ua.pt

.pt crawl

First seen 2026-05-12 · Last seen 2026-05-18 · ok HTTP/1.1 200 2354 ms crawled 2026-05-18

PT · 193.136.173.58 · AS1930 Fundacao para a Ciencia e a Tecnologia, I.P.

Reputation 92/100 no dmarc policy

sector education type blog

HTML metadata

Title: Universidade de Aveiro - Universidade de Aveiro
Description: Página inicial da Universidade de Aveiro

Open Graph

url: https://www.ua.pt/
title: Universidade de Aveiro - Universidade de Aveiro
site name: Universidade de Aveiro
description: Página inicial da Universidade de Aveiro

Technology

Server: nginx
CMS: Gatsby

Analytics

Google Tag Manager

Cookie consent

OneTrust

Fonts

Google Fonts

Third-party hosts loaded (4)

cdn.cookielaw.org×2
fonts.googleapis.com×2
unpkg.com×1
www.googletagmanager.com×1

DNS records live

NS

ns.ua.pt
ns2.ua.pt

MX

5 mx1.ua.pt
5 mx3.ua.pt

TXT

Show 4 TXT records

adobe-idp-site-verification=14d502338cead27a370b0064a428199f749b6f88b8b60faddbc2ee02d19e2c6a
KfMwPxAHIJGZxXV2No2ehOC/QeHosPH0ErXNeyjqx3cinP+sAjduF9onKpZx7hA+Wq+shTBMAV/ETVlRXnIT7w==
onetrust-domain-verification=76fd846b756a40ab9e8d1bd070c8ab78
HARICA-gnNrU6bg3OpI1dTzwjt

Email authentication weak

SPF: v=spf1 include:spf.protection.outlook.com ip4:193.136.173.5 ip4:193.136.173.6 ip4:193.136.173.2 ip4:193.136.173.3 ip4:193.136.173.26 ip4:193.136.173.27 ip4:193.136.173.112 ip4:193.136.173.113 ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

GEANT TLS ECC 1

from 2025-12-03 to 2026-12-03

Expires in 198 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.ua.pt/

present

strict-transport-security
content-security-policy
x-frame-options

findings

CSP allows unsafe inline scripts/styles
weak frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: allow-from https://www.ua.pt https://www.ua.pt https://idp.ua.pt https://translate.google.pt https://xperimenta.web.ua.pt/, DENY
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com maps.googleapis.com data: blob: ssl.google-analytics.com www.google-analytics.com static.ua.pt cdn.polyfill.io static.hotjar.com script.hotjar.com www.googletagmanager.com cse.google.com www.google.com www.youtube.com s.ytimg.com xperimenta.web.ua.pt unpkg.com player.vimeo.com cdn.cookielaw.org geolocation.onetrust.com privacyportal-eu.onetrust.com events.timely.fun; frame-ancestors 'self' www.ua.pt www.ua.pt idp.ua.pt translate.google.pt xperimenta.web.ua.pt ;
strict-transport-security: max-age=15638400