Evidence record

Captured: 2026-04-18T21:11:50.507582+10:00

Finding: SEC-003

What was tested

Missing X-Content-Type-Options header

URL: https://www.thebelroyhotel.com.au

Matcher: X-Content-Type-Options header absent

{
  "method": "GET",
  "url": "https://www.thebelroyhotel.com.au",
  "headers": {}
}

Status: 200

1	<!doctype html>
2	<html xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://www.facebook.com/2008/fbml" lang="en-AU" >
3	<head>
4	<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
5	<meta name="viewport" content="width=device-width, initial-scale=1">
6	<!-- This is Squarespace. --><!-- thebelroyhotel -->
7	<base href="">
8	<meta charset="utf-8" />
9	<title>The Belroy Hotel - Your St Leonards Local</title>
10	<meta http-equiv="Accept-CH" content="Sec-CH-UA-Platform-Version, Sec-CH-UA-Model" /><link rel="icon" type="image/x-icon" href="https://images.squarespace-cdn.com/content/v1/6513beae14bb3152b962d387/6bc3fffd-0a0c-4b8a-98ce-ccbc21fa9c26/favicon.ico?format=100w"/>
11	<link rel="canonical" href="https://www.thebelroyhotel.com.au"/>
12	<meta property="og:site_name" content="The Belroy Hotel - Your St Leonards Local"/>
13	<meta property="og:title" content="The Belroy Hotel - Your St Leonards Local"/>
14	<meta property="og:url" content="https://www.thebelroyhotel.com.au"/>
15	<meta property="og:type" con

sha256: a25e87b12fb2d3deca4f0156696db60e110d30f83cec38b089c45bd61c548904