findsecuritycontacts.com

Home

wordpress.org

Scanned: 10:15:04+0000 on 03 December 2022

{
  "time": 1670062504.0078504,
  "raw_target": "wordpress.org",
  "has_contact": true,
  "target": "wordpress.org",
  "scan_type": "domain",
  "message": "wordpress.org",
  "domain_details": {
    "a_records": [
      "198.143.164.252"
    ],
    "cname_records": [],
    "txt_records": [
      "google-site-verification=UL0sGJ1dZbCT4J7pGrLW3hqM_I1LJ8pUi2WBEI_98kI",
      "v=spf1 ip4:66.155.40.0/24 ip4:198.143.164.0/24 include:helpscoutemail.com -all",
      "google-site-verification=t8FjG1vzC4OFZJ8qL4SkR8xxtLyKldXKbswyeemQS5w"
    ],
    "time": 0,
    "dns_resolve_time": 1670062504.0466192
  },
  "dnssecuritytxt": {
    "security_contact": null,
    "security_policy": null,
    "matching_domain": null
  },
  "port": 443,
  "certificate": {
    "issuer": "/C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA",
    "notAfter": "2023-12-29 23:59:59 UTC",
    "notBefore": "2022-11-28 00:00:00 UTC",
    "serialNumber": 74909800182608806183691955475744830348,
    "subject": "/CN=*.wordpress.org",
    "authorityKeyIdentifier": [
      "8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1"
    ],
    "subjectKeyIdentifier": [
      "D0:A8:0F:E1:72:F9:8B:2C:38:38:6A:E3:D7:98:45:7E:1C:60:A6:FB"
    ],
    "keyUsage": [
      "Digital Signature, Key Encipherment"
    ],
    "basicConstraints": [
      "CA:FALSE"
    ],
    "extendedKeyUsage": [
      "TLS Web Server Authentication, TLS Web Client Authentication"
    ],
    "certificatePolicies": [
      "Policy: 1.3.6.1.4.1.6449.1.2.2.7",
      "CPS: https://sectigo.com/CPS",
      "Policy: 2.23.140.1.2.1"
    ],
    "authorityInfoAccess": [
      {
        "CA Issuers - URI": "http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt"
      },
      {
        "OCSP - URI": "http://ocsp.sectigo.com"
      }
    ],
    "subjectAltName": {
      "DNS": [
        "*.wordpress.org",
        "wordpress.org"
      ]
    },
    "ct_precert_scts": [
      "Signed Certificate Timestamp:",
      "Version   : v1 (0x0)",
      "Log ID    : AD:F7:BE:FA:7C:FF:10:C8:8B:9D:3D:9C:1E:3E:18:6A:",
      "B4:67:29:5D:CF:B1:0C:24:CA:85:86:34:EB:DC:82:8A",
      "Timestamp : Nov 28 10:25:28.643 2022 GMT",
      "Extensions: none",
      "Signature : ecdsa-with-SHA256",
      "30:46:02:21:00:9C:37:FE:51:2B:BA:C1:88:C2:B7:62:",
      "FD:FD:01:85:8F:30:85:A4:FD:77:34:C7:29:4B:05:57:",
      "C8:9D:23:23:67:02:21:00:DC:8B:2A:DF:C7:DB:01:9D:",
      "2C:D4:31:5D:B7:A6:1D:45:9A:B0:0F:95:CC:A3:AF:D5:",
      "16:0E:1B:A3:79:DC:E6:F7",
      "Log ID    : 7A:32:8C:54:D8:B7:2D:B6:20:EA:38:E0:52:1E:E9:84:",
      "16:70:32:13:85:4D:3B:D2:2B:C1:3A:57:A3:52:EB:52",
      "Timestamp : Nov 28 10:25:28.607 2022 GMT",
      "30:45:02:20:41:F9:45:80:E2:1D:60:8B:69:3D:40:46:",
      "4C:DA:B7:1F:4D:B2:AA:F9:45:9A:DC:02:2A:BD:E0:4F:",
      "CD:63:55:F5:02:21:00:D9:D2:4D:5D:8B:31:7A:FC:B9:",
      "4E:88:09:2F:E9:2A:58:B7:5C:A3:3C:41:2C:8C:2C:35:",
      "36:E5:0F:BB:84:60:D8",
      "Log ID    : E8:3E:D0:DA:3E:F5:06:35:32:E7:57:28:BC:89:6B:C9:",
      "03:D3:CB:D1:11:6B:EC:EB:69:E1:77:7D:6D:06:BD:6E",
      "Timestamp : Nov 28 10:25:28.541 2022 GMT",
      "30:46:02:21:00:8B:BF:B3:82:F5:44:39:9C:9C:65:6C:",
      "63:4F:80:C7:D5:74:4E:B0:41:09:8F:50:12:5C:37:DD:",
      "42:AE:4F:CA:96:02:21:00:C8:AE:57:BE:51:52:CE:52:",
      "DB:CF:D4:5C:84:70:66:DC:23:A7:DE:2C:98:98:EE:FB:",
      "FC:2D:5E:71:A3:FE:52:F4"
    ]
  },
  "http_security_txt": {
    "url": "https://wordpress.org/.well-known/security.txt",
    "status_code": 200,
    "has_contact": true,
    "valid_https": true,
    "valid_content_type": true,
    "full_text": "Contact: https://hackerone.com/wordpress\nExpires: 2024-12-31T15:00:00.000Z\nAcknowledgments: https://hackerone.com/wordpress/thanks\nCanonical: https://wordpress.org/.well-known/security.txt\nPolicy: https://make.wordpress.org/core/handbook/testing/reporting-security-vulnerabilities/\n\n# The above contact is for reporting security issues in core WordPress software itself.\n# For reporting issues in a plugin hosted at wordpress.org, contact plugins@wordpress.org \n# If your website is hacked, please contact your site administrator or hosting provider.\n# Additionally, community support forums are a good resource at https://wordpress.org/support/",
    "min_text": "Contact: https://hackerone.com/wordpress\nExpires: 2024-12-31T15:00:00.000Z\nAcknowledgements: https://hackerone.com/wordpress/thanks\nCanonical: https://wordpress.org/.well-known/security.txt\nPolicy: https://make.wordpress.org/core/handbook/testing/reporting-security-vulnerabilities/\n",
    "items": {
      "Acknowledgements": [
        "https://hackerone.com/wordpress/thanks"
      ],
      "Canonical": [
        "https://wordpress.org/.well-known/security.txt"
      ],
      "Contact": [
        "https://hackerone.com/wordpress"
      ],
      "Encryption": [],
      "Preferred-Languages": "",
      "Expires": "2024-12-31T15:00:00.000Z",
      "Hiring": [],
      "Policy": [
        "https://make.wordpress.org/core/handbook/testing/reporting-security-vulnerabilities/"
      ]
    },
    "headers": {
      "server": "nginx",
      "date": "Sat, 03 Dec 2022 10:15:04 GMT",
      "content-type": "text/plain;charset=utf-8",
      "vary": "Accept-Encoding",
      "strict-transport-security": "max-age=360",
      "x-frame-options": "SAMEORIGIN",
      "content-encoding": "br",
      "x-nc": "MISS ord 1"
    },
    "http_version": "HTTP/2",
    "redirects": [
      {
        "type": "200",
        "val": "https://wordpress.org/.well-known/security.txt",
        "https": true,
        "http_version": "HTTP/2"
      }
    ],
    "type": "https_well-known"
  },
  "rank": 10
}

dnssecuritytxt (DNS)

You can find out more about dnssecuritytxt here.

No DNS records found

security.txt (HTTP)

You can find out more about security.txt here or by looking up RFC 9116.

Status: 200

Scheme: https

URL: https://wordpress.org/.well-known/security.txt (HTTP/2)

Has a contact: Yes

Contacts:

https://hackerone.com/wordpress

Policy:

https://make.wordpress.org/core/handbook/testing/reporting-security-vulnerabilities/

Minimal version:

Contact: https://hackerone.com/wordpress
Expires: 2024-12-31T15:00:00.000Z
Acknowledgements: https://hackerone.com/wordpress/thanks
Canonical: https://wordpress.org/.well-known/security.txt
Policy: https://make.wordpress.org/core/handbook/testing/reporting-security-vulnerabilities/

Full version:

Contact: https://hackerone.com/wordpress
Expires: 2024-12-31T15:00:00.000Z
Acknowledgments: https://hackerone.com/wordpress/thanks
Canonical: https://wordpress.org/.well-known/security.txt
Policy: https://make.wordpress.org/core/handbook/testing/reporting-security-vulnerabilities/

# The above contact is for reporting security issues in core WordPress software itself.
# For reporting issues in a plugin hosted at wordpress.org, contact plugins@wordpress.org 
# If your website is hacked, please contact your site administrator or hosting provider.
# Additionally, community support forums are a good resource at https://wordpress.org/support/

Updated at: 10:15:04+0000 on 03 December 2022