{"report_id":"c40ee849-96cb-4b40-966e-15a025499316","version":0,"status":"done","tags":[],"date":"2026-08-11T10:54:44Z","url":{"schema":"http","addr":"essentialoilroots.com/docs/sbcglobal","fqdn":"essentialoilroots.com","domain":"essentialoilroots.com","tld":"com"},"ip":{"addr":"132.148.176.108","port":0,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"essentialoilroots.com/docs/sbcglobal/","fqdn":"essentialoilroots.com","domain":"essentialoilroots.com","tld":"com"},"title":"Login Screen","dom":{"size":39602,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1295)","md5":"9d15dc3238f077c3670d4f914e9ebd36","sha1":"9b4fa987ff0ae3c1de4d20d337fea0e86cefe55f","sha256":"f636e15a9541c81dc72fbba17d2140732d74a41f906b9b0b7dd5d9dbdf2a42db","sha512":"bc147ccd259de34fb36a303aef94d0033ccbdc24c51be794d68efcafb664bf9438c1ab56db7e3fa40841414ce7dcbe3d4373d1d327318e91bec1b915443e3659","ssdeep":"384:4H4rxNjajQWRrtjKRksT3W/P87w3WOEDPr6UcR03p2Vl:4HybjajZrtjKtTCyOO6RqW","tlshash":"d703846b25f721652953a97863fb2b14b230c413d50acd587eec13488fdbb958ca63cd","dom_hash":"domhasha6a461db52972a35c0139c4c23fb979d","first_seen":"2026-08-11T09:47:36.531674Z","last_seen":"2026-08-11T10:54:44.946934Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"essentialoilroots.com/docs/sbcglobal","fqdn":"essentialoilroots.com","domain":"essentialoilroots.com","tld":"com"},"ip":{"addr":"132.148.176.108","port":0,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-15T10:54:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"essentialoilroots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-11","alert":"Phishing Block","trigger":"essentialoilroots.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"essentialoilroots.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"essentialoilroots.com","ip":{"addr":"132.148.176.108","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"domain_registered":"2024-05-29","domain_rank":0,"first_seen":"2026-08-11T10:49:35.572857Z","last_seen":"2026-08-11T10:49:35.572857Z","alert_count":9,"request_count":3,"received_data":43367,"sent_data":1542,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"signin.att.com","ip":{"addr":"144.161.106.163","port":443,"asn":797,"as":"AMERITECH-AS","country":"United States","country_code":"US"},"domain_registered":"1986-04-25","domain_rank":60762,"first_seen":"2020-05-01T03:57:09Z","last_seen":"2026-08-11T09:47:32.170555Z","alert_count":0,"request_count":5,"received_data":48257,"sent_data":3001,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"essentialoilroots.com/docs/sbcglobal/","fqdn":"essentialoilroots.com","domain":"essentialoilroots.com","tld":"com"},"ip":{"addr":"132.148.176.108","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"acaf1bc0290d9968e9cb651e0f0c7076","sha1":"c4d1f263da8d2940c6cf7a412632e551f410e818","sha256":"2ba4af145a5037e56063f771f7856c2d402982bedd58ecec679e79d4b1124c7e","sha512":"911c90771afcea2304ad199f1745af4c15d21b1dde9c71ba1ddbb374973ef71b736f18bca017b100b5a4573b0f40f7fa17807c45d08ba4682c6408a295d4d3be","ssdeep":"48:Gqcg202h2XjGFuWbOGA/960XdSmyS0dPWsSbsvcwOeIDjfatYhPTGWbBlGh95Jmo:3ADN0/NSNS0lWdbRRUYhD25GYd","tlshash":"d2b1d17635e3283509f7a9aa13d75544352050137882dd907abccb0d5fbaf826873bdb","size":5565,"data":"","first_seen":"2026-08-11T09:47:36.551259Z","last_seen":"2026-08-11T10:54:44.955273Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"essentialoilroots.com/docs/sbcglobal","fqdn":"essentialoilroots.com","domain":"essentialoilroots.com","tld":"com"},"ip":{"addr":"132.148.176.108","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-11T10:54:16.329Z","timestamp":1786445656329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"essentialoilroots.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 15 Oct 2025 16:37:53 GMT","end":"Thu, 15 Oct 2026 16:37:53 GMT"},"fingerprint":{"sha1":"6F:50:D1:3C:AA:B2:FA:5F:53:7B:36:64:C7:04:F5:0D:75:E4:3E:68","sha256":"B5:23:01:35:97:53:78:FA:41:C4:AD:CC:A4:AE:D6:F6:BC:21:54:44:E4:05:1B:E4:D4:55:AA:D9:2F:C6:D9:FF"}}},"request":{"raw":"GET /docs/sbcglobal HTTP/1.1\r\nHost: essentialoilroots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nlocation: https://essentialoilroots.com/docs/sbcglobal/\r\ncontent-length: 293\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Tue, 11 Aug 2026 10:54:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":true,"data":null}},"time_used":678,"timings":{"blocked":-1,"dns":58,"connect":152,"send":0,"wait":160,"receive":0,"ssl":307},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"essentialoilroots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-11","alert":"Phishing Block","trigger":"essentialoilroots.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"essentialoilroots.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essentialoilroots.com/docs/sbcglobal/","fqdn":"essentialoilroots.com","domain":"essentialoilroots.com","tld":"com"},"ip":{"addr":"132.148.176.108","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-11T10:54:17.014Z","timestamp":1786445657014,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"essentialoilroots.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 15 Oct 2025 16:37:53 GMT","end":"Thu, 15 Oct 2026 16:37:53 GMT"},"fingerprint":{"sha1":"6F:50:D1:3C:AA:B2:FA:5F:53:7B:36:64:C7:04:F5:0D:75:E4:3E:68","sha256":"B5:23:01:35:97:53:78:FA:41:C4:AD:CC:A4:AE:D6:F6:BC:21:54:44:E4:05:1B:E4:D4:55:AA:D9:2F:C6:D9:FF"}}},"request":{"raw":"GET /docs/sbcglobal/ HTTP/1.1\r\nHost: essentialoilroots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sat, 25 Jan 2025 06:21:00 GMT\r\netag: \"3cc04f2-a6cb-62c81d8cd4b00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 7763\r\ncontent-type: text/html\r\ndate: Tue, 11 Aug 2026 10:54:17 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":42699,"size_decoded":8054,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1230)","md5":"d85234549960603e5a2f30ee62aad928","sha1":"cabd073aeaeeb0563913d3fcb1242c2d72f98291","sha256":"b6eedd89fbbeb2eb81ea2bf6cf66890737ec0664fe274abb8a9fadc8f8d7fcb4","sha512":"4e1ef5129e2e6a3546a42a4daea0d3de92c2c969ed07e47a703d7de1fd811bbe561ef3861993de90cbf7f25427d0289771bd2f5a8b1f01a3eab8b17468c16c3d","ssdeep":"384:UH4rxNjajQWRr3xOVksTvB/N87w3wgXEDPr6+CR03p2VF:UHybjajZr3xOZTz8GOiRqO","tlshash":"9713736b29f720a52857a97863fb2b14b230c013d50acd587eec13448fdbb958da63cd","first_seen":"2026-08-11T09:47:36.548606Z","last_seen":"2026-08-11T10:54:44.94884Z","times_seen":2,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-11","alert":"Phishing Block","trigger":"essentialoilroots.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"essentialoilroots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"essentialoilroots.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"signin.att.com/static/siam/en/halo_c/halo-c-login/assets/fonts/att/ATTAleckSans/woff2/ATTAleckSans_W_Rg.woff2","fqdn":"signin.att.com","domain":"att.com","tld":"com"},"ip":{"addr":"144.161.106.163","port":443,"asn":797,"as":"AMERITECH-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://essentialoilroots.com/docs/sbcglobal/","date":"2026-08-11T10:54:17.598Z","timestamp":1786445657598,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.att.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 10 Dec 2025 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B7:7A:B7:DD:66:52:52:9C:BD:3E:C9:26:DE:0B:98:64:78:BC:3A:32","sha256":"98:31:8E:1A:08:DA:D7:18:7D:4B:00:A6:4C:1E:F5:7B:5B:BF:B7:41:43:E5:9A:12:6C:32:2A:CB:F6:C8:9D:55"}}},"request":{"raw":"GET /static/siam/en/halo_c/halo-c-login/assets/fonts/att/ATTAleckSans/woff2/ATTAleckSans_W_Rg.woff2 HTTP/1.1\r\nHost: signin.att.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://essentialoilroots.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essentialoilroots.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-length: 18480\r\ncontent-type: font/woff2\r\ndate: Tue, 11 Aug 2026 10:54:18 GMT\r\netag: \"4830-65630498db10f\"\r\nlast-modified: Thu, 09 Jul 2026 16:40:52 GMT\r\np3p: CP=\"NON CUR OTPi OUR NOR UNI\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\napser: p208\r\ncontent-security-policy: default-src 'self' 'nonce-yZH1BNxNo8KBZ1hb1mrFFl' https://*.att.com https://*.att.net https://*.arkoselabs.com https://*.quantummetric.com https://*.doubleclick.net https://*.dynatrace.com https://dpm.demdex.net wss://*.att.com 'unsafe-eval' 'unsafe-hashes' 'sha256-ZImpjyxSqdretajIQ3vpAcTYroKrDlaSp3fWptNrHZo=' 'sha256-kbHtQyYDQKz4SWMQ8OHVol3EC0t3tHEJFPCSwNG9NxQ='; img-src 'self' data: https://*.att.com https://*.att.net; style-src 'self' https://*.att.com https://*.att.net 'unsafe-inline'; worker-src blob:; frame-src https://*.arkoselabs.com; upgrade-insecure-requests; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\niam_on: A948\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]}],"data":{"size":18480,"size_decoded":19519,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18480, version 1.0","md5":"15d443231ff3a13b0dcab5a9b8fd7276","sha1":"8833865f3777104a8d58943779c3c47cd9b0ba09","sha256":"e2740c7b209e33aca7176250d80f94b4924e5e5d18076ee3b95f32a0e20d1f58","sha512":"b475833f63ac87a71263d06698f8d8d97c5ebf06869e2d7a8d4719d4a85d886817fe7e9c602f4dceb93c130946f319a3c468040af2da08ec1f6bf339bd74794f","ssdeep":"384:7D4KwqZYhcok8+w/5nW0Rp4bJcLHwrQIk3CRc4BfO/QM:/4KBYhcoyuR4bJUaTumfOV","tlshash":"2a82d007bf879272b93ac6741e2ef9000a4c6f71f57047d0ba2b762e4ebf7651560891","first_seen":"2023-04-06T15:01:00Z","last_seen":"2026-08-11T10:54:44.950122Z","times_seen":2884,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":130,"connect":113,"send":0,"wait":117,"receive":112,"ssl":359},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin.att.com/static/siam/en/halo_c/halo-c-login/assets/fonts/att/ATTAleckSans/woff2/ATTAleckSans_W_Bd.woff2","fqdn":"signin.att.com","domain":"att.com","tld":"com"},"ip":{"addr":"144.161.106.163","port":443,"asn":797,"as":"AMERITECH-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://essentialoilroots.com/docs/sbcglobal/","date":"2026-08-11T10:54:17.600Z","timestamp":1786445657600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.att.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 10 Dec 2025 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B7:7A:B7:DD:66:52:52:9C:BD:3E:C9:26:DE:0B:98:64:78:BC:3A:32","sha256":"98:31:8E:1A:08:DA:D7:18:7D:4B:00:A6:4C:1E:F5:7B:5B:BF:B7:41:43:E5:9A:12:6C:32:2A:CB:F6:C8:9D:55"}}},"request":{"raw":"GET /static/siam/en/halo_c/halo-c-login/assets/fonts/att/ATTAleckSans/woff2/ATTAleckSans_W_Bd.woff2 HTTP/1.1\r\nHost: signin.att.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://essentialoilroots.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essentialoilroots.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-length: 18648\r\ncontent-type: font/woff2\r\ndate: Tue, 11 Aug 2026 10:54:18 GMT\r\netag: \"48d8-65630498dad27\"\r\nlast-modified: Thu, 09 Jul 2026 16:40:52 GMT\r\np3p: CP=\"NON CUR OTPi OUR NOR UNI\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\napser: p206\r\ncontent-security-policy: default-src 'self' 'nonce-FgMifi5HuWeKk52mCYqRAv' https://*.att.com https://*.att.net https://*.arkoselabs.com https://*.quantummetric.com https://*.doubleclick.net https://*.dynatrace.com https://dpm.demdex.net wss://*.att.com 'unsafe-eval' 'unsafe-hashes' 'sha256-ZImpjyxSqdretajIQ3vpAcTYroKrDlaSp3fWptNrHZo=' 'sha256-kbHtQyYDQKz4SWMQ8OHVol3EC0t3tHEJFPCSwNG9NxQ='; img-src 'self' data: https://*.att.com https://*.att.net; style-src 'self' https://*.att.com https://*.att.net 'unsafe-inline'; worker-src blob:; frame-src https://*.arkoselabs.com; upgrade-insecure-requests; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\niam_on: A948\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18648,"size_decoded":19687,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18648, version 1.0","md5":"a2d24deeb37e8b4a64b5536ecb11897a","sha1":"afcaaba991ff5bffceda661dfa5e8e8f1e2d11ae","sha256":"37a1212cc1ab5c935d9a3fee05c98c940eaa895a23510e5f83d550dfbb0d763f","sha512":"1ff4a0ab5b9ef504f562168124984d74dd600a9b99522a5c6c08b252b4032f3a3ec395917875167c30170d1f35fd5eff223fde46fca60363867a4ada27af3fd7","ssdeep":"384:/0DW/LIHS+OYvV8fSUHHc0CTP8y62zZQ84vm:S2IyNpncxPjhVX","tlshash":"d082e01b06d9af3df468e27445cae6dcc34dd033d41d90dc8162a8b8d752026d6baefa","first_seen":"2023-04-14T04:00:40Z","last_seen":"2026-08-11T10:54:44.95159Z","times_seen":2806,"resource_available":false,"data":null}},"time_used":899,"timings":{"blocked":-1,"dns":129,"connect":118,"send":0,"wait":201,"receive":69,"ssl":381},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin.att.com/static/siam/en/halo_c/images/logos/att_hz_lg_lkp_rgb_pos.svg","fqdn":"signin.att.com","domain":"att.com","tld":"com"},"ip":{"addr":"144.161.106.163","port":443,"asn":797,"as":"AMERITECH-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://essentialoilroots.com/docs/sbcglobal/","date":"2026-08-11T10:54:17.605Z","timestamp":1786445657605,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.att.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 10 Dec 2025 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B7:7A:B7:DD:66:52:52:9C:BD:3E:C9:26:DE:0B:98:64:78:BC:3A:32","sha256":"98:31:8E:1A:08:DA:D7:18:7D:4B:00:A6:4C:1E:F5:7B:5B:BF:B7:41:43:E5:9A:12:6C:32:2A:CB:F6:C8:9D:55"}}},"request":{"raw":"GET /static/siam/en/halo_c/images/logos/att_hz_lg_lkp_rgb_pos.svg HTTP/1.1\r\nHost: signin.att.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essentialoilroots.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-length: 4672\r\ncontent-type: image/svg+xml\r\ndate: Tue, 11 Aug 2026 10:54:18 GMT\r\netag: \"1240-65630498dd438\"\r\nlast-modified: Thu, 09 Jul 2026 16:40:52 GMT\r\np3p: CP=\"NON CUR OTPi OUR NOR UNI\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\napser: p206\r\ncontent-security-policy: default-src 'self' 'nonce-imQm1sIgapSdfBxuajRHfN' https://*.att.com https://*.att.net https://*.arkoselabs.com https://*.quantummetric.com https://*.doubleclick.net https://*.dynatrace.com https://dpm.demdex.net wss://*.att.com 'unsafe-eval' 'unsafe-hashes' 'sha256-ZImpjyxSqdretajIQ3vpAcTYroKrDlaSp3fWptNrHZo=' 'sha256-kbHtQyYDQKz4SWMQ8OHVol3EC0t3tHEJFPCSwNG9NxQ='; img-src 'self' data: https://*.att.com https://*.att.net; style-src 'self' https://*.att.com https://*.att.net 'unsafe-inline'; worker-src blob:; frame-src https://*.arkoselabs.com; upgrade-insecure-requests; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\niam_on: A948\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]}],"data":{"size":4672,"size_decoded":5713,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"70a42235b3f29dbd76832bc938709175","sha1":"b3d9a34c74bdecaacec751a8122c441d8f2538b4","sha256":"ecc6e5c037a4e54c1ed4052c9880d55c27187bf709fb82fae2709c92d3a3a563","sha512":"6d1c600a322865e33182260507c0a812282a416eed95237ef6c598cf78bc16c001ae0527d420a3ee2e73c21419027033e181745c474441d7b10913f2b0215d33","ssdeep":"96:qAH+zrUoTF7AfbNM8As09218iqUacnSZ8uySM0nKh4SEUnNx0jgvp:qAe8m2b6a4ENqNcnSZfySMQxUNFR","tlshash":"37a185dd2f744ae6ddc197faf32211ac361264f7a9a5ce50d14c9e0db9c381c9c158c6","first_seen":"2023-05-26T22:16:21Z","last_seen":"2026-08-11T10:54:44.952386Z","times_seen":494,"resource_available":false,"data":null}},"time_used":690,"timings":{"blocked":-1,"dns":124,"connect":108,"send":0,"wait":113,"receive":0,"ssl":345},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin.att.com/static/siam/en/halo_c/cms/login/default/images/arrow-left-circle_24.svg","fqdn":"signin.att.com","domain":"att.com","tld":"com"},"ip":{"addr":"144.161.106.163","port":443,"asn":797,"as":"AMERITECH-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://essentialoilroots.com/docs/sbcglobal/","date":"2026-08-11T10:54:17.611Z","timestamp":1786445657611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.att.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 10 Dec 2025 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B7:7A:B7:DD:66:52:52:9C:BD:3E:C9:26:DE:0B:98:64:78:BC:3A:32","sha256":"98:31:8E:1A:08:DA:D7:18:7D:4B:00:A6:4C:1E:F5:7B:5B:BF:B7:41:43:E5:9A:12:6C:32:2A:CB:F6:C8:9D:55"}}},"request":{"raw":"GET /static/siam/en/halo_c/cms/login/default/images/arrow-left-circle_24.svg HTTP/1.1\r\nHost: signin.att.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essentialoilroots.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-length: 744\r\ncontent-type: image/svg+xml\r\ndate: Tue, 11 Aug 2026 10:54:18 GMT\r\netag: \"2e8-65630498d4797\"\r\nlast-modified: Thu, 09 Jul 2026 16:40:52 GMT\r\np3p: CP=\"NON CUR OTPi OUR NOR UNI\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\napser: p212\r\ncontent-security-policy: default-src 'self' 'nonce-vrvpIZL7ISMlEYv1zLPknY' https://*.att.com https://*.att.net https://*.arkoselabs.com https://*.quantummetric.com https://*.doubleclick.net https://*.dynatrace.com https://dpm.demdex.net wss://*.att.com 'unsafe-eval' 'unsafe-hashes' 'sha256-ZImpjyxSqdretajIQ3vpAcTYroKrDlaSp3fWptNrHZo=' 'sha256-kbHtQyYDQKz4SWMQ8OHVol3EC0t3tHEJFPCSwNG9NxQ='; img-src 'self' data: https://*.att.com https://*.att.net; style-src 'self' https://*.att.com https://*.att.net 'unsafe-inline'; worker-src blob:; frame-src https://*.arkoselabs.com; upgrade-insecure-requests; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\niam_on: A948\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]}],"data":{"size":744,"size_decoded":1783,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"88ab88310261549a3bf8724c901993fa","sha1":"04fafb47a80026e851558b9aae229cae284cf01a","sha256":"00660f62aa2d41eb36fa676ea93567fbd5e674d7e2a08d33a6400d116b692ae5","sha512":"739159599b8c7caeb2963495d03d7a8157f272b0f2f19ffab83ac5dde0c92aa869d73c6042ddcc11eea82684efa7a2bde77ce3212d6ff8ca80ae6dbc63dac50c","ssdeep":"","tlshash":"3a0168bb66cc91c4b5010777d8fc16e9922330e6067dcd58a2f11225e2204bfb61dd9c","first_seen":"2023-09-10T02:05:54Z","last_seen":"2026-08-11T10:54:44.953426Z","times_seen":68,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":117,"connect":117,"send":0,"wait":113,"receive":0,"ssl":379},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin.att.com/static/siam/en/halo_c/cms/login/default/images/arrow-left-circle-filled_24.svg","fqdn":"signin.att.com","domain":"att.com","tld":"com"},"ip":{"addr":"144.161.106.163","port":443,"asn":797,"as":"AMERITECH-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://essentialoilroots.com/docs/sbcglobal/","date":"2026-08-11T10:54:17.613Z","timestamp":1786445657613,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.att.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 10 Dec 2025 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B7:7A:B7:DD:66:52:52:9C:BD:3E:C9:26:DE:0B:98:64:78:BC:3A:32","sha256":"98:31:8E:1A:08:DA:D7:18:7D:4B:00:A6:4C:1E:F5:7B:5B:BF:B7:41:43:E5:9A:12:6C:32:2A:CB:F6:C8:9D:55"}}},"request":{"raw":"GET /static/siam/en/halo_c/cms/login/default/images/arrow-left-circle-filled_24.svg HTTP/1.1\r\nHost: signin.att.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essentialoilroots.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-length: 516\r\ncontent-type: image/svg+xml\r\ndate: Tue, 11 Aug 2026 10:54:18 GMT\r\netag: \"204-65630498d4797\"\r\nlast-modified: Thu, 09 Jul 2026 16:40:52 GMT\r\np3p: CP=\"NON CUR OTPi OUR NOR UNI\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\napser: p205\r\ncontent-security-policy: default-src 'self' 'nonce-WVuzTNunjLBOnVVX8tpKxM' https://*.att.com https://*.att.net https://*.arkoselabs.com https://*.quantummetric.com https://*.doubleclick.net https://*.dynatrace.com https://dpm.demdex.net wss://*.att.com 'unsafe-eval' 'unsafe-hashes' 'sha256-ZImpjyxSqdretajIQ3vpAcTYroKrDlaSp3fWptNrHZo=' 'sha256-kbHtQyYDQKz4SWMQ8OHVol3EC0t3tHEJFPCSwNG9NxQ='; img-src 'self' data: https://*.att.com https://*.att.net; style-src 'self' https://*.att.com https://*.att.net 'unsafe-inline'; worker-src blob:; frame-src https://*.arkoselabs.com; upgrade-insecure-requests; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\niam_on: A948\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":516,"size_decoded":1555,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b88b7ab5c4d1bce95b482a49aabe481d","sha1":"219b5e84ed1f6e98e4ad8cfcee7f2ae7dafdc549","sha256":"967bd86ba1ee654aff93603b101206fd63580fe128285fe6d21839ce26cdef5c","sha512":"2fa5f29c56ea6d61037d49768d1c5afa22afaf430131bd0f76bd5e8a3242c0b8e14459b685bd4b5339b8dacd32834ad78ff7b0e66df795d9eb2a5b4118e30dd2","ssdeep":"","tlshash":"eff024b616e981c0bd008337e6bc2b96603200ec1b7c0cdca1f81724d914d7b6561acd","first_seen":"2023-09-10T02:05:54Z","last_seen":"2026-08-11T10:54:44.954131Z","times_seen":13,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":-1,"dns":115,"connect":111,"send":0,"wait":112,"receive":0,"ssl":355},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"essentialoilroots.com/favicon.ico","fqdn":"essentialoilroots.com","domain":"essentialoilroots.com","tld":"com"},"ip":{"addr":"132.148.176.108","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://essentialoilroots.com/docs/sbcglobal/","date":"2026-08-11T10:54:18.160Z","timestamp":1786445658160,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"essentialoilroots.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 15 Oct 2025 16:37:53 GMT","end":"Thu, 15 Oct 2026 16:37:53 GMT"},"fingerprint":{"sha1":"6F:50:D1:3C:AA:B2:FA:5F:53:7B:36:64:C7:04:F5:0D:75:E4:3E:68","sha256":"B5:23:01:35:97:53:78:FA:41:C4:AD:CC:A4:AE:D6:F6:BC:21:54:44:E4:05:1B:E4:D4:55:AA:D9:2F:C6:D9:FF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: essentialoilroots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essentialoilroots.com/docs/sbcglobal/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-length: 13\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Tue, 11 Aug 2026 10:54:18 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13,"size_decoded":166,"mime_type":"text/html; charset=iso-8859-1","magic":"ASCII text, with no line terminators","md5":"1e6cd917ed71a1241e4bedc29264bd98","sha1":"5b65037351caeb0e5a48d963d7ffa88d0271d546","sha256":"7d04f7431bbfa41a04bcc7e6b98b9de0d919756c4c671c5785c99fff45f16402","sha512":"90e7e9f406dbb9a55b45643d6b4afce103cd565b33e40397b8422e3347ad3778220f8d1ae7befe66db61ce796d3e22d24cbef5fd3ecbbcb5f89a852d19f47e99","ssdeep":"","tlshash":"eb60000c0003c3cc0000003033c00003c000030c303300330000c000000c03c00c00cc","first_seen":"2023-03-08T15:13:39Z","last_seen":"2026-08-11T12:39:55.696592Z","times_seen":17069,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"essentialoilroots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-11","alert":"Phishing Block","trigger":"essentialoilroots.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"essentialoilroots.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}