HTTP Headers Analysis for https://sso.yango.com

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

Close

connection: Close

Caching Headers

Etag

Caching

W/"9-0gXL1ngzMqISxa6S1zx3F4wtLyg"

etag: W/"9-0gXL1ngzMqISxa6S1zx3F4wtLyg"

Content Headers

Content-Length

Content

9

Content-Type

Content

text/plain; charset=utf-8

content-length: 9
content-type: text/plain; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: _yasc=CBvJnNdM9I0NGUbFo0S3jr7AScqf0jFwV7W2duk70UU2F3TTGLQMhNTKmpZ1EUQT; domain=.yango.com; path=/; expires=Sat, 03 May 2036 03:49:59 GMT; secure
i=wOFTaKDO2qVP6wekycqbJtwdd0y83hb42NxgsmK2dmoYr6KIjpljqTJCiI0Oshh7Dkp3UzS7jqzXssXLmALFg2Si6GQ=; Expires=Fri, 05-May-2028 03:49:59 GMT; Domain=.yango.com; Path=/; Secure; HttpOnly
yandexuid=7511148641778039399; Expires=Fri, 05-May-2028 03:49:59 GMT; Domain=.yango.com; Path=/; Secure
yashr=2606012791778039399; Path=/; Domain=.yango.com; Expires=Thu, 06 May 2027 03:49:59 GMT; Secure; HttpOnly; Partitioned

Other Headers

Date

Other

Wed, 06 May 2026 03:49:59 GMT

X-Dns-Prefetch-Control

Other

off

X-Download-Options

Other

noopen

date: Wed, 06 May 2026 03:49:59 GMT
x-dns-prefetch-control: off
x-download-options: noopen

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching