Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.

SCORE

GRADE

FIX

REVIEW

PASS

INFO

Probed from Santa Clara, United States

200 OK

Checks

5 PASS 2 REVIEW 2 FIX

IPv6 Readiness

Action

IPv6 records exist but unreachable

FIX

IPv6 records exist but unreachable

IPv6 DNS records exist but server is not reachable

Having AAAA records but an unreachable server is worse than no AAAA — clients may experience delays before falling back to IPv4.

Got: 2a02:6b8:a::a

IPv6 connection error

Got: dial tcp6 [2a02:6b8:a::a]:443: connect: network is unreachable

IPv6 Misconfigured

AAAA Records 2a02:6b8:a::a Connection UNREACHABLE

Having AAAA records but an unreachable server is worse than no AAAA — clients may experience delays before falling back to IPv4.

Why this matters

Advertising IPv6 (AAAA records) without a reachable server means IPv6-preferring clients silently fail every connection.

Learn more ▾

Modern browsers prefer IPv6 if AAAA exists (Happy Eyeballs algorithm). If the IPv6 server isn't reachable, browsers fall back to IPv4 — but with seconds of added latency per request. Either fix IPv6 reachability or remove the AAAA records.

Source: RFC 8305 (Happy Eyeballs)

CDN & Delivery

Action

No CDN detected

FIX

No CDN detected

A CDN can significantly improve load times for users around the world by caching content at edge nodes closer to them.

No CDN detected

Consider using a CDN to improve global delivery speed and reduce origin load.

HTTP Probe Timing

Total 1185 ms — DNS, TCP, TLS, TTFB, content transfer breakdown

REVIEW

DNS Lookup

5 ms

TCP Connect

196 ms

TLS Handshake

200 ms

Time to First Byte

667 ms

Total Time

1.19 s

Connection waterfall

DNS Lookup 5 ms TCP Connect 196 ms TLS Handshake 200 ms Server Processing 267 ms Content Transfer 518 ms

TLS Certificate Expiry & Recommendations

112 days until leaf cert expires — 3 issues to address

REVIEW

Certificate validity

112

days left

0d 30d 60d 90d+

Recommended actions

Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
Enable DNSSEC on your domain for DNS spoofing protection
Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy

A+

DNS Records

3 A records, 166 ms lookup

PASS

3 A records, 166 ms lookup

Resolves to 3 IPv4 address(es)

Got: 77.88.44.55, 77.88.55.88, 5.255.255.77

Has 1 IPv6 (AAAA) record(s)

Got: 2a02:6b8:a::a

2 nameserver(s) configured

Got: ns1.yandex.net, ns2.yandex.net

1 mail exchanger(s) configured

CAA records not checked

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

SPF record present in TXT

DNS resolution time: 166 ms

Got: 166 ms

A	77.88.44.55, 77.88.55.88, 5.255.255.77
AAAA	2a02:6b8:a::a
CNAME	—
NS	ns1.yandex.net, ns2.yandex.net
MX	10 mx.yandex.ru
TXT	SPF v=spf1 redirect=_spf.yandex.ru 5849d1f0fc8a9e73d82dfed9f2c33931 facebook-domain-verification=625igbkehyfptcek6nh1hz7q4s3h4a facebook-domain-verification=gy3xj2e9mxu0vtcdgqcznoaxoaiv63 google-site-verification=FVk3gum7zZLdkqi96ypScROFMew0wMetq1Gpu4rkzPI _globalsign-domain-verification=8aYUGAQODFyrof27L_Cshxo2JkvQcQeCBU1Zb-tf8f
CAA	Lookup not available with standard resolver

Resolved in 166 ms

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

A+

Redirect Chain

No redirects — direct access

PASS

No redirects — direct access

Got: https://yandex.com

https://yandex.com

668 ms · HTTP/1.1 FINAL

#	URL	Status	Time	Protocol	Server
1	https://yandex.com	200	668 ms	HTTP/1.1

A+

Crawlability

robots.txt present, sitemap with 64 URLs

PASS

robots.txt present, sitemap with 64 URLs

robots.txt is present

Got: 10240 bytes

sitemap.xml is present

sitemap.xml is valid XML

sitemap.xml contains 64 entries

robots.txt references sitemap

robots.txt 200 OK

Size 10240 B Sitemaps referenced 4 User-agents *, yandex Blocking No — crawling allowed

# yandex.com
User-agent: *
Disallow: /?
Disallow: /403.html
Disallow: /404.html
Disallow: /500.html
Disallow: /about.html
Disallow: /adddata
Disallow: /adresa-segmentator
Disallow: /advanced_engl.html
Disallow: /advertising
Disallow: /ads/
Disallow: /adfox/
Disallow: /an/
Disallow: /all-supported-params
Disallow: /articles

Disallow: /blog/*?text=
Disallow: /blog/*?tag=
Disallow: /blog/*/*/*
Disallow: /blog/punto

Disallow: /activity/
Disallow: /business/widget

Disallow: /MAPS/
Disallow: /MaPS/
Disallow: /MapS/
Disallow: /Maps/
Disallow: /mApS/
Disallow: /harita/business/
Disallow: /maps/business/
Disallow: /maps-api/docs/js-api/reference-guide/instruction-gxs.html
Disallow: /maps-api/docs/js-api/reference-guide/instruction-rs.html
Disallow: /blogs*
Allow: /blogs/$
Allow: /blogs/pad/$
Allow: /blogs/pad$

Disallow: /masters
Disallow: /services

Disallow: /catalog/?text=
Disallow: /cgi-bin/
Disallow: /cgi/
Disallow: /chisla.html
Disallow: /clck

Disallow: /news
Disallow: /news/

Disallow: /collections/

Disallow: /company/*.rss
Disallow: /company/search

Disallow: /comments/*

Disallow: /conflagexp
Disallow: /cy
Disallow: /cycounter
Disallow: /dzen
Disallow: /edu/ping
Disallow: /edu/tasks
Disallow: /edu/teachers
Disallow: /edu/test
Disallow: /experiments.xml
Disallow: /efir
Disallow: /formfeedback

Disallow: /gorsel/*
Allow: /gorsel/$
Allow: /gorsel/?*
Allow: /gorsel/smart/$
Allow: /gorsel/touch/$
Allow: /gorsel/touch/?*

Disallow: /gundem

Disallow: /goto_issue/
Disallow: /goto_rubric/
Disallow: /i/

Disallow: /images-data
Disallow: /images.html
Disallow: /images/*
Disallow: /images-apphost/*

Allow: /images/$
Allow: /images/?*
Allow: /images/smart/$
Allow: /images/touch/$
Allow: /images/touch/?

Disallow: /index_m
Disallow: /infected
Disallow: /iznanka/
Disallow: /int_search_summary
Disallow: /delivery_tracking
Disallow: /keyboard_qwerty.html
Disallow: /logotypes

Disallow: /map-constructor/loader*
Disallow: /more_samples
Disallow: /msearch
Disallow: /msearchpart
Disallow: /maps/print/*
Allow: /maps/*?lang=kk$
Allow: /maps/*?lang=uz$
Disallow: /nmaps/*?
Disallow: /mapeditor/*?

Disallow: /metro/*?from
Disallow: /neuralsearch/api
Disallow: /norobot
Disallow: /opensearch.xml
Disallow: /padsearch
Disallow: /people*
Disallow: /person
Disallow: /podpiska/login.pl
Disallow: /polling
Disallow: /portal/set/
Disallow: /portal/tune/
Disallow: /promo/diskelement
Disallow: /promo/*goodbye*
Disallow: /promo/skype*?*
Disallow: /promo/skype/*/*
Disallow: /promo/launcher/feedback
Disallow: /promo/launcher/mgoodbye/*
Disallow: /promo/*welcome*
Disallow: /promo/yobject/changelog*
Disallow: /soft/bm/goodbye
Disallow: /soft/chrome/ext-install/*
Disallow: /soft/chrome/searchline-install/*
Disallow: /soft/*goodbye*
Disallow: /soft/punto/mac/uninstall/*
Disallow: /soft/punto/win/uninstall/*
Disallow: /soft/*welcome*
Disallow: /soft/win/?*
Disallow: /quotes
Disallow: /redir
Disallow: /region_map
Disallow: /regions_list.xml
Disallow: /regions.html?
Disallow: /rubric2sport
Disallow: /s/
Disallow: /save
Disallow: /safety/?
Disallow: /safety?
Disallow: /search
Disallow: /setup
Disallow: /showcaptcha
Disallow: /sitesearch
Disallow: /skazki
Disallow: /sl/*.html
Disallow: /soft/extensions/goodbye
Disallow: /sportagent
Disallow: /storeclick
Disallow: /storerequest
Disallow: /subscribe/confirm.pl
Disallow: /subscribe/view.pl

Disallow: /support/direct-images
Disallow: /support/direct-tooltips
Disallow: /support/distr
Disallow: /support/dsp
Disallow: /support/fe4be44a295cc679e19bf0b8f133083d
Disallow: /support/maps-beta
Disallow: /support/market-images
Disallow: /support/security
Disallow: /support/webmaster-images
Disallow: /support/*zout_
Disallow: /support/search-results/
Disallow: /support/praktikum/flow.html
Disallow: /support/praktikum-english/

Disallow: /telsearch
Disallow: /themes
Disallow: /toggle-experiment
Disallow: /touchsearch
Disallow: /tune*retpath=
Disallow: /versions

Disallow: /v$
Disallow: /viewconfig$
Disallow: /video/v$
Disallow: /video/viewconfig$
Disallow: /images/v$
Disallow: /images/viewconfig$

Allow: /uslugi/$
Disallow: /uslugi/*

Disallow: /video/*
Disallow: /video/*filmId=*
Disallow: /video/search
Disallow: /video/preview
Disallow: /video/*/search
Disallow: /video/*/preview
Allow: /video/$
Allow: /video/?
Allow: /video/sitemap
Allow: /video/dizi-izle/
Allow: /video/dizi-izle/?
Allow: /video/yerli-dizi-izle/
Allow: /video/yabanci-dizi-izle/
Allow: /video/touch/
Allow: /video/pad/

Disallow: /xmlsearch
Disallow: /yaca
Disallow: /yandsearch
Disallow: /yca/cy

Disallow: /soft/distribution
Disallow: /soft/?*
Disallow: /promo/launcher/?*
Disallow: /opera/?*
Disallow: /firefox/?*
Disallow: /soft/bm/?*
Disallow: /soft/browsers/?*
Disallow: /soft/punto/?*
Disallow: /ie/?*
Disallow: /element/?*
Disallow: /element/*goodbye*
Disallow: /soft/*goodbye*
Disallow: /adult

Disallow: /sport*?*parent-reqid*
Disallow: /mirror*?*parent-reqid*
Disallow: /turbo*?*parent-reqid*
Disallow: /mirror/hide

Disallow: /pogoda/0

Disallow: /turbo*?*ajax=1
Disallow: /sport*?*ajax=1
Disallow: /mirror*?*ajax=1

Disallow: /games/*?*reqId
Disallow: /games/*?*pageId
Disallow: /games/preview/
Disallow: /games/install
Disallow: /games/*?experimental=
Disallow: /games/*?*app-id=
Disallow: /games/*?*game-id=
Disallow: /games/*?*div-rtx-reqid=
Disallow: /games/*?*header=
Disallow: /games/*?*from=

Disallow: /weather/*
Disallow: /weather*
Disallow: /pogoda/*
Disallow: /pogod*
Disallow: /hava/*
Disallow: /hava*
Disallow: *maps/covid19*
Disallow: /support2/*zout_
Disallow: /sport
Disallow: /support2/sport*
Disallow: /video/%D0%B7%D0%B0%D0%BF%D1%80%D0%BE%D1%81/*
Disallow: /video/touch/%D0%B7%D0%B0%D0%BF%D1%80%D0%BE%D1%81/*

Disallow: /medicine
Allow: /medicine/doctors
Allow: /medicine/clinics
Disallow: /finance

Clean-Param: ncrnd&redircnt&clid&_&win /
Clean-Param: random_cgi&sign /turbo*
Clean-Param: ll&z&sll /maps
Clean-Param: appsearch_header /pogoda

Sitemap: https://yandex.com/support/sitemap.xml
Sitemap: https://yandex.com/blog/sitemap.xml
Sitemap: https://yandex.com/turbo/public/sitemap.xml
Sitemap: https://yandex.com/games/sitemaps/sitemap.index.xml

User-agent: yandex
Disallow: /?
Disallow: /403.html
Disallow: /404.html
Disallow: /500.html
Disallow: /about.html
Disallow: /adddata
Disallow: /adresa-segmentator
Disallow: /advanced_engl.html
Disallow: /advertising
Disallow: /all-supported-params
Disallow: /articles

Disallow: /activity/
Disallow: /blog/*?text=
Disallow: /blog/*?tag=
Disallow: /blog/*/*/*
Disallow: /blog/punto

Disallow: /business/widget

Disallow: /MAPS/
Disallow: /MaPS/
Disallow: /MapS/
Disallow: /Maps/
Disallow: /mApS/
Disallow: /harita/business/
Disallow: /maps/business/
Disallow: /maps-api/docs/js-api/reference-guide/instruction-gxs.html
Disallow: /maps-api/docs/js-api/reference-guide/instruction-rs.html
Disallow: /blogs*
Allow: /blogs/$
Allow: /blogs/pad/$
Allow: /blogs/pad$

Disallow: /masters
Disallow: /services

Disallow: /catalog/?text=
Disallow: /chat
Disallow: /cgi-bin/
Disallow: /cgi/
Disallow: /chisla.html
Disallow: /clck

Disallow: /news
Disallow: /news/

Disallow: /collections/

Disallow: /company/*.rss
Disallow: /company/search

Disallow: /comments/*

Disallow: /conflagexp
Disallow: /cy
Disallow: /cycounter
Disallow: /dzen
Disallow: /edu/ping
Disallow: /edu/tasks
Disallow: /edu/teachers
Disallow: /edu/test
Disallow: /experiments.xml
Disallow: /efir
Disallow: /formfeedback

Disallow: /games/preview/
Disallow: /games/install
Disallow: /games/*?experimental=

Disallow: /gorsel/*
Allow: /gorsel/$
Allow: /gorsel/?*
Allow: /gorsel/smart/$
Allow: /gorsel/touch/$
Allow: /gorsel/touch/?*

Disallow: /goto_issue/
Disallow: /goto_rubric/
Disallow: /i/

Disallow: /gundem

Disallow: /images-data
Disallow: /images.html
Disallow: /images/*
Disallow: /images-apphost/*

Allow: /images/$
Allow: /images/?*
Allow: /images/smart/$
Allow: /images/touch/$
Allow: /images/touch/?

Disallow: /index_m
Disallow: /infected
Disallow: /iznanka/
Disallow: /int_search_summary
Disallow: /delivery_tracking
Disallow: /keyboard_qwerty.html
Disallow: /logotypes

Disallow: /map-constructor/loader*
Disallow: /more_samples
Disallow: /msearch
Disallow: /msearchpart
Disallow: /maps/print/*
Allow: /maps/*?lang=kk$
Allow: /maps/*?lang=uz$
Disallow: /nmaps/*?
Disallow: /mapeditor/*?

Disallow: /metro/*?from
Disallow: /neuralsearch/api
Disallow: /norobot
Disallow: /opensearch.xml
Disallow: /padsearch
Disallow: /people*
Disallow: /person
Disallow: /podpiska/login.pl
Disallow: /polling
Disallow: /portal/set/
Disallow: /portal/tune/

Disallow: /pogoda/0

Disallow: /promo/diskelement
Disallow: /promo/*goodbye*
Disallow: /promo/skype*?*
Disallow: /promo/skype/*/*
Disallow: /promo/launcher/feedback
Disallow: /promo/launcher/mgoodbye/*
Disallow: /promo/*welcome*
Disallow: /promo/yobject/changelog*
Disallow: /soft/bm/goodbye
Disallow: /soft/chrome/ext-install/*
Disallow: /soft/chrome/searchline-install/*
Disallow: /soft/*goodbye*
Disallow: /soft/punto/mac/uninstall/*
Disallow: /soft/punto/win/uninstall/*
Disallow: /soft/*welcome*
Disallow: /soft/win/?*
Disallow: /quotes
Disallow: /redir
Disallow: /region_map
Disallow: /regions_list.xml
Disallow: /regions.html?
Disallow: /rubric2sport
Disallow: /s/
Disallow: /save
Disallow: /safety/?*
Disallow: /search
Disallow: /setup
Disallow: /showcaptcha
Disallow: /sitesearch
Disallow: /skazki
Disallow: /sl/*.html
Disallow: /soft/extensions/goodbye
Disallow: /sportagent
Disallow: /storeclick
Disallow: /storerequest
Disallow: /subscribe/confirm.pl
Disallow: /subscribe/view.pl

Disallow: /support/direct-images
Disallow: /support/direct-tooltips
Disallow: /support/distr
Disallow: /support/dsp
Disallow: /support/fe4be44a295cc679e19bf0b8f133083d
Disallow: /support/maps-beta
Disallow: /support/market-images
Disallow: /support/security
Disallow: /support/webmaster-images
Disallow: /support/*zout_
Disallow: /support/search-results/
Disallow: /support/praktikum/flow.html
Disallow: /support/praktikum-english/

Disallow: /telsearch
Disallow: /themes
Disallow: /toggle-experiment
Disallow: /touchsearch
Disallow: /tune*retpath=
Disallow: /versions

Disallow: /v$
Disallow: /viewconfig$
Disallow: /video/v$
Disallow: /video/viewconfig$
Disallow: /images/v$
Disallow: /images/viewconfig$

All

sitemap.xml 200 OK

Type URL Set URLs 64 entries Valid XML Yes

Sample URLs:

A+

URL Variants

www/non-www, trailing slash, HTTP→HTTPS

PASS

www/non-www, trailing slash, HTTP→HTTPS

www/non-www redirect configured correctly (preferred: non-www)

HTTP correctly 301-redirects to HTTPS

www / non-www

302https://www.yandex.com/

200https://yandex.com/

Preferred variant: non-www

HTTP → HTTPS

301http://yandex.com/ → https://yandex.com/

Consistent

A+

Domain Intelligence

yandex.com — via Regional Network Information Center, JSC dba RU-CENTER, 27 years, 11 months old

PASS

yandex.com — via Regional Network Information Center, JSC dba RU-CENTER, 27 years, 11 months old

Domain registered until Sep 23, 2026 (5 months remaining)

DNSSEC is not enabled

DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.

Registrar: Regional Network Information Center, JSC dba RU-CENTER

Registrar lock is NOT enabled

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Domain expiry

72 days

September 23, 2026

SSL certificate

112 days

Issued by GlobalSign nv-sa

Domain age

27 years, 11 months

Registered September 24, 1998

DNSSEC

Not enabled

Protects against DNS spoofing

Hosting

Unknown

ASN AS13238 208398

5.255.255.77

Registrar

Regional Network Information Center, JSC dba RU-CENTER

Unlocked 2 NS records

Expiry timeline

Today

+1 year

Domain expiry SSL expiry Danger zone (≤30 days)

Recommended actions

Renew the domain or enable auto-renewal to prevent accidental expiry
Enable DNSSEC to protect visitors from DNS spoofing
Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers

Registrar Regional Network Information Center, JSC dba RU-CENTER

Created September 24, 1998 (27 years, 11 months ago)

Expires September 23, 2026 (5 months)

Last Updated November 1, 2024

Name Servers ns1.yandex.net, ns2.yandex.net

DNSSEC Not enabled

Hosting

IP Address 5.255.255.77

ASN AS13238 208398 ()

Data source: rdap (0.1s)

DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.

Why this matters

Without DNSSEC, an attacker who can poison your DNS can hijack your domain — and SSL certs alone don't stop them.

Learn more ▾

DNSSEC adds cryptographic signatures to DNS records, preventing forged responses from poisoning resolver caches. Without it, an attacker who controls the network path can redirect your domain to a malicious server before any HTTPS handshake happens. Most modern registrars (Cloudflare, Google Domains, Route 53) enable it with one toggle.

Source: ICANN / RFC 4033

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Why this matters

Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.

Learn more ▾

Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.