Información Técnica
| Código de estado HTTP | 200 |
| Versión HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Dirección IP | 20.39.143.75 |
| Compresión | gzip |
|
🔒 🟡 Mixed Content (3 recursos HTTP) | La página se sirve por HTTPS pero carga 3 recurso(s) por HTTP. Esto puede bloquearse en navegadores modernos. |
|
ℹ 🔵 Falta X-Frame-Options | El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking). |
Código de estado HTTP 200
Versión HTTP HTTP/1.1
HTTPS ✔ Disponible
Dirección IP 20.39.143.75
Compresión gzip
🔒 🟡 Mixed Content (3 recursos HTTP) La página se sirve por HTTPS pero carga 3 recurso(s) por HTTP. Esto puede bloquearse en navegadores modernos.
ℹ 🔵 Falta X-Frame-Options El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking).
Cadena de Redirecciones
| # | URL | Código de estado HTTP | Estado |
| 1 | https://ttc.ca:443 | 301 | HTTP/1.1 301 Moved Permanently |
| 2 | https://www.ttc.ca/ | 200 | HTTP/1.1 200 OK |
#1 URL https://ttc.ca:443
Código de estado HTTP 301
Estado HTTP/1.1 301 Moved Permanently
#2 URL https://www.ttc.ca/
Código de estado HTTP 200
Estado HTTP/1.1 200 OK
Rendimiento
| Resolución DNS | 1.4 ms |
| Conexión TCP | 111.2 ms |
| Negociación TLS | 187.4 ms |
| Tiempo hasta el primer byte (TTFB) | 605.4 ms |
| Descarga de contenido | 1.1 ms |
| Tiempo total de respuesta | 606.5 ms |
Resolución DNS 1.4 ms
Conexión TCP 111.2 ms
Negociación TLS 187.4 ms
Tiempo hasta el primer byte (TTFB) 605.4 ms
Descarga de contenido 1.1 ms
Tiempo total de respuesta 606.5 ms
Seguridad
| HTTPS | ✔ Activado |
| HSTS | ✔ max-age=31536000; includeSubDomains; |
| CSP | ✔ Configurado |
| X-Frame-Options | ⚠ No configurado |
| X-Content-Type-Options | ✔ nosniff |
| Política de Referrer | no-referrer |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activado
HSTS ✔ max-age=31536000; includeSubDomains;
CSP ✔ Configurado
X-Frame-Options ⚠ No configurado
X-Content-Type-Options ✔ nosniff
Política de Referrer no-referrer
HTTP/2 ⚠ HTTP/1.1
Comprobación SEO
| Título | TTC.ca |
| Título Open Graph | TTC.ca |
| Twitter Card | summary_large_image |
| Título Twitter | TTC.ca |
Título TTC.ca
Título Open Graph TTC.ca
Twitter Card summary_large_image
Título Twitter TTC.ca
Tecnologías Detectadas
| Tecnología | Google Analytics Google Tag Manager |
Tecnología Google Analytics Google Tag Manager
Cabeceras HTTP
| Date
| Thu, 27 Aug 2026 11:20:30 GMT |
| Content-Type
| text/html; charset=utf-8 |
| Content-Length
| 32481 |
| Connection
| keep-alive |
| Cache-Control
| no-cache, no-store |
| Pragma
| no-cache |
| Content-Encoding
| gzip |
| Expires
| -1 |
| Vary
| Accept-Encoding |
| Access-Control-Allow-Origin
| * |
| Referrer-Policy
| no-referrer |
| Expect-CT
| max-age=3600, enforce |
| X-XSS-Protection
| 1; mode=block |
| X-Content-Type-Options
| nosniff |
| Content-Security-Policy
| default-src 'self' 'unsafe-inline' *.ttc.ca 'unsafe-eval' https://apps.sitecore.net *.azureedge.net; media-src 'self' data: ; img-src *.ttc.ca *.dmtry.com *.siteimproveanalytics.io *.researchnow.com 'self' data: *.ttc.ca *.azureedge.net *.google.com *.google.ca *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com siteimproveanalytics.io *.windows.net *.clarity.ms *.customsearch.ai *.bing.com *.cluepixel.com ; style-src 'self' 'unsafe-inline' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.windows.net *.clarity.ms *.customsearch.ai *.bing.com; font-src 'self' 'unsafe-inline' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.windows.net *.clarity.ms *.customsearch.ai *.bing.com; connect-src * ; frame-src 'self' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.triplinx.ca transitapp.com; script-src * 'self' data: 'unsafe-inline' 'unsafe-eval' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com ;upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'none'; object-src data: 'unsafe-eval' |
| Strict-Transport-Security
| max-age=31536000; includeSubDomains; |
Meta Tags
| Apple-mobile-web-app-title | TTC.ca |
| Viewport | width=device-width, initial-scale=1 |
Date Thu, 27 Aug 2026 11:20:30 GMT
Content-Type text/html; charset=utf-8
Content-Length 32481
Connection keep-alive
Cache-Control no-cache, no-store
Pragma no-cache
Content-Encoding gzip
Expires -1
Vary Accept-Encoding
Access-Control-Allow-Origin *
Referrer-Policy no-referrer
Expect-CT max-age=3600, enforce
X-XSS-Protection 1; mode=block
X-Content-Type-Options nosniff
Content-Security-Policy default-src 'self' 'unsafe-inline' *.ttc.ca 'unsafe-eval' https://apps.sitecore.net *.azureedge.net; media-src 'self' data: ; img-src *.ttc.ca *.dmtry.com *.siteimproveanalytics.io *.researchnow.com 'self' data: *.ttc.ca *.azureedge.net *.google.com *.google.ca *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com siteimproveanalytics.io *.windows.net *.clarity.ms *.customsearch.ai *.bing.com *.cluepixel.com ; style-src 'self' 'unsafe-inline' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.windows.net *.clarity.ms *.customsearch.ai *.bing.com; font-src 'self' 'unsafe-inline' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.windows.net *.clarity.ms *.customsearch.ai *.bing.com; connect-src * ; frame-src 'self' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.triplinx.ca transitapp.com; script-src * 'self' data: 'unsafe-inline' 'unsafe-eval' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com ;upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'none'; object-src data: 'unsafe-eval'
Strict-Transport-Security max-age=31536000; includeSubDomains;
