Información Técnica
| Código de estado HTTP | 200 |
| Versión HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Dirección IP | 150.171.110.117 |
| CDN | CDN (TCP_MISS) |
| Compresión | gzip |
|
🔒 🟡 Mixed Content (1 recursos HTTP) | La página se sirve por HTTPS pero carga 1 recurso(s) por HTTP. Esto puede bloquearse en navegadores modernos. |
|
ℹ 🔵 Falta X-Frame-Options | El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking). |
Código de estado HTTP 200
Versión HTTP HTTP/1.1
HTTPS ✔ Disponible
Dirección IP 150.171.110.117
CDN CDN (TCP_MISS)
Compresión gzip
🔒 🟡 Mixed Content (1 recursos HTTP) La página se sirve por HTTPS pero carga 1 recurso(s) por HTTP. Esto puede bloquearse en navegadores modernos.
ℹ 🔵 Falta X-Frame-Options El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking).
Rendimiento
| Resolución DNS | 151.4 ms |
| Conexión TCP | 152.5 ms |
| Negociación TLS | 8.4 ms |
| Tiempo hasta el primer byte (TTFB) | 304.8 ms |
| Descarga de contenido | 0.4 ms |
| Tiempo total de respuesta | 305.3 ms |
Resolución DNS 151.4 ms
Conexión TCP 152.5 ms
Negociación TLS 8.4 ms
Tiempo hasta el primer byte (TTFB) 304.8 ms
Descarga de contenido 0.4 ms
Tiempo total de respuesta 305.3 ms
Seguridad
| HTTPS | ✔ Activado |
| HSTS | ✔ max-age=31536000; includeSubDomains |
| CSP | ✔ Configurado |
| X-Frame-Options | ⚠ No configurado |
| X-Content-Type-Options | ✔ nosniff |
| Política de Permisos | ✔ Configurado |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activado
HSTS ✔ max-age=31536000; includeSubDomains
CSP ✔ Configurado
X-Frame-Options ⚠ No configurado
X-Content-Type-Options ✔ nosniff
Política de Permisos ✔ Configurado
HTTP/2 ⚠ HTTP/1.1
Comprobación SEO
Título WHO EMRO - Home
Tecnologías Detectadas
| Tecnología | Joomla Bootstrap jQuery Google Analytics Google Tag Manager Cloudflare PHP Node.js Stripe |
Tecnología Joomla Bootstrap jQuery Google Analytics Google Tag Manager Cloudflare PHP Node.js Stripe
Cabeceras HTTP
| Date
| Tue, 28 Jul 2026 10:01:15 GMT |
| Content-type
| text/html; charset=utf-8 |
| Set-cookie
| b5426325c65d48b0abf3dd31f4360493=02m1k6q9248b9mmea6hepacl3i; path=/; secure; HttpOnly |
| Expires
| Wed, 17 Aug 2005 00:00:00 GMT |
| Last-modified
| Tue, 28 Jul 2026 10:00:25 GMT |
| Cache-control
| no-cache |
| Pragma
| no-cache |
| Etag
| "02ad9a2301082715d1d28027f65744a3" |
| Content-encoding
| gzip |
| Vary
| Accept-Encoding |
| X-content-encoded-by
| Joomla |
| X-xss-protection
| 0 |
| X-server-powered-by
| Kontrol v4 |
| Content-security-policy
| default-src 'self' player.4am.ch; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.microsoftonline.com *.msidentity.com *.googletagmanager.com *.doubleclick.net *.stripe.com *.fundraiseup.com *.google.com connect.facebook.net blob: unpkg.com *.jotfor.ms viewer.diagrams.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com player.4am.ch unpkg.com *.jotfor.ms; font-src 'self' fonts.gstatic.com static.fundraiseup.com cdnjs.cloudflare.com data:; img-src 'self' *.fundraiseup.com ucarecdn.com *.emro.who.int *.googletagmanager.com *.doubleclick.net data:; connect-src 'self' *.microsoftonline.com *.msidentity.com *.fundraiseup.com fndrsp.net fndrsp-checkout.net *.google.com www.google-analytics.com dpm.demdex.net; frame-src 'self' *.stripe.com *.fundraiseup.com www.youtube.com pay.google.com player.4am.ch www.googletagmanager.com zoomarts.com www.slideshare.net; form-action 'self' login.microsoftonline.com |
| X-azure-ref
| 20260728T100115Z-er19f7f49476z576hC1PARehbn0000000hz000000000wcsv |
| X-fd-int-roxy-purgeid
| 5 |
| X-cache
| TCP_MISS |
| Strict-transport-security
| max-age=31536000; includeSubDomains |
| X-content-type-options
| nosniff |
| Permissions-policy
| Permissions-Policy: payment=(self "https://js.stripe.com" "https://pay.google.com" "https://checkout.fundraiseup.com") |
Meta Tags
| Viewport | width=device-width, initial-scale=1, maximum-scale=1, user-scalable=yes |
| HandheldFriendly | true |
| Apple-mobile-web-app-capable | YES |
Date Tue, 28 Jul 2026 10:01:15 GMT
Content-type text/html; charset=utf-8
Set-cookie b5426325c65d48b0abf3dd31f4360493=02m1k6q9248b9mmea6hepacl3i; path=/; secure; HttpOnly
Expires Wed, 17 Aug 2005 00:00:00 GMT
Last-modified Tue, 28 Jul 2026 10:00:25 GMT
Cache-control no-cache
Pragma no-cache
Etag "02ad9a2301082715d1d28027f65744a3"
Content-encoding gzip
Vary Accept-Encoding
X-content-encoded-by Joomla
X-xss-protection 0
X-server-powered-by Kontrol v4
Content-security-policy default-src 'self' player.4am.ch; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.microsoftonline.com *.msidentity.com *.googletagmanager.com *.doubleclick.net *.stripe.com *.fundraiseup.com *.google.com connect.facebook.net blob: unpkg.com *.jotfor.ms viewer.diagrams.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com player.4am.ch unpkg.com *.jotfor.ms; font-src 'self' fonts.gstatic.com static.fundraiseup.com cdnjs.cloudflare.com data:; img-src 'self' *.fundraiseup.com ucarecdn.com *.emro.who.int *.googletagmanager.com *.doubleclick.net data:; connect-src 'self' *.microsoftonline.com *.msidentity.com *.fundraiseup.com fndrsp.net fndrsp-checkout.net *.google.com www.google-analytics.com dpm.demdex.net; frame-src 'self' *.stripe.com *.fundraiseup.com www.youtube.com pay.google.com player.4am.ch www.googletagmanager.com zoomarts.com www.slideshare.net; form-action 'self' login.microsoftonline.com
X-azure-ref 20260728T100115Z-er19f7f49476z576hC1PARehbn0000000hz000000000wcsv
X-fd-int-roxy-purgeid 5
X-cache TCP_MISS
Strict-transport-security max-age=31536000; includeSubDomains
X-content-type-options nosniff
Permissions-policy Permissions-Policy: payment=(self "https://js.stripe.com" "https://pay.google.com" "https://checkout.fundraiseup.com")
