mypaymentnow.com
HTML metadata
Technology
- CDN
- Amazon CloudFront
- Server
- AmazonS3
- Fonts
-
- Google Fonts
Third-party hosts loaded (2)
- cdn.jsdelivr.net×1
- fonts.googleapis.com×1
Registration
- Registrar
- Amazon Registrar, Inc.
- Created
- 2020-03-30
- Expires
- 2027-03-30 314 days left
- Updated
- 2026-02-23
- Name servers
-
- ns-116.awsdns-14.com
- ns-1483.awsdns-57.org
- ns-1659.awsdns-15.co.uk
- ns-615.awsdns-12.net
DNS records live
- NS
-
- ns-116.awsdns-14.com
- ns-1483.awsdns-57.org
- ns-1659.awsdns-15.co.uk
- ns-615.awsdns-12.net
- MX
-
- 10 30190431.in1.mandrillapp.com
- 20 30190431.in2.mandrillapp.com
Email authentication strong
- SPF
-
v=spf1 include:spf.mandrillapp.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:kris@corecommerce.com;policy: quarantine - DKIM
- no key found at common selectors
Certificate (current)
Amazon RSA 2048 M01
Expires in 236 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-content-type-options
nosniff- content-security-policy
default-src 'self' api.mypaymentnow.com; style-src fonts.googleapis.com cdn.jsdelivr.net *.mypaymentnow.com mypaymentnow.com 'unsafe-inline'; font-src fonts.gstatic.com cdn.jsdelivr.net; img-src data: *.mypaymentnow.com mypaymentnow.com *.s3.amazonaws.com; connect-src *.sentry.io mypaymentnow.com *.mypaymentnow.com; script-src 'self' www.google.com *.gstatic.com; frame-src 'self' www.google.com *.dailymotion.com player.vimeo.com *.koard.com *.myplancentral.com- strict-transport-security
max-age=31536000