HomeFeaturesGuidesBlogResultsAPISign Up
← All Results
Domain History

jameshardie.lv

Grade C · 60/100 · 2/6 security headers present

Security Score

C
60/ 100

Security Headers

2/ 6

CSP Violations

NoViolations

Issues Found

0Issues

Recommendations

0Available

CSP Analysis

Content Security PolicyHIGH
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: jameshardie.at *.jameshardie.at jameshardie.be *.jameshardie.be jameshardie.ch *.jameshardie.ch jameshardie.cz *.jameshardie.cz jameshardie.de *.jameshardie.de jameshardie.dk *.jameshardie.dk jameshardie.ee *.jameshardie.ee jameshardie.es *.jameshardie.es jameshardie.eu *.jameshardie.eu jameshardie.fi *.jameshardie.fi jameshardie.fr *.jameshardie.fr jameshardie.it *.jameshardie.it jameshardie.lv *.jameshardie.lv jameshardie.nl *.jameshardie.nl jameshardie.pl *.jameshardie.pl jameshardie.se *.jameshardie.se jameshardie.co.uk *.jameshardie.co.uk fermacell.at *.fermacell.at fermacell.be *.fermacell.be fermacell.ch *.fermacell.ch fermacell.com *.fermacell.com fermacell.cz *.fermacell.cz fermacell.de *.fermacell.de fermacell.dk *.fermacell.dk fermacell.es *.fermacell.es fermacell.fr *.fermacell.fr fermacell.hr *.fermacell.hr fermacell.it *.fermacell.it fermacell.nl *.fermacell.nl fermacell.pl *.fermacell.pl fermacell.se *.fermacell.se fermacell.si *.fermacell.si fermacell.sk *.fermacell.sk fermacell.co.uk *.fermacell.co.uk aestuver.ch *.aestuver.ch aestuver.com *.aestuver.com aestuver.de *.aestuver.de *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.googleapis.com *.googlevideo.com *.youtube.com *.gstatic.com *.hotjar.com *.cloudfront.net oxomi.com https://james-hardie.prescreenapp.io https://james-hardie.bynder.com https://fermacell.omq.de https://pph20-fermacell.twt-clients.de https://james-hardie.onlyfy.jobs https://cdn.cookielaw.org https://www.googletagmanager.com https://www.facebook.com https://connect.facebook.net https://px.ads.linkedin.com https://snap.licdn.com https://static.doubleclick.net https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://i.ytimg.com https://yt3.ggpht.com https://privacyportal.onetrust.com https://script.crazyegg.com https://pi.pardot.com https://cdnjs.cloudflare.com https://code.jquery.com https://raw.githubusercontent.com https://cdn.polyfill.io https://bam.eu01.nr-data.net https://js-agent.newrelic.com https://www.heinze.de https://fonts.onlyfy.net https://content.prescreen.io https://ct.pinterest.com https://s.pinimg.com https://browser-update.org https://gitcdn.github.io https://maxcdn.bootstrapcdn.com https://hello.myfonts.net https://use.fontawesome.com https://*.paypal.com https://*.paypalobjects.com https://api.referenz-verwaltung.ch *.google-analytics.com pagead2.googlesyndication.com https://service.force.com https://jameshardieeurope--jhfull.sandbox.my.salesforce.com https://jameshardieeurope--jhfull.sandbox.my.site.com https://c.la12s-core1.sfdc-cehfhs.salesforceliveagent.com https://d.la12s-core1.sfdc-cehfhs.salesforceliveagent.com https://static.lightning.force.com *.sitebrunch.com
Directive Analysis
default-srcHIGH
*.google.com.my *.google.kg https://script.crazyegg.com *.google.sc *.google.sk *.aestuver.com *.google.kz *.google.com.kw *.google.co.cr *.google.bg *.google.co.zm *.google.li *.google.bj *.google.is *.google.co.nz *.google.com.ni *.google.com.cu *.google.so *.google.lv jameshardie.eu *.google.co.th *.youtube.com *.hotjar.com *.google.com.br *.fermacell.it https://james-hardie.prescreenapp.io fermacell.dk *.google.sr fermacell.be *.google.ki *.aestuver.ch *.jameshardie.de jameshardie.ch *.google.com.pa *.google.ws https://code.jquery.com *.google.it fermacell.nl *.jameshardie.dk *.google.com.uy *.google.com.co *.google.ba *.aestuver.de *.google.gl *.google.bi 'self' *.google.rw 'unsafe-inline' *.jameshardie.be fermacell.co.uk *.jameshardie.ee *.google.com.pr *.google.ru aestuver.com *.google.co.za jameshardie.at *.google.dz *.google.ge *.fermacell.se https://jameshardieeurope--jhfull.sandbox.my.salesforce.com *.google.com.vc fermacell.cz *.google.com.qa *.google.com https://api.referenz-verwaltung.ch *.google.sh *.google.la https://content.prescreen.io *.google.sn fermacell.hr *.google.cm *.google.com.fj *.google.co.ma https://jameshardieeurope--jhfull.sandbox.my.site.com *.google.com.bo *.google.com.ag fermacell.at *.google.com.pg *.google.cz *.google.md *.google.ad *.google.com.mt *.google.co.id *.google.com.ua https://c.la12s-core1.sfdc-cehfhs.salesforceliveagent.com https://raw.githubusercontent.com *.google.ml fermacell.pl *.google.gr *.googlevideo.com *.google.ht *.fermacell.ch *.google.be *.jameshardie.se https://ct.pinterest.com https://*.paypalobjects.com *.fermacell.cz jameshardie.pl *.google.cg *.google.dm *.google.co.kr https://james-hardie.bynder.com *.google.lk *.google.mv *.google.vu *.google.com.et *.google.ne *.google.fi *.google.com.gh fermacell.de *.jameshardie.it *.google.ci aestuver.de *.google.co.ke https://s.pinimg.com *.google.mw *.google.co.il *.google.co.ls *.google.mn jameshardie.be *.google.dk *.fermacell.si *.google.com.sa *.google.com.bh blob: *.google.com.tw fermacell.it *.google.com.ec *.google.dj *.google.as oxomi.com *.google.com.na *.googleapis.com https://service.force.com *.google.nl *.google.gg *.google.cd *.google.cn *.google.com.hk *.google.co.ck *.google.com.py *.google.com.af *.gstatic.com 'unsafe-eval' https://snap.licdn.com *.google.com.pe *.google.cf *.google.cl https://use.fontawesome.com *.google.com.eg pagead2.googlesyndication.com *.google.ca jameshardie.de *.google.co.zw *.google.co.ug jameshardie.nl *.google.de https://static.lightning.force.com https://static.doubleclick.net *.google.com.mm *.google.co.uk *.fermacell.at *.google.com.ly https://*.paypal.com https://yt3.ggpht.com *.google.by jameshardie.co.uk *.jameshardie.pl fermacell.se *.fermacell.pl *.fermacell.com *.google.com.mx *.google.com.jm *.google.al *.google.tm jameshardie.se *.fermacell.es *.google.ee *.google.co.ve *.google.com.kh *.google.az *.google.com.np *.jameshardie.nl *.google.tl jameshardie.es jameshardie.it *.google.co.bw *.fermacell.dk *.google.cv *.google.com.cy *.google.gy *.google.rs *.google.com.do *.google.gm *.google.mg https://cdn.polyfill.io https://cdn.cookielaw.org *.google.com.sg jameshardie.fr https://www.facebook.com fermacell.sk *.google.com.sl *.google.com.sb *.google.es *.google.mk https://privacyportal.onetrust.com *.google.nr *.google.sm *.google.com.ng https://stats.g.doubleclick.net *.jameshardie.cz data: *.google.td *.google.fr *.google.im *.google.com.ph *.google.co.tz *.jameshardie.co.uk fermacell.ch *.google.com.bd https://bam.eu01.nr-data.net jameshardie.cz *.google.hn *.google.com.lb fermacell.fr *.google.tg https://connect.facebook.net *.google.cat https://www.googletagmanager.com *.google.lu https://pi.pardot.com *.google-analytics.com *.google.co.mz *.google.no *.google.com.tr *.google.hu *.sitebrunch.com *.fermacell.hr *.google.co.ao *.google.ps https://fermacell.omq.de jameshardie.lv *.fermacell.be https://d.la12s-core1.sfdc-cehfhs.salesforceliveagent.com https://px.ads.linkedin.com *.google.je https://hello.myfonts.net https://maxcdn.bootstrapcdn.com https://js-agent.newrelic.com jameshardie.ee *.jameshardie.es *.google.me fermacell.es *.google.bf *.fermacell.fr *.google.com.bn *.google.com.tj *.jameshardie.fr *.google.ie *.google.ro *.google.bt *.jameshardie.ch *.google.com.gt *.google.pl *.jameshardie.lv *.google.com.bz fermacell.com *.jameshardie.at *.google.at *.google.iq *.google.com.om *.google.nu https://i.ytimg.com *.google.pt *.google.st https://www.heinze.de *.google.tt https://googleads.g.doubleclick.net *.google.am https://browser-update.org *.google.si *.google.fm *.cloudfront.net *.google.com.sv *.google.ch *.google.to *.google.pn *.google.ga https://fonts.onlyfy.net *.google.co.jp https://gitcdn.github.io *.google.jo *.google.bs *.jameshardie.fi jameshardie.fi *.google.hr *.google.tn *.google.com.au *.google.lt *.google.co.uz https://cdnjs.cloudflare.com *.fermacell.de *.google.co.vi *.google.mu *.fermacell.sk *.google.ae jameshardie.dk *.google.com.gi fermacell.si *.google.com.vn *.google.se *.fermacell.nl https://pph20-fermacell.twt-clients.de *.fermacell.co.uk aestuver.ch *.google.com.ar *.google.com.pk *.google.co.in *.jameshardie.eu https://james-hardie.onlyfy.jobs
•Unsafe inline execution allowed in default-src
•Unsafe eval() execution allowed in default-src
•Missing recommended values for default-src: self

Security Headers

✗Permissions-PolicyMissing

Restricts which browser features (camera, microphone, geolocation) the page can use, limiting attack surface.

How to add it:

nginx
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
apache
Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"
cloudflare
Rules > Transform Rules > HTTP Response Header Modification > Set Permissions-Policy value
✗Referrer-PolicyMissing

Controls how much referrer information is sent with requests, preventing data leaks to third parties.

How to add it:

nginx
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
apache
Header always set Referrer-Policy "strict-origin-when-cross-origin"
cloudflare
Rules > Transform Rules > HTTP Response Header Modification > Set Referrer-Policy to "strict-origin-when-cross-origin"
✓Strict-Transport-SecurityPresent

max-age=31536000; includeSubDomains; preload

Forces browsers to use HTTPS for all future requests, preventing man-in-the-middle attacks and SSL stripping.

✗X-Content-Type-OptionsMissing

Prevents browsers from MIME-sniffing responses away from the declared Content-Type, blocking drive-by downloads.

How to add it:

nginx
add_header X-Content-Type-Options "nosniff" always;
apache
Header always set X-Content-Type-Options "nosniff"
cloudflare
Rules > Transform Rules > Managed Transforms > Enable "Add X-Content-Type-Options header"
✓X-Frame-OptionsPresent

SAMEORIGIN

Prevents the page from being embedded in iframes, protecting against clickjacking attacks.

✗X-XSS-ProtectionMissing

Legacy XSS filter for older browsers. Modern browsers use CSP instead. Set to "0" to avoid false positives.

How to add it:

nginx
add_header X-XSS-Protection "0" always;
apache
Header always set X-XSS-Protection "0"
cloudflare
Rules > Transform Rules > HTTP Response Header Modification > Set X-XSS-Protection to "0"

4 recommended security headers are missing on jameshardie.lv.

Beyond headers: infrastructure exposure

via OSN, our sister project

Security headers protect the browser. OSN maps what's exposed underneath — servers, open ports, known CVEs, DNS and WHOIS.

See what the internet sees about jameshardie.lvWeak headers often come with other exposure — check the full picture.
See full exposure report on OSN →Free, no signup.

jameshardie.lv

2 scans since 7/17/2025

C

Latest: 60/100

Total Scans

2

Latest Score

60/100

First Scan

7/17/2025

Last Scan

7/17/2025

Scan History

DateScoreCSPHeadersIssuesAction
Jul 17, 2025
C (60)
No
2/60View →

Show off your security grade

Embed this badge on your site or README. It updates automatically after each scan and links back to this report.

HeaderTest security grade: C (60/100) for jameshardie.lv
HTML
<a href="https://headertest.com/results/jameshardie.lv" title="Security headers grade for jameshardie.lv — HeaderTest">
  <img src="https://headertest.com/api/badge/jameshardie.lv" alt="HeaderTest security grade: C (60/100) for jameshardie.lv" />
</a>
Markdown
[![HeaderTest security grade: C (60/100) for jameshardie.lv](https://headertest.com/api/badge/jameshardie.lv)](https://headertest.com/results/jameshardie.lv)