holafly.com

HTML metadata

Title

Buy eSIM for International Travel | Holafly

Description

Buy an International eSIM for travel. Avoid roaming fees with Holafly’s eSIM and enjoy reliable internet, unlimited data on every adventure

Language

en

Canonical

https://esim.holafly.com/

Translations

ar
da
de
en
es
fr
he
it
ja
ko
nl
no
pl
pt
ru
sv
tr
zh
zh-cn

Open Graph

url: https://esim.holafly.com/
title: Buy eSIM for International Travel | Holafly
locale: en
site name: Buy eSIM for International Travel | Holafly
description: Buy an International eSIM for travel. Avoid roaming fees with Holafly’s eSIM and enjoy reliable internet, unlimited data on every adventure

Technology

Analytics

Google Tag Manager

Third-party hosts loaded (3)

dev.visualwebsiteoptimizer.com×1
obseu.protoroundprince.com×1
www.googletagmanager.com×1

Social

Contact

Email

help@holafly.com

Address

2 Dublin Landings, N Wall Quay, North Wall, Dublin 1, D01 V4A3, Dublin, IE

Registration

Registrar

10dencehispahard, S.L.

Created

2017-09-09

Expires

2031-09-09 1939 days left

Updated

2024-02-23

Name servers

rachel.ns.cloudflare.com
vin.ns.cloudflare.com

DNS records live

NS

rachel.ns.cloudflare.com
vin.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
15 u7xtzyyxfkokymgzvss3gf4gc2mrykh7apouz7ryuwa43xwdnv2a.mx-verification.google.com3xwdnv2a.mx-verification.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 25 TXT records

google-site-verification=C8sz6s1tkDZJLgROnSyban4LhtbWe2MBTi4D3zKBccE
apple-domain-verification=NiIIMTIVC30PAflL
shopify-verification-code=xynOa3mcE8ZqCzE1lBqDGFI4AtFhKK
sinch-domain-verification=73730e0c-78c4-41d2-9afa-664ee750fe73
google-site-verification=GAPqwFDLKbzI5rDbtwlsWas6vPLGl6g11lRzU0jjeQM
QmYfrjpgvySCV5yBPqoxosd1bfdvwJNSDa92GMgv5mWTEK
protonmail-verification=899c284b8b29a27e72658e6a8486418c629b0e69
detectify-verification=e187a32d767d6fc55735da9a9b72f88d
adobe-idp-site-verification=4e2848e44affd11064442a9777c28fc65825cd9b5d0a5a89199f13f04d9e01b8
DirectFedAuthUrl=https://accounts.google.com/o/saml2/idp?idpid=C00qc05yb
apple-domain-verification=0aH8bTYTNrxiKkxj
figma-domain-verification=3a0fff72ee9b3cba598b5a40d203bc2ff7b2f9aa3724bc1fe965fcacc467bda5-1757425930
zapier-domain-verification-challenge=f07f6ee4-7842-4dcd-9c13-b701006c6d57
miro-verification=f0c79aa1898bb58effd8495cf3730a491f8f31ae
_06q2ncei6hysk2r5clqejq6x6kjpqdp
MS=042DF3C573F8341517F1A064AF476424667FDAAB
knowbe4-site-verification=c1ffa6a882c4a38d00acb2e0404d9833
1password-site-verification=4FC7RGFXJFFNHACS45E3UOIMA4
configcat-domain-verification=08de33ec-f02f-484d-8dc1-338f551f7f0b
ahrefs-site-verification_443736...6de2e7142f6adc4ee900c2ece84ac34
68ef6168067cb91a186d58c500bfc05d
klaviyo-site-verification=H5sgvh
google-site-verification=sa1jeswkeg4KJ1RivOzH7J9Svi6TnuKdzQFIVjcfb2o
notion-domain-verification=ES9sq4HhZ86TJvuVwVIevbBItVZpuPtrwIUxofedM4e
k=rsa; p=MIGfMA0GCSqGSIb3D.../Cu7T5M31P0Akm/os4zQIDAQAB

Email authentication strong

SPF

v=spf1 ip4:156.70.34.100 ip4:209.85.128.0/17  include:relay.mailchannels.net  include:shops.shopify.com include:spf.tapfiliate.com include:_spf.google.com include:145101347.spf05.hubspotemail.net -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; pct=10; rua=mailto:ace4ae770b7045ec828367eebfd57780@dmarc-reports.cloudflare.net,mailto:dmarc-noreply@holafly.com; ruf=mailto:dmarc-noreply@holafly.com,mailto:security@holafly.com,mailto:deliverability_strategy@klaviyo.com; fo=1

policy: quarantine · pct=10

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xh0roC7qklN5ovD8/xNeLofomXc2su5FpMWXQl2Y1nTxt/583wtvP4a8Jgd1EoEgLpkzFebb2Mv35PiA9…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOKRNm1Nv7AYd3TUFIx9r5FYy0FfV240wVykPt+nPnGyC/wUYqZcHEhSpVDc58eX3PQKPMfIZfDkd09+QJ56Esgi…

selectors probed

Certificate (current)

Certainly Intermediate R1

from 2026-05-09 to 2026-06-08

Expires in 20 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://esim.holafly.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://widget.intercom.io https://js.intercomcdn.com https://*.amplitude.com https://app.intercom.io https://sdk.privacy-center.org https://*.abtasty.com https://cdn.taboola.com; script-src-elem 'self' 'unsafe-inline' https://*.cloudfront.net https://*.yotpo.com https://widget.intercom.io https://dev.visualwebsiteoptimizer.com https://js.intercomcdn.com https://*.cookiebot.com https://www.googletagmanager.com https://*.klaviyo.com https://utt.impactcdn.com https://assets.adobedtm.com https://*.googlesyndication.com https://googleads.g.doubleclick.net https://s.yimg.jp https://www.redditstatic.com https://bat.bing.com https://*.facebook.net https://s.pinimg.com https://static.ads-twitter.com https://*.criteo.com https://www.googleadservices.com https://analytics.tiktok.com https://sc-static.net https://b99.yahoo.co.jp https://ct.pinterest.com https://tr.snapchat.com https://www.clarity.ms https://app.vwo.com https://s.axon.ai https:
strict-transport-security: max-age=2592000