{"engine":"web","target":"bbc.com","checked_at":"2026-10-30T22:19:12+00:00","cached":false,"duration_ms":3638,"error":null,"score":95,"counts":{"pass":8,"caution":1,"fail":0,"note":1,"skipped":0},"data":{"host":"bbc.com","ips":["151.101.0.81","151.101.64.81","151.101.128.81","151.101.192.81","2a04:4e42:0:0:0:0:0:81","2a04:4e42:200:0:0:0:0:81","2a04:4e42:400:0:0:0:0:81","2a04:4e42:600:0:0:0:0:81"],"http":{"start":"http:\/\/bbc.com\/","hops":[{"url":"http:\/\/bbc.com\/","ip":"151.101.0.81","status":301,"location":"https:\/\/bbc.com\/","ms":12},{"url":"https:\/\/bbc.com\/","ip":"151.101.0.81","status":301,"location":"https:\/\/www.bbc.com\/","ms":34},{"url":"https:\/\/www.bbc.com\/","ip":"151.101.0.81","status":200,"location":null,"ms":48}],"final":{"url":"https:\/\/www.bbc.com\/","status":200,"ip":"151.101.0.81","http_version":"HTTP\/2","headers":{"content-type":"text\/html; charset=utf-8","belfrage-cache-status":"HIT","bid":"sally","brequestid":"d01d4b18cf79413092f35bc90fe477e0","bsig":"4e96bd427dd182fd8c31aca807fafd41","content-encoding":"gzip","etag":"\"188bwi18n2ze2py\"","referrer-policy":"no-referrer-when-downgrade","req-svc-chain":"GTM,BELFRAGE,BBCX","via":"1.1 BBC-GTM, 1.1 Belfrage, 1.1 varnish","x-content-type-options":"nosniff","x-correlation-id":"33f48268-0b0e-49f2-92a3-da073d66f97e","x-frame-options":"SAMEORIGIN","origin-agent-cluster":"?0","nel":"{\"report_to\":\"default\",\"max_age\":2592000,\"include_subdomains\":true,\"failure_fraction\":0.25}","x-bbc-edge-cache-status":"HIT","report-to":"{\"group\":\"default\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https:\/\/default.bbc-reporting-api.app\/report-endpoint\",\"priority\":1}],\"include_subdomains\":true}","server":"BBC-GTM","strict-transport-security":"max-age=31536000; preload","x-robots-tag":"bingbot: noarchive","fastly-restarts":"1","accept-ranges":"bytes","date":"Fri, 30 Oct 2026 22:19:13 GMT","x-fastly-cache-status":"HIT","x-served-by":"cache-lcy-eglc8600081-LCY","x-cache":"HIT","x-cache-hits":"2","x-timer":"S1793398753.240743,VS0,VE6","x-fastly-pre-flight-cache":"MISS, MISS","x-fastly-pre-flight-cache-status":"MISS-CLUSTER","x-cache-age":"13","x-lb-nocache":"true","cache-control":"private, stale-if-error=90, stale-while-revalidate=30, max-age=0, must-revalidate","vary":"X-BBC-Edge-Scheme,bbc-mvt-1,bbc-mvt-2,bbc-mvt-3,bbc-mvt-4,bbc-mvt-5,bbc-mvt-6,bbc-mvt-7,bbc-mvt-8,bbc-mvt-9,bbc-mvt-10,Accept-Encoding","alt-svc":"h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400","content-length":"94070"},"body_bytes":657262,"timings":{"dns_ms":0,"connect_ms":5,"tls_ms":0,"ttfb_ms":40,"total_ms":48},"title":"BBC Home | Breaking News, World News, US News, Sports, Business, Innovation, Climate, Culture, Travel, Video & Audio"},"error":null,"loop":false},"https":{"start":"https:\/\/bbc.com\/","hops":[{"url":"https:\/\/bbc.com\/","ip":"151.101.0.81","status":301,"location":"https:\/\/www.bbc.com\/","ms":33},{"url":"https:\/\/www.bbc.com\/","ip":"151.101.192.81","status":200,"location":null,"ms":44}],"final":{"url":"https:\/\/www.bbc.com\/","status":200,"ip":"151.101.192.81","http_version":"HTTP\/2","headers":{"content-type":"text\/html; charset=utf-8","belfrage-cache-status":"HIT","bid":"sally","brequestid":"d01d4b18cf79413092f35bc90fe477e0","bsig":"4e96bd427dd182fd8c31aca807fafd41","content-encoding":"gzip","etag":"\"188bwi18n2ze2py\"","referrer-policy":"no-referrer-when-downgrade","req-svc-chain":"GTM,BELFRAGE,BBCX","via":"1.1 BBC-GTM, 1.1 Belfrage, 1.1 varnish","x-content-type-options":"nosniff","x-correlation-id":"33f48268-0b0e-49f2-92a3-da073d66f97e","x-frame-options":"SAMEORIGIN","origin-agent-cluster":"?0","nel":"{\"report_to\":\"default\",\"max_age\":2592000,\"include_subdomains\":true,\"failure_fraction\":0.25}","x-bbc-edge-cache-status":"HIT","report-to":"{\"group\":\"default\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https:\/\/default.bbc-reporting-api.app\/report-endpoint\",\"priority\":1}],\"include_subdomains\":true}","server":"BBC-GTM","strict-transport-security":"max-age=31536000; preload","x-robots-tag":"bingbot: noarchive","fastly-restarts":"1","accept-ranges":"bytes","date":"Fri, 30 Oct 2026 22:19:13 GMT","x-fastly-cache-status":"HIT-CLUSTER","x-served-by":"cache-lcy-eglc8600061-LCY","x-cache":"HIT","x-cache-hits":"1","x-timer":"S1793398753.340027,VS0,VE3","x-fastly-pre-flight-cache":"MISS, HIT","x-fastly-pre-flight-cache-status":"HIT-CLUSTER","x-cache-age":"13","x-lb-nocache":"true","cache-control":"private, stale-if-error=90, stale-while-revalidate=30, max-age=0, must-revalidate","vary":"X-BBC-Edge-Scheme,bbc-mvt-1,bbc-mvt-2,bbc-mvt-3,bbc-mvt-4,bbc-mvt-5,bbc-mvt-6,bbc-mvt-7,bbc-mvt-8,bbc-mvt-9,bbc-mvt-10,Accept-Encoding","alt-svc":"h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400","content-length":"94070"},"body_bytes":657262,"timings":{"dns_ms":0,"connect_ms":5,"tls_ms":0,"ttfb_ms":36,"total_ms":44},"title":"BBC Home | Breaking News, World News, US News, Sports, Business, Innovation, Climate, Culture, Travel, Video & Audio"},"error":null,"loop":false},"tls":{"verified":true,"verify_error":null,"cert":{"subject":"www.bbc.com","issuer":"GlobalSign nv-sa GlobalSign GCC R46 OV TLS CA 2025","not_before":"2026-08-21T11:32:02+00:00","not_after":"2027-01-24T05:46:23+00:00","days_left":85,"sans":["www.bbc.com","account.bbc.com","session.bbc.com","account.bbc.co.uk","bbc.co.uk","bbcrussian.com","cdnedge.bbc.co.uk","news.bbc.co.uk","news.bbcimg.co.uk","newsimg.bbc.co.uk","newsrss.bbc.co.uk","newsvote.bbc.co.uk","node1.bbcimg.co.uk","open.live.bbc.co.uk","playlists.bbc.co.uk","r.bbci.co.uk","search.bbc.co.uk","session.bbc.co.uk","www.bbc.co.uk","www.bbcrussian.com","wwwnews.live.bbc.co.uk","bbc.com"],"matches_host":true,"key_type":"RSA","key_bits":2048,"signature_algorithm":"RSA-SHA256","serial":"6E7A1A3BCC16CED3408380B0","self_signed":false},"chain":[{"subject":"www.bbc.com","issuer":"GlobalSign GCC R46 OV TLS CA 2025","not_after":"2027-01-24T05:46:23+00:00"},{"subject":"GlobalSign GCC R46 OV TLS CA 2025","issuer":"GlobalSign Root R46","not_after":"2029-06-23T00:00:00+00:00"},{"subject":"GlobalSign Root R46","issuer":"GlobalSign","not_after":"2029-03-18T00:00:00+00:00"}],"negotiated":{"protocol":"TLSv1.3","cipher":"TLS_AES_128_GCM_SHA256","bits":128},"protocols":{"TLSv1":false,"TLSv1.1":false,"TLSv1.2":true,"TLSv1.3":true},"error":null},"headers":{"strict-transport-security":{"label":"HSTS","why":"Tells browsers to use HTTPS only.","value":"max-age=31536000; preload"},"content-security-policy":{"label":"Content-Security-Policy","why":"Limits where scripts and content may load from.","value":null},"x-frame-options":{"label":"X-Frame-Options","why":"Blocks clickjacking by refusing to be framed.","value":"SAMEORIGIN"},"x-content-type-options":{"label":"X-Content-Type-Options","why":"Stops MIME-type sniffing.","value":"nosniff"},"referrer-policy":{"label":"Referrer-Policy","why":"Controls what URL is leaked to other sites.","value":"no-referrer-when-downgrade"},"permissions-policy":{"label":"Permissions-Policy","why":"Limits browser features such as camera or geolocation.","value":null}},"probe":{"region":"lon1","ping":{"target":"151.101.0.81","resolved_ip":"151.101.0.81","elapsed_ms":620,"sent":4,"received":4,"loss_pct":0,"rtt":{"min":4.681,"avg":4.7,"max":4.732,"mdev":0.02},"replies":[{"seq":1,"ttl":58,"ms":4.68},{"seq":2,"ttl":58,"ms":4.68},{"seq":3,"ttl":58,"ms":4.7},{"seq":4,"ttl":58,"ms":4.73}],"error":null},"trace":{"target":"151.101.0.81","resolved_ip":"151.101.0.81","elapsed_ms":2995,"hops":[{"hop":1,"ip":"185.119.110.1","loss_pct":0,"sent":1,"rtts_ms":{"best":0.953,"avg":0.953,"worst":0.953,"last":0.953},"ptr":null},{"hop":2,"ip":"185.27.244.17","loss_pct":0,"sent":1,"rtts_ms":{"best":4.747,"avg":4.747,"worst":4.747,"last":4.747},"ptr":"xe-0-1-5.juniper2.cwcs.net"},{"hop":3,"ip":"83.217.238.61","loss_pct":0,"sent":1,"rtts_ms":{"best":9.339,"avg":9.339,"worst":9.339,"last":9.339},"ptr":"xe-1-4-2-0.a02.londen12.uk.bb.gin.ntt.net"},{"hop":4,"ip":"168.143.97.78","loss_pct":0,"sent":1,"rtts_ms":{"best":8.9,"avg":8.9,"worst":8.9,"last":8.9},"ptr":"ae-2.fastly.londen12.uk.bb.gin.ntt.net"},{"hop":5,"ip":"151.101.0.81","loss_pct":0,"sent":1,"rtts_ms":{"best":4.731,"avg":4.731,"worst":4.731,"last":4.731},"ptr":null}],"reached":true,"error":null},"ports":{"target":"151.101.0.81","resolved_ip":"151.101.0.81","ports":{"80":{"open":true,"connect_ms":5},"443":{"open":true,"connect_ms":5}}}},"hosting":{"ip":"151.101.0.81","asn":54113,"asn_name":"FASTLY - Fastly, Inc., US","prefix":"151.101.0.0\/22","ptr":null,"provider":"Fastly"},"headers_grade":{"score":50,"grade":"C","checks":[{"key":"hsts","label":"Strict-Transport-Security","ok":true,"points":25,"max":25,"why":"Present with a six-month or longer max-age."},{"key":"csp","label":"Content-Security-Policy","ok":false,"points":0,"max":25,"why":"Missing: no defence in depth against injected scripts."},{"key":"nosniff","label":"X-Content-Type-Options","ok":true,"points":10,"max":10,"why":"nosniff stops MIME-type guessing."},{"key":"frame","label":"X-Frame-Options \/ frame-ancestors","ok":true,"points":15,"max":15,"why":"Pages cannot be framed by other sites."},{"key":"referrer","label":"Referrer-Policy","ok":false,"points":0,"max":10,"why":"'no-referrer-when-downgrade' leaks full URLs cross-site."},{"key":"permissions","label":"Permissions-Policy","ok":false,"points":0,"max":10,"why":"Switches off browser features the site does not use."},{"key":"coop","label":"Cross-Origin-Opener-Policy","ok":false,"points":0,"max":5,"why":"Isolates the window from cross-origin openers."}],"penalties":[]},"tls_score":{"score":100,"grade":"A","checks":[{"key":"valid","label":"Certificate within validity","ok":true,"points":25,"max":25,"why":"Valid for 85 more days."},{"key":"trusted","label":"Chain verifies to a trusted root","ok":true,"points":20,"max":20,"why":"Full chain sent and trusted."},{"key":"name","label":"Certificate matches the host name","ok":true,"points":10,"max":10,"why":"Host name is on the certificate."},{"key":"key","label":"Key strength","ok":true,"points":10,"max":10,"why":"RSA 2048-bit."},{"key":"sig","label":"Signature algorithm","ok":true,"points":5,"max":5,"why":"rsa-sha256"},{"key":"legacy","label":"Legacy protocols refused","ok":true,"points":15,"max":15,"why":"TLS 1.0\/1.1 refused."},{"key":"tls13","label":"TLS 1.3 offered","ok":true,"points":10,"max":10,"why":"Modern clients get TLS 1.3."},{"key":"hsts","label":"HSTS sent","ok":true,"points":5,"max":5,"why":"Pins the browser to HTTPS after the first visit."}]}},"findings":[{"level":"pass","code":"WEB-HTTPS-OK","title":"Site answers over HTTPS","detail":"HTTP 200 in 44 ms","facet":"web"},{"level":"pass","code":"WEB-HTTP-REDIRECTS","title":"Plain HTTP redirects to HTTPS","detail":"https:\/\/www.bbc.com\/","facet":"web"},{"level":"caution","code":"SEC-HEADERS-GRADE","title":"Security headers grade C","detail":"50 \/ 100 on our rubric","fix":"Add HSTS, a Content-Security-Policy, nosniff and frame-ancestors; see the Learn guide on security headers.","facet":"web"},{"level":"pass","code":"HSTS-OK","title":"HSTS is enabled","detail":"max-age=31536000; preload","facet":"web"},{"level":"note","code":"CSP-MISSING","title":"No Content-Security-Policy","facet":"web"},{"level":"pass","code":"TLS-SCORE","title":"TLS score 100 (A)","detail":"On our published rubric: validity, trust, key, protocols, HSTS.","facet":"web"},{"level":"pass","code":"TLS-VALIDITY-OK","title":"Certificate valid for 85 more days","detail":"2027-01-24T05:46:23+00:00","facet":"web"},{"level":"pass","code":"TLS-TRUSTED","title":"Certificate chain verifies","detail":"GlobalSign nv-sa GlobalSign GCC R46 OV TLS CA 2025","facet":"web"},{"level":"pass","code":"TLS-MODERN","title":"TLS 1.3 supported; legacy protocols refused","detail":"TLSv1.3","facet":"web"},{"level":"pass","code":"PING-OK","title":"Responds to ping from LON1","detail":"avg 4.7 ms","facet":"web"}],"raw":[]}