Domain

xoom.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of xoom.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

309

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

151.101.195.1, 151.101.3.1, 162.159.141.96

AAAA

—

10 mx1.paypalcorp.com, 10 mx2.paypalcorp.com

ns1-pchnet.paypal.com, ns2-pchnet.paypal.com, pdns100.ultradns.com, pdns100.ultradns.net

TXT

MS=ms89760834, atlassian-domain-verification=Q8BdHlO6NYSN5njfC2rlbPQxksVfADlcxarxq4fesYJErtGKylvfcfyfwrPD/wnv, facebook-domain-verification=unj4rsz4wuvdg10v8z26d8xe4ww85c, google-site-verification=HWwzgfow6dPQU2RiSosmQZNSJ8S1xqdch1yMxD-2wsA, v=spf1 ip4:8.26.33.0/24 ip4:205.189.102.0/23 ip4:198.199.247.0/24 ip4:192.254.121.104/29 ip4:65.52.232.173/32 ip4:157.55.209.64/32 ip4:62.13.150.47/32 ip4:198.21.2.183 ip4:74.112.67.243 include:pp._spf.paypal.com include:spf.protection.outlook.com -all

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
autodiscover.xoom.com	40.98.16.6 2603:1026:207:131::8 2603:1026:c03:706c::8 2603:1026:c03:706a::8 +28	2026-07-23 06:49:31.740
id.xoom.com	151.101.193.21 146.75.121.21 151.101.129.21 151.101.65.21 +3	2026-07-28 06:23:49.431
data.emails.xoom.com	63.140.62.139 63.140.62.210 63.140.62.120 63.140.62.172 +2	2026-06-03 15:56:49.585
data.service.xoom.com	63.140.62.200 63.140.62.139 63.140.62.236 63.140.62.172 +2	2026-06-17 02:17:23.695
data.useragreement.xoom.com	63.140.62.172 63.140.62.236 63.140.62.139 63.140.62.120 +2	2026-07-17 08:11:30.649
help.xoom.com	145.224.209.237 35.158.127.53 145.224.209.239 145.224.209.234 +2	2026-07-23 06:49:31.740
m.xoom.com	104.18.12.26 151.101.195.1 151.101.67.1 104.18.13.26 +2	2026-07-23 06:49:31.740
mobile.xoom.com	104.18.12.26 151.101.131.1 151.101.67.1 151.101.3.1 +2	2026-07-23 06:49:31.740
www.xoom.com	104.18.13.26 151.101.195.1 151.101.67.1 151.101.131.1 +2	2026-07-26 16:20:59.102
id.sandbox.xoom.com	151.101.3.1 151.101.131.1 151.101.195.1 151.101.67.1	2026-07-27 11:51:10.557
sandbox.xoom.com	151.101.195.1 151.101.3.1 151.101.67.1 151.101.131.1	2026-07-23 06:49:31.740
xoom.com	151.101.195.1 162.159.141.96 151.101.3.1	2026-07-26 05:28:47.481
t.xoom.com	172.64.152.85 104.18.35.171	2026-07-22 03:21:37.019
uat.xoom.com	205.189.102.24 205.189.103.31	2026-07-23 06:49:31.740
aimon.fra.xoom.com		1970-01-01 00:00:00.000
aimon.oma.xoom.com		1970-01-01 00:00:00.000
aimon.xoom.com		1970-01-01 00:00:00.000
api.xoom.com	205.189.102.150	2026-07-23 06:49:31.740
app.oma.st.xoom.com		1970-01-01 00:00:00.000
app001.oma.st.xoom.com		1970-01-01 00:00:00.000
app002.oma.st.xoom.com		1970-01-01 00:00:00.000
app003.oma.st.xoom.com		1970-01-01 00:00:00.000
app004.oma.st.xoom.com		1970-01-01 00:00:00.000
app005.oma.st.xoom.com		1970-01-01 00:00:00.000
app006.oma.st.xoom.com		1970-01-01 00:00:00.000
app007.oma.st.xoom.com		1970-01-01 00:00:00.000
app008.oma.st.xoom.com		1970-01-01 00:00:00.000
app009.oma.st.xoom.com		1970-01-01 00:00:00.000
app010.oma.st.xoom.com		1970-01-01 00:00:00.000
app011.oma.st.xoom.com		1970-01-01 00:00:00.000
app012.oma.st.xoom.com		1970-01-01 00:00:00.000
app013.oma.st.xoom.com		1970-01-01 00:00:00.000
app014.oma.st.xoom.com		1970-01-01 00:00:00.000
app015.oma.st.xoom.com		1970-01-01 00:00:00.000
app016.oma.st.xoom.com		1970-01-01 00:00:00.000
app017.oma.st.xoom.com		1970-01-01 00:00:00.000
app018.oma.st.xoom.com		1970-01-01 00:00:00.000
app019.oma.st.xoom.com		1970-01-01 00:00:00.000
app020.oma.st.xoom.com		1970-01-01 00:00:00.000
app021.oma.st.xoom.com		1970-01-01 00:00:00.000
app022.oma.st.xoom.com		1970-01-01 00:00:00.000
app023.oma.st.xoom.com		1970-01-01 00:00:00.000
app024.oma.st.xoom.com		1970-01-01 00:00:00.000
app025.oma.st.xoom.com		1970-01-01 00:00:00.000
app026.oma.st.xoom.com		1970-01-01 00:00:00.000
app027.oma.st.xoom.com		1970-01-01 00:00:00.000
app028.oma.st.xoom.com		1970-01-01 00:00:00.000
app029.oma.st.xoom.com		1970-01-01 00:00:00.000
app030.oma.st.xoom.com		1970-01-01 00:00:00.000
app031.oma.st.xoom.com		1970-01-01 00:00:00.000
app032.oma.st.xoom.com		1970-01-01 00:00:00.000
app033.oma.st.xoom.com		1970-01-01 00:00:00.000
app034.oma.st.xoom.com		1970-01-01 00:00:00.000
app035.oma.st.xoom.com		1970-01-01 00:00:00.000
app036.oma.st.xoom.com		1970-01-01 00:00:00.000
app037.oma.st.xoom.com		1970-01-01 00:00:00.000
app038.oma.st.xoom.com		1970-01-01 00:00:00.000
app039.oma.st.xoom.com		1970-01-01 00:00:00.000
app040.oma.st.xoom.com		1970-01-01 00:00:00.000
app041.oma.st.xoom.com		1970-01-01 00:00:00.000
app042.oma.st.xoom.com		1970-01-01 00:00:00.000
app043.oma.st.xoom.com		1970-01-01 00:00:00.000
app044.oma.st.xoom.com		1970-01-01 00:00:00.000
app045.oma.st.xoom.com		1970-01-01 00:00:00.000
app046.oma.st.xoom.com		1970-01-01 00:00:00.000
app047.oma.st.xoom.com		1970-01-01 00:00:00.000
app048.oma.st.xoom.com		1970-01-01 00:00:00.000
app049.oma.st.xoom.com		1970-01-01 00:00:00.000
app050.oma.st.xoom.com		1970-01-01 00:00:00.000
app051.oma.st.xoom.com		1970-01-01 00:00:00.000
app052.oma.st.xoom.com		1970-01-01 00:00:00.000
app053.oma.st.xoom.com		1970-01-01 00:00:00.000
app054.oma.st.xoom.com		1970-01-01 00:00:00.000
app055.oma.st.xoom.com		1970-01-01 00:00:00.000
app056.oma.st.xoom.com		1970-01-01 00:00:00.000
app057.oma.st.xoom.com		1970-01-01 00:00:00.000
app058.oma.st.xoom.com		1970-01-01 00:00:00.000
app059.oma.st.xoom.com		1970-01-01 00:00:00.000
app060.oma.st.xoom.com		1970-01-01 00:00:00.000
artifactory.fra.xoom.com		1970-01-01 00:00:00.000
artifactory.oma.xoom.com		1970-01-01 00:00:00.000
artifactory.ord.engtools.xoom.com		1970-01-01 00:00:00.000
artifactory.xoom.com		1970-01-01 00:00:00.000
artifactorystg.fra.tools.xoom.com		1970-01-01 00:00:00.000
artifactorystg.oma.tools.xoom.com		1970-01-01 00:00:00.000
artifactorystg.tools.xoom.com		1970-01-01 00:00:00.000
artnode001.ord.engtools.xoom.com		1970-01-01 00:00:00.000
artnode002.ord.engtools.xoom.com		1970-01-01 00:00:00.000
athenea.fra.staging.xoom.com		1970-01-01 00:00:00.000
athenea.fra.xoom.com		1970-01-01 00:00:00.000
athenea.oma.staging.xoom.com		1970-01-01 00:00:00.000
athenea.oma.xoom.com		1970-01-01 00:00:00.000
athenea.staging.xoom.com		1970-01-01 00:00:00.000
athenea.xoom.com		1970-01-01 00:00:00.000
cdn.emails.xoom.com		1970-01-01 00:00:00.000
cdn.service.xoom.com		1970-01-01 00:00:00.000
cdn.useragreement.xoom.com		1970-01-01 00:00:00.000
click.messages.xoom.com		1970-01-01 00:00:00.000
dmz001.oma.st.xoom.com		1970-01-01 00:00:00.000
dmz002.oma.st.xoom.com		1970-01-01 00:00:00.000
dmz003.oma.st.xoom.com		1970-01-01 00:00:00.000
dmz004.oma.st.xoom.com		1970-01-01 00:00:00.000
docker-registry-k8s-gcr-io.ord.engtools.xoom.com		1970-01-01 00:00:00.000
docker-registry-quay.ord.engtools.xoom.com		1970-01-01 00:00:00.000
docker-registry.ord.engtools.xoom.com		1970-01-01 00:00:00.000
embed.dr.xoom.com		1970-01-01 00:00:00.000
embed.xoom.com		1970-01-01 00:00:00.000
engineering.jenkins.ord.engtools.xoom.com		1970-01-01 00:00:00.000
engtools.xoom.com		1970-01-01 00:00:00.000
forgeapi.ord.engtools.xoom.com		1970-01-01 00:00:00.000
ftp.xoom.com	198.199.247.139	2026-07-23 06:49:31.740
gcp-hrz-dmz-fraprod001.fra.prod.xoom.com		1970-01-01 00:00:00.000
gcp-hrz-dmz-fraprod002.fra.prod.xoom.com		1970-01-01 00:00:00.000
gcp-hrz-dmz-omaprod001.oma.prod.xoom.com		1970-01-01 00:00:00.000
gcp-hrz-dmz-omaprod002.oma.prod.xoom.com		1970-01-01 00:00:00.000
gcp-hrz-mgmt-fraprod001.fra.prod.xoom.com		1970-01-01 00:00:00.000
gcp-hrz-mgmt-fraprod002.fra.prod.xoom.com		1970-01-01 00:00:00.000
gcp-hrz-mgmt-lbl1.fra.prod.xoom.com		1970-01-01 00:00:00.000
gcp-hrz-mgmt-lbl1.oma.prod.xoom.com		1970-01-01 00:00:00.000
gcp-hrz-mgmt-lbl1.oma.st.xoom.com		1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

45.127.7.170:443 ba0ddbc98a16…

Subject: *.maxoom.com.my

Issuer: YR2

SANs: *.maxoom.com.my, maxoom.com.my

104.18.237.230:443 6e107db3ac75…

Subject: paypal.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: PAYPAL-DEUTSCHLAND.DE, PAYPAL-MARKETING.PL, PAYPAL.CO, PAYPAL.COM.MY, braintreepayments.com, buyindiaonline.com, cash2india.com, curv.cc, curv.co, fastlane.paypal.com, paypal-australia.com.au, paypal-business.co.uk, paypal-business.com.au, paypal-businesscenter.com, paypal-communications.com, paypal-corp.com, paypal-danmark.dk, paypal-donations.co.uk, paypal-donations.com, paypal-experience.com, paypal-gifts.com, paypal-globalshops.com, paypal-information.com, paypal-knowledge-test.com, paypal-knowledge.com, paypal-latam.com, paypal-marketing.ca, paypal-marketing.co.uk, paypal-media.com, paypal-mena.com, paypal-mktg.com, paypal-nakit.com, paypal-norge.no, paypal-optimizer.com, paypal-partners.com, paypal-passport.com, paypal-prepagata.com, paypal-promo.es, paypal-support.com, paypal-sverige.se, paypal-turkiye.com, paypal-workplace.com, paypal.ai, paypal.at, paypal.be, paypal.biz, paypal.ca, paypal.ch, paypal.cl, paypal.co.id, paypal.co.il, paypal.co.in, paypal.co.nz, paypal.co.th, paypal.co.uk, paypal.co.za, paypal.com, paypal.com.ar, paypal.com.au, paypal.com.br, paypal.com.cn, paypal.com.hk, paypal.com.mx, paypal.com.pe, paypal.com.sa, paypal.com.sg, paypal.com.tr, paypal.com.tw, paypal.com.ve, paypal.de, paypal.dk, paypal.es, paypal.eu, paypal.fi, paypal.fr, paypal.ie, paypal.in, paypal.it, paypal.jp, paypal.lu, paypal.me, paypal.nl, paypal.no, paypal.ph, paypal.pl, paypal.pt, paypal.se, paypal.vn, paypalbenefits.com, paypalgivingfund.org, paypalobjects.com, pypl.com, sandbox.paypal.com, simility.com, thepaypalblog.com, www.curv.cc, www.curv.co, www.paypal.ai, www.paypal.biz, www.paypal.com, www.simility.com, xoom.com

166.117.212.15:443 49b586dcde0a…

Subject: admin.medxoom.com

Issuer: Amazon RSA 2048 M04

SANs: admin.medxoom.com

75.2.109.248:443 81b75ed246e6…

Subject: admin.qa.medxoom.com

Issuer: Amazon RSA 2048 M04

SANs: admin.qa.medxoom.com

35.71.151.235:443 90cb17a48b3d…

Subject: admin.dev.medxoom.com

Issuer: Amazon RSA 2048 M01

SANs: admin.dev.medxoom.com

18.116.92.167:443 1d64221fda8e…

Subject: admin.medxoom.com

Issuer: Amazon RSA 2048 M01

SANs: admin.medxoom.com

205.189.102.196:443 4f81d615681e…

Subject: mobile.xoom.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: mobile.xoom.com

44.217.205.170:443 81b75ed246e6…

Subject: admin.qa.medxoom.com

Issuer: Amazon RSA 2048 M04

SANs: admin.qa.medxoom.com

3.225.179.223:443 81b75ed246e6…

Subject: admin.qa.medxoom.com

Issuer: Amazon RSA 2048 M04

SANs: admin.qa.medxoom.com

38.117.80.198:443 d022aa145d35…

Subject: srv.filexoom.com

Issuer: R13

SANs: autoconfig.srv.filexoom.com, autodiscover.srv.filexoom.com, cpanel.srv.filexoom.com, cpcalendars.srv.filexoom.com, cpcontacts.srv.filexoom.com, ipv6.srv.filexoom.com, mail.srv.filexoom.com, srv.filexoom.com, webdisk.srv.filexoom.com, webmail.srv.filexoom.com, whm.srv.filexoom.com, www.srv.filexoom.com

32.198.201.150:443 81b75ed246e6…

Subject: admin.qa.medxoom.com

Issuer: Amazon RSA 2048 M04

SANs: admin.qa.medxoom.com

166.117.53.211:443 81b75ed246e6…

Subject: admin.qa.medxoom.com

Issuer: Amazon RSA 2048 M04

SANs: admin.qa.medxoom.com

3.20.155.187:443 1d64221fda8e…

Subject: admin.medxoom.com

Issuer: Amazon RSA 2048 M01

SANs: admin.medxoom.com

98.85.20.10:443 90cb17a48b3d…

Subject: admin.dev.medxoom.com

Issuer: Amazon RSA 2048 M01

SANs: admin.dev.medxoom.com

166.117.212.15:443 49b586dcde0a…

Subject: admin.medxoom.com

Issuer: Amazon RSA 2048 M04

SANs: admin.medxoom.com

3.134.185.171:443 ff4abcd68ff1…

Subject: admin.dev.medxoom.com

Issuer: Amazon RSA 2048 M01

SANs: admin.dev.medxoom.com

45.127.7.170:443 e13b5cdbbbd8…

Subject: *.maxoom.com.my

Issuer: R12

SANs: *.maxoom.com.my, maxoom.com.my

198.199.247.44:443 2d6b283aba28…

Subject: partnerships.xoom.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: partnerships.xoom.com

3.132.181.85:443 ff4abcd68ff1…

Subject: admin.dev.medxoom.com

Issuer: Amazon RSA 2048 M01

SANs: admin.dev.medxoom.com

54.196.133.99:443 49b586dcde0a…

Subject: admin.medxoom.com

Issuer: Amazon RSA 2048 M04

SANs: admin.medxoom.com

16.59.20.195:443 7e37c5d78e1e…

Subject: admin.stg.medxoom.com

Issuer: Amazon RSA 2048 M04

SANs: admin.stg.medxoom.com

166.117.8.232:443 deadb134684d…

Subject: admin.stg.medxoom.com

Issuer: Amazon RSA 2048 M01

SANs: admin.stg.medxoom.com

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

172.236.109.37:443 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP	Origin ASN	CDN ASN	Confidence	Reasoning
192.204.45.225	AS2914	AS13335	95%	cert 7f40b0f5… served by 192.204.45.225 (AS2914) carries SAN id.xoom.com which currently resolves through Cloudflare (AS13335) at 104.18.7.168, 104.18.6.168, 151.101.129.21, 151.101.65.21
192.67.63.225	AS212890	AS13335	95%	cert 7f40b0f5… served by 192.67.63.225 (AS212890) carries SAN id.xoom.com which currently resolves through Cloudflare (AS13335) at 104.18.7.168, 104.18.6.168, 151.101.129.21, 151.101.65.21
156.224.79.152	AS61112	AS54113	95%	cert 7f40b0f5… served by 156.224.79.152 (AS61112) carries SAN id.xoom.com which currently resolves through Fastly (AS54113) at 151.101.129.21, 151.101.65.21, 151.101.1.21, 151.101.193.21
216.167.27.150	AS2914	AS54113	95%	cert 7f40b0f5… served by 216.167.27.150 (AS2914) carries SAN id.xoom.com which currently resolves through Fastly (AS54113) at 151.101.129.21, 151.101.65.21, 151.101.1.21, 151.101.193.21
203.248.84.51	AS9848	AS54113	95%	cert 7f40b0f5… served by 203.248.84.51 (AS9848) carries SAN id.xoom.com which currently resolves through Fastly (AS54113) at 151.101.129.21, 151.101.65.21, 151.101.1.21, 151.101.193.21
104.223.55.109	AS36352	AS54113	95%	cert 7f40b0f5… served by 104.223.55.109 (AS36352) carries SAN id.xoom.com which currently resolves through Fastly (AS54113) at 151.101.129.21, 151.101.65.21, 151.101.1.21, 151.101.193.21
216.167.94.244	AS2914	AS13335	95%	cert 7f40b0f5… served by 216.167.94.244 (AS2914) carries SAN id.xoom.com which currently resolves through Cloudflare (AS13335) at 104.18.7.168, 104.18.6.168, 151.101.129.21, 151.101.65.21
205.189.102.196	AS17012	AS13335	95%	cert 4f81d615… served by 205.189.102.196 (AS17012) carries SAN mobile.xoom.com which currently resolves through Cloudflare (AS13335) at 104.18.12.26, 104.18.13.26

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

79668826b8c77887… google · argon2026h2

Subject: www.xoom.com

Issuer: DigiCert EV RSA CA G2

SANs: www.xoom.com, embed.xoom.com, m.xoom.com, partner.xoom.com, www.buyindiaonline.com, www.cash2india.com, xoom.com

Valid: 2025-09-08 00:00:00 → 2026-09-07 23:59:59

449a3f2973975b50… google · argon2026h2

Subject: www.xoom.com

Issuer: DigiCert EV RSA CA G2

SANs: www.xoom.com, embed.xoom.com, m.xoom.com, partner.xoom.com, www.buyindiaonline.com, www.cash2india.com, xoom.com

Valid: 2025-09-08 00:00:00 → 2026-09-07 23:59:59

79668826b8c77887… google · xenon2026h2

Subject: www.xoom.com

Issuer: DigiCert EV RSA CA G2

SANs: www.xoom.com, embed.xoom.com, m.xoom.com, partner.xoom.com, www.buyindiaonline.com, www.cash2india.com, xoom.com

Valid: 2025-09-08 00:00:00 → 2026-09-07 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
A	151.101.3.1	2026-05-27 02:35:44.599	2026-07-26 05:28:47.481
TXT	MS=ms89760834	2026-05-27 02:35:44.599	2026-07-26 05:28:47.481
A	151.101.195.1	2026-05-27 02:35:44.599	2026-07-26 05:28:47.481
MX	10 mx1.paypalcorp.com	2026-05-27 02:35:44.599	2026-07-26 05:28:47.481
MX	10 mx2.paypalcorp.com	2026-05-27 02:35:44.599	2026-07-26 05:28:47.481
NS	ns2-pchnet.paypal.com	2026-05-27 02:35:44.599	2026-07-26 05:28:47.481
TXT	google-site-verification=HWwzgfow6dPQU2RiSosmQZNSJ8S1xqdch1yMxD-2wsA	2026-05-27 02:35:44.599	2026-07-26 05:28:47.481
NS	pdns100.ultradns.com	2026-05-27 02:35:44.599	2026-07-26 05:28:47.481
NS	pdns100.ultradns.net	2026-05-27 02:35:44.599	2026-07-26 05:28:47.481
TXT	atlassian-domain-verification=Q8BdHlO6NYSN5njfC2rlbPQxksVfADlcxarxq4fesYJErtGKylvfcfyfwrPD/wnv	2026-05-27 02:35:44.599	2026-07-26 05:28:47.481
NS	ns1-pchnet.paypal.com	2026-05-27 02:35:44.599	2026-07-26 05:28:47.481
TXT	facebook-domain-verification=unj4rsz4wuvdg10v8z26d8xe4ww85c	2026-05-27 02:35:44.599	2026-07-26 05:28:47.481
A	162.159.141.96	2026-05-27 02:35:44.599	2026-07-26 05:28:47.481
SRV	_sipfederationtls._tcp 100 1 5061 sipfed.online.lync.com	2026-05-27 02:35:44.599	2026-07-26 05:28:47.481
TXT	v=spf1 ip4:8.26.33.0/24 ip4:205.189.102.0/23 ip4:198.199.247.0/24 ip4:192.254.121.104/29 ip4:65.52.232.173/32 ip4:157.55.209.64/32 ip4:62.13.150.47/32 ip4:198.21.2.183 ip4:74.112.67.243 include:pp._spf.paypal.com include:spf.protection.outlook.com -all	2026-05-27 02:35:44.599	2026-07-26 05:28:47.481