indexo.dev

thlonline.com

.com crawl dns

First seen 2026-04-13 · Last seen 2026-05-17 · ok HTTP/1.1 200 3916 ms crawled 2026-05-06

AU · 13.238.44.164 · AS16509 Amazon.com, Inc.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Welcome to Tourism Holdings Limited
Description
Tourism Holdings Limited (thl) is New Zealand's premier tourism company and is listed on the New Zealand Stock Exchange (NZX: THL).
Language
en
Canonical
https://www.thlonline.com

Technology

Analytics
  • Google Tag Manager

Third-party hosts loaded (5)

  • thl.widen.net×40
  • maxcdn.bootstrapcdn.com×3
  • ajax.googleapis.com×1
  • www.googletagmanager.com×1
  • yourir.info×1

Social

Contact

Email
Phone

Registration

Registrar
Amazon Registrar, Inc.
Created
2000-10-13
Expires
2026-10-13 147 days left
Updated
2025-09-08
Name servers
  • ns-1163.awsdns-17.org
  • ns-1828.awsdns-36.co.uk
  • ns-441.awsdns-55.com
  • ns-634.awsdns-15.net

DNS records live

NS
  • ns-1163.awsdns-17.org
  • ns-1828.awsdns-36.co.uk
  • ns-441.awsdns-55.com
  • ns-634.awsdns-15.net
MX
  • 5 thlonline-com.mail.protection.outlook.com
TXT
Show 4 TXT records
  • shopify-verification-code=URVNVfEyiFAs22j2hJDJIjxHrRHXQj
  • apple-domain-verification=RvhuCpmtHv9yol64
  • apple-domain-verification=a_0VcL7sxdZE6EKxSn_9TWa6z5YOriByshII_WcklUg
  • atlassian-domain-verification=H5ZknoFlKPedWtw7PHoafMZMeOaL8IUGDzR2fCXlXutnlvQFzUiEkKIagl3sd18E

Email authentication strong

SPF
v=spf1 mx ip4:203.25.40.73 ip4:52.64.59.152 include:thlspf.thlonline.com include:servers.mcsv.net include:mailchimp.thlonline.com include:45456781.spf03.hubspotemail.net include:spf.protection.outlook.com -all
strict (-all)
DMARC
v=DMARC1; p=reject; rua=mailto:itsecurity@thlonline.com; ruf=mailto:itsecurity@thlonline.com; fo=1; pct=100
policy: reject (enforced)
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDL9vnWaSq2TNNYzsjlYlUxJ0wXuSqdefFcQp+g+XEaP2lNeArV+Yk+zYsoDQIfkXtCX3v+X/oESVZztZ9jMU…
  • k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYsxahT5pnoU0LtOdg5CgcWMXcS7C28yNvkYtTzzJa/rt9Fvno4y2V+Gahz7ZxaiASDcd7ms9ju24z+IGn…
  • s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDzPBqw3za8+hE8VRmpPuFbHuKcVbxGbxGsOO2SejnNqCQOXD3iFLAqUGvLzAsXQ3a7ANm/TqeMjsvww104abx+AQ…
selectors probed

Certificate (current)

Amazon RSA 2048 M01
from 2026-04-19 to 2026-11-03
Expires in 168 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.thlonline.com/

findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy

Links to (19)

Linked from (10)