HTTP Headers Analysis for https://ringover.me

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Basic

default-src; connect-src; style-src; +6 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

no-referrer-when-downgrade

Permissions-Policy

Present

accelerometer=(none), ambient-light-sensor=(none), autoplay=(self); +22 more

Recommendations

• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding

accept-ranges: bytes
connection: close
transfer-encoding: chunked
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

no-cache, no-store, must-revalidate

Expires

Caching

0

Last-Modified

Caching

Mon, 23 Sep 2024 04:36:19 GMT

Pragma

Caching

no-cache

cache-control: no-cache, no-store, must-revalidate
expires: 0
last-modified: Mon, 23 Sep 2024 04:36:19 GMT
pragma: no-cache

Content Headers

Content-Type

Content

text/html

content-type: text/html

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Date

Other

Sat, 09 May 2026 06:20:52 GMT

Feature-Policy

Other

accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'self'; camera 'self'; microphone 'self' *.ringover.com; document-write 'none'; encrypted-media 'none'; fullscreen 'self' *.ringover.com; geolocation 'none'; gyroscope 'none'; layout-animations 'none'; legacy-image-formats 'none'; magnetometer 'none'; midi 'none'; oversized-images 'self' *.ringover.com; payment 'none'; picture-in-picture 'none'; speaker 'self' *.ringover.com; sync-script 'self'; sync-xhr 'self' *.ringover.com; unoptimized-images 'none'; unsized-media 'none'; usb 'none'; vertical-scroll 'none'; vr 'none'

date: Sat, 09 May 2026 06:20:52 GMT
feature-policy: accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'self'; camera 'self'; microphone 'self' *.ringover.com; document-write 'none'; encrypted-media 'none'; fullscreen 'self' *.ringover.com; geolocation 'none'; gyroscope 'none'; layout-animations 'none'; legacy-image-formats 'none'; magnetometer 'none'; midi 'none'; oversized-images 'self' *.ringover.com; payment 'none'; picture-in-picture 'none'; speaker 'self' *.ringover.com; sync-script 'self'; sync-xhr 'self' *.ringover.com; unoptimized-images 'none'; unsized-media 'none'; usb 'none'; vertical-scroll 'none'; vr 'none'

Recommendations

Enable compression (gzip/brotli) to improve performance