HTTP Headers Analysis for https://login.yahoo.com

Detected Technologies from Headers

See all in URL Inspect 7

Apache Traffic Server

Facebook

Google Analytics

Google Tag Manager

IPQualityScore

Taboola

Yahoo

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Good

base-uri; child-src; connect-src; +9 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Strengthen CSP by removing 'unsafe-eval'
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Vary

Performance

Accept-Encoding

connection: close
vary: Accept-Encoding

Caching Headers

Age

Caching

0

Cache-Control

Caching

no-cache, no-store, must-revalidate

Expires

Caching

0

Pragma

Caching

no-cache

age: 0
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache

Content Headers

Content-Length

Content

38111

Content-Type

Content

text/html; charset=utf-8

content-length: 38111
content-type: text/html; charset=utf-8

Server Headers

Server

ATS

server: ATS

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: AS=v=1&s=dc2hPyBf&d=A69a1c793|YC9aBs_.2SrIroQjpSvYV_8b.JvfS6nqS2AoOmuyTOHbcowJ2tTAkuFbVnepBQOBbql0cdXh4IHIsrlBHWHr28OPr18mcp.d9obfY5OBdcDHH2Kzq1NdmKu50KOhD_.5gbyXiMcxrryKB9PKg36H4Pr1MyXHgx27jrsMvtvxANIa4ggefZsMRFYEECLduKkZoL20ePGk0fKi35qJ7G3eA3Hh8_Id1A9ky9b8fS_cIGZMHYXl.akFKT2RefjZPVQ3mSM52GQswOy48wdECej4OiEtCEN9KwHMp1uC6Rx4isnPwrZ1ASvqGKDVs0k.sd5QqHBuSXZdQxtbWl.6BLhUhpEYp.68bKq3TohzsP_zdirLxZgA76SEwu6658HsmNkKMpVQl8e1_mdAo0THkptBFNayOpkjo_g1BuJsYKvJCWBFADvij2SDBu348RscfiOG6RgVn5QlR2cLFX9pfBLf9TvYld96gpWb9mpMsBQdaz8zsv3e20_0JFAguV9BnuH1W_V18ymzoiNoiuomPEDnak2mqf985GEDaUV3_tLHlfZvh_acGTk5TthPNJRfnK1BUTJQliMkGlDvWan.agLzCA36zfBRAXfVlRzbMtHyAKhbPEDjncoMDipNXtQULOaODe056htz20SiULyVz2bLIwqjFkEQQ6kA5ejAkvLG.bPi0Xv0_oel17Wk40xjifAJxKtZwhFpxL.ajmcHVZh46cAvz76bJ9N1.UCpOJyUocR5BFzCTivCbA--~A; path=/; domain=login.yahoo.com; secure; HttpOnly

Other Headers

Date

Other

Thu, 26 Feb 2026 16:34:27 GMT

date: Thu, 26 Feb 2026 16:34:27 GMT

Recommendations

Enable compression (gzip/brotli) to improve performance