staatstheater.de

.de crawl

First seen 2026-04-27 · Last seen 2026-05-17 · ok HTTP/1.1 200 949 ms crawled 2026-05-04

DE · 91.184.36.72 · AS34225 SpeedPartner GmbH

Reputation 100/100

Classifying

HTML metadata

Title: Startseite | Oldenburgisches Staatstheater
Language: de
Canonical: https://staatstheater.de/startseite

Open Graph

site name: Oldenburgisches Staatstheater

Technology

Server: nginx

Social

Contact

Email

Phone

Address

Oldenburgisches StaatstheaterTheaterwall 19 | 26122 OldenburgZentraleT.0441 22 25 - 0KasseT.0441 22 25 - 111(Di – Sa 10 bis 14 Uhr)E.theaterkasse@staatstheater.deÖffnungszeiten der TheaterkasseDi – Fr 10 bis 18 UhrSa 10 bis 14 Uhr

Registration

Updated

2019-06-07

Name servers

ns1.hucke.net.
ns2.hucke.net.
ns4.hucke.net.
ns5.hucke.net.

DNS records live

NS

ns1.hucke.net
ns2.hucke.net
ns4.hucke.net
ns5.hucke.net

MX

0 staatstheater-de.mail.protection.outlook.com

TXT

v=spf1 a mx include:spf.crsend.com include:spf.protection.outlook.com -all

Verified for

Microsoft 365

Certificate (current)

R12

from 2026-03-19 to 2026-06-17

Expires in 28 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://staatstheater.de/startseite

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak content type protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff, nosniff
content-security-policy: frame-ancestors 'self', default-src 'self' *.spotify.com *.youtube.com *.issuu.com *.google.com; img-src 'self' data: https: *.spotify.com *.youtube.com *.issuu.com *.google.com; script-src 'self' 'unsafe-eval' blob: 'unsafe-inline' *.spotify.com *.youtube.com *.issuu.com *.google.com; style-src 'self' 'unsafe-inline'; font-src 'self' data: *.gstatic.com; frame-src 'self' *.softgarden.io *.spotify.com *.youtube.com *.issuu.com *.google.com; object-src 'self';
strict-transport-security: max-age=31536000; includeSubDomains