loomis-pharma.com

HTML metadata

Title: Loomis Pharma | Loomis
Language: en
Canonical: https://www.loomis-pharma.com/en/

Open Graph

url: http://www.loomis-pharma.com/en
title: Loomis Pharma | Loomis
site name: Loomis

Technology

CMS: Gatsby

Cookie consent

OneTrust

Fonts

Google Fonts

Third-party hosts loaded (5)

cdnjs.cloudflare.com×5
cdn.cookielaw.org×2
cdn.jsdelivr.net×2
code.jquery.com×2
fonts.googleapis.com×1

Social

Registration

Registrar

CSC Corporate Domains, Inc.

Created

2022-07-06

Expires

2026-07-06 46 days left

Updated

2025-07-02

Name servers

udns1.cscdns.net
udns2.cscdns.uk

DNS records live

NS

udns1.cscdns.net
udns2.cscdns.uk

Email authentication no MX

SPF: v=spf1 -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

GeoTrust TLS ECC CA G1

from 2025-06-03 to 2026-06-03

Expires in 13 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.loomis-pharma.com/en

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: sameorigin
permissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' airtools-loomis.prod-mid-euw3.investis.com captcha.loomis.com cdn.cookielaw.org cdnjs.cloudflare.com code.jquery.com irs.tools.investis.com www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'nonce-Ti3CMwLuUK4/WvoXW/bg1eWBbwY=' 'sha384-11cX+Naw18bPoIYxEkQI+DltxbxL5/5L0krcoW8ObmMGsC3OiLBkmZjXSWPrrjYh' captcha.loomis.com *.googleapis.com cdn.cookielaw.org cdnjs.cloudflare.com code.jquery.com loomis.jobbase.io loomis.onlyfy.jobs www.googletagmanager.com www.google.com www.gstatic.com googleads.g.doubleclick.net pagead2.googlesyndication.com connect.facebook.net snippet.capybara.lmc.cz www.googleadservices.com loomis-dk.containers.piwik.pro *.dailymotion.com *.dmcdn.net *.wistia.com *.wistia.net fast.wistia.com; style-src 'self' 'unsafe-inline' captcha.loomis.com cdn.jsdelivr.net cdnjs.cloudflare.com *.googleapis.com snippet.capybara.lmc.cz *.wistia.com; img-src 'self' data: c
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-security-policy-report-only: default-src 'self' 'unsafe-inline' 'unsafe-eval' airtools-loomis.prod-mid-euw3.investis.com captcha.loomis.com cdn.cookielaw.org cdnjs.cloudflare.com code.jquery.com irs.tools.investis.com www.googletagmanager.com; script-src 'strict-dynamic' 'self' 'nonce-Ti3CMwLuUK4/WvoXW/bg1eWBbwY=' 'sha384-11cX+Naw18bPoIYxEkQI+DltxbxL5/5L0krcoW8ObmMGsC3OiLBkmZjXSWPrrjYh' captcha.loomis.com *.googleapis.com cdn.cookielaw.org cdnjs.cloudflare.com code.jquery.com loomis.jobbase.io loomis.onlyfy.jobs www.googletagmanager.com www.google.com www.gstatic.com googleads.g.doubleclick.net pagead2.googlesyndication.com connect.facebook.net snippet.capybara.lmc.cz www.googleadservices.com loomis-dk.containers.piwik.pro *.dailymotion.com *.dmcdn.net *.wistia.com *.wistia.net *.wistia.net fast.wistia.com; style-src 'self' 'unsafe-inline' captcha.loomis.com cdn.jsdelivr.net cdnjs.cloudflare.com *.googleapis.com snippet.capybara.lmc.cz *.wistia.com; img-src 'self' data: c