{"report_id":"1e64191b-c2e5-4067-8a6e-76748c56ad14","version":6,"status":"done","tags":[],"date":"2026-04-18T23:31:26Z","url":{"schema":"http","addr":"jnmowhite.click/back.html?traceID=417023529\u0026tbReason=1","fqdn":"jnmowhite.click","domain":"jnmowhite.click","tld":"click"},"ip":{"addr":"159.253.19.140","port":0,"asn":198068,"as":"P.a.g.m. Ou","country":"Estonia","country_code":"EE"},"final":{"url":{"schema":"https","addr":"consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b","fqdn":"consent.yahoo.com","domain":"yahoo.com","tld":"com"},"title":"Dine personvernvalg","dom":{"size":96102,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (38326)","md5":"368a27178e9dade77abb5527b0cbb151","sha1":"65685521df996af87cf96c08e8386c2becefdfae","sha256":"e8fb296761f85274c527ee9da7c5215b4c37c0ae45485e9c68ceebf56d1a68d4","sha512":"5600aae0373b3cb530374c03ce7a7023814495e765a257e99560ff28a6b0698a67651b795cfe78233019dd661081f4d6d4e1e1f8cf688971f7852586e34aad2c","ssdeep":"1536:zKJkVJHY0NWgFLJHY0NWgFs37eEeneeeOo:CgFQgFs3R","tlshash":"a19396c5c9f8e3795d2b2d14da99731fa30fa604ff237658b02de498a3c6ae501e2d41","dom_hash":"domhashb4d6aeedd2aa0e94b1f9a6fc7f6c15a9","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"jnmowhite.click/back.html?traceID=417023529\u0026tbReason=1","fqdn":"jnmowhite.click","domain":"jnmowhite.click","tld":"click"},"ip":{"addr":"159.253.19.140","port":0,"asn":198068,"as":"P.a.g.m. Ou","country":"Estonia","country_code":"EE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-23T23:31:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"jnmowhite.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"udc.yahoo.com","ip":{"addr":"188.125.72.139","port":443,"asn":34010,"as":"Yahoo-UK Limited","country":"Ireland","country_code":"IE"},"domain_registered":"1995-01-18","domain_rank":20752,"first_seen":"2017-01-30T05:13:06Z","last_seen":"2026-04-16T08:41:40.794865Z","alert_count":0,"request_count":1,"received_data":594,"sent_data":689,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]},{"fqdn":"jnmowhite.click","ip":{"addr":"159.253.19.140","port":443,"asn":198068,"as":"P.a.g.m. Ou","country":"Estonia","country_code":"EE"},"domain_registered":"2025-06-26","domain_rank":0,"first_seen":"2025-06-27T11:03:53.802464Z","last_seen":"2026-04-05T09:02:59.469148Z","alert_count":1,"request_count":1,"received_data":96455,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"s.yimg.com","ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"1997-05-14","domain_rank":4553,"first_seen":"2012-05-20T22:45:00Z","last_seen":"2026-04-13T03:17:59.156292Z","alert_count":0,"request_count":8,"received_data":509966,"sent_data":3714,"comment":"","tags":null,"fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.yahoo.com","ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"1995-01-18","domain_rank":1472,"first_seen":"2012-05-20T22:42:45Z","last_seen":"2026-04-16T12:32:27.090268Z","alert_count":0,"request_count":1,"received_data":97409,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]},{"fqdn":"guce.yahoo.com","ip":{"addr":"54.171.11.154","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"1995-01-18","domain_rank":23222,"first_seen":"2018-03-16T21:40:34Z","last_seen":"2026-04-18T01:04:55.578426Z","alert_count":0,"request_count":1,"received_data":96310,"sent_data":580,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"consent.yahoo.com","ip":{"addr":"54.171.11.154","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"1995-01-18","domain_rank":12070,"first_seen":"2019-02-20T12:07:06Z","last_seen":"2026-04-17T09:04:58.451467Z","alert_count":0,"request_count":5,"received_data":99122,"sent_data":3256,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b","fqdn":"consent.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"54.171.11.154","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb35f66e60f5a88b6ad45db24cfd4a1e","sha1":"0d89c03ff758fffdbd48297c905430f46e05640d","sha256":"39aa0748ee518e97e5a33e72328fcf31efae53dc5eef2e84115861328634ca82","sha512":"b7c3251f2d2d24f492d6b612fe153afc2b3c81c1caccad7dff6312a71928b2c8310d8c197bcf1df9628ba0af92dc269771b22e4229853d3b06ef9e28b2a7d4b3","ssdeep":"","tlshash":"63c09b1c0561017505b31dd029d747c03b319442e0457025f5bcc746dfc1591cc31fd1","size":140,"data":"","first_seen":"2024-03-02T20:37:42Z","last_seen":"2026-04-19T01:29:44.058776Z","times_seen":5619,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/oa/build/js/site-b61979ba.js","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee2d1ffddf2ca0bcdc9d9c7b1a1afa06","sha1":"b61979bae3e8b1352e04c5a2d6f55bf3f330a175","sha256":"4dbb3b5665e27a7feed6c2fabeb3ae0b55ff893a0817f991f2b5bdd48573c828","sha512":"2e6d23106a5ab2ad459d35032080ac7bbb410788bda7258c0fdb08793d70d89cbd7a3090190ec0f93153610d409cf926ebc9cef67d134e32de7495e57d2f1bd0","ssdeep":"1536:Crk+3DvscmrlFOtza5uXJruX5/YOUQ/kO1wmFWcn0+c81mIDN/+Q+6hrA+Kb++n6:ED8QDQAgu2","tlshash":"d1b3725ab9e3207145bf31bea7af9288353000476504ec653c5c8e881f94eb56af7fda","size":117440,"data":"","first_seen":"2026-02-16T15:35:51.583402Z","last_seen":"2026-04-19T01:29:44.054989Z","times_seen":938,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/ss/rapid-3.53.30.js","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"665798d28ecf9be7cbc434e75267920d","sha1":"55864f76f012bb11a354c6bacdcc7769a5ec6fa2","sha256":"7bc917ebee12bcd521ae88840228032579459c25a3ccf8953d8a2dbe5e085be9","sha512":"6191d7396f72b8e362b1ed6444f17c645a8f921495936713c90db6947b793a0178c6d0bb0e902786768c36b6ba254728eba6a740f935c22a9f9029f6d3cc8af8","ssdeep":"768:x8HRVYb/9XQj3AGnW2xvj3lOzTP8dADM7f2HuDslY9SQkpDN:+zYrRQj3XhRj3aEv2HuDiYK","tlshash":"f2333ae971d0707242e72475663f620a733a1a622c4d5844f66cedd43878edf6323eae","size":50266,"data":"","first_seen":"2023-03-07T01:02:40Z","last_seen":"2026-04-19T01:29:44.056023Z","times_seen":8259,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b","fqdn":"consent.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"54.171.11.154","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce8910148f681d52b05edc8fc744b5d5","sha1":"172f26f8900a4e3bde1252ab00d2c8826ad2996f","sha256":"a1e6aeac162d2dcfc603b227c9327dc0da9df968837f8b18cba20bcc11c6e543","sha512":"2eb015e9fa328e5d6303d0a5fb5182d57d5a81048b9959715c554d5a32473bd38070e599bdd121aa5df9deea3200d4a754e42811895104ed359f576028a04088","ssdeep":"","tlshash":"e101683a8fd190c66a6581b1773f0800b8180c074e00f495bb9df5886f0c21f92f4dde","size":700,"data":"","first_seen":"2025-03-25T22:58:47.349459Z","last_seen":"2026-04-19T01:29:44.059307Z","times_seen":5244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"consent.yahoo.com/static/images/close.svg","fqdn":"consent.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"54.171.11.154","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b","date":"2026-04-18T23:31:04.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"consent.oath.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:DF:E3:70:17:4F:4D:8F:E0:46:FB:3E:FF:51:4E:E8:3A:5E:11:ED","sha256":"6A:47:9F:DD:87:66:2F:2E:A9:FD:C4:A2:59:88:DD:6F:BB:3E:FE:29:8B:63:28:AB:36:23:0D:B3:43:FF:72:D5"}}},"request":{"raw":"GET /static/images/close.svg HTTP/1.1\r\nHost: consent.yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GUCS=AUzn4H1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Encoding: gzip\r\nServer: guce\r\nAccept-Ranges: bytes\r\nDate: Sat, 18 Apr 2026 23:31:05 GMT\r\nConnection: keep-alive\r\nLast-Modified: Thu, 16 Apr 2026 08:32:25 GMT\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Length: 703\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1402,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04fdad3c9b32cf024d3494c6e0b1f691","sha1":"e7c0aabd33e695415e7a8c7afea4b94dca273f06","sha256":"8f0baedf119a144b8b4fe597eb02a91fc47d89284aa6cdcc12097cb109598796","sha512":"8faf6ac7d20f6e453e7f8ae7850ab624962e3bf87a015c92d1cd35a8bf7703f5cb4b0519f912b65ddbd182bf99098a3ac98d2eaacf21947ab4ccefe649a235c4","ssdeep":"","tlshash":"5e2153e0337d4179b516c320cff86b296196708b21c48498f98e0a61fb394c5ad8fb6f","first_seen":"2023-09-13T08:11:20Z","last_seen":"2026-04-18T23:31:27.311963Z","times_seen":6554,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":58,"dns":3,"connect":32,"send":0,"wait":34,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.yahoo.com/beacon?tag=TCF2\u0026step=Layer1-View\u0026brandDomain=www.yahoo.com\u0026brandBid=\u0026userType=nonreg\u0026sdk=false\u0026tos=nb-NO\u0026country=NO\u0026x=\u0026sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b","fqdn":"consent.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"54.171.11.154","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b","date":"2026-04-18T23:31:05.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"consent.oath.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:DF:E3:70:17:4F:4D:8F:E0:46:FB:3E:FF:51:4E:E8:3A:5E:11:ED","sha256":"6A:47:9F:DD:87:66:2F:2E:A9:FD:C4:A2:59:88:DD:6F:BB:3E:FE:29:8B:63:28:AB:36:23:0D:B3:43:FF:72:D5"}}},"request":{"raw":"GET /beacon?tag=TCF2\u0026step=Layer1-View\u0026brandDomain=www.yahoo.com\u0026brandBid=\u0026userType=nonreg\u0026sdk=false\u0026tos=nb-NO\u0026country=NO\u0026x=\u0026sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b HTTP/1.1\r\nHost: consent.yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GUCS=AUzn4H1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: guce\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nDate: Sat, 18 Apr 2026 23:31:05 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"udc.yahoo.com/v2/public/yql?yhlVer=2\u0026yhlClient=rapid\u0026yhlS=1197812781\u0026yhlCT=2\u0026yhlBTMS=1776555065083\u0026yhlClientVer=3.53.30\u0026yhlRnd=9NqwVNAAx2spO0Yy\u0026yhlCompressed=0","fqdn":"udc.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"188.125.72.139","port":443,"asn":34010,"as":"Yahoo-UK Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b","date":"2026-04-18T23:31:05.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Mar 2026 00:00:00 GMT","end":"Wed, 02 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:E2:4A:11:28:7E:5E:57:69:DC:2F:2E:29:FB:25:16:66:D5:F1:1A","sha256":"87:EA:7D:2E:FD:EC:58:FC:8D:AC:09:32:66:86:C1:51:0F:AA:68:7B:23:21:17:8A:DA:DE:12:29:ED:88:4F:25"}}},"request":{"raw":"POST /v2/public/yql?yhlVer=2\u0026yhlClient=rapid\u0026yhlS=1197812781\u0026yhlCT=2\u0026yhlBTMS=1776555065083\u0026yhlClientVer=3.53.30\u0026yhlRnd=9NqwVNAAx2spO0Yy\u0026yhlCompressed=0 HTTP/1.1\r\nHost: udc.yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 1302\r\nOrigin: https://consent.yahoo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GUCS=AUzn4H1D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1302,"data":"q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.53.30%22%2C%22A_cn%22%3A%22VERSIONED-PROD%22%2C%22_bt%22%3A%22rapid%22%2C%22sessionId%22%3A%223_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b%22%2C%22A_pr%22%3A%22https%22%2C%22A_tzoff%22%3A0%2C%22A_cnf%22%3A%22%7B%5C%22spaceid%5C%22%3A%5C%221197812781%5C%22%2C%5C%22anonymized%5C%22%3A%5C%22true%5C%22%2C%5C%22test_id%5C%22%3A%5C%22%5C%22%7D%22%7D%2C%22r%22%3A%5B%7B%22t%22%3A%22pv%22%2C%22s%22%3A%221197812781%22%2C%22pp%22%3A%7B%22A_sid%22%3A%2222iiKRWomrRbFn5S%22%2C%22_w%22%3A%22consent.yahoo.com%2Fv2%2FcollectConsent%3FsessionId%3D3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b%22%2C%22outcm%22%3A%22consent-layer1_imp%22%2C%22mrkt%22%3A%22gb%22%2C%22lang%22%3A%22nb-NO%22%2C%22pt%22%3A%22utility%22%2C%22pct%22%3A%22story%22%2C%22ver%22%3A%22java%22%2C%22dmi_consent%22%3A%22false%22%2C%22site%22%3A%22www.yahoo.com%22%2C%22ll1%22%3A%22%22%2C%22A_%22%3A%221%22%2C%22A_sr%22%3A%221280x1024%22%2C%22A_vr%22%3A%221280x1024%22%2C%22A_do%22%3A%221%22%2C%22A_ib%22%3A%221280x1024%22%2C%22A_ob%22%3A%221280x1024%22%2C%22A_srr%22%3A%221%22%7D%2C%22_ts%22%3A%221776555065%22%2C%22_ms%22%3A%22080%22%2C%22lv%22%3A%5B%5D%7D%5D%2C%22yrid%22%3A%22%22%2C%22optout%22%3A%220%22%2C%22nol%22%3A%220%22%7D'"}},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://consent.yahoo.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, private, max-age=0\r\np3p: policyref=\"http://info.yahoo.com/w3c/p3p.xml\", CP=\"CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV\"\r\npragma: no-cache\r\nexpires: -1\r\nx-envoy-upstream-service-time: 1\r\ndate: Sat, 18 Apr 2026 23:31:04 GMT\r\nserver: ATS\r\nage: 1\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":113,"dns":41,"connect":32,"send":0,"wait":35,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnmowhite.click/back.html?traceID=417023529\u0026tbReason=1","fqdn":"jnmowhite.click","domain":"jnmowhite.click","tld":"click"},"ip":{"addr":"159.253.19.140","port":443,"asn":198068,"as":"P.a.g.m. Ou","country":"Estonia","country_code":"EE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T23:31:03.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhives.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:47:23 GMT","end":"Wed, 20 May 2026 07:47:22 GMT"},"fingerprint":{"sha1":"EC:A1:D0:B7:CA:D4:1B:20:A8:26:5B:A7:D8:76:8E:89:8A:A7:B6:DD","sha256":"E1:30:7B:F8:B9:A0:E1:A1:3F:6D:8F:EC:89:90:FC:09:EB:F8:3F:B4:89:92:A2:6A:14:44:BB:31:6F:C3:D3:59"}}},"request":{"raw":"GET /back.html?traceID=417023529\u0026tbReason=1 HTTP/1.1\r\nHost: jnmowhite.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.28.0\r\nDate: Sat, 18 Apr 2026 23:31:03 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/8.1.29\r\nX-Frame-Options: DENY\r\nSet-Cookie: visit=4; expires=Sun, 19-Apr-2026 20:59:59 GMT; Max-Age=77336; HttpOnly\ntraceID=XDrqAHRJ; expires=Sun, 18-Apr-2027 23:31:03 GMT; Max-Age=31536000; HttpOnly\r\nclickStatus: 1\r\nlocation: https://www.yahoo.com\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":96015,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":83,"dns":1,"connect":37,"send":0,"wait":243,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"jnmowhite.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage.png","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b","date":"2026-04-18T23:31:04.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:BC:09:95:C4:5C:7A:4B:D7:04:D5:32:ED:E6:C3:8F:70:A1:BD:D0","sha256":"A0:7E:9F:55:C0:4A:54:10:28:8C:65:D3:F7:C2:58:8B:57:28:07:E1:40:41:5C:BA:91:B1:7B:87:56:63:96:A7"}}},"request":{"raw":"GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage.png HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: x71yD6uv0aEqrFx5dtVjDXMoT9jPR/PImYopn8RHsthlAN6kdoxTVTcth8l8pNSh7ICtTNriHLPWBuaVKNcHp4jMH16UR4Vf\r\nx-amz-request-id: 9JZ161HW7HPBVBXW\r\ndate: Sat, 18 Apr 2026 15:00:07 GMT\r\nlast-modified: Fri, 17 Apr 2026 21:31:45 GMT\r\netag: \"7e72897bf7bdaecf5fec47f028de6aac\"\r\ncache-control: public,max-age=86400\r\nexpires: Sat, 18 Apr 2026 23:00:00 GMT\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 760\r\nserver: ATS\r\nvary: Origin\r\nage: 30658\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000\r\nats-carp-promotion: 1, 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 36, 8-bit colormap, non-interlaced","md5":"7e72897bf7bdaecf5fec47f028de6aac","sha1":"a6d4f7b2b57a751941cc56e3cffbfde4de633576","sha256":"8a781f94157287ada91708b4baf12712cedf808ce49c58c194fc9873f4fa7a30","sha512":"2cd72c9a3f59178ea3d242301500513cd8f4be66ccd746da6e48625974f0006cfb5399a5fc07ed877345fca84da72ad83e72bd0c5ee04bb1e2a763909a7449e6","ssdeep":"","tlshash":"d2012591575d8e30daa112e9d234445186391c140bbe3435d5d1cc606fa1127cf40fa2","first_seen":"2023-05-01T17:57:49Z","last_seen":"2026-04-19T01:29:44.044857Z","times_seen":6855,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage.png","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b","date":"2026-04-18T23:31:04.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:BC:09:95:C4:5C:7A:4B:D7:04:D5:32:ED:E6:C3:8F:70:A1:BD:D0","sha256":"A0:7E:9F:55:C0:4A:54:10:28:8C:65:D3:F7:C2:58:8B:57:28:07:E1:40:41:5C:BA:91:B1:7B:87:56:63:96:A7"}}},"request":{"raw":"GET /rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage.png HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: 9LMWCaZY2LWZ05pZkzrsuHQYMQS7cd2CJm4xkMY+kkVpG/HR3m9PRze82iBTAB8ugkEDHz4Wh5s=\r\nx-amz-request-id: 9GMBB9QVD6Z4A9F1\r\ndate: Sat, 18 Apr 2026 00:37:29 GMT\r\nlast-modified: Fri, 17 Apr 2026 21:31:45 GMT\r\netag: \"119157c5c80d9db38f0da8098a35b53a\"\r\ncache-control: public,max-age=86400\r\nexpires: Sat, 18 Apr 2026 23:00:00 GMT\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 810\r\nserver: ATS\r\nvary: Origin\r\nage: 82416\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000\r\nats-carp-promotion: 1, 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":810,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 36, 8-bit colormap, non-interlaced","md5":"119157c5c80d9db38f0da8098a35b53a","sha1":"6c65f9bdaf6aad4fdde6c1bde1e509a6f056058b","sha256":"1b119e32e848339740c549d02aa62d5fd21451d5ce468225922faae86555a68d","sha512":"444c70f817a27c5bf79af8bf0de2bb148c2501580682b6e18ba27ac4389e9fd1714f3f15d62bed75fe09eb8d96aa90aab737f40aeb424bbcc44640337eeb5e47","ssdeep":"","tlshash":"1d01baf9402176cdc3b61bfe70214a71a2885ff104b1dae379637c329c72d22100dc50","first_seen":"2023-05-01T17:57:49Z","last_seen":"2026-04-19T01:29:44.046146Z","times_seen":6838,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/ss/rapid-3.53.30.js","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b","date":"2026-04-18T23:31:04.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:BC:09:95:C4:5C:7A:4B:D7:04:D5:32:ED:E6:C3:8F:70:A1:BD:D0","sha256":"A0:7E:9F:55:C0:4A:54:10:28:8C:65:D3:F7:C2:58:8B:57:28:07:E1:40:41:5C:BA:91:B1:7B:87:56:63:96:A7"}}},"request":{"raw":"GET /ss/rapid-3.53.30.js HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: g7eJnsEP+wdZAyzEAzPLrqoOBUlMVQQiSo05WbAzX8XjHyK3g3ShbvVz/VkT3R7EQE5ceyVvE2yt+hiQG9BY2Rf/fQF727Xo\r\nx-amz-request-id: PRQEGFRTQ0NB03RJ\r\ndate: Fri, 10 Apr 2026 18:18:07 GMT\r\nlast-modified: Tue, 29 Jun 2021 01:45:07 GMT\r\netag: \"665798d28ecf9be7cbc434e75267920d-df\"\r\ncache-control: max-age=31536000, immutable\r\nx-amz-version-id: .Bcg25AHAdRCkTvv5tMdNmGVEjznZ_m3\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\nserver: ATS\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 709978\r\ncontent-length: 17971\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nats-carp-promotion: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50266,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"665798d28ecf9be7cbc434e75267920d","sha1":"55864f76f012bb11a354c6bacdcc7769a5ec6fa2","sha256":"7bc917ebee12bcd521ae88840228032579459c25a3ccf8953d8a2dbe5e085be9","sha512":"6191d7396f72b8e362b1ed6444f17c645a8f921495936713c90db6947b793a0178c6d0bb0e902786768c36b6ba254728eba6a740f935c22a9f9029f6d3cc8af8","ssdeep":"768:x8HRVYb/9XQj3AGnW2xvj3lOzTP8dADM7f2HuDslY9SQkpDN:+zYrRQj3XhRj3aEv2HuDiYK","tlshash":"f2333ae971d0707242e72475663f620a733a1a622c4d5844f66cedd43878edf6323eae","first_seen":"2023-03-07T01:02:40Z","last_seen":"2026-04-19T01:29:44.056023Z","times_seen":8259,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.yahoo.com/beacon?tag=TCF2\u0026step=Layer1-View\u0026brandDomain=www.yahoo.com\u0026brandBid=\u0026userType=nonreg\u0026sdk=false\u0026tos=nb-NO\u0026country=NO\u0026x=\u0026sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b","fqdn":"consent.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"54.171.11.154","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b","date":"2026-04-18T23:31:04.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"consent.oath.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:DF:E3:70:17:4F:4D:8F:E0:46:FB:3E:FF:51:4E:E8:3A:5E:11:ED","sha256":"6A:47:9F:DD:87:66:2F:2E:A9:FD:C4:A2:59:88:DD:6F:BB:3E:FE:29:8B:63:28:AB:36:23:0D:B3:43:FF:72:D5"}}},"request":{"raw":"GET /beacon?tag=TCF2\u0026step=Layer1-View\u0026brandDomain=www.yahoo.com\u0026brandBid=\u0026userType=nonreg\u0026sdk=false\u0026tos=nb-NO\u0026country=NO\u0026x=\u0026sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b HTTP/1.1\r\nHost: consent.yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GUCS=AUzn4H1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: guce\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nDate: Sat, 18 Apr 2026 23:31:05 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/oa/build/images/en-GB-home_f0badd867efa6720.jpeg","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b","date":"2026-04-18T23:31:05.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:BC:09:95:C4:5C:7A:4B:D7:04:D5:32:ED:E6:C3:8F:70:A1:BD:D0","sha256":"A0:7E:9F:55:C0:4A:54:10:28:8C:65:D3:F7:C2:58:8B:57:28:07:E1:40:41:5C:BA:91:B1:7B:87:56:63:96:A7"}}},"request":{"raw":"GET /oa/build/images/en-GB-home_f0badd867efa6720.jpeg HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://s.yimg.com/oa/build/css/site-ltr-281e5c2a.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: mHUVWqey2SWlkss1cVzyz2s06sxdQgvpiYRtJhR0LrGbY0zSDsdkCDUjMQA6PFNwZa8/ig2MST9HAOOlvKeTFR8WouOAxtyj\r\nx-amz-request-id: 59KBR2HY5A11GYFY\r\ndate: Fri, 10 Apr 2026 18:18:19 GMT\r\nlast-modified: Wed, 08 Apr 2026 14:17:35 GMT\r\netag: \"9c394eca0dfc6cbf2420b6c3c07d4970\"\r\ncache-control: max-age=31536000; immutable\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\ncontent-length: 79439\r\nserver: ATS\r\nvary: Origin\r\nage: 709967\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nats-carp-promotion: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":79439,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1546, components 3","md5":"9c394eca0dfc6cbf2420b6c3c07d4970","sha1":"378092debaa0e79af573265a7d0ce2db3ed38a3b","sha256":"c2b819e2ae41bd6a05129d0b6c38941240576b2236386789ffad3656b186ef29","sha512":"d982a01031226d79946b9e6676e38b0f592df87b986520262686c7e1ebb11cbd46044baa6980752d4be96c3af662e7fb85f99b5014b77e7bd79d898d8dfec173","ssdeep":"1536:zy03Je0FXMASpMlX0KU7Y3Wa2nepau8QKjwc3Vle:z/k46pMlkKU7iqbEqVle","tlshash":"2b73e121ee8bbdc2c36e1671e7c6069521d70d03718b965dda8d94372e983662838ffc","first_seen":"2023-04-07T21:30:12Z","last_seen":"2026-04-18T23:31:27.315038Z","times_seen":5113,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":30,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yahoo.com/","fqdn":"www.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T23:31:03.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:BC:09:95:C4:5C:7A:4B:D7:04:D5:32:ED:E6:C3:8F:70:A1:BD:D0","sha256":"A0:7E:9F:55:C0:4A:54:10:28:8C:65:D3:F7:C2:58:8B:57:28:07:E1:40:41:5C:BA:91:B1:7B:87:56:63:96:A7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ndate: Sat, 18 Apr 2026 23:31:04 GMT\r\nstrict-transport-security: max-age=31536000\r\nserver: ATS\r\ncache-control: no-store\r\ncontent-type: text/html; charset=utf-8\r\ncontent-language: en\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nlocation: https://guce.yahoo.com/consent?brandType=nonEu\u0026gcrumb=TOfgfUM\u0026done=https%3A%2F%2Fwww.yahoo.com%2F\r\nset-cookie: GUCS=AUzn4H1D; Max-Age=1800; Domain=.yahoo.com; Path=/; Secure\r\ncontent-security-policy: frame-ancestors 'self' https://*.builtbygirls.com https://*.rivals.com https://*.engadget.com https://*.intheknow.com https://*.autoblog.com https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.pnr.ouryahoo.com https://pnr.ouryahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.onesearch.com https://*.verizonmedia.com https://*.publishing.oath.com https://cdn.taboola.com https://ads.taboola.com chrome-extension://jdanfkhnfpagoijgfmklhgakdicpnfil; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation allow-top-navigation-by-user-activation; report-uri https://csp.yahoo.com/beacon/csp?src=ats\u0026site=news\u0026region=US\u0026lang=en-US\u0026device=desktop\u0026yrid=6o9nr8tivmg0j\u0026partner=;\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":96015,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":129,"dns":53,"connect":29,"send":0,"wait":31,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b","fqdn":"consent.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"54.171.11.154","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T23:31:04.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"consent.oath.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:DF:E3:70:17:4F:4D:8F:E0:46:FB:3E:FF:51:4E:E8:3A:5E:11:ED","sha256":"6A:47:9F:DD:87:66:2F:2E:A9:FD:C4:A2:59:88:DD:6F:BB:3E:FE:29:8B:63:28:AB:36:23:0D:B3:43:FF:72:D5"}}},"request":{"raw":"GET /v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b HTTP/1.1\r\nHost: consent.yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GUCS=AUzn4H1D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Encoding: gzip\r\nExpires: 0\r\nCache-Control: no-cache, no-store, must-revalidate\r\nContent-Security-Policy-Report-Only: default-src 'none'; block-all-mixed-content; connect-src 'self' https://udc.yahoo.com/ https://geo.yahoo.com/ https://ganon.yahoo.com; frame-ancestors 'none'; img-src 'self' https://s.yimg.com; media-src 'none'; script-src 'self' 'nonce-uOtKu2T9VExpIp9My6BWVJTs8mC7TkuF' https://s.yimg.com; style-src 'self' 'nonce-uOtKu2T9VExpIp9My6BWVJTs8mC7TkuF' https://s.yimg.com; font-src 'self'; object-src 'none'; frame-src 'none'; report-uri https://csp.yahoo.com/beacon/csp?src=guce\r\nServer: guce\r\nX-XSS-Protection: 1; mode=block\r\nPragma: no-cache\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nDate: Sat, 18 Apr 2026 23:31:04 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nContent-Type: text/html;charset=UTF-8\r\nContent-Length: 14850\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96015,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (38326)","md5":"9e233ea790d44ae5127f88ca3ef9284f","sha1":"f426c48f50e7d93cec3dcdf00fd352644ad5880f","sha256":"9fabc7aa56842a20d0c423c658ebc4ebf5ef6242b0c81c02f36fb11c4bcb9718","sha512":"88f46267f198958b5cf1aefb94277a2406709886064fb02f6f6a8d8f620fc271cc557427425d2770b2a4138760cd1edbc48a44d923400ba9968240038729c545","ssdeep":"1536:5KJkVJHY0NWgFLJHY0NWgFsO/eGeze9eOt:AgFQgFsO3","tlshash":"719386c5c9f8e3795d2b2d14da99731fa30fa604ff237658b02de498a3c6ae501e2d41","first_seen":"2026-04-18T23:31:27.315853Z","last_seen":"2026-04-18T23:31:27.315853Z","times_seen":1,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":133,"dns":20,"connect":34,"send":0,"wait":97,"receive":1,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/oa/build/css/site-ltr-281e5c2a.css","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b","date":"2026-04-18T23:31:04.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:BC:09:95:C4:5C:7A:4B:D7:04:D5:32:ED:E6:C3:8F:70:A1:BD:D0","sha256":"A0:7E:9F:55:C0:4A:54:10:28:8C:65:D3:F7:C2:58:8B:57:28:07:E1:40:41:5C:BA:91:B1:7B:87:56:63:96:A7"}}},"request":{"raw":"GET /oa/build/css/site-ltr-281e5c2a.css HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: NO//i1PvJxDuiawNJPfzTNGjwxMGvJ57snirTelzKyYeOOFkINnWBerB+vAUCABZHUvberf4LN9qGKABDHYhiI0KAWK+iPy0\r\nx-amz-request-id: PRQC0A8WB1AMP4A3\r\ndate: Fri, 10 Apr 2026 18:18:07 GMT\r\nlast-modified: Wed, 08 Apr 2026 14:17:35 GMT\r\netag: \"03238a99536dffb24860417e82011a01\"\r\ncache-control: max-age=31536000; immutable\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ncontent-type: text/css\r\ncontent-length: 39648\r\nserver: ATS\r\nvary: Origin\r\nage: 709978\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nats-carp-promotion: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":252064,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b7e953464b6c29c7d8389009a552b4ce","sha1":"281e5c2a7c9a82f3a3f79fd56881cd64bd1ba50c","sha256":"e8bd62f1ee837a5c6de5338dcaabef5da49e95330107673ca802f4ffa8217931","sha512":"f91ae8ed451301a8e06929203c14305abde03ade372937e8dc512822eb847a16697775777981f54fb317661b38a8b782d9cc12ae02541982d19a24f68b6e7e39","ssdeep":"1536:wkde3V1lt4D9sY0BmZc5qBUs04T9vT1K3nW+3IM9g4YKuCWD6HPlAkdICuIOkTob:Q1DrLPcZrR9sWm5ALccx2PWQZXszd","tlshash":"b73476a69af31546a45f41347faf674173289003820deef87e9da185cf493d489e3b8e","first_seen":"2026-03-18T03:03:46.535068Z","last_seen":"2026-04-19T01:29:44.053556Z","times_seen":492,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/oa/build/js/site-b61979ba.js","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b","date":"2026-04-18T23:31:04.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:BC:09:95:C4:5C:7A:4B:D7:04:D5:32:ED:E6:C3:8F:70:A1:BD:D0","sha256":"A0:7E:9F:55:C0:4A:54:10:28:8C:65:D3:F7:C2:58:8B:57:28:07:E1:40:41:5C:BA:91:B1:7B:87:56:63:96:A7"}}},"request":{"raw":"GET /oa/build/js/site-b61979ba.js HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: H5bJI9RbckVtoNWyd66E7TCU3w4orSyhGEKww6yN79yIlzbapKnv1zt3j58mnn6duDH15sB5NeU=\r\nx-amz-request-id: PRQ57P8PBZ90PD1X\r\ndate: Fri, 10 Apr 2026 18:18:07 GMT\r\nlast-modified: Wed, 08 Apr 2026 14:17:34 GMT\r\netag: \"173ed0d0468268de1c48f20f746e0554\"\r\ncache-control: max-age=31536000; immutable\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\ncontent-length: 22385\r\nserver: ATS\r\nvary: Origin\r\nage: 709978\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nats-carp-promotion: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":117440,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (497)","md5":"ee2d1ffddf2ca0bcdc9d9c7b1a1afa06","sha1":"b61979bae3e8b1352e04c5a2d6f55bf3f330a175","sha256":"4dbb3b5665e27a7feed6c2fabeb3ae0b55ff893a0817f991f2b5bdd48573c828","sha512":"2e6d23106a5ab2ad459d35032080ac7bbb410788bda7258c0fdb08793d70d89cbd7a3090190ec0f93153610d409cf926ebc9cef67d134e32de7495e57d2f1bd0","ssdeep":"1536:Crk+3DvscmrlFOtza5uXJruX5/YOUQ/kO1wmFWcn0+c81mIDN/+Q+6hrA+Kb++n6:ED8QDQAgu2","tlshash":"d1b3725ab9e3207145bf31bea7af9288353000476504ec653c5c8e881f94eb56af7fda","first_seen":"2026-02-16T15:35:51.583402Z","last_seen":"2026-04-19T01:29:44.054989Z","times_seen":938,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.yahoo.com/beacon?tag=TCF2\u0026step=Layer1-View-Js\u0026brandDomain=www.yahoo.com\u0026brandBid=\u0026userType=nonreg\u0026sdk=false\u0026tos=nb-NO\u0026country=NO\u0026x=\u0026sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b","fqdn":"consent.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"54.171.11.154","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b","date":"2026-04-18T23:31:05.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"consent.oath.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:DF:E3:70:17:4F:4D:8F:E0:46:FB:3E:FF:51:4E:E8:3A:5E:11:ED","sha256":"6A:47:9F:DD:87:66:2F:2E:A9:FD:C4:A2:59:88:DD:6F:BB:3E:FE:29:8B:63:28:AB:36:23:0D:B3:43:FF:72:D5"}}},"request":{"raw":"POST /beacon?tag=TCF2\u0026step=Layer1-View-Js\u0026brandDomain=www.yahoo.com\u0026brandBid=\u0026userType=nonreg\u0026sdk=false\u0026tos=nb-NO\u0026country=NO\u0026x=\u0026sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b HTTP/1.1\r\nHost: consent.yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b\r\nOrigin: https://consent.yahoo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GUCS=AUzn4H1D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: guce\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nDate: Sat, 18 Apr 2026 23:31:05 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/oa/build/images/favicons/yahoo.png","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b","date":"2026-04-18T23:31:05.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:BC:09:95:C4:5C:7A:4B:D7:04:D5:32:ED:E6:C3:8F:70:A1:BD:D0","sha256":"A0:7E:9F:55:C0:4A:54:10:28:8C:65:D3:F7:C2:58:8B:57:28:07:E1:40:41:5C:BA:91:B1:7B:87:56:63:96:A7"}}},"request":{"raw":"GET /oa/build/images/favicons/yahoo.png HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: Dhzo6ThD//13f7wHrm+qNlkDorqp6RKRNmkknFWe1X9P8iufBatqL499NevRVLmBC6M9rYJgqWMUANnasTnb7qdmU3YvzT7S\r\nx-amz-request-id: DTGA2HYKZ0YVDB9E\r\ndate: Fri, 10 Apr 2026 18:18:05 GMT\r\nlast-modified: Wed, 08 Apr 2026 14:17:35 GMT\r\netag: \"b6814ae5582d7953821acbd76e977bb4\"\r\ncache-control: max-age=31536000; immutable\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 1406\r\nserver: ATS\r\nvary: Origin\r\nage: 709982\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nats-carp-promotion: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":1406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel","md5":"b6814ae5582d7953821acbd76e977bb4","sha1":"75a33fc706c2c6ba233e76c17337e466949f403c","sha256":"4a491acd00880c407a2b749619003716c87e9c25ac344e5934c13e8f9aa0e8b3","sha512":"958268f22e72875b97c42d8927e6a1d6168c94fe2184de906029688a9d63038301df2e3de57e571a3d0ecc7ad41178401823e5c54576936d37c84c7a3ed8ef6b","ssdeep":"","tlshash":"a12128007064454fe1cd32f40f3b53e883c9d188d5b1b6cd8350f402df881392701041","first_seen":"2023-04-12T08:46:05Z","last_seen":"2026-04-19T01:29:44.047816Z","times_seen":8807,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guce.yahoo.com/consent?brandType=nonEu\u0026gcrumb=TOfgfUM\u0026done=https%3A%2F%2Fwww.yahoo.com%2F","fqdn":"guce.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"54.171.11.154","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T23:31:04.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"guce.oath.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FA:30:53:66:8B:D5:9B:6D:30:F3:A2:DD:90:C3:92:F3:58:8A:C8:7B","sha256":"C1:D4:A4:1A:24:91:32:BB:A4:61:D9:F2:D1:7D:2C:A8:5C:83:3C:5E:1F:9B:B2:24:6D:AB:8B:7D:9E:D2:E2:A9"}}},"request":{"raw":"GET /consent?brandType=nonEu\u0026gcrumb=TOfgfUM\u0026done=https%3A%2F%2Fwww.yahoo.com%2F HTTP/1.1\r\nHost: guce.yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GUCS=AUzn4H1D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nConnection: keep-alive\r\nServer: guce\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nLocation: https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b\r\nContent-Length: 0\r\nDate: Sat, 18 Apr 2026 23:31:04 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96015,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":502,"timings":{"blocked":220,"dns":111,"connect":33,"send":0,"wait":61,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/oa/build/images/help-circle-solid-black_f68609a66d5b78e7.svg","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_b21b7b22-691f-4311-b587-0ca6c529f56b","date":"2026-04-18T23:31:05.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:BC:09:95:C4:5C:7A:4B:D7:04:D5:32:ED:E6:C3:8F:70:A1:BD:D0","sha256":"A0:7E:9F:55:C0:4A:54:10:28:8C:65:D3:F7:C2:58:8B:57:28:07:E1:40:41:5C:BA:91:B1:7B:87:56:63:96:A7"}}},"request":{"raw":"GET /oa/build/images/help-circle-solid-black_f68609a66d5b78e7.svg HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://s.yimg.com/oa/build/css/site-ltr-281e5c2a.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: 1V5OooQefm+e/219ODFqDkM6b/rkUBrRDQ84eQQLPpcKvd486TCxt67CPokHEY0+dORQLFBWs/o=\r\nx-amz-request-id: QBC0VZ8VF0MS0KF3\r\ndate: Fri, 10 Apr 2026 18:18:11 GMT\r\nlast-modified: Wed, 08 Apr 2026 14:17:35 GMT\r\netag: \"db8ae5c3af867c288f5acd55550ff4c9\"\r\ncache-control: max-age=31536000; immutable\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\ncontent-length: 1312\r\nserver: ATS\r\nvary: Origin\r\nage: 709975\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nats-carp-promotion: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2715,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5fec39e72a4ed58c02f47c08dcf0ee9b","sha1":"fb77c65f3087b8cf25cdcda7c76fb22e2d698d2d","sha256":"9284f7fb38c8d02a4bd0e156987de0ececfb3b7aab4a0a004591fc784f1d01b5","sha512":"73967c0059ee99464a1702efc2d5b9d2973c5b0909eccc859bc33e30df9d0cb71d768bb3d79e827871516d006c6882d136de1caa1f4810ed00d02aa633bafad1","ssdeep":"","tlshash":"4f5153fd27f9d1f0aa09e7a1d8f6957b568b36783fa94dcc80804b50df060e99781c50","first_seen":"2023-05-07T18:08:38Z","last_seen":"2026-04-18T23:31:27.318768Z","times_seen":6807,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
