oxapay.com

HTML metadata

Title

Crypto Payment Gateway for Businesses | OxaPay

Description

Accept crypto with ease using OxaPay – a fast crypto payment gateway with 0.4% fees. Accept Bitcoin, USDT, and more with full API support.

Language

en

Canonical

https://oxapay.com

Translations

ar
en
es
fa
fr
ru
tr
zh

Open Graph

title: Crypto Payment Gateway for Businesses | OxaPay
description: Accept crypto with ease using OxaPay – a fast crypto payment gateway with 0.4% fees. Accept Bitcoin, USDT, and more with full API support.

Technology

CDN: Cloudflare
CMS: Next.js

Analytics

Cloudflare Insights

Third-party hosts loaded (1)

static.cloudflareinsights.com×1

Social

Registration

Registrar

NameCheap, Inc.

Created

2019-10-28

Expires

2029-10-28 1258 days left

Updated

2025-01-05

Name servers

cruz.ns.cloudflare.com
thaddeus.ns.cloudflare.com

DNS records live

NS

cruz.ns.cloudflare.com
thaddeus.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

google-site-verification=3OCKv3jzovUnYZfrhHRZQcBjoA3EYHPEXVc7g26d1bw
google-site-verification=6lRrDmcYGcsjYKyqTAycRJA4PBNswhQrrT-9SntYx94
google-site-verification=A5VwV-ds8ilunsKkagOtc_HDmF_Yfb-lxnlFZGkwKBo

Email authentication strong

SPF

v=spf1 include:mailgun.org ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc@oxapay.com; ruf=mailto:forensic@oxapay.com; adkim=r; aspf=r

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpHjtvRavko6jG4IFPh5IU4RfMWQdUSlp8jR2vnAxsmFL7EgTTXGcXZxAvH2CkcBF2Ge4KOVhJKeLa…

selectors probed

Certificate (current)

WE1

from 2026-04-26 to 2026-07-25

Expires in 68 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://oxapay.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
permissions-policy

findings

CSP allows unsafe inline scripts/styles
missing Referrer Policy

Header values

x-frame-options: DENY
permissions-policy: geolocation=(), microphone=(), camera=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' https://apis.google.com https://cdn.livechatinc.com https://api.livechatinc.com https://secure.livechatinc.com https://www.googletagmanager.com https://www.google-analytics.com 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' https://cdn.livechatinc.com https://api.livechatinc.com https://secure.livechatinc.com https://www.googletagmanager.com https://www.google-analytics.com https://static.cloudflareinsights.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://www.google-analytics.com https://region1.google-analytics.com https://i.ytimg.com; connect-src 'self' https://cdn.livechatinc.com https://www.google-analytics.com https://region1.google-analytics.com; frame-src 'self' https://secure.livechatinc.com https://www.youtube.com;
strict-transport-security: max-age=31536000; includeSubDomains; preload

Links to (29)

Linked from (1)

bitcoincash.org×3