Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@spaceship.com.
The latest stored availability evidence still shows the domain reachable; 26 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
att-internet[.]serviceroute[.]site
“Check Your Address for New AT&T Service Options. | Connected Home Start”
att-internet.serviceroute.site — असत्यापित. ब्रांड प्रतिरूपण: Att; घोटाले का प्रकार: Impersonation. साक्ष्य सारांश: VirusTotal 15/91 (Criminal IP, alphaMountain.ai, BitDefender, Cluster25, CRDF); URLQuery 4 alerts; URLScan malicious verdict; CF Radar malicious; PhishDestroy score 95/100. रजिस्ट्रार: Spaceship.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
Analysis as of July 22 2026 flags att-internet.serviceroute.site as high‑risk generic phishing infrastructure. The domain was registered only nine days earlier on July 13 2026 through the registrar Spaceship, Inc., and is currently pointing to the IPv4 address 188.114.97.3. DNS resolution is served by Cloudflare’s authoritative nameservers grant.ns.cloudflare.com and kami.ns.cloudflare.com, indicating the use of a widely adopted CDN for fast resolution and potential abuse of Cloudflare’s edge network. Independent blocklist feeds have already added the domain to two reputable phishing blocklists; PhishDestroy and OpenPhish explicitly list it as malicious, and broader community blocklists also contain it.
VirusTotal scans show nine of ninety‑five antivirus or URL‑reputation engines flag the domain, reinforcing the suspicion raised by the blocklists. No public SSL certificate details, HTTP status codes, or page‑title metadata have been published, so the surface‑web content cannot be correlated at this time. Likewise, no sightings on OTX, Safe Browsing, or other reputation aggregators have been recorded.
The limited age of the domain combined with immediate detection suggests a quickly deployed campaign, likely leveraging the short registration window to evade long‑term reputation building. Defenders should block traffic to 188.114.97.3 and to the domain itself at perimeter firewalls and DNS filters, update intrusion‑prevention signatures with the observed blocklist identifiers, and monitor for any future resolution changes or additional hostnames using the same Cloudflare nameservers. Continuous re‑scanning on VirusTotal and inclusion in internal threat‑intel feeds are recommended to capture any evolution of the malicious payload or hosting shifts.
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | att-internet.serviceroute.site |
malicious | Sinkholed |
| CIRA Canadian Shield DNS | att-internet.serviceroute.site |
malicious | Sinkholed |
| OpenDNS | att-internet.serviceroute.site |
phishing | Phishing Block |
| Cloudflare DNS | att-internet.serviceroute.site |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
Registration: serviceroute.site
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For the registrable domain serviceroute.site behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
थ्रेट इंटेलिजेंस क्रॉस-रेफ़रेंस · source references
तकनीकें · 3 identified
Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 100% विश्वासCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% विश्वासHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% विश्वासवायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of att-internet.serviceroute.site · checked Jul 22, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260722-E6736D Recipient: abuse@spaceship.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।