Domain
woo.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of woo.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
7
A/AAAA targets
Subdomains
21
CT + scan + body
Record Types
4
seen in DNS
Observed Certs
3
in our scans
DNS Records
A
192.0.66.5
AAAA
—
MX
10 mx1.dfw.automattic.com, 10 mx2.ams.automattic.com
NS
ns1.automattic.com, ns2.automattic.com, ns3.automattic.com
TXT
google-site-verification=wH9YpRRJmkKMzXeDpR-Y_isCadE4tXqFisvMB2U2BzM, v=spf1 include:_spf.automattic.com include:mail.zendesk.com -all
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| pay.woo.com | 2026-07-18 01:14:05.938 | |
| qit.woo.com | 2026-06-16 00:37:44.246 | |
| trk.woo.com | 2026-06-21 18:27:12.120 | |
| www.qit.woo.com | 2026-06-01 10:56:18.221 | |
| developer.woo.com | 1970-01-01 00:00:00.000 | |
| sandbox.woo.com | 1970-01-01 00:00:00.000 | |
| woo.com | 2026-07-22 17:00:39.010 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: jti.report.dotsixtwoo.com
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: jti.report.dotsixtwoo.com
Subject: vpn.sung-woo.com
Issuer: sung-woo-SW-DC-CA
SANs: vpn.sung-woo.com
Subject: twoo.com
Issuer: DigiCert TLS RSA SHA256 2020 CA1
SANs: api.twoo.com, backend.twoo.com, cdn.twoo.com, jsonapi.twoo.com, m.twoo.com, twoo.com, www.twoo.com
Subject: mctwoo.com
Issuer: mctwoo.com
SANs: mctwoo.com
Subject: twoo.com
Issuer: DigiCert TLS RSA SHA256 2020 CA1
SANs: api.twoo.com, backend.twoo.com, cdn.twoo.com, jsonapi.twoo.com, m.twoo.com, twoo.com, www.twoo.com
Subject: mail.flowwoo.com
Issuer: YR2
SANs: autoconfig.flowwoo.com, autoconfig.ipc360home.com, autoconfig.mysnapvitals.com, autoconfig.nexht.net, autoconfig.puwell.com, autoconfig.showmo365.com, autoconfig.ugoho.me, autoconfig.virtavo.com, autoconfig.xypaipai.com, autodiscover.flowwoo.com, autodiscover.ipc360home.com, autodiscover.mysnapvitals.com, autodiscover.nexht.net, autodiscover.puwell.com, autodiscover.showmo365.com, autodiscover.ugoho.me, autodiscover.virtavo.com, autodiscover.xypaipai.com, mail.flowwoo.com, mta-sts.flowwoo.com, mta-sts.xypaipai.com
Subject: twoo.com
Issuer: DigiCert TLS RSA SHA256 2020 CA1
SANs: api.twoo.com, backend.twoo.com, cdn.twoo.com, jsonapi.twoo.com, m.twoo.com, twoo.com, www.twoo.com
Subject: iiko.noawoo.com
Issuer: YE2
SANs: iiko.noawoo.com
Subject: twoo.com
Issuer: DigiCert TLS RSA SHA256 2020 CA1
SANs: api.twoo.com, backend.twoo.com, cdn.twoo.com, jsonapi.twoo.com, m.twoo.com, twoo.com, www.twoo.com
Subject: twoo.com
Issuer: DigiCert TLS RSA SHA256 2020 CA1
SANs: api.twoo.com, backend.twoo.com, cdn.twoo.com, jsonapi.twoo.com, m.twoo.com, twoo.com, www.twoo.com
Subject: twoo.com
Issuer: DigiCert TLS RSA SHA256 2020 CA1
SANs: api.twoo.com, backend.twoo.com, cdn.twoo.com, jsonapi.twoo.com, m.twoo.com, twoo.com, www.twoo.com
Subject: twoo.com
Issuer: DigiCert TLS RSA SHA256 2020 CA1
SANs: api.twoo.com, backend.twoo.com, cdn.twoo.com, jsonapi.twoo.com, m.twoo.com, twoo.com, www.twoo.com
Subject: twoo.com
Issuer: DigiCert TLS RSA SHA256 2020 CA1
SANs: api.twoo.com, backend.twoo.com, cdn.twoo.com, jsonapi.twoo.com, m.twoo.com, twoo.com, www.twoo.com
Subject: twoo.com
Issuer: DigiCert TLS RSA SHA256 2020 CA1
SANs: api.twoo.com, backend.twoo.com, cdn.twoo.com, jsonapi.twoo.com, m.twoo.com, twoo.com, www.twoo.com
Subject: *.mixwoo.com
Issuer: XinNet DV TLS CA
SANs: *.mixwoo.com, mixwoo.com
Subject: twoo.com
Issuer: DigiCert TLS RSA SHA256 2020 CA1
SANs: api.twoo.com, backend.twoo.com, cdn.twoo.com, jsonapi.twoo.com, m.twoo.com, twoo.com, www.twoo.com
Subject: *.shanghaiwoo.com
Issuer: Xcc Trust OV SSL CA
SANs: *.shanghaiwoo.com, shanghaiwoo.com
Subject: feiwoo.com
Issuer: YE2
SANs: *.feiwoo.com, feiwoo.com
Subject: voice-agent.tryleadwoo.com
Issuer: YE2
SANs: adminapi.astroping.com, voice-agent.tryleadwoo.com
Subject: autodiscover.daewoo.com.pk
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: autodiscover.daewoo.com.pk, daewoo.com.pk, exchange.daewoo.com.pk, owa.daewoofastex.pk, win-e1.daewoo.com.pk
Subject: qoowoo.com
Issuer: qoowoo.com
SANs: qoowoo.com
Subject: twoo.com
Issuer: DigiCert TLS RSA SHA256 2020 CA1
SANs: api.twoo.com, backend.twoo.com, cdn.twoo.com, jsonapi.twoo.com, m.twoo.com, twoo.com, www.twoo.com
Subject: *.bangjingwoo.com
Issuer: RapidSSL TLS RSA CA G1
SANs: *.bangjingwoo.com, bangjingwoo.com
Subject: lobby.cxwoo.com
Issuer: YE2
SANs: lobby.cxwoo.com, mj.cxwoo.com
Subject: imgai.furrywoo.com
Issuer: imgai.furrywoo.com
SANs: imgai.furrywoo.com
Subject: twoo.com
Issuer: DigiCert TLS RSA SHA256 2020 CA1
SANs: api.twoo.com, backend.twoo.com, cdn.twoo.com, jsonapi.twoo.com, m.twoo.com, twoo.com, www.twoo.com
Subject: twoo.com
Issuer: DigiCert TLS RSA SHA256 2020 CA1
SANs: api.twoo.com, backend.twoo.com, cdn.twoo.com, jsonapi.twoo.com, m.twoo.com, twoo.com, www.twoo.com
Subject: cpbh-p3.gdwoo.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: cpbh-p3.gdwoo.com, www.cpbh-p3.gdwoo.com
Subject: app-api.awoo.com.tw
Issuer: YR1
SANs: app-api.awoo.com.tw
Subject: qiankun.funwoo.com.tw
Issuer: WR3
SANs: dev.qiankun.funwoo.com.tw, dev.tudigong.funwoo.com.tw, qiankun.funwoo.com.tw, staging.qiankun.funwoo.com.tw, staging.tudigong.funwoo.com.tw, tudigong.funwoo.com.tw
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
3.74.117.176:80
href · ×1
34.255.119.216:80
href · ×1
3.254.118.225:80
href · ×1
18.119.236.105:443
href · ×1
47.76.201.119:443
href · ×1
34.255.119.216:443
href · ×1
120.24.176.135:443
href · ×1
3.9.185.197:80
href · ×1
35.177.37.165:80
href · ×1
195.66.200.100:80
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | google-site-verification=wH9YpRRJmkKMzXeDpR-Y_isCadE4tXqFisvMB2U2BzM | 2026-05-26 04:56:37.608 | 2026-07-22 17:00:39.010 |
| NS | ns2.automattic.com | 2026-05-26 04:56:37.608 | 2026-07-22 17:00:39.010 |
| A | 192.0.66.5 | 2026-05-26 04:56:37.608 | 2026-07-22 17:00:39.010 |
| TXT | v=spf1 include:_spf.automattic.com include:mail.zendesk.com -all | 2026-05-26 04:56:37.608 | 2026-07-22 17:00:39.010 |
| NS | ns1.automattic.com | 2026-05-26 04:56:37.608 | 2026-07-22 17:00:39.010 |
| NS | ns3.automattic.com | 2026-05-26 04:56:37.608 | 2026-07-22 17:00:39.010 |
| MX | 10 mx1.dfw.automattic.com | 2026-05-26 04:56:37.608 | 2026-07-22 17:00:39.010 |
| MX | 10 mx2.ams.automattic.com | 2026-05-26 04:56:37.608 | 2026-07-22 17:00:39.010 |