bbc.org.uk
domain Headers F TLS 0 No HTTPSHosted by Bbc Bbc (AS2818) · Address 212.58.249.206, 212.58.249.207, 212.58.244.129, 212.58.244.210, 2001:41c1:4008:0:0:0:bbc:5, 2001:41c1:4008:0:0:0:bbc:6, 2001:41c1:4007:0:0:0:bbc:5, 2001:41c1:4007:0:0:0:bbc:6, 2001:41c1:4007:0:0:0:bbc:7, 2001:41c1:4007:0:0:0:bbc:8
Findings
-
Fail No working HTTPS WEB-NO-HTTPS
Failed to connect to bbc.org.uk port 443 after 5 ms: Could not connect to server
How to fix: Serve the site over HTTPS with a valid certificate; browsers mark plain HTTP as not secure.
-
Fail TLS score 0 (F) TLS-SCORE
See the TLS rubric table for the points lost.
-
Fail TLS handshake failed on port 443 TLS-HANDSHAKE-FAILED
111 Connection refused
-
Caution Plain HTTP serves content instead of redirecting to HTTPS WEB-HTTP-NO-REDIRECT
How to fix: Redirect http:// to https:// with a 301.
-
Pass Responds to ping from LON1 PING-OK
avg 5.069 ms
HTTPS · redirect trail
ERRhttps://bbc.org.uk/ Failed to connect to bbc.org.uk port 443 after 5 ms: Could not connect to server
Failed to connect to bbc.org.uk port 443 after 5 ms: Could not connect to server
Plain HTTP · redirect trail
200http://bbc.org.uk/
- Final
- http://bbc.org.uk/
- Timings
- DNS 0 · connect 6 · TLS 0 · first byte 85 · total 85 ms
- Body
- 1,720 bytes
TLS certificate score 0/100 · F
- 0/100TLS handshake111 Connection refused
111 Connection refused
Security headers grade F · 25/100
- 0/25Strict-Transport-SecurityMissing: browsers keep trying plain HTTP.
- 25/25Content-Security-PolicyPresent.
- 0/10X-Content-Type-Optionsnosniff stops MIME-type guessing.
- 0/15X-Frame-Options / frame-ancestorsMissing: pages can be framed for click-jacking.
- 0/10Referrer-PolicyMissing: full URLs may leak to other sites.
- 0/10Permissions-PolicySwitches off browser features the site does not use.
- 0/5Cross-Origin-Opener-PolicyIsolates the window from cross-origin openers.
- – HSTS Tells browsers to use HTTPS only.
- ✓ Content-Security-Policy upgrade-insecure-requests
- – X-Frame-Options Blocks clickjacking by refusing to be framed.
- – X-Content-Type-Options Stops MIME-type sniffing.
- – Referrer-Policy Controls what URL is leaked to other sites.
- – Permissions-Policy Limits browser features such as camera or geolocation.
Ping from LON1
4/4 replies · 0% loss · min/avg/max 5.04/5.069/5.094 ms
#1 5.04ms #2 5.07ms #3 5.09ms #4 5.07ms
Ports: 80 open443 closed
Traceroute from LON1
| 1 | 185.119.110.1 | 1.082 ms | |
| 2 | 185.27.244.17 | xe-0-1-5.juniper2.cwcs.net | 4.826 ms |
| 3 | 5.57.80.90 | rt-lonap-b.thdo.bbc.co.uk | 5.353 ms |
| 4 | 132.185.254.166 | 5.034 ms | |
| 5 | * | 0 ms | |
| 6 | 132.185.249.7 | ae2.er01.lbh.bbc.co.uk | 5.233 ms |
| 7 | 132.185.252.126 | 21.83 ms | |
| 8 | 212.58.249.206 | bbc-vip144.lbh.bbc.co.uk | 5.136 ms |