optum.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of optum.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
DNS Records
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
Origin / IP-Leak
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 129.153.150.74 | AS31898 | AS13335 | 95% | cert 7c7504aa… served by 129.153.150.74 (AS31898) carries SAN icsprd.prism.optum.com which currently resolves through Cloudflare (AS13335) at 172.64.147.88, 104.18.40.168 |
| 132.226.55.90 | AS31898 | AS13335 | 95% | cert 5eccb62c… served by 132.226.55.90 (AS31898) carries SAN ace-dash.dev.ofthb.optum.com which currently resolves through Cloudflare (AS13335) at 104.18.37.212, 172.64.150.44 |
| 23.12.210.146 | AS9498 | AS16625 | 95% | cert ef1642f8… served by 23.12.210.146 (AS9498) carries SAN image.gois.optum.com which currently resolves through Akamai (AS16625) at 184.24.21.74, 2a02:26f0:fe00:193::1621, 2a02:26f0:fe00:199::1621, 2a02:26f0:1180:688::1621 |
| 23.39.82.69 | AS45758 | AS16625 | 95% | cert ef1642f8… served by 23.39.82.69 (AS45758) carries SAN image.gois.optum.com which currently resolves through Akamai (AS16625) at 23.201.243.153, 2600:1408:c400:1883::1621, 2600:1408:c400:1889::1621, 23.218.58.83 |
| 168.183.40.203 | AS10879 | AS54113 | 95% | cert 6b261e78… served by 168.183.40.203 (AS10879) carries SAN stg-eaporientation.optum.com which currently resolves through Fastly (AS54113) at 151.101.3.10, 151.101.195.10, 151.101.67.10, 151.101.131.10 |
| 168.183.42.93 | AS10879 | AS20940 | 95% | cert be473982… served by 168.183.42.93 (AS10879) carries SAN adcext2.optum.com which currently resolves through Akamai (AS20940) at 2.16.6.4, 2.16.6.12 |
| 168.183.42.93 | AS10879 | AS33905 | 95% | cert be473982… served by 168.183.42.93 (AS10879) carries SAN adcext3.optum.com which currently resolves through Akamai (AS33905) at 23.40.244.25 |
| 149.111.166.210 | AS10879 | AS16509 | 95% | cert 8d86ddd2… served by 149.111.166.210 (AS10879) carries SAN hsid11.optum.com which currently resolves through Amazon (AS16509) at 18.239.36.27, 18.239.36.54, 18.239.36.57, 18.239.36.3 |
| 129.159.112.173 | AS31898 | AS13335 | 95% | cert 8c29b978… served by 129.159.112.173 (AS31898) carries SAN mbrsvc-crm.dev.ofthb.optum.com which currently resolves through Cloudflare (AS13335) at 172.64.151.226, 104.18.36.30 |
| 150.136.3.176 | AS31898 | AS13335 | 95% | cert 255c590e… served by 150.136.3.176 (AS31898) carries SAN ace-dash.stg.ofthb.optum.com which currently resolves through Cloudflare (AS13335) at 104.18.38.144, 172.64.149.112 |
| 129.153.163.198 | AS31898 | AS13335 | 95% | cert a04ec947… served by 129.153.163.198 (AS31898) carries SAN devops-inventory.dev.prism.optum.com which currently resolves through Cloudflare (AS13335) at 172.64.150.142, 104.18.37.114 |
| 34.8.84.120 | AS396982 | AS13335 | 95% | cert 93123c34… served by 34.8.84.120 (AS396982) carries SAN reactor-test-gcp.optum.com which currently resolves through Cloudflare (AS13335) at 104.18.37.33, 172.64.150.223, 2a06:98c1:3102::6812:2521, 2606:4700:4403::ac40:96df |
| 129.80.8.111 | AS31898 | AS13335 | 95% | cert 5cce1909… served by 129.80.8.111 (AS31898) carries SAN notification.stg.prism.optum.com which currently resolves through Cloudflare (AS13335) at 104.18.32.169, 172.64.155.87 |
| 168.183.37.28 | AS10879 | AS16509 | 95% | cert ebb887dc… served by 168.183.37.28 (AS10879) carries SAN hsid11.optum.com which currently resolves through Amazon (AS16509) at 13.35.58.13, 13.35.58.102, 13.35.58.77, 13.35.58.54 |
| 129.153.35.145 | AS31898 | AS13335 | 95% | cert 57c475b8… served by 129.153.35.145 (AS31898) carries SAN ics-beta.dev.prism.optum.com which currently resolves through Cloudflare (AS13335) at 172.64.154.114, 104.18.33.142 |
| 129.153.35.145 | AS31898 | AS16509 | 95% | cert 57c475b8… served by 129.153.35.145 (AS31898) carries SAN user-cyc-qa-nbtapi.dev.prism.optum.com which currently resolves through Amazon (AS16509) at 34.239.29.243, 52.23.34.216 |
| 129.80.20.7 | AS31898 | AS13335 | 95% | cert 8db1eb60… served by 129.80.20.7 (AS31898) carries SAN athenaai.dev.ofthb.optum.com which currently resolves through Cloudflare (AS13335) at 172.64.145.181, 104.18.42.75 |
| 129.80.122.22 | AS31898 | AS13335 | 95% | cert 8c29b978… served by 129.80.122.22 (AS31898) carries SAN mbrsvc-crm.dev.ofthb.optum.com which currently resolves through Cloudflare (AS13335) at 172.64.151.226, 104.18.36.30 |
| 129.80.133.248 | AS31898 | AS13335 | 95% | cert 57c475b8… served by 129.80.133.248 (AS31898) carries SAN ics-beta.dev.prism.optum.com which currently resolves through Cloudflare (AS13335) at 172.64.154.114, 104.18.33.142 |
| 129.80.133.248 | AS31898 | AS16509 | 95% | cert 57c475b8… served by 129.80.133.248 (AS31898) carries SAN user-cyc-qa-nbtapi.dev.prism.optum.com which currently resolves through Amazon (AS16509) at 34.239.29.243, 52.23.34.216 |
| 129.80.217.145 | AS31898 | AS13335 | 95% | cert fc061d33… served by 129.80.217.145 (AS31898) carries SAN vil.dev.ofthb.optum.com which currently resolves through Cloudflare (AS13335) at 104.18.38.51, 172.64.149.205 |
| 129.80.99.203 | AS31898 | AS13335 | 95% | cert 16f4ccad… served by 129.80.99.203 (AS31898) carries SAN ace-dash.dev.ofthb.optum.com which currently resolves through Cloudflare (AS13335) at 104.18.37.212, 172.64.150.44 |
| 141.148.40.215 | AS31898 | AS13335 | 95% | cert ff2b5ed1… served by 141.148.40.215 (AS31898) carries SAN datafetch-chc.prism.optum.com which currently resolves through Cloudflare (AS13335) at 172.64.147.175, 104.18.40.81 |
| 193.122.193.159 | AS31898 | AS13335 | 95% | cert 70b2a437… served by 193.122.193.159 (AS31898) carries SAN cp-api.dev.ofthb.optum.com which currently resolves through Cloudflare (AS13335) at 104.18.43.251, 172.64.144.5 |
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | vercel-domain-verification-vcz3a8=iZDSqDePUvZQBrrQzTqcQjfI7 | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | canva-site-verification=1N3-Z9VCgGe9uMoMBos8EA | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | stripe-verification=f5ffe2615f5c33e916600d69ee3e77719049cd8778d5d0d8480d3abd696d9790 | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | google-site-verification=K9G07TBOw3kT55o2kQfqhKOy8-bTvVvGcDNV1O0SfRw | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | pendo-domain-verification=kveqppXJThuc63mOEbJ0nLz3qzY | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | google-site-verification=qdt3epgf2yohz7x7yt6lk8mrvdwpcst-nsecfhuc5n0 | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | s5lsmnsfgldub9dcoggv803ofo | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | adobe-idp-site-verification=9a5c47599b4f379d5e29ede339f3da7f9e1689f8e16709c98e397c86a1c68122 | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | docusign=3687a3fa-9c1b-4c2f-b9d2-fff40730a1f1 | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | pexip-ms-tenant-domain-verification=8cb813ca-9291-4356-b51c-141ee5617ba1 | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | nintex.66d9bddeb5916d50cec4074c | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | pendo-domain-verification=_l34bdk60wkLfR7EEZAWCmBNycw | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | anthropic-domain-verification-qrjcxb=EsaIBNgGKwDg1C3G5zZ0a9hTS | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | vercel-domain-verification-8k7spz=C8me93Q9z4WkbmUQ8J1EJWABN | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | vercel-domain-verification-6a8jvj=PGR9WYjZL6fzyWq9KOWpdYFgA | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | flexera-domain-verification-yzruuhvmkcfbaiuv | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | JIRA ticket: OSSRH-61503 | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | jamf-site-verification=alHDSup5VwXns-oBBXgodA | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | MS=ms72840239 | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| NS | epla1.corpnamesvcs.com | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | miro-verification=5ea04a0c26989ed5656ae2b88aa2e5c474f973ab | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | asv=e8e0b3d366d7be44e0bd0d0ef89cbe3b | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | vercel-domain-verification-6gedds=fvsXfjSA9kDo9dq4RfZnMUtIv | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | google-site-verification=MLQRCoeojpoCn90x9VYzWv4pBJhZ4384sjunGJnJAOU | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | MS=ms44155588 | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | google-site-verification=MRYu6FCFgjFFUUyR006EPXDPte7qabDsXcRgf9VjDkA | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| A | 149.111.128.88 | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | vercel-domain-verification-x4v22q=qUkZhL10VxYWIMUEiZreuAvbr | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | vercel-domain-verification-xx89hj=H48g8rQhURGT97RJBqjqXlI5P | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | apple-domain-verification=iguXCtsfpDjghiML | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | vercel-domain-verification-t49kcf=zE521wYAFyOqTeYnGtcT1iehN | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | atlassian-domain-verification=Ak5GBLix8t8r5DnxQD8I/d4LS1oVxIWH1LYuO8PK5cFB1nzlVDZvhJQ1G4Bzwadv | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | miro-verification=5ea04a0c26989ed5656ae2b88aa2e5c474f973ab | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | new-relic-domain-verification=44e2fab0d7ea48c3bb5713884cfa5239 | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | smartsheet-site-validation=kuoruwGxeUs_n8ztYYq6xLPzTLrf7KIA | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | Dynatrace-site-verification=5477fcdf-05d8-4f26-ba9f-cfdf2801244a__l3rbchfv942rgejmm3kagrrf9n | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | docusign=1296ccd2-14aa-4098-b101-ae2382c42d59 | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | amazonses:aeJlQXnMCUcSNwQKk2SnN/Ief922a3MMOAMGMLihfb4= | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | gE/JG8TTOG7fckv4KQ2ClCS4R5oKpq2B2WQSQoPZNYU= | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | airtable-verification=399cd3beff0269114abffd5352d2920c | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | openai-domain-verification=dv-vbuQnIJXapBpTb3zLITtvryB | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | Dynatrace-site-verification=cd523869-a58e-49b7-9115-18ef93824d88__h7hh7hak7eqcsb00sv3qn2un2h | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| MX | 5 mxb-0077b904.gslb.pphosted.com | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| NS | epla2.corpnamesvcs.com | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | MS=ms79006004 | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | insomnia-validation=7a45fc3dfaa0457197925a3a974160c4820112b9e7a55e599b9b22e04201ad51 | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | MS=ms28375138 | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | bitrise-verification=57adf39439083ec0-imLuwoEAjM8j | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | ibmid= e5f33bf4-c580-422c-b108-81936f343d4a | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | google-site-verification=1LYqptpAIooI1IatBOU-QkWVHc0xTla2SxgThJgVoCM | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | stripe-verification=51224bbc433316f2b8f71438e1a8de5c7b3c42e709833613518cf1a9f07a449e | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | 95cc4afe-68be-4af7-afe1-f376cf96ba82 | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | vercel-domain-verification-q79943=G8uyMnKOkWwWgqWMFtXoqHlni | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | stripe-verification=f737f340fb2bf98b02348769d27132bdfbe9b1d056d08d6079da88cc15d3972d | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | SFMC-7WfPftLYCXOox7vbsWegmwKrW4EB_7sDQU9KCa3Q | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | stripe-verification=b148f8c88b1d3b715fd66b7a580e01ee36ae2057d8cd0dcc4e8b84f572f3a459 | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | MS=EF964C60EC2FAE4BFD4F99A9DF0ED1D8BE79CDEF | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | insomnia-validation=26ea585f9b5d4104b7b89d8e456e2559de82b22414395e7aab226898c8a3d81f | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | smartsheet-site-validation=kEh8gyt9B7riJjfG5cssFLjX2HlBfbD7 | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | vercel-domain-verification-kqza24=6YwS1vi3Q3a1FZOd3Gs1r4BLg | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | isuh46m2ev1lbupa27irgep01o | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | cleverchain-domain-verification-264a5b=MJqL9fmnZA3tC0PDeCUJsnv39 | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | ug4rsmkk66ulqas52pfoakdukn | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | insomnia-validation=638846f996b945d381b7ffa9339663688a46a8f149fe5d50a64d651fb7672f3c | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | google-site-verification=LmXHPchrMmtMtXvEoiKROwM90eKbmUFLxmKoBOEVdBc | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | docker-verification=a87711e0-23d3-4261-918a-3a16a11b3ddc | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | cc12tvt56082dqp5cah6dav3o | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| MX | 5 mxa-0077b904.gslb.pphosted.com | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | Dynatrace-site-verification=212a521c-834f-402a-a634-cb2c62fc1ba8__ol0859ui998bp60r59a7kl9bms | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | Dynatrace-site-verification=2863e488-a58b-48d4-960d-29f6444e2bf8__jtfm10h2fdft871108addk4l6r | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | 15dcb10525bc1626db3b98744f2f4ad78fc1bfe8b3a56b1e41 | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | d365mktkey=Ix0iMUwCrlbu6WNLkxoxxRPE2k6qZJzanxBmxWfdMMsx | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | google-site-verification=yiOfJDxUH6nsznMllMlxIBcVJYjgQnwpLMGo0JyEyNs | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| TXT | flexera-domain-verification-zeqqvfouqnqivdad | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |
| CAA | 0 issuemail "sectigo.com" | 2026-05-26 18:55:03.670 | 2026-07-17 08:37:56.742 |