nationaltheatre.org.uk
HTML metadata
Technology
- CDN
- Amazon CloudFront
- Server
- Heroku
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (6)
- cdnjs.cloudflare.com×2
- cookie-cdn.cookiepro.com×2
- cdn.by.wonderpush.com×1
- r1-t.trackedlink.net×1
- unpkg.com×1
- www.googletagmanager.com×1
Social
Registration
- Registrar
- Nom-IQ Limited t/a Com Laude
- Created
- 1998-08-12
- Expires
- 2026-08-12 83 days left
- Updated
- 2025-07-13
- Name servers
-
- ns-1053.awsdns-03.org.
- ns-1910.awsdns-46.co.uk.
- ns-464.awsdns-58.com.
- ns-681.awsdns-21.net.
DNS records live
- NS
-
- ns-1053.awsdns-03.org
- ns-1910.awsdns-46.co.uk
- ns-464.awsdns-58.com
- ns-681.awsdns-21.net
- MX
-
- 0 nationaltheatre-org-uk.mail.protection.outlook.com
- TXT
-
Show 6 TXT records
access-domain-verification=08cddf65247aefc64ebae87659d45c2af38ada5e372bcd98954f8d8cc3d61076CtZEIOuyrCMhJdaNSXxPS4PTd9PmIe4w/I9dju1hRBglCrWQ/nN52E6EL2WKYhM6nYBxOIOO/XdDDv6kQdXFow==peoplexd-domain-verification=DF3517FD2221DFFEA66Fppe-d14f44e3998b1b1646bbkpYJ20bHIqULpGMvDCNDhST/NSCWR1eMKiTbf/tOP3VOQfu+yv1zggAWbyPE67jBvHNxWYXop4DN6ouYGpiGLw==have-i-been-pwned-verification=feba2f6cd69b707f7ad1ebc4402c9424
- Verified for
-
- Apple
- Brevo
- GlobalSign
- Meta
- Microsoft 365
- TeamViewer
Email authentication partial
- SPF
-
v=spf1 ip4:83.244.212.72 ip4:62.209.51.198 ip4:91.207.212.196 ip4:205.220.184.5 include:fdspfeuc.freshemail.io include:spf.protection.outlook.com include:spf.sendinblue.com include:eu.rp.oracleemaildelivery.com include:mailgun.org include:spfa.cpmails.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:dmarc_agg@vali.email; ruf=mailto:dmarc_agg@vali.email;policy: none (monitoring only) - DKIM
-
Show 5 DKIM selectors
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDhG1V+EZDszfmO4KatfVxyyFduMbCjgxmxvK1bXz/748xWj/aDdrWI+GB3UWUUrWUTnFq9qrpAmw6+FjKOWH… - k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA… - mail:
k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmK5UB/mKXx5rxjl1D9CRJQr0RoRx6xQauGaPt/HwQYAzv//mDEqmrFDGqYq5C27nmW3TgMQ3D+E3q5o+p… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCvTb4ZFMyx9dixrJWWFL4JcnuxjeaRox4nJ7JqJNVfLiOkxyXrro1sGbRxmmYgx4YvpZVhcrsN0N8hM7px0Vb8nZ…
selectors probed - selector1:
Certificate (current)
Amazon RSA 2048 M01
Expires in 127 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy-report-only
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- missing Content Security Policy
Header values
- referrer-policy
no-referrer- x-frame-options
DENY- permissions-policy
geolocation=(self), midi=(), sync-xhr=(), camera=(), microphone=(), magnetometer=(), gyroscope=(), fullscreen=(), payment=()- x-content-type-options
nosniff- strict-transport-security
max-age=31536000- content-security-policy-report-only
default-src 'self'; img-src 'self' data: https://images.nationaltheatre.org.uk/ https://secure.gravatar.com/ https://maps.gstatic.com/ https://maps.googleapis.com/ https://cookie-cdn.cookiepro.com/ https://www.facebook.com/ https://secure.adnxs.com/ https://map.go.affec.tv/ https://match.adsrvr.org/ https://www.pages03.net/ https://t.co/ https://analytics.twitter.com/ https://www.tripadvisor.co.uk/ https://e1.emxdgt.com/ https://www.google.com/ https://www.google.co.uk/ https://sp.analytics.yahoo.com/ https://www.google-analytics.com/ https://*.doubleclick.net/ https://adservice.google.com/ https://img.youtube.com/; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdnjs.cloudflare.com/ https://www.googletagmanager.com/ https://maps.googleapis.com/ https://cookie-cdn.cookiepro.com/ https://analytics.tiktok.com/ https://connect.facebook.net/ https://ads.avocet.io/ https://i.ctnsnet.com/ https://www.clarity.ms/ https://static.ads-twitter.com/ https://connect.facebook.net/ https://a