Home

bbc.com

Scanned: 10:18:04+0000 on 22 April 2024

{
  "time": 1713781083.0590005,
  "raw_target": "bbc.com",
  "has_contact": true,
  "target": "bbc.com",
  "scan_type": "domain",
  "message": "bbc.com",
  "domain_details": {
    "a_records": [
      "151.101.0.81",
      "151.101.64.81",
      "151.101.128.81",
      "151.101.192.81"
    ],
    "cname_records": [],
    "txt_records": [
      "apple-domain-verification=bDxvsTrgjGlFf0jP",
      "miro-verification=1a94b0fef7a6d5136a272d5cb425e8dc034e8cfc",
      "adobe-idp-site-verification=c3a16fcb00ac5365e4ea125d5e59d4be11936f768b3020c4d81b4232019604a2",
      "google-site-verification=mTy-FoNnG0yetpI3-0e9AXctAkUCcWGc_K3BcMfioFI",
      "Fzj91DPhHcxL3FxKMiBraJ9CajRin4nqr8AxflyEQLI+dM+xdOt5/I8F4xGMWelgP2SwFda7w8U2KZFjDR6Ocg==",
      "atlassian-sending-domain-verification=da3721b6-1d2c-4c32-bf01-b792667aeb4d",
      "MS=ms25863558",
      "_globalsign-domain-verification=5GrT2z5vxm0YIa9U_xjj4nNN6WxSZLM_XmaoKQ-UW1",
      "dropbox-domain-verification=mtgv0f2pudoz",
      "google-site-verification=yTRDtkD0tgHXSaJL0EtVrYGv1moNR-QkK8BAvjTv2Q8",
      "xoCARoExwkNhLPdKaaxv",
      "v=spf1 ip4:212.58.224.0/19 ip4:132.185.0.0/16 +include:spf.messagelabs.com ~all",
      "atlassian-domain-verification=SQsgJ5h/FqwMTXuSG/G4Nd1Gx6uX2keREOsZSa22D5XT46EsEuyaic8Aej4cR4Tr",
      "docusign=75217687-3ba0-49bb-bb3b-482d888493af",
      "slack-domain-verification=hza4gfkmctQ7A7BpMhGNVOZVZcKTFC8OC5ewDFVA",
      "docusign=57499c1f-9099-463b-a5bd-cb7583816d78",
      "docker-verification=f89691bb-7bdd-4bc1-9673-57454d6d9c42",
      "mjf9k04mhzmh7s2p5d2l2g43l80mct9b",
      "Validity-Domain-Verification=TYXJnAeGHNF4DGlOgE4vdoDT3a0="
    ],
    "time": 0,
    "dns_resolve_time": 1713781084.0001438
  },
  "dnssecuritytxt": {
    "security_contact": null,
    "security_policy": null,
    "matching_domain": null
  },
  "port": 443,
  "certificate": {
    "issuer": "/C=BE/O=GlobalSign nv-sa/CN=GlobalSign RSA OV SSL CA 2018",
    "notAfter": "2024-11-12 09:06:10 UTC",
    "notBefore": "2023-11-30 13:54:03 UTC",
    "serialNumber": 15495632858644597585920700903,
    "subject": "/C=GB/ST=London/L=London/O=BRITISH BROADCASTING CORPORATION/CN=www.bbc.com",
    "keyUsage": [
      "Digital Signature, Key Encipherment"
    ],
    "basicConstraints": [
      "CA:FALSE"
    ],
    "authorityInfoAccess": [
      {
        "CA Issuers - URI": "http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt"
      },
      {
        "OCSP - URI": "http://ocsp.globalsign.com/gsrsaovsslca2018"
      }
    ],
    "certificatePolicies": [
      "Policy: 1.3.6.1.4.1.4146.1.20",
      "CPS: https://www.globalsign.com/repository/",
      "Policy: 2.23.140.1.2.2"
    ],
    "crlDistributionPoints": [
      "Full Name:",
      {
        "URI": "http://crl.globalsign.com/gsrsaovsslca2018.crl"
      }
    ],
    "subjectAltName": {
      "DNS": [
        "www.bbc.com",
        "www.bbc.co.uk",
        "www.bbcrussian.com",
        "bbc.co.uk",
        "bbcrussian.com",
        "session.bbc.co.uk",
        "search.bbc.co.uk",
        "open.live.bbc.co.uk",
        "r.bbci.co.uk",
        "account.bbc.com",
        "session.bbc.com",
        "bbc.com"
      ]
    },
    "extendedKeyUsage": [
      "TLS Web Server Authentication, TLS Web Client Authentication"
    ],
    "authorityKeyIdentifier": [
      "F8:EF:7F:F2:CD:78:67:A8:DE:6F:8F:24:8D:88:F1:87:03:02:B3:EB"
    ],
    "subjectKeyIdentifier": [
      "85:F4:99:F1:F3:55:40:CE:E9:91:13:EA:B0:47:8D:4E:38:93:63:EC"
    ],
    "ct_precert_scts": [
      "Signed Certificate Timestamp:",
      "Version   : v1 (0x0)",
      "Log ID    : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:",
      "ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E",
      "Timestamp : Nov 30 13:54:09.144 2023 GMT",
      "Extensions: none",
      "Signature : ecdsa-with-SHA256",
      "30:46:02:21:00:C9:72:B7:5E:83:AB:2B:84:8F:93:B2:",
      "52:72:7C:07:31:26:9D:58:6A:0B:3B:62:BA:9C:0F:C7:",
      "B8:31:86:B3:1F:02:21:00:DB:6C:0F:EA:2E:9A:58:A7:",
      "4F:69:A2:E6:26:40:0D:AF:AA:35:0D:7A:6E:95:20:BE:",
      "B4:00:24:C8:58:7C:DF:33",
      "Log ID    : DF:E1:56:EB:AA:05:AF:B5:9C:0F:86:71:8D:A8:C0:32:",
      "4E:AE:56:D9:6E:A7:F5:A5:6A:01:D1:C1:3B:BE:52:5C",
      "Timestamp : Nov 30 13:54:09.120 2023 GMT",
      "30:44:02:20:28:F7:10:63:67:AC:1D:1F:E2:65:AA:87:",
      "89:20:52:C0:C7:E2:16:E2:44:AE:2E:46:59:BE:7F:F7:",
      "D5:BF:F5:92:02:20:44:96:E7:C0:EF:94:10:A4:C8:5E:",
      "D2:7F:95:B5:0B:39:3B:8E:AA:6F:B9:5E:2E:52:11:AF:",
      "25:34:10:B8:3B:AB",
      "Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:",
      "32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B",
      "Timestamp : Nov 30 13:54:09.095 2023 GMT",
      "30:44:02:20:0F:00:16:DB:0B:43:2F:B3:CF:F6:8F:E7:",
      "98:86:0B:A1:99:44:17:3D:50:FA:B6:30:35:98:18:0C:",
      "01:49:E6:3D:02:20:0C:36:A4:C5:39:13:31:44:13:9F:",
      "60:77:A8:CC:66:35:19:06:37:14:40:02:73:7F:53:A2:",
      "F9:EE:A1:45:09:BA"
    ]
  },
  "http_security_txt": {
    "url": "https://www.bbc.com/.well-known/security.txt",
    "status_code": 200,
    "has_contact": true,
    "valid_https": true,
    "valid_content_type": true,
    "full_text": "# version: e1029be4c0b1cec042f67df61068eda5c9174541\n# British Broadcasting Corporation - reporting security vulnerabilities to the BBC\n  \n# Please report any security vulnerabilities to us via the contact method(s) below, only after reading our disclosure policy.\n# Please do not include any sensitive information in your initial message, we'll provide a secure communication method in our reply to you.\nContact: mailto:security@bbc.co.uk\n \n# Our disclosure policy. By submitting a potential security incident to us, you are implicitly accepting these terms - please read this before submitting:\nPolicy: https://www.bbc.com/backstage/security-disclosure-policy/\n\n# We're continually recruiting, please visit the link below and search for "information security" if you're interested in a career with the BBC in infosec\nhttps://careers.bbc.co.uk/search/\n\nExpires: 2038-01-19T03:14:07Z\n\n# The BBC SOC does have some folks who speak languages other than English, however coverage isn't guaranteed for anything other than English\nPreferred-Languages: en\n  \n# Please see https://securitytxt.org/ for details of the specification of this file",
    "min_text": "Contact: mailto:security@bbc.co.uk\nPolicy: https://www.bbc.com/backstage/security-disclosure-policy/\nExpires: 2038-01-19T03:14:07Z\nPreferred-Languages: en\n",
    "items": {
      "Acknowledgements": [],
      "Canonical": [],
      "Contact": [
        "mailto:security@bbc.co.uk"
      ],
      "Encryption": [],
      "Preferred-Languages": "en",
      "Expires": "2038-01-19T03:14:07Z",
      "Hiring": [],
      "Policy": [
        "https://www.bbc.com/backstage/security-disclosure-policy/"
      ]
    },
    "headers": {
      "content-type": "text/plain",
      "nel": "{\"report_to\":\"default\",\"max_age\":2592000,\"include_subdomains\":true,\"failure_fraction\":0.25}",
      "cache-control": "max-age=3600, public, stale-if-error=86400, stale-while-revalidate=600",
      "x-amz-server-side-encryption": "AES256",
      "report-to": "{\"group\":\"default\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://europe-west1-bbc-otg-traf-mgr-bq-prod-4591.cloudfunctions.net/report-endpoint\",\"priority\":1}],\"include_subdomains\":true}, {\"group\":\"default\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://default.bbc-reporting-api.app/report-endpoint\",\"priority\":1}],\"include_subdomains\":true}",
      "etag": "\"d270da92d780052e925fbbd42ea5dad4\"",
      "req-svc-chain": "FASTLY,GTM,VTM",
      "x-amz-id-2": "tDTNnrD3cL2CjiYUjRWgtbRVVCnTqUSoRzlkjdVH1qiKDi2W130m9leQukXhvuW3CABElhkgryA=",
      "x-origin-route": "xrt-ostore",
      "last-modified": "Wed, 03 Apr 2024 20:32:37 GMT",
      "x-amz-request-id": "ATFFSWGDKZS59EJQ",
      "origin-agent-cluster": "?0",
      "via": "1.1 BBC-GTM, 1.1 varnish",
      "x-bbc-edge-cache-status": "MISS",
      "x-bbc-origin-response-status": "200",
      "server": "BBC-GTM",
      "strict-transport-security": "max-age=31536000; preload",
      "fastly-restarts": "1",
      "content-encoding": "gzip",
      "accept-ranges": "bytes",
      "date": "Mon, 22 Apr 2024 10:18:04 GMT",
      "x-fastly-cache-status": "MISS-CLUSTER",
      "x-served-by": "cache-iad-kcgs7200043-IAD",
      "x-cache": "MISS",
      "x-cache-hits": "0",
      "x-timer": "S1713781084.442139,VS0,VE171",
      "x-fastly-pre-flight-cache": "MISS, HIT",
      "x-fastly-pre-flight-cache-status": "HIT-CLUSTER",
      "x-cache-age": "0",
      "vary": "Accept-Encoding",
      "alt-svc": "h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400",
      "content-length": "644"
    },
    "http_version": "HTTP/2",
    "redirects": [
      {
        "type": "301",
        "val": "https://bbc.com/.well-known/security.txt",
        "https": true,
        "http_version": "HTTP/2"
      },
      {
        "type": "200",
        "val": "https://www.bbc.com/.well-known/security.txt",
        "https": true,
        "http_version": "HTTP/2"
      }
    ],
    "type": "https_well-known"
  },
  "rank": 61
}

dnssecuritytxt (DNS)

You can find out more about dnssecuritytxt here.

No DNS records found

security.txt (HTTP)

You can find out more about security.txt here or by looking up RFC 9116.

Status: 200

Scheme: https

URL: https://www.bbc.com/.well-known/security.txt (HTTP/2)

Has a contact: Yes

Contacts:

Policy:

Minimal version: 

Contact: mailto:security@bbc.co.uk
Policy: https://www.bbc.com/backstage/security-disclosure-policy/
Expires: 2038-01-19T03:14:07Z
Preferred-Languages: en

Full version: 

# version: e1029be4c0b1cec042f67df61068eda5c9174541
# British Broadcasting Corporation - reporting security vulnerabilities to the BBC
  
# Please report any security vulnerabilities to us via the contact method(s) below, only after reading our disclosure policy.
# Please do not include any sensitive information in your initial message, we'll provide a secure communication method in our reply to you.
Contact: mailto:security@bbc.co.uk
 
# Our disclosure policy. By submitting a potential security incident to us, you are implicitly accepting these terms - please read this before submitting:
Policy: https://www.bbc.com/backstage/security-disclosure-policy/

# We're continually recruiting, please visit the link below and search for "information security" if you're interested in a career with the BBC in infosec
https://careers.bbc.co.uk/search/

Expires: 2038-01-19T03:14:07Z

# The BBC SOC does have some folks who speak languages other than English, however coverage isn't guaranteed for anything other than English
Preferred-Languages: en
  
# Please see https://securitytxt.org/ for details of the specification of this file

Redirects:

  • 301: https://bbc.com/.well-known/security.txt (HTTP/2)
  • 200: https://www.bbc.com/.well-known/security.txt (HTTP/2)
Updated at: 10:18:04+0000 on 22 April 2024