Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 150.171.110.117 |
| CDN | CDN (TCP_MISS) |
| Compression | gzip |
|
🔒 🟡 Mixed Content (1 HTTP resources) | The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 150.171.110.117
CDN CDN (TCP_MISS)
Compression gzip
🔒 🟡 Mixed Content (1 HTTP resources) The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Performance
| DNS Lookup | 102.3 ms |
| TCP Connect | 103.9 ms |
| TLS Handshake | 6.1 ms |
| Time To First Byte (TTFB) | 276.8 ms |
| Content Download | 0.4 ms |
| Total Response Time | 277.2 ms |
DNS Lookup 102.3 ms
TCP Connect 103.9 ms
TLS Handshake 6.1 ms
Time To First Byte (TTFB) 276.8 ms
Content Download 0.4 ms
Total Response Time 277.2 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31536000; includeSubDomains |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ✔ nosniff |
| Permissions Policy | ✔ Configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000; includeSubDomains
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ✔ nosniff
Permissions Policy ✔ Configured
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
Title WHO EMRO - Home
Detected Technologies
| Technology | Joomla Bootstrap jQuery Google Analytics Google Tag Manager Cloudflare PHP Node.js Stripe |
Technology Joomla Bootstrap jQuery Google Analytics Google Tag Manager Cloudflare PHP Node.js Stripe
HTTP Headers
| Date
| Tue, 28 Jul 2026 04:53:33 GMT |
| Content-type
| text/html; charset=utf-8 |
| Set-cookie
| b5426325c65d48b0abf3dd31f4360493=4ptk6potjrbh7kp8kl7oclp7r8; path=/; secure; HttpOnly |
| Expires
| Wed, 17 Aug 2005 00:00:00 GMT |
| Last-modified
| Tue, 28 Jul 2026 04:52:50 GMT |
| Cache-control
| no-cache |
| Pragma
| no-cache |
| Etag
| "02ad9a2301082715d1d28027f65744a3" |
| Content-encoding
| gzip |
| Vary
| Accept-Encoding |
| X-content-encoded-by
| Joomla |
| X-xss-protection
| 0 |
| X-server-powered-by
| Kontrol v4 |
| Content-security-policy
| default-src 'self' player.4am.ch; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.microsoftonline.com *.msidentity.com *.googletagmanager.com *.doubleclick.net *.stripe.com *.fundraiseup.com *.google.com connect.facebook.net blob: unpkg.com *.jotfor.ms viewer.diagrams.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com player.4am.ch unpkg.com *.jotfor.ms; font-src 'self' fonts.gstatic.com static.fundraiseup.com cdnjs.cloudflare.com data:; img-src 'self' *.fundraiseup.com ucarecdn.com *.emro.who.int *.googletagmanager.com *.doubleclick.net data:; connect-src 'self' *.microsoftonline.com *.msidentity.com *.fundraiseup.com fndrsp.net fndrsp-checkout.net *.google.com www.google-analytics.com dpm.demdex.net; frame-src 'self' *.stripe.com *.fundraiseup.com www.youtube.com pay.google.com player.4am.ch www.googletagmanager.com zoomarts.com www.slideshare.net; form-action 'self' login.microsoftonline.com |
| X-azure-ref
| 20260728T045333Z-er19f7f49476xqjdhC1PARc5280000000gv0000000006kdp |
| X-fd-int-roxy-purgeid
| 5 |
| X-cache
| TCP_MISS |
| Strict-transport-security
| max-age=31536000; includeSubDomains |
| X-content-type-options
| nosniff |
| Permissions-policy
| Permissions-Policy: payment=(self "https://js.stripe.com" "https://pay.google.com" "https://checkout.fundraiseup.com") |
Meta Tags
| Viewport | width=device-width, initial-scale=1, maximum-scale=1, user-scalable=yes |
| HandheldFriendly | true |
| Apple-mobile-web-app-capable | YES |
Date Tue, 28 Jul 2026 04:53:33 GMT
Content-type text/html; charset=utf-8
Set-cookie b5426325c65d48b0abf3dd31f4360493=4ptk6potjrbh7kp8kl7oclp7r8; path=/; secure; HttpOnly
Expires Wed, 17 Aug 2005 00:00:00 GMT
Last-modified Tue, 28 Jul 2026 04:52:50 GMT
Cache-control no-cache
Pragma no-cache
Etag "02ad9a2301082715d1d28027f65744a3"
Content-encoding gzip
Vary Accept-Encoding
X-content-encoded-by Joomla
X-xss-protection 0
X-server-powered-by Kontrol v4
Content-security-policy default-src 'self' player.4am.ch; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.microsoftonline.com *.msidentity.com *.googletagmanager.com *.doubleclick.net *.stripe.com *.fundraiseup.com *.google.com connect.facebook.net blob: unpkg.com *.jotfor.ms viewer.diagrams.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com player.4am.ch unpkg.com *.jotfor.ms; font-src 'self' fonts.gstatic.com static.fundraiseup.com cdnjs.cloudflare.com data:; img-src 'self' *.fundraiseup.com ucarecdn.com *.emro.who.int *.googletagmanager.com *.doubleclick.net data:; connect-src 'self' *.microsoftonline.com *.msidentity.com *.fundraiseup.com fndrsp.net fndrsp-checkout.net *.google.com www.google-analytics.com dpm.demdex.net; frame-src 'self' *.stripe.com *.fundraiseup.com www.youtube.com pay.google.com player.4am.ch www.googletagmanager.com zoomarts.com www.slideshare.net; form-action 'self' login.microsoftonline.com
X-azure-ref 20260728T045333Z-er19f7f49476xqjdhC1PARc5280000000gv0000000006kdp
X-fd-int-roxy-purgeid 5
X-cache TCP_MISS
Strict-transport-security max-age=31536000; includeSubDomains
X-content-type-options nosniff
Permissions-policy Permissions-Policy: payment=(self "https://js.stripe.com" "https://pay.google.com" "https://checkout.fundraiseup.com")
