HTTP Headers Analysis for https://dashboard.ringover.com

Detected Technologies from Headers

See all in URL Inspect 6

Amplitude

Cloudflare CDN

Google Fonts

RevenueHero

Slack

YouTube

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Good

default-src; script-src; style-src; +14 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

no-referrer-when-downgrade

Permissions-Policy

Present

accelerometer=(none), ambient-light-sensor=(none), autoplay=(none); +22 more

Recommendations

• Strengthen CSP by removing 'unsafe-eval'
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding

connection: close
transfer-encoding: chunked
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

max-age=0, no-cache, no-store, must-revalidate

Expires

Caching

Wed, 12 Jan 1980 05:00:00 GMT

Pragma

Caching

no-cache

cache-control: max-age=0, no-cache, no-store, must-revalidate
expires: Wed, 12 Jan 1980 05:00:00 GMT
pragma: no-cache

Content Headers

Content-Type

Content

text/html; charset=UTF-8

content-type: text/html; charset=UTF-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

Access-Control-Allow-Headers

Cors

Content-Type, Authorization

Access-Control-Allow-Methods

Cors

GET,POST,OPTIONS,DELETE,PUT

Access-Control-Allow-Origin

Cors

*

access-control-allow-headers: Content-Type, Authorization
access-control-allow-methods: GET,POST,OPTIONS,DELETE,PUT
access-control-allow-origin: *

Cookies Headers

No cookies headers found

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

9f875458fd3dc707-IAD

Date

Other

Fri, 08 May 2026 09:10:07 GMT

Feature-Policy

Other

accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'none'; camera 'none'; microphone 'self' https//ringover.me; document-write 'none'; encrypted-media 'none'; fullscreen 'self'; geolocation 'none'; gyroscope 'none'; layout-animations 'none'; legacy-image-formats 'none'; magnetometer 'none'; midi 'none'; oversized-images 'self' *.ringover.com; payment 'none'; picture-in-picture 'none'; speaker 'self'; sync-script 'self'; sync-xhr 'self'; unoptimized-images 'none'; unsized-media 'none'; usb 'none'; vertical-scroll 'none'; vr 'none'

alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
cf-ray: 9f875458fd3dc707-IAD
date: Fri, 08 May 2026 09:10:07 GMT
feature-policy: accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'none'; camera 'none'; microphone 'self' https//ringover.me; document-write 'none'; encrypted-media 'none'; fullscreen 'self'; geolocation 'none'; gyroscope 'none'; layout-animations 'none'; legacy-image-formats 'none'; magnetometer 'none'; midi 'none'; oversized-images 'self' *.ringover.com; payment 'none'; picture-in-picture 'none'; speaker 'self'; sync-script 'self'; sync-xhr 'self'; unoptimized-images 'none'; unsized-media 'none'; usb 'none'; vertical-scroll 'none'; vr 'none'

Recommendations

Enable compression (gzip/brotli) to improve performance