Información Técnica
| Código de estado HTTP | 200 |
| Versión HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Dirección IP | 3.209.76.62 |
| Software del servidor | nginx |
| CDN | CDN (MISS) |
| Compresión | gzip |
|
🔒 🟡 Mixed Content (16 recursos HTTP) | La página se sirve por HTTPS pero carga 16 recurso(s) por HTTP. Esto puede bloquearse en navegadores modernos. |
|
ℹ 🔵 Falta X-Frame-Options | El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking). |
Código de estado HTTP 200
Versión HTTP HTTP/1.1
HTTPS ✔ Disponible
Dirección IP 3.209.76.62
Software del servidor nginx
CDN CDN (MISS)
Compresión gzip
🔒 🟡 Mixed Content (16 recursos HTTP) La página se sirve por HTTPS pero carga 16 recurso(s) por HTTP. Esto puede bloquearse en navegadores modernos.
ℹ 🔵 Falta X-Frame-Options El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking).
Cadena de Redirecciones
| # | URL | Código de estado HTTP | Estado |
| 1 | https://qxr.com:443 | 301 | HTTP/1.1 301 Moved Permanently |
| 2 | https://www.wqxr.org/ | 200 | HTTP/1.1 200 OK |
#1 URL https://qxr.com:443
Código de estado HTTP 301
Estado HTTP/1.1 301 Moved Permanently
#2 URL https://www.wqxr.org/
Código de estado HTTP 200
Estado HTTP/1.1 200 OK
Rendimiento
| Resolución DNS | 17.7 ms |
| Conexión TCP | 100.4 ms |
| Negociación TLS | 168.8 ms |
| Tiempo hasta el primer byte (TTFB) | 726.3 ms |
| Descarga de contenido | 212 ms |
| Tiempo total de respuesta | 938.3 ms |
Resolución DNS 17.7 ms
Conexión TCP 100.4 ms
Negociación TLS 168.8 ms
Tiempo hasta el primer byte (TTFB) 726.3 ms
Descarga de contenido 212 ms
Tiempo total de respuesta 938.3 ms
Seguridad
| HTTPS | ✔ Activado |
| HSTS | ✔ max-age=31536000; includeSubdomains; |
| CSP | ✔ Configurado |
| X-Frame-Options | ⚠ No configurado |
| X-Content-Type-Options | ✔ nosniff |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activado
HSTS ✔ max-age=31536000; includeSubdomains;
CSP ✔ Configurado
X-Frame-Options ⚠ No configurado
X-Content-Type-Options ✔ nosniff
HTTP/2 ⚠ HTTP/1.1
Comprobación SEO
Tecnologías Detectadas
| Tecnología | Google Analytics Google Tag Manager Nginx Node.js Hotjar |
Tecnología Google Analytics Google Tag Manager Nginx Node.js Hotjar
Cabeceras HTTP
| Accept-Ranges
| bytes |
| Access-Control-Allow-Credentials
| true |
| Access-Control-Allow-Headers
| Accept,Accept-Encoding,Authorization,Content-Type,DNT,Origin,User-Agent,X-CSRFToken,X-Provider,X-Requested-With,X-WNYC-BrowserId,X-WNYC-Ember |
| Access-Control-Allow-Methods
| GET, POST, PUT, DELETE, OPTIONS |
| Age
| 0 |
| Content-Encoding
| gzip |
| Content-Security-Policy
| default-src https: 'unsafe-inline' 'unsafe-eval'; connect-src 'unsafe-inline' 'unsafe-eval' *; script-src 'unsafe-inline' 'unsafe-eval' *; img-src * data: about:; frame-src 'self' *; worker-src blob:; object-src https://wnyc-project-prod.s3.amazonaws.com; frame-ancestors 'self' localhost *; media-src 'self' *; |
| Content-Type
| text/html; charset=utf-8 |
| Date
| Thu, 23 Jul 2026 22:13:49 GMT |
| Server
| nginx |
| Set-cookie
| ember_simple_auth-session=%7B%22authenticated%22%3A%7B%7D%7D; path=/ |
| Strict-Transport-Security
| max-age=31536000; includeSubdomains; |
| Vary
| Accept-Encoding, Origin, x-wnyc-ember |
| Via
| 1.1 varnish-v4 |
| X-Cache
| MISS |
| X-Cacheable
| NO:Not cacheable |
| X-Content-Type-Options
| nosniff |
| X-powered-by
| Express |
| X-Varnish
| 2596052 |
| X-XSS-Protection
| 1; mode=block |
| Transfer-encoding
| chunked |
| Connection
| keep-alive |
Meta Tags
| X-UA-Compatible | IE=edge |
| Description | WQXR - New York Public Radio |
| Viewport | width=device-width,initial-scale=1 |
| Wqxr-web-client/config/environment | %7B%22modulePrefix%22%3A%22wqxr-web-client%22%2C%22environment%22%3A%22production%22%2C%22rootURL%22%3A%22%2F%22%2C%22locationType%22%3A%22trailing-history%22%2C%22historySupportMiddleware%22%3Atrue%2C%22emberHifi%22%3A%7B%22connections%22%3A%5B%7B%22name%22%3A%22NativeAudio%22%7D%5D%2C%22debug%22%3Afalse%7D%2C%22ember-cli-mirage%22%3A%7B%22autostart%22%3Atrue%2C%22usingProxy%22%3Atrue%2C%22useDefaultPassthroughs%22%3Atrue%7D%2C%22EmberENV%22%3A%7B%22FEATURES%22%3A%7B%7D%2C%22EXTEND_PROTOTYPES%22%3A%7B%22Date%22%3Afalse%7D%7D%2C%22APP%22%3A%7B%22name%22%3A%22wqxr-web-client%22%2C%22version%22%3A%22v3.1.39%2B64a345b4%22%7D%2C%22exportApplicationGlobal%22%3Atrue%2C%22QP_WHITELIST%22%3A%5B%22q%22%2C%22scheduleStation%22%2C%22next%22%2C%22n%22%5D%2C%22flashMessageDefaults%22%3A%7B%22preventDuplicates%22%3Atrue%2C%22timeout%22%3A10000%7D%2C%22queueAudioBumperURL%22%3A%22http%3A%2F%2Faudio.wnyc.org%2Fstreambumper%2Fstreambumper000008_audio_queue.mp3%22%2C%22siteSlug%22%3A%22wqxr%22%2C%22siteName%22%3A%22WQXR%22%2C%22siteId%22%3A2%2C%22clientSlug%22%3A%22wqxr_web%22%2C%22googleAPIv3Key%22%3A%22AIzaSyCDbxxvbl0Zj6af28IfWjJ-S0SKxwDXnkc%22%2C%22showsDiscoverStation%22%3A%22wqxr%22%2C%22showsAPIKey%22%3A%22symphony%22%2C%22moreShowsDiscoverStation%22%3A%22archived-shows%22%2C%22moreShowsAPIKey%22%3A%22mammoth%22%2C%22webRoot%22%3A%22%2F%2Fwww.wqxr.org%22%2C%22wQXRLegacy%22%3A%22https%3A%2F%2Fwqxr-legacy.prod.nypr.digital%22%2C%22adminRoot%22%3A%22https%3A%2F%2Finternal.wnyc.org%22%2C%22authAPI%22%3A%22https%3A%2F%2Fapi.wnyc.org%2Fauth%22%2C%22membershipAPI%22%3A%22https%3A%2F%2Fapi.wnyc.org%2Fmembership%22%2C%22etagAPI%22%3A%22https%3A%2F%2Fapi.wnyc.org%2Fapi%2Fv1%2Fbrowser_id%2F%22%2C%22publisherAPI%22%3A%22https%3A%2F%2Fapi.wnyc.org%2Fapi%22%2C%22platformEventsAPI%22%3A%22https%3A%2F%2Fapi.wnyc.org%2Fanalytics%22%2C%22wnycDonateURL%22%3A%22https%3A%2F%2Fpledge.wqxr.org%2Fsupport%2Fwqxr%3Futm_source%3Dwqxr%26utm_medium%3Dwqxr%26utm_campaign%3Ddonate-button%20%22%2C%22contentSecurityPolicy%22%3A%7B%22connect-src%22%3A%22 |
| Keywords | npr, new york, WQXR, WNYC, arts, culture, classical, music, news, public, radio |
| Fb:app_id | 110716008996381 |
| Fb:pages | 151157061731 |
Accept-Ranges bytes
Access-Control-Allow-Credentials true
Access-Control-Allow-Headers Accept,Accept-Encoding,Authorization,Content-Type,DNT,Origin,User-Agent,X-CSRFToken,X-Provider,X-Requested-With,X-WNYC-BrowserId,X-WNYC-Ember
Access-Control-Allow-Methods GET, POST, PUT, DELETE, OPTIONS
Age 0
Content-Encoding gzip
Content-Security-Policy default-src https: 'unsafe-inline' 'unsafe-eval'; connect-src 'unsafe-inline' 'unsafe-eval' *; script-src 'unsafe-inline' 'unsafe-eval' *; img-src * data: about:; frame-src 'self' *; worker-src blob:; object-src https://wnyc-project-prod.s3.amazonaws.com; frame-ancestors 'self' localhost *; media-src 'self' *;
Content-Type text/html; charset=utf-8
Date Thu, 23 Jul 2026 22:13:49 GMT
Server nginx
Set-cookie ember_simple_auth-session=%7B%22authenticated%22%3A%7B%7D%7D; path=/
Strict-Transport-Security max-age=31536000; includeSubdomains;
Vary Accept-Encoding, Origin, x-wnyc-ember
Via 1.1 varnish-v4
X-Cache MISS
X-Cacheable NO:Not cacheable
X-Content-Type-Options nosniff
X-powered-by Express
X-Varnish 2596052
X-XSS-Protection 1; mode=block
Transfer-encoding chunked
Connection keep-alive