Home

bbc.co.uk

Scanned: 10:16:07+0000 on 27 September 2023

{
  "time": 1695809765.7835784,
  "raw_target": "bbc.co.uk",
  "has_contact": true,
  "target": "bbc.co.uk",
  "scan_type": "domain",
  "message": "bbc.co.uk",
  "domain_details": {
    "a_records": [
      "151.101.0.81",
      "151.101.64.81",
      "151.101.128.81",
      "151.101.192.81"
    ],
    "cname_records": [],
    "txt_records": [
      "docusign=a10ad7b6-cf7e-472d-8157-23061f5b5116",
      "miro-verification=1a94b0fef7a6d5136a272d5cb425e8dc034e8cfc",
      "v=spf1 a ip4:212.58.224.0/19 ip4:132.185.0.0/16 ip4:78.136.53.80/28 ip4:78.136.14.192/27 ip4:78.136.19.8/29 ip4:89.234.10.72/29 ip4:89.234.53.236 ip4:212.111.33.181 ip4:78.137.117.8 ip4:46.37.176.74 ip4:185.184.237.181\" \" ip4:185.119.233.144/30 ip4:185.119.232.158 +include:sf.sis.bbc.co.uk +include:spf.messagelabs.com ~all",
      "docusign=50f10407-e3e4-4f6a-aae4-712d4eb31329",
      "atlassian-domain-verification=SQsgJ5h/FqwMTXuSG/G4Nd1Gx6uX2keREOsZSa22D5XT46EsEuyaic8Aej4cR4Tr",
      "docker-verification=aab67462-78f7-4ade-a86b-358645923430",
      "MSUEdqCJpCtrI1JuH2-U",
      "dropbox-domain-verification=l5djk65wpy3z",
      "adobe-idp-site-verification=9b850a4a56e3fac19aea1e0ac5db302e5cefab444cd73519dce1c72ccd4db058",
      "msfpkey=3e29l8m08bqxp19k63t73fj5b",
      "google-site-verification=RaiMXJBIiFvqXHd43kv_ekzmXT2l8ibq5Xy0mulndvU",
      "Huddle",
      "_globalsign-domain-verification=AQ2dURU9RbDOuheuLrx89LSUlA_btgMS6vmFXngBtE",
      "apple-domain-verification=jFFO0rdS9IrxgWUR",
      "J0kgGm0XqA3/6pLD4DHeC5x/dAduzT809P1Iwx/PRCYvVS32rv75RIHKC2aVz47dJxKhPlxGf3h3KXiL6+dyXw==",
      "google-site-verification=ITX3CwHXxGVfkCmhF4eSwdfo8h2ZGLAZ3zRpYvZi5XA",
      "voUGv5zARbEV516E/S8Ugsy9/FOgDGg4n/rpmKZQRROVOj0+2tgzKw3Tk9+Ks6qVbNKU18KTrR5khxTQutDvBg==",
      "2RLXso9TrRPyhWOEhYggL0U/r1D+g8H7z9RqDBOmcJjSbj88TobGKimtkCrXZNBkDXQDj89lS4mDskNOJyWLdg==",
      "MS=ms10378910"
    ],
    "time": 0,
    "dns_resolve_time": 1695809766.0806632
  },
  "dnssecuritytxt": {
    "security_contact": null,
    "security_policy": null,
    "matching_domain": null
  },
  "port": 443,
  "certificate": {
    "issuer": "/C=BE/O=GlobalSign nv-sa/CN=GlobalSign RSA OV SSL CA 2018",
    "notAfter": "2024-04-14 06:16:12 UTC",
    "notBefore": "2023-03-14 06:16:13 UTC",
    "serialNumber": 12265114887937820633952317623,
    "subject": "/C=GB/ST=London/L=London/O=BRITISH BROADCASTING CORPORATION/CN=www.bbc.com",
    "keyUsage": [
      "Digital Signature, Key Encipherment"
    ],
    "authorityInfoAccess": [
      {
        "CA Issuers - URI": "http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt"
      },
      {
        "OCSP - URI": "http://ocsp.globalsign.com/gsrsaovsslca2018"
      }
    ],
    "certificatePolicies": [
      "Policy: 1.3.6.1.4.1.4146.1.20",
      "CPS: https://www.globalsign.com/repository/",
      "Policy: 2.23.140.1.2.2"
    ],
    "basicConstraints": [
      "CA:FALSE"
    ],
    "crlDistributionPoints": [
      "Full Name:",
      {
        "URI": "http://crl.globalsign.com/gsrsaovsslca2018.crl"
      }
    ],
    "subjectAltName": {
      "DNS": [
        "www.bbc.com",
        "www.bbc.co.uk",
        "bbc.co.uk",
        "bbcrussian.com",
        "*.bbc.com",
        "*.bbcrussian.com",
        "bbc.com"
      ]
    },
    "extendedKeyUsage": [
      "TLS Web Server Authentication, TLS Web Client Authentication"
    ],
    "authorityKeyIdentifier": [
      "F8:EF:7F:F2:CD:78:67:A8:DE:6F:8F:24:8D:88:F1:87:03:02:B3:EB"
    ],
    "subjectKeyIdentifier": [
      "43:D7:96:FC:CA:DB:93:F0:CE:74:A8:CF:1D:82:25:4A:09:DB:DA:93"
    ],
    "ct_precert_scts": [
      "Signed Certificate Timestamp:",
      "Version   : v1 (0x0)",
      "Log ID    : 73:D9:9E:89:1B:4C:96:78:A0:20:7D:47:9D:E6:B2:C6:",
      "1C:D0:51:5E:71:19:2A:8C:6B:80:10:7A:C1:77:72:B5",
      "Timestamp : Mar 14 06:16:19.020 2023 GMT",
      "Extensions: none",
      "Signature : ecdsa-with-SHA256",
      "30:46:02:21:00:AA:40:F5:35:95:24:AF:04:AB:DF:87:",
      "75:30:6A:23:E9:AE:2C:C0:F2:D1:2C:33:C2:E4:73:C5:",
      "B6:04:EF:65:90:02:21:00:95:1A:B2:66:C5:9A:A0:3D:",
      "54:70:3F:AE:09:C3:0D:C8:F9:57:62:64:58:A5:94:08:",
      "63:2B:F4:8B:BF:DC:B3:E3",
      "Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:",
      "32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B",
      "Timestamp : Mar 14 06:16:19.123 2023 GMT",
      "30:45:02:21:00:8A:D7:F5:98:C4:2A:3F:3B:1B:9E:C8:",
      "8B:D9:ED:8E:BA:C0:59:80:CE:A4:0D:42:04:09:72:40:",
      "5A:18:6E:B5:E6:02:20:07:77:CA:F1:88:90:70:83:EC:",
      "21:77:4D:34:BB:BA:59:24:9F:1F:E7:AE:64:45:0A:42:",
      "E8:D2:AB:71:D7:B9:31",
      "Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:",
      "91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB",
      "Timestamp : Mar 14 06:16:19.053 2023 GMT",
      "30:45:02:21:00:D3:12:7F:05:57:E4:5D:44:8F:ED:CB:",
      "5B:7C:0B:44:FF:34:B6:4C:5B:9F:F0:1F:25:86:53:3D:",
      "2E:CF:7E:B5:8E:02:20:5A:51:50:07:F5:CA:BD:DF:3F:",
      "56:C1:1E:4F:2D:65:0F:42:3B:A8:21:66:42:F1:51:B6:",
      "0B:DF:8E:96:C9:61:09"
    ]
  },
  "http_security_txt": {
    "url": "https://www.bbc.co.uk/.well-known/security.txt",
    "status_code": 200,
    "has_contact": true,
    "valid_https": true,
    "valid_content_type": true,
    "full_text": "# version: 4403f41be87d6cb38111c86f6625163ee8871794\n# British Broadcasting Corporation - reporting security vulnerabilities to the BBC\n  \n# Please report any security vulnerabilities to us via the contact method(s) below, only after reading our disclosure policy.\n# Please do not include any sensitive information in your initial message, we'll provide a secure communication method in our reply to you.\nContact: mailto:security@bbc.co.uk\n \n# Our disclosure policy. By submitting a potential security incident to us, you are implicitly accepting these terms - please read this before submitting:\nPolicy: https://www.bbc.com/backstage/security-disclosure-policy/\n\n# We're continually recruiting, please visit the link below and search for "information security" if you're interested in a career with the BBC in infosec\nhttps://careers.bbc.co.uk/search/\n\nExpires: 2038-01-19T03:14:07Z\n\n# The BBC SOC does have some folks who speak languages other than English, however coverage isn't guaranteed for anything other than English\nPreferred-Languages: en\n  \n# Please see https://securitytxt.org/ for details of the specification of this file",
    "min_text": "Contact: mailto:security@bbc.co.uk\nPolicy: https://www.bbc.com/backstage/security-disclosure-policy/\nExpires: 2038-01-19T03:14:07Z\nPreferred-Languages: en\n",
    "items": {
      "Acknowledgements": [],
      "Canonical": [],
      "Contact": [
        "mailto:security@bbc.co.uk"
      ],
      "Encryption": [],
      "Preferred-Languages": "en",
      "Expires": "2038-01-19T03:14:07Z",
      "Hiring": [],
      "Policy": [
        "https://www.bbc.com/backstage/security-disclosure-policy/"
      ]
    },
    "headers": {
      "content-type": "text/plain",
      "nel": "{\"report_to\":\"default\",\"max_age\":2592000,\"include_subdomains\":true,\"failure_fraction\":0.25}",
      "cache-control": "max-age=3600, public, stale-if-error=86400, stale-while-revalidate=600",
      "x-amz-server-side-encryption": "AES256",
      "report-to": "{\"group\":\"default\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://europe-west1-bbc-otg-traf-mgr-bq-prod-4591.cloudfunctions.net/report-endpoint\",\"priority\":1}],\"include_subdomains\":true}, {\"group\":\"default\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://default.bbc-reporting-api.app/report-endpoint\",\"priority\":1}],\"include_subdomains\":true}",
      "etag": "\"27d59e77ea0efa3fda08694158c399fc\"",
      "req-svc-chain": "FASTLY,GTM,VTM",
      "x-amz-id-2": "ubYi2NG0QLvVTZqY2Z7DHMeEmG5Fk2brj0KSMjJrBoUzSmrmmPwU5ooRPFnlcpBJYezG/shh5g4=",
      "x-origin-route": "xrt-ostore",
      "last-modified": "Sun, 30 Jul 2023 16:30:22 GMT",
      "x-amz-request-id": "ETKEC0HX1FDD0DAA",
      "origin-agent-cluster": "?0",
      "via": "1.1 BBC-GTM, 1.1 varnish",
      "x-bbc-edge-cache-status": "MISS",
      "x-bbc-origin-response-status": "200",
      "server": "BBC-GTM",
      "strict-transport-security": "max-age=31536000; preload",
      "permissions-policy": "browsing-topics=(), join-ad-interest-group=(), run-ad-auction=()",
      "fastly-restarts": "1",
      "content-encoding": "gzip",
      "accept-ranges": "bytes",
      "date": "Wed, 27 Sep 2023 10:16:07 GMT",
      "x-fastly-cache-status": "MISS-CLUSTER",
      "x-served-by": "cache-bur-kbur8200087-BUR",
      "x-cache": "MISS",
      "x-cache-hits": "0",
      "x-timer": "S1695809767.549277,VS0,VE694",
      "x-fastly-pre-flight-cache": "MISS, MISS",
      "x-fastly-pre-flight-cache-status": "MISS-CLUSTER",
      "x-cache-age": "0",
      "vary": "Accept-Encoding",
      "alt-svc": "h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400",
      "content-length": "644"
    },
    "http_version": "HTTP/2",
    "redirects": [
      {
        "type": "301",
        "val": "https://bbc.co.uk/.well-known/security.txt",
        "https": true,
        "http_version": "HTTP/2"
      },
      {
        "type": "200",
        "val": "https://www.bbc.co.uk/.well-known/security.txt",
        "https": true,
        "http_version": "HTTP/2"
      }
    ],
    "type": "https_well-known"
  },
  "rank": 60
}

dnssecuritytxt (DNS)

You can find out more about dnssecuritytxt here.

No DNS records found

security.txt (HTTP)

You can find out more about security.txt here or by looking up RFC 9116.

Status: 200

Scheme: https

URL: https://www.bbc.co.uk/.well-known/security.txt (HTTP/2)

Has a contact: Yes

Minimal version:

Contact: mailto:security@bbc.co.uk
Policy: https://www.bbc.com/backstage/security-disclosure-policy/
Expires: 2038-01-19T03:14:07Z
Preferred-Languages: en

Full version:

# version: 4403f41be87d6cb38111c86f6625163ee8871794
# British Broadcasting Corporation - reporting security vulnerabilities to the BBC
  
# Please report any security vulnerabilities to us via the contact method(s) below, only after reading our disclosure policy.
# Please do not include any sensitive information in your initial message, we'll provide a secure communication method in our reply to you.
Contact: mailto:security@bbc.co.uk
 
# Our disclosure policy. By submitting a potential security incident to us, you are implicitly accepting these terms - please read this before submitting:
Policy: https://www.bbc.com/backstage/security-disclosure-policy/

# We're continually recruiting, please visit the link below and search for "information security" if you're interested in a career with the BBC in infosec
https://careers.bbc.co.uk/search/

Expires: 2038-01-19T03:14:07Z

# The BBC SOC does have some folks who speak languages other than English, however coverage isn't guaranteed for anything other than English
Preferred-Languages: en
  
# Please see https://securitytxt.org/ for details of the specification of this file