indexo.dev

choosecolorado.com

.com crawl

First seen 2026-05-16 · Last seen 2026-05-16 · ok HTTP/1.1 200 1250 ms crawled 2026-05-20

US · 137.184.52.15 · AS14061 DigitalOcean, LLC

Reputation 95/100 weak security headers

sector government type homepage

HTML metadata

Title
Colorado Office of Economic Development and International Trade | OEDIT
Description
The Office of Economic Development & International Trade assists new and existing businesses of every size starting, expanding or relocating in Colorado.
Language
en-US
Canonical
https://choosecolorado.com/
Feeds

Open Graph

url
https://choosecolorado.com/
title
Colorado Office of Economic Development and International Trade | OEDIT
locale
en_US
site name
Colorado Office of Economic Development & International Trade
description
The Office of Economic Development & International Trade assists new and existing businesses of every size starting, expanding or relocating in Colorado.

Technology

Server
nginx
CMS
WordPress
jQuery
3.7.1
Stack
PHP
Analytics
  • Google Analytics
  • Google Tag Manager
Fonts
  • Google Fonts
Social widgets
  • YouTube Embed

Third-party hosts loaded (5)

  • fonts.googleapis.com×2
  • www.googletagmanager.com×2
  • px.ads.linkedin.com×1
  • www.google-analytics.com×1
  • www.youtube.com×1

Social

Contact

Phone

Registration

Registrar
GoDaddy.com, LLC
Created
2013-09-02
Expires
2026-09-02 104 days left
Updated
2025-09-02
Name servers
  • ns1.digitalocean.com
  • ns2.digitalocean.com

DNS records live

NS
  • ns1.digitalocean.com
  • ns2.digitalocean.com
  • ns3.digitalocean.com
Verified for
  • Google

Email authentication no MX

SPF
not published
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R13
from 2026-05-04 to 2026-08-02
Expires in 74 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://choosecolorado.com/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'self' *.googleapis.com cdn.choosecolorado.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.choosecolorado.com js.hs-analytics.net js.hs-banner.com js.hs-scripts.com *.google-analytics.com *.google.com *.googletagmanager.com www.youtube.com snap.licdn.com static.hotjar.com script.hotjar.com resources.zoomprospector.com; script-src-elem 'self' 'unsafe-inline' www.google-analytics.com cdn.choosecolorado.com js.hs-analytics.net js.hs-banner.com js.hs-scripts.com www.google-analytics.com www.google.com www.googletagmanager.com www.youtube.com snap.licdn.com static.hotjar.com script.hotjar.com resources.zoomprospector.com; connect-src 'self' www.google-analytics.com *.google.com www.googletagmanager.com www.youtube.com stats.g.doubleclick.net avalanche.rootsrated.com blog-app.springbot.com *.ads.linkedin.com; style-src 'self' 'unsafe-inline' cdn.choosecolorado.com; style-sr

Links to (5)

Linked from (1)