Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 100.50.130.147 |
| Server Software | nginx |
| CDN | CDN (HIT) |
| Compression | gzip |
|
🔒 🟡 Mixed Content (16 HTTP resources) | The page is served over HTTPS but loads 16 resource(s) over HTTP. This may be blocked in modern browsers. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 100.50.130.147
Server Software nginx
CDN CDN (HIT)
Compression gzip
🔒 🟡 Mixed Content (16 HTTP resources) The page is served over HTTPS but loads 16 resource(s) over HTTP. This may be blocked in modern browsers.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://qxr.com:443 | 301 | HTTP/1.1 301 Moved Permanently |
| 2 | https://www.wqxr.org/ | 200 | HTTP/1.1 200 OK |
#1 URL https://qxr.com:443
HTTP Status Code 301
Status HTTP/1.1 301 Moved Permanently
#2 URL https://www.wqxr.org/
HTTP Status Code 200
Status HTTP/1.1 200 OK
Performance
| DNS Lookup | 28.9 ms |
| TCP Connect | 111.3 ms |
| TLS Handshake | 169.7 ms |
| Time To First Byte (TTFB) | 447.7 ms |
| Content Download | 83.9 ms |
| Total Response Time | 531.5 ms |
DNS Lookup 28.9 ms
TCP Connect 111.3 ms
TLS Handshake 169.7 ms
Time To First Byte (TTFB) 447.7 ms
Content Download 83.9 ms
Total Response Time 531.5 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31536000; includeSubdomains; |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ✔ nosniff |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000; includeSubdomains;
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ✔ nosniff
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
Detected Technologies
| Technology | Google Analytics Google Tag Manager Nginx Node.js Hotjar |
Technology Google Analytics Google Tag Manager Nginx Node.js Hotjar
HTTP Headers
| Accept-Ranges
| bytes |
| Access-Control-Allow-Credentials
| true |
| Access-Control-Allow-Headers
| Accept,Accept-Encoding,Authorization,Content-Type,DNT,Origin,User-Agent,X-CSRFToken,X-Provider,X-Requested-With,X-WNYC-BrowserId,X-WNYC-Ember |
| Access-Control-Allow-Methods
| GET, POST, PUT, DELETE, OPTIONS |
| Age
| 117 |
| Content-Encoding
| gzip |
| Content-Security-Policy
| default-src https: 'unsafe-inline' 'unsafe-eval'; connect-src 'unsafe-inline' 'unsafe-eval' *; script-src 'unsafe-inline' 'unsafe-eval' *; img-src * data: about:; frame-src 'self' *; worker-src blob:; object-src https://wnyc-project-prod.s3.amazonaws.com; frame-ancestors 'self' localhost *; media-src 'self' *; |
| Content-Type
| text/html; charset=utf-8 |
| Date
| Fri, 24 Jul 2026 00:35:52 GMT |
| Server
| nginx |
| Set-cookie
| ember_simple_auth-session=%7B%22authenticated%22%3A%7B%7D%7D; path=/ |
| Strict-Transport-Security
| max-age=31536000; includeSubdomains; |
| Vary
| Accept-Encoding, Origin, x-wnyc-ember |
| Via
| 1.1 varnish-v4 |
| X-Cache
| HIT |
| X-Cache-Hits
| 23 |
| X-Content-Type-Options
| nosniff |
| X-powered-by
| Express |
| X-Varnish
| 3449108 179362 |
| X-XSS-Protection
| 1; mode=block |
| Content-Length
| 68798 |
| Connection
| keep-alive |
Meta Tags
| X-UA-Compatible | IE=edge |
| Description | WQXR - New York Public Radio |
| Viewport | width=device-width,initial-scale=1 |
| Wqxr-web-client/config/environment | %7B%22modulePrefix%22%3A%22wqxr-web-client%22%2C%22environment%22%3A%22production%22%2C%22rootURL%22%3A%22%2F%22%2C%22locationType%22%3A%22trailing-history%22%2C%22historySupportMiddleware%22%3Atrue%2C%22emberHifi%22%3A%7B%22connections%22%3A%5B%7B%22name%22%3A%22NativeAudio%22%7D%5D%2C%22debug%22%3Afalse%7D%2C%22ember-cli-mirage%22%3A%7B%22autostart%22%3Atrue%2C%22usingProxy%22%3Atrue%2C%22useDefaultPassthroughs%22%3Atrue%7D%2C%22EmberENV%22%3A%7B%22FEATURES%22%3A%7B%7D%2C%22EXTEND_PROTOTYPES%22%3A%7B%22Date%22%3Afalse%7D%7D%2C%22APP%22%3A%7B%22name%22%3A%22wqxr-web-client%22%2C%22version%22%3A%22v3.1.39%2B64a345b4%22%7D%2C%22exportApplicationGlobal%22%3Atrue%2C%22QP_WHITELIST%22%3A%5B%22q%22%2C%22scheduleStation%22%2C%22next%22%2C%22n%22%5D%2C%22flashMessageDefaults%22%3A%7B%22preventDuplicates%22%3Atrue%2C%22timeout%22%3A10000%7D%2C%22queueAudioBumperURL%22%3A%22http%3A%2F%2Faudio.wnyc.org%2Fstreambumper%2Fstreambumper000008_audio_queue.mp3%22%2C%22siteSlug%22%3A%22wqxr%22%2C%22siteName%22%3A%22WQXR%22%2C%22siteId%22%3A2%2C%22clientSlug%22%3A%22wqxr_web%22%2C%22googleAPIv3Key%22%3A%22AIzaSyCDbxxvbl0Zj6af28IfWjJ-S0SKxwDXnkc%22%2C%22showsDiscoverStation%22%3A%22wqxr%22%2C%22showsAPIKey%22%3A%22symphony%22%2C%22moreShowsDiscoverStation%22%3A%22archived-shows%22%2C%22moreShowsAPIKey%22%3A%22mammoth%22%2C%22webRoot%22%3A%22%2F%2Fwww.wqxr.org%22%2C%22wQXRLegacy%22%3A%22https%3A%2F%2Fwqxr-legacy.prod.nypr.digital%22%2C%22adminRoot%22%3A%22https%3A%2F%2Finternal.wnyc.org%22%2C%22authAPI%22%3A%22https%3A%2F%2Fapi.wnyc.org%2Fauth%22%2C%22membershipAPI%22%3A%22https%3A%2F%2Fapi.wnyc.org%2Fmembership%22%2C%22etagAPI%22%3A%22https%3A%2F%2Fapi.wnyc.org%2Fapi%2Fv1%2Fbrowser_id%2F%22%2C%22publisherAPI%22%3A%22https%3A%2F%2Fapi.wnyc.org%2Fapi%22%2C%22platformEventsAPI%22%3A%22https%3A%2F%2Fapi.wnyc.org%2Fanalytics%22%2C%22wnycDonateURL%22%3A%22https%3A%2F%2Fpledge.wqxr.org%2Fsupport%2Fwqxr%3Futm_source%3Dwqxr%26utm_medium%3Dwqxr%26utm_campaign%3Ddonate-button%20%22%2C%22contentSecurityPolicy%22%3A%7B%22connect-src%22%3A%22 |
| Keywords | npr, new york, WQXR, WNYC, arts, culture, classical, music, news, public, radio |
| Fb:app_id | 110716008996381 |
| Fb:pages | 151157061731 |
Accept-Ranges bytes
Access-Control-Allow-Credentials true
Access-Control-Allow-Headers Accept,Accept-Encoding,Authorization,Content-Type,DNT,Origin,User-Agent,X-CSRFToken,X-Provider,X-Requested-With,X-WNYC-BrowserId,X-WNYC-Ember
Access-Control-Allow-Methods GET, POST, PUT, DELETE, OPTIONS
Age 117
Content-Encoding gzip
Content-Security-Policy default-src https: 'unsafe-inline' 'unsafe-eval'; connect-src 'unsafe-inline' 'unsafe-eval' *; script-src 'unsafe-inline' 'unsafe-eval' *; img-src * data: about:; frame-src 'self' *; worker-src blob:; object-src https://wnyc-project-prod.s3.amazonaws.com; frame-ancestors 'self' localhost *; media-src 'self' *;
Content-Type text/html; charset=utf-8
Date Fri, 24 Jul 2026 00:35:52 GMT
Server nginx
Set-cookie ember_simple_auth-session=%7B%22authenticated%22%3A%7B%7D%7D; path=/
Strict-Transport-Security max-age=31536000; includeSubdomains;
Vary Accept-Encoding, Origin, x-wnyc-ember
Via 1.1 varnish-v4
X-Cache HIT
X-Cache-Hits 23
X-Content-Type-Options nosniff
X-powered-by Express
X-Varnish 3449108 179362
X-XSS-Protection 1; mode=block
Content-Length 68798
Connection keep-alive
