Informations Techniques
| Code de Statut HTTP | 200 |
| Version HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Adresse IP | 20.39.143.75 |
| Compression | gzip |
|
🔒 🟡 Contenu Mixte (3 ressources HTTP) | La page est servie en HTTPS mais charge 3 ressource(s) en HTTP. Cela peut être bloqué par les navigateurs modernes. |
|
ℹ 🔵 X-Frame-Options Manquant | Le site peut être intégré dans des iframes par des tiers (risque de clickjacking). |
Code de Statut HTTP 200
Version HTTP HTTP/1.1
HTTPS ✔ Disponible
Adresse IP 20.39.143.75
Compression gzip
🔒 🟡 Contenu Mixte (3 ressources HTTP) La page est servie en HTTPS mais charge 3 ressource(s) en HTTP. Cela peut être bloqué par les navigateurs modernes.
ℹ 🔵 X-Frame-Options Manquant Le site peut être intégré dans des iframes par des tiers (risque de clickjacking).
Chaîne de Redirection
| # | URL | Code de Statut HTTP | Statut |
| 1 | https://ttc.ca:443 | 301 | HTTP/1.1 301 Moved Permanently |
| 2 | https://www.ttc.ca/ | 200 | HTTP/1.1 200 OK |
#1 URL https://ttc.ca:443
Code de Statut HTTP 301
Statut HTTP/1.1 301 Moved Permanently
#2 URL https://www.ttc.ca/
Code de Statut HTTP 200
Statut HTTP/1.1 200 OK
Performance
| Résolution DNS | 17.8 ms |
| Connexion TCP | 108.8 ms |
| Négociation TLS | 193.9 ms |
| Temps Jusqu'au Premier Octet (TTFB) | 648.1 ms |
| Téléchargement du Contenu | 0.9 ms |
| Temps de Réponse Total | 648.9 ms |
Résolution DNS 17.8 ms
Connexion TCP 108.8 ms
Négociation TLS 193.9 ms
Temps Jusqu'au Premier Octet (TTFB) 648.1 ms
Téléchargement du Contenu 0.9 ms
Temps de Réponse Total 648.9 ms
Sécurité
| HTTPS | ✔ Activé |
| HSTS | ✔ max-age=31536000; includeSubDomains; |
| CSP | ✔ Configuré |
| X-Frame-Options | ⚠ Non configuré |
| X-Content-Type-Options | ✔ nosniff |
| Politique de Référent | no-referrer |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activé
HSTS ✔ max-age=31536000; includeSubDomains;
CSP ✔ Configuré
X-Frame-Options ⚠ Non configuré
X-Content-Type-Options ✔ nosniff
Politique de Référent no-referrer
HTTP/2 ⚠ HTTP/1.1
Vérification SEO Rapide
| Titre | TTC.ca |
| Titre Open Graph | TTC.ca |
| Twitter Card | summary_large_image |
| Titre Twitter | TTC.ca |
Titre TTC.ca
Titre Open Graph TTC.ca
Twitter Card summary_large_image
Titre Twitter TTC.ca
Technologies Détectées
| Technologie | Google Analytics Google Tag Manager |
Technologie Google Analytics Google Tag Manager
En-têtes HTTP
| Date
| Sun, 30 Aug 2026 22:26:20 GMT |
| Content-Type
| text/html; charset=utf-8 |
| Content-Length
| 31309 |
| Connection
| keep-alive |
| Cache-Control
| no-cache, no-store |
| Pragma
| no-cache |
| Content-Encoding
| gzip |
| Expires
| -1 |
| Vary
| Accept-Encoding |
| Access-Control-Allow-Origin
| * |
| Referrer-Policy
| no-referrer |
| Expect-CT
| max-age=3600, enforce |
| X-XSS-Protection
| 1; mode=block |
| X-Content-Type-Options
| nosniff |
| Content-Security-Policy
| default-src 'self' 'unsafe-inline' *.ttc.ca 'unsafe-eval' https://apps.sitecore.net *.azureedge.net; media-src 'self' data: ; img-src *.ttc.ca *.dmtry.com *.siteimproveanalytics.io *.researchnow.com 'self' data: *.ttc.ca *.azureedge.net *.google.com *.google.ca *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com siteimproveanalytics.io *.windows.net *.clarity.ms *.customsearch.ai *.bing.com *.cluepixel.com ; style-src 'self' 'unsafe-inline' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.windows.net *.clarity.ms *.customsearch.ai *.bing.com; font-src 'self' 'unsafe-inline' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.windows.net *.clarity.ms *.customsearch.ai *.bing.com; connect-src * ; frame-src 'self' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.triplinx.ca transitapp.com *.hafas.cloud *.ttc.ca; script-src * 'self' data: 'unsafe-inline' 'unsafe-eval' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com ;upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'none'; object-src data: 'unsafe-eval' |
| Strict-Transport-Security
| max-age=31536000; includeSubDomains; |
Balises Meta
| Apple-mobile-web-app-title | TTC.ca |
| Viewport | width=device-width, initial-scale=1 |
Date Sun, 30 Aug 2026 22:26:20 GMT
Content-Type text/html; charset=utf-8
Content-Length 31309
Connection keep-alive
Cache-Control no-cache, no-store
Pragma no-cache
Content-Encoding gzip
Expires -1
Vary Accept-Encoding
Access-Control-Allow-Origin *
Referrer-Policy no-referrer
Expect-CT max-age=3600, enforce
X-XSS-Protection 1; mode=block
X-Content-Type-Options nosniff
Content-Security-Policy default-src 'self' 'unsafe-inline' *.ttc.ca 'unsafe-eval' https://apps.sitecore.net *.azureedge.net; media-src 'self' data: ; img-src *.ttc.ca *.dmtry.com *.siteimproveanalytics.io *.researchnow.com 'self' data: *.ttc.ca *.azureedge.net *.google.com *.google.ca *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com siteimproveanalytics.io *.windows.net *.clarity.ms *.customsearch.ai *.bing.com *.cluepixel.com ; style-src 'self' 'unsafe-inline' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.windows.net *.clarity.ms *.customsearch.ai *.bing.com; font-src 'self' 'unsafe-inline' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.windows.net *.clarity.ms *.customsearch.ai *.bing.com; connect-src * ; frame-src 'self' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.triplinx.ca transitapp.com *.hafas.cloud *.ttc.ca; script-src * 'self' data: 'unsafe-inline' 'unsafe-eval' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com ;upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'none'; object-src data: 'unsafe-eval'
Strict-Transport-Security max-age=31536000; includeSubDomains;
