montebelloca.gov

.gov user

First seen 2026-06-01 · Last seen 2026-06-01 · ok HTTP/1.1 200 2305 ms crawled 2026-06-01

US · 162.159.136.49 · AS13335 Cloudflare, Inc.

Reputation 100/100

sector government type homepage

HTML metadata

Title: Home - City of Montebello
Language: en-US
Canonical: https://www.montebelloca.gov/

Open Graph

url: https://www.montebelloca.gov/home
title: Home

Technology

CDN: Cloudflare
CMS: Joomla
Stack: ASP.NET

Analytics

Cloudflare Insights
Google Tag Manager

Social widgets

Twitter Widget

Third-party hosts loaded (14)

cdnsm5-hosted2.civiclive.com×31
cdnsm1-clradscript.civiclive.com×14
cdnsm2-hosted2.civiclive.com×9
cdnsm1-hosted2.civiclive.com×7
www.montebelloca.gov×6
cdnsm4-hosted2.civiclive.com×2
www.googletagmanager.com×2
cdnsm3-hosted2.civiclive.com×1
docaccess.com×1
platform.twitter.com×1
static.cloudflareinsights.com×1
translate.google.com×1
webchat-ui.citibot.net×1
www.elocallink.tv×1

Social

DNS records live

NS

ns03.domaincontrol.com
ns04.domaincontrol.com

MX

0 mx1-us1.ppe-hosted.com
10 mx2-us1.ppe-hosted.com

TXT

ppe-1a0c7ba72349d17e4ddbeb794714ada2051159e1
ppe-37cb145b1acfbd007d8e
MS=7A18C1E2CC27D4C8326DB9D459243C8CA090F1BE

Verified for

Microsoft 365

Email authentication strong

SPF

v=spf1 a:dispatch-us.ppe-hosted.com include:civiclive.com include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1;p=quarantine;pct=100;rua=mailto:equarantine@montebelloca.gov

policy: quarantine

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

WE1

from 2026-04-27 to 2026-07-26

Expires in 54 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.montebelloca.gov/

present

strict-transport-security
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing Content Security Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: fullscreen=(self "https://youtube.com/" "https://www.youtube.com/" "https://youtu.be/")
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains