Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 3.68.41.213 |
| Server Software | Open 2.0 |
| Compression | gzip |
|
🔒 🟡 Mixed Content (2 HTTP resources) | The page is served over HTTPS but loads 2 resource(s) over HTTP. This may be blocked in modern browsers. |
|
ℹ 🔵 Missing Content Security Policy | CSP is not configured. It helps prevent XSS attacks and content injection. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 3.68.41.213
Server Software Open 2.0
Compression gzip
🔒 🟡 Mixed Content (2 HTTP resources) The page is served over HTTPS but loads 2 resource(s) over HTTP. This may be blocked in modern browsers.
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://comune.fe.it:443 | 302 | HTTP/2 302 |
| 2 | https://www.comune.ferrara.it:443/ | 200 | HTTP/2 200 |
#1 URL https://comune.fe.it:443
HTTP Status Code 302
Status HTTP/2 302
#2 URL https://www.comune.ferrara.it:443/
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 38 ms |
| TCP Connect | 47.2 ms |
| TLS Handshake | 11 ms |
| Time To First Byte (TTFB) | 124 ms |
| Content Download | 0.4 ms |
| Total Response Time | 124.4 ms |
DNS Lookup 38 ms
TCP Connect 47.2 ms
TLS Handshake 11 ms
Time To First Byte (TTFB) 124 ms
Content Download 0.4 ms
Total Response Time 124.4 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31536000; includeSubDomains; preload |
| CSP | ⚠ Not configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | strict-origin-when-cross-origin |
| Permissions Policy | ✔ Configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000; includeSubDomains; preload
CSP ⚠ Not configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ✔ nosniff
Referrer Policy strict-origin-when-cross-origin
Permissions Policy ✔ Configured
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | Comune di Ferrara | Sito istituzionale |
| Meta Description | Il sito web istituzionale del Comune di Ferrara: amministrazione, novità, servizi, documenti e dati. |
| Open Graph Title | Comune di Ferrara |
| Twitter Card | summary |
| Twitter Title | Comune di Ferrara |
Title Comune di Ferrara | Sito istituzionale
Meta Description Il sito web istituzionale del Comune di Ferrara: amministrazione, novità, servizi, documenti e dati.
Open Graph Title Comune di Ferrara
Twitter Card summary
Twitter Title Comune di Ferrara
Detected Technologies
| Technology | jQuery Google Analytics PHP Matomo |
Technology jQuery Google Analytics PHP Matomo
HTTP Headers
| Date
| Thu, 20 Aug 2026 04:06:13 GMT |
| Content-type
| text/html; charset=UTF-8 |
| Content-length
| 17080 |
| Server
| Open 2.0 |
| Set-cookie
| _csrf_admin=5e727a3aedbb52ea5500a70054ef6a7d5240b44565b12b03e6e3bd307b85ac87a%3A2%3A%7Bi%3A0%3Bs%3A11%3A%22_csrf_admin%22%3Bi%3A1%3Bs%3A32%3A%22qamfr1pu0CzNI9b9bCkbNTNZO9_SdRYa%22%3B%7D; path=/; secure; HttpOnly |
| Expires
| Thu, 19 Nov 1981 08:52:00 GMT |
| Cache-control
| no-store, no-cache, must-revalidate |
| Pragma
| no-cache |
| Vary
| Accept-Encoding |
| Content-encoding
| gzip |
| X-xss-protection
| 1; mode=block |
| X-content-type-options
| nosniff |
| Referrer-policy
| strict-origin-when-cross-origin |
| Strict-transport-security
| max-age=31536000; includeSubDomains; preload |
| Permissions-policy
| geolocation=(), microphone=() |
Meta Tags
| Theme-color | #000 |
| Csrf-param | _csrf_admin |
| Csrf-token | gHh8hm5SZSqblGNx3f6mJKw9M43lE3Og-x2sWEMdEUyyFSurAig1XfXLLxeoxtFz5WJnwr9qO8OLf-AAM3ZBfQ== |
| Viewport | width=device-width, initial-scale=1 |
| X-ua-compatible | ie=edge |
| Description | Il sito web istituzionale del Comune di Ferrara: amministrazione, novità, servizi, documenti e dati. |
Date Thu, 20 Aug 2026 04:06:13 GMT
Content-type text/html; charset=UTF-8
Content-length 17080
Server Open 2.0
Set-cookie _csrf_admin=5e727a3aedbb52ea5500a70054ef6a7d5240b44565b12b03e6e3bd307b85ac87a%3A2%3A%7Bi%3A0%3Bs%3A11%3A%22_csrf_admin%22%3Bi%3A1%3Bs%3A32%3A%22qamfr1pu0CzNI9b9bCkbNTNZO9_SdRYa%22%3B%7D; path=/; secure; HttpOnly
Expires Thu, 19 Nov 1981 08:52:00 GMT
Cache-control no-store, no-cache, must-revalidate
Pragma no-cache
Vary Accept-Encoding
Content-encoding gzip
X-xss-protection 1; mode=block
X-content-type-options nosniff
Referrer-policy strict-origin-when-cross-origin
Strict-transport-security max-age=31536000; includeSubDomains; preload
Permissions-policy geolocation=(), microphone=()
