Información Técnica
| Código de estado HTTP | 200 |
| Versión HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Dirección IP | 20.39.143.75 |
| Compresión | gzip |
|
🔒 🟡 Mixed Content (3 recursos HTTP) | La página se sirve por HTTPS pero carga 3 recurso(s) por HTTP. Esto puede bloquearse en navegadores modernos. |
|
ℹ 🔵 Falta X-Frame-Options | El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking). |
Código de estado HTTP 200
Versión HTTP HTTP/1.1
HTTPS ✔ Disponible
Dirección IP 20.39.143.75
Compresión gzip
🔒 🟡 Mixed Content (3 recursos HTTP) La página se sirve por HTTPS pero carga 3 recurso(s) por HTTP. Esto puede bloquearse en navegadores modernos.
ℹ 🔵 Falta X-Frame-Options El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking).
Cadena de Redirecciones
| # | URL | Código de estado HTTP | Estado |
| 1 | https://ttc.ca:443 | 301 | HTTP/1.1 301 Moved Permanently |
| 2 | https://www.ttc.ca/ | 200 | HTTP/1.1 200 OK |
#1 URL https://ttc.ca:443
Código de estado HTTP 301
Estado HTTP/1.1 301 Moved Permanently
#2 URL https://www.ttc.ca/
Código de estado HTTP 200
Estado HTTP/1.1 200 OK
Rendimiento
| Resolución DNS | 17.5 ms |
| Conexión TCP | 105.3 ms |
| Negociación TLS | 182.3 ms |
| Tiempo hasta el primer byte (TTFB) | 603.1 ms |
| Descarga de contenido | 0.9 ms |
| Tiempo total de respuesta | 603.9 ms |
Resolución DNS 17.5 ms
Conexión TCP 105.3 ms
Negociación TLS 182.3 ms
Tiempo hasta el primer byte (TTFB) 603.1 ms
Descarga de contenido 0.9 ms
Tiempo total de respuesta 603.9 ms
Seguridad
| HTTPS | ✔ Activado |
| HSTS | ✔ max-age=31536000; includeSubDomains; |
| CSP | ✔ Configurado |
| X-Frame-Options | ⚠ No configurado |
| X-Content-Type-Options | ✔ nosniff |
| Política de Referrer | no-referrer |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activado
HSTS ✔ max-age=31536000; includeSubDomains;
CSP ✔ Configurado
X-Frame-Options ⚠ No configurado
X-Content-Type-Options ✔ nosniff
Política de Referrer no-referrer
HTTP/2 ⚠ HTTP/1.1
Comprobación SEO
| Título | TTC.ca |
| Título Open Graph | TTC.ca |
| Twitter Card | summary_large_image |
| Título Twitter | TTC.ca |
Título TTC.ca
Título Open Graph TTC.ca
Twitter Card summary_large_image
Título Twitter TTC.ca
Tecnologías Detectadas
| Tecnología | Google Analytics Google Tag Manager |
Tecnología Google Analytics Google Tag Manager
Cabeceras HTTP
| Date
| Wed, 22 Jul 2026 01:57:34 GMT |
| Content-Type
| text/html; charset=utf-8 |
| Content-Length
| 34758 |
| Connection
| keep-alive |
| Cache-Control
| no-cache, no-store |
| Pragma
| no-cache |
| Content-Encoding
| gzip |
| Expires
| -1 |
| Vary
| Accept-Encoding |
| Access-Control-Allow-Origin
| * |
| Referrer-Policy
| no-referrer |
| Expect-CT
| max-age=3600, enforce |
| X-XSS-Protection
| 1; mode=block |
| X-Content-Type-Options
| nosniff |
| Content-Security-Policy
| default-src 'self' 'unsafe-inline' *.ttc.ca 'unsafe-eval' https://apps.sitecore.net *.azureedge.net; media-src 'self' data: ; img-src *.ttc.ca *.dmtry.com *.siteimproveanalytics.io *.researchnow.com 'self' data: *.ttc.ca *.azureedge.net *.google.com *.google.ca *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com siteimproveanalytics.io *.windows.net *.clarity.ms *.customsearch.ai *.bing.com *.cluepixel.com ; style-src 'self' 'unsafe-inline' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.windows.net *.clarity.ms *.customsearch.ai *.bing.com; font-src 'self' 'unsafe-inline' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.windows.net *.clarity.ms *.customsearch.ai *.bing.com; connect-src * ; frame-src 'self' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.triplinx.ca transitapp.com; script-src * 'self' data: 'unsafe-inline' 'unsafe-eval' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com ;upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'none'; object-src data: 'unsafe-eval' |
| Strict-Transport-Security
| max-age=31536000; includeSubDomains; |
Meta Tags
| Apple-mobile-web-app-title | TTC.ca |
| Viewport | width=device-width, initial-scale=1 |
Date Wed, 22 Jul 2026 01:57:34 GMT
Content-Type text/html; charset=utf-8
Content-Length 34758
Connection keep-alive
Cache-Control no-cache, no-store
Pragma no-cache
Content-Encoding gzip
Expires -1
Vary Accept-Encoding
Access-Control-Allow-Origin *
Referrer-Policy no-referrer
Expect-CT max-age=3600, enforce
X-XSS-Protection 1; mode=block
X-Content-Type-Options nosniff
Content-Security-Policy default-src 'self' 'unsafe-inline' *.ttc.ca 'unsafe-eval' https://apps.sitecore.net *.azureedge.net; media-src 'self' data: ; img-src *.ttc.ca *.dmtry.com *.siteimproveanalytics.io *.researchnow.com 'self' data: *.ttc.ca *.azureedge.net *.google.com *.google.ca *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com siteimproveanalytics.io *.windows.net *.clarity.ms *.customsearch.ai *.bing.com *.cluepixel.com ; style-src 'self' 'unsafe-inline' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.windows.net *.clarity.ms *.customsearch.ai *.bing.com; font-src 'self' 'unsafe-inline' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.windows.net *.clarity.ms *.customsearch.ai *.bing.com; connect-src * ; frame-src 'self' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.triplinx.ca transitapp.com; script-src * 'self' data: 'unsafe-inline' 'unsafe-eval' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com ;upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'none'; object-src data: 'unsafe-eval'
Strict-Transport-Security max-age=31536000; includeSubDomains;
