xendit.co

HTML metadata

Title

Best Payment Gateway in Indonesia, Philippines and SEA | Xendit

Description

Xendit is the best and most secure online payment gateway in the SEA, helping your business accept and send local & international payments.

Language

en-US

Generator

Elementor 3.18.3; features: e_dom_optimization, e_optimized_assets_loading, additional_custom_breakpoints, block_editor_assets_optimize, e_image_loading_optimization; settings: css_print_method-internal, google_font-enabled, font_display-auto

Canonical

https://www.xendit.co/en/

Translations

en
en-hk
en-id
en-my
en-ph
en-sg
en-th
en-vn
id
th
zh-h5
zh-hans

Feeds

Xendit » Feed RSS
Xendit » Comments Feed RSS

Open Graph

url: https://www.xendit.co/en/
title: Best Payment Gateway in Indonesia, Philippines and SEA | Xendit
locale: en_US
site name: Xendit
description: Xendit is the best and most secure online payment gateway in the SEA, helping your business accept and send local & international payments.

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager

Ads

Meta Pixel

Fonts

Google Fonts

Third-party hosts loaded (8)

fonts.googleapis.com×2
fonts.gstatic.com×2
api.hubspot.com×1
connect.facebook.net×1
d39ewjhej4wmka.cloundfront.net×1
gmpg.org×1
static.zdassets.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

ns-1113.awsdns-11.org
ns-154.awsdns-19.com
ns-1929.awsdns-49.co.uk
ns-707.awsdns-24.net

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 23 TXT records

_globalsign-domain-verification=zBtH1NQuoUkbIY3IvNkWmAaBo6S2Qlw-JSRmi4YbAt
google-site-verification=DTjmnGc_9JMeVi-8QJ45ToIGujl4D46ZCfF0LZ1J8kc
google-site-verification=xJmg5qYwhYZRzayRH_7Q6qN9XnUxcOcUjQ1ulhOCxKI
atlassian-sending-domain-verification=0b484e38-e97c-4c24-bd1a-bcb993a118ba
LZIp9pdeTvHgGjhKgey_xKB4lew__mZO
google-site-verification=lVxlkR0kvyBAPzbZx8cWYsRIkGD6ZIVmTNc3bjzQ7uk
globalsign-domain-verification=985ca780c378c38314a334b1e3b56b64
atlassian-domain-verification=Jkd7vudPckrNTVj43tey957Navm3m1Ha5RfRMV4VQLYfewrg0PZigma3dyVjsDPr
zapier-domain-verification-challenge=3fed799f-cc01-4061-89ba-0e971b5021cc
_globalsign-domain-verification=BiGsy_DYbFY3lN2sLGFYV5CtSVRGOC8FxhDDFKGtbt
globalsign-domain-verification=6193c595e4daefbbb30811a135b5e9af
pardot1002231=95e4983699b33a4e76e8d6440dc44b70add0f20680e1090d157658e73971148d
globalsign-domain-verification=985ca780c378c38314a334b1e3b56b64
google-site-verification=s4H6Il1HcKj_Tk0XR-lSD1dPlHmJNner0oQBzOvQb1E
twilio-domain-verification=6cbc441a6edba56080628c766fdef245
MS=ms16621873
google-site-verification=-ucuHlheeCRQVtXaZZBQoZ0rkG6pbXKpuY7Hbui9CSw
status-page-domain-verification=h8l77299l4hg
x2rnwh2trh
globalsign-domain-verification=564935a04883d7a3816719faca4e544a
google-site-verification=2B6ydtEwKSO3HjmLZeqmCKxkMwtXrHy3vGeMOt-gO5o
facebook-domain-verification=603qa38giw5linf3fau1mxgtzqnik4
apple-domain-verification=yIqD8yRmGE90zjQC

Email authentication strong

SPF

v=spf1 include:_netblocks.google.com include:_netblocks2.google.com include:_netblocks3.google.com include:_phishspf.knowbe4.com include:_spf1.mailgun.org include:_spf2.mailgun.org include:_spf.eu.mailgun.org include:stspg-customer.com include:et._spf.pardot.com include:mail.zendesk.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; sp=quarantine; pct=100; adkim=s; aspf=s; rua=mailto:dmarc_agg@vali.email,mailto:1b3af98467@rua.easydmarc.asia,mailto:dmarc@xendit.co; ruf=mailto:dmarc@xendit.co; fo=1; rf=afrf; ri=86400

policy: quarantine · sp=quarantine

DKIM

Show 4 DKIM selectors

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFl90Yr+a25pcy1FTshVgdtxlPfnNtc9JbUTwdiEO6oQolU8sOE+SXv1mo3C1os2Gy8AN84GeTlkIk…
dkim: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbpRNmpcWvDG0TLLwJB4qCCbXBa/vqwmUwm565pZqtDDAgOibsCw2tDhJvlz+2vDF5OfS/Qo3mUIUdBKCwdop…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorH40+WMMiifwICG0jpO9SpVMXeKhWCuZtmNQBLK8KwKhsxImTUrjU2CJTY5RjAG150idaxE6VNjUCFwLN…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7ZkUlKAGwMotB2JjrtzU+6CxEjCRtuSxWooutlq5gUrgbAo7uT2lEICzUr5twvLMW2qv0Y6Vw0FCjApCyLPLxV4…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-12-23 to 2027-01-24

Expires in 249 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.xendit.co/en/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: frame-ancestors www.xendit.co
strict-transport-security: max-age=31536000; preload