Open
Cached
·
just now
56
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31536000
Content-Security-Policy
Good
default-src; script-src; style-src; +10 more
default-src 'self';script-src 'self' https://subscriptions.payments.yahoo.com https://cdn.payments.yahoo.com https://s.yimg.com/ https://ec.yimg.com/didomi/ 'nonce-MzYzMDAwZmYtM2QwNS00MDEyLWE5OWItYzc4ZjI3NjlmM2Iw' 'sha256-GAjmaehDsJH2jDoKMtZaYsCWJI2Ugs8esNnVYk0k3f0=' 'sha256-oxle7j3cID7IXumE4HYP0msjVTXOYty6vFuJOD4W/GI=';style-src self 'unsafe-inline' https://cdn.payments.yahoo.com https://subscriptions.payments.yahoo.com;connect-src 'self' https://guce.yahoo.com https://subscriptions.payments.yahoo.com https://cdn.payments.yahoo.com https://udc.yahoo.com https://consent.yahoo.com/ https://api.alyavista.com https://acapi.yahoo.com https://api.privacy-center.org/ https://sdk.privacy-center.org/ https://s.yimg.com/oa/consent.js.map https://geo.yahoo.com https://datacollector.payments.yahoo.com;img-src 'self' https://cdn.payments.yahoo.com https://subscriptions.payments.yahoo.com https://s.yimg.com https://ganon.yahoo.com/ https://geo.yahoo.com/;font-src 'self' https://subscriptions.payments.yahoo.com https://cdn.payments.yahoo.com https://s.yimg.com https://consent.yahoo.com/ https://guce.engadget.com;frame-src 'self' https://consent.yahoo.com/ https://ganon.yahoo.com/ https://geo.yahoo.com/ https://guce.engadget.com;object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests ;media-src 'self' https://cdn.payments.yahoo.com;
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
geolocation=(self), camera=(), microphone=(), fullscreen=(), payment=(self)
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Strengthen CSP by removing 'unsafe-eval'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
Performance Headers
3 headers
Connection
Performance
keep-alive
Transfer-Encoding
Performance
chunked
Vary
Performance
RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, Accept-Encoding
Caching Headers
2 headers
Age
Caching
0
Cache-Control
Caching
no-store
Content Headers
1 headers
Content-Type
Content
text/html; charset=utf-8
Server Headers
1 headers
Server
Server
ATS
CORS Headers
3 headers
Access-Control-Allow-Credentials
Cors
true
Access-Control-Allow-Headers
Cors
Authorization, Client-Name, Country, Currency, Content-Type, RequestId
Access-Control-Allow-Methods
Cors
GET, POST, OPTIONS, PUT
Cookies Headers
0 headers
No cookies headers found
Other Headers
39 headers
X-Forwarded-Proto
Other
https
X-Cdn
Other
YCPI-frontpage
X-Forwarded-For
Other
204.93.227.25, 69.147.94.60
X-Yahoo-Dc-Robot
Other
1
X-Acookie-Fields
Other
BBX=0; GUC=0; A1=0; A3=0; MISMATCH=0; C_WOEID=23424977; S_WOEID=2347572; IS_EU=0; GEN_EXEMPT=1; G_TOS=UNK;
Date
Other
Sat, 22 Nov 2025 23:33:52 GMT
X-Amzn-Trace-Id
Other
Root=1-69224860-5f4fb8fe695d84a36f5e104f
X-Forwarded-Host
Other
www.yahoo.com
X-Ja3-Via
Other
e46.ycpi.dca.yahoo.com
X-Safet-Matched-Rules
Other
global.remote_ip;orm=0;orc=0;
X-Amzn-Mtls-Clientcert-Issuer
Other
CN=Yahoo Athenz CA,OU=BF,O=Yahoo,C=US
X-Forwarded-Port
Other
443
X-Yahoo-Dc-Time-Cost
Other
2
X-Guce-Trap-Fields
Other
CLIENT=NONEU;
X-Yahoo-Dc-Device-Type
Other
featurephone
X-Envoy-Upstream-Service-Time
Other
12
X-Envoy-Expected-Rq-Timeout-Ms
Other
15000
X-Yahoo-Dc-Classify-Method
Other
use global default type
X-Amzn-Mtls-Clientcert-Serial-Number
Other
0CD2175D656DC08B021F8371CD21F78E
Link
Other
<https://s.yimg.com/bw/fonts/yahoo-product-sans-vf.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"
Client-Ip
Other
204.93.227.25
Y-P
Other
eyJhbGciOiJFQ0RILUVTK0ExMjhLVyIsImVuYyI6IkExMjhDQkMtSFMyNTYiLCJlcGsiOnsiY3J2IjoiUC0yNTYiLCJrdHkiOiJFQyIsIngiOiJOb2gtaHl5UmNXM0tQR042emoyT1lkbVBFUlR4MG1NY3dqM0ZrcXVqZEprIiwieSI6InY4ejFub1hoTDNZZkdrWkxEQ096VklEdFRtdHp2LU54ZXNZeE9sdTZBRDgifSwia2lkIjoiMCIsInR5cCI6IkpXVCJ9.-GL-g_86WvhygCLIVcdtqxbH2zaWMtwQzd6AeogMkmjggF8kkZQyRw.3VS93TrV2we8YzaMc-cfEg.QgHrL5zuO-Ro5S969ZEaIZJiG-vDcpMEKaNRUHJi595-E5H_0se3qx4354TeC-OdcTWqEsW-qeXozvhb1GxqfHGBSFWP8jTCp9pN0TkvvlwNMY0LvvVkH_hAqioKgQrw3cpfrBJkyJOA0SaJETQIUVFhRwEGT3oEPVFh6JmzILtVpoSqTj_uqwkcWQhna7okhPzSBm8SSyg87w7otZvLcCDgNs5T8b88iVGaSlJ4MavRNMETLOLnkg7VYYXE50YstVNAMN2JXe1FmW2atDYk0MV1qMXiWdF71z0CqKNZGrGieAez5hnpoPZAA__uWKnrl_sGmKeSISF0axJ96CsAPvE2QLDBQuG9TH5Er_nlo78NZnXOVMYH3iJbo414Tl61RSlquR6LE9l_Au12W-tH-9sZ-1RBxjCNawA_75c7BBhuOybR3eg5NJPmeoRSOfb6v6S882jj1cw4vZAq0uv_IIAu5-k_i6VY2YL3B6ALLOGgV7PZubkPgCgjnEYCM8uo_104oqXjx6DzZ2W3yIRzC2m-uI1vNcSTb9w8qJLfhcz3cmQE1qCxn0_96L2XX6_hBR5svacqh9T3gK4nk4-jH1_81zuymS2qh0MPkCMVuL4KhaitOkrU532Y_es99WUqJkUQnGO5ofWx6dHtUi_PcvvJsrmXBtK1dnHutwHOVg4IyzWMqWcCPZeuk_aS___qpVpeofubInHNv8W7u-swkX-IYAWAeZVigZi9rZKdxr1WJtdhPqdSwODIn23w6YMgoVNExt8hk8ilIJi8nsV8ZXoTvR_kJffcGkr3IHvYvLM5JeHwTQ76sQLx5ZWqq9V0DPDtNRnTDhurgHuoTdorayffeCaKaoQHtPyL1QIWcGPXb5PT7LKYC_oAdRndo62b7M_oEYihXC48dh_ukol2_x6oEGYtl-jX99ERCrU1x-A.iL7cljq5JHk6bO2wVk_PJA
X-Yahoo-Site
Other
frontpage
X-Request-Id
Other
eead1866-4c60-4ffc-bf08-104e8a30a28b
Chad
Other
ai;
X-Amzn-Mtls-Clientcert-Leaf
Other
-----BEGIN%20CERTIFICATE-----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%0AM2MAafERom8Qo+02dNfRa2T/2dYcEMSrKf6psQ==%0A-----END%20CERTIFICATE-----%0A
X-Yahoo-Lang
Other
en-US
X-Amzn-Mtls-Clientcert-Validity
Other
NotBefore=2025-11-22T07:51:27Z;NotAfter=2025-12-22T08:51:27Z
User-Agent
Other
mint/1.7.1
X-Ja3-Sig
Other
c4f75f5ad8c11e8167a874be4326b2fd
X-Jaws
Other
56-782000000000073807ff00fffffb19ff|7-e4000000680|6-5f
X-Consent-Flow
Other
yguce
X-Safet-Classification
Other
GOOD
X-Yahoo-Region
Other
US
X-Amzn-Mtls-Clientcert-Subject
Other
CN=ycpi.egress.ycpi-remap,OU=sys.openstack.provider-ybiip,O=Athenz,L=Sunnyvale,ST=CA,C=US
X-Ycpi
Other
1
X-Jaws-Via
Other
e46.ycpi.dca.yahoo.com
X-Jurisdiction-Type
Other
US
Host
Other
www.yahoo.com
Recommendations
Enable compression (gzip/brotli) to improve performance
Analysis completed in 1050ms