.com.uy www.fti.wallst.com
•Missing recommended values for connect-src: self
img-srcLOW
franklintempletonprod.widen.net www.google.li tr.outbrain.com www.google.com.sl classify.gofurther.com www.google.com.tr www.google.pl ad.doubleclick.net *.widen.net *.google.co.uk www.google.ee *.brightcove.com www.google.it www.google.com.hk d21y75miwcfqoq.cloudfront.net www.google.fr *.fti-cloud.com www.google.co.uk www.google.ch www.google.fi www.google.si www.google.ae www.google.lt www.google.co.za www.google.com.bn *.googleapis.com www.google.com.au www.google.hu *.widencdn.net *.google-analytics.com www.google.co.th www.google.lv connect.facebook.net www.google.co.jp www.google.ie *.siteimproveanalytics.io *.cookielaw.org www.google.com.ph www.google.ru *.kampyle.com *.adsymptotic.com c.bing.com www.google.com.cy www.google.com.ua pixel.mathtag.com assets.adoberesources.net px.ads.linkedin.com t.co sync.intentiq.com www.google.nl www.google.co.nz www.google.com.pr *.doubleclick.net *.g.doubleclick.net www.google.com.my www.google.com.ar www.google.ro *.googletagmanager.com www.google.at *.gstatic.com *.google.co.in www.google.es *.google.pl www.google.com.mt c.clarity.ms www.google.be www.google-analytics.com data: www.google.pt *.google.com fa.aidemsrv.com sp.analytics.yahoo.com *.boltdns.net *.linkedin.com www.google.cn *.analytics.google.com r.turn.com www.google.com.br www.google.com.im lh3.googleusercontent.com *.qualtrics.com www.facebook.com analytics.twitter.com *.facebook.com *.franklintempleton.com resources.digital-cloud-west.medallia.com www.google.com.mx *.akamaihd.net *.googleads.g.doubleclick.net www.google.cz 'self' www.google.com.sg *.stocksnap.io pixel.sitescout.com platform.twitter.com www.google.jo www.google.sk di.rlcdn.com www.google.no rtp-static.marketo.com www.google.co.in www.google.de www.google.gr www.google.co.kr www.google.com.tw www.dianomi.com tk-static.fml-x.com www.google.ca syndication.twitter.com fml-x.com www.google.bg *.twimg.com www.google.co.il browser-update.org bat.bing.com www.google.dk www.google.com.uy www.google.lu
•Missing recommended values for img-src: self
font-srcLOW
*.franklintempleton.lu templeton.com 'self' fonts.gstatic.com data: *.ftsites.com *.typekit.net fonts.googleapis.com *.franklintempleton.com
•Missing recommended values for font-src: self
style-srcHIGH
*.marketo.com *.googletagmanager.com 'self' fonts.gstatic.com 'unsafe-inline' *.ftsites.com *.kampyle.com *.typekit.net platform.twitter.com fonts.googleapis.com *.franklintempleton.com
•Unsafe inline execution allowed in style-src
•Missing recommended values for style-src: sha256-, self, sha384-, nonce-, sha512-
worker-srcLOW
blob: *.decibel.net
•Missing recommended values for worker-src: self, none
frame-ancestorsLOW
'none'
•Missing recommended values for frame-ancestors: self, none

Security Headers

✗Permissions-PolicyMissing

Restricts which browser features (camera, microphone, geolocation) the page can use, limiting attack surface.

How to add it:

nginx
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
apache
Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"
cloudflare
Rules > Transform Rules > HTTP Response Header Modification > Set Permissions-Policy value
✗Referrer-PolicyMissing

Controls how much referrer information is sent with requests, preventing data leaks to third parties.

How to add it:

nginx
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
apache
Header always set Referrer-Policy "strict-origin-when-cross-origin"
cloudflare
Rules > Transform Rules > HTTP Response Header Modification > Set Referrer-Policy to "strict-origin-when-cross-origin"
✓Strict-Transport-SecurityPresent

max-age=15768000

Forces browsers to use HTTPS for all future requests, preventing man-in-the-middle attacks and SSL stripping.

✓X-Content-Type-OptionsPresent

nosniff

Prevents browsers from MIME-sniffing responses away from the declared Content-Type, blocking drive-by downloads.

✗X-Frame-OptionsMissing

Prevents the page from being embedded in iframes, protecting against clickjacking attacks.

How to add it:

nginx
add_header X-Frame-Options "DENY" always;
apache
Header always set X-Frame-Options "DENY"
cloudflare
Rules > Transform Rules > HTTP Response Header Modification > Set X-Frame-Options to "DENY"
✓X-XSS-ProtectionPresent

1; mode=block

Legacy XSS filter for older browsers. Modern browsers use CSP instead. Set to "0" to avoid false positives.

3 recommended security headers are missing on franklintempleton.lt.

Beyond headers: infrastructure exposure

via OSN, our sister project

Security headers protect the browser. OSN maps what's exposed underneath — servers, open ports, known CVEs, DNS and WHOIS.

See what the internet sees about franklintempleton.ltWeak headers often come with other exposure — check the full picture.

franklintempleton.lt

2 scans since 7/16/2025

B

Latest: 70/100

Total Scans

2

Latest Score

70/100

First Scan

7/16/2025

Last Scan

7/16/2025

Scan History

DateScoreCSPHeadersIssuesAction
Jul 16, 2025
B (70)
No
3/60View →

Show off your security grade

Embed this badge on your site or README. It updates automatically after each scan and links back to this report.

HeaderTest security grade: B (70/100) for franklintempleton.lt
HTML
<a href="https://headertest.com/results/franklintempleton.lt" title="Security headers grade for franklintempleton.lt — HeaderTest">
  <img src="https://headertest.com/api/badge/franklintempleton.lt" alt="HeaderTest security grade: B (70/100) for franklintempleton.lt" />
</a>
Markdown
[![HeaderTest security grade: B (70/100) for franklintempleton.lt](https://headertest.com/api/badge/franklintempleton.lt)](https://headertest.com/results/franklintempleton.lt)