Informations Techniques
| Code de Statut HTTP | 200 |
| Version HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Adresse IP | 20.39.143.75 |
| Compression | gzip |
|
🔒 🟡 Contenu Mixte (3 ressources HTTP) | La page est servie en HTTPS mais charge 3 ressource(s) en HTTP. Cela peut être bloqué par les navigateurs modernes. |
|
ℹ 🔵 X-Frame-Options Manquant | Le site peut être intégré dans des iframes par des tiers (risque de clickjacking). |
Code de Statut HTTP 200
Version HTTP HTTP/1.1
HTTPS ✔ Disponible
Adresse IP 20.39.143.75
Compression gzip
🔒 🟡 Contenu Mixte (3 ressources HTTP) La page est servie en HTTPS mais charge 3 ressource(s) en HTTP. Cela peut être bloqué par les navigateurs modernes.
ℹ 🔵 X-Frame-Options Manquant Le site peut être intégré dans des iframes par des tiers (risque de clickjacking).
Chaîne de Redirection
| # | URL | Code de Statut HTTP | Statut |
| 1 | https://ttc.ca:443 | 301 | HTTP/1.1 301 Moved Permanently |
| 2 | https://www.ttc.ca/ | 200 | HTTP/1.1 200 OK |
#1 URL https://ttc.ca:443
Code de Statut HTTP 301
Statut HTTP/1.1 301 Moved Permanently
#2 URL https://www.ttc.ca/
Code de Statut HTTP 200
Statut HTTP/1.1 200 OK
Performance
| Résolution DNS | 13.6 ms |
| Connexion TCP | 102.3 ms |
| Négociation TLS | 185.1 ms |
| Temps Jusqu'au Premier Octet (TTFB) | 657.7 ms |
| Téléchargement du Contenu | 1 ms |
| Temps de Réponse Total | 658.7 ms |
Résolution DNS 13.6 ms
Connexion TCP 102.3 ms
Négociation TLS 185.1 ms
Temps Jusqu'au Premier Octet (TTFB) 657.7 ms
Téléchargement du Contenu 1 ms
Temps de Réponse Total 658.7 ms
Sécurité
| HTTPS | ✔ Activé |
| HSTS | ✔ max-age=31536000; includeSubDomains; |
| CSP | ✔ Configuré |
| X-Frame-Options | ⚠ Non configuré |
| X-Content-Type-Options | ✔ nosniff |
| Politique de Référent | no-referrer |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activé
HSTS ✔ max-age=31536000; includeSubDomains;
CSP ✔ Configuré
X-Frame-Options ⚠ Non configuré
X-Content-Type-Options ✔ nosniff
Politique de Référent no-referrer
HTTP/2 ⚠ HTTP/1.1
Vérification SEO Rapide
| Titre | TTC.ca |
| Titre Open Graph | TTC.ca |
| Twitter Card | summary_large_image |
| Titre Twitter | TTC.ca |
Titre TTC.ca
Titre Open Graph TTC.ca
Twitter Card summary_large_image
Titre Twitter TTC.ca
Technologies Détectées
| Technologie | Google Analytics Google Tag Manager Node.js |
Technologie Google Analytics Google Tag Manager Node.js
En-têtes HTTP
| Date
| Tue, 21 Jul 2026 19:35:46 GMT |
| Content-Type
| text/html; charset=utf-8 |
| Content-Length
| 37174 |
| Connection
| keep-alive |
| Cache-Control
| no-cache, no-store |
| Pragma
| no-cache |
| Content-Encoding
| gzip |
| Expires
| -1 |
| Vary
| Accept-Encoding |
| Access-Control-Allow-Origin
| * |
| Referrer-Policy
| no-referrer |
| Expect-CT
| max-age=3600, enforce |
| X-XSS-Protection
| 1; mode=block |
| X-Content-Type-Options
| nosniff |
| Content-Security-Policy
| default-src 'self' 'unsafe-inline' *.ttc.ca 'unsafe-eval' https://apps.sitecore.net *.azureedge.net; media-src 'self' data: ; img-src *.ttc.ca *.dmtry.com *.siteimproveanalytics.io *.researchnow.com 'self' data: *.ttc.ca *.azureedge.net *.google.com *.google.ca *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com siteimproveanalytics.io *.windows.net *.clarity.ms *.customsearch.ai *.bing.com *.cluepixel.com ; style-src 'self' 'unsafe-inline' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.windows.net *.clarity.ms *.customsearch.ai *.bing.com; font-src 'self' 'unsafe-inline' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.windows.net *.clarity.ms *.customsearch.ai *.bing.com; connect-src * ; frame-src 'self' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.triplinx.ca transitapp.com *.hafas.cloud *.ttc.ca; script-src * 'self' data: 'unsafe-inline' 'unsafe-eval' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com ;upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'none'; object-src data: 'unsafe-eval' |
| Strict-Transport-Security
| max-age=31536000; includeSubDomains; |
Balises Meta
| Apple-mobile-web-app-title | TTC.ca |
| Viewport | width=device-width, initial-scale=1 |
Date Tue, 21 Jul 2026 19:35:46 GMT
Content-Type text/html; charset=utf-8
Content-Length 37174
Connection keep-alive
Cache-Control no-cache, no-store
Pragma no-cache
Content-Encoding gzip
Expires -1
Vary Accept-Encoding
Access-Control-Allow-Origin *
Referrer-Policy no-referrer
Expect-CT max-age=3600, enforce
X-XSS-Protection 1; mode=block
X-Content-Type-Options nosniff
Content-Security-Policy default-src 'self' 'unsafe-inline' *.ttc.ca 'unsafe-eval' https://apps.sitecore.net *.azureedge.net; media-src 'self' data: ; img-src *.ttc.ca *.dmtry.com *.siteimproveanalytics.io *.researchnow.com 'self' data: *.ttc.ca *.azureedge.net *.google.com *.google.ca *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com siteimproveanalytics.io *.windows.net *.clarity.ms *.customsearch.ai *.bing.com *.cluepixel.com ; style-src 'self' 'unsafe-inline' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.windows.net *.clarity.ms *.customsearch.ai *.bing.com; font-src 'self' 'unsafe-inline' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.windows.net *.clarity.ms *.customsearch.ai *.bing.com; connect-src * ; frame-src 'self' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com *.triplinx.ca transitapp.com *.hafas.cloud *.ttc.ca; script-src * 'self' data: 'unsafe-inline' 'unsafe-eval' *.ttc.ca *.azureedge.net *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.addthis.com *.addthisedge.com *.youtube.com *.moatads.com ;upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'none'; object-src data: 'unsafe-eval'
Strict-Transport-Security max-age=31536000; includeSubDomains;
