Technical overview for r1nge.com (Updated May, 2026)

Welcome to your in-depth website security scan insights for r1nge.com. Detailed probe conducted on 2026-05-17, focusing on HTTP Header Analysis. Our thorough examination detected 13 issues and disclosed identified anomalies.

HTTP Security Headers

HSTS header: Passed Great job! The HTTP Strict-Transport-Security response header (often abbreviated as HSTS) informs browsers that the site should only be accessed using HTTPS, and that any future attempts to access it using HTTP should automatically be converted to HTTPS

Check CSP header: Passed Passed: Great job! CSP helps in preventing cross-site scripting (XSS) attacks by controlling which domains are allowed to load content.

X-Frame-Options: Passed Well done! This header protects against clickjacking attacks by controlling how your site can be embedded in other sites.

X-XSS-Protection: Failed Warning! Without this header, your website may be more vulnerable to XSS attacks.

X-Content-Type-Options: Passed Nicely done! This header prevents the browser from interpreting files as a different MIME type, reducing the risk of security vulnerabilities.

Referrer-Policy: Passed Good! Properly controlling referrer information helps protect user privacy and sensitive information.

Permissions-Policy: Passed Great! This header allows control over browser features, enhancing privacy and security.

HTTP Public Key Pinning (HPKP): Failed Critical! Without HPKP, your users may be exposed to fraudulent certificates, compromising secure connections.

Cross-Origin Resource Sharing (CORS): Passed Excellent! CORS controls which domains can access resources, mitigating potential risks.

Cross-Origin-Embedder-Policy: Passed Good job! This header helps protect your site from being embedded into potentially harmful contexts.

Cross-Origin-Opener: Passed Well done! This header helps in isolation from other malicious pages, enhancing security.

Cross-Origin-Resource-Policy: Passed Great! This header controls which sites can embed your resources, reducing data exposure.

Feature-Policy: Passed Excellent! Controlling browser features with this header can reduce the risk of attacks like fingerprinting.

Expect-CT: Failed Warning! Without this header, connections might not adhere to Certificate Transparency requirements.

Timing-Allow-Origin: Passed Great! This header helps control timing information, preventing potential timing attacks.

Server signature: Failed Warning! Exposing the server signature might provide attackers with valuable information to exploit known vulnerabilities.

X-recruiting-header: Info This header is not found, and its absence has no impact on security.

Raw Headers

HTTP/2 200

Server Teto

Date Sun, 17 May 2026 11:43:51 GMT

Content-Type text/html; charset=utf-8

Content-Length 162

Connection keep-alive

Location https://r1nge.com/

Vary Accept-Encoding

Cache-Control no-store

Set-Cookie techaro.lol-anubis-cookie-verification=019e35bf-ee81-7129-8774-bfc543ab6b76; Path=/; Expires=Sun, 17 May 2026 12:13:51 GMT; Secure; SameSite=None

alt-svc h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Strict-Transport-Security max-age=31536000; includeSubDomains; preload

X-Frame-Options DENY

X-Content-Type-Options nosniff

Referrer-Policy strict-origin-when-cross-origin

Content-Security-Policy default-src 'self'; script-src 'self' 'sha256-5TmCSWsRHHKtNC4AgS23KS5Z9SBqma0xikI6H6iJ1/Y=' 'sha256-xYUerDScZY4B65XkoeXj33T52wAKgK+ssZ70qQZ4yNA=' 'sha256-8IkJ0p9CxsIPvZz2G+oZweeNsTtH60j+LXkVV4s1tAQ=' 'sha256-W0UTwJQZ4NjzaqQKhEPjHlR1UuGvkuYFOSbMRgzzNqg=' 'sha256-1H2YnMkH9j5EEFikbgn35bkymUZxRysYd5B0q7EZzZQ='; connect-src 'self'; img-src 'self'; style-src 'self' 'sha256-5TmCSWsRHHKtNC4AgS23KS5Z9SBqma0xikI6H6iJ1/Y=' 'sha256-YFOIjkCvZnAH6R5z1ZjUI/Zgf7uslK5vN80+lsdvYss=' 'sha256-YustHjijiQEwObTHTWBhQNMhYZnfxLrv6pRx9xtazf4=' 'unsafe-hashes'

Cross-Origin-Embedder-Policy require-corp

Cross-Origin-Resource-Policy same-origin

Cross-Origin-Opener-Policy same-origin

Timing-Allow-Origin https://r1nge.com

Permissions-Policy accelerometer=(), ambient-light-sensor=(), attribution-reporting=(), autoplay=(), battery=(), bluetooth=(), camera=(), compute-pressure=(self), cross-origin-isolated=(self), direct-sockets=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), hid=(), identity-credentials-get=(), idle-detection=(self), keyboard-map=(self), magnetometer=(), mediasession=(), microphone=(), midi=(), navigation-override=(self), otp-credentials=(), payment=(), picture-in-picture=(self), publickey-credentials-get=(), screen-wake-lock=(), serial=(), sync-xhr=(), storage-access=(self), usb=(), web-share=(self), window-management=(), xr-spatial-tracking=()

Feature-Policy accelerometer 'none'; ambient-light-sensor 'none'; attribution-reporting 'none'; autoplay 'none'; battery 'none'; bluetooth 'none'; camera 'none'; compute-pressure 'self'; cross-origin-isolated 'self'; direct-sockets 'none'; encrypted-media 'none'; execution-while-not-rendered 'none'; execution-while-out-of-viewport 'none'; fullscreen 'none'; geolocation 'none'; gyroscope 'none'; hid 'none'; identity-credentials-get 'none'; idle-detection 'none'; keyboard-map 'self'; magnetometer 'none'; mediasession 'none'; microphone 'none'; midi 'none'; navigation-override 'self'; otp-credentials 'none'; payment 'none'; picture-in-picture 'self'; publickey-credentials-get 'none'; screen-wake-lock 'none'; serial 'none'; sync-xhr 'none'; storage-access 'self'; usb 'none'; web-share 'self'; window-management 'none'; xr-spatial-tracking 'none';

Access-Control-Allow-Origin https://r1nge.com

X-Recruiting Open to work! Contact me via [email protected]; I love Kasane Teto

In-depth Cybersecurity Analysis of r1nge.com

r1nge.com Security Assessment Results

Scan another website:

SSL/TLS Analysis