Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

dal03.vm.att.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of dal03.vm.att.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
14
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
2
seen in DNS
Observed Certs
13
in our scans

DNS Records

A
184.86.251.28, 184.86.251.5, 2.16.106.222, 2.16.106.223, 2.19.195.18, 2.19.195.34
AAAA
2a02:26f0:1180:35::210:6ade, 2a02:26f0:1180:35::210:6adf, 2a02:26f0:3400::1703:581a, 2a02:26f0:3400::1703:5832, 2a02:26f0:6d00:2b::210:1b52, 2a02:26f0:6d00:2b::210:1b63, 2a02:26f0:e600::170f:b199, 2a02:26f0:e600::170f:b1fa
MX
—
NS
—
TXT
—
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

728568ed11f177eb… google · xenon2026h2
Subject: dal03.vm.att.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: dal03.vm.att.com
Valid: 2026-03-09 00:00:00 → 2026-09-23 23:59:59
8febce4d999e429f… google · argon2026h2
Subject: san2.attssl.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: san2.attssl.com, 0.ecom.attccc.com, 1.ecom.attccc.com, 2.ecom.attccc.com, 3.ecom.attccc.com, activearmor.com, att-abspreprod.idp.blogin.att.com, att-acm.stage.blogin.att.com, att-bc.stage.blogin.att.com, att-current01.stage.att.net, att-drivenets.idp.clogin.att.com, att-drivenets.stage.clogin.att.com, att-ericsson.idp.blogin.att.com, att-ericsson.stage.blogin.att.com, att-fedsnowprd.blogin.att.com, att-fedsnowprd.idp.blogin.att.com, att-fedsnowtst.stage.blogin.att.com, att-glwire.idp.blogin.att.com, att-glwire.stage.blogin.att.com, att-halob.idp.clogin.att.com, att-halob.stage.clogin.att.com, att-halob.test.clogin.att.com, att-hmwk.idp.blogin.att.com, att-hmwk.stage.blogin.att.com, att-mcafee.idp.clogin.att.com, att-mcafee.stage.clogin.att.com, att-mcafee.test.clogin.att.com, att-state-farm.stage.blogin.att.com, attinternetservice.com, attplans.com, atttowers.com, bcsbilling-test.att.com, bcsbilling.att.com, caaid.stage.att.net, centrexmate-test.sbc.com, centrexmate.sbc.com, changefeature.com, dal01.em.att.com, dal01.vm.att.com, dal02.em.att.com, dal02.vm.att.com, dal03.em.att.com, dal03.vm.att.com, dal04.em.att.com, dal04.vm.att.com, dal05.em.att.com, dal05.vm.att.com, day01.em.dayatt.com, day01.um.dayatt.com, day01.vm.dayatt.com, em.dayatt.com, epay.eia.att.com, eservice5.eia.att.com, eservices.eia.att.com, expressticketing.acss.att.com, fedsnowtst.stage.blogin.att.com, gamnet.eia.att.com, na1-nprd.avi.att.com, obt.eia.att.com, plexarmate-test.sbc.com, plexarmate.sbc.com, prime.bus.att.com, prime.eia.att.com, run-test.att.io, run.att.io, saml.bus.att.com, saml.eia.att.com, samlidp.stage.blogin.att.com, soc-test.att.jobs, soc.att.jobs, tchosted.art.att.com, tchosted.askretailtech.att.com, teleconference.uc.att.com, test-expressticketing.acss.att.com, test.changefeature.com, um.dayatt.com, utf-pre.idp.clogin.att.com, utf.idp.clogin.att.com, vcnms-c2s-auth.si.enclab.att.net, vcnms-c2s.si.enclab.att.net, vm.dayatt.com, www.activearmor.com, www.ap.att.com, www.attinternetservice.com, www.attplans.com, www.atttowers.com, www.businessdirect.att.com, www.em.att.com, www.em.dayatt.com, www.labs.att.com, www.networkcam.att.com, www.sbc.com, www.serviceguide.att.com, www.support.att.com, www.um.dayatt.com, www.unad.att.com, www.vm.att.com, www.vm.dayatt.com
Valid: 2025-12-22 00:00:00 → 2026-12-21 23:59:59
8febce4d999e429f… google · xenon2026h2
Subject: san2.attssl.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: san2.attssl.com, 0.ecom.attccc.com, 1.ecom.attccc.com, 2.ecom.attccc.com, 3.ecom.attccc.com, activearmor.com, att-abspreprod.idp.blogin.att.com, att-acm.stage.blogin.att.com, att-bc.stage.blogin.att.com, att-current01.stage.att.net, att-drivenets.idp.clogin.att.com, att-drivenets.stage.clogin.att.com, att-ericsson.idp.blogin.att.com, att-ericsson.stage.blogin.att.com, att-fedsnowprd.blogin.att.com, att-fedsnowprd.idp.blogin.att.com, att-fedsnowtst.stage.blogin.att.com, att-glwire.idp.blogin.att.com, att-glwire.stage.blogin.att.com, att-halob.idp.clogin.att.com, att-halob.stage.clogin.att.com, att-halob.test.clogin.att.com, att-hmwk.idp.blogin.att.com, att-hmwk.stage.blogin.att.com, att-mcafee.idp.clogin.att.com, att-mcafee.stage.clogin.att.com, att-mcafee.test.clogin.att.com, att-state-farm.stage.blogin.att.com, attinternetservice.com, attplans.com, atttowers.com, bcsbilling-test.att.com, bcsbilling.att.com, caaid.stage.att.net, centrexmate-test.sbc.com, centrexmate.sbc.com, changefeature.com, dal01.em.att.com, dal01.vm.att.com, dal02.em.att.com, dal02.vm.att.com, dal03.em.att.com, dal03.vm.att.com, dal04.em.att.com, dal04.vm.att.com, dal05.em.att.com, dal05.vm.att.com, day01.em.dayatt.com, day01.um.dayatt.com, day01.vm.dayatt.com, em.dayatt.com, epay.eia.att.com, eservice5.eia.att.com, eservices.eia.att.com, expressticketing.acss.att.com, fedsnowtst.stage.blogin.att.com, gamnet.eia.att.com, na1-nprd.avi.att.com, obt.eia.att.com, plexarmate-test.sbc.com, plexarmate.sbc.com, prime.bus.att.com, prime.eia.att.com, run-test.att.io, run.att.io, saml.bus.att.com, saml.eia.att.com, samlidp.stage.blogin.att.com, soc-test.att.jobs, soc.att.jobs, tchosted.art.att.com, tchosted.askretailtech.att.com, teleconference.uc.att.com, test-expressticketing.acss.att.com, test.changefeature.com, um.dayatt.com, utf-pre.idp.clogin.att.com, utf.idp.clogin.att.com, vcnms-c2s-auth.si.enclab.att.net, vcnms-c2s.si.enclab.att.net, vm.dayatt.com, www.activearmor.com, www.ap.att.com, www.attinternetservice.com, www.attplans.com, www.atttowers.com, www.businessdirect.att.com, www.em.att.com, www.em.dayatt.com, www.labs.att.com, www.networkcam.att.com, www.sbc.com, www.serviceguide.att.com, www.support.att.com, www.um.dayatt.com, www.unad.att.com, www.vm.att.com, www.vm.dayatt.com
Valid: 2025-12-22 00:00:00 → 2026-12-21 23:59:59
a1c7191ddc80b8fa… google · argon2026h2
Subject: san2.attssl.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: san2.attssl.com, 0.ecom.attccc.com, 1.ecom.attccc.com, 2.ecom.attccc.com, 3.ecom.attccc.com, activearmor.com, att-abspreprod.idp.blogin.att.com, att-acm.stage.blogin.att.com, att-bc.stage.blogin.att.com, att-current01.stage.att.net, att-drivenets.idp.clogin.att.com, att-drivenets.stage.clogin.att.com, att-ericsson.idp.blogin.att.com, att-ericsson.stage.blogin.att.com, att-fedsnowprd.blogin.att.com, att-fedsnowprd.idp.blogin.att.com, att-fedsnowtst.stage.blogin.att.com, att-glwire.idp.blogin.att.com, att-glwire.stage.blogin.att.com, att-halob.idp.clogin.att.com, att-halob.stage.clogin.att.com, att-halob.test.clogin.att.com, att-hmwk.idp.blogin.att.com, att-hmwk.stage.blogin.att.com, att-mcafee.idp.clogin.att.com, att-mcafee.stage.clogin.att.com, att-mcafee.test.clogin.att.com, att-state-farm.stage.blogin.att.com, attinternetservice.com, attplans.com, atttowers.com, bcsbilling-test.att.com, bcsbilling.att.com, caaid.stage.att.net, centrexmate-test.sbc.com, centrexmate.sbc.com, changefeature.com, dal01.em.att.com, dal01.vm.att.com, dal02.em.att.com, dal02.vm.att.com, dal03.em.att.com, dal03.vm.att.com, dal04.em.att.com, dal04.vm.att.com, dal05.em.att.com, dal05.vm.att.com, day01.em.dayatt.com, day01.um.dayatt.com, day01.vm.dayatt.com, em.dayatt.com, epay.eia.att.com, eservice5.eia.att.com, eservices.eia.att.com, expressticketing.acss.att.com, fedsnowtst.stage.blogin.att.com, gamnet.eia.att.com, obt.eia.att.com, plexarmate-test.sbc.com, plexarmate.sbc.com, prime.bus.att.com, prime.eia.att.com, run-test.att.io, run.att.io, saml.bus.att.com, saml.eia.att.com, samlidp.stage.blogin.att.com, soc-test.att.jobs, soc.att.jobs, tchosted.art.att.com, tchosted.askretailtech.att.com, teleconference.uc.att.com, test-expressticketing.acss.att.com, test.changefeature.com, um.dayatt.com, utf-pre.idp.clogin.att.com, utf.idp.clogin.att.com, vcnms-c2s-auth.si.enclab.att.net, vcnms-c2s.si.enclab.att.net, vm.dayatt.com, www.activearmor.com, www.ap.att.com, www.attinternetservice.com, www.attplans.com, www.atttowers.com, www.businessdirect.att.com, www.em.att.com, www.em.dayatt.com, www.labs.att.com, www.networkcam.att.com, www.sbc.com, www.serviceguide.att.com, www.support.att.com, www.um.dayatt.com, www.unad.att.com, www.vm.att.com, www.vm.dayatt.com
Valid: 2025-12-10 00:00:00 → 2026-12-09 23:59:59
ddcd3f6efa7be311… google · argon2026h2
Subject: san2.attssl.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: san2.attssl.com, 0.ecom.attccc.com, 1.ecom.attccc.com, 2.ecom.attccc.com, 3.ecom.attccc.com, activearmor.com, att-abspreprod.idp.blogin.att.com, att-acm.stage.blogin.att.com, att-bc.stage.blogin.att.com, att-current01.stage.att.net, att-drivenets.idp.clogin.att.com, att-drivenets.stage.clogin.att.com, att-ericsson.idp.blogin.att.com, att-ericsson.stage.blogin.att.com, att-fedsnowprd.blogin.att.com, att-fedsnowprd.idp.blogin.att.com, att-fedsnowtst.stage.blogin.att.com, att-glwire.idp.blogin.att.com, att-glwire.stage.blogin.att.com, att-halob.idp.clogin.att.com, att-halob.stage.clogin.att.com, att-halob.test.clogin.att.com, att-hmwk.idp.blogin.att.com, att-hmwk.stage.blogin.att.com, att-mcafee.idp.clogin.att.com, att-mcafee.stage.clogin.att.com, att-mcafee.test.clogin.att.com, att-state-farm.stage.blogin.att.com, attinternetservice.com, attplans.com, atttowers.com, bcsbilling-test.att.com, bcsbilling.att.com, caaid.stage.att.net, centrexmate-test.sbc.com, centrexmate.sbc.com, changefeature.com, dal01.em.att.com, dal01.vm.att.com, dal02.em.att.com, dal02.vm.att.com, dal03.em.att.com, dal03.vm.att.com, dal04.em.att.com, dal04.vm.att.com, dal05.em.att.com, dal05.vm.att.com, day01.em.dayatt.com, day01.um.dayatt.com, day01.vm.dayatt.com, em.dayatt.com, epay.eia.att.com, eservice5.eia.att.com, eservices.eia.att.com, expressticketing.acss.att.com, fedsnowtst.stage.blogin.att.com, gamnet.eia.att.com, obt.eia.att.com, plexarmate-test.sbc.com, plexarmate.sbc.com, prime.bus.att.com, prime.eia.att.com, run-test.att.io, run.att.io, saml.bus.att.com, saml.eia.att.com, samlidp.stage.blogin.att.com, soc-test.att.jobs, soc.att.jobs, tchosted.art.att.com, tchosted.askretailtech.att.com, teleconference.uc.att.com, test-expressticketing.acss.att.com, test.changefeature.com, um.dayatt.com, utf-pre.idp.clogin.att.com, utf.idp.clogin.att.com, vcnms-c2s-auth.si.enclab.att.net, vcnms-c2s.si.enclab.att.net, vm.dayatt.com, www.activearmor.com, www.ap.att.com, www.attinternetservice.com, www.attplans.com, www.atttowers.com, www.businessdirect.att.com, www.em.att.com, www.em.dayatt.com, www.labs.att.com, www.networkcam.att.com, www.sbc.com, www.serviceguide.att.com, www.support.att.com, www.um.dayatt.com, www.unad.att.com, www.vm.att.com, www.vm.dayatt.com
Valid: 2025-12-10 00:00:00 → 2026-12-09 23:59:59
a1c7191ddc80b8fa… google · xenon2026h2
Subject: san2.attssl.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: san2.attssl.com, 0.ecom.attccc.com, 1.ecom.attccc.com, 2.ecom.attccc.com, 3.ecom.attccc.com, activearmor.com, att-abspreprod.idp.blogin.att.com, att-acm.stage.blogin.att.com, att-bc.stage.blogin.att.com, att-current01.stage.att.net, att-drivenets.idp.clogin.att.com, att-drivenets.stage.clogin.att.com, att-ericsson.idp.blogin.att.com, att-ericsson.stage.blogin.att.com, att-fedsnowprd.blogin.att.com, att-fedsnowprd.idp.blogin.att.com, att-fedsnowtst.stage.blogin.att.com, att-glwire.idp.blogin.att.com, att-glwire.stage.blogin.att.com, att-halob.idp.clogin.att.com, att-halob.stage.clogin.att.com, att-halob.test.clogin.att.com, att-hmwk.idp.blogin.att.com, att-hmwk.stage.blogin.att.com, att-mcafee.idp.clogin.att.com, att-mcafee.stage.clogin.att.com, att-mcafee.test.clogin.att.com, att-state-farm.stage.blogin.att.com, attinternetservice.com, attplans.com, atttowers.com, bcsbilling-test.att.com, bcsbilling.att.com, caaid.stage.att.net, centrexmate-test.sbc.com, centrexmate.sbc.com, changefeature.com, dal01.em.att.com, dal01.vm.att.com, dal02.em.att.com, dal02.vm.att.com, dal03.em.att.com, dal03.vm.att.com, dal04.em.att.com, dal04.vm.att.com, dal05.em.att.com, dal05.vm.att.com, day01.em.dayatt.com, day01.um.dayatt.com, day01.vm.dayatt.com, em.dayatt.com, epay.eia.att.com, eservice5.eia.att.com, eservices.eia.att.com, expressticketing.acss.att.com, fedsnowtst.stage.blogin.att.com, gamnet.eia.att.com, obt.eia.att.com, plexarmate-test.sbc.com, plexarmate.sbc.com, prime.bus.att.com, prime.eia.att.com, run-test.att.io, run.att.io, saml.bus.att.com, saml.eia.att.com, samlidp.stage.blogin.att.com, soc-test.att.jobs, soc.att.jobs, tchosted.art.att.com, tchosted.askretailtech.att.com, teleconference.uc.att.com, test-expressticketing.acss.att.com, test.changefeature.com, um.dayatt.com, utf-pre.idp.clogin.att.com, utf.idp.clogin.att.com, vcnms-c2s-auth.si.enclab.att.net, vcnms-c2s.si.enclab.att.net, vm.dayatt.com, www.activearmor.com, www.ap.att.com, www.attinternetservice.com, www.attplans.com, www.atttowers.com, www.businessdirect.att.com, www.em.att.com, www.em.dayatt.com, www.labs.att.com, www.networkcam.att.com, www.sbc.com, www.serviceguide.att.com, www.support.att.com, www.um.dayatt.com, www.unad.att.com, www.vm.att.com, www.vm.dayatt.com
Valid: 2025-12-10 00:00:00 → 2026-12-09 23:59:59
ddcd3f6efa7be311… google · xenon2026h2
Subject: san2.attssl.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: san2.attssl.com, 0.ecom.attccc.com, 1.ecom.attccc.com, 2.ecom.attccc.com, 3.ecom.attccc.com, activearmor.com, att-abspreprod.idp.blogin.att.com, att-acm.stage.blogin.att.com, att-bc.stage.blogin.att.com, att-current01.stage.att.net, att-drivenets.idp.clogin.att.com, att-drivenets.stage.clogin.att.com, att-ericsson.idp.blogin.att.com, att-ericsson.stage.blogin.att.com, att-fedsnowprd.blogin.att.com, att-fedsnowprd.idp.blogin.att.com, att-fedsnowtst.stage.blogin.att.com, att-glwire.idp.blogin.att.com, att-glwire.stage.blogin.att.com, att-halob.idp.clogin.att.com, att-halob.stage.clogin.att.com, att-halob.test.clogin.att.com, att-hmwk.idp.blogin.att.com, att-hmwk.stage.blogin.att.com, att-mcafee.idp.clogin.att.com, att-mcafee.stage.clogin.att.com, att-mcafee.test.clogin.att.com, att-state-farm.stage.blogin.att.com, attinternetservice.com, attplans.com, atttowers.com, bcsbilling-test.att.com, bcsbilling.att.com, caaid.stage.att.net, centrexmate-test.sbc.com, centrexmate.sbc.com, changefeature.com, dal01.em.att.com, dal01.vm.att.com, dal02.em.att.com, dal02.vm.att.com, dal03.em.att.com, dal03.vm.att.com, dal04.em.att.com, dal04.vm.att.com, dal05.em.att.com, dal05.vm.att.com, day01.em.dayatt.com, day01.um.dayatt.com, day01.vm.dayatt.com, em.dayatt.com, epay.eia.att.com, eservice5.eia.att.com, eservices.eia.att.com, expressticketing.acss.att.com, fedsnowtst.stage.blogin.att.com, gamnet.eia.att.com, obt.eia.att.com, plexarmate-test.sbc.com, plexarmate.sbc.com, prime.bus.att.com, prime.eia.att.com, run-test.att.io, run.att.io, saml.bus.att.com, saml.eia.att.com, samlidp.stage.blogin.att.com, soc-test.att.jobs, soc.att.jobs, tchosted.art.att.com, tchosted.askretailtech.att.com, teleconference.uc.att.com, test-expressticketing.acss.att.com, test.changefeature.com, um.dayatt.com, utf-pre.idp.clogin.att.com, utf.idp.clogin.att.com, vcnms-c2s-auth.si.enclab.att.net, vcnms-c2s.si.enclab.att.net, vm.dayatt.com, www.activearmor.com, www.ap.att.com, www.attinternetservice.com, www.attplans.com, www.atttowers.com, www.businessdirect.att.com, www.em.att.com, www.em.dayatt.com, www.labs.att.com, www.networkcam.att.com, www.sbc.com, www.serviceguide.att.com, www.support.att.com, www.um.dayatt.com, www.unad.att.com, www.vm.att.com, www.vm.dayatt.com
Valid: 2025-12-10 00:00:00 → 2026-12-09 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 184.86.251.5 2026-06-01 05:07:44.848 2026-06-01 05:07:44.848
A 184.86.251.28 2026-06-01 05:07:44.848 2026-06-01 05:07:44.848
AAAA 2a02:26f0:3400::1703:5832 2026-06-01 05:07:44.848 2026-07-28 04:49:52.055
AAAA 2a02:26f0:3400::1703:581a 2026-06-01 05:07:44.848 2026-07-28 04:49:52.055
A 2.19.195.34 2026-06-03 03:33:35.982 2026-07-28 04:49:52.055
AAAA 2a02:26f0:1180:35::210:6adf 2026-06-03 03:33:35.982 2026-06-03 03:36:37.930
A 2.19.195.18 2026-06-03 03:33:35.982 2026-07-28 04:49:52.055
AAAA 2a02:26f0:1180:35::210:6ade 2026-06-03 03:33:35.982 2026-06-03 03:36:37.930
AAAA 2a02:26f0:6d00:2b::210:1b63 2026-06-16 18:13:48.003 2026-06-16 18:13:48.003
A 2.16.106.223 2026-06-16 18:13:48.003 2026-06-16 18:13:48.003
AAAA 2a02:26f0:6d00:2b::210:1b52 2026-06-16 18:13:48.003 2026-06-16 18:13:48.003
A 2.16.106.222 2026-06-16 18:13:48.003 2026-06-16 18:13:48.003
AAAA 2a02:26f0:e600::170f:b199 2026-06-18 04:35:40.521 2026-06-18 04:35:40.521
AAAA 2a02:26f0:e600::170f:b1fa 2026-06-18 04:35:40.521 2026-06-18 04:35:40.521