www.yahoo.com - URL scan, 20 Aug 2026
MalwareAnalyzer by Cyble scanned www.yahoo.com and returned a unknown verdict (score -12). The page resolved to 183.177.68.210 on Yahoo-AU in AU. The domain was registered 11537 days ago through MarkMonitor Inc.. 43 domains and 2 IPs were contacted, over 52 HTTP requests. 291 malware samples communicate with this URL (HUILoader, Container). The request followed 1 redirect before landing. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://geocities.com/ - Domain: www.yahoo.com · IP: 183.177.68.210 · AS10310 · AU
- Server: ATS
- Page title: Yahoo | Mail, Weather, Search, Politics, News, Finance, Sports & Videos
- HTTP status: 200 · text/html; charset=utf-8
- Registrar: MarkMonitor Inc. · domain age 11537 days · created 1995-01-18
- TLS issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 · valid to Oct 7 23: · subject C=US, ST=New York, L=New York, O=Yahoo Holdings Inc., CN=*.www.yahoo.com
- Evidenced operator: Yahoo Holdings Inc.
- HTTP requests captured: 52
- Scan tier: fast · observed 2026-08-20 06:07:09 UTC
Redirect chain
https://geocities.com/https://www.yahoo.com/
Malware communicating with this URL (291)
These samples were observed contacting or being served from www.yahoo.com. Each links to its full analysis.
- HUILoader - referenced ·
ef1c74ee797131db2d62f5dec3f3fab9· first seen 2026-08-20 - Container - referenced ·
658b879af35c40c006fa8b6f09d8f5a6· first seen 2026-08-18 - Container - referenced ·
2a3b366336a649ed3fb018cae5a2f489· first seen 2026-08-18 - Container - referenced ·
4b996c2443a5c7ee7cc20e87377c4bcb· first seen 2026-08-18 - Container - referenced ·
1418a13be8f07a11ae24c41e9d47054f· first seen 2026-08-18 - Container - referenced ·
115d095312eadb57a8c51fdcdaf0935e· first seen 2026-08-18 - Container - referenced ·
30eb45010f1f981c7a97c3d6be631685· first seen 2026-08-18 - Container - referenced ·
70b3aa352dacf84920f0ead33536daa5· first seen 2026-08-18 - Container - referenced ·
4bed700a5b40eca3c216814db619cc52· first seen 2026-08-18 - Container - referenced ·
301d1b4272c50e49a783e26aa47cafbd· first seen 2026-08-18 - Container - referenced ·
489673e1faa79ff95814c43809d6f263· first seen 2026-08-18 - Container - referenced ·
3df821e1e27efbcdac946ce236c738e8· first seen 2026-08-19 - Container - referenced ·
30356499adc5186ecfc3dec9e093af89· first seen 2026-08-18 - Container - referenced ·
1d2439de5c9f6c2fc1745842a32d6e37· first seen 2026-08-18 - Container - referenced ·
709a0b429539c456657c144c24f3e81e· first seen 2026-08-18
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Next.js
Contacted infrastructure
- 183.177.68.210 - AS10310 Yahoo-AU (Australia)
- 76.223.84.192 - AS16509 Amazon.com, Inc. (United States)
Observed indicators
- www.yahoo.com
- consent.cmp.oath.com
- udc.yahoo.com
- nexus-gateway-prod.media.yahoo.com
- s.yimg.com
- geo.yahoo.com
- cdn.taboola.com
- securepubads.g.doubleclick.net
- finance.yahoo.com
- sports.yahoo.com
- mail.yahoo.com
- health.yahoo.com
- shopping.yahoo.com
- travel.yahoo.com
- tech.yahoo.com
- x.com
- facebook.com
- instagram.com
- www.youtube.com
- www.tiktok.com
Other scans of www.yahoo.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 21 Aug 2026 - unknown
Questions about www.yahoo.com
- Is www.yahoo.com safe?
- The scan of www.yahoo.com on 20 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.yahoo.com?
- 291 analysed samples communicate with this URL, including HUILoader, Container.
- How was www.yahoo.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.yahoo.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan