indexo.dev

volkstheater-rostock.de

.de crawl

First seen 2026-04-21 · Last seen 2026-05-20 · ok HTTP/1.1 200 3078 ms crawled 2026-05-15

DE · 185.158.13.202 · AS61183 integration.net GmbH

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Startseite | Volkstheater Rostock
Description
Das Volkstheater Rostock: Im Großen Haus, im Ateliertheater, der Kleinen Komödie Warnemünde und beim Volkstheatersommer in der Halle 207 gibt es Futter für Seele, Kopf und Sinne. Die vier Sparten Musiktheater, Schauspiel, Tanztheater und Konzert bilden ein Rückgrat des Kulturlebens der Hansestadt.
Language
de
Generator
spiritec WebCMS für Opernhäuser und Theater

Technology

Server
Apache
Analytics
  • Plausible

Third-party hosts loaded (1)

  • plausible.io×1

Social

Contact

Phone

Registration

Updated
2025-12-23
Name servers
  • pdns11.domaincontrol.com.
  • pdns12.domaincontrol.com.

DNS records live

NS
  • pdns11.domaincontrol.com
  • pdns12.domaincontrol.com
MX
  • 10 aspmx.l.google.com
  • 100 alt3.aspmx.l.google.com
  • 100 alt4.aspmx.l.google.com
  • 20 alt1.aspmx.l.google.com
  • 20 alt2.aspmx.l.google.com
Verified for
  • Google

Email authentication weak

SPF
v=spf1 mx a:mx4.eventim.de include:_spf.google.com include:_spf.spiritec-server.de -all
strict (-all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

Thawte TLS RSA CA G1
from 2026-01-26 to 2027-01-26
Expires in 250 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.volkstheater-rostock.de/

present
  • strict-transport-security
  • content-security-policy
  • content-security-policy-report-only
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • CSP allows unsafe inline scripts/styles
  • missing Permissions Policy
Header values
referrer-policy
same-origin
x-frame-options
DENY
x-content-type-options
nosniff
content-security-policy
default-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; font-src 'self' https: data:; img-src 'self' https: data:; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; manifest-src 'self' https:; media-src 'self' https:; connect-src 'self' https:
strict-transport-security
max-age=31536000; includeSubDomains; preload
content-security-policy-report-only
default-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; font-src 'self' https: data:; img-src 'self' https: data:; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; manifest-src 'self' https:; media-src 'self' https:; connect-src 'self' https:

Links to (4)

Linked from (2)