pitkincounty.com

.com crawl

First seen 2026-04-14 · Last seen 2026-05-17 · ok HTTP/1.1 200 2838 ms crawled 2026-05-08

US · 208.90.189.241 · AS36489 IP Pathways, LLC

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Pitkin County, CO | Official Website
Description: Welcome to the Pitkin County Official Web Site. This page contains access to County Departments, Community Services, Aspen Airport information, Pitkin Sherriff’s Department, Business Resources, County Commissioner data, regional news, calendars and more. Whether you work, live or are visiting here, this site provides useful links to resources that will assist you in enjoying the Roaring Fork Valley and Aspen City region.
Language: en

Technology

Analytics

Google Tag Manager

Third-party hosts loaded (4)

docaccess.com×1
tag.brandcdn.com×1
translate.google.com×1
www.googletagmanager.com×1

Contact

Phone

9709205200

Address

st Main StreetAspen, CO 81611

Registration

Registrar

GoDaddy.com, LLC

Created

2000-04-20

Expires

2027-04-20 336 days left

Updated

2026-04-21

Name servers

ns77.domaincontrol.com
ns78.domaincontrol.com

DNS records live

NS

ns77.domaincontrol.com
ns78.domaincontrol.com

MX

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
30 alt2.aspmx.l.google.com
40 aspmx2.googlemail.com
50 aspmx3.googlemail.com

TXT

Show 6 TXT records

adobe-idp-site-verification=0abaa7838fd3d1fd34833b5a6ea2446d3b8a433c910641f90dc385023628427b
X6SB3KIY8PDCQVSL5G097Q0WIKJFAZMOXYKA7SX84
MS=5568FA9DFC65A064B8781AE9EF8635D4B0AED1F5
brevo-code:f260b6906d3753bc05d54757a47d5bb0
apple-domain-verification=bpXcWtT8YxViFNWv
duo_sso_verification=xDiNIoQqjaFBlOXY6aDU8yNfvpdrZIrgnoeZqpSJVKjoAd6YfbTU7SbAPonYmVDX

Email authentication partial

SPF

v=spf1 include:_spf.google.com include:spf.constantcontact.com +ip4:72.52.217.3  +ip4:192.245.61.175 +ip4:208.64.237.225 +ip4:147.253.213.79  +ip4:208.64.238.25 include:amazonses.com include:sendgrid.net -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:re+0d22ff176e68@inbound.dmarcdigests.com; fo=1

policy: none (monitoring only)

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3T86GqFV3EInI+KKGSVhXJIKoYd05X/4WsZOZlQLqoBhOXf1mQl1rR3XU/QG3ioDEGkvnZjFIyjIAWuNVyBou8RYarSq…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gRspFyTop42UsMCG35ULmHN7L5yXWrPi+kEryKoLMpnj+uZLDzwsvEkDp6NIjpoEil3DG05SwccKXO9UZ…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDLm4Myo10+B2GmX05+7/jpsgtQZRvw6jZ/fPYN816XpnQDP9SE/CBQbMm9L6H+DDZQc6R6XmAzqOAZWkI49jljx9…

selectors probed

Certificate (current)

R13

from 2026-03-18 to 2026-06-16

Expires in 28 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://pitkincounty.com/

present

content-security-policy
x-content-type-options

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' https://*.granicus.com https://platform.civicplus.com https://account.civicplus.com https://analytics.civicplus.com; img-src * data: blob:; worker-src * data: blob: 'unsafe-eval' 'unsafe-inline'; script-src * about: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob:; font-src * data:; default-src *