Site report for https://yandex.ru

IPv4 address (5.255.255.80)

IP range	Country	Name	Description
0.0.0.0-255.255.255.255	N/A	IANA-BLK	The whole IPv4 address space
↳ 5.0.0.0-5.255.255.255	Netherlands	RIPE-5	RIPE Network Coordination Centre
↳ 5.255.192.0-5.255.255.255	Russian Federation	RU-YANDEX-20120914
↳ 5.255.255.0-5.255.255.255	Russian Federation	YANDEX-5-255-255	Yandex enterprise network
↳ 5.255.255.80	Russian Federation	YANDEX-5-255-255	Yandex enterprise network

IPv6 address (2a02:6b8:a:0:0:0:0:a)

IP range	Country	Name	Description
::/0	N/A	ROOT	Root inet6num object
↳ 2a00::/11	European Union	EU-ZZ-2A00	RIPE NCC
↳ 2a00::/12	Netherlands	EU-ZZ-2A00	RIPE Network Coordination Centre
↳ 2a02:6b8::/29	Russian Federation	RU-YANDEX-20080815
↳ 2a02:6b8:8::/45	Russian Federation	YANDEX-V6-8--45	Yandex enterprise network
↳ 2a02:6b8:a:0:0:0:0:a	Russian Federation	YANDEX-V6-8--45	Yandex enterprise network

Signed Certificate Timestamps (SCTs)

Source	Log	Timestamp	Signature Verification
Certificate	Google Pilot pLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BA=	2019-09-05 11:07:41	Success
Certificate	Sectigo Sabre VYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0ww=	2019-09-05 11:07:42	Success
Certificate	Cloudflare Nimbus 2020 Xqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVg=	2019-09-05 11:07:41	Success

SSLv3/POODLE

Heartbleed

The site offered the Heartbeat TLS extension prior to the Heartbleed disclosure, but is using a new certificate and no longer offers Heartbeat.

This test does not exploit the Heartbleed vulnerability but uses information from conventional HTTPS requests. More information about Heartbleed detection.

Netblock owner	IP address	OS	Web server	Last seen
Yandex enterprise network	5.255.255.5	Linux	unknown	8-Sep-2015
Yandex enterprise network	213.180.193.11	Linux	unknown	23-Mar-2015
Yandex enterprise network	213.180.204.11	Linux	unknown	30-Jan-2015
Yandex enterprise network	213.180.193.11	Linux	unknown	3-Jan-2015
Yandex enterprise network	213.180.204.11	Linux	unknown	31-Dec-2014
Yandex enterprise network	213.180.193.11	Linux	unknown	26-Dec-2014
Yandex enterprise network	213.180.204.11	Linux	unknown	22-Dec-2014
Yandex enterprise network	213.180.193.11	Linux	unknown	10-Dec-2014
Yandex enterprise network	213.180.204.11	Linux	unknown	9-Dec-2014
Yandex enterprise network	213.180.193.11	FreeBSD	unknown	2-Nov-2014

A host's Sender Policy Framework (SPF) describes who can send mail on its behalf. This is done by publishing an SPF record containing a series of rules. Each rule consists of a qualifier followed by a specification of which domains to apply this qualifier to. For more information please see open-spf.org.

Qualifier	Mechanism	Argument

Modifiers extend the functionality of SPF records. The most common one is the redirect which indicates another host contains the SPF record being searched for.

Modifier	Argument
redirect	_spf.yandex.ru

DMARC (Domain-based Message Authentication, Reporting and Conformance) is a mechanism for domain owners to indicate how mail purporting to originate from their domain should be authenticated. It builds on SPF and DKIM, providing a method to set policy and to give reporting of failures. For more information please see dmarc.org.

Raw DMARC record:

v=DMARC1; p=none; fo=1; rua=mailto:dmarc_agg@auth.returnpath.net,mailto:dmarc-rua@yandex.ru; ruf=mailto:dmarc_afrf@auth.returnpath.net

Tag	Field	Value
p=none	Requested handling policy	None: no specific action to be taken regarding delivery of messages.
fo=1	Failure reporting options	Generate a DMARC failure report if any underlying authentication mechanism failed to produce an aligned "pass" result.
rua=mailto:dmarc_agg@auth.returnpath.net,mailto:dmarc-rua@yandex.ru	Reporting URI(s) for aggregate data	dmarc_agg@auth.returnpath.net, dmarc-rua@yandex.ru
ruf=mailto:dmarc_afrf@auth.returnpath.net	Reporting URI(s) for failure data	dmarc_afrf@auth.returnpath.net

Web Trackers are third-party resources loaded onto a webpage. Trackable resources include social sharing widgets, javascript files, and images. These trackers can be used to monitor individual user behaviour across the web. Data derived from these trackers are primarily used for advertising or analytics purposes.

2 known trackers were identified.

• Server-Side

  Includes all the main technologies that Netcraft detects as running on the server such as PHP.

  Technology	Description	Popular sites using this technology
  XML	No description	www.20minutes.fr, assets.bounceexchange.com, api.popin.cc
  SSL	A cryptographic protocol providing communication security over the Internet	login.microsoftonline.com

• Client-Side

  Includes all the main technologies that run on the browser (such as JavaScript and Adobe Flash).

  Technology	Description	Popular sites using this technology
  JavaScript	Widely-supported programming language commonly used to power client-side dynamic content on websites	www.amazon.co.uk, www.google.com, teams.microsoft.com

• Client-Side Scripting Frameworks

  Frameworks or libraries allow for easier development of applications by providing an Application Program Interface (API) or a methodology to follow whilst developing.

  Technology	Description	Popular sites using this technology
  AJAX	No description	www.amazon.fr, www.w3schools.com, www.roblox.com
  jQuery	A JavaScript library used to simplify the client-side scripting of HTML	www.amazon.es, www.amazon.ca, www.amazon.com

• RSS Feed

  RSS Rich Site Summary is a family of web feed formats used to publish frequently updated works such as blog entries, news headlines, audio, and video in a standardized format.

  Technology	Description	Popular sites using this technology
  RSS	Standardized web feed format used to publish frequently updated works	www.lastampa.it, www.wilderssecurity.com, www.yandex.ru

• Search

  A web search engine is a software that is designed to search for information on the World Wide Web or on a specific site.

  Technology	Description	Popular sites using this technology
  Custom Search Engine	Google Custom Search Engine	www.zhihu.com, www.slideshare.net, www.repubblica.it

• Character Encoding

  A character encoding system consists of a code that pairs each character from a given repertoire with something else such as a bit pattern, sequence of natural numbers, octets, or electrical pulses in order to facilitate the transmission of data (generally numbers or text) through telecommunication networks or for data storage.

  Technology	Description	Popular sites using this technology
  UTF8	UCS Transformation Format 8 bit	gmail.com

• HTTP Compression

  HTTP compression is a capability that can be built into web servers and web clients to make better use of available bandwidth, and provide greater transmission speeds between both.

  Technology	Description	Popular sites using this technology
  Gzip Content Encoding	Gzip HTTP Compression protocol	www.tsetmc.com, www.mathworks.com, smile.amazon.co.uk

• Web Browser Targeting

  Web browser targeting enables software applications to make use of specific functions of the browser as well as optimizing the application for specific browser versions.

  Technology	Description	Popular sites using this technology
  Document Compatibility Mode	A meta-tag used in Internet Explorer 8 to enable compatibility mode	www.paypal.com, www.ebay.com, 9gag.com
  X-Content-Type-Options	Browser MIME type sniffing is disabled	www.googleadservices.com, googleads.g.doubleclick.net, vars.hotjar.com
  X-Frame-Options Deny	Prevents the web page being embedded in a frame	www.t-online.de, www.virustotal.com, www.tumblr.com
  Content Security Policy Report	Detect, mitigate and report attacks in the browser	www.airbnb.com, www.seznam.cz, www.bitmex.com
  Content Security Policy	Detect and mitigate attacks in the browser	accounts.google.com, clickserve.dartsearch.net, dtm.advertising.com

• Privacy Management

  Privacy policy is a statement or a legal document (privacy law) that discloses some or all of the ways a party gathers, uses, discloses and manages a customer or client's data.

  Technology	Description	Popular sites using this technology
  P3P	Platform for Privacy Preferences Project allows websites to express their privacy practices	yandex.ru, login.aliexpress.com, pixel.mathtag.com

• Doctype

  A Document Type Declaration, or DOCTYPE, is an instruction that associates a particular SGML or XML document (for example, a webpage) with a Document Type Definition (DTD).

  Technology	Description	Popular sites using this technology
  HTML5	Latest revision of the HTML standard, the main markup language on the web	disqus.com, medium.com

• CSS Usage

  Cascading Style Sheets (CSS) is a style sheet language used for describing the presentation semantics (the look and formatting) of a document written in a markup language (such as XHTML).

  Technology	Description	Popular sites using this technology
  External	Styles defined within an external CSS file	www.linkedin.com, www.facebook.com, www.microsoft.com