{"report_id":"ec6225fb-723d-4f5e-a152-609c7a7331de","version":6,"status":"done","tags":[],"date":"2026-04-28T18:27:48Z","url":{"schema":"https","addr":"maib.icu","fqdn":"maib.icu","domain":"maib.icu","tld":"icu"},"ip":{"addr":"104.21.31.204","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960","fqdn":"consent.yahoo.com","domain":"yahoo.com","tld":"com"},"title":"Dine personvernvalg","dom":{"size":96102,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (38326)","md5":"26bab598578a7e4d90668345d9a147db","sha1":"e6c399d0279ba9f9ee398431dd71ff20731db698","sha256":"7a39127eff11ac45cb0eb999ac4378e1170164b8e1217f18541ac7c1546be7fe","sha512":"3b0f43c6feadd206581ca55ca27b064eaba4d2e06821a665223ffe38772aeb29d008525dbc84ebf20f4228ac4fa8e35df327f3d1035851fe04c50114d73e760c","ssdeep":"1536:cKJkVJHY0NWgFLJHY0NWgFsf7eMeneJeOp:LgFQgFsft","tlshash":"999395c5c5f8e3795e2b2d14da99731fa30fa604ff237658b02de498a3c6ae101e2d51","dom_hash":"domhashb4d6aeedd2aa0e94b1f9a6fc7f6c15a9","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"maib.icu","fqdn":"maib.icu","domain":"maib.icu","tld":"icu"},"ip":{"addr":"104.21.31.204","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T18:27:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T18:27:27Z","timestamp":1777400847,"ip_dst":{"addr":"172.67.179.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":33742,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-04-28T18:27:27.192911+0000\",\"flow_id\":1193683014632203,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":33742,\"dest_ip\":\"172.67.179.242\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"maib.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":2592,\"start\":\"2026-04-28T18:27:27.181003+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"udc.yahoo.com","ip":{"addr":"188.125.72.139","port":443,"asn":34010,"as":"Yahoo-UK Limited","country":"Ireland","country_code":"IE"},"domain_registered":"1995-01-18","domain_rank":20752,"first_seen":"2017-01-30T05:13:06Z","last_seen":"2026-04-23T09:02:30.911477Z","alert_count":0,"request_count":1,"received_data":594,"sent_data":689,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]},{"fqdn":"maib.icu","ip":{"addr":"172.67.179.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-25","domain_rank":0,"first_seen":"2026-04-28T18:27:49.24946Z","last_seen":"2026-04-28T18:27:49.24946Z","alert_count":0,"request_count":1,"received_data":96928,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"yahoo.com","ip":{"addr":"74.6.143.26","port":443,"asn":26101,"as":"YAHOO-BF1","country":"United States","country_code":"US"},"domain_registered":"1995-01-18","domain_rank":64,"first_seen":"2012-05-21T11:33:44Z","last_seen":"2026-04-21T18:44:36.08948Z","alert_count":0,"request_count":1,"received_data":96437,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.yahoo.com","ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"1995-01-18","domain_rank":1472,"first_seen":"2012-05-20T22:42:45Z","last_seen":"2026-04-23T12:38:17.985712Z","alert_count":0,"request_count":1,"received_data":97409,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]},{"fqdn":"guce.yahoo.com","ip":{"addr":"54.220.7.214","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"1995-01-18","domain_rank":23222,"first_seen":"2018-03-16T21:40:34Z","last_seen":"2026-04-25T04:34:52.84532Z","alert_count":0,"request_count":1,"received_data":96310,"sent_data":580,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"s.yimg.com","ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"1997-05-14","domain_rank":4553,"first_seen":"2012-05-20T22:45:00Z","last_seen":"2026-04-27T04:18:32.181022Z","alert_count":0,"request_count":8,"received_data":509920,"sent_data":3714,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]},{"fqdn":"consent.yahoo.com","ip":{"addr":"52.215.90.31","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"1995-01-18","domain_rank":12070,"first_seen":"2019-02-20T12:07:06Z","last_seen":"2026-04-24T12:05:16.963598Z","alert_count":0,"request_count":5,"received_data":99122,"sent_data":3256,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960","fqdn":"consent.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"52.215.90.31","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb35f66e60f5a88b6ad45db24cfd4a1e","sha1":"0d89c03ff758fffdbd48297c905430f46e05640d","sha256":"39aa0748ee518e97e5a33e72328fcf31efae53dc5eef2e84115861328634ca82","sha512":"b7c3251f2d2d24f492d6b612fe153afc2b3c81c1caccad7dff6312a71928b2c8310d8c197bcf1df9628ba0af92dc269771b22e4229853d3b06ef9e28b2a7d4b3","ssdeep":"","tlshash":"63c09b1c0561017505b31dd029d747c03b319442e0457025f5bcc746dfc1591cc31fd1","size":140,"data":"","first_seen":"2024-03-02T20:37:42Z","last_seen":"2026-06-07T05:02:29.156237Z","times_seen":6551,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960","fqdn":"consent.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"52.215.90.31","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce8910148f681d52b05edc8fc744b5d5","sha1":"172f26f8900a4e3bde1252ab00d2c8826ad2996f","sha256":"a1e6aeac162d2dcfc603b227c9327dc0da9df968837f8b18cba20bcc11c6e543","sha512":"2eb015e9fa328e5d6303d0a5fb5182d57d5a81048b9959715c554d5a32473bd38070e599bdd121aa5df9deea3200d4a754e42811895104ed359f576028a04088","ssdeep":"","tlshash":"e101683a8fd190c66a6581b1773f0800b8180c074e00f495bb9df5886f0c21f92f4dde","size":700,"data":"","first_seen":"2025-03-25T22:58:47.349459Z","last_seen":"2026-06-07T05:02:29.169835Z","times_seen":6050,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/ss/rapid-3.53.30.js","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"665798d28ecf9be7cbc434e75267920d","sha1":"55864f76f012bb11a354c6bacdcc7769a5ec6fa2","sha256":"7bc917ebee12bcd521ae88840228032579459c25a3ccf8953d8a2dbe5e085be9","sha512":"6191d7396f72b8e362b1ed6444f17c645a8f921495936713c90db6947b793a0178c6d0bb0e902786768c36b6ba254728eba6a740f935c22a9f9029f6d3cc8af8","ssdeep":"768:x8HRVYb/9XQj3AGnW2xvj3lOzTP8dADM7f2HuDslY9SQkpDN:+zYrRQj3XhRj3aEv2HuDiYK","tlshash":"f2333ae971d0707242e72475663f620a733a1a622c4d5844f66cedd43878edf6323eae","size":50266,"data":"","first_seen":"2023-03-07T01:02:40Z","last_seen":"2026-07-10T08:54:53.764023Z","times_seen":9271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/oa/build/js/site-b61979ba.js","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee2d1ffddf2ca0bcdc9d9c7b1a1afa06","sha1":"b61979bae3e8b1352e04c5a2d6f55bf3f330a175","sha256":"4dbb3b5665e27a7feed6c2fabeb3ae0b55ff893a0817f991f2b5bdd48573c828","sha512":"2e6d23106a5ab2ad459d35032080ac7bbb410788bda7258c0fdb08793d70d89cbd7a3090190ec0f93153610d409cf926ebc9cef67d134e32de7495e57d2f1bd0","ssdeep":"1536:Crk+3DvscmrlFOtza5uXJruX5/YOUQ/kO1wmFWcn0+c81mIDN/+Q+6hrA+Kb++n6:ED8QDQAgu2","tlshash":"d1b3725ab9e3207145bf31bea7af9288353000476504ec653c5c8e881f94eb56af7fda","size":117440,"data":"","first_seen":"2026-02-16T15:35:51.583402Z","last_seen":"2026-05-19T13:03:01.282888Z","times_seen":1636,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage.png","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960","date":"2026-04-28T18:27:29.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:BC:09:95:C4:5C:7A:4B:D7:04:D5:32:ED:E6:C3:8F:70:A1:BD:D0","sha256":"A0:7E:9F:55:C0:4A:54:10:28:8C:65:D3:F7:C2:58:8B:57:28:07:E1:40:41:5C:BA:91:B1:7B:87:56:63:96:A7"}}},"request":{"raw":"GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage.png HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: WVwG1hcbzxF0XQ0HUKnGLZ8YFJpM6MfVT0SfPIfDe9AxR8BSDpuBN8iLySavJpwmNnoTOCM05w4=\r\nx-amz-request-id: YDT8JVD2AMND0XZH\r\ndate: Mon, 27 Apr 2026 18:36:30 GMT\r\nlast-modified: Sun, 26 Apr 2026 21:30:31 GMT\r\netag: \"7e72897bf7bdaecf5fec47f028de6aac\"\r\ncache-control: public,max-age=86400\r\nexpires: Mon, 27 Apr 2026 23:00:00 GMT\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 760\r\nserver: ATS\r\nvary: Origin\r\nage: 85861\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000\r\nats-carp-promotion: 1, 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":760,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 36, 8-bit colormap, non-interlaced","md5":"7e72897bf7bdaecf5fec47f028de6aac","sha1":"a6d4f7b2b57a751941cc56e3cffbfde4de633576","sha256":"8a781f94157287ada91708b4baf12712cedf808ce49c58c194fc9873f4fa7a30","sha512":"2cd72c9a3f59178ea3d242301500513cd8f4be66ccd746da6e48625974f0006cfb5399a5fc07ed877345fca84da72ad83e72bd0c5ee04bb1e2a763909a7449e6","ssdeep":"","tlshash":"d2012591575d8e30daa112e9d234445186391c140bbe3435d5d1cc606fa1127cf40fa2","first_seen":"2023-05-01T17:57:49Z","last_seen":"2026-07-10T08:54:53.760485Z","times_seen":7800,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage.png","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960","date":"2026-04-28T18:27:29.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:BC:09:95:C4:5C:7A:4B:D7:04:D5:32:ED:E6:C3:8F:70:A1:BD:D0","sha256":"A0:7E:9F:55:C0:4A:54:10:28:8C:65:D3:F7:C2:58:8B:57:28:07:E1:40:41:5C:BA:91:B1:7B:87:56:63:96:A7"}}},"request":{"raw":"GET /rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage.png HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: 5x1x5KyJTFsV5XZ8q9LAdQ+lF0RXTDnrcHz51uOXq0F0Ko6akpjj7r9IPrecuZY2VnPu+epPlEg=\r\nx-amz-request-id: 8V9PT3KJZP6V6QXF\r\ndate: Tue, 28 Apr 2026 06:38:58 GMT\r\nlast-modified: Mon, 27 Apr 2026 21:32:03 GMT\r\netag: \"119157c5c80d9db38f0da8098a35b53a\"\r\ncache-control: public,max-age=86400\r\nexpires: Tue, 28 Apr 2026 23:00:00 GMT\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 810\r\nserver: ATS\r\nvary: Origin\r\nage: 42512\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000\r\nats-carp-promotion: 1, 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":810,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 36, 8-bit colormap, non-interlaced","md5":"119157c5c80d9db38f0da8098a35b53a","sha1":"6c65f9bdaf6aad4fdde6c1bde1e509a6f056058b","sha256":"1b119e32e848339740c549d02aa62d5fd21451d5ce468225922faae86555a68d","sha512":"444c70f817a27c5bf79af8bf0de2bb148c2501580682b6e18ba27ac4389e9fd1714f3f15d62bed75fe09eb8d96aa90aab737f40aeb424bbcc44640337eeb5e47","ssdeep":"","tlshash":"1d01baf9402176cdc3b61bfe70214a71a2885ff104b1dae379637c329c72d22100dc50","first_seen":"2023-05-01T17:57:49Z","last_seen":"2026-07-10T08:54:53.76206Z","times_seen":7780,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.yahoo.com/static/images/close.svg","fqdn":"consent.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"52.215.90.31","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960","date":"2026-04-28T18:27:29.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"consent.oath.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:DF:E3:70:17:4F:4D:8F:E0:46:FB:3E:FF:51:4E:E8:3A:5E:11:ED","sha256":"6A:47:9F:DD:87:66:2F:2E:A9:FD:C4:A2:59:88:DD:6F:BB:3E:FE:29:8B:63:28:AB:36:23:0D:B3:43:FF:72:D5"}}},"request":{"raw":"GET /static/images/close.svg HTTP/1.1\r\nHost: consent.yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GUCS=AUvxb7zC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Encoding: gzip\r\nServer: guce\r\nAccept-Ranges: bytes\r\nDate: Tue, 28 Apr 2026 18:27:29 GMT\r\nConnection: keep-alive\r\nLast-Modified: Thu, 16 Apr 2026 08:32:25 GMT\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Length: 703\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1402,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04fdad3c9b32cf024d3494c6e0b1f691","sha1":"e7c0aabd33e695415e7a8c7afea4b94dca273f06","sha256":"8f0baedf119a144b8b4fe597eb02a91fc47d89284aa6cdcc12097cb109598796","sha512":"8faf6ac7d20f6e453e7f8ae7850ab624962e3bf87a015c92d1cd35a8bf7703f5cb4b0519f912b65ddbd182bf99098a3ac98d2eaacf21947ab4ccefe649a235c4","ssdeep":"","tlshash":"5e2153e0337d4179b516c320cff86b296196708b21c48498f98e0a61fb394c5ad8fb6f","first_seen":"2023-09-13T08:11:20Z","last_seen":"2026-06-28T07:03:33.419862Z","times_seen":7490,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":117,"dns":0,"connect":36,"send":0,"wait":39,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.yahoo.com/beacon?tag=TCF2\u0026step=Layer1-View\u0026brandDomain=www.yahoo.com\u0026brandBid=\u0026userType=nonreg\u0026sdk=false\u0026tos=nb-NO\u0026country=NO\u0026x=\u0026sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960","fqdn":"consent.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"52.215.90.31","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960","date":"2026-04-28T18:27:29.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"consent.oath.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:DF:E3:70:17:4F:4D:8F:E0:46:FB:3E:FF:51:4E:E8:3A:5E:11:ED","sha256":"6A:47:9F:DD:87:66:2F:2E:A9:FD:C4:A2:59:88:DD:6F:BB:3E:FE:29:8B:63:28:AB:36:23:0D:B3:43:FF:72:D5"}}},"request":{"raw":"GET /beacon?tag=TCF2\u0026step=Layer1-View\u0026brandDomain=www.yahoo.com\u0026brandBid=\u0026userType=nonreg\u0026sdk=false\u0026tos=nb-NO\u0026country=NO\u0026x=\u0026sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960 HTTP/1.1\r\nHost: consent.yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GUCS=AUvxb7zC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: guce\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nDate: Tue, 28 Apr 2026 18:27:29 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T06:15:45.47424Z","times_seen":17557251,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/oa/build/images/en-GB-home_f0badd867efa6720.jpeg","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960","date":"2026-04-28T18:27:29.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:BC:09:95:C4:5C:7A:4B:D7:04:D5:32:ED:E6:C3:8F:70:A1:BD:D0","sha256":"A0:7E:9F:55:C0:4A:54:10:28:8C:65:D3:F7:C2:58:8B:57:28:07:E1:40:41:5C:BA:91:B1:7B:87:56:63:96:A7"}}},"request":{"raw":"GET /oa/build/images/en-GB-home_f0badd867efa6720.jpeg HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://s.yimg.com/oa/build/css/site-ltr-281e5c2a.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: nkxhlP4Ogga6FGM75rsNojIAS6Ntls5MsvgprQV/+xb3Wq0oFTcjuB3K87tVsImbk+S2lgAJi3Yh1YkGXRaYW6Yr3sBhAjWx\r\nx-amz-request-id: PRCJVD7GB7E6T4F3\r\ndate: Sat, 18 Apr 2026 07:02:02 GMT\r\nlast-modified: Thu, 16 Apr 2026 14:48:06 GMT\r\netag: \"9c394eca0dfc6cbf2420b6c3c07d4970\"\r\ncache-control: max-age=31536000; immutable\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\ncontent-length: 79439\r\nserver: ATS\r\nvary: Origin\r\nage: 905128\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000\r\nats-carp-promotion: 1, 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":79439,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1546, components 3","md5":"9c394eca0dfc6cbf2420b6c3c07d4970","sha1":"378092debaa0e79af573265a7d0ce2db3ed38a3b","sha256":"c2b819e2ae41bd6a05129d0b6c38941240576b2236386789ffad3656b186ef29","sha512":"d982a01031226d79946b9e6676e38b0f592df87b986520262686c7e1ebb11cbd46044baa6980752d4be96c3af662e7fb85f99b5014b77e7bd79d898d8dfec173","ssdeep":"1536:zy03Je0FXMASpMlX0KU7Y3Wa2nepau8QKjwc3Vle:z/k46pMlkKU7iqbEqVle","tlshash":"2b73e121ee8bbdc2c36e1671e7c6069521d70d03718b965dda8d94372e983662838ffc","first_seen":"2023-04-07T21:30:12Z","last_seen":"2026-07-07T07:03:09.161618Z","times_seen":5769,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/oa/build/images/help-circle-solid-black_f68609a66d5b78e7.svg","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960","date":"2026-04-28T18:27:29.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:BC:09:95:C4:5C:7A:4B:D7:04:D5:32:ED:E6:C3:8F:70:A1:BD:D0","sha256":"A0:7E:9F:55:C0:4A:54:10:28:8C:65:D3:F7:C2:58:8B:57:28:07:E1:40:41:5C:BA:91:B1:7B:87:56:63:96:A7"}}},"request":{"raw":"GET /oa/build/images/help-circle-solid-black_f68609a66d5b78e7.svg HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://s.yimg.com/oa/build/css/site-ltr-281e5c2a.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: WvoLnfwm2Ydd0pTa8vwJx12xZJl7g1yJ7WZQ9Ks0dnXTnakdPgnAVbdBohVeQPgdHdQvlHXL4ms=\r\nx-amz-request-id: K09ZC54AQV9AES0E\r\ndate: Thu, 23 Apr 2026 04:58:59 GMT\r\nlast-modified: Thu, 16 Apr 2026 14:48:06 GMT\r\netag: \"db8ae5c3af867c288f5acd55550ff4c9\"\r\ncache-control: max-age=31536000; immutable\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\ncontent-length: 1312\r\nserver: ATS\r\nvary: Origin\r\nage: 480512\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000\r\nats-carp-promotion: 1, 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2715,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5fec39e72a4ed58c02f47c08dcf0ee9b","sha1":"fb77c65f3087b8cf25cdcda7c76fb22e2d698d2d","sha256":"9284f7fb38c8d02a4bd0e156987de0ececfb3b7aab4a0a004591fc784f1d01b5","sha512":"73967c0059ee99464a1702efc2d5b9d2973c5b0909eccc859bc33e30df9d0cb71d768bb3d79e827871516d006c6882d136de1caa1f4810ed00d02aa633bafad1","ssdeep":"","tlshash":"4f5153fd27f9d1f0aa09e7a1d8f6957b568b36783fa94dcc80804b50df060e99781c50","first_seen":"2023-05-07T18:08:38Z","last_seen":"2026-07-10T08:54:53.761485Z","times_seen":7747,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.yahoo.com/beacon?tag=TCF2\u0026step=Layer1-View\u0026brandDomain=www.yahoo.com\u0026brandBid=\u0026userType=nonreg\u0026sdk=false\u0026tos=nb-NO\u0026country=NO\u0026x=\u0026sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960","fqdn":"consent.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"52.215.90.31","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960","date":"2026-04-28T18:27:29.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"consent.oath.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:DF:E3:70:17:4F:4D:8F:E0:46:FB:3E:FF:51:4E:E8:3A:5E:11:ED","sha256":"6A:47:9F:DD:87:66:2F:2E:A9:FD:C4:A2:59:88:DD:6F:BB:3E:FE:29:8B:63:28:AB:36:23:0D:B3:43:FF:72:D5"}}},"request":{"raw":"GET /beacon?tag=TCF2\u0026step=Layer1-View\u0026brandDomain=www.yahoo.com\u0026brandBid=\u0026userType=nonreg\u0026sdk=false\u0026tos=nb-NO\u0026country=NO\u0026x=\u0026sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960 HTTP/1.1\r\nHost: consent.yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GUCS=AUvxb7zC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: guce\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nDate: Tue, 28 Apr 2026 18:27:29 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T06:15:45.47424Z","times_seen":17557251,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"udc.yahoo.com/v2/public/yql?yhlVer=2\u0026yhlClient=rapid\u0026yhlS=1197812781\u0026yhlCT=2\u0026yhlBTMS=1777400849217\u0026yhlClientVer=3.53.30\u0026yhlRnd=YbgqPSZ4Qg7ee5fa\u0026yhlCompressed=0","fqdn":"udc.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"188.125.72.139","port":443,"asn":34010,"as":"Yahoo-UK Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960","date":"2026-04-28T18:27:29.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 13 Apr 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:15:EE:04:00:1E:EA:5E:B2:4E:E8:C8:D0:9E:7E:BD:57:14:4E:B8","sha256":"26:5B:3F:BD:FB:21:B8:73:D4:3B:AF:22:3C:CC:CC:DC:9F:46:16:4B:A2:D0:74:38:1C:D9:50:35:8A:A8:80:94"}}},"request":{"raw":"POST /v2/public/yql?yhlVer=2\u0026yhlClient=rapid\u0026yhlS=1197812781\u0026yhlCT=2\u0026yhlBTMS=1777400849217\u0026yhlClientVer=3.53.30\u0026yhlRnd=YbgqPSZ4Qg7ee5fa\u0026yhlCompressed=0 HTTP/1.1\r\nHost: udc.yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 1302\r\nOrigin: https://consent.yahoo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GUCS=AUvxb7zC\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1302,"data":"q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.53.30%22%2C%22A_cn%22%3A%22VERSIONED-PROD%22%2C%22_bt%22%3A%22rapid%22%2C%22sessionId%22%3A%223_cc-session_8264894d-1095-42cc-b878-27a3f6d44960%22%2C%22A_pr%22%3A%22https%22%2C%22A_tzoff%22%3A0%2C%22A_cnf%22%3A%22%7B%5C%22spaceid%5C%22%3A%5C%221197812781%5C%22%2C%5C%22anonymized%5C%22%3A%5C%22true%5C%22%2C%5C%22test_id%5C%22%3A%5C%22%5C%22%7D%22%7D%2C%22r%22%3A%5B%7B%22t%22%3A%22pv%22%2C%22s%22%3A%221197812781%22%2C%22pp%22%3A%7B%22A_sid%22%3A%22C8bmkEloE0dIv6fq%22%2C%22_w%22%3A%22consent.yahoo.com%2Fv2%2FcollectConsent%3FsessionId%3D3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960%22%2C%22outcm%22%3A%22consent-layer1_imp%22%2C%22mrkt%22%3A%22gb%22%2C%22lang%22%3A%22nb-NO%22%2C%22pt%22%3A%22utility%22%2C%22pct%22%3A%22story%22%2C%22ver%22%3A%22java%22%2C%22dmi_consent%22%3A%22false%22%2C%22site%22%3A%22www.yahoo.com%22%2C%22ll1%22%3A%22%22%2C%22A_%22%3A%221%22%2C%22A_sr%22%3A%221280x1024%22%2C%22A_vr%22%3A%221280x1024%22%2C%22A_do%22%3A%221%22%2C%22A_ib%22%3A%221280x1024%22%2C%22A_ob%22%3A%221280x1024%22%2C%22A_srr%22%3A%221%22%7D%2C%22_ts%22%3A%221777400849%22%2C%22_ms%22%3A%22215%22%2C%22lv%22%3A%5B%5D%7D%5D%2C%22yrid%22%3A%22%22%2C%22optout%22%3A%220%22%2C%22nol%22%3A%220%22%7D'"}},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://consent.yahoo.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, private, max-age=0\r\np3p: policyref=\"http://info.yahoo.com/w3c/p3p.xml\", CP=\"CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV\"\r\npragma: no-cache\r\nexpires: -1\r\nx-envoy-upstream-service-time: 1\r\ndate: Tue, 28 Apr 2026 18:27:29 GMT\r\nserver: ATS\r\nage: 0\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T06:15:45.47424Z","times_seen":17557251,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":114,"dns":40,"connect":33,"send":0,"wait":39,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maib.icu/","fqdn":"maib.icu","domain":"maib.icu","tld":"icu"},"ip":{"addr":"172.67.179.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T18:27:27.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maib.icu","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 07:54:09 GMT","end":"Tue, 23 Jun 2026 07:54:08 GMT"},"fingerprint":{"sha1":"1E:CB:F9:09:67:B0:49:71:CD:0D:79:F6:D6:C6:1F:BD:D5:0A:2D:D4","sha256":"D8:41:CF:40:3A:FE:6D:DD:61:24:E3:CC:DD:80:66:ED:46:4C:0D:64:D1:01:D6:2B:B9:0B:89:B7:CE:37:91:6A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: maib.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 28 Apr 2026 18:27:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://yahoo.com\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\nset-cookie: sid=06be6d8c-2346-4563-941c-d2522abf457d; expires=Thu, 28 May 2026 18:27:27 GMT; Max-Age=2592000; path=/\r\nreferrer-policy: no-referrer\r\ncontent-security-policy: referrer no-referrer\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ck8FdPuJbhYoDStGe4T7GyZT6zSxBbx8ETa9mkADgqmG1yfVQp%2FkZuJa%2Bptck7Y4MHPhQOSkcv7aaUDJNSisfyH2RCYisZUmgRDiyZ3K9w37kkDv1%2F5vcJDySg%3D%3D\"}]}\r\ncf-ray: 9f381eff0a698deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96015,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T06:15:45.47424Z","times_seen":17557251,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":92,"dns":74,"connect":1,"send":0,"wait":168,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yahoo.com/","fqdn":"yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"74.6.143.26","port":443,"asn":26101,"as":"YAHOO-BF1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T18:27:27.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Wed, 26 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E6:5D:E6:73:FF:42:DC:71:09:45:7A:31:E6:1B:06:5B:ED:14:9B:7E","sha256":"1E:1D:FC:32:34:AC:F4:23:59:B6:86:59:92:23:28:7A:6F:2B:90:6B:6A:12:9E:D9:9A:5D:83:AB:B5:A1:EC:C8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 28 Apr 2026 18:27:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nserver: ATS\r\ncache-control: no-store, no-cache\r\ncontent-type: text/html\r\ncontent-language: en\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlocation: https://www.yahoo.com/\r\ncontent-length: 8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96015,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T06:15:45.47424Z","times_seen":17557251,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":222,"dns":15,"connect":99,"send":0,"wait":104,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yahoo.com/","fqdn":"www.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T18:27:27.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:BC:09:95:C4:5C:7A:4B:D7:04:D5:32:ED:E6:C3:8F:70:A1:BD:D0","sha256":"A0:7E:9F:55:C0:4A:54:10:28:8C:65:D3:F7:C2:58:8B:57:28:07:E1:40:41:5C:BA:91:B1:7B:87:56:63:96:A7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ndate: Tue, 28 Apr 2026 18:27:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nserver: ATS\r\ncache-control: no-store\r\ncontent-type: text/html; charset=utf-8\r\ncontent-language: en\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nlocation: https://guce.yahoo.com/consent?brandType=nonEu\u0026gcrumb=S_FvvMI\u0026done=https%3A%2F%2Fwww.yahoo.com%2F\r\nset-cookie: GUCS=AUvxb7zC; Max-Age=1800; Domain=.yahoo.com; Path=/; Secure\r\ncontent-security-policy: frame-ancestors 'self' https://*.builtbygirls.com https://*.rivals.com https://*.engadget.com https://*.intheknow.com https://*.autoblog.com https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.pnr.ouryahoo.com https://pnr.ouryahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.onesearch.com https://*.verizonmedia.com https://*.publishing.oath.com https://cdn.taboola.com https://ads.taboola.com chrome-extension://jdanfkhnfpagoijgfmklhgakdicpnfil; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation allow-top-navigation-by-user-activation; report-uri https://csp.yahoo.com/beacon/csp?src=ats\u0026site=news\u0026region=US\u0026lang=en-US\u0026device=desktop\u0026yrid=6o9nr8tivmg0j\u0026partner=;\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":96015,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T06:15:45.47424Z","times_seen":17557251,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":157,"dns":68,"connect":34,"send":0,"wait":44,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.yahoo.com/beacon?tag=TCF2\u0026step=Layer1-View-Js\u0026brandDomain=www.yahoo.com\u0026brandBid=\u0026userType=nonreg\u0026sdk=false\u0026tos=nb-NO\u0026country=NO\u0026x=\u0026sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960","fqdn":"consent.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"52.215.90.31","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960","date":"2026-04-28T18:27:29.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"consent.oath.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:DF:E3:70:17:4F:4D:8F:E0:46:FB:3E:FF:51:4E:E8:3A:5E:11:ED","sha256":"6A:47:9F:DD:87:66:2F:2E:A9:FD:C4:A2:59:88:DD:6F:BB:3E:FE:29:8B:63:28:AB:36:23:0D:B3:43:FF:72:D5"}}},"request":{"raw":"POST /beacon?tag=TCF2\u0026step=Layer1-View-Js\u0026brandDomain=www.yahoo.com\u0026brandBid=\u0026userType=nonreg\u0026sdk=false\u0026tos=nb-NO\u0026country=NO\u0026x=\u0026sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960 HTTP/1.1\r\nHost: consent.yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960\r\nOrigin: https://consent.yahoo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GUCS=AUvxb7zC\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: guce\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nDate: Tue, 28 Apr 2026 18:27:29 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T06:15:45.47424Z","times_seen":17557251,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/oa/build/images/favicons/yahoo.png","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960","date":"2026-04-28T18:27:29.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:BC:09:95:C4:5C:7A:4B:D7:04:D5:32:ED:E6:C3:8F:70:A1:BD:D0","sha256":"A0:7E:9F:55:C0:4A:54:10:28:8C:65:D3:F7:C2:58:8B:57:28:07:E1:40:41:5C:BA:91:B1:7B:87:56:63:96:A7"}}},"request":{"raw":"GET /oa/build/images/favicons/yahoo.png HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: tcfpGSosNfMbacLtRNjtuv96kysHlQlszphnrkVlV4S6uaKeyqhmJNajxzBe5w1Lg2A4RiTdClFbq/TWwLgrT8zRHfEV4srH\r\nx-amz-request-id: 9PHJ0B7PMA0BPMCF\r\ndate: Sat, 25 Apr 2026 16:33:03 GMT\r\nlast-modified: Thu, 16 Apr 2026 14:48:06 GMT\r\netag: \"b6814ae5582d7953821acbd76e977bb4\"\r\ncache-control: max-age=31536000; immutable\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 1406\r\nserver: ATS\r\nvary: Origin\r\nage: 266067\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000\r\nats-carp-promotion: 1, 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel","md5":"b6814ae5582d7953821acbd76e977bb4","sha1":"75a33fc706c2c6ba233e76c17337e466949f403c","sha256":"4a491acd00880c407a2b749619003716c87e9c25ac344e5934c13e8f9aa0e8b3","sha512":"958268f22e72875b97c42d8927e6a1d6168c94fe2184de906029688a9d63038301df2e3de57e571a3d0ecc7ad41178401823e5c54576936d37c84c7a3ed8ef6b","ssdeep":"","tlshash":"a12128007064454fe1cd32f40f3b53e883c9d188d5b1b6cd8350f402df881392701041","first_seen":"2023-04-12T08:46:05Z","last_seen":"2026-07-11T21:43:12.611568Z","times_seen":9817,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guce.yahoo.com/consent?brandType=nonEu\u0026gcrumb=S_FvvMI\u0026done=https%3A%2F%2Fwww.yahoo.com%2F","fqdn":"guce.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"54.220.7.214","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T18:27:27.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"guce.oath.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FA:30:53:66:8B:D5:9B:6D:30:F3:A2:DD:90:C3:92:F3:58:8A:C8:7B","sha256":"C1:D4:A4:1A:24:91:32:BB:A4:61:D9:F2:D1:7D:2C:A8:5C:83:3C:5E:1F:9B:B2:24:6D:AB:8B:7D:9E:D2:E2:A9"}}},"request":{"raw":"GET /consent?brandType=nonEu\u0026gcrumb=S_FvvMI\u0026done=https%3A%2F%2Fwww.yahoo.com%2F HTTP/1.1\r\nHost: guce.yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GUCS=AUvxb7zC\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nConnection: keep-alive\r\nServer: guce\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nLocation: https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960\r\nContent-Length: 0\r\nDate: Tue, 28 Apr 2026 18:27:28 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96015,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T06:15:45.47424Z","times_seen":17557251,"resource_available":true,"data":null}},"time_used":978,"timings":{"blocked":458,"dns":108,"connect":35,"send":0,"wait":62,"receive":0,"ssl":312},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960","fqdn":"consent.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"52.215.90.31","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T18:27:28.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"consent.oath.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:DF:E3:70:17:4F:4D:8F:E0:46:FB:3E:FF:51:4E:E8:3A:5E:11:ED","sha256":"6A:47:9F:DD:87:66:2F:2E:A9:FD:C4:A2:59:88:DD:6F:BB:3E:FE:29:8B:63:28:AB:36:23:0D:B3:43:FF:72:D5"}}},"request":{"raw":"GET /v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960 HTTP/1.1\r\nHost: consent.yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GUCS=AUvxb7zC\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Encoding: gzip\r\nExpires: 0\r\nCache-Control: no-cache, no-store, must-revalidate\r\nContent-Security-Policy-Report-Only: default-src 'none'; block-all-mixed-content; connect-src 'self' https://udc.yahoo.com/ https://geo.yahoo.com/ https://ganon.yahoo.com; frame-ancestors 'none'; img-src 'self' https://s.yimg.com; media-src 'none'; script-src 'self' 'nonce-ep5VO8MdyxfxKo1cAPZo6C0+xwP1oEvm' https://s.yimg.com; style-src 'self' 'nonce-ep5VO8MdyxfxKo1cAPZo6C0+xwP1oEvm' https://s.yimg.com; font-src 'self'; object-src 'none'; frame-src 'none'; report-uri https://csp.yahoo.com/beacon/csp?src=guce\r\nServer: guce\r\nX-XSS-Protection: 1; mode=block\r\nPragma: no-cache\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nDate: Tue, 28 Apr 2026 18:27:28 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nContent-Type: text/html;charset=UTF-8\r\nContent-Length: 14846\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96015,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (38326)","md5":"2c21a43bc33d60252db372375ae95a9a","sha1":"8a06ac1b10eb5ff7d74373802ac46981809f7c3c","sha256":"f4eb58ea4046e345025d8c146196b58ba9f1223a993d3c66d0a9b308310df5a2","sha512":"0f6ce4d852c1efe84f9c4b35112f4589dc87c317ba9c2cdc9d2dcc018dfa4bdc39719ba002496726c3704b3953b914a9c72648f664c2fe954c49afb66d5a3d9f","ssdeep":"1536:CKJkVJHY0NWgFLJHY0NWgFsS/e6ezeOeOA:RgFQgFsSZ","tlshash":"b49385c5c5f8e3795e2b2d14da99731fa30fa605ff237658b02de498a3c6ae101e2d41","first_seen":"2026-04-28T18:27:52.818698Z","last_seen":"2026-04-28T18:27:52.818698Z","times_seen":1,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":156,"dns":33,"connect":35,"send":0,"wait":104,"receive":1,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/oa/build/css/site-ltr-281e5c2a.css","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960","date":"2026-04-28T18:27:29.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:BC:09:95:C4:5C:7A:4B:D7:04:D5:32:ED:E6:C3:8F:70:A1:BD:D0","sha256":"A0:7E:9F:55:C0:4A:54:10:28:8C:65:D3:F7:C2:58:8B:57:28:07:E1:40:41:5C:BA:91:B1:7B:87:56:63:96:A7"}}},"request":{"raw":"GET /oa/build/css/site-ltr-281e5c2a.css HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: lseZcn025Qt/CUHy+YIvAquvoCb8DzzuPr03RefdpUHlGy5lBfpreNLQ4MO7oZ2gwPFLGcJ/qjs=\r\nx-amz-request-id: 9G3QWA2RXBYWWVGR\r\ndate: Wed, 22 Apr 2026 07:58:55 GMT\r\nlast-modified: Thu, 16 Apr 2026 14:48:06 GMT\r\netag: \"03238a99536dffb24860417e82011a01\"\r\ncache-control: max-age=31536000; immutable\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ncontent-type: text/css\r\ncontent-length: 39648\r\nserver: ATS\r\nvary: Origin\r\nage: 556115\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000\r\nats-carp-promotion: 1, 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":252064,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b7e953464b6c29c7d8389009a552b4ce","sha1":"281e5c2a7c9a82f3a3f79fd56881cd64bd1ba50c","sha256":"e8bd62f1ee837a5c6de5338dcaabef5da49e95330107673ca802f4ffa8217931","sha512":"f91ae8ed451301a8e06929203c14305abde03ade372937e8dc512822eb847a16697775777981f54fb317661b38a8b782d9cc12ae02541982d19a24f68b6e7e39","ssdeep":"1536:wkde3V1lt4D9sY0BmZc5qBUs04T9vT1K3nW+3IM9g4YKuCWD6HPlAkdICuIOkTob:Q1DrLPcZrR9sWm5ALccx2PWQZXszd","tlshash":"b73476a69af31546a45f41347faf674173289003820deef87e9da185cf493d489e3b8e","first_seen":"2026-03-18T03:03:46.535068Z","last_seen":"2026-04-29T05:43:44.077327Z","times_seen":638,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":44,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/oa/build/js/site-b61979ba.js","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960","date":"2026-04-28T18:27:29.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:BC:09:95:C4:5C:7A:4B:D7:04:D5:32:ED:E6:C3:8F:70:A1:BD:D0","sha256":"A0:7E:9F:55:C0:4A:54:10:28:8C:65:D3:F7:C2:58:8B:57:28:07:E1:40:41:5C:BA:91:B1:7B:87:56:63:96:A7"}}},"request":{"raw":"GET /oa/build/js/site-b61979ba.js HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: erSH0TJmCg3jMZXQFFT3oioWX+Z4BkB5tsy8px8c1HQfUnWcKjODE/boLDN8zj/NERI6gFe3txw=\r\nx-amz-request-id: SV70SP9TNFPBTDJG\r\ndate: Tue, 28 Apr 2026 08:03:00 GMT\r\nlast-modified: Thu, 16 Apr 2026 14:48:06 GMT\r\netag: \"173ed0d0468268de1c48f20f746e0554\"\r\ncache-control: max-age=31536000; immutable\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\ncontent-length: 22385\r\nserver: ATS\r\nvary: Origin\r\nage: 37470\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nats-carp-promotion: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":117440,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (497)","md5":"ee2d1ffddf2ca0bcdc9d9c7b1a1afa06","sha1":"b61979bae3e8b1352e04c5a2d6f55bf3f330a175","sha256":"4dbb3b5665e27a7feed6c2fabeb3ae0b55ff893a0817f991f2b5bdd48573c828","sha512":"2e6d23106a5ab2ad459d35032080ac7bbb410788bda7258c0fdb08793d70d89cbd7a3090190ec0f93153610d409cf926ebc9cef67d134e32de7495e57d2f1bd0","ssdeep":"1536:Crk+3DvscmrlFOtza5uXJruX5/YOUQ/kO1wmFWcn0+c81mIDN/+Q+6hrA+Kb++n6:ED8QDQAgu2","tlshash":"d1b3725ab9e3207145bf31bea7af9288353000476504ec653c5c8e881f94eb56af7fda","first_seen":"2026-02-16T15:35:51.583402Z","last_seen":"2026-05-19T13:03:01.282888Z","times_seen":1636,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":75,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/ss/rapid-3.53.30.js","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://consent.yahoo.com/v2/collectConsent?sessionId=3_cc-session_8264894d-1095-42cc-b878-27a3f6d44960","date":"2026-04-28T18:27:29.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:BC:09:95:C4:5C:7A:4B:D7:04:D5:32:ED:E6:C3:8F:70:A1:BD:D0","sha256":"A0:7E:9F:55:C0:4A:54:10:28:8C:65:D3:F7:C2:58:8B:57:28:07:E1:40:41:5C:BA:91:B1:7B:87:56:63:96:A7"}}},"request":{"raw":"GET /ss/rapid-3.53.30.js HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://consent.yahoo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: kPvU0D4pKDDYAIsSQJdjIRDbWgzZpBpzKCrwM71VZYf5ct8v490pJNfjIwSxYoLYky/QOYT5Qxw=\r\nx-amz-request-id: 7BSWC3GF7HQTZRPC\r\ndate: Sat, 25 Apr 2026 14:52:52 GMT\r\nlast-modified: Tue, 29 Jun 2021 01:45:07 GMT\r\netag: \"665798d28ecf9be7cbc434e75267920d-df\"\r\ncache-control: max-age=31536000, immutable\r\nx-amz-version-id: .Bcg25AHAdRCkTvv5tMdNmGVEjznZ_m3\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\nserver: ATS\r\nvary: Origin, Accept-Encoding\r\nage: 272078\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-length: 17971\r\nstrict-transport-security: max-age=31536000\r\nats-carp-promotion: 1, 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50266,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"665798d28ecf9be7cbc434e75267920d","sha1":"55864f76f012bb11a354c6bacdcc7769a5ec6fa2","sha256":"7bc917ebee12bcd521ae88840228032579459c25a3ccf8953d8a2dbe5e085be9","sha512":"6191d7396f72b8e362b1ed6444f17c645a8f921495936713c90db6947b793a0178c6d0bb0e902786768c36b6ba254728eba6a740f935c22a9f9029f6d3cc8af8","ssdeep":"768:x8HRVYb/9XQj3AGnW2xvj3lOzTP8dADM7f2HuDslY9SQkpDN:+zYrRQj3XhRj3aEv2HuDiYK","tlshash":"f2333ae971d0707242e72475663f620a733a1a622c4d5844f66cedd43878edf6323eae","first_seen":"2023-03-07T01:02:40Z","last_seen":"2026-07-10T08:54:53.764023Z","times_seen":9271,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
