denverpost.com

HTML metadata

Title

The Denver Post – Colorado breaking news, sports, business, weather, entertainment.

Description

Latest Denver news, top Colorado news and local breaking news from The Denver Post, including sports, weather, traffic, business, politics, photos and video.

Language

en-US

Generator

WordPress 6.9.4

Canonical

https://www.denverpost.com

Feeds

The Denver Post » Feed RSS
The Denver Post » Comments Feed RSS

Open Graph

url: https://www.denverpost.com
title: The Denver Post
locale: en_US
site name: The Denver Post
description: Colorado breaking news, sports, business, weather, entertainment.

Technology

Server: nginx
CMS: WordPress

Analytics

Google Tag Manager

Cookie consent

Osano

Fonts

Google Fonts

Third-party hosts loaded (19)

fonts.googleapis.com×3
htlbid.com×3
ajax.googleapis.com×2
applepay.cdn-apple.com×2
cdn.jsdelivr.net×2
cdn.parsely.com×2
cdn.sophi.io×2
cmp.osano.com×2
prodmg2.blob.core.windows.net×2
stats.wp.com×2
accounts.google.com×1
cdn.auth0.com×1
cdn.cityspark.com×1
cdn.p-n.io×1
delivery.revcontent.com×1
fonts.gstatic.com×1
v0.wordpress.com×1
wp.me×1
www.googletagmanager.com×1

Social

Registration

Registrar

CSC Corporate Domains, Inc.

Created

1995-03-10

Expires

2027-03-11 296 days left

Updated

2026-04-06

Name servers

ns-1019.awsdns-63.net
ns-1220.awsdns-24.org
ns-1679.awsdns-17.co.uk
ns-503.awsdns-62.com

DNS records live

NS

ns-1019.awsdns-63.net
ns-1220.awsdns-24.org
ns-1679.awsdns-17.co.uk
ns-503.awsdns-62.com

MX

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
20 alt2.aspmx.l.google.com
30 aspmx2.googlemail.com
30 aspmx3.googlemail.com

TXT

Show 32 TXT records

e3fltk8am78ee4uept7hiqftu0
MS=ms42763989
_globalsign-domain-verification=SGSNuVFXgku36Q1g39h5zCWUAutWLDNr2xISH37_-n
1lhc1bmucsjp7q8b91t87nhm01
7bsbnac1nf7c1tfrv8c7gamjrf
knowbe4-site-verification=a9ce6449edf2d51c41eed1f3517d26f9
_globalsign-domain-verification=0TyIZcbLmgSwoVohQ9GWaLbZq22eAkpviTlcN7JXo3
google-site-verification=2bKNvyyGh6DUlOvH1PYsmKN4KRlb-0ZI7TvFtuKLeAc
4pj8eagm2vmptskd6g1hk0gm5t
tollbit-domain-verification=d3cc43d6a25115e73321be2cb765b25a1cc2c7ec945ec934dde6bbc20dcef9f9
globalsign-domain-verification=wdsjy5b1d3sGjlpf2ZSfdpjPcsNrXC_iOKH4GEnR0_
llib6qvjasng0m5c7562bvdl78
k0710qvbmi4c1pu6fp5fpvq3h
facebook-domain-verification=1yiyurr8k1l0cfwvgyjk5w823lm9ua
_globalsign-domain-verification=_OUsAbDOaFYPYWOgAjdN9k-kV76av1Rf5Pg4XHx3dL
google-site-verification=d2473NFa5jCbg_yQ0m3ZZyA4fO_q5Bnt7C2XNlx9JRk
IP26DG603F9M48358IST7R5L3I
ega5pobqtumor93gg1fighan98
_globalsign-domain-verification=qu9bswx7_efyr0AnoYMkd0ZmvFdZNxur1nGSq55P5P
_globalsign-domain-verification=nx5U56FiDUqhsckpguh1BWVo8oJVRsFtwCfGxdBN4e
specops-verification-code=700c2dff-5af8-4409-a777-25df1fb770e6
00D6A000000u2db=1TBRP00000001SL
1lhc1bmucsjp7q8b91t87nhm01.
sl4nmnrb1rno4slakgbovshcs0
3mmibbsavpv6o2hkq39uqhsr49
bw=o2AhWgmJR//LI2rv8ZuBaKChD0Ub6rd1lZ53Dg9MG4fp
36ailchom7s11o20nu6uqgo69o
MS=63BE0B5C6D28D2CE1C330D9F740E9E25038D5DB2
_globalsign-domain-verification=B57sRQpmte4G4w-gavZbVNmmNsMxGp5kcL19UP2599
google-site-verification=f0YC07m4ehdn8TAFlPwmgd6cUL2ne-J8HSQ4XjVwXzk
aslt820givt06ua5qjmkutdm4b
_globalsign-domain-verification=gctAD22GIK3YS4qVlothF9J8N9P35BDNYtltbRXnnM

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:_spf.salesforce.com include:_spf.mnginteractive.com include:sendgrid.net include:amazonses.com include:outboundmail.blackbaud.net include:mmsend.com ip4:52.6.112.187 -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@dmarc.everest.email; fo=1; pct=100; rf=afrf

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCpf+E3V7loaIPttOtimhGWHM39lqoTKFDGARnarH5KTyuRwtAzOPevCm6OjFWhr8/vSn3UGHaKkn8Hm07wSt…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9kqgh2UdcgFtDFT3iFO/hf0g9pvHdhXEJk2LW00xKoIEO69HbSjO4EOyautVjbM6AfqtuIJVTvEVDmLK8…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD2tvlXZBjnzX/xmbvVrExvXj9qO39DxJR/LiUge3SkCe6WHO1lqsnQrzyvC9Yk0v7ui1oe3kaHGfBu01hBFBb3kr…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

E7

from 2026-05-04 to 2026-08-02

Expires in 76 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://www.denverpost.com/

present

strict-transport-security
content-security-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob: *.visualwebsiteoptimizer.com; style-src 'unsafe-inline' https: *.visualwebsiteoptimizer.com app.vwo.com; img-src data: https: blob: *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io; font-src data: https:; connect-src https: data: blob: *.visualwebsiteoptimizer.com app.vwo.com; media-src blob: data: https:; object-src https:; child-src https: data: blob: 'self' *.visualwebsiteoptimizer.com app.vwo.com; upgrade-insecure-requests; block-all-mixed-content;
strict-transport-security: max-age=31536000;includeSubdomains