tiroler-festspiele.at

.at crawl

First seen 2026-05-15 · Last seen 2026-05-20 · ok HTTP/1.1 200 3091 ms crawled 2026-05-20

DE · 46.225.129.207 · AS24940 Hetzner Online GmbH

Reputation 100/100

Classifying

HTML metadata

Title
Tiroler Festspiele Erl – Home
Language
de
Canonical
https://www.tiroler-festspiele.at
Translations
  • de
  • en

Open Graph

url
https://www.tiroler-festspiele.at
title
Tiroler Festspiele Erl – Home
locale
de_AT
site name
Tiroler Festspiele Erl

Technology

Server
nginx

Third-party hosts loaded (1)

  • tfestorage.nbg1.your-objectstorage.com×9

Social

Contact

Email
Phone
Address
Mühlgraben 56a, 6343, Erl, AT

DNS records live

NS
  • ns1.kufnet.at
  • ns2.kufnet.at
MX
  • 10 mx-01-eu-central-1.prod.hydra.sophos.com
  • 15 mx-02-eu-central-1.prod.hydra.sophos.com
TXT
  • sophos-domain-verification=6cad6cbc3333039dab315b5eb26963ac05805449
  • sophos-domain-verification=b9f163d491e0ab37e37ac00873e096c7d01cbc28512d8a6fef8e33e1f6cb35e3
Verified for
  • Brevo
  • Google
  • Microsoft 365

Email authentication strong

SPF
v=spf1 a mx a:mx4.eventim.de ip4:213.182.224.0/25 ip4:80.93.47.56/29 ip4:46.4.164.132/32 ip6:2a03:c680:2000::/64 include:spf.nl2go.com include:_spf.acriba.at include:_spf_eucentral1.prod.hydra.sophos.com include:spf.protection.outlook.com -all
strict (-all)
DMARC
v=DMARC1; p=reject; pct=100; rua=mailto:dmarc@tiroler-festspiele.at; ruf=mailto:dmarc@tiroler-festspiele.at; adkim=r; aspf=r; fo=1; ri=86400
policy: reject (enforced)
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01pRhJ3gRTNzO6mSOclb2cAU0UMGbShH6B8IuwDsIdrBu9CjVY+YlcrktrRYcG2uoXxm5TXdGty4CA…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0geZ/tTGPuyZur/FhMSbkbEHFWymytTB8hcBGSlS//faa16U9rK8vDQx8djacDADfWAHQg4+S1+jZD…
selectors probed

Certificate (current)

R13
from 2026-05-19 to 2026-08-17
Expires in 88 days

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.tiroler-festspiele.at/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
camera=(), microphone=(), geolocation=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://tfestorage.nbg1.your-objectstorage.com https://www.google-analytics.com https://www.facebook.com; media-src 'self' https://tfestorage.nbg1.your-objectstorage.com; font-src 'self'; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.facebook.com https://*.conversionsapigateway.com https://*.us-central1.run.app; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://consent.youtube.com; object-src 'none'; base-uri 'self'; form-action 'self' https://tickets.tiroler-festspiele.at;
strict-transport-security
max-age=31536000; includeSubDomains

Links to (11)

Linked from (1)