Site report for https://webattach.mail.yandex.net
Lookup another site?
| Site title | Not Present |
|---|---|
| Site rank | 2745 |
| Description | Not Present |
| Date first seen | August 2007 |
|---|---|
| Netcraft Risk Rating | 0/10 |
| Primary language | English |
| Site | https://webattach.mail.yandex.net |
|---|---|
| Netblock Owner | Yandex enterprise network |
| Domain | yandex.net |
| Nameserver | ns1.yandex.net |
| IP address | 87.250.251.147 (VirusTotal) |
| DNS admin | hostmaster@yandex.net |
| IPv6 address | 2a02:6b8:0:0:0:0:2:147 |
| Reverse DNS | mail-webattach-production-external.stable.qloud-b.yandex.net |
| Domain registrar | safenames.net |
|---|---|
| Nameserver organisation | whois.safenames.net |
| Organisation | Yandex Llc, 16 Lva Tolstogo str.,, Moscow, 119021, Russian Federation |
| Hosting company | Yandex |
| Top Level Domain | Network entities (.net) |
| DNS Security Extensions | unknown |
| Hosting country | RU |
| IP range | Country | Name | Description |
|---|---|---|---|
| 0.0.0.0-255.255.255.255 | N/A | IANA-BLK | The whole IPv4 address space |
| ↳ 87.0.0.0-87.255.255.255 | Netherlands | 87-RIPE | RIPE Network Coordination Centre |
| ↳ 87.250.224.0-87.250.255.255 | Russian Federation | RU-YANDEX-20060130 | |
| ↳ 87.250.251.0-87.250.251.255 | Russian Federation | YANDEX-87-250-251 | Yandex enterprise network |
| ↳ 87.250.251.147 | Russian Federation | YANDEX-87-250-251 | Yandex enterprise network |
| IP range | Country | Name | Description |
|---|---|---|---|
| ::/0 | N/A | ROOT | Root inet6num object |
| ↳ 2a00::/11 | European Union | EU-ZZ-2A00 | RIPE NCC |
| ↳ 2a00::/12 | Netherlands | EU-ZZ-2A00 | RIPE Network Coordination Centre |
| ↳ 2a02:6b8::/29 | Russian Federation | RU-YANDEX-20080815 | |
| ↳ 2a02:6b8::/62 | Russian Federation | YANDEX-V6-0--62 | Yandex enterprise network |
| ↳ 2a02:6b8:0:0:0:0:2:147 | Russian Federation | YANDEX-V6-0--62 | Yandex enterprise network |
| Assurance | Organisation validation |
|---|---|
| Common name | webattach.mail.yandex.net |
| Organisation | Yandex LLC |
| State | Russian Federation |
| Country | RU |
| Organisational unit | ITO |
| Subject Alternative Name | webattach.mail.yandex.net |
| Validity period | From Sep 17 2019 to Sep 16 2020 (11 months, 4 weeks, 1 day) |
| Matches hostname | Yes |
| Server | nginx |
| Public key algorithm | rsaEncryption |
| Protocol version | TLSv1.2 |
| Public key length | 2048 |
| Certificate check | ok |
| Signature algorithm | sha256WithRSAEncryption |
| Serial number | 0x75a1f7aab0184d10f5ec696176c7e1dc |
| Cipher | ECDHE-RSA-AES128-GCM-SHA256 |
| Version number | 0x02 |
| Perfect Forward Secrecy | Yes |
|---|---|
| Next Protocol Negotiation | http/1.1 |
| Supported TLS Extensions | RFC5746 renegotiation info, RFC4492 EC point formats, RFC5077 session ticket, Next Protocol Negotiation |
| Issuing organisation | Yandex LLC |
| Issuer common name | Yandex CA |
| Issuer unit | Yandex Certification Authority |
| Issuer location | Not Present |
| Issuer country | RU |
| Issuer state | Not Present |
| Certificate Revocation Lists |
http://crls.yandex.net/certum/ycasha2.crl http://yandex.crl.certum.pl/ycasha2.crl |
| Certificate Hash | PMiv3BeRbpIJ1T8gBcsuX7q90D0 |
| Public Key Hash | b871215cc565b4f626390fad60a8f0ec9833071b660ef3687ad9b7640f277750 |
| OCSP servers | http://yandex.ocsp-responder.com |
| OCSP stapling response | No response received |
Signed Certificate Timestamps (SCTs)
| Source | Log | Timestamp | Signature Verification |
|---|---|---|---|
| Certificate | Google Pilot pLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BA= |
2019-09-17 12:20:45 | Success |
| Certificate | Cloudflare Nimbus 2020 Xqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVg= |
2019-09-17 12:20:45 | Success |
| Certificate | Sectigo Sabre VYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0ww= |
2019-09-17 12:20:45 | Success |
SSLv3/POODLE
This site does not support the SSL version 3 protocol.
More information about SSL version 3 and the POODLE vulnerability.
Heartbleed
The site offered the Heartbeat TLS extension prior to the Heartbleed disclosure, but is using a new certificate and no longer offers Heartbeat.
This test does not exploit the Heartbleed vulnerability but uses information from conventional HTTPS requests. More information about Heartbleed detection.
| Common name | Certum Trusted Network CA |
|---|---|
| Organisational unit | Certum Certification Authority |
| Organisation | Unizeto Technologies S.A. |
| Validity period | From 2008-10-22 to 2029-12-31 |
| Common name | Yandex CA |
|---|---|
| Organisational unit | Yandex Certification Authority |
| Organisation | Yandex LLC |
| Validity period | From 2015-01-21 to 2025-01-18 |
| Netblock owner | IP address | OS | Web server | Last seen |
|---|---|---|---|---|
| Yandex enterprise network | 87.250.251.147 | unknown | nginx | 14-Apr-2020 |
| Yandex enterprise network | 213.180.193.87 | unknown | nginx/1.8.0 | 12-Jun-2017 |
| Yandex enterprise network | 213.180.193.64 | unknown | nginx/1.8.0 | 9-Mar-2016 |
A host's Sender Policy Framework (SPF) describes who can send mail on its behalf. This is done by publishing an SPF record containing a series of rules. Each rule consists of a qualifier followed by a specification of which domains to apply this qualifier to. For more information please see open-spf.org.
Warning: It appears that this host does not have an SPF record. There may be an SPF record on yandex.net: Check the site report.
Setting up an SPF record helps prevent the delivery of forged emails from your domain. Please note that an SPF record will only protect the domain it is added to and not any mail-enabled subdomains. It is recommended to add an SPF record to any subdomain with an MX record.
DMARC (Domain-based Message Authentication, Reporting and Conformance) is a mechanism for domain owners to indicate how mail purporting to originate from their domain should be authenticated. It builds on SPF and DKIM, providing a method to set policy and to give reporting of failures. For more information please see dmarc.org.
This host does not have a DMARC record. There may be a DMARC record on the site report for yandex.net: Check the site report.
Web Trackers are third-party resources loaded onto a webpage. Trackable resources include social sharing widgets, javascript files, and images. These trackers can be used to monitor individual user behaviour across the web. Data derived from these trackers are primarily used for advertising or analytics purposes.
No known trackers were identified.
-
HTTP compression is a capability that can be built into web servers and web clients to make better use of available bandwidth, and provide greater transmission speeds between both.
Technology Description Popular sites using this technology Gzip Content Encoding Gzip HTTP Compression protocol www.asriran.com, www.tsetmc.com, www.seznam.cz