Home
wordpress.org
Scanned: 10:18:26+0000 on 02 May 2025
{ "time": 1746181105.017517, "raw_target": "wordpress.org", "has_contact": true, "target": "wordpress.org", "scan_type": "domain", "message": "wordpress.org", "domain_details": { "a_records": [ "198.143.164.252" ], "cname_records": [], "txt_records": [ "google-site-verification=UL0sGJ1dZbCT4J7pGrLW3hqM_I1LJ8pUi2WBEI_98kI", "google-site-verification=t8FjG1vzC4OFZJ8qL4SkR8xxtLyKldXKbswyeemQS5w", "v=spf1 ip4:66.155.40.0/24 ip4:198.143.164.0/24 include:helpscoutemail.com -all" ], "time": 0, "dns_resolve_time": 1746181105.036489 }, "dnssecuritytxt": { "security_contact": null, "security_policy": null, "matching_domain": null }, "port": 443, "certificate": { "issuer": "/C=US/O=Let's Encrypt/CN=E5", "notAfter": "2025-06-30 19:43:58 UTC", "notBefore": "2025-04-01 19:43:59 UTC", "serialNumber": 438010931382502221867972278801715778923311, "subject": "/CN=wordpress.org", "keyUsage": [ "Digital Signature" ], "extendedKeyUsage": [ "TLS Web Server Authentication, TLS Web Client Authentication" ], "basicConstraints": [ "CA:FALSE" ], "subjectKeyIdentifier": [ "8E:64:A0:FB:93:08:5A:D9:FA:CF:0D:6A:59:EB:0B:F5:EE:D5:80:BF" ], "authorityKeyIdentifier": [ "9F:2B:5F:CF:3C:21:4F:9D:04:B7:ED:2B:2C:C4:C6:70:8B:D2:D7:0D" ], "authorityInfoAccess": [ { "OCSP - URI": "http://e5.o.lencr.org" }, { "CA Issuers - URI": "http://e5.i.lencr.org/" } ], "subjectAltName": { "DNS": [ "*.wordpress.org", "wordpress.org" ] }, "certificatePolicies": [ "Policy: 2.23.140.1.2.1" ], "crlDistributionPoints": [ "Full Name:", { "URI": "http://e5.c.lencr.org/48.crl" } ], "ct_precert_scts": [ "Signed Certificate Timestamp:", "Version : v1 (0x0)", "Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC:", "47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34", "Timestamp : Apr 1 20:42:29.865 2025 GMT", "Extensions: none", "Signature : ecdsa-with-SHA256", "30:45:02:21:00:CB:90:F4:25:A8:EC:C5:DD:55:DE:A9:", "FA:B5:CF:94:F4:55:3B:2C:25:48:5A:BC:E0:95:34:7A:", "5B:7B:45:F7:81:02:20:0B:CA:93:CB:B4:42:75:42:17:", "73:B5:4A:D9:A0:5A:82:7B:42:1F:C3:81:12:9F:A0:82:", "4B:08:CA:05:A2:29:EF", "Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:", "1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF", "Timestamp : Apr 1 20:42:31.859 2025 GMT", "30:45:02:21:00:EA:B7:B0:30:36:8A:56:D3:CE:82:18:", "A7:B6:7E:F3:E0:F7:0E:FE:7D:3A:85:27:7B:E1:2C:76:", "D3:83:29:10:74:02:20:37:81:1E:BF:57:1A:9F:32:76:", "AF:8F:18:78:C9:4D:59:95:DB:76:18:8E:9C:12:FC:45:", "D9:37:54:39:C2:51:76" ] }, "http_security_txt": { "url": "https://wordpress.org/.well-known/security.txt", "status_code": 200, "has_contact": true, "valid_https": true, "valid_content_type": true, "full_text": "Contact: https://hackerone.com/wordpress\nExpires: 2025-12-31T15:00:00.000Z\nAcknowledgments: https://hackerone.com/wordpress/thanks\nCanonical: https://wordpress.org/.well-known/security.txt\nPolicy: https://make.wordpress.org/core/handbook/testing/reporting-security-vulnerabilities/\nPreferred-Languages: en\n\n# The above contact is for reporting security issues in core WordPress software itself.\n# For reporting issues in a plugin hosted at wordpress.org, contact plugins@wordpress.org \n# If your website is hacked, please contact your site administrator or hosting provider.\n# Additionally, community support forums are a good resource at https://wordpress.org/support/", "min_text": "Contact: https://hackerone.com/wordpress\nExpires: 2025-12-31T15:00:00.000Z\nAcknowledgements: https://hackerone.com/wordpress/thanks\nCanonical: https://wordpress.org/.well-known/security.txt\nPolicy: https://make.wordpress.org/core/handbook/testing/reporting-security-vulnerabilities/\nPreferred-Languages: en\n", "items": { "Acknowledgements": [ "https://hackerone.com/wordpress/thanks" ], "Canonical": [ "https://wordpress.org/.well-known/security.txt" ], "Contact": [ "https://hackerone.com/wordpress" ], "Encryption": [], "Preferred-Languages": "en", "Expires": "2025-12-31T15:00:00.000Z", "Hiring": [], "Policy": [ "https://make.wordpress.org/core/handbook/testing/reporting-security-vulnerabilities/" ] }, "headers": { "server": "nginx", "date": "Fri, 02 May 2025 10:18:26 GMT", "content-type": "text/plain;charset=utf-8", "vary": "Accept-Encoding", "strict-transport-security": "max-age=3600", "x-frame-options": "SAMEORIGIN", "content-encoding": "br", "alt-svc": "h3=\":443\"; ma=86400", "x-nc": "MISS ord 2" }, "http_version": "HTTP/2", "redirects": [ { "type": "200", "val": "https://wordpress.org/.well-known/security.txt", "https": true, "http_version": "HTTP/2" } ], "type": "https_well-known" }, "rank": 10 }
dnssecuritytxt (DNS)
You can find out more about dnssecuritytxt here.
No DNS records found
security.txt (HTTP)
You can find out more about security.txt here or by looking up RFC 9116.
Status: 200
Scheme: https
URL: https://wordpress.org/.well-known/security.txt (HTTP/2)
Has a contact: Yes
Contacts:
Minimal version:
Contact: https://hackerone.com/wordpress Expires: 2025-12-31T15:00:00.000Z Acknowledgements: https://hackerone.com/wordpress/thanks Canonical: https://wordpress.org/.well-known/security.txt Policy: https://make.wordpress.org/core/handbook/testing/reporting-security-vulnerabilities/ Preferred-Languages: en
Full version:
Contact: https://hackerone.com/wordpress Expires: 2025-12-31T15:00:00.000Z Acknowledgments: https://hackerone.com/wordpress/thanks Canonical: https://wordpress.org/.well-known/security.txt Policy: https://make.wordpress.org/core/handbook/testing/reporting-security-vulnerabilities/ Preferred-Languages: en # The above contact is for reporting security issues in core WordPress software itself. # For reporting issues in a plugin hosted at wordpress.org, contact plugins@wordpress.org # If your website is hacked, please contact your site administrator or hosting provider. # Additionally, community support forums are a good resource at https://wordpress.org/support/
Updated at: 10:18:26+0000 on 02 May 2025