icrc.org | Analytics by SecurityHeaders

HTTP Headers report for icrc.org

Header Name Header Data
HTTP status code 200
X-Xss-Protection 1; mode=block
X-Azure-Ref 20250418T050832Z-16b49dc5d6dt65kxhC1AMSyten00000006f0000000003yx6
X-Frame-Options SAMEORIGIN
Last-Modified Fri, 18 Apr 2025 02:44:03 GMT
Date Fri, 18 Apr 2025 05:08:32 GMT
Link </en/rss/general>; rel="alternate"; type="application/rss+xml"; title="General RSS feed"
X-Generator Drupal 10 (https://www.drupal.org)
X-Cache TCP_HIT
Cache-Control max-age=1800, public
Strict-Transport-Security max-age=31536000; includeSubDomains; preload
Connection keep-alive
Content-Language en
Etag W/"1744944243"
Content-Security-Policy-Report-Only default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.icrc.org www.gstatic.com www.googletagmanager.com www.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net *.youtube.com *.vimeo.com *.vimeocdn.com js.hs-analytics.net *.hs-scripts.com *.hs-banner.com js.hsleadflows.net *.facebook.net *.bing.com *.getblue.io *.adnxs.com js.usemessages.com js.hsadspixel.net *.googlesyndication.com *.ads-twitter.com *.cloudflare.com *.licdn.com hcaptcha.com api.mapbox.com unpkg.com *.hubspot.com *.usercentrics.eu ; object-src 'none'; style-src 'self' 'unsafe-inline' fonts.googleapis.com api.mapbox.com web.cmp.usercentrics.eu app.usercentrics.eu; frame-src 'self' *.youtube.com *.vimeo.com *.youku.com *.getblue.io www.googletagmanager.com *.hcaptcha.com td.doubleclick.net *.usercentrics.eu ; frame-ancestors 'self'; child-src 'self'; font-src 'self' fonts.gstatic.com fonts.gstatic.com; connect-src 'self' *.icrc.org *.linkedin.com *.hubspot.com *.bing.com api.hubapi.com *.google-analytics.com *.googlesyndication.com *.google.com google-analytics.com bat.bing.net *.adnxs.com *.hcaptcha.com *.mapbox.com *.arcgis.com *.usercentrics.eu ; report-uri /report-csp-violation; upgrade-insecure-requests
Content-Type text/html; charset=UTF-8
X-Drupal-Dynamic-Cache MISS
Referrer-Policy origin
X-Content-Type-Options nosniff
Expires Sun, 19 Nov 1978 05:00:00 GMT
X-Fd-Int-Roxy-Purgeid 1556
Vary Accept-Encoding
X-Drupal-Cache HIT

About the tool

By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.

This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.

We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.

Watch it now at TrustRadar