thurbo.ch

HTML metadata

Title: Die Regionalbahn in der Ostschweiz. | Thurbo
Description: Thurbo ist die drittgrösste Bahnbetreiberin der Schweiz. Zuverlässig und pünktlich in sieben Kantonen für Sie unterwegs.
Language: de-CH
Generator: TYPO3 CMS
Canonical: https://www.thurbo.ch/

Open Graph

title: Willkommen
site name: Thurbo
description: Thurbo ist die drittgrösste Bahnbetreiberin der Schweiz. Zuverlässig und pünktlich in sieben Kantonen für Sie unterwegs.

Technology

Server: Apache

Analytics

Google Tag Manager

Ads

Google Ads (DoubleClick)

Cookie consent

OneTrust

Third-party hosts loaded (5)

cdn.cookielaw.org×2
assets.adobedtm.com×1
securepubads.g.doubleclick.net×1
www.facebook.com×1
www.googletagmanager.com×1

Social

Contact

Phone

+41715540000

DNS records live

NS

ns1a.dodns.net
ns2a.dodns.net

MX

10 thurbo-ch.mail.protection.outlook.com

TXT

Show 5 TXT records

ZA=4Kuofq00mYn6Rz7zVj4VnA==
oD2aQV+7Pufjm10IGbSfbRfGm3xTBvVh33R6kDSfzoI1oH8SIEaf+3DiDISbxVU5LxkWYOchT61w/jH1f7p8Pw==
qiYgnPTLEAFRo49v1sbVjqhwO2f/dJ22uXmBBPJh5OGW6DWVks9lul3HK7e4IykXnq/0h63Oa1PU843rpUPpRg==
b3to1fb93aeck174pbhkqpoboj
obQDwPIyDI+vr2Kyq5WPKGOcEwG+Z852hbCdyibEKlBdUzfIU/yChwW+/6jCSn0CduukkqELXAZbw3pvsQRwWw==

Verified for

Apple
Meta
TeamViewer

Email authentication partial

SPF

v=spf1 +a +mx +ip4:185.169.85.118 +ip4:37.202.1.53 +ip4:194.150.245.7 include:spf.protection.outlook.com include:spf.crsend.com include:agenturserver.de -all

strict (-all)

DMARC

v=DMARC1; p=none; pct=100; rua=mailto:dmarc@thurbo.ch; ruf=mailto:dmarc@thurbo.ch

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCHVl+OxIgVtsgy9xLQqpZjZ4ESgdGtjMD6qEDLeLxak+wLSbPt77Hlros+FmXPEiCnRIRfTgLAgQurwiiJcg…

selectors probed

Certificate (current)

R12

from 2026-05-09 to 2026-08-07

Expires in 67 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.thurbo.ch/

present

strict-transport-security
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing Content Security Policy
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: deny
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=*, battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=*, geolocation=*, gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()
x-content-type-options: nosniff, nosniff
strict-transport-security: max-age=31536000; includeSubDomains