nhl.com

HTML metadata

Title: Official Site of the National Hockey League | NHL.com
Description: The official National Hockey League website including news, rosters, stats, schedules, teams, and video.
Language: en
Canonical: https://www.nhl.com/

Open Graph

url: https://www.nhl.com/
title: Official Site of the National Hockey League | NHL.com
description: The official National Hockey League website including news, rosters, stats, schedules, teams, and video.

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Ads

Google Ads (DoubleClick)
Magnite

Cookie consent

OneTrust

Fonts

Google Fonts

Third-party hosts loaded (10)

media.d3.nhle.com×90
fonts.googleapis.com×5
public.flourish.studio×2
securepubads.g.doubleclick.net×2
storage.googleapis.com×2
cdn.cookielaw.org×1
fonts.gstatic.com×1
micro.rubiconproject.com×1
static.adsafeprotected.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Moniker Online Services LLC

Created

1994-10-18

Expires

2026-10-17 150 days left

Updated

2025-11-25

Name servers

ns0073.secondary.cloudflare.com
ns0202.secondary.cloudflare.com

DNS records live

NS

ns0073.secondary.cloudflare.com
ns0202.secondary.cloudflare.com

MX

10 esa1.hc3405-36.iphmx.com
10 esa2.hc3405-36.iphmx.com

TXT

Show 17 TXT records

adobe-idp-site-verification=b1a9bddb8ba893901680eb1190803ff68ea897d8f363d2b7fd166a0d16297e13
jamf-site-verification=0GCsyAA2kXt0fmCwZqV30A
ca3-c478ee51ce344226b900f30e1a8f77f4
paloaltonetworks-site-verification=dd83eb3aa7ee9dc5d085d5363fcad6245aa452cba856dddb040547d77ad1e3e5
b1v2tq99mvj9thchp6gvyqjlk2wb4d0k
masv=NnueVRLPRXqSIyfCZlkPUPOzifiFTqlV
anthropic-domain-verification-jjynj9=aZip6yRrMeIe772gfKvdnIfGD
facebook-domain-verification=auaz3u8n1q4spli5cgbwadmfcehaym
_si92qe9qh8redgwvfquu8g8cii9aeup
gnIzEWRy2xVqYXGoscbcm8VBBBC4LVLWqJWNfU650lhMwMnHJ7Rmdk9rUTNTKHYJP0sPvq+UfZhZXwD9cWAO1A==
docusign=f1a014da-84c9-4688-a80f-9489e46835b6
apple-domain-verification=DfS0kKbWaeVQrWTW
autodesk-domain-verification=Jvd8BjDbdtmfHGs_k7xJ
atlassian-domain-verification=/phjtz/PLWzV0AammAS6OHOgPQeAJyj8gOmOj7lGTJcgiRNn8i9/MOnELR/aJeZS
Foxit-domain-verification=e22b13dcec7cab8bf10b8f5ee0319dfe
_7nayhmkq5z2xvfi6lj7blyt9bbx09c9
google-site-verification=_yup8HiUiA_uo4bg2hQoij63dP4oSvmtRcNE6q7i6NQ

Email authentication strong

SPF

v=spf1 mx ip4:69.72.18.20 ip4:69.72.16.20 ip4:108.166.45.120 ip4:50.31.43.169 ip4:139.138.57.24 ip4:216.71.146.234 ip4:191.237.4.149 ip4:104.209.35.28 include:amazonses.com include:spf.protection.outlook.com include:_spfprod.ngpvan.com ~all

softfail (~all)

DMARC

v=DMARC1;p=reject;fo=1;rua=mailto:dmarc@nhl.com;ruf=mailto:dmarc@nhl.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDX7HCqFLln+UsTeXJq25iXKG+gJlc15Jqg06UJj6KzA73HlDIMJzhkS7DgVDJRPbFLIEKKjGrPqZ5YSoTN2K…

selectors probed

Certificate (current)

WE1

from 2026-04-16 to 2026-07-15

Expires in 56 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.nhl.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: camera=(self), geolocation=(self), microphone=(self)
x-content-type-options: nosniff
content-security-policy: default-src https: blob: * 'unsafe-inline' 'unsafe-eval'; script-src https: blob: 'unsafe-inline' 'unsafe-eval'; connect-src https: 'unsafe-inline'; img-src https: data: blob: 'unsafe-inline'; frame-src https:; style-src https: 'unsafe-inline'; font-src https: data: 'unsafe-inline';
strict-transport-security: max-age=31536000; includeSubDomains