theaterdo.de

.de crawl

First seen 2026-04-14 · Last seen 2026-05-14 · ok HTTP/1.1 200 943 ms crawled 2026-05-07

DE · 46.20.39.110 · AS24961 WIIT AG

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Start: Theater Dortmund
Description: Willkommen im Theater Dortmund
Language: de
Generator: TYPO3 CMS
Canonical: https://www.theaterdo.de/

Technology

Fonts

Adobe Fonts

Third-party hosts loaded (1)

use.typekit.net×1

Social

Contact

Email

ticketservice@theaterdo.de

Phone

Registration

Updated

2026-02-17

Name servers

helium.ns.hetzner.de.
hydrogen.ns.hetzner.com.
oxygen.ns.hetzner.com.

DNS records live

NS

helium.ns.hetzner.de
hydrogen.ns.hetzner.com
oxygen.ns.hetzner.com

MX

1 mail.stadtdo.de
2 mail2.stadtdo.de

TXT

cisco-ci-domain-verification=1ac69659ddcea9b7824db79c21ad936c95b2f5fb237621480f5ddd856e8e076c

Email authentication partial

SPF: v=spf1 a mx ipv4=46.20.39.110 a:mail.stadtdo.de a:mail2.stadtdo.de a:domgate01.stadtdo.de a:domgate02.stadtdo.de a:mx4.eventim.de -all
strict (-all)
DMARC: v=DMARC1; p=none;
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

from 2026-04-07 to 2026-07-06

Expires in 48 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.theaterdo.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' https:; script-src 'self' https: blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src * data: blob:; font-src 'self' https: data:; connect-src *; media-src 'self' https: blob:; object-src 'none'; frame-ancestors *; upgrade-insecure-requests
strict-transport-security: max-age=31536000; includeSubDomains; preload