malts.com

Live preview

This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.

Since malts.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

public, max-age=0, must-revalidate

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self';script-src 'self' 'unsafe-eval' 'unsafe-inline' *.prod.uidapi.com *.snap.licdn.com *.pinimg.com *.pinterest.com *.clarity.ms *.bing.com *.googleleadservices.com *.googlesyndication.com *.optimizely.com *.doubleclick.net *.jsdelivr.net www.gstatic.com *.merchant-center-analytics.goog *.twitter.com *.malts.com *.youtube.com/iframe_api *.cdn.evgnet.com *.onetrust.com *.diageohorizon.com *.googletagmanager.com *.cloudfunctions.net va.vercel-scripts.com *.quantummetric.com *.google-analytics.com *.google.com *.s3.amazonaws.com *.diageoagegate.com *.diageoplatform.com cdnjs.cloudflare.com cdn.treasuredata.com *.in.treasuredata.com *.jquery.com js.adsrvr.org *.facebook.com *.facebook.net *.mapbox.com *.js-cdn.dynatrace.com js-cdn.dynatrace.com *.anyroad.com *.yotpo.com *.redditstatic.com d.line-scdn.net tr.line.me https://*.adimo.co https://*.adimouat.co cdn.channelsight.com *.mikmak.ai *.swaven.com pp-payment-qf.secutix.com payment.secutix.com www.google.com;style-src 'self' 'unsafe-inline' *.prod.uidapi.com *.snap.licdn.com *.pinimg.com *.pinterest.com *.clarity.ms *.bing.com *.googleleadservices.com *.googlesyndication.com *.optimizely.com *.doubleclick.net *.jsdelivr.net *.treasuredata.com fonts.googleapis.com *.facebook.com *.facebook.net vercel.live *.diageohorizon.com *.dynatrace.com *.bf.dynatrace.com *.yotpo.com cdn.channelsight.com;img-src 'self' blob: data: *.ctfassets.net *.vimeocdn.com vercel.com *.facebook.com *.facebook.net *.prod.uidapi.com *.snap.licdn.com *.pinimg.com *.pinterest.com *.treasuredata.com *.clarity.ms *.bing.com *.google.com *.google-analytics.com *.googletagmanager.com cdn-ukwest.onetrust.com *.doubleclick.net *.googlesyndication.com ukzd365prdstr.blob.core.windows.net maps.gstatic.com *.static-swaven.com www.google.co.uk *.analytics.google.com t.co analytics.twitter.com www.google-analytics.com www.drinkiq.com *.malts.com www.diageoagegate.com media.diageocms.com media.diageodam.com media-diageocms.diageoplatform.com cdnjs.cloudflare.com *.adsrvr.org *.dynatrace.com *.bf.dynatrace.com *.optimizely.com *.reddit.com tr.line.me https://*.adimo.co https://*.adimouat.co https://4dvq37jqcg.execute-api.eu-west-1.amazonaws.com cdn.channelsight.com *.mikmak.ai *.swaven.com pp-payment-qf.secutix.com payment.secutix.com i0.wp.com/cdn.auth0.com/avatars s.gravatar.com;media-src 'self' *.ctfassets.net *.vimeocdn.com vercel.com *.facebook.com *.facebook.net *.prod.uidapi.com *.snap.licdn.com *.pinimg.com *.pinterest.com *.treasuredata.com *.clarity.ms *.bing.com *.google.com *.google-analytics.com *.googletagmanager.com cdn-ukwest.onetrust.com *.doubleclick.net *.googlesyndication.com ukzd365prdstr.blob.core.windows.net *.akamaized.net *.vimeo.com *.dynatrace.com *.bf.dynatrace.com *.optimizely.com;connect-src 'self' https: d.line-scdn.net tr.line.me https://*.adimo.co https://*.adimouat.co https://4dvq37jqcg.execute-api.eu-west-1.amazonaws.com api.channelsight.com *.mikmak.ai *.swaven.com diair.pp-ws.secutix.com pp-payment-qf.secutix.com diair.ws.secutix.com payment.secutix.com https://malts-staging.eu.auth0.com https://stage-gb-shop.malts.com;font-src 'self' data: fonts.gstatic.com use.fontawesome.com maxcdn.bootstrapcdn.com *.myshopify.com *.quantummetric.com s3.eu-west-1.amazonaws.com *.s3.amazonaws.com *.mapbox.com *.algolianet.com *.algolia.net *.onetrust.com *.prod.uidapi.com *.snap.licdn.com *.pinimg.com *.pinterest.com *.clarity.ms *.bing.com cdn.channelsight.com *.mikmak.ai *.swaven.com *.static-swaven.com;worker-src blob:;object-src 'self' blob: data: cdn.channelsight.com;base-uri 'self';form-action 'self' *.r2sndr.com webto.salesforce.com;frame-src 'self' vercel.live app.contentful.com *.vimeo.com *.prod.uidapi.com *.snap.licdn.com *.pinimg.com *.pinterest.com *.treasuredata.com *.clarity.ms *.bing.com www.whatsyourwhisky.com *.twitter.com cloud.official.malts.com www.google.com *.merchant-center-analytics.goog *.google.com *.doubleclick.net *.googlesyndication.com where-to-buy.co *.adsrvr.org *.facebook.com *.facebook.net *.dynatrace.com *.bf.dynatrace.com *.anyroad.com *.optimizely.com https://*.adimo.co https://*.adimouat.co *.mikmak.ai *.swaven.com pp-payment-qf.secutix.com payment.secutix.com;frame-ancestors 'self' app.contentful.com;block-all-mixed-content;upgrade-insecure-requests;

Strict-Transport-Security

max-age=63072000

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

origin-when-cross-origin

Permissions-Policy

interest-cohort=()

What each security header does

Redirect chain

1. 1.http://malts.com/HTTP 308

   → https://malts.com/

2. 2.https://malts.com/HTTP 308

   → https://www.malts.com/

3. 3.https://www.malts.com/HTTP 308

   → https://www.malts.com/en

4. 4.https://www.malts.com/enHTTP 200

Meta tags

Title

Home | Single Malt Whisky & Scotland Distillery Tours | Malts

Description

Discover Malts, the home of exceptional single malt Scotch whiskies and blends, exquisite Scottish distillery tours, whisky education and cocktail recipes.

Canonical

https://www.malts.com/en

Robots

index, follow

Generator

Not set

Open Graph title

Home | Single Malt Whisky & Scotland Distillery Tours | Malts - Malts

Open Graph description

Discover Malts, the home of exceptional single malt Scotch whiskies and blends, exquisite Scottish distillery tours, whisky education and cocktail recipes.

Open Graph image

Not set

Open Graph type

website

Twitter card

summary

Twitter title

Home | Single Malt Whisky & Scotland Distillery Tours | Malts - Malts

Twitter image

Not set

robots.txt

Disallow rules (User-agent: *)

4

Disallow rules (other agents)

0

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Next.jsframework

  X-Powered-By: Next.js

Related domains