xoom.com
!Passed with warnings
29 passed
1 warning
0 failed
5 info
Registration
info.com generic · MarkMonitor Inc. · expires 2026-12-02
Found
- TLD
- .com (generic)
- ICANN policies apply
- yes
- Registrar
- MarkMonitor Inc.
- Registered
- 3 December 1996
- Last changed
- 12 February 2026
- Expires
- 2 December 2026
- Status
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- Registry nameservers
- ns1-pchnet.paypal.com, ns2-pchnet.paypal.com, pdns100.ultradns.com, pdns100.ultradns.net
- RDAP server
- https://rdap.verisign.com/com/v1/
Checks
-
i#1.com is a generic TLD (gTLD)
-
✓ TLD delegated and signed #2
-
✓ Expires on 2026-12-02 #3
-
✓ Transfer locked #4
-
✓ Registry and delegation match #5
Delegation
passns1-pchnet.paypal.com, ns2-pchnet.paypal.com, pdns100.ultradns.com, pdns100.ultradns.net
Found
- Parent zone
- com
- Delegation from
- a.gtld-servers.net (192.5.6.30)
- NS at the parent
- ns1-pchnet.paypal.com, ns2-pchnet.paypal.com, pdns100.ultradns.com, pdns100.ultradns.net
- NS in the zone
- ns1-pchnet.paypal.com, ns2-pchnet.paypal.com, pdns100.ultradns.com, pdns100.ultradns.net
| Nameserver | Addresses | Network (AS) | Glue |
|---|---|---|---|
| ns1-pchnet.paypal.com | 64.78.206.1 2620:171:814:1701:2::1 | AS42 WOODYNET-1 - WoodyNet, Inc., US AS42 WOODYNET-1 - WoodyNet, Inc., US | 2620:171:814:1701:2::1 64.78.206.1 |
| ns2-pchnet.paypal.com | 64.78.207.1 2620:171:815:1701:2::1 | AS42 WOODYNET-1 - WoodyNet, Inc., US AS42 WOODYNET-1 - WoodyNet, Inc., US | 2620:171:815:1701:2::1 64.78.207.1 |
| pdns100.ultradns.com | 156.154.64.100 2001:502:f3ff::88 | AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US | 156.154.64.100 2001:502:f3ff::88 |
| pdns100.ultradns.net | 156.154.65.100 2610:a1:1014::88 | AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US | - |
Checks
-
✓ 4 nameservers #6
-
✓ Parent and zone agree #7
-
✓ No glue needed #8
-
✓ All names resolve #9
-
✓ Nameservers in different networks #10
-
✓ 2 autonomous systems #11
-
✓ Nameserver names under 2 TLDs #12
-
✓ All reachable over IPv6 #13
Nameservers
info8 of 8 addresses answer authoritatively
Found
| Nameserver | Answer | Recursion | TCP / EDNS | AXFR | Version |
|---|---|---|---|---|---|
| ns1-pchnet.paypal.com 64.78.206.1 | NOERROR, 20 ms, authoritative | no | yes / yes | refused | paypalbe |
| ns1-pchnet.paypal.com 2620:171:814:1701:2::1 | NOERROR, 20 ms, authoritative | no | yes / yes | refused | paypalbe |
| ns2-pchnet.paypal.com 64.78.207.1 | NOERROR, 19 ms, authoritative | no | yes / yes | refused | paypalbe |
| ns2-pchnet.paypal.com 2620:171:815:1701:2::1 | NOERROR, 10 ms, authoritative | no | yes / yes | refused | paypalbe |
| pdns100.ultradns.com 156.154.64.100 | NOERROR, 3 ms, authoritative | no | yes / yes | refused | UltraDNS Nameserver |
| pdns100.ultradns.com 2001:502:f3ff::88 | NOERROR, 4 ms, authoritative | no | yes / yes | refused | UltraDNS Nameserver |
| pdns100.ultradns.net 156.154.65.100 | NOERROR, 3 ms, authoritative | no | yes / yes | refused | UltraDNS Nameserver |
| pdns100.ultradns.net 2610:a1:1014::88 | NOERROR, 4 ms, authoritative | no | yes / yes | refused | UltraDNS Nameserver |
Checks
-
✓ All respond #14
-
✓ All authoritative #15
-
✓ No recursion #16
-
i#17Identifying string disclosed
-
✓ Zone transfers refused #18
-
✓ TCP supported #19
-
✓ EDNS supported #20
-
✓ Public addresses #21
SOA
infoserial 2023069305 · primary ppdns.paypal.com
Found
- Primary (MNAME)
- ppdns.paypal.com
- Contact (RNAME)
- hostmaster.paypal.com
- Serial
- 2023069305
- Refresh / retry
- 7200 s / 600 s
- Expire
- 1209600 s
- Negative TTL
- 300 s
Serial per nameserver
| Nameserver | Serial |
|---|---|
| ns1-pchnet.paypal.com (64.78.206.1) | 2023069305 |
| ns1-pchnet.paypal.com (2620:171:814:1701:2::1) | 2023069305 |
| ns2-pchnet.paypal.com (64.78.207.1) | 2023069305 |
| ns2-pchnet.paypal.com (2620:171:815:1701:2::1) | 2023069305 |
| pdns100.ultradns.com (156.154.64.100) | 2023069305 |
| pdns100.ultradns.com (2001:502:f3ff::88) | 2023069305 |
| pdns100.ultradns.net (156.154.65.100) | 2023069305 |
| pdns100.ultradns.net (2610:a1:1014::88) | 2023069305 |
Checks
-
✓ Serial 2023069305 everywhere #22
-
✓ Timers within recommendations #23
-
i#24Hidden master
-
✓ Contact hostmaster@paypal.com #25
-
✓ Timestamp serial #26
DNSSEC
warnSigned, DS published at parent
Found
- Validated by resolver
- yes
- Denial of existence
- NSEC3
- NSEC3
- 10 iterations, 8-byte salt
- Signatures valid until
- 18 November 2026
DS at the parent
| Key tag | Algorithm | Digest | Matches a key |
|---|---|---|---|
| 23437 | ECDSAP256SHA256 (13) | SHA256 415C2779F91A936D… | NO |
| 25500 | ECDSAP256SHA256 (13) | SHA256 1CB11D40868DB0AB… | yes |
DNSKEY in the zone
| Key tag | Role | Algorithm |
|---|---|---|
| 10876 | ZSK (256) | ECDSAP256SHA256 (13) |
| 34351 | ZSK (256) | ECDSAP256SHA256 (13) |
| 25500 | KSK (257) | ECDSAP256SHA256 (13) |
| 40424 | ZSK (256) | ECDSAP256SHA256 (13) |
Checks
-
✓ Signed and validated #27
-
i#28Unused DS records
-
✓ Modern algorithms #29
-
✓ Signatures valid until 2026-11-18 #30
-
!#31NSEC3 with extra iterations or salt
Records
info15 records at the apex
Found
- Read from
- 64.78.206.1:53
| Type | Value | TTL |
|---|---|---|
| SOA | ppdns.paypal.com. hostmaster.paypal.com. 2023069305 7200 600 1209600 300 | 300 |
| NS | pdns100.ultradns.com. | 300 |
| NS | pdns100.ultradns.net. | 300 |
| NS | ns1-pchnet.paypal.com. | 300 |
| NS | ns2-pchnet.paypal.com. | 300 |
| A | 151.101.3.1 | 300 |
| A | 151.101.195.1 | 300 |
| A | 162.159.141.96 | 300 |
| MX | 10 mx1.paypalcorp.com. | 600 |
| MX | 10 mx2.paypalcorp.com. | 600 |
| TXT | "v=spf1 " "ip4:8.26.33.0/24 ip4:205.189.102.0/23 ip4:198.199.247.0/24 ip4:192.254.121.104/29 ip4:65.52.232.173/32 ip4:157.55.209.64/32 ip4:62.13.150.47/32 ip4:198.21.2.183 ip4:74.112.67.243 include:pp._spf.paypal.com include:spf.protection.outlook.com -all" | 600 |
| TXT | "MS=ms89760834" | 600 |
| TXT | "facebook-domain-verification=unj4rsz4wuvdg10v8z26d8xe4ww85c" | 600 |
| TXT | "google-site-verification=HWwzgfow6dPQU2RiSosmQZNSJ8S1xqdch1yMxD-2wsA" | 600 |
| TXT | "atlassian-domain-verification=Q8BdHlO6NYSN5njfC2rlbPQxksVfADlcxarxq4fesYJErtGKylvfcfyfwrPD/wnv" | 600 |
Checks
-
✓ TTLs within range #32
-
✓ No CNAME at the apex #33
-
✓ No wildcard #34
-
i#35No CAA records