gotransit.com

Live preview

This site's Content-Security-Policy restricts embedding to specific origins ("frame-ancestors 'self' *.mouseflow.com"), which does not include StatsMyWeb.

Since gotransit.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

public, s-maxage=86400, max-age=0

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self'; script-src 'self' 'sha256-I+yvI62KX6Z5LVtENtjL/kxF9h1ZYUggU1kDka869G0=' 'sha256-Rtjp9WRsyLj3MhvlnjNB+Q7b80U2fyLA8UDX7SxVHww=' www.google.com www.gstatic.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com tagmanager.google.com ajax.googleapis.com www.youtube.com www.instagram.com platform.instagram.com connect.facebook.net platform.twitter.com maps.googleapis.com js.stripe.com *.mouseflow.com *.maze.co oc-cdn-ocprod.azureedge.net js.adsrvr.org acdn.adnxs.com td.doubleclick.net fls.doubleclick.net ad.doubleclick.net static.hotjar.com insight.adsrvr.org cdn.cluepixel.com googleads.g.doubleclick.net 'sha256-UoA7nvriU60zOTZW2g0sSLi9WN8sUcpZUK5hpi3RWe0=' 'sha256-fIjdh6B0PaOWzp4kv/wQzkIQHDNTa508q4nfJfOYWdY=' 'sha256-eneI88rvkpXWNgW3shFBNZTeDlY8+1C/oquS4IFW6pA=' 'sha256-yJpR1tvXg47eEnQ9eYi+i4cb/xz+gFUqA23Zm/GPjTs=' 'sha256-E3ZaSEGN6tUilhA0fnWszZ2Kh1RZa7dClTU/95JxLnk=' 'sha256-Q7SzRjLD2ZMqALRlsNs4iURWA1EpUIrdo8NJ3Aj+YiA=' 'sha256-udP5n5SvPqwYuvf0D2d7XQJSW4nofIo23ZMVqfxFt4k=' analytics.tiktok.com sc-static.net tr.snapchat.com analytics-ipv6.tiktokw.us demo-1.conversionsapigateway.com c.amazon-adsystem.com 'sha256-TvA5mVeb1S0HYLkALtayryTQ/f9SsDwi5fWV8rLXCXw='; style-src 'self' 'unsafe-inline' fonts.cdnfonts.com fonts.googleapis.com tagmanager.google.com www.gstatic.com *.mouseflow.com *.maze.co oc-cdn-ocprod.azureedge.net; font-src 'self' fonts.cdnfonts.com *.fonts.gstatic.com fonts.gstatic.com data: *.mouseflow.com *.maze.co; connect-src 'self' res.cloudinary.com vitals.vercel-insights.com graph.facebook.com ae72qusyyn-dsn.algolia.net ae72qusyyn-3.algolianet.com ae72qusyyn-2.algolianet.com ae72qusyyn-1.algolianet.com maps.googleapis.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google-analytics.com *.google.com *.mouseflow.com *.maze.co assets.metrolinx.com https://api.metrolinx.com/external/go/tripplanner/ https://api.metrolinx.com/external/go/departures/ https://api.metrolinx.com/external/go/schedules/ https://api.metrolinx.com/external/go/stations/ https://api.metrolinx.com/external/go/farecalculator/ https://api.metrolinx.com/external/go/serviceupdate/ https://api.metrolinx.com/external/go/composer/ https://api.metrolinx.com/external/go/schedules/ https://api.metrolinx.com/external/go/serviceguarantee/ cdn.cluepixel.com ad.doubleclick.net insight.adsrvr.org tr.snapchat.com analytics.tiktok.com analytics-ipv6.tiktokw.us demo-1.conversionsapigateway.com c.amazon-adsystem.com; img-src 'self' res.cloudinary.com cloudinary.com assets.metrolinx.com i.ytimg.com maps.gstatic.com maps.googleapis.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.googleads.g.doubleclick.net *.google.com ssl.gstatic.com www.gstatic.com *.facebook.com data: *.mouseflow.com *.maze.co cdn.cluepixel.com ad.doubleclick.net insight.adsrvr.org mapsresources-pa.googleapis.com tr.snapchat.com; media-src 'self' blob: res.cloudinary.com assets.metrolinx.com; frame-src 'self' www.youtube.com www.google.com www.instagram.com www.linkedin.com www.facebook.com platform.twitter.com outlook.office365.com *.g.doubleclick.net maps.metrolinx.com *.stripe.com *.mouseflow.com *.maze.co oc-cdn-ocprod.azureedge.net fls.doubleclick.net td.doubleclick.net insight.adsrvr.org match.adsrvr.org cdn.cluepixel.com ad.doubleclick.net googletagmanager.com 11500151.fls.doubleclick.net 5023731.fls.doubleclick.net *.googletagmanager.com 13381767.fls.doubleclick.net tr.snapchat.com; child-src *.mouseflow.com; frame-ancestors 'self' *.mouseflow.com; form-action 'self'

Strict-Transport-Security

max-age=63072000

X-Frame-Options

Not sent

X-Content-Type-Options

Not sent

Referrer-Policy

Not sent

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://gotransit.com/HTTP 307

   → https://www.gotransit.com/

2. 2.https://www.gotransit.com/HTTP 307

   → https://www.gotransit.com/en/

3. 3.https://www.gotransit.com/en/HTTP 308

   → https://www.gotransit.com/en

4. 4.https://www.gotransit.com/enHTTP 200

Meta tags

Title

GO Transit | Regional Public Transit Service for the GTHA

Description

A division of Metrolinx, GO Transit is the regional public transit service for the Greater Golden Horseshoe.

Canonical

Not set

Robots

Not set

Generator

Not set

Open Graph title

Where Would You Like to GO?

Open Graph description

GO Transit is the regional public transit service for the Greater Golden Horseshoe.

Open Graph image

https://assets.metrolinx.com/image/upload/v1678910057/Images/GO/Home_page-desktop.jpg

Open Graph type

website

Twitter card

summary

Twitter title

Where Would You Like to GO?

Twitter image

https://assets.metrolinx.com/image/upload/v1678910057/Images/GO/Home_page-desktop.jpg

robots.txt

Disallow rules (User-agent: *)

0

Disallow rules (other agents)

0

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Next.jsframework

  Found "_next/static/" in the page's HTML

• Google Tag Manageranalytics

  Found "googletagmanager.com/gtm.js" in the page's HTML

Related domains