whatsonstage.com

HTML metadata

Title

Theatre shows, special offers, news, reviews and more | WhatsOnStage

Description

Find London theatre tickets for current shows at West End and Off-West End theatres. Read theatre reviews, news, and get discount tickets at WhatsOnStage

Language

en-US

Generator

All in One SEO Pro (AIOSEO) 4.9.5.2

Canonical

https://www.whatsonstage.com/

Feeds

Open Graph

url: https://www.whatsonstage.com/
title: Theatre shows, special offers, news, reviews and more | WhatsOnStage
locale: en_US
site name: WhatsOnStage.com –
description: Find London theatre tickets for current shows at West End and Off-West End theatres. Read theatre reviews, news, and get discount tickets at WhatsOnStage

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager

Ads

Google Ads (DoubleClick)

Third-party hosts loaded (4)

stats.wp.com×2
gmpg.org×1
securepubads.g.doubleclick.net×1
www.googletagmanager.com×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

1997-04-10

Expires

2027-04-11 326 days left

Updated

2026-04-11

Name servers

dean.ns.cloudflare.com
tricia.ns.cloudflare.com

DNS records live

NS

dean.ns.cloudflare.com
tricia.ns.cloudflare.com

MX

1 whatsonstage-com.mail.protection.outlook.com

TXT

Show 9 TXT records

facebook-domain-verification=k2pe1e3b9osft0f5exf62o2tcp8t92
google-site-verification=5S02q40a8D8l5xcueXt3NNm8CX6XrBHWBRh_Z1rmHs0
google-site-verification=kWZwtrHueZ2CBjPkkP3X-fgiG-nnys7yihTSEg1yMJI
knowbe4-site-verification=85511fda0eb4f7280ba6f9520dc662ef
MS=ms99751110
VF#F%ws0jDgMg9xhHVaclpP@2&NRP4IvD99Jn61
_globalsign-domain-verification=7zI9EijsozszSPpFIaLPW0iboZKROalEbDOGeS1B2u
_globalsign-domain-verification=jJoyi6D96ll9YZVNruVpQ8YkW4d8-s08ldwzHDKOVR
_pki-validation=8446-64D0-C983-CBB9-8CA2-6757-589D-0354

Email authentication strong

SPF

v=spf1 mx include:spf.protection.outlook.com include:_spf.automattic.com include:aspmx.pardot.com include:_spf.salesforce.com include:mailgun.org ip4:74.200.12.0/32 ip4:74.200.12.233 ip4:74.200.12.234 ip4:74.200.12.235 ip4:74.200.12.236 ip4:74.200.12.237 ip4:74.200.12.238 ip4:74.200.12.240 ip4:74.200.12.241 ip4:74.200.12.250 ip4:95.129.188.196/30 ip4:95.129.188.164 ip4:95.129.188.197 ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; ruf=mailto:ruf@whatsonstage.com; rua=mailto:rua@whatsonstage.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucCWgk8MU4lwWxPsxO5cMFFclkrYv2ClIUumd4TU6OAVeKYFUTcDBN7dYGnijQLm9iiZgndfcwKeVp…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseQzAQ4kteqpp2MyGlorMCyJdMf6hsI6xXmUWfDsgVJoF5W8/jxObVeDA974iPW27LhBUk+w/OnvK1…

selectors probed

Certificate (current)

WE1

from 2026-04-22 to 2026-07-21

Expires in 63 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.whatsonstage.com/

present

strict-transport-security
x-frame-options
permissions-policy

findings

missing Content Security Policy
missing content type protection
missing Referrer Policy

Header values

x-frame-options: SAMEORIGIN
permissions-policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")
strict-transport-security: max-age=31536000;includeSubdomains;preload