comune.bologna.it

.it crawl

First seen 2026-05-10 · Last seen 2026-05-16 · ok HTTP/1.1 200 12843 ms crawled 2026-05-16

IT · 195.62.190.185 · AS31638 Lepida S.c.p.A.

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title: Comune di Bologna
Language: it
Canonical: /

Technology

Server: nginx
CMS: Gatsby

Third-party hosts loaded (1)

cdn.retecivica.lepida.it×14

DNS records live

NS

dns1.comune.bologna.it
dns2.comune.bologna.it
dns3.comune.bologna.it

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 9 TXT records

google-site-verification=1sWYISrsuR438VLqKXoquSZzIDZw-GYwCImuWgkpaTo
google-site-verification=RXVaCALKNvXXmom11an1-ICFiRd5V8OBLOAXgvpxf0I
google-site-verification=etVZd1zF03HJFEzznMq_NrXOAiPzRC8dMIIG1mJHmgE
MS=641504C06F873582629099304B4EA4FA5382E0D9
google-site-verification=MW268i1m4XGvHB4PfQ8xZskIMSomY15Tv_GpI5cFoQE
google-site-verification=TyJQovHe_7WLZcML4fY9EPaLMgjKO0JKjc7Wk0d-fcE
2FF22CA222809A25B84C505AB1B30B9E9468379E8D79B5A2743A9178227C78B6
facebook-domain-verification=ca86ju1407qzhuy6h2vzbdqobkm828
google-site-verification=FgswDyYsX0I5rDYfeMDEuYZ1m2C-NsMfnxx3x7kpI88

Email authentication partial

SPF: v=spf1 ip4:46.255.84.19 ip4:193.43.86.145 ip4:193.43.86.146 ip4:193.43.86.148 ip4:193.43.86.149 ip4:193.43.84.18 ip4:193.43.84.19 ptr:iperbole.bologna.it ptr:iperbole.bo.it include:_spf.google.com -all
strict (-all)
DMARC: v=DMARC1; p=none; rua=mailto:dmarc@comune.bologna.it; ruf=mailto:dmarc@comune.bologna.it; fo=1; aspf=s
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2026-04-02 to 2026-10-18

Expires in 151 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://www.comune.bologna.it/

present

strict-transport-security

findings

short HSTS max-age
missing Content Security Policy
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

strict-transport-security: max-age=0; includeSubDomains

Linked from (5)