massport.com

HTML metadata

Title: Massachusetts Port Authority | Massport
Description: Welcome to Massport. We are Boston Logan, Flynn Cruiseport Boston, Conley Terminal, Worcester Regional Airport and Hanscom Field.
Language: en
Generator: Drupal 11 (https://www.drupal.org)
Canonical: https://www.massport.com/

Technology

Server: nginx
CMS: Drupal

Analytics

Google Tag Manager

Third-party hosts loaded (2)

translate.google.com×1
www.googletagmanager.com×1

Social

Contact

Address: st googleTranslateElement = document.getElementById('google_translate_element'); }© 1999

Registration

Registrar

Network Solutions, LLC

Created

1996-01-02

Expires

2031-01-01 1688 days left

Updated

2025-11-04

Name servers

auth1.dns.cogentco.com
auth2.dns.cogentco.com

DNS records live

NS

auth1.dns.cogentco.com
auth2.dns.cogentco.com

MX

10 us-smtp-inbound-1.mimecast.com
10 us-smtp-inbound-2.mimecast.com

TXT

Show 11 TXT records

sprout-social-2f20b8aa-dd69-410e-af25-8bbdcad797a3
ZOOM_verify_hvQYvGxOT5W8ksAMKq6X3Q
docusign=07e982d4-9982-4582-b4b4-eae2e3ef28dd
0ed1fe018a34607592d0ef4300b95090253bf74505
google-site-verification=pNxxiCFqddNqshuLHFcFFABnTbDErtIQ0Upcv_UDdBY
apple-domain-verification=YydNiueMnlR26K38
linkedin-site-verification=b7f919e1-1fed-4b1a-a328-cfc50c0ae611
docusign=b7a3bce3-2578-4747-8e6f-b254c226d23a
mandrill_verify._H5Wpepr1D1alSIs44lJag
MS=ms90834884
asv=c113e499dce24d7303fcca41540075ca

Email authentication strong

SPF

v=spf1 ip4:23.21.109.197 ip4:23.21.109.212 ip4:147.160.167.0/26 ip4:23.21.109.0/26 ip4:52.49.235.189 ip4:52.49.201.246 ip4:162.246.160.0/26 ip4:62.13.128.0/19 ip4:72.52.72.32/28 include:_netblocks.mimecast.com include:amazonses.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:5ba62c1e666c792@rep.dmarcanalyzer.com; ruf=mailto:5ba62c1e666c792@for.dmarcanalyzer.com; fo=1;

policy: quarantine

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

GlobalSign Atlas R3 DV TLS CA 2026 Q2

from 2026-04-27 to 2026-07-26

Expires in 68 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.massport.com/

present

strict-transport-security
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy

findings

missing Content Security Policy
weak frame protection
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: ALLOW-FROM https://login.microsoftonline.com/
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy-report-only: default-src 'self' blob: data: *.massport.com *.prod.acquia-sites.com ; script-src 'self' 'unsafe-inline' *.google.com *.googleapis.com *.newrelic.com bam.nr-data.net *.youtube.com *.youtube-nocookie.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.pointr.cloud *.bing.com *.pinimg.com *.facebook.net *.teads.tv *.aocadp.com; object-src 'self' *.nr-data.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com www.gstatic.com *.massport.com *.prod.acquia-sites.com; img-src 'self' 'unsafe-inline' *.gstatic.com *.massport.com data: *.prod.acquia-sites.com bos.resources.aocdms.com *.googleapis.com *.google.com *.bing.com *.teads.tv *.pinterest.com *.facebook.com *.facebook.net; media-src 'self' 'unsafe-inline' 'unsafe-eval' *.massport.com *.prod.acquia-sites.com *.youtube-nocookie.com; frame-src 'self' *.google.com *.atlassian.net *.prod.acquia-sites.com *.nr-data.net *.youtube.com *.youtube-nocookie.com *.items.aero *.pinterest.com; child-src 'self' *.massport.com *.prod.