Domain History
popped.lt
Grade D · 50/100 · 1/6 security headers present
Security Score
D
50/ 100
Security Headers
0/ 1
CSP Violations
NoViolations
Issues Found
6Issues
Recommendations
0Available
CSP Analysis
Content Security PolicyHIGH
upgrade-insecure-requests
Directive Analysis
upgrade-insecure-requestsLOW
Security Headers
✗Strict-Transport-SecurityMissing
Forces browsers to use HTTPS for all future requests, preventing man-in-the-middle attacks and SSL stripping.
How to add it:
nginx
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;apache
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"cloudflare
SSL/TLS > Edge Certificates > Enable HSTS (toggle on, set max-age to 12 months, enable includeSubDomains)1 recommended security header is missing on popped.lt.
Issues Found
- •Missing critical directive default-src (Base fallback directive)
- •Missing critical directive script-src (JavaScript source control)
- •Missing critical directive object-src (Plugin control)
- •Missing critical directive base-uri (Base URI control)
- •Missing critical directive frame-ancestors (Framing control)
- •Missing critical directive sandbox (Content isolation)
Beyond headers: infrastructure exposure
via OSN, our sister projectSecurity headers protect the browser. OSN maps what's exposed underneath — servers, open ports, known CVEs, DNS and WHOIS.
See what the internet sees about popped.ltWeak headers often come with other exposure — check the full picture.
See full exposure report on OSN →Free, no signup.
popped.lt
1 scan since 7/12/2025
D
Latest: 50/100
Total Scans
1
Latest Score
50/100
First Scan
7/12/2025
Last Scan
7/12/2025
Scan History
| Date | Score | CSP | Headers | Issues | Action |
|---|---|---|---|---|---|
| Jul 12, 2025 | D (50) | Yes | 1/6 | 6 | View → |
Show off your security grade
Embed this badge on your site or README. It updates automatically after each scan and links back to this report.
HTML
<a href="https://headertest.com/results/popped.lt" title="Security headers grade for popped.lt — HeaderTest">
<img src="https://headertest.com/api/badge/popped.lt" alt="HeaderTest security grade: D (50/100) for popped.lt" />
</a>Markdown
[](https://headertest.com/results/popped.lt)