aeliadutyfree.com

.com crawl

First seen 2026-05-15 · Last seen 2026-05-20 · ok HTTP/1.1 200 2287 ms crawled 2026-05-20

US · 151.101.65.124 · AS54113 Fastly, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Aelia Duty Free - Welcome | Aelia Duty Free
Description: Pre-order and wide range of duty free products with Click and Collect service. Information about Aelia's shops in airports and customs duty.
Language: en

Technology

CDN: Cloudflare
CMS: Gatsby

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (3)

cdn.cookielaw.org×2
js.datadome.co×1
www.googletagmanager.com×1

Registration

Registrar

Nameshield SAS

Created

2009-02-06

Expires

2027-02-06 261 days left

Updated

2026-02-04

Name servers

howard.ns.cloudflare.com
saanvi.ns.cloudflare.com

DNS records live

NS

howard.ns.cloudflare.com
saanvi.ns.cloudflare.com

MX

0 mxa-0034c801.gslb.pphosted.com
0 mxb-0034c801.gslb.pphosted.com

TXT

1|www.game-aeliadutyfree.com

Verified for

Microsoft 365

Email authentication strong

SPF: v=spf1 include:spf.aeliadutyfree.com include:em9795.aeliadutyfree.com -all
strict (-all)
DMARC: v=DMARC1; p=reject; rua=mailto:w4vtegac@ag.eu.dmarcadvisor.com;
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-03-31 to 2026-06-29

Expires in 40 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.aeliadutyfree.com/welcome/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: worker-src blob:; font-src heapanalytics.com eu.heapanalytics.com fonts.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.fontawesome.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com geo.captcha-delivery.com *.hotjar.com *.voiceflow.com *.clarity.ms *.contentsquare.net heapanalytics.com csxd.aeliadutyfree.fr csxd.aeliadutyfree.co.uk csxd.aeliadutyfree.ch *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.mage
strict-transport-security: max-age=0; includeSubDomains