osiris.pt

.pt crawl

First seen 2026-05-22 · Last seen 2026-05-30 · ok HTTP/1.1 200 3636 ms crawled 2026-05-28

PT · 94.46.181.196 · AS24768 Almouroltec Servicos De Informatica E Internet Lda

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title

Osiris - Dream, Travel, Experience.

Description

Osiris is a travel and event agency that creates unique experiences tailored to you without worries.

Language

Canonical

https://www.osiris.pt/en

Translations

Open Graph

url: https://www.osiris.pt/en
title: Osiris - Dream, Travel, Experience.
site name: Osiris - Dream, Travel, Experience.
description: Osiris is a travel and event agency that creates unique experiences tailored to you without worries.

Technology

Server: nginx
PHP: 7.4.33 end of life

Analytics

Google Tag Manager

Ads

Meta Pixel

Fonts

Google Fonts

Third-party hosts loaded (8)

connect.facebook.net×1
fonts.gstatic.com×1
region1.analytics.google.com×1
www.facebook.com×1
www.google.com×1
www.google.pt×1
www.googletagmanager.com×1
www.gstatic.com×1

Social

DNS records live

NS

ns1.wtservers.com
ns2.wtservers.com
ns3.wtservers.com

MX

0 osiris-pt.mail.protection.outlook.com

Verified for

Microsoft 365

Email authentication weak

SPF

v=spf1 ip4:151.236.39.41 include:spf.protection.outlook.com include:_spf.kmitd.com -all

strict (-all)

DMARC

not published

DKIM

default: k=rsa; p=MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhALL7WKG/mOjTbI0vGPyWQhF+Irr8bI+qj8YGm7Us8jAiwAXDi80XbErol5mCtL7x45gMCAukbAykhlF/rs0ZUk3DCG+6eXFgvWz…

selectors probed

Certificate (current)

R13

from 2026-04-05 to 2026-07-04

Expires in 34 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.osiris.pt/en

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: deny
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://www.google-analytics.com https://www.google.com https://www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn-cookieyes.com https://connect.facebook.net https://www.google-analytics.com https://www.gstatic.com https://www.google.com https://tagmanager.google.com https://www.googletagmanager.com https://www.youtube.com https://s.ytimg.com; style-src 'self' 'unsafe-inline' https://pro.fontawesome.com https://www.google-analytics.com https://tagmanager.google.com https://www.googletagmanager.com https://fonts.googleapis.com; img-src 'self' data: https://cdn-cookieyes.com https://www.facebook.com https://www.google.pt https://www.google-analytics.com https://ssl.gstatic.com https://i.ytimg.com https://s.ytimg.com; font-src 'self' data: https://pro.fontawesome.com https://fonts.gstatic.com; connect-src 'self' https://cdn-cookieyes.com *.cookieyes.com *.google.pt *.google-analytics.com *.analytics.google.com https://www.facebook.com https://s
strict-transport-security: max-age=31536000; includeSubDomains