uac.pt

.pt crawl

First seen 2026-05-11 · Last seen 2026-05-20 · ok HTTP/1.1 200 4103 ms crawled 2026-05-16

IE · 54.171.129.94 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Universidade dos Açores |
Description: A Universidade dos Açores disponível 24/24 horas todos os dias do ano.
Language: pt-pt
Generator: Drupal 7 (https://www.drupal.org)
Canonical: https://uac.pt/pt-pt

Technology

Server: nginx
CMS: Drupal

Third-party hosts loaded (2)

cdn.jsdelivr.net×1
maxcdn.bootstrapcdn.com×1

Social

DNS records live

NS

ns-1217.awsdns-24.org
ns-1572.awsdns-04.co.uk
ns-178.awsdns-22.com
ns-732.awsdns-27.net

MX

0 uac-pt.mail.protection.outlook.com

TXT

XxKR4jaONQj0ULurwkePxArWqy+apJGZMvvbxaSGPe+OmzzrTiZXKM57s130VDfOdNuU77oKz6bYc3C9zRigsg==

Verified for

HARICA
Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:193.136.242.236 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc@uac.pt

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JhqUvTkRaOPLDAkRgRvEmQIFCF/z+7tzRqLitTSD/AySE1akGcciJUXcCOjJeT6hFAehW+zJDYvS2…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCmprF11JRbbt0Pv3ccMcAubQ5qnSeIpSyXaNKU1UXjOQPlnQA4f5bcmrpXzsnbdCQVE/8BXR0sMCx3sPKR73…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

GEANT TLS RSA 1

from 2025-11-07 to 2026-11-07

Expires in 171 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://uac.pt/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
weak frame protection
weak content type protection

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN, SAMEORIGIN
permissions-policy: geolocation=()
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https:; media-src 'self'; object-src 'self'; worker-src 'self' blob:; frame-ancestors 'self'; form-action 'self'
strict-transport-security: max-age=31536000; includeSubDomains; preload