una-europa.eu

.eu crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 1134 ms crawled 2026-05-18

NL · 188.166.129.131 · AS14061 DigitalOcean, LLC

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Una Europa
Description: Una Europa is an alliance of 11 European universities. We share a new vision for the university of the future.
Language: en
Generator: SEOmatic
Canonical: https://www.una-europa.eu/

Open Graph

url: https://www.una-europa.eu/
title: Una Europa
locale: en
see also: https://twitter.com/UNA_Europa
site name: Una Europa
description: Una Europa is an alliance of 11 European universities. We share a new vision for the university of the future.

Technology

Third-party hosts loaded (2)

una-europa.imgix.net×5
s3.eu-west-1.amazonaws.com×3

Social

Contact

Address: Warmoesberg 26, 1000, Brussels, Brussels, BE

DNS records live

NS

ns1.combell.eu
ns3.combell.net
ns4.combell.net

MX

0 unaeuropa-eu0i.mail.protection.outlook.com

TXT

spf2.0/pra include:spf.flexmail.eu ?all

Verified for

Google
Microsoft 365

Email authentication weak

SPF

v=spf1 include:spf.flexmail.eu include:spf.protection.outlook.com -all

strict (-all)

DMARC

not published

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLg288QL5mmxK8yIyXEEbMVhcCADEsGVk8uz05fnnAMOZlVlAF8IYejIE5FjhtPXpOtJAuvHzYlv5L…

selectors probed

Certificate (current)

R13

from 2026-04-04 to 2026-07-03

Expires in 43 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.una-europa.eu/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; script-src 'self' https://www.google-analytics.com https://plausible.io https://js.stripe.com https://www.youtube.com https://beacon-v2.helpscout.net 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://www.google-analytics.com https://www.google-analytics.com https://plausible.io https://*.craftcms.com https://beaconapi.helpscout.net https://d3hb14vkzrxvla.cloudfront.net; object-src 'self'; font-src 'self' https://s3.eu-west-1.amazonaws.com https://fonts.gstatic.com data:; img-src 'self' https://s3.eu-west-1.amazonaws.com https://una-europa.imgix.net https://scontent.cdninstagram.com https://*.craft-cdn.com https://g.stripe.com https://beacon-v2.helpscout.net https://d33v4339jhl8k0.cloudfront.net data:; media-src 'self'; frame-src 'self' https://player.flipsnack.com https://open.spotify.com https://www.youtube.com https://mediatheque.univ-paris1.fr https://prezi.com https://js.stripe.com; frame-anc
strict-transport-security: max-age=15768000; includeSubDomains; preload