{"report_id":"2e096947-28da-466b-be60-9266312847c4","version":0,"status":"done","tags":[],"date":"2026-07-22T10:01:27Z","url":{"schema":"http","addr":"att-internet.serviceroute.site","fqdn":"att-internet.serviceroute.site","domain":"serviceroute.site","tld":"site"},"ip":{"addr":"172.67.150.7","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"att-internet.serviceroute.site/","fqdn":"att-internet.serviceroute.site","domain":"serviceroute.site","tld":"site"},"title":"Check Your Address for New AT\u0026T Service Options. | Serviceroute","dom":{"size":8107,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (8107), with no line terminators","md5":"1c04b5cdbb3ce24881ab1c24f61d2a74","sha1":"3e4907df6dcde4fa3145a0a5a11b1104f951d813","sha256":"c2fdef90594f5c819e9f92c1b01e3c284c29a1df5e307a847edcd45f3812a0ba","sha512":"3cce0b21a0c5ce0e8583d24e8b7466e365c5be0e83420edbe2abec2639ac6d5153d72e1e9ed785d5b403bb435efc30f9ef73c9b29b65d815cb2ac3a25be1bde8","ssdeep":"192:GdpPFNFotCVA50W/ya0Yi9XP0BBJ4vSbDYI:UpPFN+tk7Gi9XP0mvIMI","tlshash":"31f1732752c032766a231adeaf97678463bd80ace2601d0072fe5e9c47e1d1dd72e52b","dom_hash":"domhashc3065ba7f28276f1acd9a1bf353aa538","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"att-internet.serviceroute.site","fqdn":"att-internet.serviceroute.site","domain":"serviceroute.site","tld":"site"},"ip":{"addr":"172.67.150.7","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T10:01:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"att-internet.serviceroute.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"att-internet.serviceroute.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"att-internet.serviceroute.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"att-internet.serviceroute.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"att-internet.serviceroute.site","ip":{"addr":"104.21.11.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-13","domain_rank":0,"first_seen":"2026-07-22T09:43:54.071334Z","last_seen":"2026-07-22T09:43:54.071334Z","alert_count":20,"request_count":5,"received_data":292147,"sent_data":2528,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"att-internet.serviceroute.site/assets/site.js","fqdn":"att-internet.serviceroute.site","domain":"serviceroute.site","tld":"site"},"ip":{"addr":"104.21.11.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1c1c221ca16632f5317a8dce442b564","sha1":"40aae8aac99f43531b893b023a28b1d0f53caddf","sha256":"b527ee5e5258c8b587e8296135c9bae7aeaf34f3b9f2a046b6a9a027d31dcbc9","sha512":"096053faa25a077c628c04beed5d5a1bac6212403f8cab53aba8f4c41a824ceaeb27cb920f78aab676f86fd2702f1c5bf8b489e9431ef748dab01f1e0ddf0d1d","ssdeep":"","tlshash":"8c216236309431378a3047e7f5c553a0f83ca889314a588d793c8d811ce2d0226b1df8","size":1251,"data":"","first_seen":"2026-07-22T09:44:00.53272Z","last_seen":"2026-07-22T10:01:28.746373Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"att-internet.serviceroute.site/favicon.ico","fqdn":"att-internet.serviceroute.site","domain":"serviceroute.site","tld":"site"},"ip":{"addr":"104.21.11.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://att-internet.serviceroute.site/","date":"2026-07-22T10:01:01.128Z","timestamp":1784714461128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"att-internet.serviceroute.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 02:58:09 GMT","end":"Mon, 19 Oct 2026 03:58:01 GMT"},"fingerprint":{"sha1":"63:B5:F1:65:4F:E5:6C:61:28:4D:36:69:DC:01:11:75:6C:B7:50:D0","sha256":"9B:D8:7B:A0:E1:51:76:2E:C3:17:8A:2C:7F:6A:FE:2D:FD:E5:30:A0:D5:8B:C2:BE:53:6C:88:9F:47:1D:31:D6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: att-internet.serviceroute.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://att-internet.serviceroute.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8MPmWB45DAbaO5UGX5H2xkHYnjWt8o7g6H737AqCuIpFKNWzMt2n0IA0KxC%2B7Yrxxkr3GRhVkTZLjmRKCY9nW2ueR5z4fqHb54GCX9eDrZgixHsB2qaQPuobhowpE5tZITb65DOBrWmLIl1dOwWsRWI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: EXPIRED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nlast-modified: Wed, 22 Jul 2026 10:01:01 GMT\r\ncf-ray: a1f19a06092bb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8178,"size_decoded":3452,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (8178), with no line terminators","md5":"6a824e6cbf59099ee885d9cb84f16703","sha1":"3109ab9cfd6b408bb995dcf335e4a6a77f21a2f9","sha256":"50b3ed8be4cbd002176bc34ef76b33c6eddb6bafad2652e383e081a8e96fe5ab","sha512":"588b2b0316eaab1e6c7292f38c3ab1d86f45bb1ee5767a542c291d0a06b17b4da4f15cae8253d9ff98c436cec1c54806dd1ca44d093c65d4ecfcc732b813e143","ssdeep":"192:6dP5FN8otCVA50WSya0YiFWP0uBJ4vSmDYX:QP5FN3tk8GiFWP0pvvMX","tlshash":"e7f1852751c022776b130acaaf9723c4a3fe84acf2501d0071be5eac47e1d1ad73a56b","first_seen":"2026-07-22T09:44:00.537987Z","last_seen":"2026-07-22T10:01:28.744649Z","times_seen":3,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"att-internet.serviceroute.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"att-internet.serviceroute.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"att-internet.serviceroute.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"att-internet.serviceroute.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"att-internet.serviceroute.site/","fqdn":"att-internet.serviceroute.site","domain":"serviceroute.site","tld":"site"},"ip":{"addr":"104.21.11.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:01:00.754Z","timestamp":1784714460754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"att-internet.serviceroute.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 02:58:09 GMT","end":"Mon, 19 Oct 2026 03:58:01 GMT"},"fingerprint":{"sha1":"63:B5:F1:65:4F:E5:6C:61:28:4D:36:69:DC:01:11:75:6C:B7:50:D0","sha256":"9B:D8:7B:A0:E1:51:76:2E:C3:17:8A:2C:7F:6A:FE:2D:FD:E5:30:A0:D5:8B:C2:BE:53:6C:88:9F:47:1D:31:D6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: att-internet.serviceroute.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y1RKGjDg5Wn5E12T8PiRfU5N30RtSLdb2Bz7buGAjM0w%2Fkh5KwhWQ1pQTI9i5fe8D0Qc5g7lruAwskDrnZxy785NluMPgJnyy6WcCb1WlynguemCKnpe2LsdS9rQGFPFEGMXk%2FVXnxO7RWGn7tTBuHM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Wed, 22 Jul 2026 10:01:00 GMT\r\ncf-ray: a1f19a03d923b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8178,"size_decoded":3401,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (8178), with no line terminators","md5":"6a824e6cbf59099ee885d9cb84f16703","sha1":"3109ab9cfd6b408bb995dcf335e4a6a77f21a2f9","sha256":"50b3ed8be4cbd002176bc34ef76b33c6eddb6bafad2652e383e081a8e96fe5ab","sha512":"588b2b0316eaab1e6c7292f38c3ab1d86f45bb1ee5767a542c291d0a06b17b4da4f15cae8253d9ff98c436cec1c54806dd1ca44d093c65d4ecfcc732b813e143","ssdeep":"192:6dP5FN8otCVA50WSya0YiFWP0uBJ4vSmDYX:QP5FN3tk8GiFWP0pvvMX","tlshash":"e7f1852751c022776b130acaaf9723c4a3fe84acf2501d0071be5eac47e1d1ad73a56b","first_seen":"2026-07-22T09:44:00.537987Z","last_seen":"2026-07-22T10:01:28.744649Z","times_seen":3,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":4,"connect":16,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"att-internet.serviceroute.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"att-internet.serviceroute.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"att-internet.serviceroute.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"att-internet.serviceroute.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"att-internet.serviceroute.site/assets/styles.css","fqdn":"att-internet.serviceroute.site","domain":"serviceroute.site","tld":"site"},"ip":{"addr":"104.21.11.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://att-internet.serviceroute.site/","date":"2026-07-22T10:01:01.069Z","timestamp":1784714461069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"att-internet.serviceroute.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 02:58:09 GMT","end":"Mon, 19 Oct 2026 03:58:01 GMT"},"fingerprint":{"sha1":"63:B5:F1:65:4F:E5:6C:61:28:4D:36:69:DC:01:11:75:6C:B7:50:D0","sha256":"9B:D8:7B:A0:E1:51:76:2E:C3:17:8A:2C:7F:6A:FE:2D:FD:E5:30:A0:D5:8B:C2:BE:53:6C:88:9F:47:1D:31:D6"}}},"request":{"raw":"GET /assets/styles.css HTTP/1.1\r\nHost: att-internet.serviceroute.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://att-internet.serviceroute.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ftzHhB4K%2BJ1G7fV%2Bs8LTWgCxLB5OroOZeVIO1TBilSwy%2Fsvvl38UuL3fh7QKdtZbPErhsSa5AeOdBLn9LKzYfr3WbGTAj6E0FXnBR7XZbepxz0eNg0mrbuHqS05FhM03qIi5PbY4oUv14J%2F54x%2BblVI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"855db284a28c21b72525fd6c44b5b5ec\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\ncf-ray: a1f19a05a928b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6756,"size_decoded":2814,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (6756), with no line terminators","md5":"46c08a225810ff6ae4bb9f05407e0c27","sha1":"003f05bf9597ae1aac975f2a37c3999bdf21cd69","sha256":"d7837754c68f332fb06e5d29b9ba80a2931b7a1819d2b4b1fa28c529422c879f","sha512":"c46e4ea1a8fac901855674095059caf7535116a004457d3b4b4cd1465d2c872bcc9956322995f4638c7fef39640048f577dda4732002cfbf5a0f28406cef3516","ssdeep":"96:E86zyQUb4Jngy0QHLz1dxwEkoeJ1F1mHLu2sGAjERz68tczQErdM:V6hBgy0qzbaT1FYHLdpvR+IErK","tlshash":"a6d163ba9661b63cb93bf590e5e4278d7024f116c92387d6fd82d72489c76f309b0a0d","first_seen":"2026-07-22T09:44:00.54084Z","last_seen":"2026-07-22T10:01:28.745521Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"att-internet.serviceroute.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"att-internet.serviceroute.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"att-internet.serviceroute.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"att-internet.serviceroute.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"att-internet.serviceroute.site/assets/site.js","fqdn":"att-internet.serviceroute.site","domain":"serviceroute.site","tld":"site"},"ip":{"addr":"104.21.11.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://att-internet.serviceroute.site/","date":"2026-07-22T10:01:01.071Z","timestamp":1784714461071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"att-internet.serviceroute.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 02:58:09 GMT","end":"Mon, 19 Oct 2026 03:58:01 GMT"},"fingerprint":{"sha1":"63:B5:F1:65:4F:E5:6C:61:28:4D:36:69:DC:01:11:75:6C:B7:50:D0","sha256":"9B:D8:7B:A0:E1:51:76:2E:C3:17:8A:2C:7F:6A:FE:2D:FD:E5:30:A0:D5:8B:C2:BE:53:6C:88:9F:47:1D:31:D6"}}},"request":{"raw":"GET /assets/site.js HTTP/1.1\r\nHost: att-internet.serviceroute.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://att-internet.serviceroute.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fav46TQdY9%2FsSanjdNLyEcNVSpHVQP7uuMZUYiqSk3jYvA4bs6035HiTpaK8sDP4QHto5uI6Qgt%2BRiUqqPZnGZ6MniNPUuM2%2F721YNrQmLLBOdDTLFl8pcUxVeATR%2BX%2Bt9MyoqPigiXUOHbtk1yWVi8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"c466cf94240d6449a757785f1df99085\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\ncf-ray: a1f19a05a929b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1251,"size_decoded":1510,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1251), with no line terminators","md5":"e1c1c221ca16632f5317a8dce442b564","sha1":"40aae8aac99f43531b893b023a28b1d0f53caddf","sha256":"b527ee5e5258c8b587e8296135c9bae7aeaf34f3b9f2a046b6a9a027d31dcbc9","sha512":"096053faa25a077c628c04beed5d5a1bac6212403f8cab53aba8f4c41a824ceaeb27cb920f78aab676f86fd2702f1c5bf8b489e9431ef748dab01f1e0ddf0d1d","ssdeep":"","tlshash":"8c216236309431378a3047e7f5c553a0f83ca889314a588d793c8d811ce2d0226b1df8","first_seen":"2026-07-22T09:44:00.53272Z","last_seen":"2026-07-22T10:01:28.746373Z","times_seen":3,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"att-internet.serviceroute.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"att-internet.serviceroute.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"att-internet.serviceroute.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"att-internet.serviceroute.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"att-internet.serviceroute.site/assets/hero.jpg","fqdn":"att-internet.serviceroute.site","domain":"serviceroute.site","tld":"site"},"ip":{"addr":"104.21.11.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://att-internet.serviceroute.site/","date":"2026-07-22T10:01:01.078Z","timestamp":1784714461078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"att-internet.serviceroute.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 02:58:09 GMT","end":"Mon, 19 Oct 2026 03:58:01 GMT"},"fingerprint":{"sha1":"63:B5:F1:65:4F:E5:6C:61:28:4D:36:69:DC:01:11:75:6C:B7:50:D0","sha256":"9B:D8:7B:A0:E1:51:76:2E:C3:17:8A:2C:7F:6A:FE:2D:FD:E5:30:A0:D5:8B:C2:BE:53:6C:88:9F:47:1D:31:D6"}}},"request":{"raw":"GET /assets/hero.jpg HTTP/1.1\r\nHost: att-internet.serviceroute.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://att-internet.serviceroute.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w3T2QAbOxZr7oON4%2FepqXuMce0%2BksqoyZv3M8dAow3MngTXujsfLXjVdoJOR4pbnCTSAXHTyk5Imc2IYe26RKYRwLwgoS2ibYQx8sAITqSBRD20cloE35zvQKBQOVFinZ4ChD%2F16r6f6gEF6nfLpofg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a5f1e195afa51b577e9a64a91d802ce9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\naccept-ranges: bytes\r\ncf-ray: a1f19a05b92ab50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 263615\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":263615,"size_decoded":264446,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1800x1200, components 3","md5":"61b4da6f0de4625269b52b077cb86f88","sha1":"7601379606f8fdedf33f14997279c8a41ce64f47","sha256":"91b8de3c6ea58933d502ac0c97e6ba829e1d0ff4058ebb96e16feb531434e298","sha512":"c52c03903f82934efbb8c1b177ccd5d546c83754740f760ae6fad27731d1fc49ebbc4598335461df08ab5b2cba0ca314f1067c56257d159dd74f1cc15a7dd4c9","ssdeep":"6144:+Vfrj7nl9Uhseg+YWBX9bxSptSu4snz5mJ6Ogd0Ru5:G/7lemeg+tip4u4sVmJ90Cu5","tlshash":"604423f60fe65a77d94e61b21aefc7024029295d3721d1bf591ccb6e039e938a739c08","first_seen":"2026-07-22T09:44:00.534905Z","last_seen":"2026-07-22T10:01:28.747172Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"att-internet.serviceroute.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"att-internet.serviceroute.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"att-internet.serviceroute.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"att-internet.serviceroute.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}