www.yahoo.com - URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned www.yahoo.com and returned a unknown verdict (score -12). The page resolved to 183.177.68.210 on Yahoo-AU in AU. 43 domains and 2 IPs were contacted, over 52 HTTP requests. 311 malware samples communicate with this URL (HUILoader, Genpack). The request followed 1 redirect before landing. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://geocities.com/ - Domain: www.yahoo.com · IP: 183.177.68.210 · AS10310 · AU
- Server: ATS
- Page title: Yahoo | Mail, Weather, Search, Politics, News, Finance, Sports & Videos
- HTTP status: 200 · text/html; charset=utf-8
- TLS issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 · valid to Oct 7 23: · subject C=US, ST=New York, L=New York, O=Yahoo Holdings Inc., CN=*.www.yahoo.com
- Evidenced operator: Yahoo Holdings Inc.
- HTTP requests captured: 52
- Scan tier: fast · observed 2026-08-23 12:22:22 UTC
Redirect chain
https://geocities.com/https://www.yahoo.com/
Malware communicating with this URL (311)
These samples were observed contacting or being served from www.yahoo.com. Each links to its full analysis.
- c8c756563dc905e00b0b7714459cb05d3ed8233bab1c31a308e656290ac705fd - referenced ·
c8c756563dc905e00b0b7714459cb05d· first seen 2026-08-23 - HUILoader - referenced ·
bb95e5fd12e6d12741e32ed4842e369b· first seen 2026-08-23 - Genpack - referenced ·
c4bfac68ab5016f10b0c85e8c104db89· first seen 2026-08-22 - Genpack - referenced ·
c42019fb07c424acd339a2c85040ec4f· first seen 2026-08-22 - aa9d6c9ac0d7f13bbbc306763ab9ee9087908a3a494826decb966b612e221ee5 - referenced ·
aa9d6c9ac0d7f13bbbc306763ab9ee90· first seen 2026-08-22 - d889e8b7caf30f77f95ac8f1a386cd627b5176f0bc6133a9c0d58e7b7779ca16 - referenced ·
d889e8b7caf30f77f95ac8f1a386cd62· first seen 2026-08-22 - Genpack - referenced ·
ade8f04844a78043b88fe9f44ab990ec· first seen 2026-08-22 - Genpack - referenced ·
7dd8fba9a4f6d54091167d7fbf7913b6· first seen 2026-08-21 - Genpack - referenced ·
962063e4d4b0964a4cd7131461a66852· first seen 2026-08-21 - Genpack - referenced ·
6b3e3fccb1aae7a98063dc6fc34c6902· first seen 2026-08-21 - HUILoader - referenced ·
9a489f831df3ada24dcc53785d56a956· first seen 2026-08-21 - 3d81893ea51c83f1883c4b0e4d5dfc44de4c528675677c1909783c4486078f8d - referenced ·
3d81893ea51c83f1883c4b0e4d5dfc44· first seen 2026-08-21 - Genpack - referenced ·
76fb74114303efea1174b70b4aa8e0f2· first seen 2026-08-21 - c613b1ff28931020952aed3376a4cd040c42abfd552cfb87d0fba172bbd7e748 - referenced ·
c613b1ff28931020952aed3376a4cd04· first seen 2026-08-21 - HUILoader - referenced ·
9626184a3a0e74a12313f48efe3ba8a1· first seen 2026-08-21
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Next.js
Contacted infrastructure
- 183.177.68.210 - AS10310 Yahoo-AU (Australia)
- 76.223.84.192 - AS16509 Amazon.com, Inc. (United States)
Observed indicators
- www.yahoo.com
- consent.cmp.oath.com
- udc.yahoo.com
- nexus-gateway-prod.media.yahoo.com
- s.yimg.com
- geo.yahoo.com
- cdn.taboola.com
- securepubads.g.doubleclick.net
- finance.yahoo.com
- sports.yahoo.com
- mail.yahoo.com
- health.yahoo.com
- shopping.yahoo.com
- travel.yahoo.com
- tech.yahoo.com
- x.com
- facebook.com
- instagram.com
- www.youtube.com
- www.tiktok.com
Other scans of www.yahoo.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown
- 24 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 21 Aug 2026 - unknown
Questions about www.yahoo.com
- Is www.yahoo.com safe?
- The scan of www.yahoo.com on 23 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.yahoo.com?
- 311 analysed samples communicate with this URL, including HUILoader, Genpack.
- How was www.yahoo.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.yahoo.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan