indexo.dev

dashaus-alteslager.de

.de crawl

First seen 2026-04-25 · Last seen 2026-05-18 · ok HTTP/1.1 200 3739 ms crawled 2026-05-18

DE · 78.46.144.76 · AS24940 Hetzner Online GmbH

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Kulturzentrum DAS HAUS Altes Lager - Kulturzentrum DAS HAUS Altes Lager
Description
Aus dem ehemaligen Offizierskasino entstand ab 1996 das Kulturzentrum DAS HAUS in Altes Lager. Konzerte, Theater, Sommerfeste, Workshops, Kinder-, Jugend- sowie generationsübergreifende Projekte erfüllen die multifunktionalen Räume mit Leben. DAS HAUS ist Kooperationspartner für Kitas und Schulen, Sitz und Treffpunkt von Vereinen und Gruppen.
Language
de
Generator
TYPO3 CMS
Canonical
https://www.dashaus-alteslager.de/
Feeds

Technology

Server
Apache
Social widgets
  • YouTube Embed

Third-party hosts loaded (2)

  • www.youtube-nocookie.com×3
  • www.google.com×1

Social

Contact

Email
Phone

Registration

Updated
2026-01-22
Name servers
  • ns1.your-server.de.
  • ns3.second-ns.de.
  • ns.second-ns.com.

DNS records live

NS
  • ns.second-ns.com
  • ns1.your-server.de
  • ns3.second-ns.de
MX
  • 10 dedi4113.your-server.de

Email authentication weak

SPF
v=spf1 +a +mx ?all
neutral (?all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

Encryption Everywhere DV TLS CA - G2
from 2026-01-23 to 2027-01-23
Expires in 247 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.dashaus-alteslager.de/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(self), midi=(self), payment=(self), camera=(self), usb=(self), fullscreen=(self), magnetometer=(self), picture-in-picture=(*), accelerometer=(self), encrypted-media=(self), autoplay=(self), gyroscope=(self), sync-xhr=(self), microphone=(self)
x-content-type-options
nosniff
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-eval' 'nonce-vxWJnJpuqL7s5-i8OataMY_rz0qIUiHu3h5WINMoV3cDLnDlQkob1A' blob: https://*.youtube.com https://*.vimeo.com https://*.gstatic.com https://*.google.com https://*.googleapis.com https://*.jsdelivr.net https://*.marker.io https://*.cookiebot.eu https://*.cookiebot.com https://*.cookielaw.org https://*.matomo.cloud https://*.facebook.net https://*.amazonaws.com https://*.googletagmanager.com https://googleads.g.doubleclick.net https://bat.bing.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: blob: https://*.gravatar.com https://*.googleusercontent.com https://*.youtube.com https://*.vimeocdn.com https://*.gstatic.com https://*.googleapis.com https://*.ytimg.com https://img.sct.eu1.usercentrics.eu https://*.doubleclick.net https://*.facebook.com https://*.google.com https://*.google.de https://*.bing.com https://*.bing.net https://*.googlesyndication.com https://*.facebook.net; base-uri 'self'; f
strict-transport-security
max-age=63072000; includeSubDomains; preload

Links to (2)

Linked from (2)