theaterpand.nl
HTML metadata
Technology
- Server
- Apache
- Stack
- PHP
- Fonts
-
- Google Fonts
Third-party hosts loaded (5)
- www.tickitz.app×18
- fonts.googleapis.com×2
- fonts.gstatic.com×1
- plausible.dewebmakers.nl×1
- theaterpand.tickitz.app×1
DNS records live
- NS
-
- ns1.dewebmakers.nl
- ns2.dewebmakers.nl
- MX
-
- 10 mail.theaterpand.nl
- Verified for
-
Email authentication partial
- SPF
-
v=spf1 include:_spf.strato.com include:spf.dewebmakers.nl ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:rua@dmarc.dewebmakers.nl; aspf=r;policy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
E7
Expires in 69 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
same-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.tickitz.app https://www.gstatic.com https://*.google.com https://plausible.dewebmakers.nl; object-src 'self'; style-src 'self' 'unsafe-inline' https://*.tickitz.app https://www.gstatic.com https://fonts.googleapis.com https://plausible.dewebmakers.nl https://devix.dewebmakers.nl; img-src 'self' data: https://*.tickitz.app https://plausible.dewebmakers.nl https://*.ytimg.com; media-src 'self' blob:; frame-src 'self' https://*.google.com https://waf.dewebmakers.nl https://plausible.dewebmakers.nl https://www.youtube.com; font-src 'self' data: https://*.tickitz.app https://fonts.googleapis.com https://fonts.gstatic.com https://devix.dewebmakers.nl; connect-src 'self' blob: https://*.googleapis.com https://plausible.dewebmakers.nl https://www.google.com;- strict-transport-security
max-age=63072000; includeSubDomains
Linked from (1)
Use this data via API
Everything on this page for theaterpand.nl is available as JSON from the indexo.dev REST & MCP API.
curl "https://indexo.dev/api/v1/domains/theaterpand.nl" \ -H "X-API-Key: idx_..."
Add a badge to your site
Own theaterpand.nl? Show it's tracked on indexo.dev and link visitors straight to this page.
<a href="https://indexo.dev/theaterpand.nl" target="_blank" rel="noopener"> <img src="https://indexo.dev/theaterpand.nl/badge.svg" alt="indexo.dev — theaterpand.nl"> </a>