tq-ebike.com

.com crawl

First seen 2026-04-13 · Last seen 2026-05-17 · ok HTTP/1.1 200 596 ms crawled 2026-05-06

DE · 138.199.233.16 · AS24940 Hetzner Online GmbH

Reputation 100/100

Classifying

HTML metadata

Title: TQ E-Bike | The TQ-HPR E-BIKE SYSTEMS
Description: Discover the smallest, quietest, and lightest systems in their class. The TQ-HPR E-Bike Systems take your biking experience to the next level.
Language: en-GB
Canonical: https://www.tq-ebike.com/en/

Open Graph

title: The TQ-HPR E-BIKE SYSTEMS
site name: TQ E-Bike
description: Discover the smallest, quietest, and lightest systems in their class. The TQ-HPR E-Bike Systems take your biking experience to the next level.
updated time: 1774444249

Technology

Server: Apache

Cookie consent

Usercentrics

Third-party hosts loaded (1)

app.usercentrics.eu×1

Social

Registration

Registrar

InterNetX GmbH

Created

2022-01-18

Expires

2027-01-18 244 days left

Updated

2026-01-19

Name servers

nsa8.schlundtech.de
nsb8.schlundtech.de
nsc8.schlundtech.de
nsd8.schlundtech.de

DNS records live

NS

nsa8.schlundtech.de
nsb8.schlundtech.de
nsc8.schlundtech.de
nsd8.schlundtech.de

MX

Email authentication strong

SPF: v=spf1 -all
strict (-all)
DMARC: v=DMARC1; p=reject; sp=reject
policy: reject (enforced) · sp=reject
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-03-12 to 2026-06-10

Expires in 22 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.tq-ebike.com/en/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: same-origin
permissions-policy: geolocation=(self), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), fullscreen=(self), picture-in-picture=(self)
x-content-type-options: nosniff
content-security-policy: default-src *; style-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval' blob:; font-src 'self' data: https://*.gstatic.com/ https://fonts.googleapis.com/; img-src * data:; media-src 'self';object-src 'none'; base-uri 'self';frame-ancestors 'self' https://www.jobs-im-allgaeu.de;form-action 'self' https://*.tq-group.com https://*.facebook.com;
strict-transport-security: max-age=31536000; includeSubDomains; preload