Información Técnica
| Código de estado HTTP | 200 |
| Versión HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Dirección IP | 18.244.28.105 |
| CDN | CDN (Miss from cloudfront) |
| Compresión | gzip |
|
ℹ 🔵 Falta Content Security Policy | No se ha configurado CSP. Ayuda a prevenir ataques XSS e inyección de contenido. |
Código de estado HTTP 200
Versión HTTP HTTP/1.1
HTTPS ✔ Disponible
Dirección IP 18.244.28.105
CDN CDN (Miss from cloudfront)
Compresión gzip
ℹ 🔵 Falta Content Security Policy No se ha configurado CSP. Ayuda a prevenir ataques XSS e inyección de contenido.
Rendimiento
| Resolución DNS | 21.8 ms |
| Conexión TCP | 22.6 ms |
| Negociación TLS | 5.8 ms |
| Tiempo hasta el primer byte (TTFB) | 507 ms |
| Descarga de contenido | 81.9 ms |
| Tiempo total de respuesta | 589 ms |
Resolución DNS 21.8 ms
Conexión TCP 22.6 ms
Negociación TLS 5.8 ms
Tiempo hasta el primer byte (TTFB) 507 ms
Descarga de contenido 81.9 ms
Tiempo total de respuesta 589 ms
Seguridad
| HTTPS | ✔ Activado |
| HSTS | ✔ max-age=31536000; includeSubDomains; preload |
| CSP | ⚠ No configurado |
| X-Frame-Options | ✔ SAMEORIGIN |
| X-Content-Type-Options | ✔ nosniff |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activado
HSTS ✔ max-age=31536000; includeSubDomains; preload
CSP ⚠ No configurado
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
HTTP/2 ⚠ HTTP/1.1
Tecnologías Detectadas
| Tecnología | React Google Analytics Google Tag Manager Next.js |
Tecnología React Google Analytics Google Tag Manager Next.js
Cabeceras HTTP
| Content-type
| text/html; charset=utf-8 |
| Date
| Tue, 21 Jul 2026 04:52:15 GMT |
| Vary
| Accept-Encoding |
| Content-encoding
| gzip |
| X-trace-id
| f291f732-c656-4caa-be66-9e36bbfa18f5 |
| X-frame-options
| SAMEORIGIN |
| Content-security-policy-report-only
| default-src 'self';style-src 'self' 'unsafe-inline' *.googleapis.com;font-src 'self' data: *.googleapis.com *.gstatic.com *.youtube.com *.vimeo.com;script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.doubleclick.net *.googleapis.com *.adtrafficquality.google *.googletagmanager.com *.google-analytics.com *.pendo.io *.google.com *.gstatic.com *.kaltura.com *.kaltura.net *.zoom.us zoom.us *.js.ubembed.com assets.ubembed.com zendesk.com *.zendesk.com *.stripe.com static.zdassets.com *.sentry.io *.linkedin.com *.scriptintel.io;connect-src 'self' *.google-analytics.com *.google.com *.analytics.google.com *.doubleclick.net *.pendo.io *.kaltura.com *.sentry.io *.kaltura.net *.googlesyndication.com *.adtrafficquality.google wss://tsock.us1.twilio.com/v3/wsconnect wss://*.zoom.us *.cloudfront.net *.zoom.us;frame-src 'self' *.twilio.com *.doubleclick.net *.vimeo.com *.youtube.com *.kaltura.com *.kaltura.net *.pendo.io *.googletagmanager.com *.googlesyndication.com *.google *.google.com kitaboo.firsthand.co *.stripe.com static.zdassets.com;frame-ancestors 'none';img-src 'self' data: blob: https:;media-src 'self' data: blob: *.youtube.com *.vimeo.com *.kaltura.com *.kaltura.net;worker-src 'self' blob:;report-uri /api/csp-report |
| Strict-transport-security
| max-age=31536000; includeSubDomains; preload |
| X-content-type-options
| nosniff |
| X-xss-protection
| 1 |
| Set-cookie
| PHPSESSID=3da7287e217b2f51f2c6100d44d35d4d; Path=/; Expires=Thu, 20 Aug 2026 04:52:15 GMT; HttpOnly; Secure; SameSite=Lax |
| Cache-control
| private, no-cache, no-store, max-age=0, must-revalidate |
| Etag
| "10x8z1q8fgc1icr" |
| X-cache
| Miss from cloudfront |
| Via
| 1.1 9d9d26d9703b4c6c3675b4a7241fe21e.cloudfront.net (CloudFront) |
| X-amz-cf-pop
| CDG52-P5 |
| Alt-svc
| h3=":443"; ma=86400 |
| X-amz-cf-id
| -BbztFGhyksTY82RGPmcUKbKN7Ep5S4c30rKdt7eyHU-UCMTz6jU8w== |
Meta Tags
| Viewport | width=device-width |
| Robots | max-image-preview:large |
| Sentry-trace | 3021d478dc796edf5ff3416749ff7394-8fddfe0183fa81f9-0 |
| Baggage | sentry-environment=production,sentry-public_key=ed813cfcfb0740d1850e6f5e795ea89d,sentry-trace_id=3021d478dc796edf5ff3416749ff7394,sentry-org_id=33799,sentry-sampled=false,sentry-sample_rand=0.21005620238798617,sentry-sample_rate=0.1 |
Content-type text/html; charset=utf-8
Date Tue, 21 Jul 2026 04:52:15 GMT
Vary Accept-Encoding
Content-encoding gzip
X-trace-id f291f732-c656-4caa-be66-9e36bbfa18f5
X-frame-options SAMEORIGIN
Content-security-policy-report-only default-src 'self';style-src 'self' 'unsafe-inline' *.googleapis.com;font-src 'self' data: *.googleapis.com *.gstatic.com *.youtube.com *.vimeo.com;script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.doubleclick.net *.googleapis.com *.adtrafficquality.google *.googletagmanager.com *.google-analytics.com *.pendo.io *.google.com *.gstatic.com *.kaltura.com *.kaltura.net *.zoom.us zoom.us *.js.ubembed.com assets.ubembed.com zendesk.com *.zendesk.com *.stripe.com static.zdassets.com *.sentry.io *.linkedin.com *.scriptintel.io;connect-src 'self' *.google-analytics.com *.google.com *.analytics.google.com *.doubleclick.net *.pendo.io *.kaltura.com *.sentry.io *.kaltura.net *.googlesyndication.com *.adtrafficquality.google wss://tsock.us1.twilio.com/v3/wsconnect wss://*.zoom.us *.cloudfront.net *.zoom.us;frame-src 'self' *.twilio.com *.doubleclick.net *.vimeo.com *.youtube.com *.kaltura.com *.kaltura.net *.pendo.io *.googletagmanager.com *.googlesyndication.com *.google *.google.com kitaboo.firsthand.co *.stripe.com static.zdassets.com;frame-ancestors 'none';img-src 'self' data: blob: https:;media-src 'self' data: blob: *.youtube.com *.vimeo.com *.kaltura.com *.kaltura.net;worker-src 'self' blob:;report-uri /api/csp-report
Strict-transport-security max-age=31536000; includeSubDomains; preload
X-content-type-options nosniff
X-xss-protection 1
Set-cookie PHPSESSID=3da7287e217b2f51f2c6100d44d35d4d; Path=/; Expires=Thu, 20 Aug 2026 04:52:15 GMT; HttpOnly; Secure; SameSite=Lax
Cache-control private, no-cache, no-store, max-age=0, must-revalidate
Etag "10x8z1q8fgc1icr"
X-cache Miss from cloudfront
Via 1.1 9d9d26d9703b4c6c3675b4a7241fe21e.cloudfront.net (CloudFront)
X-amz-cf-pop CDG52-P5
Alt-svc h3=":443"; ma=86400
X-amz-cf-id -BbztFGhyksTY82RGPmcUKbKN7Ep5S4c30rKdt7eyHU-UCMTz6jU8w==
