Check DNS, Urls + Redirects, Certificates and Content of your Website

...

skip EDNS-Check

skip Content-Check

check links

old / weak connection

Checked:
01.10.2026 12:40:50

Older results

O - 17.05.2025 00:51:33

O - 28.10.2024 10:17:30

I - 13.02.2020 09:51:29

K - 12.02.2020 04:07:13

E - 13.08.2019 11:41:47

1. IP-Addresses

Host	Type	IP-Address	is auth.	∑ Queries	∑ Timeout
att.com	A	144.160.36.42 Atlanta/Georgia/United States (US) - AT&T Services, Inc. Hostname: my.atttest.com	yes	1	0
	A	144.160.155.43 Indianapolis/Indiana/United States (US) - AT&T Services, Inc. Hostname: att.com	yes	1	0
	AAAA		yes
www.att.com	CNAME	prod-www.zr-att.com.akadns.net	yes	1	0
	CNAME	cac2.m.att.com.edgekey.net	yes
www.att.com	A	23.63.131.161 Berlin/State of Berlin/Germany (DE) - Akamai Technologies No Hostname found	no
*.att.com	A		yes
	AAAA		yes
	CNAME		yes

2. DNSSEC

Zone (*)	DNSSEC - Informations

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	4 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 8763, Flags 256


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 57780, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 10.10.2026, 00:00:00 +, Signature-Inception: 19.09.2026, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: com
com	1 DS RR in the parent zone found


	DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 13.10.2026, 20:00:00 +, Signature-Inception: 30.09.2026, 19:00:00 +, KeyTag 57780, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 57780 used to validate the DS RRSet in the parent zone


	2 DNSKEY RR found


	Public Key with Algorithm 13, KeyTag 19718, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 13, KeyTag 41446, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner com., Algorithm: 13, 1 Labels, original TTL: 86400 sec, Signature-expiration: 09.10.2026, 14:02:35 +, Signature-Inception: 24.09.2026, 13:57:35 +, KeyTag 19718, Signer-Name: com


	• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 19718 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest "isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: att.com
att.com	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "5rl4ege2et8evhuuc1gnkj8p7olsv8gf" between the hashed NSEC3-owner "5rl4bnoa0uh5br7b0cgpgq1qkbhgcgjc" and the hashed NextOwner "5rl4fpvdjl7711hh6jr0i00ifdt42tmq". So the parent zone confirmes the not-existence of a DS RR. Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner 5rl4bnoa0uh5br7b0cgpgq1qkbhgcgjc.com., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 05.10.2026, 02:09:42 +, Signature-Inception: 28.09.2026, 00:59:42 +, KeyTag 41446, Signer-Name: com


	DS-Query in the parent zone sends valid NSEC3 RR with the Hash "ck0pojmg874ljref7efn8430qvit8bsm" as Owner. That's the Hash of "com" with the NextHashedOwnerName "ck0q35hrs4h76g6chnb9414cjn6s5upl". So that domain name is the Closest Encloser of "att.com". Opt-Out: True. Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner ck0pojmg874ljref7efn8430qvit8bsm.com., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 05.10.2026, 00:26:14 +, Signature-Inception: 27.09.2026, 23:16:14 +, KeyTag 41446, Signer-Name: com


	0 DNSKEY RR found




Zone: www.att.com
www.att.com	0 DS RR in the parent zone found

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	4 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 8763, Flags 256


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 57780, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 10.10.2026, 00:00:00 +, Signature-Inception: 19.09.2026, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: net
net	1 DS RR in the parent zone found


	DS with Algorithm 13, KeyTag 37331, DigestType 2 and Digest LwvsLW95370dCP0ho6+S0OOaS57x4/QRH/8oJJDaRTs=


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner net., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 13.10.2026, 20:00:00 +, Signature-Inception: 30.09.2026, 19:00:00 +, KeyTag 57780, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 57780 used to validate the DS RRSet in the parent zone


	2 DNSKEY RR found


	Public Key with Algorithm 13, KeyTag 7272, Flags 256


	Public Key with Algorithm 13, KeyTag 37331, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner net., Algorithm: 13, 1 Labels, original TTL: 86400 sec, Signature-expiration: 09.10.2026, 14:10:35 +, Signature-Inception: 24.09.2026, 14:05:35 +, KeyTag 37331, Signer-Name: net


	• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 37331 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 37331, DigestType 2 and Digest "LwvsLW95370dCP0ho6+S0OOaS57x4/QRH/8oJJDaRTs=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: akadns.net
akadns.net	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "o7vmn67931abl61dtsv9vl6cmbf3qroe" between the hashed NSEC3-owner "o7vm23m4s7rvlah68rvi8d0f1uqbk4gf" and the hashed NextOwner "o7vopa298lci0isuhupl1g86t99hdqji". So the parent zone confirmes the not-existence of a DS RR. Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner o7vm23m4s7rvlah68rvi8d0f1uqbk4gf.net., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 06.10.2026, 03:58:31 +, Signature-Inception: 29.09.2026, 02:48:31 +, KeyTag 7272, Signer-Name: net


	DS-Query in the parent zone sends valid NSEC3 RR with the Hash "a1rt98bs5qgc9nfi51s9hci47uljg6jh" as Owner. That's the Hash of "net" with the NextHashedOwnerName "a1rtlnpgulogn7b9a62shje1u3ttp8dr". So that domain name is the Closest Encloser of "akadns.net". Opt-Out: True. Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner a1rt98bs5qgc9nfi51s9hci47uljg6jh.net., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 05.10.2026, 03:52:10 +, Signature-Inception: 28.09.2026, 02:42:10 +, KeyTag 7272, Signer-Name: net


	0 DNSKEY RR found




Zone: com.akadns.net
com.akadns.net	0 DS RR in the parent zone found


	0 DNSKEY RR found




Zone: zr-att.com.akadns.net
zr-att.com.akadns.net	0 DS RR in the parent zone found


	0 DNSKEY RR found




Zone: prod-www.zr-att.com.akadns.net
prod-www.zr-att.com.akadns.net	0 DS RR in the parent zone found

3. Name Servers

Domain	Nameserver	NS-IP
att.com	• a11-65.akam.net	84.53.139.65 London/England/United Kingdom (GB) - Akamai Technologies	•
	•	2600:1480:1::41 Cambridge/Massachusetts/United States (US) - Akamai International B.V.	•
	• a1-187.akam.net	193.108.91.187 Cambridge/Massachusetts/United States (US) - Akamai International B.V.	•
	•	2600:1401:2::bb Cambridge/Massachusetts/United States (US) - Akamai International B.V.	•
	• a22-67.akam.net	23.211.61.67 Cambridge/Massachusetts/United States (US) - Akamai International B.V.	•
	•	2600:1480:7800::43 Newark/New Jersey/United States (US) - Akamai International B.V.	•
	• a2-64.akam.net	95.100.174.64 Cambridge/Massachusetts/United States (US) - Akamai Technologies	•
	•	2600:1480:7000::40 Newark/New Jersey/United States (US) - Akamai International B.V.	•
	• a4-64.akam.net	72.246.46.64 Cambridge/Massachusetts/United States (US) - Akamai International B.V.	•
	•	2600:1480:9000::40 Newark/New Jersey/United States (US) - Akamai International B.V.	•
	• a5-66.akam.net	95.100.168.66 London/England/United Kingdom (GB) - Akamai Technologies	•
	•	2600:1480:b000::42 Cambridge/Massachusetts/United States (US) - Akamai International B.V.	•
	• ns0.attdns.com
com	• a.gtld-servers.net / nnn1-par6		•
	• b.gtld-servers.net / nnn1-elwaw4		•
	• c.gtld-servers.net / nnn1-par6		•
	• d.gtld-servers.net / nnn1-par6		•
	• e.gtld-servers.net / nnn1-usiad-1		•
	• f.gtld-servers.net / nnn1-nlams-4		•
	• g.gtld-servers.net / nnn1-gblon-4		•
	• h.gtld-servers.net / nnn1-gblon-4		•
	• i.gtld-servers.net / nnn1-nlams-4		•
	• j.gtld-servers.net / nnn1-defra-7a		•
	• k.gtld-servers.net / nnn1-defra-7b		•
	• l.gtld-servers.net / nnn1-defra-7a		•
	• m.gtld-servers.net / nnn1-defra-7b		•

zr-att.com.akadns.net	• internal.akadns.net
com.akadns.net	• internal.akadns.net
akadns.net	• a1-128.akadns.net	193.108.88.128 London/England/United Kingdom (GB) - Akamai International B.V.	•
	•	2600:1403:11::80 Cambridge/Massachusetts/United States (US) - Akamai International B.V.	•
	• a18-128.akagtm.org	95.101.36.128 Slough/England/United Kingdom (GB) - Akamai Technologies	•
	• a28-129.akagtm.org	95.100.173.129 Slough/England/United Kingdom (GB) - Akamai Technologies	•
	• a3-129.akadns.net	96.7.49.129 Cambridge/Massachusetts/United States (US) - Akamai International B.V.	•
	•	2600:1408:1c::81 Cambridge/Massachusetts/United States (US) - Akamai International B.V.	•
	• a42-130.akagtm.org	184.28.92.130 Cambridge/Massachusetts/United States (US) - Akamai International B.V.	•
	• a44-131.akadns.net	2.17.46.131 Amsterdam/North Holland/The Netherlands (NL) - Akamai Technologies	•
	•	2600:1480:c00::83 Dallas/Texas/United States (US) - Akamai International B.V.	•
	• a46-129.akadns.net	23.61.245.129 Cambridge/Massachusetts/United States (US) - Akamai International B.V.	•
	•	2600:1480:400::81 Dallas/Texas/United States (US) - Akamai International B.V.	•
	• a7-130.akagtm.org	23.61.199.130 Cambridge/Massachusetts/United States (US) - Akamai International B.V.	•
	• a8-130.akadns.net	2.16.40.130 Slough/England/United Kingdom (GB) - Akamai Technologies	•
	•	2600:1403:a::82 Newark/New Jersey/United States (US) - Akamai International B.V.	•
	• internal.akadns.net
net	• a.gtld-servers.net / nnn1-usiad-1		•
	• b.gtld-servers.net / nnn1-elwaw4		•
	• c.gtld-servers.net / nnn1-par6		•
	• d.gtld-servers.net / nnn1-par6		•
	• e.gtld-servers.net / nnn1-par6		•
	• f.gtld-servers.net / nnn1-nlams-4		•
	• g.gtld-servers.net / nnn1-nlams-4		•
	• h.gtld-servers.net / nnn1-nlams-4		•
	• i.gtld-servers.net / nnn1-nlams-4		•
	• j.gtld-servers.net / nnn1-defra-7b		•
	• k.gtld-servers.net / nnn1-defra-7b		•
	• l.gtld-servers.net / nnn1-defra-7a		•
	• m.gtld-servers.net / nnn1-defra-7b		•

4. SOA-Entries

Domain:	com
Zone-Name:	com
Primary:	a.gtld-servers.net
Mail:	nstld.verisign-grs.com
Serial:	1790851229
Refresh:	1800
Retry:	900
Expire:	604800
TTL:	900
num Entries:	12

Domain:	com
Zone-Name:	com
Primary:	a.gtld-servers.net
Mail:	nstld.verisign-grs.com
Serial:	1790851244
Refresh:	1800
Retry:	900
Expire:	604800
TTL:	900
num Entries:	1

Domain:	att.com
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:	1

Domain:	att.com
Zone-Name:	att.com
Primary:	ns0.attdns.com
Mail:	eiss-dns.att.com
Serial:	2026093001
Refresh:	3600
Retry:	1800
Expire:	2592000
TTL:	300
num Entries:	12


Domain:	net
Zone-Name:	net
Primary:	a.gtld-servers.net
Mail:	nstld.verisign-grs.com
Serial:	1790851259
Refresh:	1800
Retry:	900
Expire:	604800
TTL:	900
num Entries:	13

Domain:	akadns.net
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:	1

Domain:	akadns.net
Zone-Name:	akadns.net
Primary:	internal.akadns.net
Mail:	hostmaster.akamai.com
Serial:	1741200000
Refresh:	90000
Retry:	90000
Expire:	90000
TTL:	180
num Entries:	14

Domain:	com.akadns.net
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:	1

Domain:	zr-att.com.akadns.net
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:	1

5. Screenshots

Startaddress: https://www.att.com/, address used: https://www.att.com/, Screenshot created 2026-10-01 12:49:53 +00:0

Mobil (412px x 732px)

1436 milliseconds

Screenshot mobile - https://www.att.com/

Mobil + Landscape (732px x 412px)

1410 milliseconds

Screenshot mobile landscape - https://www.att.com/

Screen (1280px x 1680px)

1707 milliseconds

Screenshot Desktop - https://www.att.com/

Mobile- and other Chrome-Checks

	width	height
visual Viewport	397	732
content Size	397	3773

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

6. Url-Checks

show header:

Domainname	Http-Status	redirect	Sec.	G
• http://att.com/ 144.160.36.42	301	https://www.att.com/	0.257	E
Location: https://www.att.com/
Server: BigIP
Connection: Keep-Alive
Content-Length: 0

• http://att.com/ 144.160.155.43	301	https://www.att.com/	0.340	E
Location: https://www.att.com/
Server: BigIP
Connection: Keep-Alive
Content-Length: 0

• http://www.att.com/ 23.63.131.161	301	https://www.att.com/	0.060
Server: AkamaiGHost
Location: https://www.att.com/
Date: Thu, 01 Oct 2026 10:43:17 GMT
Connection: keep-alive
Set-Cookie: 12160=ad; expires=Thu, 08-Oct-2026 10:43:17 GMT; path=/; domain=.att.com; secure,DTAB=Tab=Bsn; expires=Thu, 21-Mar-2024 00:00:00 GMT; path=/; domain=.att.com; secure,att-appshell-path=/marketing/; path=/; domain=.att.com,akaalb_prod_upperfunnel=~op=~rv=8~m=~os=~id=a40637a6a95ba4708ed94bbf86d0bb7a; path=/; HttpOnly,_abck=5D7BCA20839F8EE2F6208553E7A3537B~-1~YAAQ3OYXAm7qDPCgAQAAZbcP9xA3CYHr7esop1vN/2LFvs7b8fNaAG017GFrUConBJgBVRVmNNqpONtsY1w+NLw3xSpoosN0rqzQ1KZIYw9MiQU6Ea277Kic0Ntql8SA9omawVR6fddHlRSnQ8eErBLtEI3ysAOCKO8xv1i8Gw8t2TIASK4YTZUTQYPtmjCYckJL9gkGobpReJHUSEKiciL67TGbOrAsP5yoNxtT2QUp45abuxG71XajyRI7Ezm5eO/IzAu93zIpfJxjGcrnZEy1RI4Heu4QEtVkT2svK3bXAHGEefZuQlCuWipGxoevrhiECJLoa88fSoSGmSUr2pOz+iqP5wyatBWfQUwijJeMmBAESQh3D+SCxSDKByBjuFdf6QAio7ee91GzSmE=~-1~-1~-1~-1~-1; Domain=.att.com; Path=/; Expires=Fri, 01 Oct 2027 10:43:17 GMT; Max-Age=31536000; SameSite=None; Secure,bm_sz=2C7963B34A9122C88B25F1D8C326067E~YAAQ3OYXAm/qDPCgAQAAZbcP9wF0o53B/bi8zIzZZ1VotMEmKQ/fz1qJhj71tcXW568SsK/uZasEQfFHQPVfAP49qDtwBiXF+OlXfZUOZZ3Bq6mM0Inq3yd6h7VbMteSUIesBcXwLKIAmDtswRGZ9Ke6hqy5Yq41I9vz9R0XbAToanThZ4ZSef5c08FjGk6pak1wu4oHs1EQGt7KdT5KaZSxjExVhGsWq2w9tlqpwJLCrX9XxqfNgE3L4uD2N851DlIUOY6EqW2h44o+20FgkTbJM7CaOFBsJFufrN00tohYoqi6MjEPSRl37vKQM5j+24Bld74uZc8/hdvO3HoOR++h5njHz0ASSmzPWvHAC9oMHw==~4407858~4272694; Domain=.att.com; Path=/; Expires=Thu, 01 Oct 2026 14:43:17 GMT; Max-Age=14400; SameSite=None; Secure
Server-Timing: cdn-cache; desc=HIT,edge; dur=1,ak_p; desc="1790851397444_35120860_41399033_10_31365_1_0_-";dur=1
aka-global-request-id-uxtime: 0.dce61702.1790851397.277b2f9
att-appshell-path: /marketing/
Cache-Control: no-cache
att-application-group: uf-marketing
Content-Length: 0

• https://att.com/ 144.160.36.42	301	https://www.att.com/	5.463	B
Location: https://www.att.com/
Server: BigIP
Connection: Keep-Alive
Content-Length: 0

• https://att.com/ 144.160.155.43	301	https://www.att.com/	6.507	B
Location: https://www.att.com/
Server: BigIP
Connection: Keep-Alive
Content-Length: 0

• https://www.att.com/ 23.63.131.161 gzip used - 200055 / 753748 - 73.46 % Inline-JavaScript (∑/total): 8/415489 Inline-CSS (∑/total): 17/31475	200	Html is minified: 108.04 % Other inline scripts (∑/total): 6/241685	4.906	I
page-personalization-off: false
service-worker-allowed: /
x-oneagent-js-injection: true
X-XSS-Protection: 0; mode=block
X-Frame-Options: SAMEORIGIN
P3P: www.att.com
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
x-csrf-token: 73f797acf95b27a14c7f238608e4bc73aca573d5
sid: d246ebc9-9279-4a2a-9c92-ba90d6373e1f
idp-trace-id: 9af6ef87df5a3f61:9af6ef87df5a3f61:0:1
traceresponse: 00-4d192f2d46bcc25ed5cbcfabc2feae9a-7dd165d68e0c0063-01
x-dt-tracestate: 3d6b8e7d-29e4feb4@dt
X-Akamai-Transformed: 9 - 0 pmb=mRUM,3
Date: Thu, 01 Oct 2026 10:43:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive,Transfer-Encoding
Vary: Accept-Encoding
Set-Cookie: dtCookieewtchkoh=v_4_srv_2_sn_DF611EA668A1AF1141398C2452F2B1D2_perc_100000_ol_0_mul_1_app-3A1f70b1240e71013b_1; Path=/; Domain=.att.com; secure,ixp=; Domain=att.com; Max-Age=0; HttpOnly,ixp=f1abb076-b863-4b79-ab78-478618b562dd; Path=/; Domain=att.com; Expires=Thu, 01 Jan 2032 00:00:00 GMT; HttpOnly; Secure,ixp=f1abb076-b863-4b79-ab78-478618b562dd; Path=/; Domain=directv.com; Expires=Thu, 01 Jan 2032 00:00:00 GMT; HttpOnly; Secure,ixp-bundle=; Path=/; Domain=att.com; Max-Age=0; HttpOnly; Secure,ixp-bundle=; Path=/; Domain=directv.com; Max-Age=0; HttpOnly; Secure,gtmuf=azsc; Path=/; Secure,idpmgw=eyJjcyI6IlVuQXV0aCIsInNpZCI6ImQyNDZlYmM5LTkyNzktNGEyYS05YzkyLWJhOTBkNjM3M2UxZiIsImNzVGsiOiI3M2Y3OTdhY2Y5NWIyN2ExNGM3ZjIzODYwOGU0YmM3M2FjYTU3M2Q1IiwiaWF0IjoxNzkwODUxNDEyLCJleHAiOjE3OTA4NTMyMTJ9.zSdTe5UWESqbZA4M9PO3f8htEuvMoxHTIBDia-GV88E; Path=/; HttpOnly; Secure; SameSite=Lax,UUID=6abe3954-1014-a371-a0f1-a0f1490a20d0; Path=/; Expires=Wed, 1 Oct 2036 10:43:32 GMT; Secure,idpgwifad=; Max-Age=0; Domain=; Path=/; HttpOnly; Secure;,12160=ad; expires=Thu, 08-Oct-2026 10:43:33 GMT; path=/; domain=.att.com; secure,DTAB=Tab=Bsn; expires=Thu, 21-Mar-2024 00:00:00 GMT; path=/; domain=.att.com; secure,att-appshell-path=/marketing/; path=/; domain=.att.com,akaalb_prod_upperfunnel=~op=prod_upperfunnel_alb:prod-upperfunnel-azsc\|~rv=8~m=prod-upperfunnel-azsc:0\|~os=c2e53dcabb81922a188c759e7de57e2b~id=46dc07d2c2455c807aa65a6a714fb973; path=/; HttpOnly; Secure; SameSite=None,_abck=8D9ED6F0EA00C895393C381CC9A9C493~-1~YAAQ3OYXAmXrDPCgAQAAjvQP9xBZy5+cPa9EUaGbmLoJIY7vYfFuEFNflOEVCTPkb0/gN21Nt3uDX42fnVUqS/d6vGPlx8UU86dVQj4t2sPgv9i+egoqoMt3w9xAWav8wPaP4G8+iTxkqjDCuoQRngs+TRMd+CBXrJf3jMvHJziPl7Ai/+QzHoNkeMqKJBPhAMDqNV8piWND1hLxwWsXabnm+9koWr4W1AsK+8/PMQsurfUuae0Ko8XbrD9oFbPv1dm12nLh7jvAaYONvsaAm6XluGrQGWKLvQQOATKb+pQy6o2uk+0MA5CnJfRU3ub8lBkwWIhaOtVGy4g5hDmyxmP9jowkccaVs0ECYkGaetzi4cAttY2qNU6xuLnqmOQ8QEKSszHcpYar2RDkbhb50qQcakC7cMPNISkuYSNa2qF4CjDUW9eOM3XPEWdtmo8/gROZimH0xfwJxQdSX+jwd6RDwQD42uOd6w==~-1~-1~-1~-1~-1; Domain=.att.com; Path=/; Expires=Fri, 01 Oct 2027 10:43:33 GMT; Max-Age=31536000; SameSite=None; Secure,bm_sz=6AC18A114CC8140875B14EC29F4FC547~YAAQ3OYXAmbrDPCgAQAAjvQP9wEubI0ntTPZEP/Hygqye+Mr+rWUx6FdHcQ1RcsoFYk7gLnhqgLUFCSq+yxaHBfrUumsMCebn8CR/NBBO1459M8YkrfPWBlqQjDiTWEgPLMBKzqFAWHBSyqYxdVHd09DmX/X51qYW2CfhSIlF0CF8WRw4zK1d2iVFB3PYSjJWXMt2QP8/xp8ZrzU8aWO2QVTeYEHrFs+WL3BqLKCcsFSgvLsRfn9KmxnpiOd/fcD/6LcFH9x96Et72adOZ/4jpglwwoak0qCeQxQVQg5sLKRe6KHLlnNnLgfCbUN1i5zbAdEElMx/Kz1PbRGccNIwzOvcnYypGofVC46FOnucXxYSA==~3617602~4470581; Domain=.att.com; Path=/; Expires=Thu, 01 Oct 2026 14:43:32 GMT; Max-Age=14399; SameSite=None; Secure
Server-Timing: cdn-cache; desc=MISS,edge; dur=156,origin; dur=687,dtRpid;desc="-1111774147",dtTrId;desc="4d192f2d46bcc25ed5cbcfabc2feae9a", dtSInfo;desc="0",ak_p; desc="1790851412099_35120860_41406088_84169_54807_1_8_-";dur=1
aka-global-request-id-uxtime: 0.dce61702.1790851412.277ce88
Strict-Transport-Security: max-age=15768000 ; preload
att-appshell-path: /marketing/
Cache-Control: no-cache
att-application-group: uf-marketing
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Content-Length: 200055

• http://att.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 144.160.36.42	301	https://www.att.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	0.134	E
Visible Content:
Location: https://www.att.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Server: BigIP
Connection: Keep-Alive
Content-Length: 0

• http://att.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 144.160.155.43	301	https://www.att.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	0.176	E
Visible Content:
Location: https://www.att.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Server: BigIP
Connection: Keep-Alive
Content-Length: 0

• http://www.att.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 23.63.131.161	301	https://www.att.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	0.587
Visible Content:
Server: AkamaiGHost
Location: https://www.att.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Date: Thu, 01 Oct 2026 10:43:45 GMT
Connection: keep-alive
Set-Cookie: 12160=ad; expires=Thu, 08-Oct-2026 10:43:45 GMT; path=/; domain=.att.com; secure,_abck=1BD8B7D57AE2F16819C2267A1BCC00E6~-1~YAAQ3OYXAiTsDPCgAQAAJCMQ9xAAUEt7kmfouBSlshoIulWGxrEulRcIxT4AziRIF2YbJsab2pt9fym55lg5k6srL6SM6gvZE6PYWibUDbW8qjtL9i7OVbl0X8cgeYs1dITMp5I1Vm4DB0+7VM5dOacIH6jihk1HgxtA9hd1LCF2ZyzVw+qHQftoK34AWqYh0+ELXLiZGV1VtF6SHCwo3Co67aG2znVEh5w/OBAnuPg9g35XedWFxldvJZx1Y+xYXDxOntwuketYyllTN1rWNhQoPVdyNAVAGskWMj8tINYEJISDShItsFThyn8QT07IUJZtf9kSi9By8ZLKCaqOTOnwq7xY+9u09SObd11PFi6JoZ3NfcDMn7PLrVLl1N3jzTBQsbCUEDNREfunPbQ=~-1~-1~-1~-1~-1; Domain=.att.com; Path=/; Expires=Fri, 01 Oct 2027 10:43:45 GMT; Max-Age=31536000; SameSite=None; Secure,bm_sz=953AF16B33E0D14E88B92C5881A89790~YAAQ3OYXAiXsDPCgAQAAJCMQ9wEVEgXpEJxBt2wGuujUjyNcpCt3SAEZRUxXgRUMcC2PYf8K1RtvuVcHBWDyWWlUkUZA0urWjfpFVWcuygOa5akxPkkFCYh1kB9s0z/9NfsgaDWMVFiy8ZLVaPaQG1kdkJtgXuqBYz5L+6/lWK0z8rrOUuoybdL1Bb9dHcgCD+ol+6W+zmGDBpFZ0yH9wZTqaRHJP2fb0Yjb+s4xrFHPnhCriicBw2LyD2U3FQ2HW82j4R2AhV2/IPPNz+fIzX+1FeyGXPXvRcUbqVxLNaKTOZP5+iDrvLP7O4HRtKzBTq5uzJKZayv6VQ7lsJrfRxS9rUkQseUHpy6udhFowkEErw==~3289908~4536374; Domain=.att.com; Path=/; Expires=Thu, 01 Oct 2026 14:43:45 GMT; Max-Age=14400; SameSite=None; Secure
Server-Timing: cdn-cache; desc=HIT,edge; dur=1,ak_p; desc="1790851424485_35120860_41399053_6_573399_1_0_-";dur=1
aka-global-request-id-uxtime: 0.dce61702.1790851424.277b30d
Content-Length: 0

• https://www.att.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	404	Html is minified: 111.11 % Other inline scripts (∑/total): 0/0	4.376	B
Not Found
Visible Content:
Accept-Ranges: bytes
Server: AkamaiNetStorage
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Thu, 01 Oct 2026 10:43:52 GMT
Connection: keep-alive
Set-Cookie: 12160=ad; expires=Thu, 08-Oct-2026 10:43:52 GMT; path=/; domain=.att.com; secure,_abck=995B103BE57A337BD0B07AFEA2C07A70~-1~YAAQ3OYXAqLsDPCgAQAA+0EQ9xCZuzYkKyAKkEMQ90oriXQNNvrCK/S3KTR7K5+lZP/EemxqMe8MrhI8UuDEfld6rPrbeiWYmjaNCkaM7EUiPQzjNLbdKHR1DfOU4Ln+Zz3u7GtB0IpIAQ/53VltuvwrK0SqunHOfkojW1H3UEtgRZOmjtLi/NXcIhEnMpVV+kGB2FeZodO9CabvkFgSDk6DPyzEaL1UyulbqNWUaGETPs+cFr6PB+9eob0/RwE5LLOuJO3J3GCf2fTtTb5p5X2v/NerXWG2E9r1eVj6P2grTi76LzasIRfly5UIyb2vKKKsmLZnF4Gwo2SnE4kn05MJTtfPk86Xpo5sLMNPq8BZGW7gRgU9ZoznFz5ejPaLOnlMdEYsnFvh1cBVsMHQQx6AuLvG3t5A8UQoINCcYeMnF8lvasaFABsZkuKWvScZow3gU3pIB9Msk5YaWmK9QeGbNM8OZoUuWQ==~-1~-1~-1~-1~-1; Domain=.att.com; Path=/; Expires=Fri, 01 Oct 2027 10:43:52 GMT; Max-Age=31536000; SameSite=None; Secure,bm_sz=E16F6403BD9BF6512531A3FB83D6D898~YAAQ3OYXAqPsDPCgAQAA+0EQ9wH2idXykCLApWD1RfROVAHOx3sPXsXOb+pEgrri5siOzzoYJXGIq7xTV1PLozjbyVbH2zOiFeEkIFQflnACu6yC4mm/NOW9+tgDN+Cq+yC6IRXHVSoSqJs9SwBsPTAVig1BnT3O+mYeM5EmeXAm0q9V0jkCOWjyyVLKFmQC1M8YQXIRPXEg8CTjYWatyCVNefsq4zgjS62EDJpCj+r4y3Q42AZ7KrO9fu6rEvRpGXw+r10o831kM/7heoXD7nvvmIuSPd+6Kq8DtLMbmdcAFtOYQqWlEtia0qAapwkfIl2QlsQJEeYslk70wHnZgqXHkOMNt6cjff1VT71dB826+Q==~3420983~3421489; Domain=.att.com; Path=/; Expires=Thu, 01 Oct 2026 14:43:52 GMT; Max-Age=14400; SameSite=None; Secure
Server-Timing: cdn-cache; desc=HIT,edge; dur=597,ak_p; desc="1790851432327_35120860_41413021_59513_21636_1_1_-";dur=1
aka-global-request-id-uxtime: 0.dce61702.1790851432.277e99d
Strict-Transport-Security: max-age=15768000 ; preload
Content-Length: 10
Expires: Thu, 01 Oct 2026 10:43:52 GMT

• https://23.63.131.161/ 23.63.131.161	400	Html is minified: 101.64 %	2.830	N
Bad Request
Certificate error: RemoteCertificateNameMismatch
Server: AkamaiGHost
Mime-Version: 1.0
Date: Thu, 01 Oct 2026 10:43:48 GMT
Connection: close
Content-Type: text/html
Content-Length: 310
Expires: Thu, 01 Oct 2026 10:43:48 GMT

• https://144.160.36.42/ 144.160.36.42	-100		0.536
Unknown (0, 0x80131620). An error occurred while sending the request. Unable to read data from the transport connection

• https://144.160.155.43/ 144.160.155.43	-100		0.683
Unknown (0, 0x80131620). An error occurred while sending the request. Unable to read data from the transport connection

7. Comments

	1. General Results, most used to calculate the result
A	name "att.com" is domain, public suffix is ".com", top-level-domain is ".com", top-level-domain-type is "generic", tld-manager is "VeriSign Global Registry Services", num .com-domains preloaded: 108094 (complete: 276475)
A	Good: All ip addresses are public addresses
A	Good: Minimal 2 ip addresses per domain name found: att.com has 2 different ip addresses (authoritative).
	Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: att.com has no ipv6 address.
A	Good: No asked Authoritative Name Server had a timeout
A	Good: destination is https
A	Good - only one version with Http-Status 200
A	Good: one preferred version: www is preferred
	Warning: HSTS preload sent, but not in Preload-List. Never send a preload directive if you don't know what preload means. Check https://hstspreload.org/ to learn the basics about the Google-Preload list. If you send a preload directive, you should immediately add your domain to the HSTS preload list via https://hstspreload.org/ . If Google accepts the domain, so the status is "pending": Note that new entries are hardcoded into the Chrome source code and can take several months before they reach the stable version. So you will see this message some months. If you don't want that or if you don't understand "preload", but if you send a preload directive and if you have correct A-redirects, everybody can add your domain to that list. Then you may have problems, it's not easy to undo that. So if you don't want your domain preloaded, remove the preload directive.
	HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
B	Warning: HSTS max-age is too short - minimum 31536000 = 365 days required, 15768000 seconds = 182 days found
B	https://att.com/ 144.160.36.42	301		Missing HSTS-Header
B	https://att.com/ 144.160.155.43	301		Missing HSTS-Header
	http://www.att.com/ 23.63.131.161	301	12160=ad; expires=Thu, 08-Oct-2026 10:43:17 GMT; path=/; domain=.att.com; secure	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://www.att.com/ 23.63.131.161	301	DTAB=Tab=Bsn; expires=Thu, 21-Mar-2024 00:00:00 GMT; path=/; domain=.att.com; secure	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://www.att.com/ 23.63.131.161	301	att-appshell-path=/marketing/; path=/; domain=.att.com	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://www.att.com/ 23.63.131.161	301	akaalb_prod_upperfunnel=~op=~rv=8~m=~os=~id=a40637a6a95ba4708ed94bbf86d0bb7a; path=/; HttpOnly	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://www.att.com/ 23.63.131.161	301	_abck=5D7BCA20839F8EE2F6208553E7A3537B~-1~YAAQ3OYXAm7qDPCgAQAAZbcP9xA3CYHr7esop1vN/2LFvs7b8fNaAG017GFrUConBJgBVRVmNNqpONtsY1w+NLw3xSpoosN0rqzQ1KZIYw9MiQU6Ea277Kic0Ntql8SA9omawVR6fddHlRSnQ8eErBLtEI3ysAOCKO8xv1i8Gw8t2TIASK4YTZUTQYPtmjCYckJL9gkGobpReJHUSEKiciL67TGbOrAsP5yoNxtT2QUp45abuxG71XajyRI7Ezm5eO/IzAu93zIpfJxjGcrnZEy1RI4Heu4QEtVkT2svK3bXAHGEefZuQlCuWipGxoevrhiECJLoa88fSoSGmSUr2pOz+iqP5wyatBWfQUwijJeMmBAESQh3D+SCxSDKByBjuFdf6QAio7ee91GzSmE=~-1~-1~-1~-1~-1; Domain=.att.com; Path=/; Expires=Fri, 01 Oct 2027 10:43:17 GMT; Max-Age=31536000; SameSite=None; Secure	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://www.att.com/ 23.63.131.161	301	bm_sz=2C7963B34A9122C88B25F1D8C326067E~YAAQ3OYXAm/qDPCgAQAAZbcP9wF0o53B/bi8zIzZZ1VotMEmKQ/fz1qJhj71tcXW568SsK/uZasEQfFHQPVfAP49qDtwBiXF+OlXfZUOZZ3Bq6mM0Inq3yd6h7VbMteSUIesBcXwLKIAmDtswRGZ9Ke6hqy5Yq41I9vz9R0XbAToanThZ4ZSef5c08FjGk6pak1wu4oHs1EQGt7KdT5KaZSxjExVhGsWq2w9tlqpwJLCrX9XxqfNgE3L4uD2N851DlIUOY6EqW2h44o+20FgkTbJM7CaOFBsJFufrN00tohYoqi6MjEPSRl37vKQM5j+24Bld74uZc8/hdvO3HoOR++h5njHz0ASSmzPWvHAC9oMHw==~4407858~4272694; Domain=.att.com; Path=/; Expires=Thu, 01 Oct 2026 14:43:17 GMT; Max-Age=14400; SameSite=None; Secure	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://www.att.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 23.63.131.161	301	12160=ad; expires=Thu, 08-Oct-2026 10:43:45 GMT; path=/; domain=.att.com; secure	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://www.att.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 23.63.131.161	301	_abck=1BD8B7D57AE2F16819C2267A1BCC00E6~-1~YAAQ3OYXAiTsDPCgAQAAJCMQ9xAAUEt7kmfouBSlshoIulWGxrEulRcIxT4AziRIF2YbJsab2pt9fym55lg5k6srL6SM6gvZE6PYWibUDbW8qjtL9i7OVbl0X8cgeYs1dITMp5I1Vm4DB0+7VM5dOacIH6jihk1HgxtA9hd1LCF2ZyzVw+qHQftoK34AWqYh0+ELXLiZGV1VtF6SHCwo3Co67aG2znVEh5w/OBAnuPg9g35XedWFxldvJZx1Y+xYXDxOntwuketYyllTN1rWNhQoPVdyNAVAGskWMj8tINYEJISDShItsFThyn8QT07IUJZtf9kSi9By8ZLKCaqOTOnwq7xY+9u09SObd11PFi6JoZ3NfcDMn7PLrVLl1N3jzTBQsbCUEDNREfunPbQ=~-1~-1~-1~-1~-1; Domain=.att.com; Path=/; Expires=Fri, 01 Oct 2027 10:43:45 GMT; Max-Age=31536000; SameSite=None; Secure	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://www.att.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 23.63.131.161	301	bm_sz=953AF16B33E0D14E88B92C5881A89790~YAAQ3OYXAiXsDPCgAQAAJCMQ9wEVEgXpEJxBt2wGuujUjyNcpCt3SAEZRUxXgRUMcC2PYf8K1RtvuVcHBWDyWWlUkUZA0urWjfpFVWcuygOa5akxPkkFCYh1kB9s0z/9NfsgaDWMVFiy8ZLVaPaQG1kdkJtgXuqBYz5L+6/lWK0z8rrOUuoybdL1Bb9dHcgCD+ol+6W+zmGDBpFZ0yH9wZTqaRHJP2fb0Yjb+s4xrFHPnhCriicBw2LyD2U3FQ2HW82j4R2AhV2/IPPNz+fIzX+1FeyGXPXvRcUbqVxLNaKTOZP5+iDrvLP7O4HRtKzBTq5uzJKZayv6VQ7lsJrfRxS9rUkQseUHpy6udhFowkEErw==~3289908~4536374; Domain=.att.com; Path=/; Expires=Thu, 01 Oct 2026 14:43:45 GMT; Max-Age=14400; SameSite=None; Secure	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
B	https://www.att.com/ 23.63.131.161	200	ixp=; Domain=att.com; Max-Age=0; HttpOnly	Cookie sent via https, but not marked as secure
B	https://www.att.com/ 23.63.131.161	200	att-appshell-path=/marketing/; path=/; domain=.att.com	Cookie sent via https, but not marked as secure
B	http://www.att.com/ 23.63.131.161	301	12160=ad; expires=Thu, 08-Oct-2026 10:43:17 GMT; path=/; domain=.att.com; secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://www.att.com/ 23.63.131.161	301	DTAB=Tab=Bsn; expires=Thu, 21-Mar-2024 00:00:00 GMT; path=/; domain=.att.com; secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://www.att.com/ 23.63.131.161	301	att-appshell-path=/marketing/; path=/; domain=.att.com	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://www.att.com/ 23.63.131.161	301	akaalb_prod_upperfunnel=~op=~rv=8~m=~os=~id=a40637a6a95ba4708ed94bbf86d0bb7a; path=/; HttpOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://www.att.com/ 23.63.131.161	200	dtCookieewtchkoh=v_4_srv_2_sn_DF611EA668A1AF1141398C2452F2B1D2_perc_100000_ol_0_mul_1_app-3A1f70b1240e71013b_1; Path=/; Domain=.att.com; secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://www.att.com/ 23.63.131.161	200	ixp=; Domain=att.com; Max-Age=0; HttpOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://www.att.com/ 23.63.131.161	200	ixp=f1abb076-b863-4b79-ab78-478618b562dd; Path=/; Domain=att.com; Expires=Thu, 01 Jan 2032 00:00:00 GMT; HttpOnly; Secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://www.att.com/ 23.63.131.161	200	ixp=f1abb076-b863-4b79-ab78-478618b562dd; Path=/; Domain=directv.com; Expires=Thu, 01 Jan 2032 00:00:00 GMT; HttpOnly; Secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://www.att.com/ 23.63.131.161	200	ixp-bundle=; Path=/; Domain=att.com; Max-Age=0; HttpOnly; Secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://www.att.com/ 23.63.131.161	200	ixp-bundle=; Path=/; Domain=directv.com; Max-Age=0; HttpOnly; Secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://www.att.com/ 23.63.131.161	200	gtmuf=azsc; Path=/; Secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://www.att.com/ 23.63.131.161	200	UUID=6abe3954-1014-a371-a0f1-a0f1490a20d0; Path=/; Expires=Wed, 1 Oct 2036 10:43:32 GMT; Secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://www.att.com/ 23.63.131.161	200	idpgwifad=; Max-Age=0; Domain=; Path=/; HttpOnly; Secure;	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://www.att.com/ 23.63.131.161	200	12160=ad; expires=Thu, 08-Oct-2026 10:43:33 GMT; path=/; domain=.att.com; secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://www.att.com/ 23.63.131.161	200	DTAB=Tab=Bsn; expires=Thu, 21-Mar-2024 00:00:00 GMT; path=/; domain=.att.com; secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://www.att.com/ 23.63.131.161	200	att-appshell-path=/marketing/; path=/; domain=.att.com	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://www.att.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 23.63.131.161	301	12160=ad; expires=Thu, 08-Oct-2026 10:43:45 GMT; path=/; domain=.att.com; secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://www.att.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	404	12160=ad; expires=Thu, 08-Oct-2026 10:43:52 GMT; path=/; domain=.att.com; secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
E	http://att.com/ 144.160.36.42	301	https://www.att.com/	Wrong redirect one domain http to other domain https. First redirect to https without new dns query, so the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
E	http://att.com/ 144.160.155.43	301	https://www.att.com/	Wrong redirect one domain http to other domain https. First redirect to https without new dns query, so the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
I	https://www.att.com/ 23.63.131.161	200		Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
M	https://23.63.131.161/ 23.63.131.161	400		Misconfiguration - main pages should never send http status 400 - 499
N	https://23.63.131.161/ 23.63.131.161	400		Error - Certificate isn't trusted, RemoteCertificateNameMismatch
O	att.com / 144.160.36.42 / 443			Old connection: Cipher Suites without Forward Secrecy (FS) found. Remove all of these Cipher Suites, use only Cipher Suites with Forward Secrecy: Starting with ECDHE- or DHE - the last "E" says: "ephemeral". Or use Tls.1.3, then all Cipher Suites use FS. 12 Cipher Suites without Forward Secrecy found
O	att.com / 144.160.155.43 / 443			Old connection: Cipher Suites without Forward Secrecy (FS) found. Remove all of these Cipher Suites, use only Cipher Suites with Forward Secrecy: Starting with ECDHE- or DHE - the last "E" says: "ephemeral". Or use Tls.1.3, then all Cipher Suites use FS. 12 Cipher Suites without Forward Secrecy found
A	Good: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain att.com, 2 ip addresses.
	Info: Checking the ip addresses of that domain name not exact one certificate found. So it's impossible to check if that domain requires Server Name Indication (SNI).: Domain att.com, 2 ip addresses.
B	No _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.att.com
	2. Header-Checks
A	www.att.com 23.63.131.161	X-Content-Type-Options		Ok: Header without syntax errors found: nosniff
A		Referrer-Policy		Ok: Header without syntax errors found: same-origin
A		X-Frame-Options		Ok: Header without syntax errors found: SAMEORIGIN
B				Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A		X-Xss-Protection		Ok: Header without syntax errors found: 0; mode=block
B				Info: Header is deprecated. May not longer work in modern browsers. 0; mode=block
F	www.att.com 23.63.131.161	Content-Security-Policy		Critical: Missing Header:
F	www.att.com 23.63.131.161	Permissions-Policy		Critical: Missing Header:
B	www.att.com 23.63.131.161	Cross-Origin-Embedder-Policy		Info: Missing Header
B	www.att.com 23.63.131.161	Cross-Origin-Opener-Policy		Info: Missing Header
B	www.att.com 23.63.131.161	Cross-Origin-Resource-Policy		Info: Missing Header
	3. DNS- and NameServer - Checks
A	Info:: 16 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 6 Name Servers.
A	Info:: 16 Queries complete, 16 with IPv6, 0 with IPv4.
A	Good: All DNS Queries done via IPv6.
A	Good: Some ip addresses of name servers found with the minimum of two DNS Queries. One to find the TLD-Zone, one to ask the TLD-Zone.a22-67.akam.net (23.211.61.67, 2600:1480:7800::43)
A	Good (1 - 3.0):: An average of 2.7 queries per domain name server required to find all ip addresses of all name servers.
A	Info:: 7 different Name Servers found: a11-65.akam.net, a1-187.akam.net, a22-67.akam.net, a2-64.akam.net, a4-64.akam.net, a5-66.akam.net, ns0.attdns.com, 6 Name Servers included in Delegation: a1-187.akam.net, a11-65.akam.net, a2-64.akam.net, a22-67.akam.net, a4-64.akam.net, a5-66.akam.net, 6 Name Servers included in 2 Zone definitions: a1-187.akam.net, a11-65.akam.net, a2-64.akam.net, a22-67.akam.net, a4-64.akam.net, a5-66.akam.net, 1 Name Servers listed in SOA.Primary: ns0.attdns.com.
A	Good: Only one SOA.Primary Name Server found.: ns0.attdns.com.
	Error: SOA.Primary Name Server not included in the delegation set.: ns0.attdns.com.
A	Good: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: a1-187.akam.net, a11-65.akam.net, a2-64.akam.net, a22-67.akam.net, a4-64.akam.net, a5-66.akam.net
A	Good: All Name Server Domain Names have a Public Suffix.
	Error: Name Server Domain Names with Public Suffix and without ip address found.: 1 Name Servers without ipv4 and ipv6: 1

A	Good: Minimal 2 different name servers (public suffix and public ip address) found: 6 different Name Servers found
A	Good: All name servers have ipv4- and ipv6-addresses.: 6 different Name Servers found
	Warning: All Name Servers have the same Top Level Domain / Public Suffix. If there is a problem with that Top Level Domain, your domain may be affected. Better: Use Name Servers with different top level domains.: 6 Name Servers, 1 Top Level Domain: net
A	Good: Name Servers with different domain names found.: 2 different Domains found
A	Good: Name servers with different Country locations found: 6 Name Servers, 2 Countries: GB, US
A	Info: Ipv4-Subnet-list: 6 Name Servers, 5 different subnets (first Byte): 193., 23., 72., 84., 95., 5 different subnets (first two Bytes): 193.108., 23.211., 72.246., 84.53., 95.100., 6 different subnets (first three Bytes): 193.108.91., 23.211.61., 72.246.46., 84.53.139., 95.100.168., 95.100.174.
A	Good: Name Server IPv4-addresses from different subnet found:
A	Info: IPv6-Subnet-list: 6 Name Servers with IPv6, 1 different subnets (first block): 2600:, 2 different subnets (first two blocks): 2600:1401:, 2600:1480:, 6 different subnets (first three blocks): 2600:1401:0002:, 2600:1480:0001:, 2600:1480:7000:, 2600:1480:7800:, 2600:1480:9000:, 2600:1480:b000:, 6 different subnets (first four blocks): 2600:1401:0002:0000:, 2600:1480:0001:0000:, 2600:1480:7000:0000:, 2600:1480:7800:0000:, 2600:1480:9000:0000:, 2600:1480:b000:0000:
A	Good: Name Server IPv6 addresses from different subnets found.
A	Good: Nameserver supports TCP connections: 12 good Nameserver
A	Info: Nameserver mit different domain names found. May be a problem with DNS-Updates
A	Good: Nameserver supports Echo Capitalization: 12 good Nameserver
A	Good: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 12 good Nameserver
	Nameserver doesn't pass all EDNS-Checks: internal.akadns.net: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
	Nameserver doesn't pass all EDNS-Checks: internal.akadns.net: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
	Nameserver doesn't pass all EDNS-Checks: internal.akadns.net: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
	Nameserver doesn't pass all EDNS-Checks: ns0.attdns.com: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
A	Good: All SOA have the same Serial Number
	Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.
	4. Content- and Performance-critical Checks
A	Good: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
A	Good: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
	https://www.att.com/ 23.63.131.161	200		Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
A	Good: Every https result with status 200 has a minified Html-Content with a quota lower then 110 %.
A	Good: Every https connection via port 443 supports the http/2 protocol via ALPN.
A	Good: Some script Elements (type text/javascript) with a src-Attribute have a defer / async - Attribute. So loading and executing these JavaScripts doesn't block parsing and rendering the Html-Output.
	https://www.att.com/ 23.63.131.161	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 7 script elements without defer/async.
A	Good: All CSS / JavaScript files are sent compressed (gzip, deflate, br checked). That reduces the content of the files. 31 external CSS / JavaScript files found
A	Good: All images with internal compression not compressed. Some Images (.png, .jpg, .jpeg, .webp, .gif) are already compressed, so an additional compression isn't helpful. 2 images (type image/png, image/jpg, image/jpeg, image/webp, image/gif) found without additional Compression. Not required because these images are already compressed
	Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 1 external CSS / JavaScript files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 29 with Cache-Control max-age too short (minimum 7 days), 3 with Cache-Control long enough, 33 complete.
	Warning: Images with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 0 image files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 2 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 2 complete.
A	Good: All checked attribute values are enclosed in quotation marks (" or ').
A	Good: All img-elements have a valid alt-attribute.: 2 img-elements found.
A	Good: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
	https://www.att.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	404	4.376 seconds	Warning: 404 needs more then one second
A	Info: Different Server-Headers found
A	Duration: 553950 milliseconds, 553.950 seconds

8. Connections

Domain

Port

Cert.

Protocol

KeyExchange

Strength

Cipher

Strength

HashAlgorithm

OCSP stapling

Domain/KeyExchange

IP/Strength

Port/Cipher

Cert./Strength

Protocol/HashAlgorithm

OCSP stapling

att.com

144.160.36.42

443

Tls12

ECDH Ephermal

256

Aes128

128

Sha256

not supported

att.com

144.160.36.42

443

Tls12

ECDH Ephermal

256

Aes128

128

Sha256

not supported

no http/2 via ALPN

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

no http/2 via ALPN

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=att.com, O="AT and T Services, Inc.", L=Dallas, C=US, ST=Texas
	2	CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US
	3	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US

att.com

144.160.155.43

443

Tls12

ECDH Ephermal

256

Aes128

128

Sha256

not supported

att.com

144.160.155.43

443

Tls12

ECDH Ephermal

256

Aes128

128

Sha256

not supported

no http/2 via ALPN

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

no http/2 via ALPN

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=att.com, O="AT and T Services, Inc.", L=Dallas, C=US, ST=Texas
	2	CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US
	3	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US

www.att.com

23.63.131.161

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

www.att.com

23.63.131.161

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=*.att.com, O="AT&T Services, Inc.", L=Dallas, C=US, ST=Texas
	2	CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US
	3	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US

www.att.com

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

www.att.com

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=*.att.com, O="AT&T Services, Inc.", L=Dallas, C=US, ST=Texas
	2	CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US
	3	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US

23.63.131.161

443

name does not match

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

23.63.131.161

443

name does not match

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

no http/2 via ALPN
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

no http/2 via ALPN
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=*.att.com, O="AT&T Services, Inc.", L=Dallas, C=US, ST=Texas
	2	CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US
	3	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US

9. Certificates

CN=att.com, O="AT and T Services, Inc.", L=Dallas, S=Texas, C=US

20.02.2026

24.03.2027
expires in 168 days

att.com, att.net - 2 entries

CN=att.com, O="AT and T Services, Inc.", L=Dallas, S=Texas, C=US

20.02.2026

24.03.2027
expires in 168 days

att.com, att.net - 2 entries

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	03B14D65D1C5FC3A80B089AE12A9A5A2
Thumbprint:	893A9E0440459F1DE0F5B8E04B215725DB87FA72
SHA256 / Certificate:	ZLRBGg2CDGDgqG+ihRGgP4fTH/LsRrDCpv2HzHJlK3U=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	140f88ee038778ab723341b6ba8ed90dd84c93f5ad06947604514dab7d9adfec
SHA256 hex / Subject Public Key Information (SPKI):	140f88ee038778ab723341b6ba8ed90dd84c93f5ad06947604514dab7d9adfec (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://ocsp.digicert.com
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=att.com, O="AT and T Services, Inc.", L=Dallas, S=Texas, C=US

20.02.2026

24.03.2027
expires in 168 days

att.com, att.net - 2 entries

CN=att.com, O="AT and T Services, Inc.", L=Dallas, S=Texas, C=US

20.02.2026

24.03.2027
expires in 168 days

att.com, att.net - 2 entries

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	03B14D65D1C5FC3A80B089AE12A9A5A2
Thumbprint:	893A9E0440459F1DE0F5B8E04B215725DB87FA72
SHA256 / Certificate:	ZLRBGg2CDGDgqG+ihRGgP4fTH/LsRrDCpv2HzHJlK3U=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	140f88ee038778ab723341b6ba8ed90dd84c93f5ad06947604514dab7d9adfec
SHA256 hex / Subject Public Key Information (SPKI):	140f88ee038778ab723341b6ba8ed90dd84c93f5ad06947604514dab7d9adfec (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://ocsp.digicert.com
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US

30.03.2021

30.03.2031
expires in 1635 days

CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US

30.03.2021

30.03.2031
expires in 1635 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	0CF5BD062B5602F47AB8502C23CCF066
Thumbprint:	1B511ABEAD59C6CE207077C0BF0E0043B1382612
SHA256 / Certificate:	yAJfn8Zf38lbPKjMeGe5pYe1J3lzlXkXRj/IE9C2Jak=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	59e738e674221702af1edb87c5200c1a4b75f64fae3d2c3d265124c61bd83c79
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsp.digicert.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US

30.03.2021

30.03.2031
expires in 1635 days

CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US

30.03.2021

30.03.2031
expires in 1635 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	0CF5BD062B5602F47AB8502C23CCF066
Thumbprint:	1B511ABEAD59C6CE207077C0BF0E0043B1382612
SHA256 / Certificate:	yAJfn8Zf38lbPKjMeGe5pYe1J3lzlXkXRj/IE9C2Jak=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	59e738e674221702af1edb87c5200c1a4b75f64fae3d2c3d265124c61bd83c79
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsp.digicert.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US

29.10.2024

09.11.2031
expires in 1859 days

CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US

29.10.2024

09.11.2031
expires in 1859 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	0E7D75235CA83761577F4CCD24CD6D1D
Thumbprint:	B7402517EEAAC80AB04681186E8247BD7851CD0A
SHA256 / Certificate:	oNYJp+PENOh4qaHBvQZbjc8zqn7+4bEbx1zOXloEIIA=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	8bb593a93be1d0e8a822bb887c547890c3e706aad2dab76254f97fb36b82fc26
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsp.digicert.cn
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US

01.08.2013

15.01.2038
expires in 4118 days

CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US

01.08.2013

15.01.2038
expires in 4118 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	033AF1E6A711A9A0BB2864B11D09FAE5
Thumbprint:	DF3C24F9BFD666761B268073FE06D1CC8D4F82A4
SHA256 / Certificate:	yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18=
SHA256 hex / Cert (DANE * 0 1):	cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA256 hex / PublicKey (DANE * 1 1):	8bb593a93be1d0e8a822bb887c547890c3e706aad2dab76254f97fb36b82fc26
SHA256 hex / Subject Public Key Information (SPKI):	8bb593a93be1d0e8a822bb887c547890c3e706aad2dab76254f97fb36b82fc26
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US

10.11.2006

10.11.2031
expires in 1860 days

CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US

10.11.2006

10.11.2031
expires in 1860 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA-1 with RSA Encryption
Serial Number:	02AC5C266A0B409B8F0B79F2AE462577
Thumbprint:	5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25
SHA256 / Certificate:	dDHl9MPBzkaQd08LYeBUQIg7qaAe0Aumq9eAbtOxGM8=
SHA256 hex / Cert (DANE * 0 1):	7431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf
SHA256 hex / PublicKey (DANE * 1 1):	5a889647220e54d6bd8a16817224520bb5c78e58984bd570506388b9de0f075f
SHA256 hex / Subject Public Key Information (SPKI):	5a889647220e54d6bd8a16817224520bb5c78e58984bd570506388b9de0f075f
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=*.att.com, O="AT&T Services, Inc.", L=Dallas, S=Texas, C=US

29.09.2026

16.04.2027
expires in 191 days

*.att.com - 1 entry

CN=*.att.com, O="AT&T Services, Inc.", L=Dallas, S=Texas, C=US

29.09.2026

16.04.2027
expires in 191 days

*.att.com - 1 entry

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	0ADDA876A89F98E2AEE5EF074AB1D7AA
Thumbprint:	944E49447B3DF1430B96CA023392EEC3E73328D0
SHA256 / Certificate:	dMUo6anfei3HLZKecOuoSJ7WOv8jWTgLM4yTLp3aMCY=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	cb2464622b7322a2635f18eb2cfc4dd85d74a081df5f7648b440baa23da54f96
SHA256 hex / Subject Public Key Information (SPKI):	cb2464622b7322a2635f18eb2cfc4dd85d74a081df5f7648b440baa23da54f96 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://ocsp.digicert.com
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=*.att.com, O="AT&T Services, Inc.", L=Dallas, S=Texas, C=US

29.09.2026

16.04.2027
expires in 191 days

*.att.com - 1 entry

CN=*.att.com, O="AT&T Services, Inc.", L=Dallas, S=Texas, C=US

29.09.2026

16.04.2027
expires in 191 days

*.att.com - 1 entry

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	0ADDA876A89F98E2AEE5EF074AB1D7AA
Thumbprint:	944E49447B3DF1430B96CA023392EEC3E73328D0
SHA256 / Certificate:	dMUo6anfei3HLZKecOuoSJ7WOv8jWTgLM4yTLp3aMCY=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	cb2464622b7322a2635f18eb2cfc4dd85d74a081df5f7648b440baa23da54f96
SHA256 hex / Subject Public Key Information (SPKI):	cb2464622b7322a2635f18eb2cfc4dd85d74a081df5f7648b440baa23da54f96 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://ocsp.digicert.com
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US

30.03.2021

30.03.2031
expires in 1635 days

CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US

30.03.2021

30.03.2031
expires in 1635 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	0CF5BD062B5602F47AB8502C23CCF066
Thumbprint:	1B511ABEAD59C6CE207077C0BF0E0043B1382612
SHA256 / Certificate:	yAJfn8Zf38lbPKjMeGe5pYe1J3lzlXkXRj/IE9C2Jak=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	59e738e674221702af1edb87c5200c1a4b75f64fae3d2c3d265124c61bd83c79
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsp.digicert.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US

30.03.2021

30.03.2031
expires in 1635 days

CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US

30.03.2021

30.03.2031
expires in 1635 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	0CF5BD062B5602F47AB8502C23CCF066
Thumbprint:	1B511ABEAD59C6CE207077C0BF0E0043B1382612
SHA256 / Certificate:	yAJfn8Zf38lbPKjMeGe5pYe1J3lzlXkXRj/IE9C2Jak=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	59e738e674221702af1edb87c5200c1a4b75f64fae3d2c3d265124c61bd83c79
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsp.digicert.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US

01.08.2013

15.01.2038
expires in 4118 days

CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US

01.08.2013

15.01.2038
expires in 4118 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	033AF1E6A711A9A0BB2864B11D09FAE5
Thumbprint:	DF3C24F9BFD666761B268073FE06D1CC8D4F82A4
SHA256 / Certificate:	yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18=
SHA256 hex / Cert (DANE * 0 1):	cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA256 hex / PublicKey (DANE * 1 1):	8bb593a93be1d0e8a822bb887c547890c3e706aad2dab76254f97fb36b82fc26
SHA256 hex / Subject Public Key Information (SPKI):	8bb593a93be1d0e8a822bb887c547890c3e706aad2dab76254f97fb36b82fc26
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US

29.10.2024

09.11.2031
expires in 1859 days

CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US

29.10.2024

09.11.2031
expires in 1859 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	0E7D75235CA83761577F4CCD24CD6D1D
Thumbprint:	B7402517EEAAC80AB04681186E8247BD7851CD0A
SHA256 / Certificate:	oNYJp+PENOh4qaHBvQZbjc8zqn7+4bEbx1zOXloEIIA=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	8bb593a93be1d0e8a822bb887c547890c3e706aad2dab76254f97fb36b82fc26
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsp.digicert.cn
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US

10.11.2006

10.11.2031
expires in 1860 days

CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US

10.11.2006

10.11.2031
expires in 1860 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA-1 with RSA Encryption
Serial Number:	02AC5C266A0B409B8F0B79F2AE462577
Thumbprint:	5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25
SHA256 / Certificate:	dDHl9MPBzkaQd08LYeBUQIg7qaAe0Aumq9eAbtOxGM8=
SHA256 hex / Cert (DANE * 0 1):	7431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf
SHA256 hex / PublicKey (DANE * 1 1):	5a889647220e54d6bd8a16817224520bb5c78e58984bd570506388b9de0f075f
SHA256 hex / Subject Public Key Information (SPKI):	5a889647220e54d6bd8a16817224520bb5c78e58984bd570506388b9de0f075f
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuer				last 7 days	active	num Certs
CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US				0	1	1

CertSpotter-Id	Issuer	not before	not after	Domain names	LE-Duplicate	next LE
13375003537 precert	CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	2026-01-09 00:00:00	2027-02-09 23:59:59	apsconagw-w2.cloud.att.com, conagw-w2.cloud.att.com, www.att.com - 3 entries

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

No CRT - CT-Log entries found

11. Html-Content - Entries

Summary

							Subresource Integrity (SRI)
Domainname	HtmlElement	rel/property	∑	∑ size	∑ problems	∑ int.	∑ ext.	∑ Origin poss.	∑ SRI ParseErrors	∑ SRI valid	∑ SRI missing
https://www.att.com/ 23.63.131.161	a		13		0			0	0	0
	form		2	193,830 Bytes	0	1	0	0	0	0
	img		2	71,211 Bytes	0	2	0	0	0	0
	link	stylesheet	1	24,292 Bytes	0	1	0	0	0	0
	link	other	5	97,808 Bytes	0	4	0	0	0	0
	meta	og	4	213,742 Bytes	0	2	0	0	0	0
	meta	twitter	2		1			0	0	0
	meta	other	10		0			0	0	0
	script		32	770,672 Bytes	32	32	0	0	0	0

Details (currently limited to 500 rows - some problems with spam users)

Domainname	Html-Element	name/equiv/ property/rel	href/src/content	HttpStatus	∑	Status
https://www.att.com/ 23.63.131.161	a		#mega-z2_jump_link				1	ok
								ok


	a		/?customerType=personal				1	ok
								ok


	a		/bundles				1	ok
								ok


	a		/buy/phones				1	ok
								ok


	a		/buy/phones/				1	ok
								ok


	a		/buy/phones/apple-iphone-18-pro.html				1	ok
								ok


	a		/buy/phones/apple-iphone-18-pro-max.html				1	ok
								ok


	a		/buy/wearables/browse/apple				1	ok
								ok


	a		/stores/				1	ok
								ok


	a		https://www.att.com				1	ok
								ok


	a		https://www.business.att.com				1	ok
								ok


	a		javascript:void(0)				1	ok
								ok


	a		tel:8442495043				1	ok
								ok


	form	dialog					1	ok
								ok


	form	get	/search/		200		1	ok
				text/html; charset=utf-8 missing X-Content-Type-Options nosniff				ok
				193830 Bytes

	img	src	/scmsassets/upper_funnel/wireless/8563603-card-shuffle-iphone18promax-retina.jpg		200		1	ok
	alt: iPhone 18 Pro Max			image/jpeg missing X-Content-Type-Options nosniff				ok
	Cache-Control: no-transform, max-age=43200, private - max-age too short.			No Compression - 29637 Bytes
	ETag: "da6ae0aa623f01846b81ced1eb2ce92b:1789000811.222134"

	img	src	/scmsassets/upper_funnel/wireless/8563603-card-shuffle-watch-retina.jpg		200		1	ok
	alt: Apple Watch			image/jpeg missing X-Content-Type-Options nosniff				ok
	Cache-Control: no-transform, max-age=43200, private - max-age too short.			No Compression - 41574 Bytes
	ETag: "7284641fd86f44378d7fcabc51689859:1789038726.591852"

	link	canonical	https://www.att.com/				1	ok
								ok


	link	preload	/scmsassets/upper_funnel/wireless/8563603-cs-base-hero-iphone18pro-po-dsk-retina.jpg		200		1	ok
				image/jpeg missing X-Content-Type-Options nosniff				ok
	Cache-Control: no-transform, max-age=43200, private - max-age too short.			No Compression - 36388 Bytes
	ETag: "f7ff45a980b8286531a25e16f20116e7:1789071607.617354"

	link	preload	/ui/frameworks/css/v2.1.0/core-global-styles-fonts.min.css		200		1	ok
				text/css missing X-Content-Type-Options nosniff				ok
				Compression (br): 24292/142647 Bytes
	ETag: "2d7612ef737a66e7d06d5464cdbb9c88:1782336619.52169"

	link	preload	/ui/frameworks/fonts/ATTAleckSans_W_Bd.woff2		200		1	ok
				font/woff2 missing X-Content-Type-Options nosniff				ok
	Cache-Control: max-age=31536000 with long duration found.			No Compression (): 18648/18648 Bytes, font already compressed
	ETag: "a2d24deeb37e8b4a64b5536ecb11897a:1774296221.887364"

	link	preload	/ui/frameworks/fonts/ATTAleckSans_W_Rg.woff2		200		1	ok
				font/woff2 missing X-Content-Type-Options nosniff				ok
	Cache-Control: max-age=31536000 with long duration found.			No Compression (): 18480/18480 Bytes, font already compressed
	ETag: "15d443231ff3a13b0dcab5a9b8fd7276:1774296228.736622"

	link	stylesheet	/ui/frameworks/css/v2.1.0/core-global-styles-fonts.min.css		200		1	ok
				text/css missing X-Content-Type-Options nosniff				ok
	Cache-Control: max-age=31536000 - with long duration found.			Compression (br): 24292/142647 Bytes
	ETag: "2d7612ef737a66e7d06d5464cdbb9c88:1782336619.52169"
	local SRI possible, possible hash-values: sha256-xxW+KxAFEjHNCu0yu3lrA8n38Uk8LVyhTadup+Wy8mc= sha384-mNYL0lAXcKnDq5CWtWjAxnoKPE7lttr9R7eSw8CsGwIg20viObY7WWKCXodzD4Cg sha512-A7LvTGouRDSBheEB/sWXfS5+xCjg0nztphKhh7Enp9rl0ud7I5xu7E6J6XPq9AdRvkCGM1eDTuOSBLKwEyR8RA== <link rel="stylesheet" href="/ui/frameworks/css/v2.1.0/core-global-styles-fonts.min.css" crossorigin="anonymous" integrity="sha256-xxW+KxAFEjHNCu0yu3lrA8n38Uk8LVyhTadup+Wy8mc=" />

	meta	charset	utf-8				1	ok
								ok


	meta	charset	2410 utf-8				1	ok
								ok


	meta	og:image	https://www.att.com/scmsassets/global/logos/att-logos/vertical/att_globe_500x500.jpg		200		1	ok
				image/jpeg missing X-Content-Type-Options nosniff				ok
	Cache-Control: no-transform, max-age=43200, private - max-age too short.			No Compression - 13686 Bytes
	ETag: "60162ad3a510f787c16c2ac29986bbb8:1682714455.590536"

	meta	og:site_name	AT&T				1	ok
								ok


	meta	og:type	website				1	ok
								ok


	meta	og:url	https://www.att.com/		200		1	ok
				text/html; charset=utf-8 X-Content-Type-Options nosniff found				ok
				200056 Bytes

	meta	twitter:image	https://www.att.com/scmsassets/global/logos/att-logos/vertical/att_globe_500x500.jpg				1	ok
								ok


	meta	twitter:site	AT&T				1	ok
								ok


	meta	description	Get our best deals on phones and internet, backed by the AT&T Guarantee. Shop the latest devices, get 24/7 support, and manage your account online.				1	ok
								ok


	meta	keywords	att, at&t, at&t wireless, at&t internet, at&t support, cell phones, at&t deals, at&t prepaid, at&t bundles, iphones, samsung galaxy, iphone 16				1	ok
								ok


	meta	og:description	Get our best deals on phones and internet, backed by the AT&T Guarantee. Shop the latest devices, get 24/7 support, and manage your account online.				1	ok
								ok


	meta	og:title	AT&T Official Site \| Our Best Wireless & Internet Service				1	ok
								ok


	meta	robots	INDEX,FOLLOW				1	ok
								ok


	meta	twitter:card	Get our best deals on phones and internet, backed by the AT&T Guarantee. Shop the latest devices, get 24/7 support, and manage your account online.				1	content is invalid, only "summary", "summary_large_image", "app" or "player" allowed



	meta	twitter:title	AT&T Official Site \| Our Best Wireless & Internet Service				1	ok
								ok


	meta	viewport	width=device-width				1	ok
								ok


	script	src	/chat/assets/js/andi-ai.min.js?ct=f4bb05a		404	Not Found	1	missing file
	Missing defer / async attribute.			text/html; charset=utf-8 missing X-Content-Type-Options nosniff				missing file
				146 Bytes
	local SRI possible, possible hash-values: sha256-VffZ6ZuOLU4OGTsvAnVQHm2cHr0pytvqag2kioWH4+A= sha384-ZSs6LKr2GoUPDyHrN+rCQgyHL1yUyok5xMniSrgeRG7rUvA6vTmxronM1eZOfjgz sha512-c7v2mEghMrX9YKC1iSb93skFX4CVpTvFJxTiEek0DDQZc2zq/WsnlmeBARTTBr/M3Pzd9RwLZ/6ePHPFRYPldA== <script src="/chat/assets/js/andi-ai.min.js?ct=f4bb05a" crossorigin="anonymous" integrity="sha256-VffZ6ZuOLU4OGTsvAnVQHm2cHr0pytvqag2kioWH4+A=" />

	script	src	/marketing/_next/static/1790067249715/_buildManifest.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
	Cache-Control: public, max-age=2571105 - with long duration found.			436 Bytes
	ETag: W/"33e-1a0c852c618"
	local SRI possible, possible hash-values: sha256-Ziz1EU1VP4TIr8LULQQpQouelm2ogEDcKiwrbpXQlQQ= sha384-t9M4wbFG7ajJlkODc96374MXFolNEUqt+R3xdyHum2zpqQluOgqeyrkIYKD2YKub sha512-M+a+e+46/0SGjo1TFvLSTJffkrlg9gOxvhkF3YtTn6fnHysLQ8cZQ5HD8J2SeecGlmeXbpQbuwHv0mXNTbvj4w== <script src="/marketing/_next/static/1790067249715/_buildManifest.js" crossorigin="anonymous" integrity="sha256-Ziz1EU1VP4TIr8LULQQpQouelm2ogEDcKiwrbpXQlQQ=" />

	script	src	/marketing/_next/static/1790067249715/_ssgManifest.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
	Cache-Control: public, max-age=2574675 - with long duration found.			51 Bytes
	ETag: W/"4d-1a0c852c618"
	local SRI possible, possible hash-values: sha256-b1tKoA0vjWrtmTW0cYBr96zvRk0MHTkCYOX+J/gAxn4= sha384-3aXL6K9hEH0v7VEPSdSPEfP6gaGeEGnUA/ujvO7qqr9y/dysVarqY7VCk8KSf3Tg sha512-M5DFZj75CBiF34zbxxn2wvFZek4lFoUpWYCX6UcmCKSmLsf34LxADSKqyBv26pJlMohuTcbk4nLTtYhJCgkEcw== <script src="/marketing/_next/static/1790067249715/_ssgManifest.js" crossorigin="anonymous" integrity="sha256-b1tKoA0vjWrtmTW0cYBr96zvRk0MHTkCYOX+J/gAxn4=" />

	script	src	/marketing/_next/static/chunks/1321-5ec71d905d75fa34.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 76498/346561 Bytes
	ETag: W/"549c1-1a0c852c618"
	local SRI possible, possible hash-values: sha256-12tdg2375I0hr251A0ESvNqs/pZ5zsmwC8Jofui6/b4= sha384-lJdKod2FoteNaM/SwncZ1I0lnwX3Vf/vZMkj8HJjmAKBo8dPgANuOEytTbhv2IBE sha512-vWAyTRcJOL79wiApN50vL8htQI6RbNgbymzgfib6lZOkLs0X12TTr+uAZA5h551MOFg6Pmjd2N0MmDMGIVLrnw== <script src="/marketing/_next/static/chunks/1321-5ec71d905d75fa34.js" crossorigin="anonymous" integrity="sha256-12tdg2375I0hr251A0ESvNqs/pZ5zsmwC8Jofui6/b4=" />

	script	src	/marketing/_next/static/chunks/1914-39dd3279d73e6944.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 22700/91614 Bytes
	ETag: W/"165de-1a0c852c618"
	local SRI possible, possible hash-values: sha256-TPHsLzIQQZqsqGLgcnQiMRcPyOa7sXovK1fwgohwXcU= sha384-LxXo+Egfgy5Q5rfivu+ildD0PpNpItoitCJoDipNyR0xMkyYrVhnPevEoYVpfTSF sha512-HrwXwmG65fz3l++VrHVpUSD8i7/DEWHmU1yfHZyroslA+rwTUahao3F8+PuBT1RU1dXiKLGTu4FRrulG8/8zIQ== <script src="/marketing/_next/static/chunks/1914-39dd3279d73e6944.js" crossorigin="anonymous" integrity="sha256-TPHsLzIQQZqsqGLgcnQiMRcPyOa7sXovK1fwgohwXcU=" />

	script	src	/marketing/_next/static/chunks/3063.3b5e091136303302.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 2854/11555 Bytes
	ETag: W/"2d23-1a0c852c618"
	local SRI possible, possible hash-values: sha256-wu8WFQwjKm9HG7HFe51+aRHaYHua8GZmQQIzeQZmXBE= sha384-dPKMBSFjsiHvgqBI81OjPJ6saOcQKOXGbb+CCwUIy5YIY1G+wZOMFyvBnQX1jbBB sha512-Csvf35yReaMZlpXDcyEQte5aT7wukzuUdOO0U05ULbQebLyzExJAGK7fyTezeitG+jfSsj90gXwul3z44HdmMA== <script src="/marketing/_next/static/chunks/3063.3b5e091136303302.js" crossorigin="anonymous" integrity="sha256-wu8WFQwjKm9HG7HFe51+aRHaYHua8GZmQQIzeQZmXBE=" />

	script	src	/marketing/_next/static/chunks/3133.140341f85032456b.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 1273/2787 Bytes
	ETag: W/"ae3-1a0c852c618"
	local SRI possible, possible hash-values: sha256-S0VLfpBumFPL5SFzrwHJPIV9MFV5YSPOUJ5uOeL7HJE= sha384-CIv6dk70S8AR8w2CmWgJpKUeQa6DR9SHBB3uEXuRrJCgXqUmynCtbWRJG4Wq4BUf sha512-b3xsZx5XXtyuX30ui3c/r6AZL7MfLC9zUKbH7dZR+zxBbSs84gmVBNeuNcijy6qPy0peShx4sPNIsC9QwdjABw== <script src="/marketing/_next/static/chunks/3133.140341f85032456b.js" crossorigin="anonymous" integrity="sha256-S0VLfpBumFPL5SFzrwHJPIV9MFV5YSPOUJ5uOeL7HJE=" />

	script	src	/marketing/_next/static/chunks/4087.1e798058d0fdcd13.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 849/1758 Bytes
	ETag: W/"6de-1a0c852c618"
	local SRI possible, possible hash-values: sha256-bCeebg8xAitf3DkbVN0KOE7+Xq9YyIWaCvBjJ1vBURY= sha384-bacBfE8AwZ9RjXms7tJ94XigZmj293SqQP9PFrWeK/NTT8CpsWlgJcXoUC9ab+Tn sha512-bXEy1+LGZCseCX2jQ/YCggaGNDJQ9gNUXpo2y7mLOidkgPvJejfL5+8F2uDpmzOXs7IeSwc3ahdImHMZp5Ov6Q== <script src="/marketing/_next/static/chunks/4087.1e798058d0fdcd13.js" crossorigin="anonymous" integrity="sha256-bCeebg8xAitf3DkbVN0KOE7+Xq9YyIWaCvBjJ1vBURY=" />

	script	src	/marketing/_next/static/chunks/508.9f247ac81bb1e003.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 5517/20843 Bytes
	ETag: W/"516b-1a0c852c618"
	local SRI possible, possible hash-values: sha256-WTcarpfUMXz2ZJ/O1fGf+TCUQjvsjGkVweF1z9Owtsw= sha384-khZ9aSfBF5WmLE0c6B+iNOrITKXqucC13EtsubmQsgjs/nOZGQBbp73Zrhv7gJL8 sha512-B6DODLcKTnHVW/j0+JjiwKwgMiHq/6HouSvHOULmpbuY5IUgC3V4VbOUqJi5YVBJg9666QouXK55WeKHlxRb1Q== <script src="/marketing/_next/static/chunks/508.9f247ac81bb1e003.js" crossorigin="anonymous" integrity="sha256-WTcarpfUMXz2ZJ/O1fGf+TCUQjvsjGkVweF1z9Owtsw=" />

	script	src	/marketing/_next/static/chunks/6005.38c576236999e8b5.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 12180/53597 Bytes
	ETag: W/"d15d-1a0c852c618"
	local SRI possible, possible hash-values: sha256-wmN27rgyu/J/ADWIqo7Rc/x7ikRVXbYY8D6WoDtx+B4= sha384-IkIMTnFw3Vk0AHoiv4h8Ff3jvFF8PwQRNct4v20bhKFRdy33w1EpB6yGWu47/KRX sha512-KrrU18mcqRFRJgFoQMR1chWxFugQdw/puaqebr4j/7ltO8Vnn7jFKburyjqNJmI0AsffTVmt8LT9+QTNcC+ymw== <script src="/marketing/_next/static/chunks/6005.38c576236999e8b5.js" crossorigin="anonymous" integrity="sha256-wmN27rgyu/J/ADWIqo7Rc/x7ikRVXbYY8D6WoDtx+B4=" />

	script	src	/marketing/_next/static/chunks/6154.e97d2545658c36d8.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 8125/21614 Bytes
	ETag: W/"546e-1a0c852c618"
	local SRI possible, possible hash-values: sha256-xDKWq820LLhh/8+XdE8PNLdu2BNLp5MPMfh5Wy7fvlg= sha384-2ymVSzfyy9TsV8iP1lqKrEEaMhxUEIuLHNGeESN5NPZpAZnJ4maCzGxGn4aJmPp3 sha512-SS7o9pJqIxMVJofpyaP589Dbkir1yWcWNZwNSpxcPoAplZXnMG2S/POkDjexNNdclSni6ylkIh6/Svk7ROVrEQ== <script src="/marketing/_next/static/chunks/6154.e97d2545658c36d8.js" crossorigin="anonymous" integrity="sha256-xDKWq820LLhh/8+XdE8PNLdu2BNLp5MPMfh5Wy7fvlg=" />

	script	src	/marketing/_next/static/chunks/6217-cd69563e6e54f3fc.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 32584/149439 Bytes
	ETag: W/"247bf-1a0c852c618"
	local SRI possible, possible hash-values: sha256-dOlG/BmUV99GTZAgDlDPhzdsTbvDVSDLPwTq2fG/J8s= sha384-WLZGZb0g9JvtrufcPX8AE99t1+1rFjCIbLmRlMtbs3atJ+iTU0tbymQB2djKnEVc sha512-5h/IG+Muhl2PTHlzOFBpMoWCYuIyU64bCMWYPdSQIluPbZCOijb7gq73Kil6/mQB+gEAHAesO2rQV221CvGWWQ== <script src="/marketing/_next/static/chunks/6217-cd69563e6e54f3fc.js" crossorigin="anonymous" integrity="sha256-dOlG/BmUV99GTZAgDlDPhzdsTbvDVSDLPwTq2fG/J8s=" />

	script	src	/marketing/_next/static/chunks/6657.a26cc72f8621231e.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 69729/313197 Bytes
	ETag: W/"4c76d-1a0c852c618"
	local SRI possible, possible hash-values: sha256-dmwNGVDa18WZjXFav9AzFVFf0aa5lTcb8RaRZ4uEZ0M= sha384-fvRIB48zU2BivpWdy+rA12bFvUB9Mkl6ilDwdTqOJN2ClhNwYdlBK3zNCso+4Z4X sha512-Mv8SD3jd2RQfZVu0amWwvRfQLowFSo9lh+0dtODky9Qt76BAsKgYbHP32eKlyavDu0TFbpKHiCxdr/HosPQ9jw== <script src="/marketing/_next/static/chunks/6657.a26cc72f8621231e.js" crossorigin="anonymous" integrity="sha256-dmwNGVDa18WZjXFav9AzFVFf0aa5lTcb8RaRZ4uEZ0M=" />

	script	src	/marketing/_next/static/chunks/772.9600d8331f5a8f2d.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 914/2020 Bytes
	ETag: W/"7e4-1a0c852c618"
	local SRI possible, possible hash-values: sha256-Kpjc2oGGs/m4Od4wfHy4b+PbO0HXDU78IJ12yaNHewQ= sha384-NS2bdI7bnk7NVek0B3MSVlcFCm8WPrP0zawJEa+HfYsY16w98AN9BMjc9TFW7S52 sha512-3CDo/skgcnXYv8186Sd2T9XcHVE83/E2MhOXc7LbI39MdKSNrQ6qqQOdkvbauQTm0qHpBQfRoQhyJBQWCo3RIw== <script src="/marketing/_next/static/chunks/772.9600d8331f5a8f2d.js" crossorigin="anonymous" integrity="sha256-Kpjc2oGGs/m4Od4wfHy4b+PbO0HXDU78IJ12yaNHewQ=" />

	script	src	/marketing/_next/static/chunks/8404-0c35d3175725b534.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 15588/53136 Bytes
	ETag: W/"cf90-1a0c852c618"
	local SRI possible, possible hash-values: sha256-a6g7HuPgIn+CLxVGzNknj+XM60g/9ZWwFiFgMer1Nig= sha384-mSfYKfgkBP2mYATnRf+BWFcMvv3RJvLt02xvpuT9kmnNt6e5w6++Nt9GDVSMBnOt sha512-cphTMtvw4YJ/eZgsrgUvM5l45kzjn5sWA36nuJbIiUc4zicImDKmbrdHV90f92ZYhU7C0y4F0pzTyMVIWhsmFg== <script src="/marketing/_next/static/chunks/8404-0c35d3175725b534.js" crossorigin="anonymous" integrity="sha256-a6g7HuPgIn+CLxVGzNknj+XM60g/9ZWwFiFgMer1Nig=" />

	script	src	/marketing/_next/static/chunks/9201-1160f938e5d6630e.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 7229/25120 Bytes
	ETag: W/"6220-1a0c852c618"
	local SRI possible, possible hash-values: sha256-xni6BAfko7inbzddVLN1OBRsQGmFpjDhicmCAB3DJFw= sha384-LUCZJar3cWgib2jNY64jQKqpE7zT7BhjY7E7c25fjoxHAfko47CRFg8hjopBOser sha512-Jyd9rhBdgeq7YG+WdFlV5vwnWgSOsK9O8wcREB81En9sHNt8V69lR2EoZwqOartFzrXOPvZrcJsJ5/+2Im+vqg== <script src="/marketing/_next/static/chunks/9201-1160f938e5d6630e.js" crossorigin="anonymous" integrity="sha256-xni6BAfko7inbzddVLN1OBRsQGmFpjDhicmCAB3DJFw=" />

	script	src	/marketing/_next/static/chunks/9478-6f3607563823a213.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 4410/15646 Bytes
	ETag: W/"3d1e-1a0c852c618"
	local SRI possible, possible hash-values: sha256-/ScRHeo6hBo6Rd7SOxTa85eeujx+N47YkEt6t3JXtX8= sha384-wi5pkDdsvnYL3iHwb8J0tck3DNBAPEIpTyKmBQWfwklLd1k5KOypB6nm/O5I8UbL sha512-TPW7uJ/i3G6rv8kuECAnpsHZbTf10CTSOcRbwlxUYDFMk9us6pQlGzZaes5wOHtzO/R/U78pia3JgkhIB8VExw== <script src="/marketing/_next/static/chunks/9478-6f3607563823a213.js" crossorigin="anonymous" integrity="sha256-/ScRHeo6hBo6Rd7SOxTa85eeujx+N47YkEt6t3JXtX8=" />

	script	src	/marketing/_next/static/chunks/9578.4d858d80da27a67f.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 4364/14051 Bytes
	ETag: W/"36e3-1a0c852c618"
	local SRI possible, possible hash-values: sha256-riEcEU8cIbIYohDgJtlURwBU4FRlSlsZhHvgM++B+qY= sha384-SP9bR1n7wz0Dbdd2sTf2tJWsoR3xduvEROH07fSf6ciRvuMZQ7ricw463SEh5135 sha512-pIygQpDpqubL/fwSk6nG+2fdZuRDLZXSPSg8i9aydSJVi51aFK7j5PTgA6oDNqB5SLzxgbd7j73GGfhoqeZfUA== <script src="/marketing/_next/static/chunks/9578.4d858d80da27a67f.js" crossorigin="anonymous" integrity="sha256-riEcEU8cIbIYohDgJtlURwBU4FRlSlsZhHvgM++B+qY=" />

	script	src	/marketing/_next/static/chunks/9727.a7c841e91bc9b1ce.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 4494/17195 Bytes
	ETag: W/"432b-1a0c852c618"
	local SRI possible, possible hash-values: sha256-FYp5w+46DeUVkQg1bdw0f+0WX9k2aLM2YhyiMXdHi9o= sha384-LrfR93TY5ZeavtnIeyl9wxGUH505U+nkOgmOtC+lCjarKW5WvJQxyDzyqTH6wmeZ sha512-aOEif0wTIMWKdTkm1NoU+MDiX1aHHmvpccC9mkS5kNL8bVxfmv8pykoMG5d+2Fvl6r6xLCcavkkkmITlKQI5rg== <script src="/marketing/_next/static/chunks/9727.a7c841e91bc9b1ce.js" crossorigin="anonymous" integrity="sha256-FYp5w+46DeUVkQg1bdw0f+0WX9k2aLM2YhyiMXdHi9o=" />

	script	src	/marketing/_next/static/chunks/9749.bbbb98a7be806849.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 2856/7972 Bytes
	ETag: W/"1f24-1a0c852c618"
	local SRI possible, possible hash-values: sha256-1PT2Ji8KB+HGor2XB21Fvf7kvGybAZPe94WlzyK4NX8= sha384-az5aeXBbbZ5lvAMHMmrOmxrABK5G4oszHODyEwq7Xr595gDI4oBsseSwV5B0i25b sha512-AStr9MLsWhF6RaCX7YBPa/51qOSmC9Ms5VukOGcwQiv3WbpW/uyUDss6u6NuR0kdHojbzsivcGEktertuk/ryA== <script src="/marketing/_next/static/chunks/9749.bbbb98a7be806849.js" crossorigin="anonymous" integrity="sha256-1PT2Ji8KB+HGor2XB21Fvf7kvGybAZPe94WlzyK4NX8=" />

	script	src	/marketing/_next/static/chunks/framework-1ac38ca7ab4f8477.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 43560/139864 Bytes
	ETag: W/"22258-1a0c852c618"
	local SRI possible, possible hash-values: sha256-t8Kg3mhAFnDXoX/q/r5LUSvyeH6sgW5pITC3eVVYRRk= sha384-v5hNTXMXKe+SW34kOtaqO4+KB/X1guBs5csD9+h1xbtXShYb6jLTd/rHEwTWdk2T sha512-MGImgr8gF8CEMNLDF+pb7gSGdl3Zn0sAhfugUhrR62sLRNE7huKDMgqVUGtOnI99j+VU39S11nH+gpzY5EvGIA== <script src="/marketing/_next/static/chunks/framework-1ac38ca7ab4f8477.js" crossorigin="anonymous" integrity="sha256-t8Kg3mhAFnDXoX/q/r5LUSvyeH6sgW5pITC3eVVYRRk=" />

	script	src	/marketing/_next/static/chunks/main-0fc7ba932e18d329.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 35006/126808 Bytes
	ETag: W/"1ef58-1a0c852c618"
	local SRI possible, possible hash-values: sha256-pvCxnp555KU4SZ0zlCfq5/9wt7wBZ4N6gF14EU/OutM= sha384-5eEdUeWkmesrEFsgqYIsjBB/A+AucZAASU4SN1EPw4TG63RDkzPCLue4jYfAL/nt sha512-QApnyRCuKLMlTThSKi2oIEbJBoAc8RLQsl+a+VIGqHfXl1jr1K6uv31DBcujwW47jx/jIVwt66W+9zhCa0ZjFg== <script src="/marketing/_next/static/chunks/main-0fc7ba932e18d329.js" crossorigin="anonymous" integrity="sha256-pvCxnp555KU4SZ0zlCfq5/9wt7wBZ4N6gF14EU/OutM=" />

	script	src	/marketing/_next/static/chunks/pages/_app-fbcaa98ed3871960.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 18186/64012 Bytes
	ETag: W/"fa0c-1a0c852c618"
	local SRI possible, possible hash-values: sha256-tFawfgYNDXmvStw25kTVsQwLlcQ9vrDwDFtMy9lS15A= sha384-2pBcNuBr08SRgzBMYeAIQHVHneSyw9XaGBjxMyd7djskPSVgYBBP/hG8Eh5VnqNp sha512-FlQM8s7JDih2uMDpNcT7Ti+UiptKOw/jjoBrDzpeh9Ecnt1Wg2aKkne1RorJ0JA2e9XOTBsOe7i93Qh7ciPwTQ== <script src="/marketing/_next/static/chunks/pages/_app-fbcaa98ed3871960.js" crossorigin="anonymous" integrity="sha256-tFawfgYNDXmvStw25kTVsQwLlcQ9vrDwDFtMy9lS15A=" />

	script	src	/marketing/_next/static/chunks/pages/_page-d8798e3a6a531e7a.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 4907/17769 Bytes
	ETag: W/"4569-1a0c852c618"
	local SRI possible, possible hash-values: sha256-gM03FfQaTImEL3/a4b6R1g2GSmE0ULaKaGByvZy1btA= sha384-QLBUfR+suKRB0XWC5ncGZxK6Cs8HZsErwnKSohA5FNi4eczXO26WJatm1Pr0tRJj sha512-c61OtE1GUibJPYon3TPaaJtemu3kkSs8YsU8KMCnNROtT8haGp6/55QF/R32D4JDlgptJjrqYGXxMQqeCZ+3FQ== <script src="/marketing/_next/static/chunks/pages/_page-d8798e3a6a531e7a.js" crossorigin="anonymous" integrity="sha256-gM03FfQaTImEL3/a4b6R1g2GSmE0ULaKaGByvZy1btA=" />

	script	src	/marketing/_next/static/chunks/polyfills-42372ed130431b0a.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 38589/112594 Bytes
	ETag: W/"1b7d2-1a0c852c618"
	local SRI possible, possible hash-values: sha256-CXPB1kyIrcjjyVBBDLWLKI9yEY1ZZbeASUON648vloM= sha384-w1OChgUsMz6Qk5chKcfnqibG8VNLM2FcpIoMlpX/PTNfc9SE68eLEzTKv7bV3aY7 sha512-rUCv+bjASeo6Ap6zeZkK7zhLn8HGeczlp+A2rq56tffjmjvLjPQ7YBXxXKkux3/9K8FhGdxIAVDyObEBksBwKw== <script src="/marketing/_next/static/chunks/polyfills-42372ed130431b0a.js" crossorigin="anonymous" integrity="sha256-CXPB1kyIrcjjyVBBDLWLKI9yEY1ZZbeASUON648vloM=" />

	script	src	/marketing/_next/static/chunks/webpack-7b4609211ab4e3fa.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=UTF-8 missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
				Compression (br): 2711/5176 Bytes
	ETag: W/"1438-1a0c852c618"
	local SRI possible, possible hash-values: sha256-mmJaRh4UhVax1/5mQFoM9i+8aIgVv5JIOMt5BFcVH0g= sha384-8GvtO6vSjspS3vfzn2B/fKkhHH9Sp46Ulbe31Cz++vPpaNP+A8/ZM6DIbkhnrt61 sha512-pbNDcKwVKomAUAaJ29E0w22/NepOLAW0fAkayCiDpHXJNoTxjnXVjeTvFQ+NeTRQpDJfOMCHxLa/B6GAAIWZDw== <script src="/marketing/_next/static/chunks/webpack-7b4609211ab4e3fa.js" crossorigin="anonymous" integrity="sha256-mmJaRh4UhVax1/5mQFoM9i+8aIgVv5JIOMt5BFcVH0g=" />

	script	src	/nav/component.js?ct=f4bb05a		200		1	Problems with Content-Type - Header - see details
	Missing defer / async attribute.			application/javascript; charset=UTF-8 X-Content-Type-Options nosniff found		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
	Cache-Control: max-age=900 - max-age too short.			Compression (br): 9532/32211 Bytes
	ETag: W/"7dd3-1a0ca129e88"
	local SRI possible, possible hash-values: sha256-0F7SzJsxUKEwW2ApEIoWp3lSk6GIZsGkC89GART26eo= sha384-kejcDOOLDOtCegNKR1SB8uk+XdtY1k7sJ1KNLs9BTdM+A58RuhJCYSGTc93atl0q sha512-tY5TjHXBgvgJh5vxKt4GoMsWZ8wHlPOV2/wwuGFmjby6VDZew+72BbENp9D7fQuxPPfz0kQ4SApw21WhR0+SEA== <script src="/nav/component.js?ct=f4bb05a" crossorigin="anonymous" integrity="sha256-0F7SzJsxUKEwW2ApEIoWp3lSk6GIZsGkC89GART26eo=" />

	script	src	/nav/header.js?ct=f4bb05a		200		1	Problems with Content-Type - Header - see details
	Missing defer / async attribute.			application/javascript; charset=UTF-8 X-Content-Type-Options nosniff found		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
	Cache-Control: max-age=900 - max-age too short.			Compression (br): 8609/30857 Bytes
	ETag: W/"7889-1a0ca129e88"
	local SRI possible, possible hash-values: sha256-QjzNAkT3FHPBqkfMnshH5iUgpFQC808EVF2QLR0A+IA= sha384-M/X21qNeZYj3JxF0LSOHdKDqbiNRn2Dl2IcwfHdtOHL76L5dCJFAuvY7pZeVmHSG sha512-i0gSlz1JUa9ieq64N+z+06VQuFDD2bSsbrPTzk/reQ/qKdgh4fI/pzih4OyIJMa1R3zOWoa86tu//EgiFiCTEw== <script src="/nav/header.js?ct=f4bb05a" crossorigin="anonymous" integrity="sha256-QjzNAkT3FHPBqkfMnshH5iUgpFQC808EVF2QLR0A+IA=" />

	script	src	/nav/service.js?ct=f4bb05a		200		1	Problems with Content-Type - Header - see details
	Missing defer / async attribute.			application/javascript; charset=UTF-8 X-Content-Type-Options nosniff found		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
	Cache-Control: max-age=900 - max-age too short.			Compression (br): 56999/197034 Bytes
	ETag: W/"301aa-1a0ca129e88"
	local SRI possible, possible hash-values: sha256-07EbEBlknSvB4GED73OyxoWqQQltOvua+Ytp4REiJAc= sha384-XpXXdAPe8HJFuHXsGbasE2HhclgbVyG3szbkhnr3Ava5BxMUxgFZhOezkKEEZBlh sha512-QVtLKCRHvS9msGOCyBcZfiIX+uVJztbZ09lCtOsOcM+8qs0wt+Rx0Jiib2p6ls1WLwFPTK8/qPOrXJR+AsK8LA== <script src="/nav/service.js?ct=f4bb05a" crossorigin="anonymous" integrity="sha256-07EbEBlknSvB4GED73OyxoWqQQltOvua+Ytp4REiJAc=" />

	script	src	/QhIWcDUIRUXuRAJaIQ/YuEEGXN7LEN7SmEOY7/Qk1QICE/Ii/9jFGZ3bAw		200		1	Problems with Content-Type - Header - see details
	Missing defer / async attribute.			application/javascript missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
	Cache-Control: max-age=21600 - max-age too short.			Compression (br): 203907/617217 Bytes
	ETag: "299be3992c0421cae457b5ae93f492b25ccb849c27f8eedf3143a528c61d1b32"
	local SRI possible, possible hash-values: sha256-yFsby1hoTOl26zglxd+xG+I9bqeHVdd3lv7uG2bkh3o= sha384-nQgCOWQu+l77h8cf/LcL7pjn6UJodu/wiCTQuFqBLT0MGN8auaRIlrNo+h9kwjEs sha512-qxDp3+Xnd7CGAbqLdwIp6g/D1IlwAArep2Ru9940DL3hfhwpKsclm8Ash5knVqQWFSA1ernys0+IOUxDbV7iUg== <script src="/QhIWcDUIRUXuRAJaIQ/YuEEGXN7LEN7SmEOY7/Qk1QICE/Ii/9jFGZ3bAw" crossorigin="anonymous" integrity="sha256-yFsby1hoTOl26zglxd+xG+I9bqeHVdd3lv7uG2bkh3o=" />

	script	src	https://www.att.com/scripts/adobe/prod/gpi.js		200		1	Problems with Content-Type - Header - see details
	Missing defer / async attribute.			application/x-javascript missing X-Content-Type-Options nosniff		Unknown Combination of MediaType "application" and Media Sub Type "x-javascript". Combinations must be IANA-registered, see https://www.iana.org/assignments/media-types/media-types.xhtml		Problems with Content-Type - Header - see details
	Cache-Control: max-age=3600 - max-age too short.			Compression (br): 8422/53825 Bytes
	ETag: "e10df2187e1ae043e31a5a87ad06adc7:1782954789.847459"
	local SRI possible, possible hash-values: sha256-+YVUo16/AL+UaOJa2l7mZAn8FWG+7BBrfaWG+l+bPak= sha384-mMEsziMtskc9I16aOQ0Nw2648bEtMXSTV61HC/HuzjlxwVw13UPCZh7zeVxo5xEo sha512-zlejsXoSerdTzZFyNu6Ra8hwOEEsRcis83XcVA0vvZwcn7GQwr3XcdoaZFh7kzLGrS5+bQOtOGDqA9rBLZZ6Xw== <script src="https://www.att.com/scripts/adobe/prod/gpi.js" crossorigin="anonymous" integrity="sha256-+YVUo16/AL+UaOJa2l7mZAn8FWG+7BBrfaWG+l+bPak=" />

	script	src	https://www.att.com/scripts/adobe/prod/visitor.js		200		1	Problems with Content-Type - Header - see details
	Missing defer / async attribute.			application/x-javascript missing X-Content-Type-Options nosniff		Unknown Combination of MediaType "application" and Media Sub Type "x-javascript". Combinations must be IANA-registered, see https://www.iana.org/assignments/media-types/media-types.xhtml		Problems with Content-Type - Header - see details
	Cache-Control: max-age=3600 - max-age too short.			Compression (br): 67447/218434 Bytes
	ETag: "869deac595ba14fbd2f7b48003a9e289:1790294466.849716"
	local SRI possible, possible hash-values: sha256-ARVLWWpISzCAMx3L8inRUm1CfUP+dcb9CPcZ0xi1ce0= sha384-KQLGlwyfwj5tWnLfkmlhFHUSVx0XUS/PTfFICJTCjC+csYoFisYbImpjbsCUbvgw sha512-0BTMChfuusxEIR/N1tNQrR09sNYXMEzO1oq8YwFUi+nlfOHC+IEZSfcjVS7pmJhMtmpjkbdHnYxucUvODfWNoA== <script src="https://www.att.com/scripts/adobe/prod/visitor.js" crossorigin="anonymous" integrity="sha256-ARVLWWpISzCAMx3L8inRUm1CfUP+dcb9CPcZ0xi1ce0=" />

12. Html-Parsing via https://validator.w3.org/nu/

Url used (first standard-https-result with http status 200): https://www.att.com/

Summary
	Good: No non-document-errors
	0 errors
	0 warnings
	The NU-Validator answered with a http status code 403, parsing not possible. May be a temporary problem, may be a problem with your html code.

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: a11-65.akam.net, a1-187.akam.net, a22-67.akam.net, a2-64.akam.net, a4-64.akam.net, a5-66.akam.net

QNr.	Domain	Type	NS used
1	net	NS	b.root-servers.net (2001:500:200::b)
	Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2	a11-65.akam.net	NS	a.gtld-servers.net (2001:503:a83e::2:30)
	Answer: a1-67.akam.net, a11-67.akam.net, a12-67.akam.net, a18-67.akam.net, a22-67.akam.net, a28-67.akam.net, a4-67.akam.net, a6-67.akam.net
	Answer: a1-67.akam.net 193.108.91.67, 2600:1401:2::43
	Answer: a11-67.akam.net 2600:1480:1::43, 84.53.139.67
	Answer: a12-67.akam.net 184.26.160.67, 2600:1480:f000::43
	Answer: a18-67.akam.net 2600:1480:4800::43, 95.101.36.67
	Answer: a22-67.akam.net 23.211.61.67, 2600:1480:7800::43
	Answer: a28-67.akam.net 2600:1480:d800::43, 95.100.173.67
	Answer: a4-67.akam.net 2600:1480:9000::43, 72.246.46.67
	Answer: a6-67.akam.net 23.211.133.67, 2600:1401:1::43
3	a1-187.akam.net	NS	a.gtld-servers.net (2001:503:a83e::2:30)
	Answer: a1-67.akam.net, a11-67.akam.net, a12-67.akam.net, a18-67.akam.net, a22-67.akam.net, a28-67.akam.net, a4-67.akam.net, a6-67.akam.net
	Answer: a1-67.akam.net 193.108.91.67, 2600:1401:2::43
	Answer: a11-67.akam.net 2600:1480:1::43, 84.53.139.67
	Answer: a12-67.akam.net 184.26.160.67, 2600:1480:f000::43
	Answer: a18-67.akam.net 2600:1480:4800::43, 95.101.36.67
	Answer: a22-67.akam.net 23.211.61.67, 2600:1480:7800::43
	Answer: a28-67.akam.net 2600:1480:d800::43, 95.100.173.67
	Answer: a4-67.akam.net 2600:1480:9000::43, 72.246.46.67
	Answer: a6-67.akam.net 23.211.133.67, 2600:1401:1::43
4	a2-64.akam.net	NS	a.gtld-servers.net (2001:503:a83e::2:30)
	Answer: a1-67.akam.net, a11-67.akam.net, a12-67.akam.net, a18-67.akam.net, a22-67.akam.net, a28-67.akam.net, a4-67.akam.net, a6-67.akam.net
	Answer: a1-67.akam.net 193.108.91.67, 2600:1401:2::43
	Answer: a11-67.akam.net 2600:1480:1::43, 84.53.139.67
	Answer: a12-67.akam.net 184.26.160.67, 2600:1480:f000::43
	Answer: a18-67.akam.net 2600:1480:4800::43, 95.101.36.67
	Answer: a22-67.akam.net 23.211.61.67, 2600:1480:7800::43
	Answer: a28-67.akam.net 2600:1480:d800::43, 95.100.173.67
	Answer: a4-67.akam.net 2600:1480:9000::43, 72.246.46.67
	Answer: a6-67.akam.net 23.211.133.67, 2600:1401:1::43
5	a4-64.akam.net	NS	a.gtld-servers.net (2001:503:a83e::2:30)
	Answer: a1-67.akam.net, a11-67.akam.net, a12-67.akam.net, a18-67.akam.net, a22-67.akam.net, a28-67.akam.net, a4-67.akam.net, a6-67.akam.net
	Answer: a1-67.akam.net 193.108.91.67, 2600:1401:2::43
	Answer: a11-67.akam.net 2600:1480:1::43, 84.53.139.67
	Answer: a12-67.akam.net 184.26.160.67, 2600:1480:f000::43
	Answer: a18-67.akam.net 2600:1480:4800::43, 95.101.36.67
	Answer: a22-67.akam.net 23.211.61.67, 2600:1480:7800::43
	Answer: a28-67.akam.net 2600:1480:d800::43, 95.100.173.67
	Answer: a4-67.akam.net 2600:1480:9000::43, 72.246.46.67
	Answer: a6-67.akam.net 23.211.133.67, 2600:1401:1::43
6	a5-66.akam.net	NS	a.gtld-servers.net (2001:503:a83e::2:30)
	Answer: a1-67.akam.net, a11-67.akam.net, a12-67.akam.net, a18-67.akam.net, a22-67.akam.net, a28-67.akam.net, a4-67.akam.net, a6-67.akam.net
	Answer: a1-67.akam.net 193.108.91.67, 2600:1401:2::43
	Answer: a11-67.akam.net 2600:1480:1::43, 84.53.139.67
	Answer: a12-67.akam.net 184.26.160.67, 2600:1480:f000::43
	Answer: a18-67.akam.net 2600:1480:4800::43, 95.101.36.67
	Answer: a22-67.akam.net 23.211.61.67, 2600:1480:7800::43
	Answer: a28-67.akam.net 2600:1480:d800::43, 95.100.173.67
	Answer: a4-67.akam.net 2600:1480:9000::43, 72.246.46.67
	Answer: a6-67.akam.net 23.211.133.67, 2600:1401:1::43
7	a11-65.akam.net: 84.53.139.65	A	a1-67.akam.net (2600:1401:2::43)
8	a11-65.akam.net: 2600:1480:1::41	AAAA	a1-67.akam.net (2600:1401:2::43)
9	a1-187.akam.net: 193.108.91.187	A	a1-67.akam.net (2600:1401:2::43)
10	a1-187.akam.net: 2600:1401:2::bb	AAAA	a1-67.akam.net (2600:1401:2::43)
11	a2-64.akam.net: 95.100.174.64	A	a1-67.akam.net (2600:1401:2::43)
12	a2-64.akam.net: 2600:1480:7000::40	AAAA	a1-67.akam.net (2600:1401:2::43)
13	a4-64.akam.net: 72.246.46.64	A	a1-67.akam.net (2600:1401:2::43)
14	a4-64.akam.net: 2600:1480:9000::40	AAAA	a1-67.akam.net (2600:1401:2::43)
15	a5-66.akam.net: 95.100.168.66	A	a1-67.akam.net (2600:1401:2::43)
16	a5-66.akam.net: 2600:1480:b000::42	AAAA	a1-67.akam.net (2600:1401:2::43)

14. CAA - Entries

Domainname	flag	Value	∑ Queries
prod-www.zr-att.com.akadns.net			1
zr-att.com.akadns.net	0	no CAA entry found	1
com.akadns.net	0	no CAA entry found	1
www.att.com			1
akadns.net	0	no CAA entry found	1
att.com	0	no CAA entry found	1
com	0	no CAA entry found	1
net	0	no CAA entry found	1

15. TXT - Entries

Domainname	Status	∑ Queries
www.att.com		1
_acme-challenge.att.com	missing entry or wrong length	1
_acme-challenge.www.att.com	Name Error - The domain name does not exist	1
prod-www.zr-att.com.akadns.net		1
_acme-challenge.att.com.att.com	Name Error - The domain name does not exist	1
_acme-challenge.www.att.com.att.com	Name Error - The domain name does not exist	1
_acme-challenge.www.att.com.www.att.com	Name Error - The domain name does not exist	1
_acme-challenge.prod-www.zr-att.com.akadns.net	Name Error - The domain name does not exist	1
_acme-challenge.prod-www.zr-att.com.akadns.net.prod-www.zr-att.com.akadns.net	Name Error - The domain name does not exist	1

16. DomainService - Entries

Type		Domain	Pref	Value	DNS-error	num Answers	Status	Description
MX		att.com	10	mx0b-00191d01.pphosted.com	0	4	ok
	A			67.231.157.136	0	1	ok
	CNAME				0	0	ok
MX		att.com	10	mx0a-00191d01.pphosted.com	0	4	ok
	A			67.231.149.140	0	1	ok
	CNAME				0	0	ok
MX		att.com	20	mxa-00191d01.gslb.pphosted.com	0	4	ok
	A			67.231.149.140	0	1	ok
	CNAME				0	0	ok
MX		att.com	20	mxb-00191d01.gslb.pphosted.com	0	4	ok
	A			67.231.157.136	0	1	ok
	CNAME				0	0	ok
SPF	TXT	att.com		v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all			ok
_dmarc	TXT	_dmarc.att.com		v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com			ok
	TXT	att.com._report._dmarc.emaildefense.proofpoint.com		mailto:dmarc_rua@emaildefense.proofpoint.com			ok	Mail domain unequal current domain. Check required, if there is a confirming _report._dmarc-Record. See RFC 7489, 7.1.
	TXT	att.com._report._dmarc.emaildefense.proofpoint.com		v=DMARC1;			ok	Confirmed. Sending reports to external domain is allowed.
	TXT	att.com._report._dmarc.emaildefense.proofpoint.com		mailto:dmarc_ruf@emaildefense.proofpoint.com			ok	Mail domain unequal current domain. Check required, if there is a confirming _report._dmarc-Record. See RFC 7489, 7.1.
	TXT	att.com._report._dmarc.emaildefense.proofpoint.com		v=DMARC1;			ok	Confirmed. Sending reports to external domain is allowed.

17. Cipher Suites

Summary
Domain	IP	Port	num Ciphers	time	Std.Protocol	Forward Secrecy
att.com	144.160.36.42	443	31 Ciphers	152.19 sec		12 without, 19 FS	61.29 %
att.com	144.160.155.43	443	31 Ciphers	167.49 sec		12 without, 19 FS	61.29 %
Complete		2	62 Ciphers 31.00 Ciphers/Check	319.68 sec	159.84 sec/Check	24 without, 38 FS	61.29 %

Details
Domain	IP	Port	Cipher (OpenSsl / IANA)
att.com	144.160.36.42	443	ECDHE-RSA-CHACHA20-POLY1305		(Secure)	TLSv1.2	0xCC,0xA8	FS
31 Ciphers, 152.19 sec			TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
			ECDH		RSA	CHACHA20/POLY1305(256)	AEAD
			ECDHE-RSA-AES256-GCM-SHA384		(Secure)	TLSv1.2	0xC0,0x30	FS
			TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
			ECDH		RSA	AESGCM(256)	AEAD
			DHE-RSA-AES256-GCM-SHA384		(Secure)	TLSv1.2	0x00,0x9F	FS
			TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
			DH		RSA	AESGCM(256)	AEAD
			DHE-RSA-AES256-CCM8		(Secure)	TLSv1.2	0xC0,0xA3	FS
			TLS_DHE_RSA_WITH_AES_256_CCM_8
			DH		RSA	AESCCM8(256)	AEAD
			DHE-RSA-AES256-CCM		(Secure)	TLSv1.2	0xC0,0x9F	FS
			TLS_DHE_RSA_WITH_AES_256_CCM
			DH		RSA	AESCCM(256)	AEAD
			ECDHE-RSA-AES128-GCM-SHA256		(Secure)	TLSv1.2	0xC0,0x2F	FS
			TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
			ECDH		RSA	AESGCM(128)	AEAD
			DHE-RSA-AES128-GCM-SHA256		(Secure)	TLSv1.2	0x00,0x9E	FS
			TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
			DH		RSA	AESGCM(128)	AEAD
			DHE-RSA-AES128-CCM8		(Secure)	TLSv1.2	0xC0,0xA2	FS
			TLS_DHE_RSA_WITH_AES_128_CCM_8
			DH		RSA	AESCCM8(128)	AEAD
			DHE-RSA-AES128-CCM		(Secure)	TLSv1.2	0xC0,0x9E	FS
			TLS_DHE_RSA_WITH_AES_128_CCM
			DH		RSA	AESCCM(128)	AEAD
			ECDHE-RSA-AES256-SHA384		(Weak)	TLSv1.2	0xC0,0x28	FS
			TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
			ECDH		RSA	AES(256)	SHA384
			DHE-RSA-AES256-SHA256		(Weak)	TLSv1.2	0x00,0x6B	FS
			TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
			DH		RSA	AES(256)	SHA256
			AES256-GCM-SHA384		(Weak)	TLSv1.2	0x00,0x9D	No FS
			TLS_RSA_WITH_AES_256_GCM_SHA384
			RSA		RSA	AESGCM(256)	AEAD
			AES256-SHA256		(Weak)	TLSv1.2	0x00,0x3D	No FS
			TLS_RSA_WITH_AES_256_CBC_SHA256
			RSA		RSA	AES(256)	SHA256
			AES256-CCM8		(Weak)	TLSv1.2	0xC0,0xA1	No FS
			TLS_RSA_WITH_AES_256_CCM_8
			RSA		RSA	AESCCM8(256)	AEAD
			AES256-CCM		(Weak)	TLSv1.2	0xC0,0x9D	No FS
			TLS_RSA_WITH_AES_256_CCM
			RSA		RSA	AESCCM(256)	AEAD
			ECDHE-RSA-AES128-SHA256		(Weak)	TLSv1.2	0xC0,0x27	FS
			TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
			ECDH		RSA	AES(128)	SHA256
			DHE-RSA-AES128-SHA256		(Weak)	TLSv1.2	0x00,0x67	FS
			TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
			DH		RSA	AES(128)	SHA256
			AES128-GCM-SHA256		(Weak)	TLSv1.2	0x00,0x9C	No FS
			TLS_RSA_WITH_AES_128_GCM_SHA256
			RSA		RSA	AESGCM(128)	AEAD
			AES128-SHA256		(Weak)	TLSv1.2	0x00,0x3C	No FS
			TLS_RSA_WITH_AES_128_CBC_SHA256
			RSA		RSA	AES(128)	SHA256
			AES128-CCM8		(Weak)	TLSv1.2	0xC0,0xA0	No FS
			TLS_RSA_WITH_AES_128_CCM_8
			RSA		RSA	AESCCM8(128)	AEAD
			AES128-CCM		(Weak)	TLSv1.2	0xC0,0x9C	No FS
			TLS_RSA_WITH_AES_128_CCM
			RSA		RSA	AESCCM(128)	AEAD
			ECDHE-RSA-AES256-SHA		(Weak)	TLSv1	0xC0,0x14	FS
			TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
			ECDH		RSA	AES(256)	SHA1
			ECDHE-RSA-AES128-SHA		(Weak)	TLSv1	0xC0,0x13	FS
			TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
			ECDH		RSA	AES(128)	SHA1
			DHE-RSA-CAMELLIA256-SHA		(Weak)	SSLv3	0x00,0x88	FS
			TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
			DH		RSA	Camellia(256)	SHA1
			DHE-RSA-AES256-SHA		(Weak)	SSLv3	0x00,0x39	FS
			TLS_DHE_RSA_WITH_AES_256_CBC_SHA
			DH		RSA	AES(256)	SHA1
			CAMELLIA256-SHA		(Weak)	SSLv3	0x00,0x84	No FS
			TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
			RSA		RSA	Camellia(256)	SHA1
			AES256-SHA		(Weak)	SSLv3	0x00,0x35	No FS
			TLS_RSA_WITH_AES_256_CBC_SHA
			RSA		RSA	AES(256)	SHA1
			DHE-RSA-CAMELLIA128-SHA		(Weak)	SSLv3	0x00,0x45	FS
			TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
			DH		RSA	Camellia(128)	SHA1
			DHE-RSA-AES128-SHA		(Weak)	SSLv3	0x00,0x33	FS
			TLS_DHE_RSA_WITH_AES_128_CBC_SHA
			DH		RSA	AES(128)	SHA1
			CAMELLIA128-SHA		(Weak)	SSLv3	0x00,0x41	No FS
			TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
			RSA		RSA	Camellia(128)	SHA1
			AES128-SHA		(Weak)	SSLv3	0x00,0x2F	No FS
			TLS_RSA_WITH_AES_128_CBC_SHA
			RSA		RSA	AES(128)	SHA1
	144.160.155.43	443	ECDHE-RSA-CHACHA20-POLY1305		(Secure)	TLSv1.2	0xCC,0xA8	FS
31 Ciphers, 167.49 sec			TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
			ECDH		RSA	CHACHA20/POLY1305(256)	AEAD
			ECDHE-RSA-AES256-GCM-SHA384		(Secure)	TLSv1.2	0xC0,0x30	FS
			TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
			ECDH		RSA	AESGCM(256)	AEAD
			DHE-RSA-AES256-GCM-SHA384		(Secure)	TLSv1.2	0x00,0x9F	FS
			TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
			DH		RSA	AESGCM(256)	AEAD
			DHE-RSA-AES256-CCM8		(Secure)	TLSv1.2	0xC0,0xA3	FS
			TLS_DHE_RSA_WITH_AES_256_CCM_8
			DH		RSA	AESCCM8(256)	AEAD
			DHE-RSA-AES256-CCM		(Secure)	TLSv1.2	0xC0,0x9F	FS
			TLS_DHE_RSA_WITH_AES_256_CCM
			DH		RSA	AESCCM(256)	AEAD
			ECDHE-RSA-AES128-GCM-SHA256		(Secure)	TLSv1.2	0xC0,0x2F	FS
			TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
			ECDH		RSA	AESGCM(128)	AEAD
			DHE-RSA-AES128-GCM-SHA256		(Secure)	TLSv1.2	0x00,0x9E	FS
			TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
			DH		RSA	AESGCM(128)	AEAD
			DHE-RSA-AES128-CCM8		(Secure)	TLSv1.2	0xC0,0xA2	FS
			TLS_DHE_RSA_WITH_AES_128_CCM_8
			DH		RSA	AESCCM8(128)	AEAD
			DHE-RSA-AES128-CCM		(Secure)	TLSv1.2	0xC0,0x9E	FS
			TLS_DHE_RSA_WITH_AES_128_CCM
			DH		RSA	AESCCM(128)	AEAD
			ECDHE-RSA-AES256-SHA384		(Weak)	TLSv1.2	0xC0,0x28	FS
			TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
			ECDH		RSA	AES(256)	SHA384
			DHE-RSA-AES256-SHA256		(Weak)	TLSv1.2	0x00,0x6B	FS
			TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
			DH		RSA	AES(256)	SHA256
			AES256-GCM-SHA384		(Weak)	TLSv1.2	0x00,0x9D	No FS
			TLS_RSA_WITH_AES_256_GCM_SHA384
			RSA		RSA	AESGCM(256)	AEAD
			AES256-SHA256		(Weak)	TLSv1.2	0x00,0x3D	No FS
			TLS_RSA_WITH_AES_256_CBC_SHA256
			RSA		RSA	AES(256)	SHA256
			AES256-CCM8		(Weak)	TLSv1.2	0xC0,0xA1	No FS
			TLS_RSA_WITH_AES_256_CCM_8
			RSA		RSA	AESCCM8(256)	AEAD
			AES256-CCM		(Weak)	TLSv1.2	0xC0,0x9D	No FS
			TLS_RSA_WITH_AES_256_CCM
			RSA		RSA	AESCCM(256)	AEAD
			ECDHE-RSA-AES128-SHA256		(Weak)	TLSv1.2	0xC0,0x27	FS
			TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
			ECDH		RSA	AES(128)	SHA256
			DHE-RSA-AES128-SHA256		(Weak)	TLSv1.2	0x00,0x67	FS
			TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
			DH		RSA	AES(128)	SHA256
			AES128-GCM-SHA256		(Weak)	TLSv1.2	0x00,0x9C	No FS
			TLS_RSA_WITH_AES_128_GCM_SHA256
			RSA		RSA	AESGCM(128)	AEAD
			AES128-SHA256		(Weak)	TLSv1.2	0x00,0x3C	No FS
			TLS_RSA_WITH_AES_128_CBC_SHA256
			RSA		RSA	AES(128)	SHA256
			AES128-CCM8		(Weak)	TLSv1.2	0xC0,0xA0	No FS
			TLS_RSA_WITH_AES_128_CCM_8
			RSA		RSA	AESCCM8(128)	AEAD
			AES128-CCM		(Weak)	TLSv1.2	0xC0,0x9C	No FS
			TLS_RSA_WITH_AES_128_CCM
			RSA		RSA	AESCCM(128)	AEAD
			ECDHE-RSA-AES256-SHA		(Weak)	TLSv1	0xC0,0x14	FS
			TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
			ECDH		RSA	AES(256)	SHA1
			ECDHE-RSA-AES128-SHA		(Weak)	TLSv1	0xC0,0x13	FS
			TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
			ECDH		RSA	AES(128)	SHA1
			DHE-RSA-CAMELLIA256-SHA		(Weak)	SSLv3	0x00,0x88	FS
			TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
			DH		RSA	Camellia(256)	SHA1
			DHE-RSA-AES256-SHA		(Weak)	SSLv3	0x00,0x39	FS
			TLS_DHE_RSA_WITH_AES_256_CBC_SHA
			DH		RSA	AES(256)	SHA1
			CAMELLIA256-SHA		(Weak)	SSLv3	0x00,0x84	No FS
			TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
			RSA		RSA	Camellia(256)	SHA1
			AES256-SHA		(Weak)	SSLv3	0x00,0x35	No FS
			TLS_RSA_WITH_AES_256_CBC_SHA
			RSA		RSA	AES(256)	SHA1
			DHE-RSA-CAMELLIA128-SHA		(Weak)	SSLv3	0x00,0x45	FS
			TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
			DH		RSA	Camellia(128)	SHA1
			DHE-RSA-AES128-SHA		(Weak)	SSLv3	0x00,0x33	FS
			TLS_DHE_RSA_WITH_AES_128_CBC_SHA
			DH		RSA	AES(128)	SHA1
			CAMELLIA128-SHA		(Weak)	SSLv3	0x00,0x41	No FS
			TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
			RSA		RSA	Camellia(128)	SHA1
			AES128-SHA		(Weak)	SSLv3	0x00,0x2F	No FS
			TLS_RSA_WITH_AES_128_CBC_SHA
			RSA		RSA	AES(128)	SHA1

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

Permalink: https://check-your-website.server-daten.de/?i=a0ecf6cf-55eb-4935-a723-75a0a1fb3b54

Last Result: https://check-your-website.server-daten.de/?q=att.com - 2026-10-01 12:40:50

Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=att.com" target="_blank">Check this Site: att.com</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

QR-Code of this page - https://check-your-website.server-daten.de/?d=att.com

Check DNS, Urls + Redirects, Certificates and Content of your Website

Older results

1. IP-Addresses

2. DNSSEC

3. Name Servers

4. SOA-Entries

5. Screenshots

Mobile- and other Chrome-Checks

6. Url-Checks

7. Comments

1. General Results, most used to calculate the result

2. Header-Checks

3. DNS- and NameServer - Checks

4. Content- and Performance-critical Checks

8. Connections

9. Certificates

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

11. Html-Content - Entries

Summary

Details (currently limited to 500 rows - some problems with spam users)

12. Html-Parsing via https://validator.w3.org/nu/

Summary

13. Nameserver - IP-Adresses

14. CAA - Entries

15. TXT - Entries

16. DomainService - Entries

17. Cipher Suites

18. Portchecks