{"report_id":"3a009c79-4360-461c-9fc9-80d786cef16d","version":6,"status":"done","tags":[],"date":"2026-01-20T12:37:42Z","url":{"schema":"http","addr":"oidc.mail.aol.com","fqdn":"oidc.mail.aol.com","domain":"aol.com","tld":"com"},"ip":{"addr":"212.82.100.140","port":0,"asn":34010,"as":"Yahoo-UK Limited","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"https","addr":"oidc.mail.aol.com/","fqdn":"oidc.mail.aol.com","domain":"aol.com","tld":"com"},"title":"oidc.mail.aol.com/","dom":{"size":19516,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (19516), with no line terminators","md5":"2ac262fcc9352d4ed6d8f277edbca27d","sha1":"1d5e4bbad755cb3a733adaf4c4d1bb4dd346ed29","sha256":"6283668c68ec113e1c8de2dbe743893e51760cf33da07a6a661dd6fed76d463f","sha512":"db843043cb53b5214e7c73130371ea77fcc4138fc257f1b269928f0aef45cf90e7fa6afa3b131aa54207d164f2513fa288c900221db454626cbba04b28f24c0f","ssdeep":"96:H5rsD0r6pV+CZXUgpk5POtQwb/4P4lHFjE1rZlST5oSTDFlSTCOu:SDH9XJ4P4lHFjXPuO","tlshash":"299290e17dd28c39f54516c8f0b0da29a1d3f69bdce3d884edd402f827caa94750d2a9","dom_hash":"domhash7bd9e4cd5bcefa19983d03a85037b365","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"oidc.mail.aol.com","fqdn":"oidc.mail.aol.com","domain":"aol.com","tld":"com"},"ip":{"addr":"212.82.100.140","port":0,"asn":34010,"as":"Yahoo-UK Limited","country":"Ireland","country_code":"IE"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-24T12:37:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"oidc.mail.aol.com","ip":{"addr":"212.82.100.140","port":443,"asn":34010,"as":"Yahoo-UK Limited","country":"Ireland","country_code":"IE"},"domain_registered":"1995-06-22","domain_rank":346557,"first_seen":"2018-03-10T17:42:37Z","last_seen":"2025-11-23T16:52:22.871598Z","alert_count":0,"request_count":2,"received_data":1266,"sent_data":1278,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"oidc.mail.aol.com/","fqdn":"oidc.mail.aol.com","domain":"aol.com","tld":"com"},"ip":{"addr":"212.82.100.140","port":443,"asn":34010,"as":"Yahoo-UK Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-20T12:37:20.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oidc.oath.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 10 Oct 2025 00:00:00 GMT","end":"Wed, 01 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"59:34:5A:04:94:BB:65:5E:EF:3C:59:99:35:6F:D4:86:05:BC:CA:AE","sha256":"35:63:AB:C8:22:AF:B6:73:2D:03:E2:50:83:04:DD:3C:EC:4C:35:CB:59:3F:57:1D:2C:26:3D:A7:F6:FC:7D:90"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: oidc.mail.aol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 20 Jan 2026 12:37:20 GMT\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15552000\r\nserver: ATS\r\ncontent-type: application/json\r\ncontent-length: 86\r\nage: 0\r\nset-cookie: A1=d=AQABBAB3b2kCEOahP3lsbWCb8r3qz-59W28FEgABAQG6cGl4afmizSMAAAAAgA\u0026S=AQAAAss4yMMTDQjNGtHLQniAmA4; Expires=Wed, 20 Jan 2027 18:37:20 GMT; Max-Age=31557600; Domain=.aol.com; Path=/; SameSite=Lax; Secure; HttpOnly\nA3=d=AQABBAB3b2kCEOahP3lsbWCb8r3qz-59W28FEgABAQG6cGl4afmizSMAAAAAgA\u0026S=AQAAAss4yMMTDQjNGtHLQniAmA4; Expires=Wed, 20 Jan 2027 18:37:20 GMT; Max-Age=31557600; Domain=.aol.com; Path=/; SameSite=None; Secure; HttpOnly\nA1S=d=AQABBAB3b2kCEOahP3lsbWCb8r3qz-59W28FEgABAQG6cGl4afmizSMAAAAAgA\u0026S=AQAAAss4yMMTDQjNGtHLQniAmA4; Domain=.aol.com; Path=/; SameSite=Lax; Secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":86,"size_decoded":0,"mime_type":"application/vnd.mozilla.json.view","magic":"JSON text data","md5":"2e0f364cef7e93e58404283a5cde7fde","sha1":"d210883caad52ebe2a45bf8fa170a6311289fe7d","sha256":"36a9ac8eeedfdd40036f190d4dea1fad7c7d48db9512375d9c4ebca7b55d309c","sha512":"a33ab4d55a4200a51688728f4de4e57f82a15ef0c7f826098dc0d722139a361d5465b26e06db9f2e9056b20e04bc359e90462f85ac4510e5365ef752722f8eec","ssdeep":"","tlshash":"b8a0020d51db1f1d0741d0a53c9571b150c455d147957e558579d05991457ca4c117c8","first_seen":"2025-09-21T13:31:07.166284Z","last_seen":"2026-01-20T17:20:51.607517Z","times_seen":3,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":110,"dns":44,"connect":30,"send":0,"wait":55,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oidc.mail.aol.com/","fqdn":"oidc.mail.aol.com","domain":"aol.com","tld":"com"},"ip":{"addr":"212.82.100.140","port":443,"asn":34010,"as":"Yahoo-UK Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-20T12:37:21.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oidc.oath.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 10 Oct 2025 00:00:00 GMT","end":"Wed, 01 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"59:34:5A:04:94:BB:65:5E:EF:3C:59:99:35:6F:D4:86:05:BC:CA:AE","sha256":"35:63:AB:C8:22:AF:B6:73:2D:03:E2:50:83:04:DD:3C:EC:4C:35:CB:59:3F:57:1D:2C:26:3D:A7:F6:FC:7D:90"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: oidc.mail.aol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nCookie: A1=d=AQABBAB3b2kCEOahP3lsbWCb8r3qz-59W28FEgABAQG6cGl4afmizSMAAAAAgA\u0026S=AQAAAss4yMMTDQjNGtHLQniAmA4; A3=d=AQABBAB3b2kCEOahP3lsbWCb8r3qz-59W28FEgABAQG6cGl4afmizSMAAAAAgA\u0026S=AQAAAss4yMMTDQjNGtHLQniAmA4; A1S=d=AQABBAB3b2kCEOahP3lsbWCb8r3qz-59W28FEgABAQG6cGl4afmizSMAAAAAgA\u0026S=AQAAAss4yMMTDQjNGtHLQniAmA4\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 20 Jan 2026 12:37:21 GMT\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15552000\r\nserver: ATS\r\ncontent-type: application/json\r\ncontent-length: 86\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":86,"size_decoded":0,"mime_type":"application/vnd.mozilla.json.view","magic":"JSON text data","md5":"2e0f364cef7e93e58404283a5cde7fde","sha1":"d210883caad52ebe2a45bf8fa170a6311289fe7d","sha256":"36a9ac8eeedfdd40036f190d4dea1fad7c7d48db9512375d9c4ebca7b55d309c","sha512":"a33ab4d55a4200a51688728f4de4e57f82a15ef0c7f826098dc0d722139a361d5465b26e06db9f2e9056b20e04bc359e90462f85ac4510e5365ef752722f8eec","ssdeep":"","tlshash":"b8a0020d51db1f1d0741d0a53c9571b150c455d147957e558579d05991457ca4c117c8","first_seen":"2025-09-21T13:31:07.166284Z","last_seen":"2026-01-20T17:20:51.607517Z","times_seen":3,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
