www.yahoo.com - URL scan, 24 Aug 2026
MalwareAnalyzer by Cyble scanned www.yahoo.com and returned a unknown verdict (score -12). The page resolved to 183.177.68.211 on Yahoo-AU in AU. The domain was registered 11540 days ago through MarkMonitor Inc.. 43 domains and 2 IPs were contacted, over 52 HTTP requests. 10 malware samples communicate with this URL (Revell, AsyncRAT, Vobfus). The request followed 1 redirect before landing. This is a point-in-time observation from 24 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://yahoo.com/ - Domain: www.yahoo.com · IP: 183.177.68.211 · AS10310 · AU
- Server: ATS
- Page title: Yahoo | Mail, Weather, Search, Politics, News, Finance, Sports & Videos
- HTTP status: 200 · text/html; charset=utf-8
- Registrar: MarkMonitor Inc. · domain age 11540 days · created 1995-01-18
- TLS issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 · valid to Oct 7 23: · subject C=US, ST=New York, L=New York, O=Yahoo Holdings Inc., CN=*.www.yahoo.com
- Evidenced operator: Yahoo Holdings Inc.
- HTTP requests captured: 52
- Scan tier: fast · observed 2026-08-24 04:57:24 UTC
Redirect chain
https://yahoo.com/https://www.yahoo.com/
Malware communicating with this URL (10)
These samples were observed contacting or being served from www.yahoo.com. Each links to its full analysis.
- Revell - referenced ·
3a3f9620d8c14ec52e392a1f200cfafb· first seen 2026-08-24 - 5bc4876b1f1e4f5b36d21bf3ef0cf85385e30a85fd06fff818c785e48e8d0b46 - referenced ·
5bc4876b1f1e4f5b36d21bf3ef0cf853· first seen 2026-08-23 - Revell - referenced ·
d03de61062a0f18c77a5e2c6e7614680· first seen 2026-08-22 - Revell - referenced ·
dd34316234bb61ae29f7b2012d83f7c3· first seen 2026-08-20 - fbevents.js - referenced ·
5d8d4bb1186f740b55e9d632b68acc0b· first seen 2026-08-19 - 5025d958ae140975bb9d8cab6f1c99d6e9d5e13d94a695a7975450d3ea868df9 - referenced ·
5025d958ae140975bb9d8cab6f1c99d6· first seen 2026-08-15 - AsyncRAT - referenced ·
dfea615110f480d5ff695d936be2c19b· first seen 2026-08-14 - fbevents.js - referenced ·
2cc00eb82ca36588f5678962dc8e19a1· first seen 2026-08-13 - fbevents.js - referenced ·
9b96a7411ab2e41dd12d819f7a4f3273· first seen 2026-08-13 - Vobfus - referenced ·
a1fd0f76a835566d3060987379690eb1· first seen 2026-08-12
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Next.js
Contacted infrastructure
- 183.177.68.211 - AS10310 Yahoo-AU (Australia)
- 74.6.231.21 - AS36646 Oath Holdings Inc. (United States)
Observed indicators
- www.yahoo.com
- consent.cmp.oath.com
- udc.yahoo.com
- nexus-gateway-prod.media.yahoo.com
- s.yimg.com
- geo.yahoo.com
- cdn.taboola.com
- securepubads.g.doubleclick.net
- finance.yahoo.com
- sports.yahoo.com
- mail.yahoo.com
- health.yahoo.com
- travel.yahoo.com
- tech.yahoo.com
- shopping.yahoo.com
- x.com
- facebook.com
- instagram.com
- www.youtube.com
- www.tiktok.com
Other scans of www.yahoo.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 21 Aug 2026 - unknown
Questions about www.yahoo.com
- Is www.yahoo.com safe?
- The scan of www.yahoo.com on 24 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.yahoo.com?
- 10 analysed samples communicate with this URL, including Revell, AsyncRAT, Vobfus.
- How was www.yahoo.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.yahoo.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan