Domain History
mybestbook.lt
Grade A+ · 90/100 · 5/6 security headers present
Security Score
A+
90/ 100
Security Headers
5/ 6
CSP Violations
NoViolations
Issues Found
0Issues
Recommendations
0Available
CSP Analysis
Content Security PolicyHIGH
img-src 'self' data: noderender.mybestbook.com www.googletagmanager.com s3-eu-central-1.amazonaws.com mbb-img.s3.eu-central-1.amazonaws.com newsletter.mybestbook.com indago.mybestbook.lt preview.product.mybestbook.com asset.product.mybestbook.com static.mybestbook.com static.mybestbook.com cdn.jsdelivr.net storage.googleapis.com ct.pinterest.com www.pinterest.com www.facebook.com connect.facebook.net cdn.klarna.com eu.klarnaevt.com www.ideal.nl googleads.g.doubleclick.net maps.gstatic.com www.google.de www.google.fr www.google.nl www.google.ch www.google.dk www.google.se www.google.no www.google.be www.google.it www.google.pt www.google.at www.google.sk www.google.es www.google.pl www.google.uk www.google.ie www.google.fi www.google.cz www.google.ro www.google.co.uk www.google.ca www.google-analytics.com www.google.com *.privacysandbox.googleadservices.com bat.bing.com c.bing.com c.clarity.ms tr.snapchat.com integrations-facebook.trustpilot.com checkoutshopper-test.adyen.com checkoutshopper-live.adyen.com checkoutshopper-live-us.adyen.com checkoutshopper-live-au.adyen.com checkoutshopper-test.cdn.adyen.com checkoutshopper-live.cdn.adyen.com checkoutshopper-live-us.cdn.adyen.com checkoutshopper-live-au.cdn.adyen.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com newsletter.mybestbook.com indago.mybestbook.lt cdn.mybestbook.com cdnjs.cloudflare.com cdn.jsdelivr.net storage.googleapis.com ct.pinterest.com www.pinterest.com s.pinimg.com connect.facebook.net cdn.klarna.com eu-library.klarnaservices.com js.klarna.com x.klarnacdn.net googleads.g.doubleclick.net www.google-analytics.com www.googleadservices.com www.google.com www.gstatic.com www.googleoptimize.com tpc.googlesyndication.com bat.bing.com www.clarity.ms a.clarity.ms d.clarity.ms e.clarity.ms f.clarity.ms g.clarity.ms h.clarity.ms i.clarity.ms j.clarity.ms k.clarity.ms m.clarity.ms tr.snapchat.com sc-static.net analytics.tiktok.com applepay.cdn-apple.com checkoutshopper-test.adyen.com checkoutshopper-live.adyen.com checkoutshopper-live-us.adyen.com checkoutshopper-live-au.adyen.com checkoutshopper-test.cdn.adyen.com checkoutshopper-live.cdn.adyen.com checkoutshopper-live-us.cdn.adyen.com checkoutshopper-live-au.cdn.adyen.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com www.aservice.cloud rum-static.pingdom.net polyfill.io code.highcharts.com s.retargeted.co; frame-src 'self' www.googletagmanager.com newsletter.mybestbook.com www.pinterest.com www.pinterest.se www.pinterest.de www.pinterest.dk www.pinterest.fr no.pinterest.com www.pinterest.it fi.pinterest.com www.pinterest.es pl.pinterest.com www.pinterest.pt nl.pinterest.com ro.pinterest.com cz.pinterest.com sk.pinterest.com ct.pinterest.com www.pinterest.co.uk www.pinterest.ie www.pinterest.at www.pinterest.ch www.facebook.com cdn.klarna.com js.klarna.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net tpc.googlesyndication.com tr.snapchat.com applepay.cdn-apple.com checkoutshopper-test.adyen.com checkoutshopper-live.adyen.com checkoutshopper-live-us.adyen.com checkoutshopper-live-au.adyen.com checkoutshopper-test.cdn.adyen.com checkoutshopper-live.cdn.adyen.com checkoutshopper-live-us.cdn.adyen.com checkoutshopper-live-au.cdn.adyen.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com; connect-src 'self' s3-eu-central-1.amazonaws.com mbb-img.s3.eu-central-1.amazonaws.com newsletter.mybestbook.com indago.mybestbook.lt preview.product.mybestbook.com asset.product.mybestbook.com content.product.mybestbook.com static.mybestbook.com fonts.gstatic.com cdn.jsdelivr.net ct.pinterest.com www.facebook.com cx.atdmt.com eu.klarnaevt.com evt-eu.klarnaservices.com x.klarnacdn.net rcgmal4n.klarnaservices.com pagead2.googlesyndication.com stats.g.doubleclick.net maps.gstatic.com www.google.de www.google.fr www.google.nl www.google.ch www.google.dk www.google.se www.google.no www.google.be www.google.it www.google.pt www.google.at www.google.sk www.google.es www.google.pl www.google.uk www.google.ie www.google.fi www.google.cz www.google.ro www.google.co.uk www.google.ca www.google-analytics.com google.com www.google.com analytics.google.com adservice.google.com bat.bing.net bat.bing.com www.clarity.ms a.clarity.ms b.clarity.ms d.clarity.ms e.clarity.ms f.clarity.ms g.clarity.ms h.clarity.ms i.clarity.ms j.clarity.ms k.clarity.ms m.clarity.ms tr.snapchat.com tr6.snapchat.com analytics.tiktok.com freegeoip.app checkoutshopper-test.adyen.com checkoutanalytics-test.adyen.com checkoutshopper-live.adyen.com checkoutshopper-live-us.adyen.com checkoutshopper-live-au.adyen.com checkoutanalytics-live.adyen.com checkoutshopper-test.cdn.adyen.com checkoutshopper-live.cdn.adyen.com checkoutshopper-live-us.cdn.adyen.com checkoutshopper-live-au.cdn.adyen.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com www.aservice.cloud rum-collector-2.pingdom.net ipapi.co; style-src 'self' 'unsafe-inline' newsletter.mybestbook.com static.mybestbook.com cdn.mybestbook.com use.typekit.net p.typekit.net cdnjs.cloudflare.com cdn.jsdelivr.net fonts.cdnfonts.com storage.googleapis.com x.klarnacdn.net checkoutshopper-test.adyen.com checkoutshopper-live.adyen.com checkoutshopper-live-us.adyen.com checkoutshopper-live-au.adyen.com checkoutshopper-test.cdn.adyen.com checkoutshopper-live.cdn.adyen.com checkoutshopper-live-us.cdn.adyen.com checkoutshopper-live-au.cdn.adyen.com; font-src 'self' asset.product.mybestbook.com static.mybestbook.com use.typekit.net cdnjs.cloudflare.com fonts.gstatic.com fonts.cdnfonts.com x.klarnacdn.net applepay.cdn-apple.com; media-src 'self' static.mybestbook.com static.mybestbook.com; report-uri https://24a3x5jc.uriports.com/reports/report; report-to default;
Directive Analysis
img-srcLOW
www.google.ie 'self' noderender.mybestbook.com www.google.se www.google.uk www.google.ch connect.facebook.net s3-eu-central-1.amazonaws.com www.google.com static.mybestbook.com eu.klarnaevt.com www.sandbox.paypal.com www.google.pt www.google.nl www.google.at cdn.klarna.com www.google.dk checkoutshopper-live.adyen.com c.clarity.ms preview.product.mybestbook.com tr.snapchat.com *.privacysandbox.googleadservices.com c.bing.com www.google.no checkoutshopper-live-us.adyen.com www.google.cz integrations-facebook.trustpilot.com cdn.jsdelivr.net www.google.de www.googletagmanager.com newsletter.mybestbook.com www.ideal.nl www.google.fi t.paypal.com checkoutshopper-test.cdn.adyen.com www.paypalobjects.com www.google-analytics.com googleads.g.doubleclick.net checkoutshopper-live-au.cdn.adyen.com www.google.co.uk maps.gstatic.com checkoutshopper-test.adyen.com www.google.ro www.google.es data: www.facebook.com www.google.it asset.product.mybestbook.com checkoutshopper-live-us.cdn.adyen.com www.google.fr ct.pinterest.com www.pinterest.com indago.mybestbook.lt www.google.sk www.google.pl storage.googleapis.com checkoutshopper-live-au.adyen.com checkoutshopper-live.cdn.adyen.com www.google.ca mbb-img.s3.eu-central-1.amazonaws.com www.google.be bat.bing.com
•Missing recommended values for img-src: self
worker-srcLOW
'self' blob:
•Missing recommended values for worker-src: self, none
script-srcHIGH
'self' js.klarna.com connect.facebook.net cdn.mybestbook.com www.google.com rum-static.pingdom.net a.clarity.ms k.clarity.ms 'unsafe-inline' applepay.cdn-apple.com www.sandbox.paypal.com x.klarnacdn.net www.googleadservices.com cdn.klarna.com checkoutshopper-live.adyen.com www.clarity.ms g.clarity.ms 'unsafe-eval' h.clarity.ms tr.snapchat.com www.googleoptimize.com analytics.tiktok.com s.pinimg.com checkoutshopper-live-us.adyen.com tpc.googlesyndication.com cdn.jsdelivr.net www.googletagmanager.com newsletter.mybestbook.com d.clarity.ms i.clarity.ms s.retargeted.co checkoutshopper-test.cdn.adyen.com e.clarity.ms www.google-analytics.com www.paypalobjects.com googleads.g.doubleclick.net checkoutshopper-live-au.cdn.adyen.com www.gstatic.com checkoutshopper-test.adyen.com cdnjs.cloudflare.com m.clarity.ms checkoutshopper-live-us.cdn.adyen.com ct.pinterest.com www.pinterest.com indago.mybestbook.lt eu-library.klarnaservices.com checkoutshopper-live-au.adyen.com storage.googleapis.com checkoutshopper-live.cdn.adyen.com polyfill.io f.clarity.ms code.highcharts.com www.paypal.com sc-static.net j.clarity.ms www.aservice.cloud bat.bing.com
•Unsafe inline execution allowed in script-src
•Unsafe eval() execution allowed in script-src
•Missing recommended values for script-src: self, sha384-, sha256-, sha512-, nonce-
•No nonces or hashes used for script-src
frame-srcLOW
bid.g.doubleclick.net 'self' www.pinterest.it js.klarna.com www.google.com www.pinterest.de www.sandbox.paypal.com applepay.cdn-apple.com sk.pinterest.com cdn.klarna.com checkoutshopper-live.adyen.com no.pinterest.com tr.snapchat.com pl.pinterest.com checkoutshopper-live-us.adyen.com tpc.googlesyndication.com www.pinterest.co.uk www.googletagmanager.com newsletter.mybestbook.com cz.pinterest.com www.pinterest.pt www.pinterest.ch checkoutshopper-test.cdn.adyen.com www.paypalobjects.com www.pinterest.es googleads.g.doubleclick.net nl.pinterest.com checkoutshopper-live-au.cdn.adyen.com checkoutshopper-test.adyen.com www.facebook.com fi.pinterest.com checkoutshopper-live-us.cdn.adyen.com www.pinterest.at ct.pinterest.com www.pinterest.com checkoutshopper-live-au.adyen.com www.pinterest.ie checkoutshopper-live.cdn.adyen.com www.pinterest.dk www.paypal.com www.pinterest.se www.pinterest.fr ro.pinterest.com
•Missing recommended values for frame-src: self
connect-srcLOW
www.google.ie 'self' www.google.se www.google.ch bat.bing.net static.mybestbook.com www.google.pt www.google.at www.google.dk www.clarity.ms rum-collector-2.pingdom.net h.clarity.ms tr.snapchat.com analytics.tiktok.com www.google.no www.google.de d.clarity.ms ipapi.co checkoutshopper-test.cdn.adyen.com adservice.google.com maps.gstatic.com tr6.snapchat.com checkoutanalytics-test.adyen.com www.google.it checkoutshopper-live.cdn.adyen.com freegeoip.app j.clarity.ms evt-eu.klarnaservices.com k.clarity.ms checkoutshopper-live.adyen.com b.clarity.ms newsletter.mybestbook.com www.google.fi checkoutanalytics-live.adyen.com checkoutshopper-test.adyen.com www.google.ro www.facebook.com www.google.fr www.google.sk pagead2.googlesyndication.com www.google.pl checkoutshopper-live-au.adyen.com www.paypal.com mbb-img.s3.eu-central-1.amazonaws.com www.aservice.cloud analytics.google.com eu.klarnaevt.com a.clarity.ms www.sandbox.paypal.com stats.g.doubleclick.net x.klarnacdn.net www.google.nl g.clarity.ms www.google.cz i.clarity.ms www.paypalobjects.com www.google-analytics.com www.google.co.uk www.google.es m.clarity.ms checkoutshopper-live-us.cdn.adyen.com ct.pinterest.com f.clarity.ms content.product.mybestbook.com www.google.uk s3-eu-central-1.amazonaws.com www.google.com cx.atdmt.com preview.product.mybestbook.com checkoutshopper-live-us.adyen.com cdn.jsdelivr.net fonts.gstatic.com e.clarity.ms checkoutshopper-live-au.cdn.adyen.com rcgmal4n.klarnaservices.com google.com asset.product.mybestbook.com indago.mybestbook.lt www.google.ca www.google.be bat.bing.com
•Missing recommended values for connect-src: self
style-srcHIGH
'self' cdn.mybestbook.com static.mybestbook.com 'unsafe-inline' x.klarnacdn.net checkoutshopper-live.adyen.com use.typekit.net checkoutshopper-live-us.adyen.com cdn.jsdelivr.net newsletter.mybestbook.com checkoutshopper-test.cdn.adyen.com fonts.cdnfonts.com checkoutshopper-live-au.cdn.adyen.com checkoutshopper-test.adyen.com cdnjs.cloudflare.com checkoutshopper-live-us.cdn.adyen.com checkoutshopper-live-au.adyen.com checkoutshopper-live.cdn.adyen.com storage.googleapis.com p.typekit.net
•Unsafe inline execution allowed in style-src
•Missing recommended values for style-src: self, sha384-, sha256-, sha512-, nonce-
font-srcLOW
asset.product.mybestbook.com 'self' use.typekit.net fonts.gstatic.com fonts.cdnfonts.com static.mybestbook.com cdnjs.cloudflare.com applepay.cdn-apple.com x.klarnacdn.net
•Missing recommended values for font-src: self
media-srcLOW
'self' static.mybestbook.com
•Missing recommended values for media-src: self
report-uriLOW
https://24a3x5jc.uriports.com/reports/report
report-toLOW
default
Security Headers
✓Permissions-PolicyPresent
Permissions-Policy: autoplay=(self), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=*, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()
Restricts which browser features (camera, microphone, geolocation) the page can use, limiting attack surface.
✓Referrer-PolicyPresent
strict-origin
Controls how much referrer information is sent with requests, preventing data leaks to third parties.
✓Strict-Transport-SecurityPresent
max-age=31536000; includeSubDomains; preload
Forces browsers to use HTTPS for all future requests, preventing man-in-the-middle attacks and SSL stripping.
✓X-Content-Type-OptionsPresent
nosniff
Prevents browsers from MIME-sniffing responses away from the declared Content-Type, blocking drive-by downloads.
✓X-Frame-OptionsPresent
SAMEORIGIN
Prevents the page from being embedded in iframes, protecting against clickjacking attacks.
✗X-XSS-ProtectionMissing
Legacy XSS filter for older browsers. Modern browsers use CSP instead. Set to "0" to avoid false positives.
How to add it:
nginx
add_header X-XSS-Protection "0" always;apache
Header always set X-XSS-Protection "0"cloudflare
Rules > Transform Rules > HTTP Response Header Modification > Set X-XSS-Protection to "0"1 recommended security header is missing on mybestbook.lt.
Beyond headers: infrastructure exposure
via OSN, our sister projectSecurity headers protect the browser. OSN maps what's exposed underneath — servers, open ports, known CVEs, DNS and WHOIS.
See what the internet sees about mybestbook.ltWeak headers often come with other exposure — check the full picture.
See full exposure report on OSN →Free, no signup.
mybestbook.lt
2 scans since 7/16/2025
A+
Latest: 90/100
Total Scans
2
Latest Score
90/100
First Scan
7/16/2025
Last Scan
7/16/2025
Scan History
| Date | Score | CSP | Headers | Issues | Action |
|---|---|---|---|---|---|
| Jul 16, 2025 | A+ (90) | No | 5/6 | 0 | View → |
Show off your security grade
Embed this badge on your site or README. It updates automatically after each scan and links back to this report.
HTML
<a href="https://headertest.com/results/mybestbook.lt" title="Security headers grade for mybestbook.lt — HeaderTest">
<img src="https://headertest.com/api/badge/mybestbook.lt" alt="HeaderTest security grade: A+ (90/100) for mybestbook.lt" />
</a>Markdown
[](https://headertest.com/results/mybestbook.lt)