xero.com

Observed 2026-07-17T21:43:57.961Z (4h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email byGoogle Workspace

Registered withCSC Corporate Domains, Inc.

Also usesMiroHubSpotNotionStripeGoogle Search ConsoleDockerAtlassianFacebook/Meta

14 subdomains · fintech_expanded

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat xero.com actually stands on - every host below is a signed observation

xero.com

A / AAAA

13.249.74.2813.249.74.4013.249.74.10013.249.74.76

Cloudflareserves the site

ns-1911.awsdns-46.co.ukns-1391.awsdns-45.orgns-90.awsdns-11.comns-983.awsdns-58.net

awsdns-46.co.uk + awsdns-45.org + moreanswers its DNS

aspmx2.googlemail.comalt2.aspmx.l.google.comaspmx.l.google.comaspmx3.googlemail.com+1 more

Google Workspacereceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.xero.com:443/

HTTP status301

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time142 ms

DNS resolutionNOERROR

Redirect chain

https://www.xero.com:443/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 4

13.249.74.28
13.249.74.40
13.249.74.100
13.249.74.76

MX 5

40aspmx2.googlemail.com
30alt2.aspmx.l.google.com
10aspmx.l.google.com
50aspmx3.googlemail.com
20alt1.aspmx.l.google.com

TXT 79

qogk6TmVn0Fu1yWC2Cs4bw
miro-verification=bb49f8d5cc111cc9ea88086eb455e318a6ee2da4
mgverify=7989e180241080823fa79afa79df4f25f38b6ec978c4b002b2fc26bc9668d582
uber-domain-verification=52fce169-70e5-4f52-acf7-a74ae208810b
MS=ms88298519
twilio-domain-verification=13e13aee9a5cc7b078cc197743c2b21e
mentimeter-0c29be16-abc3-4aca-a6fd-16a034ef4338
f4925be543e8efb2ef4379d301390c052211f95978a58c176c5dfeb95d704e7c
safetyculture-domain-verification=ad350189-df69-4b28-8fcb-27b69c9a30d2
v=spf1 include:_spf.google.com include:stspg-customer.com include:eskerondemand.com include:hubspot.spf-records.xero.com include:_spf.qemailserver.com ip4:52.48.54.246 ip4:52.64.111.139 ip4:34.168.197.200 ip4:34.83.143.116 ~all

NS 4

ns-1911.awsdns-46.co.uk
ns-1391.awsdns-45.org
ns-90.awsdns-11.com
ns-983.awsdns-58.net

SOA 1

ns-90.awsdns-11.com awsdns-hostmaster.amazon.com

TLS Certificates (0)

None.

Subdomains (14)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for xero.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/xero.com">
  <img src="https://domaindrift.io/badge/xero.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for xero.com">
</a>

Ed25519 Receipt

Receipt ID: 8cb20980-c7cb-4698-a557-50ebd005fd9b
Output Hash: 25415e351dec19f05bb7786eb5b7455a490e257555a30b86b6e2c55046ba1b82
Signature: ed25519:2f4965aed15ff12b0fec8f0260ed2e72602281638039567d37290679924bfdeac965ecd4a4786245b68caa9521344c73c075baed927971d465399360edc7ae04
Public Key: ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/xero.com