Informations Techniques
| Code de Statut HTTP | 200 |
| Version HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Adresse IP | 23.39.245.87 |
| Compression | gzip |
|
ℹ 🔵 X-Frame-Options Manquant | Le site peut être intégré dans des iframes par des tiers (risque de clickjacking). |
Code de Statut HTTP 200
Version HTTP HTTP/1.1
HTTPS ✔ Disponible
Adresse IP 23.39.245.87
Compression gzip
ℹ 🔵 X-Frame-Options Manquant Le site peut être intégré dans des iframes par des tiers (risque de clickjacking).
Chaîne de Redirection
| # | URL | Code de Statut HTTP | Statut |
| 1 | https://subway.com:443 | 302 | HTTP/2 302 |
| 2 | https://subwayfrance.fr/ | 200 | HTTP/2 200 |
#1 URL https://subway.com:443
Code de Statut HTTP 302
Statut HTTP/2 302
#2 URL https://subwayfrance.fr/
Code de Statut HTTP 200
Statut HTTP/2 200
Performance
| Résolution DNS | 10.4 ms |
| Connexion TCP | 11.9 ms |
| Négociation TLS | 3.6 ms |
| Temps Jusqu'au Premier Octet (TTFB) | 47.2 ms |
| Téléchargement du Contenu | 0.6 ms |
| Temps de Réponse Total | 47.9 ms |
Résolution DNS 10.4 ms
Connexion TCP 11.9 ms
Négociation TLS 3.6 ms
Temps Jusqu'au Premier Octet (TTFB) 47.2 ms
Téléchargement du Contenu 0.6 ms
Temps de Réponse Total 47.9 ms
Sécurité
| HTTPS | ✔ Activé |
| HSTS | ✔ max-age=31536000; includeSubDomains; preload |
| CSP | ✔ Configuré |
| X-Frame-Options | ⚠ Non configuré |
| X-Content-Type-Options | ✔ nosniff |
| Politique de Référent | no-referrer |
| Politique de Permissions | ✔ Configuré |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activé
HSTS ✔ max-age=31536000; includeSubDomains; preload
CSP ✔ Configuré
X-Frame-Options ⚠ Non configuré
X-Content-Type-Options ✔ nosniff
Politique de Référent no-referrer
Politique de Permissions ✔ Configuré
HTTP/2 ⚠ HTTP/1.1
Vérification SEO Rapide
| Titre | Home | Subway France |
Titre Home | Subway France
Technologies Détectées
| Technologie | React Google Analytics Google Tag Manager Next.js |
Technologie React Google Analytics Google Tag Manager Next.js
En-têtes HTTP
| Content-security-policy
| default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.instagram.com; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://consent.cookiebot.com https://consentcdn.cookiebot.com; style-src 'self' 'unsafe-inline'; img-src https: 'self' blob: data:; font-src 'self'; frame-src https://www.googletagmanager.com https://consentcdn.cookiebot.com https://www.instagram.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://tagassistant.google.com; upgrade-insecure-requests; |
| X-permitted-cross-domain-policies
| none |
| Referrer-policy
| no-referrer |
| X-content-type-options
| nosniff |
| Permissions-policy
| autoplay=() |
| Strict-transport-security
| max-age=31536000; includeSubDomains; preload |
| X-powered-by
| Next.js |
| Cache-control
| private, no-cache, no-store, max-age=0, must-revalidate |
| Etag
| "14bqrssituf467z" |
| Content-type
| text/html; charset=utf-8 |
| Vary
| Accept-Encoding |
| Content-encoding
| gzip |
| Date
| Wed, 22 Jul 2026 08:33:27 GMT |
Balises Meta
| Viewport | width=device-width |
| Next-head-count | 13 |
Content-security-policy default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.instagram.com; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://consent.cookiebot.com https://consentcdn.cookiebot.com; style-src 'self' 'unsafe-inline'; img-src https: 'self' blob: data:; font-src 'self'; frame-src https://www.googletagmanager.com https://consentcdn.cookiebot.com https://www.instagram.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://tagassistant.google.com; upgrade-insecure-requests;
X-permitted-cross-domain-policies none
Referrer-policy no-referrer
X-content-type-options nosniff
Permissions-policy autoplay=()
Strict-transport-security max-age=31536000; includeSubDomains; preload
X-powered-by Next.js
Cache-control private, no-cache, no-store, max-age=0, must-revalidate
Etag "14bqrssituf467z"
Content-type text/html; charset=utf-8
Vary Accept-Encoding
Content-encoding gzip
Date Wed, 22 Jul 2026 08:33:27 GMT
