broomfield.org

.org crawl

First seen 2026-05-04 · Last seen 2026-05-11 · ok HTTP/1.1 200 1744 ms crawled 2026-05-11

US · 208.90.191.142 · AS36489 IP Pathways, LLC

Reputation 94/100 dmarc monitor-only

sector government type homepage

HTML metadata

Title
City and County of Broomfield - Official Website | Official Website
Language
en

Technology

Analytics
  • Google Tag Manager

Third-party hosts loaded (4)

  • px.ads.linkedin.com×2
  • www.facebook.com×2
  • www.googletagmanager.com×2
  • docaccess.com×1

Contact

Phone

Registration

Registrar
eNom, LLC
Created
2003-08-18
Expires
2026-08-18 91 days left
Updated
2019-04-17
Name servers
  • pdns1.registrar-servers.com
  • pdns2.registrar-servers.com

DNS records live

NS
  • pdns1.registrar-servers.com
  • pdns2.registrar-servers.com
MX
  • 10 mxa-002aeb01.gslb.pphosted.com
  • 10 mxb-002aeb01.gslb.pphosted.com
  • 20 alt1.aspmx.l.google.com
  • 20 alt2.aspmx.l.google.com
TXT
Show 16 TXT records
  • 9h04dgrsv98qptumo2bcjcng0m
  • e2dj669oqtahum0l70novkhbc8
  • ophsrh93fj1d881onef335n9hc
  • apple-domain-verification=3iu5tW2ymia5u8dL
  • broomfield.org created Mar 14 2005 13:21:38
  • canva-site-verification=R22gzbmdPsmckMKcksfXhA
  • Foxit-domain-verification=7760aef99da0c8c1a182f8ade33f8102
  • virtru-site-verify=zOQWrcL5yHYBP8JVJ8VoCaZAna8flgiZeIdT3egx
  • google-site-verification=8vk1Sbj3sh7D-kdIKyDXPradZodmZPcQmlOZoDXAkbs
  • google-site-verification=L0GvFfe15X1ZtycrzAu189T7Cg2A6mSzmVQ2PCNQz4c
  • google-site-verification=WqUqMZIdsBE_YCfuBBWYj3aDxarhxNO1RHnf2XJxh4Q
  • solarwinds-service0desk-verification=b27a251158ac78dc14a55c01d56fab24
  • MS=ms43936214
  • MS=ms90881860
  • 304sqjt7ap8584ahavto61eb4p
  • 3rbuo0cilv4fatkkrhhk6gli6j

Email authentication partial

SPF
v=spf1 ip4:44.229.121.55 ip4:35.80.141.6 ip4:148.59.100.16/28 ip4:208.75.120.0/22 ip4:3.128.0.0/9 ip4:208.75.122.0/24 ip4:209.222.80.0/21 ip4:208.185.229.0/24 include:_spf.google.com include:spf_c.oraclecloud.com ~all
softfail (~all)
DMARC
v=DMARC1; p=none; pct=10; rua=mailto:re+zrrxvgxxle9@dmarc.postmarkapp.com; ruf=mailto:DMARCpostmaster@broomfield.org
policy: none (monitoring only) · pct=10
DKIM
  • google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQChNkPsY65Xxvr0k3IM2qiaEAo/PjWP2UqIfEVOXPEqVyLoM6nzaqujyVCQ6bflJOX/sc/wMHRJwA3aRP16cU…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvinIx/Tj7gutaJFW7lE1v1n8sPUX36+y2MJYDG8evcUdVbiuXZzE2+SSKPi8HfXQGBimvSHWK2u8byBa1e…
  • s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzgy07BfMW3wMnPrSB3YDbLZCpwsyZ4yUapFKqp6B1jYwH5OoOXHRpKfdFGoAcJ7apl92m3xGOxpIFhv8L…
selectors probed

Certificate (current)

R12
from 2026-04-25 to 2026-07-24
Expires in 66 days

HTTP security headers

Header hygiene 50/100 Checked live page: https://broomfield.org/

present
  • content-security-policy
  • x-content-type-options
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-content-type-options
nosniff
content-security-policy
frame-ancestors 'self' https://*.granicus.com https://platform.civicplus.com https://account.civicplus.com https://analytics.civicplus.com; img-src * data: blob:; worker-src * data: blob: 'unsafe-eval' 'unsafe-inline'; script-src * about: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob:; font-src * data:; default-src *

Links to (3)

Linked from (1)