bristoltn.gov

.gov user

First seen 2026-05-14 · Last seen 2026-05-14 · ok HTTP/1.1 200 1003 ms crawled 2026-05-14

NL · 89.106.200.153 · AS209626 Enflow B.V.

Reputation 94/100 dmarc monitor-only

sector government type homepage

HTML metadata

Title: Bristol, TN - Official Website | Official Website
Language: en

Technology

CDN: Cloudflare

Third-party hosts loaded (3)

www.bristoltn.gov×32
app-script.monsido.com×1
docaccess.com×1

Contact

Phone

423-989-5500

Registration

Registrar

get.gov

Created

2024-07-24

Expires

2026-07-17 58 days left

Updated

2025-07-22

Name servers

dns3.civicplus.com
dns4.civicplus.com

DNS records live

NS

dns3.civicplus.com
dns4.civicplus.com

MX

0 bristoltn-gov.mail.protection.outlook.com

TXT

MS=ms16407060
apple-domain-verification=t7ErGp95kzqzwjNd
knowbe4-site-verification=4037f0bcda9e9cc9b96549b648da1577

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com include:mta.doxim.com include:_spf.psm.knowbe4.com include:_spf.doximapps.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:hzubw9ru@ag.us.dmarcian.com; ruf=mailto:hzubw9ru@fr.us.dmarcian.com;

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HMT5YsxPQGdHvJg+TwKIA4mAbPwjf6aVE26/WOHboacYZOqHQ3edpJOO6sGXcpfI7E8eMYJHelebs…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5totnIeCZrVTrn631qM81T0sXSPf4xDAuYvlyAjONCN2PfspnxWqhWUW+6cjHGvc6/rW1h6HBJa/fy…

selectors probed

Certificate (current)

ZeroSSL ECC DV SSL CA 2

from 2026-04-26 to 2026-07-26

Expires in 67 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://www.bristoltn.gov

present

content-security-policy
x-content-type-options

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' https://*.granicus.com https://platform.civicplus.com https://account.civicplus.com https://analytics.civicplus.com; img-src * data: blob:; worker-src * data: blob: 'unsafe-eval' 'unsafe-inline'; script-src * about: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob:; font-src * data:; default-src *