indexo.dev

pierrot-bg.com

.com crawl

First seen 2026-06-04 · Last seen 2026-06-04 · ok HTTP/1.1 200 487 ms crawled 2026-06-04

BG · 91.196.124.79 · AS201200 SuperHosting.BG Ltd.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Държавен куклен театър - Стара Загора
Description
На сцената на Държавен куклен театър - Стара Загора са поставени над 300 постановки от български и световни автори, пишещи за деца и възрастни.
Language
bg
Canonical
https://pierrot-bg.com/
Feeds

Open Graph

url
https://pierrot-bg.com/
title
Държавен куклен театър - Стара Загора
site name
Държавен куклен театър - Стара Загора
description
На сцената на Държавен куклен театър - Стара Загора са поставени над 300 постановки от български и световни автори, пишещи за деца и възрастни.

Technology

Server
Apache
Analytics
  • Google Tag Manager

Third-party hosts loaded (1)

  • www.googletagmanager.com×2

Social

Contact

Phone

Registration

Registrar
PDR Ltd. d/b/a PublicDomainRegistry.com
Created
2005-06-14
Expires
2026-06-14 9 days left
Updated
2025-05-16
Name servers
  • ns25.superhosting.bg
  • ns26.superhosting.bg

DNS records live

NS
  • ns25.superhosting.bg
  • ns26.superhosting.bg
MX
  • 0 pierrot-bg.com

Email authentication partial

SPF
v=spf1 +a +mx +ip4:91.196.124.13 +ip4:91.196.125.13 +include:smtp-out.spf.superhosting.bg +include:vega.spf.superhosting.bg ~all
softfail (~all)
DMARC
v=DMARC1; p=none; rua=mailto:webmaster@pierrot-bg.com
policy: none (monitoring only)
DKIM
  • default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwBcnfrBzj2AwVz/AVW8HHYGf0sI25oZTMTF1xDjpXw64E5jFfdBl4bdQseLGBHFUPoW0/BDrt2UcP…
selectors probed

Certificate (current)

R13
from 2026-04-25 to 2026-07-24
Expires in 49 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://pierrot-bg.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
microphone=(), camera=()
x-content-type-options
nosniff
content-security-policy
frame-ancestors 'self'; upgrade-insecure-requests; default-src 'self' https: data: http://adsys.insert.bg; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' data: blob: 'report-sample' www.glami.bg glamipixel.com; script-src-elem 'self' 'unsafe-inline' https: data: blob:; style-src 'self' https: 'unsafe-inline'; img-src * data: blob:; base-uri 'self' www.glami.bg glamipixel.com; object-src 'self' blob:; connect-src 'self' https: wss: http://localhost:8001; report-uri /csp_log.php
strict-transport-security
max-age=31536000; includeSubDomains; preload

Links to (4)

Linked from (1)