| Header Name | Header Data |
|---|---|
| HTTP status code | 200 |
| Referrer-Policy | no-referrer-when-downgrade |
| X-Content-Type-Options | nosniff |
| X-Yandex-Req-Id | 1743896910855802-11797464567783220362-hriwoz24n5az75dp-BAL |
| X-Frame-Options | SAMEORIGIN |
| Content-Security-Policy | default-src 'none'; script-src 'self' blob: 'nonce-5oqDNw+qz6sHrh+Kr1NSuw==' 'unsafe-inline' 'unsafe-eval' mc.yandex.ru yandex.st yandex.ru *.yandex.ru yastatic.net *.yastatic.net yandex.net *.yandex.net an.yandex.ru yastat.net *.yastat.net *.yandex-team.ru aflt.market.yandex.ru www.youtube.com *.vimeo.com s.ytimg.com lpc.s3.mdst.yandex.net abt.s3.yandex.net chat.s3.yandex.net *.api-maps.yandex.ru banners.adfox.ru ads.adfox.ru ads6.adfox.ru yandex.com *.yandex.com ya.ru *.ya.ru; style-src 'self' 'unsafe-inline' 'unsafe-eval' yandex.ru *.yandex.ru yastatic.net *.yastatic.net yandex.net *.yandex.net an.yandex.ru yastat.net *.yastat.net *.s3.yandex.net lpc.s3.mdst.yandex.net yandex.st banners.adfox.ru content.adfox.ru *.ya.ru; font-src 'self' data: yandex.ru an.yandex.ru *.s3.yandex.net yastatic.net yastat.net *.yandex.ru *.ya.ru; img-src * 'self' blob: data: android-webview-video-poster: *.yandex.net *.s3.yandex.net yastatic.net http://lpc.s3.mds.yandex.net http://yastatic.net mc.admetrica.ru avatars-fast.yandex.net favicon.yandex.net *.verify.yandex.ru banners.adfox.ru content.adfox.ru ads.adfox.ru ads6.adfox.ru yastat.net avatars.mds.yandex.net *.yandex.ru *.ya.ru; frame-src 'self' data: yabrowser: turbopages.org *.turbopages.org yandex.ru *.yandex.ru yastatic.net *.yastatic.net yandex.net *.yandex.net an.yandex.ru yastat.net *.yastat.net *.yandex-team.ru *.video.yandex.ru *.market.yandex.ru www.youtube.com *.vimeo.com https://vk.com/video_ext.php embed.megogo.net coub.com awaps.yandex.net yandexadexchange.net *.yandexadexchange.net banners.adfox.ru meyou.ru broadcast.comdi.com datalens.yandex partner.market.yandex.ru go.yandex yango.com yandexteam-my.sharepoint.com *.bookmate.ru bookmate.ru yandex.com yandex.com.tr yandex.com.am yandex.com.ge yandex.md yandex.by yandex.kz yandex.uz yandex.rs *.yandex.com *.yandex.com.tr *.yandex.com.am *.yandex.com.ge *.yandex.md *.yandex.by *.yandex.kz *.yandex.uz *.yandex.rs ya.ru *.ya.ru; media-src * 'self' data: blob: *.video.yandex.ru *.storage.yandex.net *.s3.yandex.net *.cdn.yandex.net yastatic.net *.yandex.net *.strm.yandex.ru yandex.st banners.adfox.ru content.adfox.ru yastat.net yandex.ru *.yandex.ru ya.ru *.ya.ru; connect-src 'self' blob: yandexmetrica.com:* mc.admetrica.ru yandex.ru *.yandex.ru yastatic.net *.yastatic.net yandex.net *.yandex.net an.yandex.ru yastat.net *.yastat.net *.yandex-team.ru yandex.st milab.s3.yandex.net *.k50.ru *.k50dev.ru openkitchen.media auto.ru yango.com ads.adfox.ru ads6.adfox.ru ya.ru *.ya.ru dev.introvert.bz; form-action https://*; worker-src blob: yandex.ru *.yandex.ru yastatic.net *.yastatic.net yandex.net *.yandex.net an.yandex.ru yastat.net *.yastat.net *.yandex-team.ru; object-src yastatic.net; report-uri https://csp.yandex.net/csp?from=lp-constructor&project=lp-constructor&yandex_login=undefined&yandexuid=5934672511743896910; child-src 'self'; frame-ancestors 'self' webvisor.com http://webvisor.com *.mtproxy.yandex.net www.kinopoisk.ru *.yandex-team.ru yandex-team.ru n.maps.yandex.ru yandex.ru yandex.com yandex.com.tr yandex.com.am yandex.com.ge yandex.md yandex.by yandex.kz yandex.uz yandex.net yandex.rs *.yandex.ru *.yandex.ru:* *.yandex.com:* *.yandex.com.tr:* *.yandex.com.am *.yandex.com.ge *.yandex.md *.yandex.by *.yandex.kz *.yandex.uz *.yandex.net *.yandex.rs ya.ru *.ya.ru; |
| Set-Cookie | bh=YM6Cx78Gah7cyuH/CJLYobEDn8/h6gP7+vDnDev//fYP/rPOhwg=; Path=/; Domain=.yandex.ru; Expires=Sun, 10 May 2026 23:48:30 GMT; SameSite=None; Secure |
| Strict-Transport-Security | max-age=60 |
| X-Lpc | 1 |
| Accept-Ch | Sec-CH-Viewport-Width, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform-Version |
| Content-Type | text/html; charset=utf-8 |
| Date | Sat, 05 Apr 2025 23:48:30 GMT |
| X-Xss-Protection | 1; mode=block |
By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.
This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.
We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.
Watch it now at TrustRadar