Home

guardian.co.uk

Scanned: 10:19:04+0000 on 28 March 2024

{
  "time": 1711621144.351136,
  "raw_target": "guardian.co.uk",
  "has_contact": true,
  "target": "guardian.co.uk",
  "scan_type": "domain",
  "message": "guardian.co.uk",
  "domain_details": {
    "a_records": [
      "151.101.129.111",
      "151.101.193.111",
      "151.101.1.111",
      "151.101.65.111"
    ],
    "cname_records": [],
    "txt_records": [
      "MS=ms11152033",
      "adobe-idp-site-verification=1368fd2c-0545-45ae-94f3-d68e3011a81d",
      "globalsign-domain-verification=6ilL9ugTYN2YHOc1lgw_dHdDBvBoHBRn80VoRN5Zsp",
      "globalsign-domain-verification=QCdmvx2FmvCpeqYXQsTAMJMq2YjyK0VzLosSdN6aMP",
      "google-site-verification=Gruud_A1jSnwIisPP0kLLk2Gbh1q5YZCAf1rBW4j6S0",
      "google-site-verification=QtI5iwIYEk7iN5gsVGHkW6N6cOaOz_4IdxCz_0unZxU",
      "amazonses:qAISMpzD1+fmQhBPmkpwgfm+rC67CFgkipCfOvPv9Z4=",
      " atlassian-domain-verification=ZnxGlQoBqanLuLhXwZ0EsfSaOSCgszlydfePAIDOV5zxl8aQ9Jj8VgKJ7/icjZxE",
      "_globalsign-domain-verification=xfkrv3yRwA5GGm0E4l5RlcNKTqVD8KAYsYdCYTBMF0",
      "docusign=f944699e-0f48-4a6c-bb06-6f298838accd",
      "MS=ms15597190",
      "#X5CQFVBu7x8Qp^%B%2vRgDxuVF!^POds0#Y1jnU6DpqYM@$ooB2kevxYsddgzh*LiibuT&Qy77APrGqqeOUyneKR3m4Uib@7py",
      "v=spf1 include:_spf.google.com include:_spf.salesforce.com include:amazonses.com include:_spf1.guardian.co.uk include:_spf2.guardian.co.uk include:_spf3.guardian.co.uk -all"
    ],
    "time": 0,
    "dns_resolve_time": 1711621144.4154136
  },
  "dnssecuritytxt": {
    "security_contact": null,
    "security_policy": null,
    "matching_domain": null
  },
  "port": 443,
  "certificate": {
    "issuer": "/C=BE/O=GlobalSign nv-sa/CN=GlobalSign Atlas R3 DV TLS CA 2023 Q4",
    "notAfter": "2024-12-15 10:45:27 UTC",
    "notBefore": "2023-11-14 10:45:28 UTC",
    "serialNumber": 1936869590381560227033701165354491252,
    "subject": "/CN=theguardian.com",
    "subjectAltName": {
      "DNS": [
        "theguardian.com",
        "*.advertising.theguardian.com",
        "*.code.dev-guardianapis.com",
        "*.code.dev-theguardian.com",
        "*.dev-theguardian.com",
        "*.editorial.theguardian.com",
        "*.email.theguardian.com",
        "*.guardian.co.uk",
        "*.guardianapis.com",
        "*.guim.co.uk",
        "*.guimcode.co.uk",
        "*.ophan.co.uk",
        "*.qa.dev-guardianapis.com",
        "*.service.theguardian.com",
        "*.theguardian.co.uk",
        "*.theguardian.com",
        "*.theguardian.design",
        "api.nextgen.guardianapps.co.uk",
        "code.api.nextgen.guardianapps.co.uk",
        "dev-gutools.co.uk",
        "dev-theguardian.com",
        "guardian.co.uk",
        "guim.co.uk",
        "gutools.co.uk",
        "i.guimcode.co.uk",
        "media.guim.co.uk",
        "pasteup.guim.co.uk",
        "subscribe.theguardian.com",
        "theguardian.co.uk",
        "theguardian.design",
        "mta-sts.observer.co.uk",
        "*.wordiply.com",
        "wordiply.com",
        "theguardianfoundation.org",
        "theguardian.org"
      ]
    },
    "keyUsage": [
      "Digital Signature, Key Encipherment"
    ],
    "extendedKeyUsage": [
      "TLS Web Server Authentication, TLS Web Client Authentication"
    ],
    "subjectKeyIdentifier": [
      "55:1C:59:A8:CE:20:5D:87:F2:B6:98:15:CD:B6:54:22:1E:1B:AE:45"
    ],
    "certificatePolicies": [
      "Policy: 2.23.140.1.2.1",
      "Policy: 1.3.6.1.4.1.4146.10.1.3",
      "CPS: https://www.globalsign.com/repository/"
    ],
    "basicConstraints": [
      "CA:FALSE"
    ],
    "authorityInfoAccess": [
      {
        "OCSP - URI": "http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4"
      },
      {
        "CA Issuers - URI": "http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt"
      }
    ],
    "authorityKeyIdentifier": [
      "AA:11:71:8F:95:C4:58:98:8B:B1:6E:0F:3B:50:68:24:BC:B8:19:BC"
    ],
    "crlDistributionPoints": [
      "Full Name:",
      {
        "URI": "http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl"
      }
    ],
    "ct_precert_scts": [
      "Signed Certificate Timestamp:",
      "Version   : v1 (0x0)",
      "Log ID    : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:",
      "ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E",
      "Timestamp : Nov 14 10:45:29.888 2023 GMT",
      "Extensions: none",
      "Signature : ecdsa-with-SHA256",
      "30:44:02:20:2A:16:A5:90:C8:12:8D:AD:5F:C1:09:EB:",
      "2B:9C:E6:CD:5D:64:35:B9:D2:E6:59:6D:5B:F3:B5:D5:",
      "9E:D0:68:61:02:20:36:54:AD:55:F9:A3:24:DC:9B:8E:",
      "F8:D3:3A:3A:E7:35:CA:56:05:B6:72:5B:03:DB:F0:73:",
      "89:66:7B:12:45:3E",
      "Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:",
      "32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B",
      "Timestamp : Nov 14 10:45:29.885 2023 GMT",
      "30:44:02:20:57:58:89:B7:66:D7:A0:E3:77:6D:60:F3:",
      "01:7F:EE:F0:0F:DA:82:B0:69:CE:07:18:70:B5:6C:F3:",
      "2A:D2:4D:C8:02:20:3F:5C:5A:3C:18:67:FA:B1:7A:F0:",
      "7B:F2:B8:4A:6F:2D:8F:61:70:6A:C9:E7:69:74:CC:75:",
      "86:EE:C7:6F:C6:0C",
      "Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:",
      "1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73",
      "Timestamp : Nov 14 10:45:30.392 2023 GMT",
      "30:45:02:20:58:4C:B5:65:75:B7:14:1D:C7:91:23:42:",
      "25:17:F6:59:F7:F5:0B:1E:2F:93:7D:98:C2:4B:57:C2:",
      "20:69:05:A5:02:21:00:95:9A:41:01:4E:22:AC:74:24:",
      "64:AC:37:33:6B:5D:2E:4A:44:D1:74:02:A1:3D:C9:F2:",
      "49:41:F6:6D:A1:B3:C0"
    ]
  },
  "http_security_txt": {
    "url": "https://www.theguardian.com/.well-known/security.txt",
    "status_code": 200,
    "has_contact": true,
    "valid_https": true,
    "valid_content_type": true,
    "full_text": "Contact: mailto:appsec@theguardian.com\nEncryption: https://www.theguardian.com/pgp/PublicKeys/Guardian%20Application-Security.pub.txt\nCanonical: https://www.theguardian.com/.well-known/security.txt\nHiring: https://workforus.theguardian.com/index.php/search-jobs-and-apply/?search_paths%5B%5D=&query=information+security&submit=Search+Jobs\nSignature: https://www.theguardian.com/.well-known/security.txt.asc",
    "min_text": "Contact: mailto:appsec@theguardian.com\nEncryption: https://www.theguardian.com/pgp/PublicKeys/Guardian%20Application-Security.pub.txt\nCanonical: https://www.theguardian.com/.well-known/security.txt\nHiring: https://workforus.theguardian.com/index.php/search-jobs-and-apply/?search_paths%5B%5D=&query=information+security&submit=Search+Jobs\n",
    "items": {
      "Acknowledgements": [],
      "Canonical": [
        "https://www.theguardian.com/.well-known/security.txt"
      ],
      "Contact": [
        "mailto:appsec@theguardian.com"
      ],
      "Encryption": [
        "https://www.theguardian.com/pgp/PublicKeys/Guardian%20Application-Security.pub.txt"
      ],
      "Preferred-Languages": "",
      "Expires": "",
      "Hiring": [
        "https://workforus.theguardian.com/index.php/search-jobs-and-apply/?search_paths%5B%5D=&query=information+security&submit=Search+Jobs"
      ],
      "Policy": []
    },
    "headers": {
      "last-modified": "Fri, 01 Jan 2010 00:00:00 GMT",
      "etag": "\"3fed1ce083c02b2bc07d7ef04e184adcebcce347\"",
      "x-gu-frontend-git-commit-id": "8d765e0c856fbe7188f142218902b049074ad6ea",
      "onion-location": "https://www.guardian2zotagl6tmjucg3lrhxdk4dw3lhbqnkvvkywawy3oqfoprid.onion/.well-known/security.txt",
      "content-type": "text/plain; charset=UTF-8",
      "content-encoding": "gzip",
      "accept-ranges": "bytes",
      "date": "Thu, 28 Mar 2024 10:19:04 GMT",
      "age": "3551",
      "set-cookie": "GU_mvt_id=725102; expires=Wed, 26 Jun 2024 10:19:04 GMT; path=/; domain=.theguardian.com; Secure, GU_geo_country=US; path=/; Secure",
      "x-timer": "S1711621145.539915,VS0,VE2",
      "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
      "x-frame-options": "SAMEORIGIN",
      "x-xss-protection": "1; mode=block",
      "x-content-type-options": "nosniff",
      "content-security-policy": "default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval' blob: 'unsafe-inline'; frame-src https: data:; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: data: blob:; font-src 'self' https://assets.guim.co.uk https://pasteup.guim.co.uk https://interactive.guim.co.uk https://dashboard.ophan.co.uk data:; connect-src https: wss: blob:; child-src https: blob:; object-src 'none'; base-uri 'none'",
      "referrer-policy": "no-referrer-when-downgrade",
      "feature-policy": "camera 'none'; microphone 'none'; midi 'none'; geolocation 'none'",
      "permissions-policy": "camera=(), microphone=(), midi=(), geolocation=(), interest-cohort=()",
      "x-gu-edition": "us",
      "cache-control": "public, max-age=3600, private,no-transform",
      "vary": "Accept-Encoding,User-Agent",
      "alt-svc": "h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400",
      "content-length": "254"
    },
    "http_version": "HTTP/2",
    "redirects": [
      {
        "type": "301",
        "val": "https://guardian.co.uk/.well-known/security.txt",
        "https": true,
        "http_version": "HTTP/2"
      },
      {
        "type": "200",
        "val": "https://www.theguardian.com/.well-known/security.txt",
        "https": true,
        "http_version": "HTTP/2"
      }
    ],
    "type": "https_well-known"
  },
  "rank": 281
}

dnssecuritytxt (DNS)

You can find out more about dnssecuritytxt here.

No DNS records found

security.txt (HTTP)

You can find out more about security.txt here or by looking up RFC 9116.

Status: 200

Scheme: https

URL: https://www.theguardian.com/.well-known/security.txt (HTTP/2)

Has a contact: Yes

Contacts:

Minimal version:

Contact: mailto:appsec@theguardian.com
Encryption: https://www.theguardian.com/pgp/PublicKeys/Guardian%20Application-Security.pub.txt
Canonical: https://www.theguardian.com/.well-known/security.txt
Hiring: https://workforus.theguardian.com/index.php/search-jobs-and-apply/?search_paths%5B%5D=&query=information+security&submit=Search+Jobs

Full version:

Contact: mailto:appsec@theguardian.com
Encryption: https://www.theguardian.com/pgp/PublicKeys/Guardian%20Application-Security.pub.txt
Canonical: https://www.theguardian.com/.well-known/security.txt
Hiring: https://workforus.theguardian.com/index.php/search-jobs-and-apply/?search_paths%5B%5D=&query=information+security&submit=Search+Jobs
Signature: https://www.theguardian.com/.well-known/security.txt.asc

Redirects:

  • 301: https://guardian.co.uk/.well-known/security.txt (HTTP/2)
  • 200: https://www.theguardian.com/.well-known/security.txt (HTTP/2)
Updated at: 10:19:04+0000 on 28 March 2024