Report - oba.su/

Report Overview

Visited public
2023-11-19 15:01:26
Tags
URL
oba.su/
Finishing URL
consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_671bbb4e-f9f3-4c03-b8e4-b29e93c893a0
IP / ASN
188.114.97.1
#13335 CLOUDFLARENET
Title
Yahoo er et varemerke fra Yahoo-familien

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
consent.yahoo.com	31016	1995-01-18	2019-02-20 13:07:06	2023-11-19 05:52:23	1.8 kB	12 kB	34.253.69.172
s.yimg.com	375	1997-05-14	2012-05-21 00:45:00	2023-11-19 05:12:52	3.3 kB	139 kB	87.248.119.252
oba.su	unknown	2017-07-08	2012-09-29 22:31:17	2023-11-18 22:01:06	991 B	95 kB	188.114.96.1
www.yahoo.com	1299	1995-01-18	2012-05-21 00:42:45	2023-11-19 05:52:23	470 B	613 B	87.248.119.252
guce.yahoo.com	2064	1995-01-18	2018-03-16 22:40:34	2023-11-19 05:52:23	568 B	293 B	52.17.165.120

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-11-19 15:01:11	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2023-11-19 15:01:11	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_671bbb4e-f9f3-4c03-b8e4-b29e93c893a0	ScriptElement	139 B	2023-03-07	2024-08-21
Pretty URL consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_671bbb4e-f9f3-4c03-b8e4-b29e93c893a0 IP 34.253.69.172 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:07 Last Seen2024-08-21 09:31 Times Seen80 Hash 728e3d97cb01d25c885cdc1c9effbd60 fd7d81fe85579f665746ec75a01c9fb773a148c9 ef5ca120bd456abf0905c912d061d1ec55f2d12eef69ad00e039840b2155cfc5 Loading...

	s.yimg.com/oa/build/js/site-b190f45c.js	ScriptElement	81 kB	2023-11-18	2023-12-14
Pretty URL s.yimg.com/oa/build/js/site-b190f45c.js IP 87.248.119.252 ASN #203220 Yahoo! UK Services Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-18 04:05 Last Seen2023-12-14 01:35 Times Seen83 Hash cf86b65e0db53635f53d606b8a5ea24f b190f45c16364723630739f90db110a0e32e4f80 6f803b249537a1be823471ed87eb6b603d5a2c3995ccc1b184ee157487c48984 Loading...

HTTP Transactions (14)

	URL	IP	Response	Size
	www.yahoo.com/	87.248.119.252	307 Temporary Redirect	0 B
URL User Request GET HTTP/2 www.yahoo.com/ IP 87.248.119.252:443 ASN #203220 Yahoo! UK Services Limited Certificate IssuerDigiCert Inc Subject.api.fantasysports.yahoo.com Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6 ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET / HTTP/1.1 Host: www.yahoo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 307 Temporary Redirect date: Sun, 19 Nov 2023 15:01:10 GMT strict-transport-security: max-age=31536000 server: ATS cache-control: no-store content-type: text/html; charset=utf-8 content-language: en expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" x-xss-protection: 1; mode=block x-content-type-options: nosniff location: https://guce.yahoo.com/consent?brandType=nonEu&gcrumb=TDKBLz4&done=https%3A%2F%2Fwww.yahoo.com%2F set-cookie: GUCS=AUwygS8-; Max-Age=1800; Domain=.yahoo.com; Path=/; Secure content-length: 0 X-Firefox-Spdy: h2

	guce.yahoo.com/consent?brandType=nonEu&gcrumb=TDKBLz4&done=https%3A%2F%2Fwww.yahoo.com%2F	52.17.165.120	302 Found	0 B
URL User Request GET HTTP/1.1 guce.yahoo.com/consent?brandType=nonEu&gcrumb=TDKBLz4&done=https%3A%2F%2Fwww.yahoo.com%2F IP 52.17.165.120:443 ASN #16509 AMAZON-02 Certificate IssuerDigiCert Inc Subjectguce.oath.com FingerprintD8:B8:A0:70:35:CD:91:E0:95:C5:2F:51:7E:0A:E4:2D:84:C5:D2:C8 ValiditySun, 13 Aug 2023 00:00:00 GMT - Wed, 07 Feb 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /consent?brandType=nonEu&gcrumb=TDKBLz4&done=https%3A%2F%2Fwww.yahoo.com%2F HTTP/1.1 Host: guce.yahoo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: GUCS=AUwygS8- Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 302 Found Connection: keep-alive Server: guce Strict-Transport-Security: max-age=31536000; includeSubDomains Location: https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_671bbb4e-f9f3-4c03-b8e4-b29e93c893a0 Content-Length: 0 Date: Sun, 19 Nov 2023 15:01:10 GMT`

	consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_671bbb4e-f9f3-4c03-b8e4-b29e93c893a0	34.253.69.172	200 OK	9.6 kB
URL User Request GET HTTP/1.1 consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_671bbb4e-f9f3-4c03-b8e4-b29e93c893a0 IP 34.253.69.172:443 ASN #16509 AMAZON-02 Certificate IssuerDigiCert Inc Subjectconsent.oath.com FingerprintF7:25:FF:BE:04:2A:98:23:EF:35:CA:33:85:16:A6:FE:C7:F5:69:DD ValiditySun, 13 Aug 2023 00:00:00 GMT - Wed, 07 Feb 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (20354) Size 9.6 kB (9644 bytes) Hash 4ec2cee3d70e2dd2d087a86fae49d594 a081e7f725797dfced98a9be63fe78244bebe07b 9bc6541bbe1dc413c388bd781778739fce19aa4b2e13e95c4387380b714482be HTTP Headers GET /v2/collectConsent?sessionId=3_cc-session_671bbb4e-f9f3-4c03-b8e4-b29e93c893a0 HTTP/1.1 Host: consent.yahoo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: GUCS=AUwygS8- Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Content-Encoding: gzip Expires: 0 Cache-Control: no-cache, no-store, must-revalidate Content-Security-Policy-Report-Only: default-src 'none'; block-all-mixed-content; connect-src 'self'; frame-ancestors 'none'; img-src 'self' https://s.yimg.com; media-src 'none'; script-src 'self' 'nonce-OlUXrGVSLmYejOiwKxhlp3bbpQ33ZlMs' https://s.yimg.com; style-src 'self' 'nonce-OlUXrGVSLmYejOiwKxhlp3bbpQ33ZlMs' https://s.yimg.com; font-src 'self'; object-src 'none'; frame-src 'none'; report-uri https://csp.yahoo.com/beacon/csp?src=guce Server: guce X-XSS-Protection: 1; mode=block Pragma: no-cache X-Frame-Options: DENY Referrer-Policy: strict-origin-when-cross-origin Date: Sun, 19 Nov 2023 15:01:11 GMT Connection: keep-alive Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff Content-Type: text/html;charset=UTF-8 Content-Length: 9644

	s.yimg.com/oa/build/js/site-b190f45c.js	87.248.119.252	200 OK	16 kB
URL GET HTTP/2 s.yimg.com/oa/build/js/site-b190f45c.js IP 87.248.119.252:443 ASN #203220 Yahoo! UK Services Limited Requested by https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_671bbb4e-f9f3-4c03-b8e4-b29e93c893a0 Certificate IssuerDigiCert Inc Subject.api.fantasysports.yahoo.com Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6 ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT File type ASCII text, with very long lines (497) Size 16 kB (15503 bytes) Hash cf86b65e0db53635f53d606b8a5ea24f b190f45c16364723630739f90db110a0e32e4f80 6f803b249537a1be823471ed87eb6b603d5a2c3995ccc1b184ee157487c48984 HTTP Headers `GET /oa/build/js/site-b190f45c.js HTTP/1.1 Host: s.yimg.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://consent.yahoo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK x-amz-id-2: mLkahwIxUY1F7+gXbS3IaeW/FUU5CGsEU8y64d2yDoWdAjZ/gSdn1SlxyYqYF8xMQES0U2dD+sg= x-amz-request-id: 7ZY2JE67M6TP42SA date: Fri, 17 Nov 2023 22:56:00 GMT last-modified: Fri, 17 Nov 2023 22:42:12 GMT etag: "abd11912d8cfbd0c94128b168d1db8ab" x-amz-server-side-encryption: AES256 cache-control: max-age=31536000; immutable content-encoding: gzip accept-ranges: bytes content-type: application/javascript server: ATS content-length: 15503 referrer-policy: no-referrer-when-downgrade vary: Origin age: 144313 strict-transport-security: max-age=31536000 expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" x-xss-protection: 1; mode=block x-content-type-options: nosniff X-Firefox-Spdy: h2

	s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage.png	87.248.119.252	200 OK	760 B
URL GET HTTP/2 s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage.png IP 87.248.119.252:443 ASN #203220 Yahoo! UK Services Limited Requested by https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_671bbb4e-f9f3-4c03-b8e4-b29e93c893a0 Certificate IssuerDigiCert Inc Subject.api.fantasysports.yahoo.com Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6 ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT File type PNG image data, 120 x 36, 8-bit colormap, non-interlaced\012- data Size 760 B (760 bytes) Hash 7e72897bf7bdaecf5fec47f028de6aac a6d4f7b2b57a751941cc56e3cffbfde4de633576 8a781f94157287ada91708b4baf12712cedf808ce49c58c194fc9873f4fa7a30 HTTP Headers `GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage.png HTTP/1.1 Host: s.yimg.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://consent.yahoo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK x-amz-id-2: Wl+pTzA/6msdNErFkjQvGK+74DCJt63Z8RkaxJuyX/jihiY3Cqx61mIs6pubhYRzoy/VG6valvQ= x-amz-request-id: JGV7JNHTXS5QZSNP date: Sun, 19 Nov 2023 14:52:33 GMT last-modified: Sat, 18 Nov 2023 21:31:42 GMT etag: "7e72897bf7bdaecf5fec47f028de6aac" x-amz-server-side-encryption: AES256 cache-control: public,max-age=86400 expires: Mon, 20 Nov 2023 00:00:00 GMT accept-ranges: bytes content-type: image/png server: ATS content-length: 760 referrer-policy: no-referrer-when-downgrade vary: Origin age: 520 strict-transport-security: max-age=31536000 expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" x-xss-protection: 1; mode=block x-content-type-options: nosniff X-Firefox-Spdy: h2

	s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage.png	87.248.119.252	200 OK	810 B
URL GET HTTP/2 s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage.png IP 87.248.119.252:443 ASN #203220 Yahoo! UK Services Limited Requested by https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_671bbb4e-f9f3-4c03-b8e4-b29e93c893a0 Certificate IssuerDigiCert Inc Subject.api.fantasysports.yahoo.com Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6 ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT File type PNG image data, 120 x 36, 8-bit colormap, non-interlaced\012- data Size 810 B (810 bytes) Hash 119157c5c80d9db38f0da8098a35b53a 6c65f9bdaf6aad4fdde6c1bde1e509a6f056058b 1b119e32e848339740c549d02aa62d5fd21451d5ce468225922faae86555a68d HTTP Headers `GET /rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage.png HTTP/1.1 Host: s.yimg.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://consent.yahoo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK x-amz-id-2: uFErd/BduxHh2l+eW0KPs13AfXRRl/c+9vbMEkvrTHhSO7eeo+Zr5pktwFW8mFCb+PWHRq9ctSw= x-amz-request-id: JGV1VDXKCQ9RXX5A date: Sun, 19 Nov 2023 14:52:33 GMT last-modified: Sat, 18 Nov 2023 21:31:42 GMT etag: "119157c5c80d9db38f0da8098a35b53a" x-amz-server-side-encryption: AES256 cache-control: public,max-age=86400 expires: Mon, 20 Nov 2023 00:00:00 GMT accept-ranges: bytes content-type: image/png server: ATS content-length: 810 referrer-policy: no-referrer-when-downgrade vary: Origin age: 520 strict-transport-security: max-age=31536000 expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" x-xss-protection: 1; mode=block x-content-type-options: nosniff X-Firefox-Spdy: h2

	s.yimg.com/oa/build/css/site-ltr-14bbe5ec.css	87.248.119.252	200 OK	35 kB
URL GET HTTP/2 s.yimg.com/oa/build/css/site-ltr-14bbe5ec.css IP 87.248.119.252:443 ASN #203220 Yahoo! UK Services Limited Requested by https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_671bbb4e-f9f3-4c03-b8e4-b29e93c893a0 Certificate IssuerDigiCert Inc Subject.api.fantasysports.yahoo.com Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6 ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT File type ASCII text Size 35 kB (34663 bytes) Hash d086282a14b614be43e9cc3399528242 14bbe5ec3756552594cd1985d1c1c754e013928d ebfc184560c5b526914bf897dd549e19c6e82adb9f3541af2d1b1ed9b8814f2c HTTP Headers `GET /oa/build/css/site-ltr-14bbe5ec.css HTTP/1.1 Host: s.yimg.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://consent.yahoo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK x-amz-id-2: 3uVkSP+G2HNFOChpbnFLmyNWN/TrTwHW+kOvlrxxwlaOOcYVfZG/8KrsMcaEpGB5df1D8e3h3Ng= x-amz-request-id: HRX8RXWJQZKA44K1 date: Fri, 17 Nov 2023 11:32:49 GMT last-modified: Fri, 17 Nov 2023 11:21:29 GMT etag: "feb03817680117efad2f0d6e7ba048ef" x-amz-server-side-encryption: AES256 cache-control: max-age=31536000; immutable content-encoding: gzip accept-ranges: bytes content-type: text/css server: ATS content-length: 34663 referrer-policy: no-referrer-when-downgrade vary: Origin age: 185303 strict-transport-security: max-age=31536000 expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" x-xss-protection: 1; mode=block x-content-type-options: nosniff X-Firefox-Spdy: h2

	consent.yahoo.com/beacon?tag=TCF2&step=Layer1-View&brandDomain=www.yahoo.com&brandBid=&userType=nonreg&sdk=false&tos=nb-NO&country=NO&sessionId=3_cc-session_671bbb4e-f9f3-4c03-b8e4-b29e93c893a0	34.253.69.172	204 No Content	0 B
URL GET HTTP/1.1 consent.yahoo.com/beacon?tag=TCF2&step=Layer1-View&brandDomain=www.yahoo.com&brandBid=&userType=nonreg&sdk=false&tos=nb-NO&country=NO&sessionId=3_cc-session_671bbb4e-f9f3-4c03-b8e4-b29e93c893a0 IP 34.253.69.172:443 ASN #16509 AMAZON-02 Requested by https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_671bbb4e-f9f3-4c03-b8e4-b29e93c893a0 Certificate IssuerDigiCert Inc Subjectconsent.oath.com FingerprintF7:25:FF:BE:04:2A:98:23:EF:35:CA:33:85:16:A6:FE:C7:F5:69:DD ValiditySun, 13 Aug 2023 00:00:00 GMT - Wed, 07 Feb 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /beacon?tag=TCF2&step=Layer1-View&brandDomain=www.yahoo.com&brandBid=&userType=nonreg&sdk=false&tos=nb-NO&country=NO&sessionId=3_cc-session_671bbb4e-f9f3-4c03-b8e4-b29e93c893a0 HTTP/1.1 Host: consent.yahoo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_671bbb4e-f9f3-4c03-b8e4-b29e93c893a0 DNT: 1 Connection: keep-alive Cookie: GUCS=AUwygS8- Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 204 No Content Server: guce Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Sun, 19 Nov 2023 15:01:12 GMT`

	s.yimg.com/oa/build/images/en-GB-home_f0badd867efa6720.jpeg	87.248.119.252	200 OK	79 kB
URL GET HTTP/2 s.yimg.com/oa/build/images/en-GB-home_f0badd867efa6720.jpeg IP 87.248.119.252:443 ASN #203220 Yahoo! UK Services Limited Requested by https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_671bbb4e-f9f3-4c03-b8e4-b29e93c893a0 Certificate IssuerDigiCert Inc Subject.api.fantasysports.yahoo.com Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6 ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1546, components 3\012- data Size 79 kB (79439 bytes) Hash 9c394eca0dfc6cbf2420b6c3c07d4970 378092debaa0e79af573265a7d0ce2db3ed38a3b c2b819e2ae41bd6a05129d0b6c38941240576b2236386789ffad3656b186ef29 HTTP Headers `GET /oa/build/images/en-GB-home_f0badd867efa6720.jpeg HTTP/1.1 Host: s.yimg.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://s.yimg.com/oa/build/css/site-ltr-14bbe5ec.css DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK x-amz-id-2: Pt4G2odQTQNr1q2dwh9JYRkb/4PUAqBw7A0pRt8Pp2PhivMnvXiZwpcq+RoO38+TxusIZ791qPo= x-amz-request-id: 0PBRDFJ75Q9V9DG2 date: Wed, 08 Nov 2023 22:14:38 GMT last-modified: Fri, 27 Oct 2023 02:26:58 GMT etag: "9c394eca0dfc6cbf2420b6c3c07d4970" x-amz-server-side-encryption: AES256 cache-control: max-age=31536000; immutable accept-ranges: bytes content-type: image/jpeg server: ATS content-length: 79439 referrer-policy: no-referrer-when-downgrade vary: Origin age: 924396 strict-transport-security: max-age=31536000 expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" x-xss-protection: 1; mode=block x-content-type-options: nosniff X-Firefox-Spdy: h2

	s.yimg.com/oa/build/images/help-circle-solid-black_f68609a66d5b78e7.svg	87.248.119.252	200 OK	1.3 kB
URL GET HTTP/2 s.yimg.com/oa/build/images/help-circle-solid-black_f68609a66d5b78e7.svg IP 87.248.119.252:443 ASN #203220 Yahoo! UK Services Limited Requested by https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_671bbb4e-f9f3-4c03-b8e4-b29e93c893a0 Certificate IssuerDigiCert Inc Subject.api.fantasysports.yahoo.com Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6 ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2469) Size 1.3 kB (1312 bytes) Hash 5fec39e72a4ed58c02f47c08dcf0ee9b fb77c65f3087b8cf25cdcda7c76fb22e2d698d2d 9284f7fb38c8d02a4bd0e156987de0ececfb3b7aab4a0a004591fc784f1d01b5 HTTP Headers `GET /oa/build/images/help-circle-solid-black_f68609a66d5b78e7.svg HTTP/1.1 Host: s.yimg.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://s.yimg.com/oa/build/css/site-ltr-14bbe5ec.css DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK x-amz-id-2: hVjIsY93USg5tzYGdFemPDaku3kGuoCXqwx7LoxL4aSWJ2+al2/stvGepH1Ud3Lh+k0HLtGut5Y= x-amz-request-id: XNW3FDG51MB7T2YT date: Fri, 03 Nov 2023 10:01:36 GMT last-modified: Fri, 27 Oct 2023 02:26:58 GMT etag: "db8ae5c3af867c288f5acd55550ff4c9" x-amz-server-side-encryption: AES256 cache-control: max-age=31536000; immutable content-encoding: gzip accept-ranges: bytes content-type: image/svg+xml server: ATS content-length: 1312 referrer-policy: no-referrer-when-downgrade vary: Origin age: 1400383 strict-transport-security: max-age=31536000 expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" x-xss-protection: 1; mode=block x-content-type-options: nosniff X-Firefox-Spdy: h2

	consent.yahoo.com/static/images/close.svg	34.253.69.172	200 OK	703 B
URL GET HTTP/1.1 consent.yahoo.com/static/images/close.svg IP 34.253.69.172:443 ASN #16509 AMAZON-02 Requested by https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_671bbb4e-f9f3-4c03-b8e4-b29e93c893a0 Certificate IssuerDigiCert Inc Subjectconsent.oath.com FingerprintF7:25:FF:BE:04:2A:98:23:EF:35:CA:33:85:16:A6:FE:C7:F5:69:DD ValiditySun, 13 Aug 2023 00:00:00 GMT - Wed, 07 Feb 2024 23:59:59 GMT File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (854) Size 703 B (703 bytes) Hash 04fdad3c9b32cf024d3494c6e0b1f691 e7c0aabd33e695415e7a8c7afea4b94dca273f06 8f0baedf119a144b8b4fe597eb02a91fc47d89284aa6cdcc12097cb109598796 HTTP Headers GET /static/images/close.svg HTTP/1.1 Host: consent.yahoo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_671bbb4e-f9f3-4c03-b8e4-b29e93c893a0 DNT: 1 Connection: keep-alive Cookie: GUCS=AUwygS8- Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Content-Encoding: gzip Server: guce Accept-Ranges: bytes Date: Sun, 19 Nov 2023 15:01:12 GMT Connection: keep-alive Last-Modified: Fri, 17 Nov 2023 21:41:41 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 703 Content-Type: image/svg+xml`

	s.yimg.com/oa/build/images/favicons/yahoo.png	87.248.119.252	200 OK	1.4 kB
URL GET HTTP/2 s.yimg.com/oa/build/images/favicons/yahoo.png IP 87.248.119.252:443 ASN #203220 Yahoo! UK Services Limited Requested by https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_671bbb4e-f9f3-4c03-b8e4-b29e93c893a0 Certificate IssuerDigiCert Inc Subject.api.fantasysports.yahoo.com Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6 ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT File type MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel\012- data Size 1.4 kB (1406 bytes) Hash b6814ae5582d7953821acbd76e977bb4 75a33fc706c2c6ba233e76c17337e466949f403c 4a491acd00880c407a2b749619003716c87e9c25ac344e5934c13e8f9aa0e8b3 HTTP Headers `GET /oa/build/images/favicons/yahoo.png HTTP/1.1 Host: s.yimg.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://consent.yahoo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK x-amz-id-2: 2nveDLvbO1OEYTGugsKvBQHKhepPNsPFG4DnrKmwF1yGMLvp/SHAeYThbe7CZvvX+ikxaaHESoc= x-amz-request-id: S0RC0FX87GT4PWQK date: Fri, 03 Nov 2023 10:00:48 GMT last-modified: Fri, 27 Oct 2023 02:26:58 GMT etag: "b6814ae5582d7953821acbd76e977bb4" x-amz-server-side-encryption: AES256 cache-control: max-age=31536000; immutable accept-ranges: bytes content-type: image/png server: ATS content-length: 1406 referrer-policy: no-referrer-when-downgrade vary: Origin age: 1400430 strict-transport-security: max-age=31536000 expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" x-xss-protection: 1; mode=block x-content-type-options: nosniff X-Firefox-Spdy: h2

	oba.su/	188.114.96.1	302 Found	46 kB
URL User Request GET HTTP/2 oba.su/ IP 188.114.96.1:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services LLC Subjectoba.su FingerprintF9:35:C2:80:F2:9F:5A:95:2D:B4:C2:4D:25:A6:EE:E4:38:4E:50:84 ValiditySat, 21 Oct 2023 19:45:22 GMT - Fri, 19 Jan 2024 19:45:21 GMT File type Size 46 kB (46497 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET / HTTP/1.1 Host: oba.su User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 302 Found date: Sun, 19 Nov 2023 15:01:09 GMT content-type: text/html; charset=utf-8 location: https://oba.su/back.html?traceID=13208746 x-powered-by: PHP/8.1.24 x-frame-options: DENY set-cookie: visit=1; expires=Sun, 19-Nov-2023 20:59:59 GMT; Max-Age=21530; HttpOnly traceID=yYgcDOkI; expires=Mon, 18-Nov-2024 15:01:09 GMT; Max-Age=31536000; HttpOnly clickstatus: 3 cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f095MBg9wU2G7CrM8wgw4WjwBCZHQHgIZky4m5sKVt6Yy2%2Fw%2FU%2BRJbgeUCWcHtoH41FPn7gXxOs0GIW%2BNqFM1Xw2m8MviP7nMpXFRKxzMbjOt3U2MuCaVRw%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 828953af9921712d-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	oba.su/back.html?traceID=13208746	188.114.96.1	302 Found	46 kB
URL User Request GET HTTP/3 oba.su/back.html?traceID=13208746 IP 188.114.96.1:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services LLC Subjectoba.su FingerprintF9:35:C2:80:F2:9F:5A:95:2D:B4:C2:4D:25:A6:EE:E4:38:4E:50:84 ValiditySat, 21 Oct 2023 19:45:22 GMT - Fri, 19 Jan 2024 19:45:21 GMT File type Size 46 kB (46497 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /back.html?traceID=13208746 HTTP/1.1 Host: oba.su User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: visit=1; traceID=yYgcDOkI Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/3 302 Found date: Sun, 19 Nov 2023 15:01:10 GMT content-type: text/html; charset=utf-8 location: https://www.yahoo.com x-powered-by: PHP/8.1.24 x-frame-options: DENY set-cookie: visit=2; expires=Sun, 19-Nov-2023 20:59:59 GMT; Max-Age=21529; HttpOnly traceID=DC8DyAaK; expires=Mon, 18-Nov-2024 15:01:10 GMT; Max-Age=31536000; HttpOnly clickstatus: 1 cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1M2RQ0lyABil0oMIRe83jY07ZGGRm9MOd0LPvdDAh3QO7ryLke8XstY4ahhLlLwnaqN4GGOCTraUOSl3GyloUrhSQFTu3sNQPbSgEtMpJ6DU810QwJS0uR0%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 828953b1db33568e-OSL alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (14)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2