You might come across comune.merlara.pd.it when looking up information about the small Italian town of Merlara in Veneto. The good news: this site actually belongs to the town's government, with a domain that's been registered since 2001 and a clean history free of malware or blacklisting. The municipality has been transparent about its identity, including a physical address in the WHOIS record.
But there's a problem that can't be ignored for any official site: it doesn't use HTTPS. That means any data you send or receive over this site is not encrypted. For a government website handling forms, payments, or even just sharing official documents, that's a real shortcoming. Most Italian municipal sites today have HTTPS enabled. The site also didn't respond to our automated checks, which might just be bot protection, but combined with the missing encryption it makes it hard to verify what's actually on the site.
If you're simply looking up basic public information like opening hours or phone numbers, the risk is low. But think twice before submitting any personal details or relying on this site for secure communication. A legitimate town government should invest in basic web security, and this one hasn't yet.