hartford-vt.org

.org crawl

First seen 2026-04-15 · Last seen 2026-05-19 · ok HTTP/1.1 200 1329 ms crawled 2026-05-10

US · 208.90.189.137 · AS36489 IP Pathways, LLC

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Hartford, VT | Official Website
Language: en

Technology

Server: Microsoft-IIS

Analytics

Google Tag Manager

Third-party hosts loaded (2)

docaccess.com×1
www.googletagmanager.com×1

Contact

Phone

Address

rd Town Hall171 Bridge StreetWhite River Junction, VT 05001

Registration

Registrar

GoDaddy.com, LLC

Created

1999-05-07

Expires

2027-05-07 351 days left

Updated

2026-04-13

Name servers

dns3.civicplus.com
dns4.civicplus.com

DNS records live

NS

dns3.civicplus.com
dns4.civicplus.com

MX

0 hartfordvt-org02b.mail.protection.outlook.com

Verified for

Apple
Google
Microsoft 365

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com include:spf.smtp2go.com include:sendgrid.net ~all

softfail (~all)

DMARC

v=DMARC1; p=none; pct=100; rua=mailto:dmarc@hartford-vt.org; ruf=mailto:dmarc@hartford-vt.org.com; fo=1

policy: none (monitoring only)

DKIM

selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCohBEAFxBMLNftcDSXllJGmlsbi2jrToEiRZTOFim0kFOQcOET9Zkv3m6L0p5WFuJtGXshBvb7t5JpxGjBbz…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07sA/0IzViEr5j/aOnBNwNXUC1EY5aRTclfAgIRAan/3NODntMDM2jhhCu0OI47oRzNH4fZVplFfmqTAyW…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCf7EI6qStHC/VEDdSMRg4yL2pYsyTHyyVAyPsKb+/Haiam72beQIoTMhzi39Vx1LuBvFZ2mZQDRZwbjJqfZZih0G…

selectors probed

Certificate (current)

R13

from 2026-03-25 to 2026-06-23

Expires in 33 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://hartford-vt.org/

present

content-security-policy
x-content-type-options

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' https://*.granicus.com https://platform.civicplus.com https://account.civicplus.com https://analytics.civicplus.com; img-src * data: blob:; worker-src * data: blob: 'unsafe-eval' 'unsafe-inline'; script-src * about: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob:; font-src * data:; default-src *