indexo.dev

hamburg-airport.de

.de crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 1038 ms crawled 2026-05-18

DE · 18.156.75.73 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
Willkommen am HAM - Hamburg Airport
Description
Offizielle Website des Hamburg Airport - Informationen zu Abflug, Ankunft & Flugplan - Parken & Anreise - Shops, Gastro & Services. Entdecken Sie den Hamburger Flughafen!
Language
de
Canonical
https://www.hamburg-airport.de/de
Translations
  • en

Open Graph

locale
de

Technology

Server
myracloud
Cookie consent
  • Cookiebot

Third-party hosts loaded (4)

  • cdn.jsdelivr.net×3
  • code.etracker.com×1
  • consent.cookiebot.com×1
  • js.adsrvr.org×1

Social

Registration

Updated
2023-11-15
Name servers
  • ns1-36.azure-dns.com.
  • ns2-36.azure-dns.net.
  • ns3-36.azure-dns.org.
  • ns4-36.azure-dns.info.

DNS records live

NS
  • ns1-36.azure-dns.com
  • ns2-36.azure-dns.net
  • ns3-36.azure-dns.org
  • ns4-36.azure-dns.info
TXT
  • vrq/HnHwNVikeSUTGFPUGjepDEtZ+B0V/Wr5pZ+8vFI=
Verified for
  • GlobalSign

Email authentication no MX

SPF
v=spf1 ip4:193.28.72.0/21 mx -all
strict (-all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R12
from 2026-05-11 to 2026-08-09
Expires in 80 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.hamburg-airport.de/de

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
DENY
x-content-type-options
nosniff
content-security-policy
connect-src wss: blob: data: https:; child-src blob: data: https:; style-src 'self' 'unsafe-inline' blob: data: https:; script-src 'unsafe-inline' 'unsafe-eval' 'self' blob: data: https:; object-src 'self'; worker-src blob: data: https:; media-src 'self' blob: data: https:; frame-src blob: data: https:; img-src https: blob: data: android-webview-video-poster:; default-src 'self' https:; font-src 'self' https: blob: data: safari-extension://*
strict-transport-security
max-age=31536000

Links to (7)

Linked from (4)