indexo.dev

sfpackage.com

.com crawl

First seen 2026-04-21 · Last seen 2026-05-12 · ok HTTP/1.1 200 2062 ms crawled 2026-05-15

US · 104.21.42.69 · AS13335 Cloudflare, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Sfpackage
Description
Sfpackage offers practical, USD‑priced buying guidance with clear comparisons and real‑world tips for the everyday reader
Language
en
Canonical
https://sfpackage.com/
Translations
  • en
  • en-au
  • en-ca
  • en-gb
  • en-nz
  • en-za
  • es-cl
  • es-co
  • es-mx
  • fa-af
  • fr-ca
  • ja
  • pt-br
  • th
  • vi
  • zh-cn
  • zh-hk
  • zh-tw
Feeds

Open Graph

url
https://sfpackage.com/
title
Sfpackage
site name
Sfpackage
description
Curated buying guides for the everyday reader.

Technology

CDN
Cloudflare
CMS
Next.js

Contact

Email
Phone
Address
120 Broadway, 10001, New York, NY, US

Registration

Registrar
NameCheap, Inc.
Created
2025-02-01
Expires
2027-02-01 257 days left
Updated
2026-03-14
Name servers
  • macy.ns.cloudflare.com
  • plato.ns.cloudflare.com

DNS records live

NS
  • macy.ns.cloudflare.com
  • plato.ns.cloudflare.com
MX
  • 10 mx2-hosting.jellyfish.systems
  • 20 mx3-hosting.jellyfish.systems
  • 5 mx1-hosting.jellyfish.systems

Email authentication partial

SPF
v=spf1 +a +mx +ip4:63.250.38.151 include:spf.web-hosting.com ~all
softfail (~all)
DMARC
v=DMARC1; p=none;
policy: none (monitoring only)
DKIM
  • default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNs4kE0s/XdsTeT8990z9QTR2gmC4UEif9LEsyCY1Tef+AExsGjpLKZ0dmyZQ73hwKioCO32zM9ZqW…
selectors probed

Certificate (current)

E8
from 2026-05-12 to 2026-08-10
Expires in 83 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://sfpackage.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
  • cross-origin-opener-policy
findings
  • CSP allows unsafe inline scripts/styles
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
camera=(), microphone=(), geolocation=(), interest-cohort=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; img-src 'self' data: https: http:; media-src 'self' https: http:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https: http: wss: ws:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests
strict-transport-security
max-age=63072000; includeSubDomains; preload
cross-origin-opener-policy
same-origin

Links to (3)

Linked from (1)