Home

bbc.co.uk

Scanned: 10:17:05+0000 on 03 December 2022

{
  "time": 1670062624.057447,
  "raw_target": "bbc.co.uk",
  "has_contact": true,
  "target": "bbc.co.uk",
  "scan_type": "domain",
  "message": "bbc.co.uk",
  "domain_details": {
    "a_records": [
      "151.101.0.81",
      "151.101.64.81",
      "151.101.128.81",
      "151.101.192.81"
    ],
    "cname_records": [],
    "txt_records": [
      "apple-domain-verification=jFFO0rdS9IrxgWUR",
      "google-site-verification=ITX3CwHXxGVfkCmhF4eSwdfo8h2ZGLAZ3zRpYvZi5XA",
      "J0kgGm0XqA3/6pLD4DHeC5x/dAduzT809P1Iwx/PRCYvVS32rv75RIHKC2aVz47dJxKhPlxGf3h3KXiL6+dyXw==",
      "2RLXso9TrRPyhWOEhYggL0U/r1D+g8H7z9RqDBOmcJjSbj88TobGKimtkCrXZNBkDXQDj89lS4mDskNOJyWLdg==",
      "voUGv5zARbEV516E/S8Ugsy9/FOgDGg4n/rpmKZQRROVOj0+2tgzKw3Tk9+Ks6qVbNKU18KTrR5khxTQutDvBg==",
      "docusign=50f10407-e3e4-4f6a-aae4-712d4eb31329",
      "adobe-idp-site-verification=9b850a4a56e3fac19aea1e0ac5db302e5cefab444cd73519dce1c72ccd4db058",
      "msfpkey=69eew9c10ryb9cn8msgg2d4vg",
      "dropbox-domain-verification=l5djk65wpy3z",
      "Huddle",
      "_globalsign-domain-verification=WgTu2FOy64Yx8z8cOweOeyZ_YpUaQOmSTD9uyMwKbd",
      "v=spf1 a ip4:212.58.224.0/19 ip4:132.185.0.0/16 ip4:78.136.53.80/28 ip4:78.136.14.192/27 ip4:78.136.19.8/29 ip4:89.234.10.72/29 ip4:89.234.53.236 ip4:212.111.33.181 ip4:78.137.117.8 ip4:46.37.176.74 ip4:185.184.237.181\" \" ip4:185.119.233.144/30 ip4:185.119.232.158 +include:sf.sis.bbc.co.uk +include:spf.messagelabs.com ~all",
      "_globalsign-domain-verification=zgnCaep7wCvKr1E33tAk2yr9-kXVnCP93bMFk7WYQD",
      "miro-verification=1a94b0fef7a6d5136a272d5cb425e8dc034e8cfc",
      "docusign=a10ad7b6-cf7e-472d-8157-23061f5b5116",
      "google-site-verification=RaiMXJBIiFvqXHd43kv_ekzmXT2l8ibq5Xy0mulndvU",
      "MS=ms10378910",
      "atlassian-domain-verification=SQsgJ5h/FqwMTXuSG/G4Nd1Gx6uX2keREOsZSa22D5XT46EsEuyaic8Aej4cR4Tr"
    ],
    "time": 0,
    "dns_resolve_time": 1670062624.4343653
  },
  "dnssecuritytxt": {
    "security_contact": null,
    "security_policy": null,
    "matching_domain": null
  },
  "port": 443,
  "certificate": {
    "issuer": "/C=BE/O=GlobalSign nv-sa/CN=GlobalSign RSA OV SSL CA 2018",
    "notAfter": "2023-04-05 13:51:11 UTC",
    "notBefore": "2022-03-04 13:51:12 UTC",
    "serialNumber": 19291080710346302862540078180,
    "subject": "/C=GB/ST=London/L=London/O=BRITISH BROADCASTING CORPORATION/CN=www.bbc.com",
    "keyUsage": [
      "Digital Signature, Key Encipherment"
    ],
    "authorityInfoAccess": [
      {
        "CA Issuers - URI": "http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt"
      },
      {
        "OCSP - URI": "http://ocsp.globalsign.com/gsrsaovsslca2018"
      }
    ],
    "certificatePolicies": [
      "Policy: 1.3.6.1.4.1.4146.1.20",
      "CPS: https://www.globalsign.com/repository/",
      "Policy: 2.23.140.1.2.2"
    ],
    "basicConstraints": [
      "CA:FALSE"
    ],
    "crlDistributionPoints": [
      "Full Name:",
      {
        "URI": "http://crl.globalsign.com/gsrsaovsslca2018.crl"
      }
    ],
    "subjectAltName": {
      "DNS": [
        "www.bbc.com",
        "www.bbc.co.uk",
        "bbc.co.uk",
        "bbcrussian.com",
        "*.bbc.com",
        "*.bbcrussian.com",
        "bbc.com"
      ]
    },
    "extendedKeyUsage": [
      "TLS Web Server Authentication, TLS Web Client Authentication"
    ],
    "authorityKeyIdentifier": [
      "F8:EF:7F:F2:CD:78:67:A8:DE:6F:8F:24:8D:88:F1:87:03:02:B3:EB"
    ],
    "subjectKeyIdentifier": [
      "7C:48:B3:B1:0D:48:93:A2:D2:F0:AC:F4:F6:13:EF:75:94:CF:80:97"
    ],
    "ct_precert_scts": [
      "Signed Certificate Timestamp:",
      "Version   : v1 (0x0)",
      "Log ID    : E8:3E:D0:DA:3E:F5:06:35:32:E7:57:28:BC:89:6B:C9:",
      "03:D3:CB:D1:11:6B:EC:EB:69:E1:77:7D:6D:06:BD:6E",
      "Timestamp : Mar  4 13:51:14.702 2022 GMT",
      "Extensions: none",
      "Signature : ecdsa-with-SHA256",
      "30:45:02:21:00:A0:2C:D4:EB:F6:65:41:0B:0C:98:1D:",
      "77:FC:68:16:1C:97:CD:25:B1:06:E4:CB:1E:69:67:26:",
      "A5:25:7A:2F:B0:02:20:7A:36:91:D9:78:DF:B7:4C:33:",
      "A7:A9:F1:88:58:8C:6A:71:94:AB:C7:9D:C2:AF:98:61:",
      "81:CA:8C:C3:32:B0:BB",
      "Log ID    : 6F:53:76:AC:31:F0:31:19:D8:99:00:A4:51:15:FF:77:",
      "15:1C:11:D9:02:C1:00:29:06:8D:B2:08:9A:37:D9:13",
      "Timestamp : Mar  4 13:51:13.932 2022 GMT",
      "30:45:02:21:00:AE:FC:D5:FB:98:F6:FC:FC:9D:93:07:",
      "C3:4E:FC:C0:75:7C:EE:E0:19:B7:7F:92:D0:84:AC:3F:",
      "A8:7C:78:64:BB:02:20:09:73:11:E4:3D:58:DC:4D:93:",
      "64:57:E5:70:25:62:43:57:D2:7F:05:46:79:75:29:4A:",
      "C4:3C:7D:AC:F8:C2:0C",
      "Log ID    : 55:81:D4:C2:16:90:36:01:4A:EA:0B:9B:57:3C:53:F0:",
      "C0:E4:38:78:70:25:08:17:2F:A3:AA:1D:07:13:D3:0C",
      "Timestamp : Mar  4 13:51:13.972 2022 GMT",
      "30:44:02:20:54:B9:C4:9B:2E:DE:1C:D0:CD:FB:FF:AF:",
      "FB:16:5F:99:61:77:BF:6D:AC:B3:E9:59:50:56:01:2D:",
      "91:5C:96:9F:02:20:01:6D:0C:B2:88:72:0E:7F:44:C9:",
      "AE:3E:BA:57:1A:7B:D4:5F:FC:ED:0C:6B:3D:0C:D0:EA:",
      "E4:BE:67:88:81:23"
    ]
  },
  "http_security_txt": {
    "url": "https://www.bbc.co.uk/.well-known/security.txt",
    "status_code": 200,
    "has_contact": true,
    "valid_https": true,
    "valid_content_type": true,
    "full_text": "# version: 63eb5d9b6e693736247fd13d0d14b47b7a0d08c8\n# British Broadcasting Corporation - reporting security vulnerabilities to the BBC\n  \n# Please report any security vulnerabilities to us via the contact method(s) below, only after reading our disclosure policy.\n# Please do not include any sensitive information in your initial message, we'll provide a secure communication method in our reply to you.\nContact: mailto:security@bbc.co.uk\n \n# Our disclosure policy. By submitting a potential security incident to us, you are implicitly accepting these terms - please read this before submitting:\nPolicy: https://www.bbc.com/backstage/security-disclosure-policy/\n\n# We're continually recruiting, please visit the link below and search for "information security" if you're interested in a career with the BBC in infosec\nHiring: https://careerssearch.bbc.co.uk/jobs/search\n\n# Setting expires to a far-future date as it doesn't make sense for us to keep updating it\nExpires: 2037-12-31T00:00:00z\n\n# The BBC SOC does have some folks who speak languages other than English, however coverage isn't guaranteed for anything other than English\nPreferred-Languages: en\n  \n# Please see https://securitytxt.org/ for details of the specification of this file",
    "min_text": "Contact: mailto:security@bbc.co.uk\nPolicy: https://www.bbc.com/backstage/security-disclosure-policy/\nHiring: https://careerssearch.bbc.co.uk/jobs/search\nExpires: 2037-12-31T00:00:00z\nPreferred-Languages: en\n",
    "items": {
      "Acknowledgements": [],
      "Canonical": [],
      "Contact": [
        "mailto:security@bbc.co.uk"
      ],
      "Encryption": [],
      "Preferred-Languages": "en",
      "Expires": "2037-12-31T00:00:00z",
      "Hiring": [
        "https://careerssearch.bbc.co.uk/jobs/search"
      ],
      "Policy": [
        "https://www.bbc.com/backstage/security-disclosure-policy/"
      ]
    },
    "headers": {
      "content-type": "text/plain",
      "nel": "{\"report_to\":\"default\",\"max_age\":2592000,\"include_subdomains\":true,\"failure_fraction\":0.05}",
      "cache-control": "max-age=3600, public, stale-if-error=86400, stale-while-revalidate=600",
      "report-to": "{\"group\":\"default\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://europe-west1-bbc-otg-traf-mgr-bq-prod-4591.cloudfunctions.net/report-endpoint\",\"priority\":1}],\"include_subdomains\":true}, {\"group\":\"default\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://default.bbc-reporting-api.app/report-endpoint\",\"priority\":1}],\"include_subdomains\":true}",
      "etag": "\"b33ac849e21c91a332ea23918bb13809\"",
      "req-svc-chain": "FASTLY,GTM,VTM",
      "x-amz-id-2": "jV8S0WHwapsn1VejfoM4pGYb64GDLCFYqrM/B7xT3c9OlXAm12r6zT4TpIguRDq9SO2XoSERS/0=",
      "x-origin-route": "xrt-ostore",
      "last-modified": "Thu, 13 Oct 2022 13:46:36 GMT",
      "x-amz-request-id": "3JVZGZMV53QF86FH",
      "via": "1.1 BBC-GTM, 1.1 varnish",
      "x-bbc-edge-cache-status": "MISS",
      "x-bbc-origin-response-status": "200",
      "server": "BBC-GTM",
      "strict-transport-security": "max-age=31536000",
      "permissions-policy": "browsing-topics=(), join-ad-interest-group=(), run-ad-auction=()",
      "fastly-restarts": "1",
      "content-encoding": "gzip",
      "accept-ranges": "bytes",
      "date": "Sat, 03 Dec 2022 10:17:05 GMT",
      "x-fastly-cache-status": "MISS-CLUSTER",
      "x-served-by": "cache-dfw-kdfw8210127-DFW",
      "x-cache": "MISS",
      "x-cache-hits": "0",
      "x-timer": "S1670062625.925060,VS0,VE698",
      "x-fastly-pre-flight-cache": "MISS, MISS",
      "x-fastly-pre-flight-cache-status": "MISS-CLUSTER",
      "x-cache-age": "0",
      "vary": "Accept-Encoding",
      "alt-svc": "h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400",
      "content-length": "698"
    },
    "http_version": "HTTP/2",
    "redirects": [
      {
        "type": "301",
        "val": "https://bbc.co.uk/.well-known/security.txt",
        "https": true,
        "http_version": "HTTP/2"
      },
      {
        "type": "200",
        "val": "https://www.bbc.co.uk/.well-known/security.txt",
        "https": true,
        "http_version": "HTTP/2"
      }
    ],
    "type": "https_well-known"
  },
  "rank": 60
}

dnssecuritytxt (DNS)

You can find out more about dnssecuritytxt here.

No DNS records found

security.txt (HTTP)

You can find out more about security.txt here or by looking up RFC 9116.

Status: 200

Scheme: https

URL: https://www.bbc.co.uk/.well-known/security.txt (HTTP/2)

Has a contact: Yes

Contacts:

Policy:

Minimal version:

Contact: mailto:security@bbc.co.uk
Policy: https://www.bbc.com/backstage/security-disclosure-policy/
Hiring: https://careerssearch.bbc.co.uk/jobs/search
Expires: 2037-12-31T00:00:00z
Preferred-Languages: en

Full version:

# version: 63eb5d9b6e693736247fd13d0d14b47b7a0d08c8
# British Broadcasting Corporation - reporting security vulnerabilities to the BBC
  
# Please report any security vulnerabilities to us via the contact method(s) below, only after reading our disclosure policy.
# Please do not include any sensitive information in your initial message, we'll provide a secure communication method in our reply to you.
Contact: mailto:security@bbc.co.uk
 
# Our disclosure policy. By submitting a potential security incident to us, you are implicitly accepting these terms - please read this before submitting:
Policy: https://www.bbc.com/backstage/security-disclosure-policy/

# We're continually recruiting, please visit the link below and search for "information security" if you're interested in a career with the BBC in infosec
Hiring: https://careerssearch.bbc.co.uk/jobs/search

# Setting expires to a far-future date as it doesn't make sense for us to keep updating it
Expires: 2037-12-31T00:00:00z

# The BBC SOC does have some folks who speak languages other than English, however coverage isn't guaranteed for anything other than English
Preferred-Languages: en
  
# Please see https://securitytxt.org/ for details of the specification of this file

Redirects:

  • 301: https://bbc.co.uk/.well-known/security.txt (HTTP/2)
  • 200: https://www.bbc.co.uk/.well-known/security.txt (HTTP/2)
Updated at: 10:17:05+0000 on 03 December 2022