Report - newsletter73.s3.us-east-005.backblazeb2.com/AT&T+HOME+PAGE.html

Report Overview

Submitted URL
newsletter73.s3.us-east-005.backblazeb2.com/AT&T+HOME+PAGE.html
IP
149.137.137.254
ASN
#40401 BACKBLAZE
Submitted
2024-04-18 06:50:05
Access
public
Website Title
Yahoo
Final URL
newsletter73.s3.us-east-005.backblazeb2.com/AT&T+HOME+PAGE.html
Tags
yahoo phishing suspicious
urlquery detections
Phishing - Yahoo
Suspicious - Suspicious Javascript code

Detections

urlquery
7
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
newsletter73.s3.us-east-005.backblazeb2.com	unknown	2016-07-13	2024-04-18	2024-04-18	517 B	149 kB	149.137.137.254
s.yimg.com	375	1997-05-14	2012-05-21	2024-04-17	3.1 kB	107 kB	87.248.119.251
dl.dropboxusercontent.com	12831	2012-01-13	2019-02-11	2019-03-28	476 B	529 kB	162.125.70.15

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	newsletter73.s3.us-east-005.backblazeb2.com/AT&T+HOME+PAGE.html	148 kB	2024-04-18	2024-04-18
Pretty URL newsletter73.s3.us-east-005.backblazeb2.com/AT&T+HOME+PAGE.html IP 149.137.137.254 ASN #40401 BACKBLAZE Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-18 08:50:06 Last Seen2024-04-18 08:50:06 Times Seen1 Hash c0b3f3f05334cfceeb5942f62b4c39db 43abe9f2f6cf7203e46d288ade66dfedada7b36e 7f5853d15241dbc6761cf3d5d0750779759a62c475b3996b6d8fe7659426e7d5 Loading...

	unknown	698 B	2023-08-31	2024-04-18
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-31 03:38:10 Last Seen2024-04-18 08:50:06 Times Seen2 Hash 4cf9f3c98ff75d41d9e46977951bd282 5807c9ce5c75e42a7f6a6b5874d3f04f65f14b92 82b1bfea2e63943246b55c416c2efba8f80f0ce618cbec62f680ddc3be0b3f81 Loading...

	unknown	1.6 kB	2024-04-18	2024-04-18
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 08:50:06 Last Seen2024-04-18 08:50:06 Times Seen1 Hash 5f0a641895b46229fc1fcdb134c37a13 694e4421506952e04b63615790e8d08236d8a1fb 37a59d99b249f40e570648f6da5f28c4ae1c230dc475a64716506631dfe2b812 Loading...

		Size	First Seen	Last Seen
	#1 Write - 6a923f3ddc94f8206f1720e159c435b7	50 kB	2024-04-18	2024-04-18
Pretty Observations First Seen2024-04-18 08:50:07 Last Seen2024-04-18 08:50:07 Times Seen1 Hash 6a923f3ddc94f8206f1720e159c435b7 c57e36f77ae14ec54687441b3b70613f6562fb4b ad01915afa7b34c85ecfc8bd2dd0409eb95ad2709e08e1370984499371168bde Loading...

HTTP Transactions (8)

URL IP Response Size

newsletter73.s3.us-east-005.backblazeb2.com/AT&T+HOME+PAGE.html

149.137.137.254

200

148 kB

URL User Request GET HTTP/1.1
newsletter73.s3.us-east-005.backblazeb2.com/AT&T+HOME+PAGE.html
IP
149.137.137.254:443
ASN
#40401 BACKBLAZE

Certificate
IssuerLet's Encrypt
Subjectbackblazeb2.com
FingerprintC3:1E:E9:5B:82:2B:2D:13:7D:ED:23:05:C4:07:9A:19:B1:71:BD:D1
ValidityTue, 09 Apr 2024 14:58:28 GMT - Mon, 08 Jul 2024 14:58:27 GMT

File type
HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Size
148 kB (148546 bytes)
Hash
2c890245477fc1f48c23b415f36df4a0
338ddeee8ca25d3650196675e35bcad268336738
378e7329622b7786a072fa4409fffec373683704301d1278e93c3573808023bc

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Yahoo
urlquery	suspicious	Suspicious - Suspicious Javascript code

HTTP Headers

GET /AT&T+HOME+PAGE.html HTTP/1.1
Host: newsletter73.s3.us-east-005.backblazeb2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx
Date: Thu, 18 Apr 2024 06:49:40 GMT
Content-Type: text/html
Content-Length: 148546
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Wed, 17 Apr 2024 10:19:40 GMT
ETag: "2c890245477fc1f48c23b415f36df4a0"
x-amz-meta-src_last_modified_millis: 1713348840861
x-amz-request-id: 99ce01f1233684c7
x-amz-id-2: aM8ljIjTxZiFjSjgtM7ky/2EZNV9iqzPX
x-amz-version-id: 4_zd32c342f9c08e3b28ae50b13_f11987830d9cb7787_d20240417_m101940_c005_v0501014_t0009_u01713349180935
Strict-Transport-Security: max-age=63072000

s.yimg.com/wm/mbr/images/yahoo-apple-touch-v0.0.2.png

87.248.119.251

200 OK

13 kB

URL GET HTTP/2
s.yimg.com/wm/mbr/images/yahoo-apple-touch-v0.0.2.png
IP
87.248.119.251:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://newsletter73.s3.us-east-005.backblazeb2.com/AT&T+HOME+PAGE.html
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
PNG image data, 180 x 180, 8-bit/color RGB, interlaced
Size
13 kB (12635 bytes)
Hash
a9d2dde886cd61f73365a84878c78475
6f1f1f7414116c4b01f04ee0a07b41202c2da539
b168c836ccef9cf1cbf7b2440bc11d26667c4ae19613f1e7cf5e6cdc303c7de4

HTTP Headers

GET /wm/mbr/images/yahoo-apple-touch-v0.0.2.png HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newsletter73.s3.us-east-005.backblazeb2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: zsAhCkQ228yeBpXOFf8JvUrfDOdC3Ta4Vg6HZevY7rkrKg51UEvK7+PMlyZl19+jBbvq9qcymmdu6FmwfUjyB6r/667O84+C
x-amz-request-id: Z6BXS6H611MJYZC3
date: Fri, 12 Apr 2024 01:06:31 GMT
last-modified: Thu, 12 Sep 2019 21:58:38 GMT
etag: "a9d2dde886cd61f73365a84878c78475"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=315360000
accept-ranges: bytes
content-type: image/png
server: ATS
content-length: 12635
referrer-policy: no-referrer-when-downgrade
vary: Origin
age: 538992
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2

s.yimg.com/wm/mbr/images/checkbox-checked.svg

87.248.119.251

200 OK

659 B

URL GET HTTP/2
s.yimg.com/wm/mbr/images/checkbox-checked.svg
IP
87.248.119.251:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://newsletter73.s3.us-east-005.backblazeb2.com/AT&T+HOME+PAGE.html
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
659 B (659 bytes)
Hash
ac8c4fbeda6efad9549cb41b992a8b3a
46f532f081af894297bce53a7d212e2d253a60bf
11b4310df6e27428e7cf86f316abdc10148ac5cf3c8bbbd5b85c88b9f6290c59

HTTP Headers

GET /wm/mbr/images/checkbox-checked.svg HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dl.dropboxusercontent.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-amz-id-2: Pi466GH1nFWLXX1uEI3C5dzKodwyVsuBQd/NB1Qqyk0fby4dpFdqz9YLUvx3Qhbemk7CgO6ouV4=
x-amz-request-id: 4RV1PYAGQBT7QGBF
date: Mon, 01 Apr 2024 23:15:59 GMT
last-modified: Fri, 24 Apr 2020 17:13:52 GMT
etag: "ac8c4fbeda6efad9549cb41b992a8b3a-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=315360000
accept-ranges: bytes
content-type: image/svg+xml
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 1409624
content-encoding: gzip
content-length: 659
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2

s.yimg.com/wm/mbr/images/yahoo-favicon-img-v0.0.2.ico

87.248.119.251

200 OK

1.4 kB

URL GET HTTP/2
s.yimg.com/wm/mbr/images/yahoo-favicon-img-v0.0.2.ico
IP
87.248.119.251:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://newsletter73.s3.us-east-005.backblazeb2.com/AT&T+HOME+PAGE.html
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Size
1.4 kB (1406 bytes)
Hash
b6814ae5582d7953821acbd76e977bb4
75a33fc706c2c6ba233e76c17337e466949f403c
4a491acd00880c407a2b749619003716c87e9c25ac344e5934c13e8f9aa0e8b3

HTTP Headers

GET /wm/mbr/images/yahoo-favicon-img-v0.0.2.ico HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newsletter73.s3.us-east-005.backblazeb2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: bdVBZmX44W2LQIHWj7hUaQMMvn15rVHM+JxtriAM9oNyo2Cpl3pLGxV/4KBhtz4hYlgImRkmBj0=
x-amz-request-id: G3QZ6BSZHQM678FE
date: Wed, 17 Apr 2024 10:29:25 GMT
last-modified: Wed, 11 Sep 2019 18:01:04 GMT
etag: "b6814ae5582d7953821acbd76e977bb4"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=315360000
accept-ranges: bytes
content-type: image/vnd.microsoft.icon
server: ATS
content-length: 1406
referrer-policy: no-referrer-when-downgrade
vary: Origin
age: 73218
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2

s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2

87.248.119.251

200 OK

29 kB

URL GET HTTP/2
s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2
IP
87.248.119.251:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://newsletter73.s3.us-east-005.backblazeb2.com/AT&T+HOME+PAGE.html
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 29228, version 1.0
Size
29 kB (29228 bytes)
Hash
7c7c02dcee2bf1c2528db6092d4ad1fa
988a01f705c074261490625c70f94b2642413693
d5312dacbe6f248c6c4b60251d7acf77bc3bc891cd9b880dead36d9babb288c4

HTTP Headers

GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2 HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://newsletter73.s3.us-east-005.backblazeb2.com
DNT: 1
Connection: keep-alive
Referer: https://dl.dropboxusercontent.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-amz-id-2: aTpwAQhFIjgYrCYW/CwWRDjrto8fnwAW2zSn0edvtbhuLHo8w+ShGed2ZwiozI6dUidAGWkPmOY=
x-amz-request-id: GVYDD434DAZV0N2Z
date: Tue, 19 Mar 2024 06:36:28 GMT
last-modified: Thu, 19 Apr 2018 16:25:50 GMT
etag: "7c7c02dcee2bf1c2528db6092d4ad1fa"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public
x-amz-meta-created-date: Tue, 03 Oct 2017 06:22:52 GMT
x-amz-meta-mbst-etag: "YM:1:1bb49599-26ac-442e-b6b8-f4e40f067ea500055a9e855b6ecb"
x-amz-meta-x-ysws-mbst-vtime: 1507011772247755
expires: Sat, 05 Sep 2026 00:00:00 GMT
x-amz-meta-x-ysws-access: public
accept-ranges: bytes
content-type: font/woff2
server: ATS
content-length: 29228
referrer-policy: no-referrer-when-downgrade
age: 2592795
access-control-allow-origin: *
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: Origin
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2

s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2

87.248.119.251

200 OK

29 kB

URL GET HTTP/2
s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2
IP
87.248.119.251:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://newsletter73.s3.us-east-005.backblazeb2.com/AT&T+HOME+PAGE.html
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 29040, version 1.0
Size
29 kB (29040 bytes)
Hash
af9fdad7698452697b016850fff96423
710130c79bf56297f8abcc6d6c575172590133b0
b8989e0be6a0c3a8a407d8b69b7884eb5ebf401b7eee8b8b98c5eeec3ba497fa

HTTP Headers

GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2 HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://newsletter73.s3.us-east-005.backblazeb2.com
DNT: 1
Connection: keep-alive
Referer: https://dl.dropboxusercontent.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: bhyGX9w4QqIAGXjQ/JLHM18GmbasclszrNCNM/r+VECZN+tjA9nZvs2mURE5GfPdCwK0DRhAtzw=
x-amz-request-id: F3G2VKG4B11F1S8R
date: Wed, 17 Apr 2024 11:22:37 GMT
last-modified: Thu, 19 Apr 2018 17:33:29 GMT
etag: "af9fdad7698452697b016850fff96423"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public
x-amz-meta-created-date: Tue, 03 Oct 2017 06:22:51 GMT
x-amz-meta-mbst-etag: "YM:1:95620d49-21c2-4044-b803-58b70c8e419700055a9e854fb9f1"
x-amz-meta-x-ysws-mbst-vtime: 1507011771480561
expires: Sat, 05 Sep 2026 00:00:00 GMT
x-amz-meta-x-ysws-access: public
accept-ranges: bytes
content-type: font/woff2
server: ATS
content-length: 29040
referrer-policy: no-referrer-when-downgrade
age: 70026
access-control-allow-origin: *
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: Origin
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2

s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2

87.248.119.251

200 OK

29 kB

URL GET HTTP/2
s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2
IP
87.248.119.251:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://newsletter73.s3.us-east-005.backblazeb2.com/AT&T+HOME+PAGE.html
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 28860, version 1.0
Size
29 kB (28860 bytes)
Hash
a99b283070afc519f4816e4300c515d2
65b78d03d56de125060e61069debfc47e38fb3df
fc0e2df417e7959509df87df6b4de2eb1479c8718bc2d8ab0bc70d3753c68560

HTTP Headers

GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2 HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://newsletter73.s3.us-east-005.backblazeb2.com
DNT: 1
Connection: keep-alive
Referer: https://dl.dropboxusercontent.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: eUqfV3BH2LZbpPpB8piJwTHXInj/5UaUEsDoikmXfIvfPKJpr1yovkLmk6kQ7v5mdf72DepX34A=
x-amz-request-id: WJC6SQFMRJFY6HBH
date: Sun, 31 Mar 2024 10:42:46 GMT
last-modified: Thu, 19 Apr 2018 19:06:41 GMT
etag: "a99b283070afc519f4816e4300c515d2"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public
x-amz-meta-created-date: Tue, 03 Oct 2017 06:22:51 GMT
x-amz-meta-mbst-etag: "YM:1:cb5e4811-e042-455c-b2b2-f984d5f70e0200055a9e8550b736"
x-amz-meta-x-ysws-mbst-vtime: 1507011771545398
expires: Sat, 05 Sep 2026 00:00:00 GMT
x-amz-meta-x-ysws-access: public
accept-ranges: bytes
content-type: font/woff2
server: ATS
content-length: 28860
referrer-policy: no-referrer-when-downgrade
age: 1541217
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-origin: *
vary: Origin
ats-carp-promotion: 1
X-Firefox-Spdy: h2

dl.dropboxusercontent.com/s/yntjno1t8hokj3k/yahoo-main.css

162.125.70.15

200 OK

528 kB

URL GET HTTP/2
dl.dropboxusercontent.com/s/yntjno1t8hokj3k/yahoo-main.css
IP
162.125.70.15:443
ASN
#19679 DROPBOX

Requested by
https://newsletter73.s3.us-east-005.backblazeb2.com/AT&T+HOME+PAGE.html
Certificate
IssuerDigiCert Inc
Subject*.dl.dropboxusercontent.com
Fingerprint66:F4:AC:24:6B:45:2B:53:3A:0C:7A:96:51:BC:36:53:B5:E8:39:40
ValidityMon, 25 Mar 2024 00:00:00 GMT - Tue, 11 Mar 2025 23:59:59 GMT

File type
ASCII text, with very long lines (42867)
Size
528 kB (527821 bytes)
Hash
c7b6b4fcc664b465b286a378712e3eaf
7f60a2ddeedb282ab44ebe3daa8bb124ccb2a96e
cb5649b939e53e8fee962915504b16f52294e77ad3d44a54af854a96760d0dae

HTTP Headers

GET /s/yntjno1t8hokj3k/yahoo-main.css HTTP/1.1
Host: dl.dropboxusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newsletter73.s3.us-east-005.backblazeb2.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
accept-ranges: bytes
cache-control: max-age=60
content-disposition: inline; filename="yahoo-main.css"; filename*=UTF-8''yahoo-main.css
content-security-policy: report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-usercontent ; sandbox allow-forms allow-scripts allow-top-navigation allow-popups, form-action 'none' ; report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-noscript ; script-src 'none'
pragma: public
set-cookie: uc_session=Sb21948PvO4rOaot2tEk7qLMpPNuqL2BDcpmR1NMHwXvBDCLky8IEJgzwbZY8Yx1; Domain=dropboxusercontent.com; HttpOnly; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-server-response-time: 355
date: Thu, 18 Apr 2024 06:49:41 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 5b903de7316a49b8ad6d8c9969319003
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (8)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers