esplanade.com

HTML metadata

Title: Wonder Here at Esplanade – Theatres on the Bay - Esplanade
Description: Experience the joy that the arts brings through a diverse range of performances all year round at Singapore's national performing arts centre.
Language: en
Canonical: https://www.esplanade.com/

Open Graph

url: https://www.esplanade.com/
title: Wonder Here at Esplanade – Theatres on the Bay - Esplanade
description: Experience the joy that the arts brings through a diverse range of performances all year round at Singapore's national performing arts centre.

Technology

CDN: Azure Front Door

Analytics

Google Tag Manager

Ads

Outbrain

Fonts

Adobe Fonts

Third-party hosts loaded (7)

vjs.zencdn.net×3
www.googletagmanager.com×2
amplify.outbrain.com×1
cdnjs.cloudflare.com×1
code.jquery.com×1
use.typekit.net×1
www.youtube.com×1

Social

Registration

Registrar

DomainSpot LLC

Created

2001-06-29

Expires

2028-06-29 772 days left

Updated

2024-07-02

Name servers

ns1.domaindiscover.com
ns2.domaindiscover.com
pns21.cloudns.net
pns23.cloudns.net

DNS records live

NS

pns21.cloudns.net
pns23.cloudns.net

MX

0 esplanade-com.mail.protection.outlook.com

TXT

Show 20 TXT records

l2mmruoibijrhr58daqg2t2sr5
v=DMARC1; p=none; rua=mailto:itsupport_esp@esplanade.com; ruf:mailto:itsupport_esp@esplanade.com;
j5k5kiurj08t4acak6fq6t9hs9
_globalsign-domain-verification=Q35G1QGmyFWoZOVR8uuRj1JnQAsRNVL7d7J1QSaOWm
oiddi6ongd66dvr1ti8gt2r7oe
d365mktkey=99Mz2z9pUs398ZKhsCGsbZvVJnlwXyM0XvPB80XOV2sx
03D1B59ADBBCAA205A4EFBD1DDC514D8151FF4A3EFDFDC7EAB2D406C1C0EBB60
stripe-verification=02b71be9ccba1ee0012958d012b50f86cfb81e42aae65872dc509d4b7a2a1a33
google-site-verification=u-BQKLOA7xU66HYN1L0fJ7Gx7TRT1RUMCnHiO5gkCxo
aca13m7gm451fdaam1ojalj039
5bh1geudt5facs79258eiu9uco
stripe-verification=6f9bb75b20fbda23ec2cd629259c32a980788009a99e393f1b74ed099658392f
FE0BE6483B09872A29724DF31DAC7598063C98895DC096055E7A47729D22917F
atlassian-domain-verification=X053hd7Z6c28aaCaeQScAqr3XJ7UT/q3UksTeqIn/Wlkr0aboA3Iscs8BBgrRIQp
facebook-domain-verification=6jeqjm0iqh0uj395tywyvxb46nxq76
stripe-verification=7d8c0b28c766dc27b2a14d3b589e89620a9533b72b80e5ec5ea376399e9691ef
sitecore-domain-verification=be99006afe4b4d64b95104fafd53c2b8
docusign=05dfe764-dc68-4d0d-b3b0-260250c3efb4
5vv0nj1hmq2qadm9ulq45gt0oe
g28r0qjac3pn874lbm48vkv0l

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:cust-spf.exacttarget.com include:spf.mailjet.com include:servers.mcsv.net include:spf.mandrillapp.com include:_spf.qualtrics.com ip4:103.13.128.56 ip4:103.15.103.2 ip4:58.185.52.46 ip4:210.24.99.80 ip4:203.125.253.230 ip4:111.223.98.178 ip4:111.223.98.180 ip4:203.116.100.45 ip4:203.126.94.114 ip4:111.223.123.70 ip4:115.42.171.65 ip4:118.201.116.102 -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; ruf=mailto:itsupport_esp@esplanade.com;

policy: quarantine

DKIM

Show 5 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCq7EUxXH+NAEvfGJM1ig80OnOp5YSY77+thuPQyRalzXuZTlfB9lMWQTFC0/GmthddpgXdew3lVlZ31mGTr4…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8ByiqfH6CcpxWez64lON90tcM58yw7NF9P3Ncc6D5wC+MXSuqX4zDw3a4nm7QVn1QkI2jo1w0uKQR…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG8fJ7AePvjh00uATcpEVQRN4Y0vGwwhgqxP3NSNZ7InfPlIj0ywtKn3EHVmb5iFTi/tBb+6F8odMiMgPU…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDA7U/2oQikPWw3mz3l7r1Hu0sIp6sERHgmOdzVYoLuECK1GxA4uI+r6bOAmBaqdJkVXTdbM22stHSK20AIrGDBb8…

selectors probed

Certificate (current)

Go Daddy Secure Certificate Authority - G2

from 2026-01-26 to 2027-02-27

Expires in 284 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.esplanade.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: sameorigin
permissions-policy: microphone=(), camera=()
x-content-type-options: nosniff
content-security-policy: %0d%0a default-src 'self' 'unsafe-inline' 'unsafe-eval' data:;%0d%0a script-src 'nonce-4LM0V+wuXB7STJK1PXUMbA0fCQU=' 'strict-dynamic' 'self' 'unsafe-inline' 'unsafe-eval' http: https:;%0d%0a script-src-elem 'nonce-4LM0V+wuXB7STJK1PXUMbA0fCQU=' 'strict-dynamic' 'self' 'unsafe-inline';%0d%0a frame-src 'self';%0d%0a style-src 'self' 'unsafe-inline' *; %0d%0a style-src-elem 'self' 'unsafe-inline' *; %0d%0a img-src * data:; %0d%0a font-src 'self' * data:; %0d%0a connect-src 'self' *.enzymic.co *.doubleclick.net www.google-analytics.com *.apester.com *.addthis.com *.hotjar.com *.hotjar.io;%0d%0a prefetch-src 'self' *.apester.com;%0d%0a upgrade-insecure-requests;%0d%0a object-src 'none'; %0d%0a base-uri 'none';%0d%0a require-trusted-types-for 'script';
strict-transport-security: max-age=31536000; includeSubDomains