www.htmlyse.com - Home

Test DNS, SSL/TLS, HTTP and HTML

Test results for yahoo.com

Scanned on: Fri Nov 29 07:15:24 2019 GMT. Tested in 735 seconds

DNS Report

DNSSEC                 not offered
Zone transfer (AXFR)   not allowed (OK)
CAA Record             offered (OK)
SPF Record             offered (OK)
DMARC Record           offered (OK)
MTA-STS                not offered
TLSRPT Record          offered (OK)

Raw DNS Records

Name TTL Type Data
yahoo.com 1800 SOA ns1.yahoo.com hostmaster @ yahoo-inc.com 2019112904 3600 300 1814400 600
yahoo.com 172800 NS ns1.yahoo.com, IPv4: 68.180.131.16, IPv6: 2001:4998:130:0:0:0:0:1001
yahoo.com 172800 NS ns2.yahoo.com, IPv4: 68.142.255.16, IPv6: 2001:4998:140:0:0:0:0:1002
yahoo.com 172800 NS ns3.yahoo.com, IPv4: 27.123.42.42, IPv6: 2406:8600:f03f:1f8:0:0:0:1003
yahoo.com 172800 NS ns4.yahoo.com, IPv4: 98.138.11.157
yahoo.com 172800 NS ns5.yahoo.com, IPv4: 119.160.253.83
yahoo.com 1800 A 98.137.246.7
yahoo.com 1800 A 98.138.219.231
yahoo.com 1800 A 98.137.246.8
yahoo.com 1800 A 72.30.35.9
yahoo.com 1800 A 72.30.35.10
yahoo.com 1800 A 98.138.219.232
yahoo.com 1800 AAAA 2001:4998:58:1836:0:0:0:10
yahoo.com 1800 AAAA 2001:4998:c:1023:0:0:0:4
yahoo.com 1800 AAAA 2001:4998:c:1023:0:0:0:5
yahoo.com 1800 AAAA 2001:4998:44:41d:0:0:0:4
yahoo.com 1800 AAAA 2001:4998:58:1836:0:0:0:11
yahoo.com 1800 AAAA 2001:4998:44:41d:0:0:0:3
yahoo.com 1800 CAA 0 issue globalsign.com
yahoo.com 1800 CAA 0 iodef mailto : security @ oath.com
yahoo.com 1800 CAA 0 issue digicert.com
yahoo.com 1800 MX 1 mta6.am0.yahoodns.net
yahoo.com 1800 MX 1 mta7.am0.yahoodns.net
yahoo.com 1800 MX 1 mta5.am0.yahoodns.net
yahoo.com 1800 TXT v=spf1 redirect=_spf.mail.yahoo.com
yahoo.com 1800 TXT facebook-domain-verification=gysqrcd69g0ej34f4jfn0huivkym1p
yahoo.com 1800 TXT edb3bff2c0d64622a9b2250438277a59
_dmarc.yahoo.com 1800 TXT v=DMARC1; p=reject; pct=100; rua= mailto : dmarc_y_rua @ yahoo.com;
_mta-sts.yahoo.com 1800 TXT v=STSv1; id=20161109010200Z;
_smtp._tls.yahoo.com 1800 TXT v=TLSRPTv1; rua= mailto : mta_sts.report @ yahoo.com
mta-sts.yahoo.com 300 CNAME edge.gycpi.b.yahoodns.net
www.yahoo.com 1800 CNAME atsv2-fp-shed.wg1.b.yahoo.com

SSL/TLS Report

 Further IP addresses:   72.30.35.10 98.138.219.232 98.137.246.7 98.137.246.8
                         98.138.219.231 2001:4998:c:1023::4 2001:4998:c:1023::5
                         2001:4998:58:1836::11 2001:4998:44:41d::3
                         2001:4998:44:41d::4 2001:4998:58:1836::10 
 A record via            supplied IP "72.30.35.9"
 rDNS (72.30.35.9):      media-router-fp1.prod1.media.vip.bf1.yahoo.com.
 Service detected:       HTTP


 SSL/TLS protocols 
 SSLv2      not offered (OK)
 SSLv3      not offered (OK)
 TLS 1      offered
 TLS 1.1    offered
 TLS 1.2    offered (OK)
 TLS 1.3    not offered -- downgraded
 NPN/SPDY   h2, http/1.1, http/1.0 (advertised)
 ALPN/HTTP2 h2, http/1.1 (offered)

 SSL/TLS server implementation bugs 

 No bugs found.

 Cipher categories 

 NULL ciphers (no encryption)                  not offered (OK) -- NULL:eNULL
 Anonymous NULL Ciphers (no authentication)    not offered (OK) -- aNULL:ADH
 Export ciphers (w/o ADH+NULL)                 not offered (OK) -- EXPORT:!ADH:!NULL
 LOW: 64 Bit + DES encryption (w/o export)     not offered (OK) -- LOW:DES:!ADH:!EXP:!NULL
 Weak 128 Bit ciphers (SEED, IDEA, RC[2,4])    not offered (OK) -- MEDIUM:!aNULL:!AES:!CAMELLIA:!ARIA:!CHACHA20:!3DES
 Triple DES Ciphers (Medium)                   not offered (OK) -- 3DES:!aNULL:!ADH
 High encryption (AES+Camellia, no AEAD)       offered (OK) -- HIGH:!NULL:!aNULL:!DES:!3DES:!AESGCM:!CHACHA20:!AESGCM:!CamelliaGCM:!AESCCM8:!AESCCM
 Strong encryption (AEAD ciphers)              offered (OK) -- AESGCM:CHACHA20:AESGCM:CamelliaGCM:AESCCM8:AESCCM


 Robust (perfect) forward secrecy, (P)FS -- omitting Null Authentication/Encryption, 3DES, RC4 

 PFS is offered (OK)          ECDHE-RSA-AES256-GCM-SHA384 
                              ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA 
                              ECDHE-RSA-AES128-GCM-SHA256 
                              ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA 
 Elliptic curves offered:     sect283k1 sect283r1 sect409k1 sect409r1 sect571k1 
                              sect571r1 secp256k1 prime256v1 secp384r1 
                              secp521r1 brainpoolP256r1 brainpoolP384r1 
                              brainpoolP512r1 


 Server preferences 

 Has server cipher order?     yes (OK)
 Negotiated protocol          TLSv1.2
 Negotiated cipher            ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Cipher order
    TLSv1:     ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA AES128-SHA AES256-SHA 
    TLSv1.1:   ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA AES128-SHA AES256-SHA 
    TLSv1.2:   ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 
               ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA384 
               ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA AES128-GCM-SHA256 
               AES256-GCM-SHA384 AES128-SHA256 AES256-SHA256 AES128-SHA 
               AES256-SHA 


 Server defaults (Server Hello) 

 TLS extensions (standard)    "server name/#0" "renegotiation info/#65281"
                              "EC point formats/#11" "session ticket/#35"
                              "status request/#5" "heartbeat/#15"
                              "next protocol/#13172"
                              "application layer protocol negotiation/#16"
 Session Ticket RFC 5077 hint 7200 seconds, session tickets keys seems to be rotated < daily
 SSL Session ID support       yes
 Session Resumption           Tickets no, ID: no
 TLS clock skew               Random values, no fingerprinting possible 
 Signature Algorithm          SHA256 with RSA
 Server key size              RSA 2048 bits
 Server key usage             Digital Signature, Key Encipherment
 Server extended key usage    TLS Web Server Authentication, TLS Web Client Authentication
 Serial / Fingerprints        0C47EF917BBA705B85D1CBF87261F405 / SHA1 8833F8CB04546B530A7497B55790C16D6A5AD7D5
                              SHA256 1AD0D1A42CE50DE167ED0BA1980CD9A5179AE077F227ACCE1987FFBB5243D90E
 Common Name (CN)             *.www.yahoo.com
 subjectAltName (SAN)         *.www.yahoo.com *.amp.yimg.com *.yahoo.com
                              add.my.yahoo.com ca.my.yahoo.com
                              ca.rogers.yahoo.com ddl.fp.yahoo.com
                              fr-ca.rogers.yahoo.com hk.rd.yahoo.com
                              mbp.yimg.com tw.rd.yahoo.com yahoo.com
                              *.att.yahoo.com 
 Issuer                       DigiCert SHA2 High Assurance Server CA (DigiCert Inc from US)
 Trust (hostname)             Ok via SAN (same w/o SNI)
 Chain of trust               Ok   
 EV cert (experimental)       no 
 Certificate Validity (UTC)   82 >= 60 days (2019-08-23 00:00 --> 2020-02-19 12:00)
 # of certificates provided   2
 Certificate Revocation List  http://crl3.digicert.com/sha2-ha-server-g6.crl
                              http://crl4.digicert.com/sha2-ha-server-g6.crl
 OCSP URI                     http://ocsp.digicert.com
 OCSP stapling                offered
 OCSP must staple extension   --
 DNS CAA RR (experimental)    available - please check for match with "Issuer" above
                              iodef=mailto:security@oath.com,
                              issue=digicert.com, issue=globalsign.com
 Certificate Transparency     yes (certificate extension)


 HTTP header response @ "/" 

 HTTP Status Code             301 Moved Permanently, redirecting to "https://www.yahoo.com/"
 HTTP clock skew              +13 sec from localtime
 Strict Transport Security    365 days=31536000 s, just this domain
 Public Key Pinning           --
 Server banner                ATS
 Application banner           --
 Cookie(s)                    (none issued at "/") -- maybe better try target URL of 30x
 Security headers             X-Frame-Options SAMEORIGIN
                              Expect-CT max-age=31536000,
                              report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
 Reverse Proxy banner         --


 SSL/TLS vulnerabilities 

 Heartbleed (CVE-2014-0160)                not vulnerable (OK), timed out
 CCS (CVE-2014-0224)                       not vulnerable (OK)
 Ticketbleed (CVE-2016-9244), experiment.  not vulnerable (OK)
 ROBOT                                     not vulnerable (OK)
 Secure Renegotiation (CVE-2009-3555)      not vulnerable (OK)
 Secure Client-Initiated Renegotiation     not vulnerable (OK)
 CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)
 BREACH (CVE-2013-3587)                    no HTTP compression (OK)  - only supplied "/" tested
 POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)
 TLS_FALLBACK_SCSV (RFC 7507)              Downgrade attack prevention supported (OK)
 SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)
 FREAK (CVE-2015-0204)                     not vulnerable (OK)
 DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)
                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services
                                           https://censys.io/ipv4?q=1AD0D1A42CE50DE167ED0BA1980CD9A5179AE077F227ACCE1987FFBB5243D90E
                                           could help you to find out
 LOGJAM (CVE-2015-4000), experimental      not vulnerable (OK): no DH EXPORT ciphers, no DH key detected
 BEAST (CVE-2011-3389)                     TLS1: ECDHE-RSA-AES128-SHA
                                                 ECDHE-RSA-AES256-SHA
                                                 AES128-SHA AES256-SHA 
                                           VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)
 LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS. Check patches
 RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)


 Tested 364 ciphers, ordered by encryption strength 

Hexcode  Cipher Suite Name (OpenSSL)       KeyExch.   Encryption  Bits     Cipher Suite Name (RFC)
-----------------------------------------------------------------------------------------------------------------------------
 xc030   ECDHE-RSA-AES256-GCM-SHA384       ECDH 256   AESGCM      256      TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384              
 xc028   ECDHE-RSA-AES256-SHA384           ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384              
 xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                 
 x9d     AES256-GCM-SHA384                 RSA        AESGCM      256      TLS_RSA_WITH_AES_256_GCM_SHA384                    
 x3d     AES256-SHA256                     RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA256                    
 x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA                       
 xc02f   ECDHE-RSA-AES128-GCM-SHA256       ECDH 256   AESGCM      128      TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256              
 xc027   ECDHE-RSA-AES128-SHA256           ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256              
 xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA                 
 x9c     AES128-GCM-SHA256                 RSA        AESGCM      128      TLS_RSA_WITH_AES_128_GCM_SHA256                    
 x3c     AES128-SHA256                     RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA256                    
 x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA                       


 Ciphers per protocol, ordered by encryption strength 

Hexcode  Cipher Suite Name (OpenSSL)       KeyExch.   Encryption  Bits     Cipher Suite Name (RFC)
-----------------------------------------------------------------------------------------------------------------------------
TLS 1.3  
TLS 1.2  
 xc030   ECDHE-RSA-AES256-GCM-SHA384       ECDH 256   AESGCM      256      TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384              
 xc028   ECDHE-RSA-AES256-SHA384           ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384              
 xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                 
 x9d     AES256-GCM-SHA384                 RSA        AESGCM      256      TLS_RSA_WITH_AES_256_GCM_SHA384                    
 x3d     AES256-SHA256                     RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA256                    
 x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA                       
 xc02f   ECDHE-RSA-AES128-GCM-SHA256       ECDH 256   AESGCM      128      TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256              
 xc027   ECDHE-RSA-AES128-SHA256           ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256              
 xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA                 
 x9c     AES128-GCM-SHA256                 RSA        AESGCM      128      TLS_RSA_WITH_AES_128_GCM_SHA256                    
 x3c     AES128-SHA256                     RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA256                    
 x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA                       
TLS 1.1  
 xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                 
 x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA                       
 xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA                 
 x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA                       
TLS 1  
 xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                 
 x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA                       
 xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA                 
 x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA                       
SSLv3  
SSLv2  

 Client simulations 

 Android 2.3.7                TLSv1.0 AES128-SHA
 Android 4.0.4                TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Android 4.1.1                TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Android 4.2.2                TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Android 4.3                  TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Android 4.4.2                TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Android 5.0.0                TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Android 6.0                  TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Android 7.0                  TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 27 Win 7              TLSv1.1 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Chrome 28 Win 7              TLSv1.1 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Chrome 29 Win 7              TLSv1.1 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Chrome 30 Win 7              TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Chrome 31 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 32 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 33 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 34 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 35 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 36 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 37 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 39 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 40 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 42 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 43 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 45 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 47 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 48 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 49 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 49 XP SP3             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 50 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 51 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 57 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 65 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 69 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 70 Win 10             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 10.0.12 ESR Win 7    TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Firefox 17.0.7 ESR Win 7     TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Firefox 21 Fedora 19         TLSv1.0 AES128-SHA
 Firefox 21 Win 7             TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Firefox 22 Win 7             TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Firefox 24.2.0 ESR Win 7     TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Firefox 24 Win 7             TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Firefox 26 Win 8             TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Firefox 27 Win 8             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 29 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 30 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 31.3.0 ESR Win 7     TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 31 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 32 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 34 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 35 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 37 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 39 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 41 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 42 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 44 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 45 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 46 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 47 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 49 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 49 XP SP3            TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 53 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 59 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 62 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 IE 6 XP                      No connection
 IE 7 Vista                   TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 IE 8-10 Win 7                TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 IE 8 Win 7                   TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 IE 8 XP                      No connection
 IE 9 Win 7                   TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 IE 10 Win Phone 8.0          TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 IE 11 Win 7                  TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 IE 11 Win 8.1                TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 IE 11 Win Phone 8.1          TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 IE 11 Win Phone 8.1 Update   TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 IE 11 Win 10                 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 IE 11 Win 10 Preview         TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Edge 12 Win 10               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Edge 13 Win 10               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Edge 13 Win Phone 10         TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Edge 15 Win 10               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Opera 12.15 Win 7            TLSv1.0 AES128-SHA
 Opera 15 Win 7               TLSv1.1 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Opera 16 Win 7               TLSv1.1 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Opera 17 Win 7               TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Safari 5.1.9 OS X 10.6.8     TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Safari 5 iOS 5.1.1           TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Safari 6.0.4 OS X 10.8.4     TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Safari 6 iOS 6.0.1           TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Safari 7 iOS 7.1             TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Safari 7 OS X 10.9           TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Safari 8 iOS 8.0 Beta        TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Safari 8 iOS 8.4             TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Safari 8 OS X 10.10          TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Safari 9 iOS 9               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Safari 9 OS X 10.11          TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Safari 10 iOS 10             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Safari 10 OS X 10.12         TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Tor 17.0.9 Win 7             TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Apple ATS 9 iOS 9            TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Baidu Jan 2015               TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 BingBot Dec 2013             TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 BingPreview Dec 2013         TLSv1.0 AES128-SHA
 BingPreview Jun 2014         TLSv1.0 AES128-SHA
 BingPreview Jan 2015         TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Googlebot Oct 2013           TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Googlebot Jun 2014           TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Googlebot Feb 2015           TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Googlebot Feb 2018           TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Yahoo Slurp Oct 2013         TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Yahoo Slurp Jun 2014         TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Yahoo Slurp Jan 2015         TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 YandexBot 3.0                No connection
 YandexBot May 2014           TLSv1.0 AES128-SHA
 YandexBot Sep 2014           TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 YandexBot Jan 2015           TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Java 6u45                    TLSv1.0 AES128-SHA
 Java 7u25                    TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Java 8b132                   TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Java 8u111                   TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Java 8u161                   TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Java 8u31                    TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Java 9.0.4                   TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 OpenSSL 0.9.8y               TLSv1.0 AES128-SHA
 OpenSSL 1.0.1h               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 OpenSSL 1.0.1l               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 OpenSSL 1.0.2e               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)


Security HTTP Headers

HTTP Strict Transport Security (HSTS)   offered (OK)
Content Security Policy (CSP)           not offered (NOT ok)
X-Frame-Options                         offered (OK)
X-XSS-Protection                        offered (OK)
X-Content-Type-Options                  offered (OK)
Expect-CT                               not offered
Referrer Policy                         offered (OK)
Feature Policy                          not offered
Web Server Version Disclosure           not offered (OK)
Web Application Disclosure              not offered (OK)
HTTP Public Key Pins (HPKP)             not offered, deprecated

Connection Performance
Keep Alive Connection                   offered (OK)
Content Encoding (Compression)          offered (Gzip) OK, for static pages or if no secrets in the page

Raw HTTP Headers

HTTP/1.1 200 OK
Cache-Control no-cache, no-store, must-revalidate
Connection keep-alive
Content-Encoding gzip
Content-Length 2065
Content-Security-Policy-Report-Only default-src 'none'; block-all-mixed-content; connect-src https://*.huffingtonpost.co.uk https://*.huffingtonpost.com 'self'; frame-ancestors 'none'; img-src https://s.yimg.com https://*.huffingtonpost.co.uk https://*.huffingtonpost.com; media-src 'none'; script-src 'self' 'nonce-vdtv/XVw20vOzHljGGm7FL+PDXBfZkrS' https://s.yimg.com https://*.huffingtonpost.co.uk https://*.huffingtonpost.com; style-src 'self' 'nonce-vdtv/XVw20vOzHljGGm7FL+PDXBfZkrS' https://s.yimg.com https://*.huffingtonpost.co.uk https://*.huffingtonpost.com; font-src 'self'; object-src 'none'; frame-src 'none'; report-uri https://csp.yahoo.com/beacon/csp?src=guce
Content-Type text/html;charset=UTF-8
Date Fri, 29 Nov 2019 07:08:28 GMT
Expires
Pragma no-cache
Referrer-Policy origin-when-cross-origin
Server guce
Strict-Transport-Security max-age=31536000; includeSubDomains
X-Content-Type-Options nosniff
X-Frame-Options DENY
X-XSS-Protection 1; mode=block

Cleaned HTML

<!DOCTYPE html>
<html dir="ltr" class="ltr eu yahoo-page height100">
<head>
<title>Yahoo ahora forma parte de Verizon Media</title>
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, minimum-scale=1, user-scalable=no, viewport-fit=cover" />
<link rel="stylesheet" href="https://s.yimg.com/oa/build/css/site-ltr-98bb435e.css" />
<link rel="icon" type="image/png" href="https://s.yimg.com/oa/build/images/favicons/yahoo.png" />
</head>
<body class="no-js no-touch blur-preview-tpl eu-localized home es-ES">
<script nonce="vdtv/XVw20vOzHljGGm7FL+PDXBfZkrS">
<![CDATA[
if ('classList' in document.body) {
document.body.classList.add('js');
document.body.classList.remove('no-js');
}
]]>
</script>
<div class="consent-semi-transparent consent-round-corner consent-container">
<h1 class="consent-title">Antes de continuar...</h1>
<div class="consent-text">Yahoo forma parte de Verizon Media. Tanto Verizon Media como sus socios necesitan tu consentimiento para acceder a tu dispositivo y usar tus datos —incluida la ubicación— con el fin de conocer tus intereses, mostrarte anuncios relevantes y calcular su eficacia. Verizon Media también te mostrará anuncios personalizados en los productos de sus socios. <a class="expand-learn-more">Más información.</a>
<section class="learn-more-content hidden">
<h2>Cómo Verizon Media y sus socios te ofrecen mejores experiencias publicitarias</h2>
<p>Para proporcionarte una mejor experiencia general, queremos mostrarte anuncios relevantes que te sean de mayor utilidad. Por ejemplo, cuando buscas una película, usamos la información sobre la búsqueda y tu ubicación para mostrarte los cines cercanos más relevantes. También usamos esta información para mostrarte anuncios de películas similares que podrían interesarte en el futuro. Nuestros socios, igual que Verizon Media, pueden mostrarte anuncios que crean que se adaptan a tus intereses.</p>
<p>Obtén más información sobre cómo <a href="/redirect?to=https%3A%2F%2Fmydata.oath.com%2F%23sharingdata" target="_blank">Verizon Media recoge datos y los usa</a>, y cómo nuestros <a href="/collectConsent/partners?sessionId=1_cc-session_e6e7a876-19e5-4bb0-98c1-e7cec41d2198&amp;lang=es-ES&amp;step=EU_SINGLEPAGE">socios recogen datos y los usan</a>.</p>
</section>
Selecciona «OK» para continuar y permitir a Verizon Media y a sus socios usar tus datos, o bien elige «Gestionar opciones» para ver tus opciones.</div>
<form method="post" class="consent-form" action="/consent"><input type="hidden" name="consentCollectionStep" value="EU_SINGLEPAGE" /> <input type="hidden" name="previousStep" value="" /> <input type="hidden" name="csrfToken" value="L5yLYxOZKqmxCwsRYvvJ4GuI7gcie1Fi" /> <input type="hidden" name="jurisdiction" value="" /> <input type="hidden" name="locale" value="es-ES" /> <input type="hidden" name="doneUrl" value="https://guce.yahoo.com/copyConsent?sessionId=1_cc-session_e6e7a876-19e5-4bb0-98c1-e7cec41d2198&amp;inline=false&amp;lang=es-ES" /> <input type="hidden" name="tosId" value="eu" /> <input type="hidden" name="sessionId" value="1_cc-session_e6e7a876-19e5-4bb0-98c1-e7cec41d2198" /> <input type="hidden" class="namespace" name="namespace" value="yahoo" /> <input type="hidden" name="originalDoneUrl" value="https://es.yahoo.com/?p=us&amp;guccounter=1&amp;guce_referrer=aHR0cHM6Ly93d3cuaHRtbHlzZS5jb20v&amp;guce_referrer_sig=AQAAAF3xq06SyMXa6Jyq_5oby44vHoTHi8ZW_5aEbSO3fSFPPXZPFNxjqE7zXcJ6MBr6vG6ArczXjRhEwY_a5jIzmzCQZe2G_2siDCH3v5pnLXRKDotuHiJQWlf0keqgoLNTxBuiFNDZZGx_zydjV2nIRD6DYVy-qzo3iP7161CFw1-c" /> <input type="hidden" name="inline" value="false" /> <input type="hidden" name="startStep" value="EU_SINGLEPAGE" /> <input type="hidden" name="isSDK" value="false" /> <input type="hidden" name="brandBid" value="928sc0peu1gvb" /> <input type="hidden" name="userType" value="NON_REG" /> <input type="hidden" name="country" value="ES" /> <input type="hidden" name="ybarNamespace" value="YAHOO" />
<div><button type="submit" class="btn link" name="moreOptions" value="moreOptions">Gestionar opciones</button> <button type="submit" class="btn primary" name="agree" value="agree">OK</button></div>
</form>
</div>
<script src="https://s.yimg.com/oa/build/js/site-a4d72cd5.js" nonce="vdtv/XVw20vOzHljGGm7FL+PDXBfZkrS"></script>
</body>
</html>

Warnings Errors and Accessibility

line 35 column 295 - Warning: unescaped & or unknown entity "&lang"
line 35 column 306 - Warning: unescaped & or unknown entity "&step"

Accessibility Checks:

line 2 column 1 - Access: [4.3.1.1]: language not identified.
line 12 column 9 - Access: [6.2.2.2]: text equivalents require updating (script).
line 12 column 9 - Access: [6.3.1.1]: programmatic objects require testing (script).
line 12 column 9 - Access: [8.1.1.1]: ensure programmatic objects are accessible (script).
line 12 column 9 - Access: [7.1.1.1]: remove flicker (script).
line 12 column 9 - Access: [2.1.1.4]: ensure information not conveyed through color alone (script).
line 12 column 9 - Access: [1.1.10.1]: <script> missing <noscript> section.
line 35 column 58 - Access: [10.1.1.2]: new windows require warning (_blank).
line 43 column 17 - Access: [2.1.1.5]: ensure information not conveyed through color alone (input).
line 44 column 17 - Access: [2.1.1.5]: ensure information not conveyed through color alone (input).
line 44 column 17 - Access: [12.4.1.1]: associate labels explicitly with form controls.
line 45 column 17 - Access: [2.1.1.5]: ensure information not conveyed through color alone (input).
line 46 column 17 - Access: [2.1.1.5]: ensure information not conveyed through color alone (input).
line 46 column 17 - Access: [12.4.1.1]: associate labels explicitly with form controls.
line 47 column 17 - Access: [2.1.1.5]: ensure information not conveyed through color alone (input).
line 48 column 17 - Access: [2.1.1.5]: ensure information not conveyed through color alone (input).
line 48 column 17 - Access: [12.4.1.1]: associate labels explicitly with form controls.
line 49 column 17 - Access: [2.1.1.5]: ensure information not conveyed through color alone (input).
line 50 column 17 - Access: [2.1.1.5]: ensure information not conveyed through color alone (input).
line 50 column 17 - Access: [12.4.1.1]: associate labels explicitly with form controls.
line 51 column 17 - Access: [2.1.1.5]: ensure information not conveyed through color alone (input).
line 52 column 17 - Access: [2.1.1.5]: ensure information not conveyed through color alone (input).
line 52 column 17 - Access: [12.4.1.1]: associate labels explicitly with form controls.
line 53 column 17 - Access: [2.1.1.5]: ensure information not conveyed through color alone (input).
line 54 column 17 - Access: [2.1.1.5]: ensure information not conveyed through color alone (input).
line 54 column 17 - Access: [12.4.1.1]: associate labels explicitly with form controls.
line 55 column 17 - Access: [2.1.1.5]: ensure information not conveyed through color alone (input).
line 56 column 17 - Access: [2.1.1.5]: ensure information not conveyed through color alone (input).
line 56 column 17 - Access: [12.4.1.1]: associate labels explicitly with form controls.
line 57 column 17 - Access: [2.1.1.5]: ensure information not conveyed through color alone (input).
line 58 column 17 - Access: [2.1.1.5]: ensure information not conveyed through color alone (input).
line 58 column 17 - Access: [12.4.1.1]: associate labels explicitly with form controls.
line 59 column 17 - Access: [2.1.1.5]: ensure information not conveyed through color alone (input).
line 73 column 9 - Access: [6.2.2.2]: text equivalents require updating (script).
line 73 column 9 - Access: [6.3.1.1]: programmatic objects require testing (script).
line 73 column 9 - Access: [8.1.1.1]: ensure programmatic objects are accessible (script).
line 73 column 9 - Access: [7.1.1.1]: remove flicker (script).
line 73 column 9 - Access: [2.1.1.4]: ensure information not conveyed through color alone (script).
line 73 column 9 - Access: [1.1.10.1]: <script> missing <noscript> section.
line 12 column 9 - Warning: <script> proprietary attribute "nonce"
line 73 column 9 - Warning: <script> proprietary attribute "nonce"
Info: Document content looks like HTML5
<HTMLYSE> found 4 warnings and 0 errors!