rtp.pt

.pt crawl

First seen 2026-05-13 · Last seen 2026-05-20 · ok HTTP/1.1 200 3719 ms crawled 2026-05-19

US · 151.101.194.192 · AS54113 Fastly, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: RTP - Rdio e Televiso de Portugal
Description: A RTP est prxima dos portugueses. Os programas que v todos os dias na TV e na Rdio. Os vdeos e udios dos seus programas preferidos, mp3, rss e online. Notcias, desporto, blogues, sugestes e as novidades RTP
Language: pt

Technology

Analytics

Google Tag Manager

Third-party hosts loaded (3)

plus.google.com×1
pt-gmtdmp.mookie1.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

ns1.ptempresas.pt
ns10.ptempresas.pt
ns2.ptempresas.pt

MX

10 rtp-pt.mail.protection.outlook.com

TXT

dqil70plalr4sf1h7ellvi8pa5
5irl8bl9qq4sje0q33ncj7h56e

Verified for

Google Workspace
Microsoft 365

Email authentication weak

SPF

v=spf1 mx ip4:185.15.22.67 ip4:83.240.201.144 include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

not published

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDctM+pEkAn1w1l9mJeq3JdgspYyUvlnTm+vJAcp/FxKj+WrjL0h4azajOQ1v1cJHyX0ne4B++WtHu1xTgKrK…

selectors probed

Certificate (current)

GlobalSign GCC R6 AlphaSSL CA 2025

from 2025-08-26 to 2026-09-27

Expires in 130 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.rtp.pt/homepage-internacional/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), microphone=(), payment=(), encrypted-media=*
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; default-src 'self' blob: https://*.rtp.pt:* http://*.rtp.pt:*; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: wss: blob:; media-src https: blob:; object-src https:; child-src https: data: blob:; form-action https:; frame-ancestors 'self' https://*.rtp.pt:*
strict-transport-security: max-age=31536000; preload
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin