uu.se

HTML metadata

Title

Uppsala universitet

Description

Vår forskning och utbildning ska göra skillnad. Vi ska stödja en hållbar utveckling, samverka med samhället och verka för öppenhet och respekt.

Language

sv

Canonical

https://www.uu.se/

Translations

en
sv

Open Graph

url: https://www.uu.se/
description: Vår forskning och utbildning ska göra skillnad. Vi ska stödja en hållbar utveckling, samverka med samhället och verka för öppenhet och respekt.

Technology

Server: baffin-bay-inlet

Third-party hosts loaded (2)

siteimproveanalytics.com×1
static.rekai.se×1

Social

Contact

Email

kommunikation@uu.se

Phone

Address

DNS records live

NS

dns1.uu.se
dns2.uu.se
dns3.uu.se

MX

10 mailfilter-ng-1.sunet.se
10 mailfilter-ng-3.sunet.se
10 mailfilter-ng-4.sunet.se
20 mailfilter-ng-2.sunet.se

TXT

Show 9 TXT records

HARICA-BcHODu85rUbDAkv3swf
DomainVerification=DQ7M7WLZW72ELG6AO8S0GY5K6VKXPFSC5EAXHC0QEI1DJ8CRHSASSAU3LHC1TORE
facebook-domain-verification=4zaw0jgfc6g0x7e6c83i3b84h67xci
MS=ms67564859
HARICA-cQh52N6HOPqGIQdgynn
jamf-site-verification=aYs9tnbsHulNUIKF_jAVpg
google-site-verification=HnkQ-hJR3pxzVnu5rrxj67UPyTYsauuEMInXwWCHIrk
Zoom=7542785
apple-domain-verification=fvygMUvQ7KkdSN9t

Email authentication partial

SPF: v=spf1 include:_spf.uu.se include:spf.gdmnet.se include:spf.mandrillapp.com include:mail.sitevision-cloud.net include:_spf.ungapped.io include:mail.webropolsurveys.com include:smtpw.cytric.net include:spf.abicart.com include:spf.multinet.com ~all
softfail (~all)
DMARC: v=DMARC1; p=none; sp=none; rua=mailto:dmarc-reports@uu.se; ruf=mailto:dmarc-forensics@uu.se; fo=1
policy: none (monitoring only) · sp=none
DKIM: no key found at common selectors

Certificate (current)

E7

from 2026-04-23 to 2026-07-22

Expires in 64 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.uu.se/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.rekai.se https://siteimproveanalytics.com/ https://ebbot-v2.storage.googleapis.com https://mfstatic.com blob: https://uu.sitevision-cloud.se blob: api.mazemap.com api.mapbox.com d1bxh8uas1mnw7.cloudfront.net api.altmetric.com https://static.uu.se/ https://cdn.jsdelivr.net *.readspeaker.com *.twitter.com *.ctnotes.com https://s3.amazonaws.com/downloads.mailchimp.com/ https://mindthegeps.us6.list-manage.com https://*.googletagmanager.com billetto.se www.google.com www.gstatic.com https://cdn.siteimprove.net https://my2.siteimprove.com https://embed.altmetric.com; style-src 'self' 'unsafe-inline' https://mfstatic.com api.mazemap.com d1bxh8uas1mnw7.cloudfront.net https://ebbot-v2.storage.googleapis.com https://static.uu.se/ *.readspeaker.com https://cdn-images.mailchimp.com/ billetto.se fonts.googleapis.com https://embed.altmetric.com; font-src 'self' *.uu.se https://mfstatic.com ebbot-v2.storage.googleapis.com data: fon
strict-transport-security: max-age=300; includeSubDomains; preload