aerocivil.gov.co

HTML metadata

Title: Aeronáutica Civil
Description: La Unidad Administrativa Especial de Aeronáutica Civil es el organismo estatal encargado del control y regulación de la aviación civil en Colombia
Language: es
Canonical: https://www.aerocivil.gov.co/

Open Graph

url: https://www.aerocivil.gov.co/
title: Aeronáutica Civil
locale: es_la
site name: Aerocivil
description: La Unidad Administrativa Especial de Aeronáutica Civil es el organismo estatal encargado del control y regulación de la aviación civil en Colombia
locale:alternate: es_es

Technology

Analytics

Google Tag Manager

Third-party hosts loaded (3)

img.youtube.com×11
www.googletagmanager.com×2
www.google.com×1

Social

Contact

Email

Phone

Address

Avenida El Dorado 103-15PBX:+57 (601) 425 1000

DNS records live

NS

bog106.aerocivil.gov.co
bog120.aerocivil.gov.co

MX

0 aerocivil-gov-co.mail.protection.outlook.com

TXT

j93xV36Zk/qJ0QAYlIrZtMyyxkLkpKwzSNeafH2Op5a1VTQau645xM2FT9bVmhW5YD7137o2eQDdQ1zTCY5XuA==
bcf140fae06632aac7feec02d77737
9473f386b5a02e14a3445a06cd03ad

Verified for

GlobalSign
Google
Google Workspace
Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:181.119.85.4 ip4:181.119.85.8 ip4:181.119.85.64 ip4:181.119.85.115 ip4:181.119.85.0/25 ip4:135.119.192.105 ip4:152.200.189.32/27 ip4:186.30.117.96/27 include:spf.protection.outlook.com include:spf.mandrillapp.com include:rp.oracleemaildelivery.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:aeronauticacivildecolombia1@us.cp-dmarc.com; ruf=mailto:aeronauticacivildecolombia1@us.cp-dmarc.com

policy: quarantine

DKIM

selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC9nH5QzOibqrFZWvmvvAPrTBS3xauKiu28ErqKFke+vEshfpAQgdvb4F61tM1UNvvLSatTOXhsSHAdq2HSTN…

selectors probed

Certificate (current)

GlobalSign RSA OV SSL CA 2018

from 2026-01-23 to 2027-02-24

Expires in 280 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://aerocivil.gov.co/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self), midi=(), sync-xhr=(self), microphone=(), camera=(self), magnetometer=(), gyroscope=(), fullscreen=(self), payment=()
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; default-src 'self'; script-src 'self' 'nonce-48a45e13fe1e5e5fa78544f44b5249c1' 'unsafe-eval' blob: https://cdnjs.cloudflare.com/ https://app3.weatherwidget.org/ https://www.gstatic.com/ https://aerocivil.gov.co https://liveconnect.chat/ https://aura.abrahamchatbot.com/ https://cdn.jsdelivr.net/ *.google.com *.google-analytics.com *.gstatic.com *.googleapis.com https://connect.facebook.net *.twitter.com *.twimg.com *.googletagmanager.com; img-src 'self' blob: data: https://aura.abrahamchatbot.com/ https://maps.googleapis.com/ https://maps.gstatic.com/ https://img.youtube.com/ https://placeholdit.imgix.net/ https://fonts.gstatic.com/ https://www.gstatic.com/; style-src 'self' 'unsafe-inline' https://liveconnect.chat/ https://aura.abrahamchatbot.com/ *.gstatic.com *.google.com *.googleapis.com *.twitter.com; connect-src 'self' https://maps.googleapis.com https://maps.gstatic.com https://www.google.com https://fonts.googleapis.com https://fonts.gstatic.com https:
strict-transport-security: max-age=31536000; includeSubDomains; preload