Check-Host.cc

Domain

xoom.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of xoom.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
73
A/AAAA targets
Subdomains
309
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
6
in our scans

DNS Records

A
151.101.195.1, 151.101.3.1, 162.159.141.96
AAAA
MX
10 mx1.paypalcorp.com, 10 mx2.paypalcorp.com
NS
ns1-pchnet.paypal.com, ns2-pchnet.paypal.com, pdns100.ultradns.com, pdns100.ultradns.net
TXT
MS=ms89760834, atlassian-domain-verification=Q8BdHlO6NYSN5njfC2rlbPQxksVfADlcxarxq4fesYJErtGKylvfcfyfwrPD/wnv, facebook-domain-verification=unj4rsz4wuvdg10v8z26d8xe4ww85c, google-site-verification=HWwzgfow6dPQU2RiSosmQZNSJ8S1xqdch1yMxD-2wsA, v=spf1 ip4:8.26.33.0/24 ip4:205.189.102.0/23 ip4:198.199.247.0/24 ip4:192.254.121.104/29 ip4:65.52.232.173/32 ip4:157.55.209.64/32 ip4:62.13.150.47/32 ip4:198.21.2.183 ip4:74.112.67.243 include:pp._spf.paypal.com include:spf.protection.outlook.com -all
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
autodiscover.xoom.com 2026-07-23 06:49:31.740
id.xoom.com 2026-07-28 06:23:49.431
data.emails.xoom.com 2026-06-03 15:56:49.585
data.service.xoom.com 2026-06-17 02:17:23.695
data.useragreement.xoom.com 2026-07-17 08:11:30.649
help.xoom.com 2026-07-23 06:49:31.740
m.xoom.com 2026-07-23 06:49:31.740
mobile.xoom.com 2026-07-23 06:49:31.740
www.xoom.com 2026-07-26 16:20:59.102
id.sandbox.xoom.com 2026-07-27 11:51:10.557
sandbox.xoom.com 2026-07-23 06:49:31.740
xoom.com 2026-07-26 05:28:47.481
t.xoom.com 2026-07-22 03:21:37.019
uat.xoom.com 2026-07-23 06:49:31.740
aimon.fra.xoom.com
1970-01-01 00:00:00.000
aimon.oma.xoom.com
1970-01-01 00:00:00.000
aimon.xoom.com
1970-01-01 00:00:00.000
api.xoom.com 2026-07-23 06:49:31.740
app.oma.st.xoom.com
1970-01-01 00:00:00.000
app001.oma.st.xoom.com
1970-01-01 00:00:00.000
app002.oma.st.xoom.com
1970-01-01 00:00:00.000
app003.oma.st.xoom.com
1970-01-01 00:00:00.000
app004.oma.st.xoom.com
1970-01-01 00:00:00.000
app005.oma.st.xoom.com
1970-01-01 00:00:00.000
app006.oma.st.xoom.com
1970-01-01 00:00:00.000
app007.oma.st.xoom.com
1970-01-01 00:00:00.000
app008.oma.st.xoom.com
1970-01-01 00:00:00.000
app009.oma.st.xoom.com
1970-01-01 00:00:00.000
app010.oma.st.xoom.com
1970-01-01 00:00:00.000
app011.oma.st.xoom.com
1970-01-01 00:00:00.000
app012.oma.st.xoom.com
1970-01-01 00:00:00.000
app013.oma.st.xoom.com
1970-01-01 00:00:00.000
app014.oma.st.xoom.com
1970-01-01 00:00:00.000
app015.oma.st.xoom.com
1970-01-01 00:00:00.000
app016.oma.st.xoom.com
1970-01-01 00:00:00.000
app017.oma.st.xoom.com
1970-01-01 00:00:00.000
app018.oma.st.xoom.com
1970-01-01 00:00:00.000
app019.oma.st.xoom.com
1970-01-01 00:00:00.000
app020.oma.st.xoom.com
1970-01-01 00:00:00.000
app021.oma.st.xoom.com
1970-01-01 00:00:00.000
app022.oma.st.xoom.com
1970-01-01 00:00:00.000
app023.oma.st.xoom.com
1970-01-01 00:00:00.000
app024.oma.st.xoom.com
1970-01-01 00:00:00.000
app025.oma.st.xoom.com
1970-01-01 00:00:00.000
app026.oma.st.xoom.com
1970-01-01 00:00:00.000
app027.oma.st.xoom.com
1970-01-01 00:00:00.000
app028.oma.st.xoom.com
1970-01-01 00:00:00.000
app029.oma.st.xoom.com
1970-01-01 00:00:00.000
app030.oma.st.xoom.com
1970-01-01 00:00:00.000
app031.oma.st.xoom.com
1970-01-01 00:00:00.000
app032.oma.st.xoom.com
1970-01-01 00:00:00.000
app033.oma.st.xoom.com
1970-01-01 00:00:00.000
app034.oma.st.xoom.com
1970-01-01 00:00:00.000
app035.oma.st.xoom.com
1970-01-01 00:00:00.000
app036.oma.st.xoom.com
1970-01-01 00:00:00.000
app037.oma.st.xoom.com
1970-01-01 00:00:00.000
app038.oma.st.xoom.com
1970-01-01 00:00:00.000
app039.oma.st.xoom.com
1970-01-01 00:00:00.000
app040.oma.st.xoom.com
1970-01-01 00:00:00.000
app041.oma.st.xoom.com
1970-01-01 00:00:00.000
app042.oma.st.xoom.com
1970-01-01 00:00:00.000
app043.oma.st.xoom.com
1970-01-01 00:00:00.000
app044.oma.st.xoom.com
1970-01-01 00:00:00.000
app045.oma.st.xoom.com
1970-01-01 00:00:00.000
app046.oma.st.xoom.com
1970-01-01 00:00:00.000
app047.oma.st.xoom.com
1970-01-01 00:00:00.000
app048.oma.st.xoom.com
1970-01-01 00:00:00.000
app049.oma.st.xoom.com
1970-01-01 00:00:00.000
app050.oma.st.xoom.com
1970-01-01 00:00:00.000
app051.oma.st.xoom.com
1970-01-01 00:00:00.000
app052.oma.st.xoom.com
1970-01-01 00:00:00.000
app053.oma.st.xoom.com
1970-01-01 00:00:00.000
app054.oma.st.xoom.com
1970-01-01 00:00:00.000
app055.oma.st.xoom.com
1970-01-01 00:00:00.000
app056.oma.st.xoom.com
1970-01-01 00:00:00.000
app057.oma.st.xoom.com
1970-01-01 00:00:00.000
app058.oma.st.xoom.com
1970-01-01 00:00:00.000
app059.oma.st.xoom.com
1970-01-01 00:00:00.000
app060.oma.st.xoom.com
1970-01-01 00:00:00.000
artifactory.fra.xoom.com
1970-01-01 00:00:00.000
artifactory.oma.xoom.com
1970-01-01 00:00:00.000
artifactory.ord.engtools.xoom.com
1970-01-01 00:00:00.000
artifactory.xoom.com
1970-01-01 00:00:00.000
artifactorystg.fra.tools.xoom.com
1970-01-01 00:00:00.000
artifactorystg.oma.tools.xoom.com
1970-01-01 00:00:00.000
artifactorystg.tools.xoom.com
1970-01-01 00:00:00.000
artnode001.ord.engtools.xoom.com
1970-01-01 00:00:00.000
artnode002.ord.engtools.xoom.com
1970-01-01 00:00:00.000
athenea.fra.staging.xoom.com
1970-01-01 00:00:00.000
athenea.fra.xoom.com
1970-01-01 00:00:00.000
athenea.oma.staging.xoom.com
1970-01-01 00:00:00.000
athenea.oma.xoom.com
1970-01-01 00:00:00.000
athenea.staging.xoom.com
1970-01-01 00:00:00.000
athenea.xoom.com
1970-01-01 00:00:00.000
cdn.emails.xoom.com
1970-01-01 00:00:00.000
cdn.service.xoom.com
1970-01-01 00:00:00.000
cdn.useragreement.xoom.com
1970-01-01 00:00:00.000
click.messages.xoom.com
1970-01-01 00:00:00.000
dmz001.oma.st.xoom.com
1970-01-01 00:00:00.000
dmz002.oma.st.xoom.com
1970-01-01 00:00:00.000
dmz003.oma.st.xoom.com
1970-01-01 00:00:00.000
dmz004.oma.st.xoom.com
1970-01-01 00:00:00.000
docker-registry-k8s-gcr-io.ord.engtools.xoom.com
1970-01-01 00:00:00.000
docker-registry-quay.ord.engtools.xoom.com
1970-01-01 00:00:00.000
docker-registry.ord.engtools.xoom.com
1970-01-01 00:00:00.000
embed.dr.xoom.com
1970-01-01 00:00:00.000
embed.xoom.com
1970-01-01 00:00:00.000
engineering.jenkins.ord.engtools.xoom.com
1970-01-01 00:00:00.000
engtools.xoom.com
1970-01-01 00:00:00.000
forgeapi.ord.engtools.xoom.com
1970-01-01 00:00:00.000
ftp.xoom.com 2026-07-23 06:49:31.740
gcp-hrz-dmz-fraprod001.fra.prod.xoom.com
1970-01-01 00:00:00.000
gcp-hrz-dmz-fraprod002.fra.prod.xoom.com
1970-01-01 00:00:00.000
gcp-hrz-dmz-omaprod001.oma.prod.xoom.com
1970-01-01 00:00:00.000
gcp-hrz-dmz-omaprod002.oma.prod.xoom.com
1970-01-01 00:00:00.000
gcp-hrz-mgmt-fraprod001.fra.prod.xoom.com
1970-01-01 00:00:00.000
gcp-hrz-mgmt-fraprod002.fra.prod.xoom.com
1970-01-01 00:00:00.000
gcp-hrz-mgmt-lbl1.fra.prod.xoom.com
1970-01-01 00:00:00.000
gcp-hrz-mgmt-lbl1.oma.prod.xoom.com
1970-01-01 00:00:00.000
gcp-hrz-mgmt-lbl1.oma.st.xoom.com
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: *.maxoom.com.my
Issuer: YR2
SANs: *.maxoom.com.my, maxoom.com.my
Subject: paypal.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: PAYPAL-DEUTSCHLAND.DE, PAYPAL-MARKETING.PL, PAYPAL.CO, PAYPAL.COM.MY, braintreepayments.com, buyindiaonline.com, cash2india.com, curv.cc, curv.co, fastlane.paypal.com, paypal-australia.com.au, paypal-business.co.uk, paypal-business.com.au, paypal-businesscenter.com, paypal-communications.com, paypal-corp.com, paypal-danmark.dk, paypal-donations.co.uk, paypal-donations.com, paypal-experience.com, paypal-gifts.com, paypal-globalshops.com, paypal-information.com, paypal-knowledge-test.com, paypal-knowledge.com, paypal-latam.com, paypal-marketing.ca, paypal-marketing.co.uk, paypal-media.com, paypal-mena.com, paypal-mktg.com, paypal-nakit.com, paypal-norge.no, paypal-optimizer.com, paypal-partners.com, paypal-passport.com, paypal-prepagata.com, paypal-promo.es, paypal-support.com, paypal-sverige.se, paypal-turkiye.com, paypal-workplace.com, paypal.ai, paypal.at, paypal.be, paypal.biz, paypal.ca, paypal.ch, paypal.cl, paypal.co.id, paypal.co.il, paypal.co.in, paypal.co.nz, paypal.co.th, paypal.co.uk, paypal.co.za, paypal.com, paypal.com.ar, paypal.com.au, paypal.com.br, paypal.com.cn, paypal.com.hk, paypal.com.mx, paypal.com.pe, paypal.com.sa, paypal.com.sg, paypal.com.tr, paypal.com.tw, paypal.com.ve, paypal.de, paypal.dk, paypal.es, paypal.eu, paypal.fi, paypal.fr, paypal.ie, paypal.in, paypal.it, paypal.jp, paypal.lu, paypal.me, paypal.nl, paypal.no, paypal.ph, paypal.pl, paypal.pt, paypal.se, paypal.vn, paypalbenefits.com, paypalgivingfund.org, paypalobjects.com, pypl.com, sandbox.paypal.com, simility.com, thepaypalblog.com, www.curv.cc, www.curv.co, www.paypal.ai, www.paypal.biz, www.paypal.com, www.simility.com, xoom.com
Subject: admin.medxoom.com
Issuer: Amazon RSA 2048 M04
SANs: admin.medxoom.com
Subject: admin.qa.medxoom.com
Issuer: Amazon RSA 2048 M04
SANs: admin.qa.medxoom.com
Subject: admin.dev.medxoom.com
Issuer: Amazon RSA 2048 M01
SANs: admin.dev.medxoom.com
Subject: admin.medxoom.com
Issuer: Amazon RSA 2048 M01
SANs: admin.medxoom.com
Subject: mobile.xoom.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: mobile.xoom.com
Subject: admin.qa.medxoom.com
Issuer: Amazon RSA 2048 M04
SANs: admin.qa.medxoom.com
Subject: admin.qa.medxoom.com
Issuer: Amazon RSA 2048 M04
SANs: admin.qa.medxoom.com
Subject: srv.filexoom.com
Issuer: R13
SANs: autoconfig.srv.filexoom.com, autodiscover.srv.filexoom.com, cpanel.srv.filexoom.com, cpcalendars.srv.filexoom.com, cpcontacts.srv.filexoom.com, ipv6.srv.filexoom.com, mail.srv.filexoom.com, srv.filexoom.com, webdisk.srv.filexoom.com, webmail.srv.filexoom.com, whm.srv.filexoom.com, www.srv.filexoom.com
Subject: admin.qa.medxoom.com
Issuer: Amazon RSA 2048 M04
SANs: admin.qa.medxoom.com
Subject: admin.qa.medxoom.com
Issuer: Amazon RSA 2048 M04
SANs: admin.qa.medxoom.com
Subject: admin.medxoom.com
Issuer: Amazon RSA 2048 M01
SANs: admin.medxoom.com
Subject: admin.dev.medxoom.com
Issuer: Amazon RSA 2048 M01
SANs: admin.dev.medxoom.com
Subject: admin.medxoom.com
Issuer: Amazon RSA 2048 M04
SANs: admin.medxoom.com
Subject: admin.dev.medxoom.com
Issuer: Amazon RSA 2048 M01
SANs: admin.dev.medxoom.com
Subject: *.maxoom.com.my
Issuer: R12
SANs: *.maxoom.com.my, maxoom.com.my
Subject: partnerships.xoom.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: partnerships.xoom.com
Subject: admin.dev.medxoom.com
Issuer: Amazon RSA 2048 M01
SANs: admin.dev.medxoom.com
Subject: admin.medxoom.com
Issuer: Amazon RSA 2048 M04
SANs: admin.medxoom.com
Subject: admin.stg.medxoom.com
Issuer: Amazon RSA 2048 M04
SANs: admin.stg.medxoom.com
Subject: admin.stg.medxoom.com
Issuer: Amazon RSA 2048 M01
SANs: admin.stg.medxoom.com

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

172.236.109.37:443 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
192.204.45.225 AS2914 AS13335 95% cert 7f40b0f5… served by 192.204.45.225 (AS2914) carries SAN id.xoom.com which currently resolves through Cloudflare (AS13335) at 104.18.7.168, 104.18.6.168, 151.101.129.21, 151.101.65.21
192.67.63.225 AS212890 AS13335 95% cert 7f40b0f5… served by 192.67.63.225 (AS212890) carries SAN id.xoom.com which currently resolves through Cloudflare (AS13335) at 104.18.7.168, 104.18.6.168, 151.101.129.21, 151.101.65.21
156.224.79.152 AS61112 AS54113 95% cert 7f40b0f5… served by 156.224.79.152 (AS61112) carries SAN id.xoom.com which currently resolves through Fastly (AS54113) at 151.101.129.21, 151.101.65.21, 151.101.1.21, 151.101.193.21
216.167.27.150 AS2914 AS54113 95% cert 7f40b0f5… served by 216.167.27.150 (AS2914) carries SAN id.xoom.com which currently resolves through Fastly (AS54113) at 151.101.129.21, 151.101.65.21, 151.101.1.21, 151.101.193.21
203.248.84.51 AS9848 AS54113 95% cert 7f40b0f5… served by 203.248.84.51 (AS9848) carries SAN id.xoom.com which currently resolves through Fastly (AS54113) at 151.101.129.21, 151.101.65.21, 151.101.1.21, 151.101.193.21
104.223.55.109 AS36352 AS54113 95% cert 7f40b0f5… served by 104.223.55.109 (AS36352) carries SAN id.xoom.com which currently resolves through Fastly (AS54113) at 151.101.129.21, 151.101.65.21, 151.101.1.21, 151.101.193.21
216.167.94.244 AS2914 AS13335 95% cert 7f40b0f5… served by 216.167.94.244 (AS2914) carries SAN id.xoom.com which currently resolves through Cloudflare (AS13335) at 104.18.7.168, 104.18.6.168, 151.101.129.21, 151.101.65.21
205.189.102.196 AS17012 AS13335 95% cert 4f81d615… served by 205.189.102.196 (AS17012) carries SAN mobile.xoom.com which currently resolves through Cloudflare (AS13335) at 104.18.12.26, 104.18.13.26

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

79668826b8c77887… google · argon2026h2
Subject: www.xoom.com
Issuer: DigiCert EV RSA CA G2
SANs: www.xoom.com, embed.xoom.com, m.xoom.com, partner.xoom.com, www.buyindiaonline.com, www.cash2india.com, xoom.com
Valid: 2025-09-08 00:00:00 → 2026-09-07 23:59:59
449a3f2973975b50… google · argon2026h2
Subject: www.xoom.com
Issuer: DigiCert EV RSA CA G2
SANs: www.xoom.com, embed.xoom.com, m.xoom.com, partner.xoom.com, www.buyindiaonline.com, www.cash2india.com, xoom.com
Valid: 2025-09-08 00:00:00 → 2026-09-07 23:59:59
79668826b8c77887… google · xenon2026h2
Subject: www.xoom.com
Issuer: DigiCert EV RSA CA G2
SANs: www.xoom.com, embed.xoom.com, m.xoom.com, partner.xoom.com, www.buyindiaonline.com, www.cash2india.com, xoom.com
Valid: 2025-09-08 00:00:00 → 2026-09-07 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 151.101.3.1 2026-05-27 02:35:44.599 2026-07-26 05:28:47.481
TXT MS=ms89760834 2026-05-27 02:35:44.599 2026-07-26 05:28:47.481
A 151.101.195.1 2026-05-27 02:35:44.599 2026-07-26 05:28:47.481
MX 10 mx1.paypalcorp.com 2026-05-27 02:35:44.599 2026-07-26 05:28:47.481
MX 10 mx2.paypalcorp.com 2026-05-27 02:35:44.599 2026-07-26 05:28:47.481
NS ns2-pchnet.paypal.com 2026-05-27 02:35:44.599 2026-07-26 05:28:47.481
TXT google-site-verification=HWwzgfow6dPQU2RiSosmQZNSJ8S1xqdch1yMxD-2wsA 2026-05-27 02:35:44.599 2026-07-26 05:28:47.481
NS pdns100.ultradns.com 2026-05-27 02:35:44.599 2026-07-26 05:28:47.481
NS pdns100.ultradns.net 2026-05-27 02:35:44.599 2026-07-26 05:28:47.481
TXT atlassian-domain-verification=Q8BdHlO6NYSN5njfC2rlbPQxksVfADlcxarxq4fesYJErtGKylvfcfyfwrPD/wnv 2026-05-27 02:35:44.599 2026-07-26 05:28:47.481
NS ns1-pchnet.paypal.com 2026-05-27 02:35:44.599 2026-07-26 05:28:47.481
TXT facebook-domain-verification=unj4rsz4wuvdg10v8z26d8xe4ww85c 2026-05-27 02:35:44.599 2026-07-26 05:28:47.481
A 162.159.141.96 2026-05-27 02:35:44.599 2026-07-26 05:28:47.481
SRV _sipfederationtls._tcp 100 1 5061 sipfed.online.lync.com 2026-05-27 02:35:44.599 2026-07-26 05:28:47.481
TXT v=spf1 ip4:8.26.33.0/24 ip4:205.189.102.0/23 ip4:198.199.247.0/24 ip4:192.254.121.104/29 ip4:65.52.232.173/32 ip4:157.55.209.64/32 ip4:62.13.150.47/32 ip4:198.21.2.183 ip4:74.112.67.243 include:pp._spf.paypal.com include:spf.protection.outlook.com -all 2026-05-27 02:35:44.599 2026-07-26 05:28:47.481