Domain History
mybestbook.ee
Grade A+ · 90/100 · 5/6 security headers present
Security Score
A+
90/ 100
Security Headers
5/ 6
CSP Violations
NoViolations
Issues Found
0Issues
Recommendations
0Available
CSP Analysis
Content Security PolicyHIGH
img-src 'self' data: noderender.mybestbook.com www.googletagmanager.com s3-eu-central-1.amazonaws.com mbb-img.s3.eu-central-1.amazonaws.com newsletter.mybestbook.com indago.mybestbook.ee preview.product.mybestbook.com asset.product.mybestbook.com static.mybestbook.com static.mybestbook.com cdn.jsdelivr.net storage.googleapis.com ct.pinterest.com www.pinterest.com www.facebook.com connect.facebook.net cdn.klarna.com eu.klarnaevt.com www.ideal.nl googleads.g.doubleclick.net maps.gstatic.com www.google.de www.google.fr www.google.nl www.google.ch www.google.dk www.google.se www.google.no www.google.be www.google.it www.google.pt www.google.at www.google.sk www.google.es www.google.pl www.google.uk www.google.ie www.google.fi www.google.cz www.google.ro www.google.co.uk www.google.ca www.google-analytics.com www.google.com *.privacysandbox.googleadservices.com bat.bing.com c.bing.com c.clarity.ms tr.snapchat.com integrations-facebook.trustpilot.com checkoutshopper-test.adyen.com checkoutshopper-live.adyen.com checkoutshopper-live-us.adyen.com checkoutshopper-live-au.adyen.com checkoutshopper-test.cdn.adyen.com checkoutshopper-live.cdn.adyen.com checkoutshopper-live-us.cdn.adyen.com checkoutshopper-live-au.cdn.adyen.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com newsletter.mybestbook.com indago.mybestbook.ee cdn.mybestbook.com cdnjs.cloudflare.com cdn.jsdelivr.net storage.googleapis.com ct.pinterest.com www.pinterest.com s.pinimg.com connect.facebook.net cdn.klarna.com eu-library.klarnaservices.com js.klarna.com x.klarnacdn.net googleads.g.doubleclick.net www.google-analytics.com www.googleadservices.com www.google.com www.gstatic.com www.googleoptimize.com tpc.googlesyndication.com bat.bing.com www.clarity.ms a.clarity.ms d.clarity.ms e.clarity.ms f.clarity.ms g.clarity.ms h.clarity.ms i.clarity.ms j.clarity.ms k.clarity.ms m.clarity.ms tr.snapchat.com sc-static.net analytics.tiktok.com applepay.cdn-apple.com checkoutshopper-test.adyen.com checkoutshopper-live.adyen.com checkoutshopper-live-us.adyen.com checkoutshopper-live-au.adyen.com checkoutshopper-test.cdn.adyen.com checkoutshopper-live.cdn.adyen.com checkoutshopper-live-us.cdn.adyen.com checkoutshopper-live-au.cdn.adyen.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com www.aservice.cloud rum-static.pingdom.net polyfill.io code.highcharts.com s.retargeted.co; frame-src 'self' www.googletagmanager.com newsletter.mybestbook.com www.pinterest.com www.pinterest.se www.pinterest.de www.pinterest.dk www.pinterest.fr no.pinterest.com www.pinterest.it fi.pinterest.com www.pinterest.es pl.pinterest.com www.pinterest.pt nl.pinterest.com ro.pinterest.com cz.pinterest.com sk.pinterest.com ct.pinterest.com www.pinterest.co.uk www.pinterest.ie www.pinterest.at www.pinterest.ch www.facebook.com cdn.klarna.com js.klarna.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net tpc.googlesyndication.com tr.snapchat.com applepay.cdn-apple.com checkoutshopper-test.adyen.com checkoutshopper-live.adyen.com checkoutshopper-live-us.adyen.com checkoutshopper-live-au.adyen.com checkoutshopper-test.cdn.adyen.com checkoutshopper-live.cdn.adyen.com checkoutshopper-live-us.cdn.adyen.com checkoutshopper-live-au.cdn.adyen.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com; connect-src 'self' s3-eu-central-1.amazonaws.com mbb-img.s3.eu-central-1.amazonaws.com newsletter.mybestbook.com indago.mybestbook.ee preview.product.mybestbook.com asset.product.mybestbook.com content.product.mybestbook.com static.mybestbook.com fonts.gstatic.com cdn.jsdelivr.net ct.pinterest.com www.facebook.com cx.atdmt.com eu.klarnaevt.com evt-eu.klarnaservices.com x.klarnacdn.net rcgmal4n.klarnaservices.com pagead2.googlesyndication.com stats.g.doubleclick.net maps.gstatic.com www.google.de www.google.fr www.google.nl www.google.ch www.google.dk www.google.se www.google.no www.google.be www.google.it www.google.pt www.google.at www.google.sk www.google.es www.google.pl www.google.uk www.google.ie www.google.fi www.google.cz www.google.ro www.google.co.uk www.google.ca www.google-analytics.com google.com www.google.com analytics.google.com adservice.google.com bat.bing.net bat.bing.com www.clarity.ms a.clarity.ms b.clarity.ms d.clarity.ms e.clarity.ms f.clarity.ms g.clarity.ms h.clarity.ms i.clarity.ms j.clarity.ms k.clarity.ms m.clarity.ms tr.snapchat.com tr6.snapchat.com analytics.tiktok.com freegeoip.app checkoutshopper-test.adyen.com checkoutanalytics-test.adyen.com checkoutshopper-live.adyen.com checkoutshopper-live-us.adyen.com checkoutshopper-live-au.adyen.com checkoutanalytics-live.adyen.com checkoutshopper-test.cdn.adyen.com checkoutshopper-live.cdn.adyen.com checkoutshopper-live-us.cdn.adyen.com checkoutshopper-live-au.cdn.adyen.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com www.aservice.cloud rum-collector-2.pingdom.net ipapi.co; style-src 'self' 'unsafe-inline' newsletter.mybestbook.com static.mybestbook.com cdn.mybestbook.com use.typekit.net p.typekit.net cdnjs.cloudflare.com cdn.jsdelivr.net fonts.cdnfonts.com storage.googleapis.com x.klarnacdn.net checkoutshopper-test.adyen.com checkoutshopper-live.adyen.com checkoutshopper-live-us.adyen.com checkoutshopper-live-au.adyen.com checkoutshopper-test.cdn.adyen.com checkoutshopper-live.cdn.adyen.com checkoutshopper-live-us.cdn.adyen.com checkoutshopper-live-au.cdn.adyen.com; font-src 'self' asset.product.mybestbook.com static.mybestbook.com use.typekit.net cdnjs.cloudflare.com fonts.gstatic.com fonts.cdnfonts.com x.klarnacdn.net applepay.cdn-apple.com; media-src 'self' static.mybestbook.com static.mybestbook.com; report-uri https://24a3x5jc.uriports.com/reports/report; report-to default;
Directive Analysis
img-srcLOW
noderender.mybestbook.com newsletter.mybestbook.com checkoutshopper-live-au.cdn.adyen.com www.google.uk asset.product.mybestbook.com c.bing.com checkoutshopper-live.cdn.adyen.com data: www.facebook.com 'self' indago.mybestbook.ee checkoutshopper-live.adyen.com www.google.fi bat.bing.com www.google.nl www.google.fr mbb-img.s3.eu-central-1.amazonaws.com t.paypal.com www.google.pt www.google-analytics.com checkoutshopper-test.cdn.adyen.com googleads.g.doubleclick.net www.google.no www.google.se cdn.klarna.com tr.snapchat.com www.google.ie connect.facebook.net www.google.at c.clarity.ms ct.pinterest.com www.sandbox.paypal.com www.google.ro www.google.de www.google.pl www.ideal.nl www.google.dk *.privacysandbox.googleadservices.com www.paypalobjects.com eu.klarnaevt.com s3-eu-central-1.amazonaws.com www.google.co.uk checkoutshopper-live-us.cdn.adyen.com integrations-facebook.trustpilot.com preview.product.mybestbook.com checkoutshopper-test.adyen.com maps.gstatic.com www.google.es www.google.it www.google.sk www.google.cz checkoutshopper-live-us.adyen.com storage.googleapis.com www.google.be static.mybestbook.com www.pinterest.com www.googletagmanager.com www.google.com checkoutshopper-live-au.adyen.com www.google.ca www.google.ch cdn.jsdelivr.net
•Missing recommended values for img-src: self
worker-srcLOW
blob: 'self'
•Missing recommended values for worker-src: none, self
script-srcHIGH
newsletter.mybestbook.com m.clarity.ms sc-static.net g.clarity.ms checkoutshopper-live-au.cdn.adyen.com s.retargeted.co checkoutshopper-live.cdn.adyen.com k.clarity.ms checkoutshopper-live.adyen.com 'self' indago.mybestbook.ee e.clarity.ms bat.bing.com www.googleoptimize.com cdnjs.cloudflare.com www.paypal.com d.clarity.ms www.google-analytics.com checkoutshopper-test.cdn.adyen.com googleads.g.doubleclick.net applepay.cdn-apple.com 'unsafe-eval' eu-library.klarnaservices.com h.clarity.ms cdn.klarna.com analytics.tiktok.com x.klarnacdn.net tr.snapchat.com connect.facebook.net rum-static.pingdom.net j.clarity.ms ct.pinterest.com www.sandbox.paypal.com www.paypalobjects.com 'unsafe-inline' www.clarity.ms www.googleadservices.com checkoutshopper-live-us.cdn.adyen.com tpc.googlesyndication.com js.klarna.com www.gstatic.com f.clarity.ms checkoutshopper-test.adyen.com a.clarity.ms www.aservice.cloud i.clarity.ms checkoutshopper-live-us.adyen.com s.pinimg.com storage.googleapis.com polyfill.io code.highcharts.com www.pinterest.com www.googletagmanager.com www.google.com checkoutshopper-live-au.adyen.com cdn.jsdelivr.net cdn.mybestbook.com
•Unsafe eval() execution allowed in script-src
•Unsafe inline execution allowed in script-src
•Missing recommended values for script-src: sha512-, sha256-, sha384-, nonce-, self
•No nonces or hashes used for script-src
frame-srcLOW
newsletter.mybestbook.com www.pinterest.de checkoutshopper-live-au.cdn.adyen.com www.pinterest.fr bid.g.doubleclick.net checkoutshopper-live.cdn.adyen.com www.facebook.com 'self' checkoutshopper-live.adyen.com www.paypal.com cz.pinterest.com www.google.com www.pinterest.it checkoutshopper-test.cdn.adyen.com googleads.g.doubleclick.net nl.pinterest.com applepay.cdn-apple.com www.pinterest.co.uk cdn.klarna.com tr.snapchat.com ct.pinterest.com www.sandbox.paypal.com www.pinterest.ch no.pinterest.com www.paypalobjects.com www.pinterest.at checkoutshopper-live-us.cdn.adyen.com tpc.googlesyndication.com js.klarna.com fi.pinterest.com checkoutshopper-test.adyen.com www.pinterest.ie pl.pinterest.com checkoutshopper-live-us.adyen.com ro.pinterest.com www.pinterest.com www.pinterest.es sk.pinterest.com www.pinterest.se www.googletagmanager.com www.pinterest.pt checkoutshopper-live-au.adyen.com www.pinterest.dk
•Missing recommended values for frame-src: self
connect-srcLOW
rum-collector-2.pingdom.net tr6.snapchat.com checkoutshopper-live.adyen.com indago.mybestbook.ee www.google.nl analytics.google.com www.google.se h.clarity.ms evt-eu.klarnaservices.com x.klarnacdn.net www.google.ie www.sandbox.paypal.com www.google.pl eu.klarnaevt.com fonts.gstatic.com www.google.it checkoutshopper-live-us.adyen.com www.google.be www.google.ca m.clarity.ms checkoutshopper-live-au.cdn.adyen.com www.google.uk google.com k.clarity.ms 'self' bat.bing.com www.google-analytics.com checkoutshopper-test.cdn.adyen.com www.google.no j.clarity.ms content.product.mybestbook.com www.google.dk www.paypalobjects.com www.clarity.ms s3-eu-central-1.amazonaws.com checkoutshopper-live-us.cdn.adyen.com f.clarity.ms b.clarity.ms www.google.cz www.aservice.cloud ipapi.co static.mybestbook.com checkoutanalytics-test.adyen.com cdn.jsdelivr.net newsletter.mybestbook.com g.clarity.ms checkoutshopper-live.cdn.adyen.com stats.g.doubleclick.net e.clarity.ms www.google.fi www.google.fr d.clarity.ms www.google.pt cx.atdmt.com analytics.tiktok.com ct.pinterest.com adservice.google.com preview.product.mybestbook.com maps.gstatic.com www.google.es www.google.sk a.clarity.ms pagead2.googlesyndication.com checkoutanalytics-live.adyen.com checkoutshopper-live-au.adyen.com www.google.ch asset.product.mybestbook.com www.facebook.com rcgmal4n.klarnaservices.com mbb-img.s3.eu-central-1.amazonaws.com www.paypal.com tr.snapchat.com www.google.at www.google.ro www.google.de www.google.co.uk bat.bing.net checkoutshopper-test.adyen.com i.clarity.ms freegeoip.app www.google.com
•Missing recommended values for connect-src: self
style-srcHIGH
newsletter.mybestbook.com checkoutshopper-live-au.cdn.adyen.com checkoutshopper-live.cdn.adyen.com checkoutshopper-live.adyen.com 'self' cdnjs.cloudflare.com checkoutshopper-test.cdn.adyen.com x.klarnacdn.net fonts.cdnfonts.com 'unsafe-inline' checkoutshopper-live-us.cdn.adyen.com use.typekit.net checkoutshopper-test.adyen.com checkoutshopper-live-us.adyen.com storage.googleapis.com static.mybestbook.com checkoutshopper-live-au.adyen.com p.typekit.net cdn.jsdelivr.net cdn.mybestbook.com
•Unsafe inline execution allowed in style-src
•Missing recommended values for style-src: sha512-, sha256-, sha384-, nonce-, self
font-srcLOW
applepay.cdn-apple.com asset.product.mybestbook.com 'self' static.mybestbook.com x.klarnacdn.net fonts.cdnfonts.com fonts.gstatic.com cdnjs.cloudflare.com use.typekit.net
•Missing recommended values for font-src: self
media-srcLOW
'self' static.mybestbook.com
•Missing recommended values for media-src: self
report-uriLOW
https://24a3x5jc.uriports.com/reports/report
report-toLOW
default
Security Headers
✓Permissions-PolicyPresent
Permissions-Policy: autoplay=(self), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=*, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()
Restricts which browser features (camera, microphone, geolocation) the page can use, limiting attack surface.
✓Referrer-PolicyPresent
strict-origin
Controls how much referrer information is sent with requests, preventing data leaks to third parties.
✓Strict-Transport-SecurityPresent
max-age=31536000; includeSubDomains; preload
Forces browsers to use HTTPS for all future requests, preventing man-in-the-middle attacks and SSL stripping.
✓X-Content-Type-OptionsPresent
nosniff
Prevents browsers from MIME-sniffing responses away from the declared Content-Type, blocking drive-by downloads.
✓X-Frame-OptionsPresent
SAMEORIGIN
Prevents the page from being embedded in iframes, protecting against clickjacking attacks.
✗X-XSS-ProtectionMissing
Legacy XSS filter for older browsers. Modern browsers use CSP instead. Set to "0" to avoid false positives.
How to add it:
nginx
add_header X-XSS-Protection "0" always;apache
Header always set X-XSS-Protection "0"cloudflare
Rules > Transform Rules > HTTP Response Header Modification > Set X-XSS-Protection to "0"1 recommended security header is missing on mybestbook.ee.
Beyond headers: infrastructure exposure
via OSN, our sister projectSecurity headers protect the browser. OSN maps what's exposed underneath — servers, open ports, known CVEs, DNS and WHOIS.
See what the internet sees about mybestbook.eeWeak headers often come with other exposure — check the full picture.
See full exposure report on OSN →Free, no signup.
mybestbook.ee
3 scans since 7/19/2025
A+
Latest: 90/100
Total Scans
3
Latest Score
90/100
First Scan
7/19/2025
Last Scan
7/19/2025
Score Trend
Security score progression over 2 scans
Show off your security grade
Embed this badge on your site or README. It updates automatically after each scan and links back to this report.
HTML
<a href="https://headertest.com/results/mybestbook.ee" title="Security headers grade for mybestbook.ee — HeaderTest">
<img src="https://headertest.com/api/badge/mybestbook.ee" alt="HeaderTest security grade: A+ (90/100) for mybestbook.ee" />
</a>Markdown
[](https://headertest.com/results/mybestbook.ee)