mchcco.com

HTML metadata

Title: Music City Hot Chicken | Denver & Fort Collins Colorado
Description: Music City Hot Chicken has been around since 2016 as Colorado's first and best hot chicken and beer joint. We serve all-natural, crispy fried chicken and a lot of other really good stuff made here ourselves. Made by our friends for yours. Locations in Fort Collins and Denver, CO.
Language: en-US
Canonical: https://www.mchcco.com/

Open Graph

url: https://www.mchcco.com/
title: Music City Hot Chicken | Denver & Fort Collins Colorado
site name: Music City Hot Chicken | Denver & Fort Collins Colorado
description: Music City Hot Chicken has been around since 2016 as Colorado's first and best hot chicken and beer joint. We serve all-natural, crispy fried chicken and a lot of other really good stuff made here ourselves. Made by our friends for yours. Locations in Fort Collins and Denver, CO.

Technology

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (12)

images.getbento.com×4
theme-assets.getbento.com×4
app-assets.getbento.com×3
assets-cdn-refresh.getbento.com×1
cdnjs.cloudflare.com×1
fonts.googleapis.com×1
fonts.gstatic.com×1
media-cdn.getbento.com×1
widgets.resy.com×1
www.google.com×1
www.googletagmanager.com×1
www.gstatic.com×1

Social

Contact

Email

info@mchcco.com

Registration

Registrar

GoDaddy.com, LLC

Created

2015-04-27

Expires

2027-04-27 343 days left

Updated

2026-04-28

Name servers

ns49.domaincontrol.com
ns50.domaincontrol.com

DNS records live

NS

ns49.domaincontrol.com
ns50.domaincontrol.com

MX

1 aspmx.l.google.com
1 smtp.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

google-site-verification=U7gh43pQVenbL4t_Zc0yt4PXpDDQgQiq4jmrqeN1oRc
google-site-verification=V9YIXOfIeGLGWTJg8jSe7sWJ0utpfoxJynhAEvTW0CU

Email authentication partial

SPF

v=spf1 include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:skinner@mchcco.com

policy: none (monitoring only)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluEctwx3FZsbbhAXso2v0A3Dk1hrQQ9FhzjwWbLg38i6eXCIFT7UJFKv5baDA1EMFKDUk6XQrhcMU4…

selectors probed

Certificate (current)

R13

from 2026-04-12 to 2026-07-11

Expires in 53 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.mchcco.com/

present

strict-transport-security
content-security-policy
x-frame-options
cross-origin-opener-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
content-security-policy: default-src * blob: data: 'unsafe-inline' 'unsafe-eval'; script-src 'self' * https://cdn.us.heap-api.com https://heapanalytics.com https://viewer.threshold360.com 'unsafe-inline' 'unsafe-eval'; script-src-elem * https://viewer.threshold360.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' * https://heapanalytics.com https://viewer.threshold360.com blob: data:; style-src 'self' * https://heapanalytics.com https://viewer.threshold360.com 'unsafe-inline' 'unsafe-eval' blob:; connect-src 'self' * https://c.us.heap-api.com https://heapanalytics.com https://viewer.threshold360.com wss://viewer.threshold360.com blob:; font-src 'self' * https://heapanalytics.com https://viewer.threshold360.com data:; frame-src 'self' * https://viewer.threshold360.com; worker-src * blob:; media-src * blob: data:; frame-ancestors 'self';
strict-transport-security: max-age=2592000; includeSubDomains
cross-origin-opener-policy: same-origin

Links to (4)

Linked from (1)

focoma.org×2