Report - pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm

Report Overview

Submitted URL
pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm
IP
104.18.2.35
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-16 16:38:11
Access
public
Website Title
Yahoo
Final URL
pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm
Tags
yahoo phishing
urlquery detections
Phishing - Yahoo

Detections

urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fc.yahoo.com	1511	1995-01-18	2014-06-01	2024-04-15	708 B	5.6 kB	87.248.119.252
3p-udc.yahoo.com	5700	1995-01-18	2021-02-27	2024-04-15	707 B	846 B	188.125.72.139
pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev	unknown	2022-08-23	2024-02-12	2024-03-23	507 B	42 kB	104.18.2.35
s.yimg.com	375	1997-05-14	2012-05-21	2024-04-16	7.2 kB	1.0 MB	87.248.119.252

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm	Yahoo! Inc

PhishTank

Scan Date	Severity	Indicator	Alert
2024-02-13	medium	pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm	Yahoo

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm	5.7 kB	2023-03-09	2024-04-29
Pretty URL pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm IP 104.18.2.35 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-09 10:13:46 Last Seen2024-04-29 18:17:06 Times Seen45 Hash 736c8ccf95822cca0deb19808629deec caadb6bc06845c4e8cf9a2c6bb51f11d710a3870 4e9e5f833b932d691fa1f6dbe82a2adc844b600301d7237614d886cc38288b95 Loading...

	pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm	230 B	2023-03-07	2024-04-29
Pretty URL pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm IP 104.18.2.35 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02:40 Last Seen2024-04-29 22:19:37 Times Seen2168 Hash e24ff5dd951aa477a86a9b86bacca6bb d1ec3b3e9ec64fb1ac9e071190a249c50a4b37f2 513e2a238038748e2c62eeb32ce5a73cd62e1e92ee23f72329ad291a01662987 Loading...

	pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm	68 B	2023-03-07	2024-04-29
Pretty URL pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm IP 104.18.2.35 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02:39 Last Seen2024-04-29 22:19:37 Times Seen2160 Hash 1000c000d59b4d9c777abd386a0e2e05 7697ea065d13cefe6850264e3b10feda42bf6908 2d48de2519b6e42ea8809190a486b06c03d07d55b46b4959857a3137f0461240 Loading...

	pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm	691 B	2023-03-07	2024-04-29
Pretty URL pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm IP 104.18.2.35 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02:40 Last Seen2024-04-29 22:19:37 Times Seen2179 Hash bb6055c53c1b58e20e128f58a4d20f7c 166354e3a9f44e8637c1ab329bd391226e47da18 f8c56940c814b939cc1229de868ca099b90a84735c8e1f8ff4e76df3c64ead14 Loading...

	s.yimg.com/ss/rapid-3.53.30.js	50 kB	2023-03-07	2024-04-29
Pretty URL s.yimg.com/ss/rapid-3.53.30.js IP 87.248.119.252 ASN #203220 Yahoo-UK Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:40 Last Seen2024-04-29 22:19:37 Times Seen4232 Hash 665798d28ecf9be7cbc434e75267920d 55864f76f012bb11a354c6bacdcc7769a5ec6fa2 7bc917ebee12bcd521ae88840228032579459c25a3ccf8953d8a2dbe5e085be9 Loading...

	pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm	187 B	2023-03-07	2024-04-29
Pretty URL pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm IP 104.18.2.35 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02:40 Last Seen2024-04-29 22:19:37 Times Seen2164 Hash 4e9062a7a243d814a3bed9af198f850e 1b3fca8147d03783158f2e0da2f5608e6c9ef3b4 9ea8a76bafa07c72a55a39e9ada12378ce897fc1a2a8c38cb7c7801088f4fd13 Loading...

	s.yimg.com/wm/mbr/2d60832854c4065ca1288f070ffba14e0e4a2577/bundle.js	184 kB	2023-04-08	2024-04-29
Pretty URL s.yimg.com/wm/mbr/2d60832854c4065ca1288f070ffba14e0e4a2577/bundle.js IP 87.248.119.252 ASN #203220 Yahoo-UK Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-08 08:38:01 Last Seen2024-04-29 22:19:37 Times Seen3976 Hash 9d0d35eeb38380d91dbb5f4514dd867a 41292bf95c6d373b4f57fbc158a8f37bd522b3c1 60d695ebfb8891875444d4f4b8fb0ed3983a25b6ff0521e88ad8e28a83979394 Loading...

HTTP Transactions (17)

URL IP Response Size

pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm

104.18.2.35

200 OK

41 kB

URL User Request GET HTTP/1.1
pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm
IP
104.18.2.35:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0
ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (2691), with CRLF line terminators
Size
41 kB (41278 bytes)
Hash
33e43b18a3610e12701daa81b85f9b5b
360e5d742c53d7c93581042da6b47ed9b9da289a
8788cfb96830424b229b908d993dc0d1211d96aba2fa01552fac262021cfefcc

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Yahoo
OpenPhish	phishing	Yahoo! Inc
PhishTank	phishing	Yahoo

HTTP Headers

GET /login.htm HTTP/1.1
Host: pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 16:37:45 GMT
Content-Type: text/html
Content-Length: 41278
Connection: keep-alive
Accept-Ranges: bytes
ETag: "33e43b18a3610e12701daa81b85f9b5b"
Last-Modified: Thu, 08 Feb 2024 20:56:18 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87559a0f1ef3712a-OSL

s.yimg.com/ss/rapid-3.53.30.js

87.248.119.252

200 OK

18 kB

URL GET HTTP/2
s.yimg.com/ss/rapid-3.53.30.js
IP
87.248.119.252:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
data
Size
18 kB (17971 bytes)
Hash
665798d28ecf9be7cbc434e75267920d
55864f76f012bb11a354c6bacdcc7769a5ec6fa2
7bc917ebee12bcd521ae88840228032579459c25a3ccf8953d8a2dbe5e085be9

HTTP Headers

GET /ss/rapid-3.53.30.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: 92AIVMYjH3P5yk+X5gQSgDB43yni0eheHGmE0T7Z5XLRJ+KcdETuFzIn93ajdz3gstWDzzhsGbE=
x-amz-request-id: ADDXK79CNDTZSDEC
date: Wed, 10 Apr 2024 14:02:59 GMT
last-modified: Tue, 29 Jun 2021 01:45:07 GMT
etag: "665798d28ecf9be7cbc434e75267920d-df"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, immutable
x-amz-version-id: .Bcg25AHAdRCkTvv5tMdNmGVEjznZ_m3
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 527688
content-encoding: gzip
content-length: 17971
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2

s.yimg.com/wm/mbr/2d60832854c4065ca1288f070ffba14e0e4a2577/bundle.js

87.248.119.252

200 OK

50 kB

URL GET HTTP/2
s.yimg.com/wm/mbr/2d60832854c4065ca1288f070ffba14e0e4a2577/bundle.js
IP
87.248.119.252:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (29565)
Size
50 kB (49494 bytes)
Hash
9d0d35eeb38380d91dbb5f4514dd867a
41292bf95c6d373b4f57fbc158a8f37bd522b3c1
60d695ebfb8891875444d4f4b8fb0ed3983a25b6ff0521e88ad8e28a83979394

HTTP Headers

GET /wm/mbr/2d60832854c4065ca1288f070ffba14e0e4a2577/bundle.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: CpBXkb/iDFBN83cIBNISFxjjYqiRlIc0SlqHe/Qy3IsOWLTmEf/hkApNki4nxy+WpJ/RMgiyLkY=
x-amz-request-id: DH8YQCPAKR4VBE8F
date: Mon, 11 Mar 2024 12:06:18 GMT
last-modified: Mon, 25 Oct 2021 22:38:31 GMT
etag: "9d0d35eeb38380d91dbb5f4514dd867a-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=31536000
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 3126690
content-encoding: gzip
content-length: 49494
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2

s.yimg.com/wm/mbr/2d60832854c4065ca1288f070ffba14e0e4a2577/yahoo-main.css

87.248.119.252

200 OK

106 kB

URL GET HTTP/2
s.yimg.com/wm/mbr/2d60832854c4065ca1288f070ffba14e0e4a2577/yahoo-main.css
IP
87.248.119.252:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
ASCII text, with very long lines (42867)
Size
106 kB (105491 bytes)
Hash
60e7cdbb8e9cc68615525fa631bf9c5f
18d08a0d9636defa35b62a05fb68a144612a6781
457e66b525826d433b5bacf080d25e0d79c4947e1946a65a1e8447ff6163d6bc

HTTP Headers

GET /wm/mbr/2d60832854c4065ca1288f070ffba14e0e4a2577/yahoo-main.css HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: i+B1z81BjTb/PTtGJEhFYrgiJ8ODl63T1ILxaNq8Yi+O7Ox9GUYVOcePwSJzhirYWprxCQCT6Ok=
x-amz-request-id: T7YQSZJ13YS17X6E
date: Tue, 12 Mar 2024 03:48:21 GMT
last-modified: Mon, 25 Oct 2021 22:38:31 GMT
etag: "60e7cdbb8e9cc68615525fa631bf9c5f-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=31536000
accept-ranges: bytes
content-type: text/css
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 3070166
content-encoding: gzip
content-length: 105491
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2

s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2

87.248.119.252

200 OK

29 kB

URL GET HTTP/2
s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2
IP
87.248.119.252:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 28860, version 1.0
Size
29 kB (28860 bytes)
Hash
a99b283070afc519f4816e4300c515d2
65b78d03d56de125060e61069debfc47e38fb3df
fc0e2df417e7959509df87df6b4de2eb1479c8718bc2d8ab0bc70d3753c68560

HTTP Headers

GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2 HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://s.yimg.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-amz-id-2: P7rQZyjU0rt5nK1FL0klaJEwWIU7fzenp4F//cgGPZD41KXT7lzDMQyKTT4VVzwYvt3bTXMJ2yM=
x-amz-request-id: E65NDMJMAZYFBFQ3
date: Tue, 20 Feb 2024 15:49:19 GMT
last-modified: Thu, 19 Apr 2018 19:06:41 GMT
etag: "a99b283070afc519f4816e4300c515d2"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public
x-amz-meta-created-date: Tue, 03 Oct 2017 06:22:51 GMT
x-amz-meta-mbst-etag: "YM:1:cb5e4811-e042-455c-b2b2-f984d5f70e0200055a9e8550b736"
x-amz-meta-x-ysws-mbst-vtime: 1507011771545398
expires: Sat, 05 Sep 2026 00:00:00 GMT
x-amz-meta-x-ysws-access: public
accept-ranges: bytes
content-type: font/woff2
server: ATS
content-length: 28860
referrer-policy: no-referrer-when-downgrade
age: 4841309
access-control-allow-origin: *
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: Origin
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2

s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2

87.248.119.252

200 OK

29 kB

URL GET HTTP/2
s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2
IP
87.248.119.252:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 29040, version 1.0
Size
29 kB (29040 bytes)
Hash
af9fdad7698452697b016850fff96423
710130c79bf56297f8abcc6d6c575172590133b0
b8989e0be6a0c3a8a407d8b69b7884eb5ebf401b7eee8b8b98c5eeec3ba497fa

HTTP Headers

GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2 HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://s.yimg.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-amz-id-2: PEQGrJvR/1t+jLXxoN30CXz3wzejdAB/Ye/PFmi6rOL8T/8BIg9PbPmL8kB/S1zJuhQThp3dqYo=
x-amz-request-id: WZ7X5QKQ2DNFGC5F
date: Mon, 15 Apr 2024 09:43:58 GMT
last-modified: Thu, 19 Apr 2018 17:33:29 GMT
etag: "af9fdad7698452697b016850fff96423"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public
x-amz-meta-created-date: Tue, 03 Oct 2017 06:22:51 GMT
x-amz-meta-mbst-etag: "YM:1:95620d49-21c2-4044-b803-58b70c8e419700055a9e854fb9f1"
x-amz-meta-x-ysws-mbst-vtime: 1507011771480561
expires: Sat, 05 Sep 2026 00:00:00 GMT
x-amz-meta-x-ysws-access: public
accept-ranges: bytes
content-type: font/woff2
server: ATS
content-length: 29040
referrer-policy: no-referrer-when-downgrade
age: 111230
access-control-allow-origin: *
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: Origin
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2

s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.woff2

87.248.119.252

200 OK

29 kB

URL GET HTTP/2
s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.woff2
IP
87.248.119.252:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 28808, version 1.0
Size
29 kB (28808 bytes)
Hash
632a74de7778e84fd6e92f2f6c49f1c3
9ad7f087f4c8f7bea2a0725951029c2b0943f9d4
e3b229d1d0e49226f929a219c007a701c2c2646ef75c215e427a28e36466ab1b

HTTP Headers

GET /cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.woff2 HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://s.yimg.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-amz-id-2: 3hffWZjFH26lko87n8jVt6z92wpvvbWbFQQeksrvPimmHEMa0w5L8D45ZQyJJ9PSDU12ter3BKc=
x-amz-request-id: TM32HT8QP6D32WQG
date: Sat, 13 Apr 2024 06:05:04 GMT
last-modified: Thu, 19 Apr 2018 19:01:13 GMT
etag: "632a74de7778e84fd6e92f2f6c49f1c3"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public
x-amz-meta-created-date: Tue, 03 Oct 2017 06:22:51 GMT
x-amz-meta-mbst-etag: "YM:1:1ccdd2c4-6102-4773-912a-83dcdcf0e3cd00055a9e85568140"
x-amz-meta-x-ysws-mbst-vtime: 1507011771924800
expires: Sat, 05 Sep 2026 00:00:00 GMT
x-amz-meta-x-ysws-access: public
accept-ranges: bytes
content-type: font/woff2
server: ATS
content-length: 28808
referrer-policy: no-referrer-when-downgrade
age: 297164
access-control-allow-origin: *
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: Origin
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2

s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2

87.248.119.252

200 OK

29 kB

URL GET HTTP/2
s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2
IP
87.248.119.252:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 29228, version 1.0
Size
29 kB (29228 bytes)
Hash
7c7c02dcee2bf1c2528db6092d4ad1fa
988a01f705c074261490625c70f94b2642413693
d5312dacbe6f248c6c4b60251d7acf77bc3bc891cd9b880dead36d9babb288c4

HTTP Headers

GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2 HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://s.yimg.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-amz-id-2: aTpwAQhFIjgYrCYW/CwWRDjrto8fnwAW2zSn0edvtbhuLHo8w+ShGed2ZwiozI6dUidAGWkPmOY=
x-amz-request-id: GVYDD434DAZV0N2Z
date: Tue, 19 Mar 2024 06:36:28 GMT
last-modified: Thu, 19 Apr 2018 16:25:50 GMT
etag: "7c7c02dcee2bf1c2528db6092d4ad1fa"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public
x-amz-meta-created-date: Tue, 03 Oct 2017 06:22:52 GMT
x-amz-meta-mbst-etag: "YM:1:1bb49599-26ac-442e-b6b8-f4e40f067ea500055a9e855b6ecb"
x-amz-meta-x-ysws-mbst-vtime: 1507011772247755
expires: Sat, 05 Sep 2026 00:00:00 GMT
x-amz-meta-x-ysws-access: public
accept-ranges: bytes
content-type: font/woff2
server: ATS
content-length: 29228
referrer-policy: no-referrer-when-downgrade
age: 2455279
access-control-allow-origin: *
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: Origin
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2

s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png

87.248.119.252

200 OK

1.3 kB

URL GET HTTP/2
s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png
IP
87.248.119.252:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
PNG image data, 240 x 72, 8-bit colormap, non-interlaced
Size
1.3 kB (1346 bytes)
Hash
cd166981c96c6d0f4b5a7d798c25878e
09031c4013138bb8bd54ab9092ac59aa47d7c60c
0fdefe26bac6a6b0b06fe67984582f887af70b7da25d6cb1b401f9074db58338

HTTP Headers

GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-amz-id-2: Gny8e49Npnhuwtxk2Qavi8K0Lo5Mjnj4Ah63bXj23kydLCFQbdYV2vEgIf92K5OSPy4bHA+R3C4=
x-amz-request-id: K4F10Y7G54YX996H
date: Mon, 15 Apr 2024 19:20:21 GMT
last-modified: Sun, 14 Apr 2024 21:30:45 GMT
etag: "cd166981c96c6d0f4b5a7d798c25878e"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=86400
expires: Mon, 15 Apr 2024 23:00:00 GMT
accept-ranges: bytes
content-type: image/png
server: ATS
content-length: 1346
referrer-policy: no-referrer-when-downgrade
vary: Origin
age: 76646
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2

s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png

87.248.119.252

200 OK

1.4 kB

URL GET HTTP/2
s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png
IP
87.248.119.252:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
PNG image data, 240 x 72, 8-bit colormap, non-interlaced
Size
1.4 kB (1391 bytes)
Hash
dd31f56b9e4dff40eb87447c3dc55b84
1908b34af2d15440d33dfc81fcb93aa9b271dc58
4f47ef8ff3dad2a78360ab207cf35ff2905622511c0426109f6e225052cf5637

HTTP Headers

GET /rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-amz-id-2: trOuZdp6BKyFMrQyJRQA2WXKKgy3CT5mjG6zYwQN1JDifth2tpyBDGEhlUdXNgHfsPSTDu2XFoM=
x-amz-request-id: GYKE09SJPYDA8W3A
date: Tue, 16 Apr 2024 04:11:55 GMT
last-modified: Mon, 15 Apr 2024 21:31:21 GMT
etag: "dd31f56b9e4dff40eb87447c3dc55b84"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=86400
expires: Tue, 16 Apr 2024 23:00:00 GMT
accept-ranges: bytes
content-type: image/png
server: ATS
content-length: 1391
referrer-policy: no-referrer-when-downgrade
vary: Origin
age: 44752
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2

s.yimg.com/wm/mbr/images/hide-v0.0.1.svg

87.248.119.252

200 OK

661 kB

URL GET HTTP/2
s.yimg.com/wm/mbr/images/hide-v0.0.1.svg
IP
87.248.119.252:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
661 kB (660584 bytes)
Hash
6bd15a1456d985027ba5ca91528e4b1e
4039c8e3d18429e2c9ae37d274f0ce6b1c0b7689
119acd68e288f17e86722a67e341ec74f7f6a377ec8e15b3914245f57caf6fbf

HTTP Headers

GET /wm/mbr/images/hide-v0.0.1.svg HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.yimg.com/wm/mbr/2d60832854c4065ca1288f070ffba14e0e4a2577/yahoo-main.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-amz-id-2: 5HHpGr/BKgggDIdqT0/NKCC8sStKdpGoxyLnTv4JFrXnC5t9xQNlJNq3ZqGNMsdGqztnp6OHK7riJDXeZFHEBsZDp9oJdYxO
x-amz-request-id: 7K2X6RAR2F07EBTA
date: Tue, 02 Apr 2024 05:25:18 GMT
last-modified: Tue, 16 Jul 2019 23:13:44 GMT
etag: "6bd15a1456d985027ba5ca91528e4b1e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=315360000
accept-ranges: bytes
content-type: image/svg+xml
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 1249950
content-encoding: gzip
content-length: 660584
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2

s.yimg.com/wm/mbr/images/checkbox-checked.svg

87.248.119.252

200 OK

659 B

URL GET HTTP/2
s.yimg.com/wm/mbr/images/checkbox-checked.svg
IP
87.248.119.252:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
659 B (659 bytes)
Hash
ac8c4fbeda6efad9549cb41b992a8b3a
46f532f081af894297bce53a7d212e2d253a60bf
11b4310df6e27428e7cf86f316abdc10148ac5cf3c8bbbd5b85c88b9f6290c59

HTTP Headers

GET /wm/mbr/images/checkbox-checked.svg HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.yimg.com/wm/mbr/2d60832854c4065ca1288f070ffba14e0e4a2577/yahoo-main.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-amz-id-2: MnBLMWFRh0XjySDZkAp1BgfvG1gkrMM8RcsioOqfozlftSxNYAVYsVO2HYIaghIzdlmpEyc1/uGkp+l+9dBXvVvK5Q2Bp8Dm
x-amz-request-id: 96H087FYZYN063C6
date: Tue, 09 Apr 2024 08:18:47 GMT
last-modified: Fri, 24 Apr 2020 17:13:52 GMT
etag: "ac8c4fbeda6efad9549cb41b992a8b3a-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=315360000
accept-ranges: bytes
content-type: image/svg+xml
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 634740
content-encoding: gzip
content-length: 659
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2

s.yimg.com/wm/mbr/images/yahoo-apple-touch-v0.0.2.png

87.248.119.252

200 OK

13 kB

URL GET HTTP/2
s.yimg.com/wm/mbr/images/yahoo-apple-touch-v0.0.2.png
IP
87.248.119.252:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
PNG image data, 180 x 180, 8-bit/color RGB, interlaced
Size
13 kB (12635 bytes)
Hash
a9d2dde886cd61f73365a84878c78475
6f1f1f7414116c4b01f04ee0a07b41202c2da539
b168c836ccef9cf1cbf7b2440bc11d26667c4ae19613f1e7cf5e6cdc303c7de4

HTTP Headers

GET /wm/mbr/images/yahoo-apple-touch-v0.0.2.png HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-amz-id-2: bRnzNjgAG1L0We//TzxU2XOcgsyBuBmCUHaa8R8gBWHYZ0h2bcUofG5C+2aAIbC09XRZCpKoVWiwfTveNzRbMSPD6S/wn5wUJavFyEVdh0o=
x-amz-request-id: RNKS22Y02P992Y11
date: Thu, 04 Apr 2024 09:21:16 GMT
last-modified: Thu, 12 Sep 2019 21:58:38 GMT
etag: "a9d2dde886cd61f73365a84878c78475"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=315360000
accept-ranges: bytes
content-type: image/png
server: ATS
content-length: 12635
referrer-policy: no-referrer-when-downgrade
vary: Origin
age: 1062992
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2

s.yimg.com/wm/mbr/images/yahoo-favicon-img-v0.0.2.ico

87.248.119.252

200 OK

1.4 kB

URL GET HTTP/2
s.yimg.com/wm/mbr/images/yahoo-favicon-img-v0.0.2.ico
IP
87.248.119.252:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Size
1.4 kB (1406 bytes)
Hash
b6814ae5582d7953821acbd76e977bb4
75a33fc706c2c6ba233e76c17337e466949f403c
4a491acd00880c407a2b749619003716c87e9c25ac344e5934c13e8f9aa0e8b3

HTTP Headers

GET /wm/mbr/images/yahoo-favicon-img-v0.0.2.ico HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-amz-id-2: LjEp50gFUrc7MNJxrazb0GTYuUpwO+e/ydNb1Hrhy0j2KtZB5oxuVKrRtX6UQek21GGXvaHC8/8=
x-amz-request-id: 0VY4ZCD4RW84H2V4
date: Tue, 16 Apr 2024 15:53:24 GMT
last-modified: Wed, 11 Sep 2019 18:01:04 GMT
etag: "b6814ae5582d7953821acbd76e977bb4"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=315360000
accept-ranges: bytes
content-type: image/vnd.microsoft.icon
server: ATS
content-length: 1406
referrer-policy: no-referrer-when-downgrade
vary: Origin
age: 2663
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1
X-Firefox-Spdy: h2

fc.yahoo.com/sdarla/php/client.php?l=RICH{dest:tgtRICH;asz:flex}&f=794200018&ref=https%3A%2F%2Flogin.yahoo.com%2F&sa=geminifed%253D1%2520y-bucket%253Dmbr-push-untrusted-ar%252Cmbr-fido-1fa-login%252Cmbr-rcscore-threshold%252Cmbr-qr-comet-sdk%252Cmbr-native-template%252Cmbr-yak-ui-improvement

87.248.119.252

404 Not Found

5.0 kB

URL GET HTTP/2
fc.yahoo.com/sdarla/php/client.php?l=RICH{dest:tgtRICH;asz:flex}&f=794200018&ref=https%3A%2F%2Flogin.yahoo.com%2F&sa=geminifed%253D1%2520y-bucket%253Dmbr-push-untrusted-ar%252Cmbr-fido-1fa-login%252Cmbr-rcscore-threshold%252Cmbr-qr-comet-sdk%252Cmbr-native-template%252Cmbr-yak-ui-improvement
IP
87.248.119.252:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (384)
Size
5.0 kB (5027 bytes)
Hash
59abf93b439590e9af8976f7074e8021
daf994b6ba52ead235ca5b9f68ca811a50d8192c
86e73f571e0c1b880a8b0c52253916076d207134604c4dc9518fb4a41cc22635

HTTP Headers

GET /sdarla/php/client.php?l=RICH{dest:tgtRICH;asz:flex}&f=794200018&ref=https%3A%2F%2Flogin.yahoo.com%2F&sa=geminifed%253D1%2520y-bucket%253Dmbr-push-untrusted-ar%252Cmbr-fido-1fa-login%252Cmbr-rcscore-threshold%252Cmbr-qr-comet-sdk%252Cmbr-native-template%252Cmbr-yak-ui-improvement HTTP/1.1
Host: fc.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
date: Tue, 16 Apr 2024 16:37:46 GMT
server: ATS
cache-control: no-store
content-type: text/html
content-language: en
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
set-cookie: A3=d=AQABBFqpHmYCEHLXnEkEI_fYE1WpBG9rH_sFEgEBAQH6H2YoZvmfzSMA_eMAAA&S=AQAAAjl9YSQcSYz2-YIGMTkSW1Q; Expires=Wed, 16 Apr 2025 22:37:46 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
content-length: 5027
X-Firefox-Spdy: h2

3p-udc.yahoo.com/v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=794200018&yhlCT=2&yhlBTMS=1713285466563&yhlClientVer=3.53.30&yhlRnd=KaJl5T1PyREsM1dR&yhlCompressed=0

188.125.72.139

204 No Content

0 B

URL POST HTTP/2
3p-udc.yahoo.com/v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=794200018&yhlCT=2&yhlBTMS=1713285466563&yhlClientVer=3.53.30&yhlRnd=KaJl5T1PyREsM1dR&yhlCompressed=0
IP
188.125.72.139:443
ASN
#34010 Yahoo-UK Limited

Requested by
https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm
Certificate
IssuerDigiCert Inc
Subjectyahoo.com
Fingerprint36:A7:B0:5A:BE:AF:8C:B2:89:38:0B:50:1C:E5:7E:0D:2D:94:E9:79
ValidityTue, 20 Feb 2024 00:00:00 GMT - Wed, 14 Aug 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=794200018&yhlCT=2&yhlBTMS=1713285466563&yhlClientVer=3.53.30&yhlRnd=KaJl5T1PyREsM1dR&yhlCompressed=0 HTTP/1.1
Host: 3p-udc.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 1645
Origin: https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
access-control-allow-origin: https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev
vary: Origin
access-control-allow-credentials: true
cache-control: no-store, no-cache, private, max-age=0
p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
pragma: no-cache
expires: -1
x-envoy-upstream-service-time: 1
date: Tue, 16 Apr 2024 16:37:46 GMT
server: ATS
age: 0
strict-transport-security: max-age=31536000
set-cookie: A3=d=AQABBFqpHmYCEL0F2bIqwyZj8ckMhggc2d4FEgEBAQH6H2YoZvmbzSMA_eMAAA&S=AQAAAqxM3ut5gQUcmkEtN1tPH34; Expires=Wed, 16 Apr 2025 22:37:46 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2

s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.woff2

87.248.119.252

200 OK

28 kB

URL GET HTTP/2
s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.woff2
IP
87.248.119.252:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev/login.htm
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 28108, version 1.0
Size
28 kB (28108 bytes)
Hash
58b9e3ca84accc5d50ac893317cd6705
fd393c1f50fd2f771deb92bf8b26bd39f97db2c5
22e9e86d745200109fbcb3e96695307fea67880fca509728194b2cfce3906fa7

HTTP Headers

GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.woff2 HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pub-1a3a14c1e48e4021816d1d96578a9031.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://s.yimg.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-amz-id-2: 8u9gLmugGBp4XRv/TP59L9XW5YXvNxlLzSIBQuV6OQaiY1vHHjurOKdpSo0+d6ZNd28AOmUsyFY=
x-amz-request-id: AH3Z77GPKGQVVQ4K
date: Thu, 15 Feb 2024 09:25:00 GMT
last-modified: Thu, 19 Apr 2018 17:20:37 GMT
etag: "58b9e3ca84accc5d50ac893317cd6705"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public
x-amz-meta-created-date: Tue, 03 Oct 2017 06:22:52 GMT
x-amz-meta-mbst-etag: "YM:1:5893a8ed-f86d-4278-b1dc-94c16c36132200055a9e85598641"
x-amz-meta-x-ysws-mbst-vtime: 1507011772122689
expires: Sat, 05 Sep 2026 00:00:00 GMT
x-amz-meta-x-ysws-access: public
accept-ranges: bytes
content-type: font/woff2
server: ATS
content-length: 28108
referrer-policy: no-referrer-when-downgrade
age: 5296373
access-control-allow-origin: *
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: Origin
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (17)

URL User Request GET HTTP/1.1

IP

ASN

Certificate