nowpay.com

.com crawl

First seen 2026-06-01 · Last seen 2026-06-01 · ok HTTP/1.1 200 1395 ms crawled 2026-06-02

US · 68.220.237.27 · AS8075 Microsoft Corporation

Reputation 67/100 listed in spam blocklist no dmarc policy

Classifying

HTML metadata

Title: NowPay - Financial Wellness
Description: NowPay allows you to access your salary anytime and repay it in installments
Language: en

Open Graph

url: https://blue-sea-03641ca0f.1.azurestaticapps.net/
title: NowPay - Financial Wellness
description: NowPay allows you to access your salary anytime and repay it in installments

Technology

Fonts

Google Fonts

Third-party hosts loaded (2)

fonts.googleapis.com×3
fonts.gstatic.com×1

Registration

Registrar

GoDaddy.com, LLC

Created

2005-03-28

Expires

2028-03-28 663 days left

Updated

2025-11-25

Name servers

ns41.domaincontrol.com
ns42.domaincontrol.com

DNS records live

NS

ns41.domaincontrol.com
ns42.domaincontrol.com

MX

0 nowpay-com.mail.protection.outlook.com

TXT

_kfb121697t199uhgx8qnu8n4q28paou
_t3vn9zodrt7uualr795qawemlt833f4

Verified for

Atlassian
Google
Zoho

Email authentication weak

SPF

v=spf1 include:spf.protection.outlook.com include:zcsend.net include:transmail.net include:spf.zoho.com -all

strict (-all)

DMARC

not published

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcqlimSAOKYYSNjpzoYC5frGcdVWDWTkHBaPsRV8lkI2+lVHm7Evh9d2ekXYY3U49RbMRBXcHGGMRM…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53KA/8tYCvFCK1bJJCx4wvNYqv9VeLxraF9FUEyENn2gjzOewrQWthKqLBPEk/sO/oFFPFcxHf4+iX…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-04-22 to 2026-10-23

Expires in 141 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://www.nowpay.com/

present

strict-transport-security
x-content-type-options
referrer-policy

findings

short HSTS max-age
missing Content Security Policy
missing frame protection
missing Permissions Policy

Header values

referrer-policy: same-origin
x-content-type-options: nosniff
strict-transport-security: max-age=10886400; includeSubDomains; preload

Linked from (1)

vkav.vc×1