bctransit.com

Live preview

This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.

Since bctransit.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=UTF-8

Cache-Control

public, max-age=604800

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.youtube.com https://s.ytimg.com https://platform.x.com https://platform.twitter.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://www.google.com https://www.google.ca https://secure.gravatar.com https://www.googletagmanager.com https://i.ytimg.com https://pbs.twimg.com https://abs.twimg.com https://syndication.twitter.com; font-src 'self' data:; connect-src 'self' https://api.mapbox.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://www.google.com https://syndication.twitter.com https://cdn.syndication.twimg.com; media-src 'self'; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://recaptcha.google.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://drive.google.com https://w.soundcloud.com https://platform.x.com https://platform.twitter.com https://syndication.twitter.com; frame-ancestors 'self'; form-action 'self' https://www.google.com; base-uri 'self'; object-src 'self'; upgrade-insecure-requests

Strict-Transport-Security

max-age=300

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

strict-origin-when-cross-origin

Permissions-Policy

accelerometer=(), autoplay=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(self "https://www.youtube.com" "https://www.youtube-nocookie.com" "https://w.soundcloud.com"), fullscreen=(self "https://www.youtube.com" "https://www.youtube-nocookie.com"), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(self "https://www.youtube.com" "https://www.youtube-nocookie.com"), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), hid=(), idle-detection=(), serial=()

What each security header does

Redirect chain

1. 1.http://bctransit.com/HTTP 301

   → https://bctransit.com/

2. 2.https://bctransit.com/HTTP 302

   → https://www.bctransit.com/

3. 3.https://www.bctransit.com/HTTP 200

Meta tags

Title

Choose a Transit System | BC Transit

Description

Explore BC Transit services across British Columbia. Choose your city or region to find local bus schedules, route maps, fare details, and real-time transit alerts.

Canonical

https://www.bctransit.com/

Robots

index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1

Generator

Not set

Open Graph title

Choose a Transit System | BC Transit

Open Graph description

Explore BC Transit services across British Columbia. Choose your city or region to find local bus schedules, route maps, fare details, and real-time transit alerts.

Open Graph image

Not set

Open Graph type

website

Twitter card

summary_large_image

Twitter title

Not set

Twitter image

Not set

robots.txt

Disallow rules (User-agent: *)

0

Disallow rules (other agents)

0

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• WordPresscms

  Found "wp-content/" in the page's HTML

• Google Tag Manageranalytics

  Found "googletagmanager.com/gtm.js" in the page's HTML

Related domains