Información Técnica
| Código de estado HTTP | 200 |
| Versión HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Dirección IP | 52.228.84.34 |
| CDN | CDN (TCP_REMOTE_HIT) |
| Compresión | gzip |
|
🔒 🟡 Mixed Content (1 recursos HTTP) | La página se sirve por HTTPS pero carga 1 recurso(s) por HTTP. Esto puede bloquearse en navegadores modernos. |
Código de estado HTTP 200
Versión HTTP HTTP/1.1
HTTPS ✔ Disponible
Dirección IP 52.228.84.34
CDN CDN (TCP_REMOTE_HIT)
Compresión gzip
🔒 🟡 Mixed Content (1 recursos HTTP) La página se sirve por HTTPS pero carga 1 recurso(s) por HTTP. Esto puede bloquearse en navegadores modernos.
Cadena de Redirecciones
| # | URL | Código de estado HTTP | Estado |
| 1 | https://worksafebc.com:443 | 301 | HTTP/2 301 |
| 2 | https://www.worksafebc.com/ | 302 | HTTP/2 302 |
| 3 | https://www.worksafebc.com/en | 200 | HTTP/2 200 |
#1 URL https://worksafebc.com:443
Código de estado HTTP 301
Estado HTTP/2 301
#2 URL https://www.worksafebc.com/
Código de estado HTTP 302
Estado HTTP/2 302
#3 URL https://www.worksafebc.com/en
Código de estado HTTP 200
Estado HTTP/2 200
Rendimiento
| Resolución DNS | 4.1 ms |
| Conexión TCP | 5.7 ms |
| Negociación TLS | 6.2 ms |
| Tiempo hasta el primer byte (TTFB) | 21 ms |
| Descarga de contenido | 0.3 ms |
| Tiempo total de respuesta | 21.3 ms |
Resolución DNS 4.1 ms
Conexión TCP 5.7 ms
Negociación TLS 6.2 ms
Tiempo hasta el primer byte (TTFB) 21 ms
Descarga de contenido 0.3 ms
Tiempo total de respuesta 21.3 ms
Seguridad
| HTTPS | ✔ Activado |
| HSTS | ✔ max-age=31536000; includeSubDomains |
| CSP | ✔ Configurado |
| X-Frame-Options | ✔ SAMEORIGIN |
| X-Content-Type-Options | ✔ nosniff |
| Política de Referrer | strict-origin-when-cross-origin |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activado
HSTS ✔ max-age=31536000; includeSubDomains
CSP ✔ Configurado
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
Política de Referrer strict-origin-when-cross-origin
HTTP/2 ⚠ HTTP/1.1
Comprobación SEO
Título WorkSafeBC
Tecnologías Detectadas
| Tecnología | Bootstrap jQuery Google Analytics Google Tag Manager |
Tecnología Bootstrap jQuery Google Analytics Google Tag Manager
Cabeceras HTTP
| Date
| Thu, 23 Jul 2026 01:18:10 GMT |
| Content-type
| text/html; charset=utf-8 |
| Vary
| Accept-Encoding |
| Cache-control
| public, s-max-age=86400, max-age=300 |
| Strict-transport-security
| max-age=31536000; includeSubDomains |
| X-frame-options
| SAMEORIGIN |
| X-content-type-options
| nosniff |
| Content-security-policy
| default-src 'self' https://as-wsbcprodcd-01.azurewebsites.net https://as-wsbcprodcd-02.azurewebsites.net *.addthis.com; frame-src 'self' https://www.googletagmanager.com https://services.worksafebc.com https://td.doubleclick.net *.qualtrics.com https://documentservices.adobe.com https://web.powerva.microsoft.com https://ct.pinterest.com *.fls.doubleclick.net *.svc.dynamics.com *.addthis.com *.addthisedge.com *.youtube.com https://i.ytimg.com *.google.com *.facebook.com https://app.powerbi.com https://worksafebcmedia.com; frame-ancestors 'self' *.youtube.com; img-src 'self' data: https://ad.doubleclick.net https://analytics.google.com https://sp.analytics.yahoo.com https://googleads.g.doubleclick.net https://www.linkedin.com *.azureedge.net *.mkt.dynamics.com *.siteimproveanalytics.io https://services.worksafebc.com https://ct.pinterest.com https://p.adsymptotic.com https://px.ads.linkedin.com *.google-analytics.com *.analytics.google.com https://gtrk.s3.amazonaws.com *.caspio.com https://stats.g.doubleclick.net *.gstatic.com www.google.com www.google.ca www.facebook.com https://s.analytics.yahoo.com https://img.youtube.com https://i.ytimg.com https://www.googletagmanager.com; child-src 'self' data: *.youtube.com *.google.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://www.googleadservices.com https://ct.pinterest.com *.azureedge.net *.mkt.dynamics.com *.qualtrics.com https://siteimproveanalytics.com https://www.youtube.com/s/ https://s.ytimg.com https://s.yimg.com https://www.youtube.com/iframe_api *.caspio.com https://tags.srv.stackadapt.com https://s.pinimg.com https://mktdplp102cdn.azureedge.net https://documentservices.adobe.com https://snap.licdn.com https://cdn.botframework.com *.reddit.com *.linkedin.com *.facebook.com connect.facebook.net *.addthis.com *.addthisedge.com https://tagmanager.google.com *.googletagmanager.com *.googleapis.com *.google-analytics.com *.gstatic.com *.google.com *.google.ca https://dnn506yrbagrg.cloudfront.net https://s3.amazonaws.com z.moatads.com; style-src 'self' 'unsafe-inline' https://tags.srv.stackadapt.com https://tagmanager.google.com *.googleapis.com *.caspio.com; form-action 'self' *.qualtrics.com *.caspio.com https://www.facebook.com; connect-src 'self' https://powerva.microsoft.com https://www.google.com https://adservice.google.com http://localhost:7097 *.azureedge.net *.mkt.dynamics.com *.qualtrics.com https://as-wsbcdevajax-01.azurewebsites.net https://s.yimg.com https://as-wsbctestajax-01.azurewebsites.net https://af-wsbc-prod-ajaxgateway.azurewebsites.net https://gateway.worksafebc.com *.facebook.com https://cdn.linkedin.oribi.io *.caspio.com https://services.worksafebc.com https://tags.srv.stackadapt.com https://ct.pinterest.com https://www.google.ca/ads/ga-audiences *.addthis.com *.google-analytics.com *.analytics.google.com *.svc.dynamics.com https://viewlicense.adobe.io https://stats.g.doubleclick.net https://analytics.google.com *.doubleclick.net wss://directline.botframework.com https://directline.botframework.com https://px.ads.linkedin.com; block-all-mixed-content; |
| X-permitted-cross-domain-policies
| none |
| X-xss-protection
| 1 |
| Referrer-policy
| strict-origin-when-cross-origin |
| Feature-policy
| autoplay 'none'; camera 'none'; encrypted-media 'none'; fullscreen *; geolocation *; microphone 'none'; midi 'none'; payment 'none'; vr 'none'; |
| X-azure-ref
| 20260723T011810Z-178b5db9ddc848s2hC1PAR6fbs0000001ae000000000190u |
| X-fd-int-roxy-purgeid
| 87403918 |
| X-cache-info
| L2_T2 |
| X-cache
| TCP_REMOTE_HIT |
| Content-encoding
| gzip |
Meta Tags
| X-UA-Compatible | IE=edge |
| Viewport | width=device-width, initial-scale=1 |
| Generator | Sitecore |
| Format-detection | telephone=no |
Date Thu, 23 Jul 2026 01:18:10 GMT
Content-type text/html; charset=utf-8
Vary Accept-Encoding
Cache-control public, s-max-age=86400, max-age=300
Strict-transport-security max-age=31536000; includeSubDomains
X-frame-options SAMEORIGIN
X-content-type-options nosniff
Content-security-policy default-src 'self' https://as-wsbcprodcd-01.azurewebsites.net https://as-wsbcprodcd-02.azurewebsites.net *.addthis.com; frame-src 'self' https://www.googletagmanager.com https://services.worksafebc.com https://td.doubleclick.net *.qualtrics.com https://documentservices.adobe.com https://web.powerva.microsoft.com https://ct.pinterest.com *.fls.doubleclick.net *.svc.dynamics.com *.addthis.com *.addthisedge.com *.youtube.com https://i.ytimg.com *.google.com *.facebook.com https://app.powerbi.com https://worksafebcmedia.com; frame-ancestors 'self' *.youtube.com; img-src 'self' data: https://ad.doubleclick.net https://analytics.google.com https://sp.analytics.yahoo.com https://googleads.g.doubleclick.net https://www.linkedin.com *.azureedge.net *.mkt.dynamics.com *.siteimproveanalytics.io https://services.worksafebc.com https://ct.pinterest.com https://p.adsymptotic.com https://px.ads.linkedin.com *.google-analytics.com *.analytics.google.com https://gtrk.s3.amazonaws.com *.caspio.com https://stats.g.doubleclick.net *.gstatic.com www.google.com www.google.ca www.facebook.com https://s.analytics.yahoo.com https://img.youtube.com https://i.ytimg.com https://www.googletagmanager.com; child-src 'self' data: *.youtube.com *.google.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://www.googleadservices.com https://ct.pinterest.com *.azureedge.net *.mkt.dynamics.com *.qualtrics.com https://siteimproveanalytics.com https://www.youtube.com/s/ https://s.ytimg.com https://s.yimg.com https://www.youtube.com/iframe_api *.caspio.com https://tags.srv.stackadapt.com https://s.pinimg.com https://mktdplp102cdn.azureedge.net https://documentservices.adobe.com https://snap.licdn.com https://cdn.botframework.com *.reddit.com *.linkedin.com *.facebook.com connect.facebook.net *.addthis.com *.addthisedge.com https://tagmanager.google.com *.googletagmanager.com *.googleapis.com *.google-analytics.com *.gstatic.com *.google.com *.google.ca https://dnn506yrbagrg.cloudfront.net https://s3.amazonaws.com z.moatads.com; style-src 'self' 'unsafe-inline' https://tags.srv.stackadapt.com https://tagmanager.google.com *.googleapis.com *.caspio.com; form-action 'self' *.qualtrics.com *.caspio.com https://www.facebook.com; connect-src 'self' https://powerva.microsoft.com https://www.google.com https://adservice.google.com http://localhost:7097 *.azureedge.net *.mkt.dynamics.com *.qualtrics.com https://as-wsbcdevajax-01.azurewebsites.net https://s.yimg.com https://as-wsbctestajax-01.azurewebsites.net https://af-wsbc-prod-ajaxgateway.azurewebsites.net https://gateway.worksafebc.com *.facebook.com https://cdn.linkedin.oribi.io *.caspio.com https://services.worksafebc.com https://tags.srv.stackadapt.com https://ct.pinterest.com https://www.google.ca/ads/ga-audiences *.addthis.com *.google-analytics.com *.analytics.google.com *.svc.dynamics.com https://viewlicense.adobe.io https://stats.g.doubleclick.net https://analytics.google.com *.doubleclick.net wss://directline.botframework.com https://directline.botframework.com https://px.ads.linkedin.com; block-all-mixed-content;
X-permitted-cross-domain-policies none
X-xss-protection 1
Referrer-policy strict-origin-when-cross-origin
Feature-policy autoplay 'none'; camera 'none'; encrypted-media 'none'; fullscreen *; geolocation *; microphone 'none'; midi 'none'; payment 'none'; vr 'none';
X-azure-ref 20260723T011810Z-178b5db9ddc848s2hC1PAR6fbs0000001ae000000000190u
X-fd-int-roxy-purgeid 87403918
X-cache-info L2_T2
X-cache TCP_REMOTE_HIT
Content-encoding gzip
