loomispay.com

HTML metadata

Title: Home | Loomis Pay
Description: Loomis–Pay offers an all-in-one payment solution designed to increase efficiency and increase sales. With flexible POS setups that support all payments, fast payouts and an efficient portal to manage your entire business. Loomis–Pay simplifies payments and frees up more time for business.
Language: en
Canonical: https://www.loomispay.com/

Open Graph

url: http://loomispay.com/
title: Home | Loomis Pay
site name: Loomis Pay
description: Loomis–Pay offers an all-in-one payment solution designed to increase efficiency and increase sales. With flexible POS setups that support all payments, fast payouts and an efficient portal to manage your entire business. Loomis–Pay simplifies payments and frees up more time for business.

Technology

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (3)

cdn.cookielaw.org×2
code.jquery.com×2
www.googletagmanager.com×1

Contact

Phone

556961-5312

Registration

Registrar

CSC Corporate Domains, Inc.

Created

2020-03-26

Expires

2030-06-09 1482 days left

Updated

2020-10-16

Name servers

udns1.cscdns.net
udns2.cscdns.uk

DNS records live

NS

udns1.cscdns.net
udns2.cscdns.uk

MX

0 loomispay-com.mail.protection.outlook.com

TXT

Show 15 TXT records

knowbe4-site-verification=395f45ff8f01b558d68a890c93260bf6
onetrust-domain-verification=eaad685531704be6a0014066d2db17d0
google-site-verification=GFnpjTgdLx7tQceZsPGXd5_3ZHb_qNnuoM6mi88iV_g
google-site-verification=WdsX-U1sDc75L_9xEkNfeLpmRCveAW6j98CvFcX_tNg
google-site-verification=bFFLQi7Mn326CHVyB3JqjBGM7JfIHh2bPk1-2-uRJHw
google-site-verification=bRBFtCvpC-bXyikAACjHKWkVV3olYUH4xAOZkm0SAqA
Notion_verify_V5aKJVgRQTh4PdeXZF5P85pTYVafBUEygXK6pVrhm9rX2WgPmBjq8ZB5no7r7AmZGiPNtX
atlassian-domain-verification=NGdSpOjGbNAlDsyIt4r7RfSq8QOk8wxXSYHPJb22BZRjiVO1nVVizmQhubQ15R/8
mqwkgje1rt
MS=ms81111308
ilm4igb15rhslnn7obud3g6iuu
jb415tnsgce5og94865a6pd9fd
_gpkz9glksgeykzwus9yd1bf9d2wi2mx
_rv7jez5brkuokjvorpcrwol20p27ekm
apple-domain-verification=qfTWfcdNipDsLTiU

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1;p=reject;pct=100;rua=mailto:dmarc_agg@vali.email

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aFyisZz9FAdKKUekcXdeITC+nhmH2sPSAjcPK2jhHxc/eJYZ1wY93RgneIAMCLU2DQHaYkig89smy…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ9LWckHyxf5j41Zy4mirOZocaFO6jGHvR/LxVK/R7sbWTd+odfJSNenwl++i65ouy2NLbBofA1HB53jsE…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMrhU5yK9qs83zsNTVUKucFMX2Wwhnn2WvgBA8FvNm1sn9Sv30uYWIMdgc1H7osxM9jwThnBodN2UBEv2Q…

selectors probed

Certificate (current)

GeoTrust TLS ECC CA G1

from 2025-10-29 to 2026-11-21

Expires in 186 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://loomispay.com/

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: sameorigin
permissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' airtools-loomis.prod-mid-euw3.investis.com captcha.loomis.com cdn.cookielaw.org cdnjs.cloudflare.com code.jquery.com irs.tools.investis.com www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'nonce-RuPuOFpPu/4HohKZWMfp3lbaeR8=' 'sha384-11cX+Naw18bPoIYxEkQI+DltxbxL5/5L0krcoW8ObmMGsC3OiLBkmZjXSWPrrjYh' captcha.loomis.com *.googleapis.com cdn.cookielaw.org cdnjs.cloudflare.com code.jquery.com loomis.jobbase.io loomis.onlyfy.jobs www.googletagmanager.com www.google.com www.gstatic.com googleads.g.doubleclick.net pagead2.googlesyndication.com connect.facebook.net snippet.capybara.lmc.cz www.googleadservices.com loomis-dk.containers.piwik.pro *.dailymotion.com *.dmcdn.net *.wistia.com *.wistia.net fast.wistia.com; style-src 'self' 'unsafe-inline' captcha.loomis.com cdn.jsdelivr.net cdnjs.cloudflare.com *.googleapis.com snippet.capybara.lmc.cz *.wistia.com; img-src 'self' data: c
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-security-policy-report-only: default-src 'self' 'unsafe-inline' 'unsafe-eval' airtools-loomis.prod-mid-euw3.investis.com captcha.loomis.com cdn.cookielaw.org cdnjs.cloudflare.com code.jquery.com irs.tools.investis.com www.googletagmanager.com; script-src 'strict-dynamic' 'self' 'nonce-RuPuOFpPu/4HohKZWMfp3lbaeR8=' 'sha384-11cX+Naw18bPoIYxEkQI+DltxbxL5/5L0krcoW8ObmMGsC3OiLBkmZjXSWPrrjYh' captcha.loomis.com *.googleapis.com cdn.cookielaw.org cdnjs.cloudflare.com code.jquery.com loomis.jobbase.io loomis.onlyfy.jobs www.googletagmanager.com www.google.com www.gstatic.com googleads.g.doubleclick.net pagead2.googlesyndication.com connect.facebook.net snippet.capybara.lmc.cz www.googleadservices.com loomis-dk.containers.piwik.pro *.dailymotion.com *.dmcdn.net *.wistia.com *.wistia.net *.wistia.net fast.wistia.com; style-src 'self' 'unsafe-inline' captcha.loomis.com cdn.jsdelivr.net cdnjs.cloudflare.com *.googleapis.com snippet.capybara.lmc.cz *.wistia.com; img-src 'self' data: c