xoom.com

Live preview

This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.

Since xoom.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

no-store

Content-Encoding

Not sent

Security

Content-Security-Policy

style-src https://www.paypal.com/ https://www.paypalobjects.com/ https://*.dev.paypalinc.com/ https://*.ctfassets.net/ 'unsafe-inline' 'self' https://*.s-xoom.com/ https://google.com/; base-uri 'self'; script-src https://www.paypalobjects.com/ https://*.dev.paypalinc.com/ 'nonce-e0a610056c3b4811c8194a959b8d70bb' 'self' https://*.googleadservices.com/ https://*.gstatic.com/ https://*.s-xoom.com/ https://*.segment.com/ https://www.googletagmanager.com/ https://*.online-metrix.net/ https://connect.facebook.net/ https://*.google-analytics.com/ https://*.cardinalcommerce.com/ https://*.mxpnl.com/ https://*.google.com/ https://bat.bing.com/ https://*.ctfassets.net/ https://iesnare.com/ https://*.braintreegateway.com/ https://*.googleapis.com/ https://*.doubleclick.net/ https://*.paypal.com/ 'unsafe-eval' https://www.recaptcha.net/ https://*.yodlee.com/ https://cdn.amplitude.com/ https://js-agent.newrelic.com/ https://bam-cell.nr-data.net/ https://www.datadoghq-browser-agent.com/ https://widget.trustpilot.com/; form-action * paypal://remittance/link-paypal-account https://*.xoom.com/ https://*.paypal.com/; frame-src *; img-src 'self' data: https:; connect-src https://*.xoom.com/ 'self' https://*.google-analytics.com/ https://*.mixpanel.com/ https://*.cardinalcommerce.com/ https://*.google.com/ https://*.cloudfront.net/ https://*.braintreegateway.com/ https://*.googleapis.com/ wss://*.xoom.com/ https://*.doubleclick.net/ https://www.facebook.com/ https://*.segment.io/ https://*.segment.com/ https://*.paypal.com/ https://*.s-xoom.com/ https://*.online-metrix.net/ https://*.braintree-api.com/ https://www.paypalobjects.com/ https://*.preview.dev.paypalinc.com/ https://browser-intake-datadoghq.com/ https://widget.trustpilot.com/; worker-src 'self' blob: ; object-src https://*.cardinalcommerce.com/ https://*.online-metrix.net/; media-src https://ssl.gstatic.com/; frame-ancestors https://*.salesforce.com/ https://*.paypal.com/ 'self'; font-src https://www.paypalobjects.com/ https://*.dev.paypalinc.com/ https://fonts.gstatic.com/ https://*.s3.amazonaws.com/ 'self' https://*.s-xoom.com/ https://fonts.googleapis.com/ data:;

Strict-Transport-Security

max-age=31536000; includeSubDomains; preload

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

Not sent

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://xoom.com/HTTP 301

   → https://www.xoom.com/

2. 2.https://www.xoom.com/HTTP 200

Meta tags

Title

Xoom, a PayPal Service | Send Money Online

Description

Transfer money online securely and easily with Xoom and save on money transfer fees. Wire money to a bank account in minutes or pick up cash at thousands of locations.

Canonical

https://www.xoom.com/money-transfer

Robots

index, follow

Generator

Not set

Open Graph title

Send Money Online | Xoom, a PayPal Service

Open Graph description

Transfer money online securely and easily with Xoom and save on money transfer fees. Wire money to a bank account in minutes or pick up cash at thousands of locations.

Open Graph image

https://www.paypalobjects.com/xoom/static/img/open-graph-logo/xoom-og-en-US.png

Open Graph type

website

Twitter card

summary_large_image

Twitter title

Send Money Online | Xoom, a PayPal Service

Twitter image

https://www.paypalobjects.com/xoom/static/img/open-graph-logo/xoom-og-en-US.png

robots.txt

Disallow rules (User-agent: *)

11

Disallow rules (other agents)

0

No Sitemap declared in robots.txt.

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Next.jsframework

  Found "_next/static/" in the page's HTML

Related domains