www.yahoo.com - URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned www.yahoo.com and returned a unknown verdict (score -12). The page resolved to 183.177.68.210 on Yahoo-AU in AU. The domain was registered 11539 days ago through MarkMonitor Inc.. 43 domains and 2 IPs were contacted, over 52 HTTP requests. 305 malware samples communicate with this URL (Genpack, HUILoader). The request followed 1 redirect before landing. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://geocities.com/ - Domain: www.yahoo.com · IP: 183.177.68.210 · AS10310 · AU
- Server: ATS
- Page title: Yahoo | Mail, Weather, Search, Politics, News, Finance, Sports & Videos
- HTTP status: 200 · text/html; charset=utf-8
- Registrar: MarkMonitor Inc. · domain age 11539 days · created 1995-01-18
- TLS issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 · valid to Oct 7 23: · subject C=US, ST=New York, L=New York, O=Yahoo Holdings Inc., CN=*.www.yahoo.com
- Evidenced operator: Yahoo Holdings Inc.
- HTTP requests captured: 52
- Scan tier: fast · observed 2026-08-22 09:32:02 UTC
Redirect chain
https://geocities.com/https://www.yahoo.com/
Malware communicating with this URL (305)
These samples were observed contacting or being served from www.yahoo.com. Each links to its full analysis.
- Genpack - referenced ·
ade8f04844a78043b88fe9f44ab990ec· first seen 2026-08-22 - Genpack - referenced ·
7dd8fba9a4f6d54091167d7fbf7913b6· first seen 2026-08-21 - Genpack - referenced ·
962063e4d4b0964a4cd7131461a66852· first seen 2026-08-21 - Genpack - referenced ·
6b3e3fccb1aae7a98063dc6fc34c6902· first seen 2026-08-21 - HUILoader - referenced ·
9a489f831df3ada24dcc53785d56a956· first seen 2026-08-21 - 3d81893ea51c83f1883c4b0e4d5dfc44de4c528675677c1909783c4486078f8d - referenced ·
3d81893ea51c83f1883c4b0e4d5dfc44· first seen 2026-08-21 - Genpack - referenced ·
76fb74114303efea1174b70b4aa8e0f2· first seen 2026-08-21 - c613b1ff28931020952aed3376a4cd040c42abfd552cfb87d0fba172bbd7e748 - referenced ·
c613b1ff28931020952aed3376a4cd04· first seen 2026-08-21 - HUILoader - referenced ·
9626184a3a0e74a12313f48efe3ba8a1· first seen 2026-08-21 - 644545f174841d2b92166b6e69dcf6b965634f0fe4d0c8a861091434e83d5078 - referenced ·
644545f174841d2b92166b6e69dcf6b9· first seen 2026-08-21 - HUILoader - referenced ·
7aeb825de073dffeb0ae5db118d7684d· first seen 2026-08-21 - HUILoader - referenced ·
e97db28f8312c4d1182120750f957486· first seen 2026-08-20 - Genpack - referenced ·
fa67ac137d8d4b6c920c4a9da8270399· first seen 2026-08-20 - HUILoader - referenced ·
d475a764a3e036a46ad0fab1e2b35dfb· first seen 2026-08-20 - HUILoader - referenced ·
ef1c74ee797131db2d62f5dec3f3fab9· first seen 2026-08-20
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Next.js
Contacted infrastructure
- 183.177.68.210 - AS10310 Yahoo-AU (Australia)
- 13.248.158.7 - AS16509 Amazon Technologies Inc. (United States)
Observed indicators
- www.yahoo.com
- consent.cmp.oath.com
- udc.yahoo.com
- nexus-gateway-prod.media.yahoo.com
- s.yimg.com
- geo.yahoo.com
- cdn.taboola.com
- securepubads.g.doubleclick.net
- finance.yahoo.com
- sports.yahoo.com
- mail.yahoo.com
- health.yahoo.com
- shopping.yahoo.com
- travel.yahoo.com
- tech.yahoo.com
- x.com
- facebook.com
- instagram.com
- www.youtube.com
- www.tiktok.com
Other scans of www.yahoo.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 20 Aug 2026 - unknown
Questions about www.yahoo.com
- Is www.yahoo.com safe?
- The scan of www.yahoo.com on 22 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.yahoo.com?
- 305 analysed samples communicate with this URL, including Genpack, HUILoader.
- How was www.yahoo.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.yahoo.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan