sf.gov

.gov user

First seen 2026-05-16 · Last seen 2026-05-16 · ok HTTP/1.1 202 3561 ms crawled 2026-05-16

US · 99.83.129.68 · AS16509 Amazon.com, Inc.

Reputation 95/100 weak security headers

sector other type parked

HTML metadata

Language: en

Technology

CDN: Amazon CloudFront
Server: CloudFront

Third-party hosts loaded (1)

2ef0668df1ec.f13a3ac4.eu-west-1.token.awswaf.com×1

Registration

Registrar

get.gov

Created

2016-05-06

Expires

2026-10-29 162 days left

Updated

2025-11-03

Name servers

dns101.netops.sspdata.net
dns111.netops.sspdata.net
dns121.netops.sspdata.net
ns1.sfgov.org
ns2.sfgov.org

DNS records

MX

10 sf-gov.mail.protection.outlook.com

TXT

Show 13 TXT records

MS=ms17564234
cisco-ci-domain-verification=4049c9351d99a986973c030b555c675f75d984b86c19a85d8a61a5dce3636309
smartsheet-site-validation=P8AirepFo92cHGbverZhHjuvOG68nEpb
docusign=30425ed2-d2d2-404f-a020-53c52c8704f7
google-site-verification=C4AI0cMxAOc2IbxItWVG9C1FczHTDhVLTCWtxUhUqWU
adobe-idp-site-verification=1c5c0dca7baca33b2e644ba9d6e0c7861f821c8ef1f628eec570fe6240a050c9
airtable-verification=7cae8d240a1f62d9d36b22e6fbd49fa4
oci-domain-verification=QYHsHD4fh2q7Wwyj5YJVAHVmCG7Kvv3oPzbSJAjbbk1y
anthropic-domain-verification-b339m0=mRXUdtYK0gdj3mZoLZSLw67Wi
ee63f81b-434c-4124-9857-7af6fb76bc1f
openai-domain-verification=dv-OdorwpX6Pm7rVJkiv0mByNDw
box-domain-verification=dbc1ac9c36887ea2e9d7c62e3557927c8c8d6ac70513535f02d5780b50817ddc
wiz-domain-verification=fc63fe570ce0cddd8026f7878b661ec65fcd7e8e2f2c8311cd37342692f76b13

Email authentication strong

SPF

v=spf1 exists:%{i}._i.%{d}._d.espf.agari.com include:%{d}.0c.spf-protect.agari.com include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:city-and-county-of-san-francisco@rua.agari.com; ruf=mailto:city-and-county-of-san-francisco@ruf.agari.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp93XuRcgq3MK4JS1mza7Olst+Y6uAeGTBQ75j8VUhsJrHuIATp2J0f8C9hO7B9qbB45sXNq2EBGT7c…

selectors probed

Certificate (current)

ZeroSSL RSA DV SSL CA 2

from 2026-05-03 to 2026-08-02

Expires in 74 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.sf.gov

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy