www.yahoo.com - URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned www.yahoo.com and returned a unknown verdict (score -12). The page resolved to 183.177.68.211 on Yahoo-AU in AU. The domain was registered 11537 days ago through MarkMonitor Inc.. 43 domains and 2 IPs were contacted, over 52 HTTP requests. 295 malware samples communicate with this URL (HUILoader, Genpack, Container). The request followed 1 redirect before landing. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://geocities.com/ - Domain: www.yahoo.com · IP: 183.177.68.211 · AS10310 · AU
- Server: ATS
- Page title: Yahoo | Mail, Weather, Search, Politics, News, Finance, Sports & Videos
- HTTP status: 200 · text/html; charset=utf-8
- Registrar: MarkMonitor Inc. · domain age 11537 days · created 1995-01-18
- TLS issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 · valid to Oct 7 23: · subject C=US, ST=New York, L=New York, O=Yahoo Holdings Inc., CN=*.www.yahoo.com
- Evidenced operator: Yahoo Holdings Inc.
- HTTP requests captured: 52
- Scan tier: fast · observed 2026-08-21 04:52:29 UTC
Redirect chain
https://geocities.com/https://www.yahoo.com/
Malware communicating with this URL (295)
These samples were observed contacting or being served from www.yahoo.com. Each links to its full analysis.
- HUILoader - referenced ·
7aeb825de073dffeb0ae5db118d7684d· first seen 2026-08-21 - HUILoader - referenced ·
e97db28f8312c4d1182120750f957486· first seen 2026-08-20 - Genpack - referenced ·
fa67ac137d8d4b6c920c4a9da8270399· first seen 2026-08-20 - HUILoader - referenced ·
d475a764a3e036a46ad0fab1e2b35dfb· first seen 2026-08-20 - HUILoader - referenced ·
ef1c74ee797131db2d62f5dec3f3fab9· first seen 2026-08-20 - Container - referenced ·
658b879af35c40c006fa8b6f09d8f5a6· first seen 2026-08-18 - Container - referenced ·
2a3b366336a649ed3fb018cae5a2f489· first seen 2026-08-18 - Container - referenced ·
4b996c2443a5c7ee7cc20e87377c4bcb· first seen 2026-08-18 - Container - referenced ·
1418a13be8f07a11ae24c41e9d47054f· first seen 2026-08-18 - Container - referenced ·
115d095312eadb57a8c51fdcdaf0935e· first seen 2026-08-18 - Container - referenced ·
30eb45010f1f981c7a97c3d6be631685· first seen 2026-08-18 - Container - referenced ·
70b3aa352dacf84920f0ead33536daa5· first seen 2026-08-18 - Container - referenced ·
4bed700a5b40eca3c216814db619cc52· first seen 2026-08-18 - Container - referenced ·
301d1b4272c50e49a783e26aa47cafbd· first seen 2026-08-18 - Container - referenced ·
489673e1faa79ff95814c43809d6f263· first seen 2026-08-18
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Next.js
Contacted infrastructure
- 183.177.68.211 - AS10310 Yahoo-AU (Australia)
- 76.223.84.192 - AS16509 Amazon.com, Inc. (United States)
Observed indicators
- www.yahoo.com
- consent.cmp.oath.com
- udc.yahoo.com
- nexus-gateway-prod.media.yahoo.com
- s.yimg.com
- geo.yahoo.com
- cdn.taboola.com
- securepubads.g.doubleclick.net
- finance.yahoo.com
- sports.yahoo.com
- mail.yahoo.com
- shopping.yahoo.com
- autos.yahoo.com
- tech.yahoo.com
- travel.yahoo.com
- health.yahoo.com
- x.com
- facebook.com
- instagram.com
- www.youtube.com
Other scans of www.yahoo.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 21 Aug 2026 - unknown
Questions about www.yahoo.com
- Is www.yahoo.com safe?
- The scan of www.yahoo.com on 21 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.yahoo.com?
- 295 analysed samples communicate with this URL, including HUILoader, Genpack, Container.
- How was www.yahoo.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.yahoo.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan