bogota.gov.co

.co crawl

First seen 2026-04-11 · Last seen 2026-05-21 · ok HTTP/1.1 200 1068 ms crawled 2026-05-19

US · 150.171.109.36 · AS8075 Microsoft Corporation

Reputation 100/100

Classifying

HTML metadata

Title: ¡Te damos la bienvenida a Bogotá! | Bogota.gov.co
Description: Te saludamos, este es el portal web de la ciudad, hecho con la gente y para la gente. Infórmate y conoce los servicios que tenemos para ti.
Language: es
Generator: Drupal 10 (https://www.drupal.org)
Canonical: https://bogota.gov.co/

Open Graph

url: https://bogota.gov.co/
title: ¡Te damos la bienvenida a Bogotá! | Bogota.gov.co
image:url: https://www.bogota.gov.co/themes/custom/bogotema/images/redes-sociales-bogota-gov-co-2023-06.jpg
site name: ¡Te damos la bienvenida a Bogotá! | Bogota.gov.co
description: Te saludamos, este es el portal web de la ciudad, hecho con la gente y para la gente. Infórmate y conoce los servicios que tenemos para ti.

Technology

CDN: Azure Front Door
CMS: Drupal

Analytics

Google Tag Manager

Social widgets

YouTube Embed

Third-party hosts loaded (5)

static.addtoany.com×1
unpkg.com×1
www.facebook.com×1
www.googletagmanager.com×1
www.youtube.com×1

Social

Contact

Phone

+57 (601) 381-3000

DNS records live

NS

ns1-06.azure-dns.com
ns2-06.azure-dns.net
ns3-06.azure-dns.org
ns4-06.azure-dns.info

Verified for

Google
Meta

Email authentication no MX

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Sectigo RSA Organization Validation Secure Server CA

from 2025-05-11 to 2026-06-12

Expires in 21 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://bogota.gov.co/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; default-src https: wss: data: blob:; script-src data: 'self' blob: 'unsafe-inline' sdk.mrf.io/statics/marfeel-sdk.js scripts.clarity.ms/0.8.57/clarity.js www.clarity.ms translate-pa.googleapis.com bogotateescucha.bogota.gov.co stackpath.bootstrapcdn.com sdki.truepush.com *.unpkg.com *.polyfill.io *.twitter.com cdn.ampproject.org cliente.avanti-it.co embed.ex.co e.infogram.com f.vimeocdn.com api.mapbox.com code.jquery.com *.googleadservices.com sc-static.net *.googletagmanager.com sb.scorecardresearch.com *.hotjar.com cdnjs.cloudflare.com cdn.rawgit.com s.ytimg.com *.google-analytics.com www.instagram.com/embed.js unpkg.com www.powr.io translate.googleapis.com cdn.jsdelivr.net *.playbuzz.com googleads.g.doubleclick.net public.tableau.com ajax.googleapis.com maxcdn.bootstrapcdn.com cdn.syndication.twimg.com *.facebook.net platform.twitter.com maps.googleapis.com *.youtube.com *.google.com *.gstatic.com contacto195.comware.com.co *.addtoany.com 'unsafe-eval'; st
strict-transport-security: max-age=31536000