wfp.org

.org toplist crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 2649 ms crawled 2026-05-18

IE · 34.243.83.35 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
UN World Food Programme (WFP)
Description
We are the world’s largest humanitarian organization, saving lives in emergencies and using food assistance to build a pathway to peace, stability and prosperity for people recovering from conflict, disasters and the impact of climate change.
Language
en
Generator
WFP CMS
Canonical
https://www.wfp.org/
Translations
  • ar
  • de
  • en
  • es
  • fa
  • fr
  • it
  • ja
  • ko
  • zh-hans

Open Graph

title
UN World Food Programme (WFP)
description
We are the world’s largest humanitarian organization, saving lives in emergencies and using food assistance to build a pathway to peace, stability and prosperity for people recovering from conflict, disasters and the impact of climate change.

Technology

Server
Apache
CMS
Drupal
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts

Third-party hosts loaded (3)

  • fonts.googleapis.com×2
  • fonts.gstatic.com×1
  • www.googletagmanager.com×1

Social

Registration

Registrar
Amazon Registrar, Inc.
Created
1994-10-06
Expires
2026-10-05 139 days left
Updated
2026-05-05
Name servers
  • ns-1160.awsdns-17.org
  • ns-1636.awsdns-12.co.uk
  • ns-232.awsdns-29.com
  • ns-799.awsdns-35.net

DNS records live

NS
  • ns-1160.awsdns-17.org
  • ns-1636.awsdns-12.co.uk
  • ns-232.awsdns-29.com
  • ns-799.awsdns-35.net
MX
  • 5 wfp-org.mail.protection.outlook.com
TXT
Show 11 TXT records
  • pexip-ms-tenant-domain-verification=a73e99ad-4889-49d6-b7dc-168e9f24fc86
  • slack-domain-verification=SbRERE2PMV0k884zZqsgKRQWkojbrLlxjjhxsy5Z
  • CisionOne SAML=47853f22216c5dcac6bcbab490420c185591ee2b6f099ffd6c83b8d355a6f299
  • E/2JYshht83MCxyJK+qr4VPRvmVoUUEDT13YB1B64on/bGbxy6wg1ZFRlBYc0X0+IwdUuFK8n7b2gg310rNkMQ==
  • MS=ms94975635
  • atlassian-domain-verification=aUsw8AKVGgofrZwtQMacjhPK0LtLZvqGkjT4cfjSUKYlX3aFO2VWNquvr4dpK3IQ
  • canva-site-verification=0g0R_pwIyvO3mWxIomp-KA
  • docusign=067086f7-2298-4d93-b7cb-39863515f515
  • google-site-verification=Qp-w_gxWHI_MdKFJbR3jZ933JosZsG3rZ5rHGpexPnw
  • jamf-site-verification=DFvdPvj6MsvnyB4-lXsiGg
  • onetrust-domain-verification=bc00c1809bdf4da0ae8bb77749167419

Email authentication strong

SPF
v=spf1 include:_u.wfp.org._spf.smart.ondmarc.com ~all
softfail (~all)
DMARC
v=DMARC1; p=reject; pct=100; sp=reject; rua=mailto:30771c77@inbox.ondmarc.com,mailto:dmarc-agreports@wfp.org; ruf=mailto:30771c77@inbox.ondmarc.com,mailto:dmarc-aforeports@wfp.org; adkim=r; aspf=r; fo=1; rf=afrf; ri=3600
policy: reject (enforced) · sp=reject
DKIM
Show 5 DKIM selectors
  • selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD36xwTmz/6V/pNGaDuesN8NvvjKx2ajB0JaxqY43qld1meQ9KLvyjYuuJRpYSmLMh1O+nUNpW+qYSZ6T6eV2…
  • k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC0C1aWQmtW6AHs9QUORkYqK+JGVqH1/hPgt7NeTVhqjrDglnJ6JWcgPjBqO+KTQpyZxh3t4tw8+HiLjZ4sm1rTGMmkaMj…
  • k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAVO6Ux4I/Ic0nBnpV7gAZ70LkHKXNTjgtq/RW4olVsnn3n6RSZqQIyze8IcsNf4T96fbo16slB1X0NtkP…
  • s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxeNI6N5nqfW+p6ldo5QN6YQ1Kss54nBp2AD0+7WcQ/tsw47fj5fdixT/olsN4ZA+lGx0fTqyhJ1zOyXEiiv1mD8…
selectors probed

Certificate (current)

Amazon RSA 2048 M04
from 2026-04-02 to 2026-10-17
Expires in 151 days

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.wfp.org/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • short HSTS max-age
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Permissions Policy
Header values
referrer-policy
no-referrer-when-downgrade
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'self'; script-src 'self' analytics.tiktok.com wcs.naver.net *.spring.wfp.org cdn.wfp.org *.jwplatform.com www.google.com *.googletagmanager.com tagmanager.google.com *.google-analytics.com survey.g.doubleclick.net *.doubleclick.net *.adalyser.com *.jwpcdn.com www.gstatic.com adservice.google.com connect.facebook.net www.facebook.com squizlabs.github.io cdnjs.cloudflare.com unpkg.com cdn.sparkcentral.com *.smooch.io *.user1st.info www.googleadservices.com bat.bing.com sixeleven.involve.me assets.juicer.io *.typekit.net *.hotjar.com *.hotjar.io platform.twitter.com *.optimizely.com optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.onetrust.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.spring.wfp.org cdn.wfp.org tagmanager.google.com fonts.googleapis.com *.bootstrapcdn.com squizlabs.gith
strict-transport-security
max-age=2592000

Links to (8)

Linked from (29)