Open
Cached
·
just now
25
Headers
Detected Technologies from Headers
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=31536000 ; includeSubDomains
Content-Security-Policy
Weak
upgrade-insecure-requests; frame-ancestors:
X-Frame-Options
Good
SameOrigin
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer
Permissions-Policy
Missing
Not configured
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Significantly strengthen CSP directives
- • Consider adding Permissions-Policy to control browser features
Performance Headers
3 headers
Accept-Ranges
bytes
Connection
close
Transfer-Encoding
chunked
Caching Headers
3 headers
Cache-Control
public, max-age=0
Etag
W/"7b6-19c4bcac978"
Last-Modified
Wed, 11 Feb 2026 08:21:47 GMT
Content Headers
1 headers
Content-Type
text/html; charset=UTF-8
Server Headers
0 headers
No server headers found
CORS Headers
0 headers
No CORS headers found
Cookies Headers
1 headers
Set-Cookie
incap_ses_144_2234675=Q10BUMSAYyBda4UQ1Jf/ATzUj2kAAAAAL+mEDDDjY28qSEYkcCWOsA==; path=/; Domain=.breweryvisits.com; Secure; SameSite=None
Other Headers
8 headers
Date
Sat, 14 Feb 2026 01:47:40 GMT
Origin-Agent-Cluster
?1
Request-Context
appId=cid-v1:
X-Dns-Prefetch-Control
off
X-Download-Options
noopen
X-Iinfo
2-29129959-29129961 NNNN CT(82 178 0) RT(1771033660633 8) q(0 0 2 0) r(3 3) U12
X-Permitted-Cross-Domain-Policies
none
Recommendations
Enable compression (gzip/brotli) to improve performance