indexo.dev

daphabitat.pt

.pt crawl

First seen 2026-05-25 · Last seen 2026-05-29 · ok HTTP/1.1 200 1306 ms crawled 2026-05-29

DE · 139.162.161.241 · AS63949 Akamai Connected Cloud

Reputation 100/100

Classifying

HTML metadata

Title
home » DAPHabitat
Description
Sistema de registo de declarações ambientais de produtos para produtos e serviços do habitat.
Language
pt-PT
Generator
SilverStripe - http://silverstripe.org

Open Graph

url
https://daphabitat.pt/
title
DAPHabitat
site name
DAPHabitat
description
Sistema de registo de declarações ambientais de produtos para produtos e serviços do habitat.

Technology

Server
Apache
jQuery
1.12.4 known XSS (<3.5)
Analytics
  • Google Tag Manager

Third-party hosts loaded (1)

  • www.googletagmanager.com×1

Social

DNS records live

NS
  • carl.ns.cloudflare.com
  • elsa.ns.cloudflare.com
Verified for
  • Brevo

Email authentication no MX

SPF
not published
DMARC
v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com
policy: none (monitoring only)
DKIM
  • mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
selectors probed

Certificate (current)

R13
from 2026-04-21 to 2026-07-20
Expires in 50 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://daphabitat.pt/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • weak content type protection
Header values
referrer-policy
same-origin
x-frame-options
SAMEORIGIN
permissions-policy
camera=(), microphone=(), geolocation=(), usb=(), fullscreen=(self)
x-content-type-options
nosniff, nosniff
content-security-policy
upgrade-insecure-requests; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://www.google-analytics.com; font-src 'self' data: https://fonts.gstatic.com;
strict-transport-security
max-age=31536000; includeSubdomains;

Links to (5)

Linked from (2)