Domain

work.widgets.um.att.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of work.widgets.um.att.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

—

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

—

seen in DNS

Observed Certs

—

in our scans

DNS Records

2.16.241.198, 2.16.241.212, 2.19.195.32, 2.19.195.35, 23.15.178.185, 23.15.178.234

AAAA

2a02:26f0:1180:35::210:6ad5, 2a02:26f0:1180:35::210:6ad8, 2a02:26f0:3400::1703:5812, 2a02:26f0:3400::1703:5840, 2a02:26f0:e600::170f:b18b, 2a02:26f0:e600::170f:b19a

—

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

cc546dde0b61ba99… google · xenon2026h2

Subject: work.widgets.um.att.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: work.widgets.um.att.com

Valid: 2026-02-27 00:00:00 → 2026-09-13 23:59:59

bef1bdb63d5d1a68… google · argon2026h2

Subject: san3.attssl.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: san3.attssl.com, businessdirect.att.com, c2bc.um.att.com, cnm.eia.att.com, cp.eia.att.com, dal01.c2bc.um.att.com, dal01.home.widgets.um.att.com, dal01.um.att.com, dal01.work.widgets.um.att.com, dal02.c2bc.um.att.com, dal02.home.widgets.um.att.com, dal02.um.att.com, dal02.work.widgets.um.att.com, dal03.c2bc.um.att.com, dal03.home.widgets.um.att.com, dal03.um.att.com, dal03.work.widgets.um.att.com, dal04.c2bc.um.att.com, dal04.home.widgets.um.att.com, dal04.um.att.com, dal04.work.widgets.um.att.com, dal05.c2bc.um.att.com, dal05.home.widgets.um.att.com, dal05.um.att.com, dal05.work.widgets.um.att.com, dataweb-test.eia.att.com, dataweb.eia.att.com, dpt-test.bus.att.com, dpt.bus.att.com, dpt.eia.att.com, dsmhm-test.bus.att.com, dsmhm.bus.att.com, eabnforms-test.bus.att.com, eabnforms.bus.att.com, epay-test.bus.att.com, epay.bus.att.com, eservice5-test.bus.att.com, eservice5.bus.att.com, eservices-test.bus.att.com, eservices.bus.att.com, eservices2-test.bus.att.com, eservices2.bus.att.com, eservices3-test.bus.att.com, eservices3.bus.att.com, eservices4-test.bus.att.com, eservices4.bus.att.com, euam-test.bus.att.com, home.widgets.um.att.com, hosting-test.bus.att.com, hosting.bus.att.com, iom-test.bus.att.com, iom.bus.att.com, iom.eia.att.com, iomdsl-test.eia.att.com, iomdsl.eia.att.com, mapadvantage-test.bus.att.com, mapadvantage.bus.att.com, mapwrapper-test.bus.att.com, mapwrapper.bus.att.com, mis-att-test.bus.att.com, mis-att.bus.att.com, mobilecp-test.eia.att.com, mobilecp.eia.att.com, msp-test.eia.att.com, msp.eia.att.com, netcam.eia.att.com, networkcam.att.com, obt-test.bus.att.com, obt.bus.att.com, prime-test.bus.att.com, rds-test.bus.att.com, rds.bus.att.com, rds.eia.att.com, saml-test.bus.att.com, servicec.eia.att.com, servicecat-test.bus.att.com, servicecat.bus.att.com, small-test.bus.att.com, soapservices-test.bus.att.com, soapservices.bus.att.com, soapsrv.eia.att.com, test.intbillsys.att.com, training-test.iadvantage.att.com, training.eia.att.com, training.iadvantage.att.com, woi-test.bus.att.com, woi.bus.att.com, woi.eia.att.com, work.widgets.um.att.com, www-test.cnm.att.com, www-test.iadvantage.att.com, www.cnm.att.com, www.iadvantage.att.com, www.intbillsys.att.com, www.um.att.com, www11.um.att.com, www12.um.att.com, www13.um.att.com, www14.um.att.com, www15.um.att.com

Valid: 2025-10-27 00:00:00 → 2026-10-26 23:59:59

54d8d04b0bfe4ec9… google · xenon2026h2

Subject: san3.attssl.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

Valid: 2025-10-27 00:00:00 → 2026-10-26 23:59:59

bef1bdb63d5d1a68… cloudflare · nimbus2026

Subject: san3.attssl.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

Valid: 2025-10-27 00:00:00 → 2026-10-26 23:59:59

a21d3394e203e0bb… cloudflare · nimbus2026

Subject: work.widgets.um.att.com

Issuer: DigiCert TLS RSA SHA256 2020 CA1

SANs: work.widgets.um.att.com

Valid: 2025-03-27 00:00:00 → 2026-03-26 23:59:59

a21d3394e203e0bb… google · argon2026h1

Subject: work.widgets.um.att.com

Issuer: DigiCert TLS RSA SHA256 2020 CA1

SANs: work.widgets.um.att.com

Valid: 2025-03-27 00:00:00 → 2026-03-26 23:59:59

a9f1fba4f20f25b6… google · xenon2026h1

Subject: work.widgets.um.att.com

Issuer: DigiCert TLS RSA SHA256 2020 CA1

SANs: work.widgets.um.att.com

Valid: 2025-02-25 00:00:00 → 2026-03-28 23:59:59

a9f1fba4f20f25b6… cloudflare · nimbus2026

Subject: work.widgets.um.att.com

Issuer: DigiCert TLS RSA SHA256 2020 CA1

SANs: work.widgets.um.att.com

Valid: 2025-02-25 00:00:00 → 2026-03-28 23:59:59

a9f1fba4f20f25b6… google · argon2026h1

Subject: work.widgets.um.att.com

Issuer: DigiCert TLS RSA SHA256 2020 CA1

SANs: work.widgets.um.att.com

Valid: 2025-02-25 00:00:00 → 2026-03-28 23:59:59

a9f1fba4f20f25b6… digicert · wyvern2026h1

Subject: work.widgets.um.att.com

Issuer: DigiCert TLS RSA SHA256 2020 CA1

SANs: work.widgets.um.att.com

Valid: 2025-02-25 00:00:00 → 2026-03-28 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
A	2.16.241.198	2026-06-01 05:35:36.931	2026-06-01 05:35:36.931
AAAA	2a02:26f0:e600::170f:b19a	2026-06-01 05:35:36.931	2026-06-01 05:35:36.931
AAAA	2a02:26f0:e600::170f:b18b	2026-06-01 05:35:36.931	2026-06-01 05:35:36.931
A	2.16.241.212	2026-06-01 05:35:36.931	2026-06-01 05:35:36.931
A	2.19.195.32	2026-06-03 04:49:59.240	2026-06-16 18:13:48.003
AAAA	2a02:26f0:3400::1703:5840	2026-06-03 04:49:59.240	2026-06-03 04:52:37.852
A	2.19.195.35	2026-06-03 04:49:59.240	2026-06-16 18:13:48.003
AAAA	2a02:26f0:3400::1703:5812	2026-06-03 04:49:59.240	2026-06-03 04:52:37.852
A	23.15.178.185	2026-06-03 04:52:37.852	2026-06-03 04:52:37.852
A	23.15.178.234	2026-06-03 04:52:37.852	2026-06-03 04:52:37.852
AAAA	2a02:26f0:1180:35::210:6ad5	2026-06-16 18:13:48.003	2026-06-16 18:13:48.003
AAAA	2a02:26f0:1180:35::210:6ad8	2026-06-16 18:13:48.003	2026-06-16 18:13:48.003