Home

bild.de

Scanned: 10:17:59+0000 on 20 February 2024

{
  "time": 1708424277.463197,
  "raw_target": "bild.de",
  "has_contact": true,
  "target": "bild.de",
  "scan_type": "domain",
  "message": "bild.de",
  "domain_details": {
    "a_records": [
      "145.243.240.20",
      "145.243.248.20"
    ],
    "cname_records": [],
    "txt_records": [
      "QFpSE9bKoWuwVmDnsk9WcN2uDM+gd4XFp4U+KOUCJ/dZ6a2PymbU3qNhP8lsAMC0k2ClaLcBIjPCEDASk8XO6A==",
      "v=spf1 include:spf.asv.de include:spf.protection.outlook.com a:static.85-10-194-80.clients.your-server.de ?all",
      "MS=ms99535522",
      "google-site-verification=0uD0nmX-Cw8fSCHOlf_TfTZRyXjOPNih1lRM3L1jC0Q",
      "google-site-verification=GIwP8nvMGCphDvQq77TEZC32YbjuCGwW4sSunpEYSlk",
      "eqtr0qnhkpp5vj7krpo4ai3g3n",
      "google-site-verification=wSGR6qpcbZeGKdQUKg6ipsQj_7AeNxrPHVEcIiWgpRE",
      "adobe-idp-site-verification=62bcde131337d67652c5065053b7b1bf966f7bb65d0b3b51fdbe1ca653239533"
    ],
    "time": 0,
    "dns_resolve_time": 1708424277.7939155
  },
  "dnssecuritytxt": {
    "security_contact": null,
    "security_policy": null,
    "matching_domain": null
  },
  "port": 443,
  "certificate": {
    "issuer": "/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=GeoTrust RSA CA 2018",
    "notAfter": "2025-01-18 23:59:59 UTC",
    "notBefore": "2023-12-19 00:00:00 UTC",
    "serialNumber": 19803339900145043836164140355948087950,
    "subject": "/C=DE/ST=Berlin/L=Berlin/O=BILD GmbH/CN=bild.de",
    "authorityKeyIdentifier": [
      "90:58:FF:B0:9C:75:A8:51:54:77:B1:ED:F2:A3:43:16:38:9E:6C:C5"
    ],
    "subjectKeyIdentifier": [
      "B2:89:A9:F1:54:23:D2:70:F1:7A:1C:E3:88:D0:1F:52:E4:50:63:B7"
    ],
    "subjectAltName": {
      "DNS": [
        "bild.de",
        "bildstatic.de",
        "sportbild.bild.de",
        "sport.bild.de",
        "*.bild.de",
        "*.bildstatic.de",
        "*.sportbild.bild.de",
        "*.sport.bild.de",
        "sportbild.de",
        "www.sportbild.de",
        "m.sportbild.de",
        "spobi.de",
        "www.spobi.de",
        "m.spobi.de",
        "spobi.bild.de",
        "www.spobi.bild.de",
        "bildplus.de",
        "*.bildplus.de",
        "m.beta.bild.de",
        "m.beta.sportbild.bild.de",
        "as-pp.axelspringer.com",
        "www.bild.de"
      ]
    },
    "certificatePolicies": [
      "Policy: 2.23.140.1.2.2",
      "CPS: http://www.digicert.com/CPS"
    ],
    "keyUsage": [
      "Digital Signature, Key Encipherment"
    ],
    "extendedKeyUsage": [
      "TLS Web Server Authentication, TLS Web Client Authentication"
    ],
    "crlDistributionPoints": [
      "Full Name:",
      {
        "URI": "http://cdp.geotrust.com/GeoTrustRSACA2018.crl"
      }
    ],
    "authorityInfoAccess": [
      {
        "OCSP - URI": "http://status.geotrust.com"
      },
      {
        "CA Issuers - URI": "http://cacerts.geotrust.com/GeoTrustRSACA2018.crt"
      }
    ],
    "basicConstraints": [
      "CA:FALSE"
    ],
    "ct_precert_scts": [
      "Signed Certificate Timestamp:",
      "Version   : v1 (0x0)",
      "Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:",
      "1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF",
      "Timestamp : Dec 19 17:10:47.946 2023 GMT",
      "Extensions: none",
      "Signature : ecdsa-with-SHA256",
      "30:45:02:20:7B:6C:2D:1C:A8:83:CF:61:4D:89:F9:80:",
      "F6:C2:0C:B7:E6:A1:05:65:AF:AA:B2:FC:5E:ED:71:E6:",
      "EC:B2:A6:F7:02:21:00:C1:87:2A:D9:56:34:0C:C5:A2:",
      "39:C4:94:C8:40:DE:36:A9:F2:09:22:7F:CE:86:DD:AB:",
      "9E:86:BD:27:EE:D3:11",
      "Log ID    : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:",
      "ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E",
      "Timestamp : Dec 19 17:10:47.933 2023 GMT",
      "30:44:02:20:3C:F3:DD:45:BA:1C:04:78:5F:27:A2:17:",
      "1C:A0:2C:1B:32:96:4D:5B:F1:EA:CA:33:58:E9:E5:6C:",
      "C9:A4:35:95:02:20:26:2A:99:0A:B2:34:BB:26:4F:3F:",
      "F0:40:19:39:65:E2:BD:A0:30:CB:0B:CB:B2:C1:43:76:",
      "5B:2F:CC:3A:E7:1F",
      "Log ID    : 55:81:D4:C2:16:90:36:01:4A:EA:0B:9B:57:3C:53:F0:",
      "C0:E4:38:78:70:25:08:17:2F:A3:AA:1D:07:13:D3:0C",
      "Timestamp : Dec 19 17:10:48.021 2023 GMT",
      "30:45:02:21:00:C4:E1:E6:B1:5D:19:AF:12:B6:C0:93:",
      "21:D2:24:3B:06:48:D7:0A:F2:07:77:E2:75:A8:E9:0C:",
      "85:8D:98:2B:EF:02:20:18:4F:13:C2:17:FF:F1:4C:1F:",
      "49:65:C4:BC:75:6F:CB:34:52:7D:D5:52:1C:6E:AC:D6:",
      "2B:26:5D:A4:C9:EC:2F"
    ]
  },
  "http_security_txt": {
    "url": "https://www.bild.de/.well-known/security.txt",
    "status_code": 200,
    "has_contact": true,
    "valid_https": true,
    "valid_content_type": true,
    "full_text": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n\nContact: mailto:security-incident.nmn@axelspringer.de\nExpires: 2024-12-31T23:59:59.000Z\nEncryption: https://axelspringer.com/public.pgp \nPreferred-Languages: en, de\nCanonical: https://bild.de/.well-known/security.txt\nPolicy: https://app.intigriti.com/programs/axelspringerse/nmt/detail\nHiring: https://career.axelspringer.com/en/tech\n-----BEGIN PGP SIGNATURE-----\n\niHUEARYKAB0WIQR0G7ULdSOvUyKYrfjfba2juxPArAUCZRVt3wAKCRDfba2juxPA\nrKQ6AQCjs3r/YeUIHDq7BlLWEja/52jLWEFZBx/l1IBBI/vkiwD+NQwy0hmlvvF1\n+W7EdN7rxGCt1NWQ9e+TzVYK+Dz+IQQ=\n=yrgV\n-----END PGP SIGNATURE-----",
    "min_text": "Contact: mailto:security-incident.nmn@axelspringer.de\nExpires: 2024-12-31T23:59:59.000Z\nEncryption: https://axelspringer.com/public.pgp\nPreferred-Languages: en, de\nCanonical: https://bild.de/.well-known/security.txt\nPolicy: https://app.intigriti.com/programs/axelspringerse/nmt/detail\nHiring: https://career.axelspringer.com/en/tech\n",
    "items": {
      "Acknowledgements": [],
      "Canonical": [
        "https://bild.de/.well-known/security.txt"
      ],
      "Contact": [
        "mailto:security-incident.nmn@axelspringer.de"
      ],
      "Encryption": [
        "https://axelspringer.com/public.pgp"
      ],
      "Preferred-Languages": "en, de",
      "Expires": "2024-12-31T23:59:59.000Z",
      "Hiring": [
        "https://career.axelspringer.com/en/tech"
      ],
      "Policy": [
        "https://app.intigriti.com/programs/axelspringerse/nmt/detail"
      ]
    },
    "headers": {
      "access-control-expose-headers": "Server-Timing",
      "cache-control": "max-age=180, public",
      "last-modified": "Tue, 13 Feb 2024 13:55:53 GMT",
      "server-timing": "traceparent;desc=\"00-8ba54ac67534f56defed0777e3294306-dff1ca82e113f3f7-01\"",
      "etag": "W/\"89cd252eb53f6897125e132c23f23e5f\"",
      "content-type": "text/plain",
      "content-encoding": "gzip",
      "x-red": "1",
      "accept-ranges": "bytes",
      "x-refresh": "s=1f|h=1|c=|t=180.000|a=137.786|rd=Tue, 20 Feb 2024 10:15:41 GMT|dd=Tue, 20 Feb 2024 10:17:59 GMT",
      "x-content-type-options": "nosniff",
      "content-security-policy-report-only": "script-src 'unsafe-inline' 'unsafe-eval' 'self' blob: data: https:; style-src 'self' 'unsafe-inline' blob: data: https:; default-src 'self' https:; img-src https: blob: data: android-webview-video-poster:; frame-src blob: data: https:; worker-src blob: data: https:; child-src blob: data: https:; object-src 'self'; font-src 'self' https: blob: data: safari-extension://*; media-src 'self' blob: data: https:; connect-src wss: blob: data: https:; report-uri /csp_ep",
      "content-security-policy": "upgrade-insecure-requests",
      "server": "Apache",
      "content-length": "433",
      "date": "Tue, 20 Feb 2024 10:17:59 GMT",
      "connection": "keep-alive",
      "vary": "Accept-Encoding, Origin"
    },
    "http_version": "HTTP/1.1",
    "redirects": [
      {
        "type": "301",
        "val": "https://bild.de/.well-known/security.txt",
        "https": true,
        "http_version": "HTTP/1.1"
      },
      {
        "type": "200",
        "val": "https://www.bild.de/.well-known/security.txt",
        "https": true,
        "http_version": "HTTP/1.1"
      }
    ],
    "type": "https_well-known"
  },
  "rank": 238
}

dnssecuritytxt (DNS)

You can find out more about dnssecuritytxt here.

No DNS records found

security.txt (HTTP)

You can find out more about security.txt here or by looking up RFC 9116.

Status: 200

Scheme: https

URL: https://www.bild.de/.well-known/security.txt (HTTP/1.1)

Has a contact: Yes

Contacts:

Policy:

Minimal version:

Contact: mailto:security-incident.nmn@axelspringer.de
Expires: 2024-12-31T23:59:59.000Z
Encryption: https://axelspringer.com/public.pgp
Preferred-Languages: en, de
Canonical: https://bild.de/.well-known/security.txt
Policy: https://app.intigriti.com/programs/axelspringerse/nmt/detail
Hiring: https://career.axelspringer.com/en/tech

Full version:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security-incident.nmn@axelspringer.de
Expires: 2024-12-31T23:59:59.000Z
Encryption: https://axelspringer.com/public.pgp 
Preferred-Languages: en, de
Canonical: https://bild.de/.well-known/security.txt
Policy: https://app.intigriti.com/programs/axelspringerse/nmt/detail
Hiring: https://career.axelspringer.com/en/tech
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQR0G7ULdSOvUyKYrfjfba2juxPArAUCZRVt3wAKCRDfba2juxPA
rKQ6AQCjs3r/YeUIHDq7BlLWEja/52jLWEFZBx/l1IBBI/vkiwD+NQwy0hmlvvF1
+W7EdN7rxGCt1NWQ9e+TzVYK+Dz+IQQ=
=yrgV
-----END PGP SIGNATURE-----

Redirects:

  • 301: https://bild.de/.well-known/security.txt (HTTP/1.1)
  • 200: https://www.bild.de/.well-known/security.txt (HTTP/1.1)
Updated at: 10:17:59+0000 on 20 February 2024