hcthurgau.ch

.ch crawl

First seen 2026-05-31 · Last seen 2026-06-01 · ok HTTP/1.1 200 554 ms crawled 2026-06-01

DE · 23.88.95.37 · AS24940 Hetzner Online GmbH

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: HC Thurgau | Eishockeyclub HC Thurgau
Language: de
Generator: TYPO3 CMS
Canonical: https://www.hcthurgau.ch/

Open Graph

url: https://www.hcthurgau.ch/
title: HC Thurgau – Offizielle Website
image:url: https://www.hcthurgau.ch/fileadmin/_processed_/b/a/csm_hct_header_Facebook_b2dbd6a68c.jpg
site name: Eishockeyclub HC Thurgau
description: Der Club entstand aus den Vereinen EHC Frauenfeld, EHC Kreuzlingen und EHC Weinfelden mit dem Ziel, den Thurgauer Eishockeyfans eine starke regionale Eishockeymannschaft bieten zu können, die in der Nationalliga spielt.

Technology

Server: Apache

Third-party hosts loaded (3)

banner.admiral.at×1
platform.contentfry.com×1
www.swisslos.ch×1

Social

DNS records live

NS

ns1a.dodns.net
ns2a.dodns.net

MX

0 hcthurgau-ch.mail.protection.outlook.com

Verified for

Microsoft 365

Email authentication partial

SPF

v=spf1 include:agenturserver.de include:spf.protection.outlook.com a:mx4.eventim.de -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarcreport@hcthurgau.ch;

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC2d7VGLmx4VFdPl3NCfXF4Egzp6AWdQTbhurGUyLKECu015dYhTVwjOBaCaUqCd92WHD9hciuBktQ4gAPTFX…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/hRLIpP+TbZK0tWYoG7FMYGelAjdmMPL/lQ3fJZ8XiAE1FZWtBzVkcTD2dHr48vaiaFkDk/M0734B…

selectors probed

Certificate (current)

R13

from 2026-05-06 to 2026-08-04

Expires in 63 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.hcthurgau.ch/

present

strict-transport-security
x-frame-options
x-content-type-options
referrer-policy

findings

missing Content Security Policy
weak content type protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: deny
x-content-type-options: nosniff, nosniff
strict-transport-security: max-age=31536000; includeSubDomains