{"report_id":"ef035841-9086-4c99-a629-68554265bfa0","version":6,"status":"done","tags":[],"date":"2025-05-25T02:21:42Z","url":{"schema":"https","addr":"api.taboola.com/2.0/json/yahoo-android-mail/recommendations.notify-click?","fqdn":"api.taboola.com","domain":"taboola.com","tld":"com"},"ip":{"addr":"151.101.1.44","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"api.taboola.com/2.0/json/yahoo-android-mail/recommendations.notify-click?","fqdn":"api.taboola.com","domain":"taboola.com","tld":"com"},"title":"Error 400 The request is missing app.type parameter"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-03T02:21:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"api.taboola.com","ip":{"addr":"151.101.65.44","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2007-02-23","domain_rank":5036,"first_seen":"2013-04-12T07:05:16Z","last_seen":"2025-04-20T15:48:47.031682Z","alert_count":0,"request_count":3,"received_data":2089,"sent_data":1410,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"api.taboola.com/2.0/json/yahoo-android-mail/recommendations.notify-click?","fqdn":"api.taboola.com","domain":"taboola.com","tld":"com"},"ip":{"addr":"151.101.65.44","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-05-25T02:21:20.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.taboola.com","organization":"TABOOLA.COM LTD"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 01 Dec 2024 00:00:00 GMT","end":"Wed, 31 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"05:9D:55:F2:81:2F:79:32:01:33:B8:98:EC:67:1A:CF:BA:B3:9A:C5","sha256":"98:B9:E2:D6:E6:A3:9B:33:EF:10:45:74:1A:C0:1A:BA:48:A1:5B:F1:F2:0A:D9:BF:74:15:EC:78:90:F2:08:82"}}},"request":{"raw":"GET /2.0/json/yahoo-android-mail/recommendations.notify-click? HTTP/1.1\r\nHost: api.taboola.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":226,"data":"session_token=QUFFLUhqbEJNNHpXZ2cyM2dMd0NoN2diWUs4eGVaclJMUXxBQ3Jtc0trNDBteFlLNEV5aWRobGd0dlJnSzVWRkhYYXlVTzRvVlVYaHpWM1lOVmZpdDN3R3pCU2ZYSGdWZVBJVWtYenRycnl2VFEzYkFFUDNfc053dXpqbUtUWXFSX3VoNkxKWURzQkxRSmUxWi1CT0MxVkxrQQ%3D%3D"}},"response":{"raw":"HTTP/2 400 Bad Request\r\nserver: nginx\r\ncontent-type: text/html;charset=iso-8859-1\r\ncache-control: must-revalidate,no-cache,no-store\r\naccept-ranges: bytes\r\ndate: Sun, 25 May 2025 02:21:21 GMT\r\nvia: 1.1 varnish\r\nx-service-version: v1\r\nx-served-by: cache-hel1410025-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1748139681.082049,VS0,VE92\r\nx-vcl-time-ms: 92\r\ncontent-length: 448\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":448,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"8bcf7b78a63a691728e182a0fc0c8c77","sha1":"d6d816e686e6345377cb46fe823df33d3471a82e","sha256":"b946384d614a23a003fdd65827b115f57716244142d6b22ff39e4208275bd11b","sha512":"b7d25dd39cf39ce972170559293135e44a6a0371eef2e1ec4f4f04820942a0ef7b0121d7b46fa7c82c003db3900d772687c24cd6dfd973b3a3162f9e03d645ae","ssdeep":"","tlshash":"bff0dcea198812053b42072cb8c46300420229956349089c65a34eeefc4d908d8d379c","first_seen":"2025-05-25T02:21:42.887107Z","last_seen":"2025-05-25T02:21:42.887107Z","times_seen":1,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":156,"dns":123,"connect":13,"send":0,"wait":105,"receive":1,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"api.taboola.com/2.0/json/yahoo-android-mail/recommendations.notify-click?","fqdn":"api.taboola.com","domain":"taboola.com","tld":"com"},"ip":{"addr":"151.101.65.44","port":80,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-05-25T02:21:21.320Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /2.0/json/yahoo-android-mail/recommendations.notify-click? HTTP/1.1\r\nHost: api.taboola.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":24,"data":"[\"O43z0dpjhgX20SCx4KAo\"]"}},"response":{"raw":"HTTP/1.1 400 The request is missing app.type parameter\r\nConnection: keep-alive\r\nContent-Length: 448\r\nServer: nginx\r\nContent-Type: text/html;charset=iso-8859-1\r\nCache-Control: must-revalidate,no-cache,no-store\r\nAccept-Ranges: bytes\r\nDate: Sun, 25 May 2025 02:21:21 GMT\r\nVia: 1.1 varnish\r\nX-SERVICE-VERSION: v1\r\nX-Served-By: cache-hel1410024-HEL\r\nX-Cache: MISS\r\nX-Cache-Hits: 0\r\nX-Timer: S1748139681.333432,VS0,VE97\r\nX-vcl-time-ms: 97\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"The request is missing app.type parameter","fingerprints":null,"data":{"size":448,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"8bcf7b78a63a691728e182a0fc0c8c77","sha1":"d6d816e686e6345377cb46fe823df33d3471a82e","sha256":"b946384d614a23a003fdd65827b115f57716244142d6b22ff39e4208275bd11b","sha512":"b7d25dd39cf39ce972170559293135e44a6a0371eef2e1ec4f4f04820942a0ef7b0121d7b46fa7c82c003db3900d772687c24cd6dfd973b3a3162f9e03d645ae","ssdeep":"","tlshash":"bff0dcea198812053b42072cb8c46300420229956349089c65a34eeefc4d908d8d379c","first_seen":"2025-05-25T02:21:42.887107Z","last_seen":"2025-05-25T02:21:42.887107Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":8,"dns":1,"connect":13,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"api.taboola.com/favicon.ico","fqdn":"api.taboola.com","domain":"taboola.com","tld":"com"},"ip":{"addr":"151.101.65.44","port":80,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://api.taboola.com/2.0/json/yahoo-android-mail/recommendations.notify-click?","date":"2025-05-25T02:21:21.649Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: api.taboola.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://api.taboola.com/2.0/json/yahoo-android-mail/recommendations.notify-click?\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1035,"data":"[\"O43z0dpjhgX20SCx4KAo\",\"$2kU5RR1RAAbLNnfU6zbeMsgEhm544ymnADQBEArZ1O7ntIxtyAzvCsLFyFFUooHt1x8eb4septx_yovBV67j3ZBn6P-GL41WAkK6XtkzngAAALPOAAAACfQBB-IAEoqyWh19KMjAVc-hrKaAuEkqFJYBQKAIvACZacqjyr98rWq3y4v10sLCjexyK2vXkWKlbDPl50lMF2w-NYMDm_lO8S-Ltvd53AJa9MncCMRvzQ5lTCMb8VYympT732PTFbQ6MZgAF3vAtlNGpu6ushX5213nDaXkriZGvKwUfBgQrVJnn6xkCStYmqm61cUntScD_GBJHZtWHDrCj6zG1_BBT2YlX-Cw2GNkeEQcZKftViA-YRc4XvnGoKzlOD689APJ6HHyVQ6Bv_1XJru_J40T8sKaQzc2igXXZOnvRWm8w4xX9KBL2XiA_mbZDKlXrJBFbeUaORnQVE3nh20XfP0LmzLP65Ye3I_d9XUevS95n3vEa676z7-jyxysDQgxHt2QxWOp-TCGuxhbKSvWRUhqPYR-pTJ7Hne1Ly23dsXUpDoXGwSjStdtt1G7SrE2-KXpZlwgBQE9m_jNePBzId2lfA3eTVO0cgllPnYg12VlV9zOtANEjariObJwMj1AAVDZfkPU0foFdgHxvTRTG6W9pr_4TsYvml7ymY1Rr_RNzYNf5e2CAWlG9BEIHFz23065Aot4kvQqgXQqPVfXD4X3xv_jGv971INv6CuF1VxQ59lHwFL-OK24kK5HOFl4R8AVsmidNoH7A7uhh8bxm9CK3v2_zAnJ_U21XKBroN3ap0hNRAAE3o96QQH_iMs1WImizNSxVbNRlFO0dL0Coelu9wlQkdaSnLlXcrM7KzzjJc9P74qPTjeO57j36AZgOxpVOihJO-VLm305MzASntLfucZqKv7T2aCdYps5JlxarZq1EtQKVHNdEQGCHIJd0iZXWQMjQjrhFYQ__5D3hhw_LjRBPQCma82H7R-eKu4Pm7l-7bY\"]"}},"response":{"raw":"HTTP/1.1 204 No Content\r\nConnection: close\r\nServer: Varnish\r\nRetry-After: 0\r\nContent-Type: \r\nCache-Control: private, max-age=2592000\r\nAccept-Ranges: bytes\r\nDate: Sun, 25 May 2025 02:21:21 GMT\r\nVia: 1.1 varnish\r\nX-SERVICE-VERSION: v1\r\nX-Served-By: cache-hel1410024-HEL\r\nX-Cache: HIT\r\nX-Cache-Hits: 0\r\nX-Timer: S1748139682.647586,VS0,VE0\r\nX-vcl-time-ms: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T02:38:17.241927Z","times_seen":13523349,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}