paylease.com
HTML metadata
Technology
- Server
- nginx
- Cookie consent
-
- OneTrust
- Fonts
-
- Adobe Fonts
Third-party hosts loaded (3)
- cdn.cookielaw.org×2
- stackpath.bootstrapcdn.com×1
- use.typekit.net×1
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 2003-04-10
- Expires
- 2028-04-10 692 days left
- Updated
- 2026-04-11
- Name servers
-
- ns-1101.awsdns-09.org
- ns-13.awsdns-01.com
- ns-1772.awsdns-29.co.uk
- ns-705.awsdns-24.net
DNS records live
- NS
-
- ns-1101.awsdns-09.org
- ns-13.awsdns-01.com
- ns-1772.awsdns-29.co.uk
- ns-705.awsdns-24.net
- MX
-
Show 7 MX records
- 1 mxa-00174201.gslb.pphosted.com
- 1 mxb-00174201.gslb.pphosted.com
- 10 aspmx2.googlemail.com
- 10 aspmx3.googlemail.com
- 2 aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
Show 11 TXT records
apple-domain-verification=tEpngCqkW1mJBsNVatlassian-domain-verification=DynXpw8HLsnZ/1GXFFhN8ZxIQVZ8We98yi1UoCGVXJKnrnZiZDXY6b1mAJkgPLShatlassian-domain-verification=X9CXlVtRbmBat4w7oDphL16Ulpf5bouyyaEVR/sKtaJwCi8DaEuEmqvohqsPwEwab7gs614tgdl7yc9grzbrntnr6b2rz52qbcqnw1q1rbp2vdwq1dp4xsjfypdlt82zfacebook-domain-verification=awvntau2b2ybtqtxt71wlcyea7oujjgoogle-site-verification=shV5omavPvzqVtllH6vO0d1TdwH0hDXUGS6TaSmVIJQkqj7z12wzrkfcgttd7kxw60m914y6ptlMS=DEF9A239E98EE12EEF9597BA70A822A123112178_2o94mkomp97rnqe6r5ib3podmfgwjv3_sarahe6yage9f5ggjgyfgu50w2b1nbi
Email authentication strong
- SPF
-
v=spf1 include:mailsenders.netsuite.com include:mktomail.com include:_spf.google.com include:spf.mandrillapp.com ip4:4.28.202.228 -allstrict (-all) - DMARC
-
v=DMARC1; p=quarantine; aspf=r; rua=mailto:mailreports@paylease.compolicy: quarantine - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDTtdfIQb9g+dPgQnSjatGxCFfgcxS1s8a791YN/OqQ6IA8/G0twZkspQJTvtpmYDmVGvPsYC42/102lOiYvZ… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cMW09cZ/0sg5/4ipNHJLr8b4EVYx4A6lv5b0TL5WRV2tJ1/IgjhD1H3/b+kNDQwDRb8HDziUSt84RZWRd… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCo7tT0qx7sQXqThoqlsdnfy1f/ZOFrTt5lBk4/BTF9dXbQcsyxMO3EwrlpZUuG63WHmQjr4iB/h0IJQJbfGP7gX6…
selectors probed - google:
Certificate (current)
DigiCert Global G2 TLS RSA SHA256 2020 CA1
Expires in 233 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Permissions Policy
Header values
- referrer-policy
no-referrer-when-downgrade- x-content-type-options
nosniff- content-security-policy
default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' *.mouseflow.com https://js-agent.newrelic.com https://bam.nr-data.net https://bam-cell.nr-data.net; child-src *; connect-src * data: 'unsafe-inline' https://settings.luckyorange.net wss://*.visitors.live https://pubsub.googleapis.com https://api.luckyorange.com; font-src * data: blob: 'unsafe-inline'; frame-ancestors *; img-src * data: blob: 'unsafe-inline' https://d10lpsik1i8c69.cloudfront.net www.googletagmanager.com; script-src * data: blob: 'unsafe-inline' 'unsafe-eval' https://d10lpsik1i8c69.cloudfront.net https://www.googletagmanager.com; script-src-elem * data: blob: 'unsafe-inline' 'unsafe-eval' https://d10lpsik1i8c69.cloudfront.net https://www.googletagmanager.com; style-src * data: blob: 'unsafe-inline'; worker-src blob:; report-uri https://o70354.ingest.sentry.io/api/5454944/security/?sentry_key=f021e6378c8041db845adf2b868dd767&sentry_environment=production&zego=v5-apache- strict-transport-security
max-age=63072000; includeSubDomains