gotransit.com
HTML metadata
Technology
- CDN
- Vercel
- CMS
- Next.js
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (2)
- assets.metrolinx.com×14
- www.googletagmanager.com×1
Social
Contact
- Phone
- Address
- Street West, Toronto, ON M5J 1E6, Phone: 416-874-5900
Registration
- Registrar
- Webnames.ca Inc.
- Created
- 1996-04-05
- Expires
- 2027-04-06 321 days left
- Updated
- 2026-04-30
- Name servers
-
- a1-220.akam.net
- a22-66.akam.net
- a26-67.akam.net
- a28-67.akam.net
- a3-64.akam.net
- a7-67.akam.net
DNS records live
- NS
-
- ns1.metrolinx.com
- ns2.metrolinx.com
- ns3.metrolinx.com
- MX
-
- 10 metrolinx-com.mail.protection.outlook.com
- TXT
-
Show 4 TXT records
cxCWzYFoRaR7LdlGoqtdUcpE0EQV4eQ0rI5Dl5Lrf+8bi0PMbdqCVouu0E+EHfSjd4P8MfynB/UW9fZgjaw6EA==ODSZbsyYkQiTR5EADAmNS7iiJBAFXlCo2RKs1UD7q7xY/xM8h1uLmnRWssp0WK9x8tUsNQYGJaFnTn9M0pGdNQ==MS=ms18410055adobe-idp-site-verification=90df5ef6-622c-42c0-939c-285ccfd9be8d
Email authentication strong
- SPF
-
v=spf1 ip4:69.20.232.14 ip4:69.20.232.17 ip4:69.20.232.18 ip4:158.106.77.208 ip4:209.171.33.143 ip4:209.171.33.144 ip4:52.139.21.4 ip4:40.86.247.104 include:spf.protection.outlook.com include:spf.at-m.ca a:willow.prestocard.ca -allstrict (-all) - DMARC
-
v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc.qua@gotransit.compolicy: quarantine - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtle6NNi6nDwU8MzZ0jK3nRUKuPviUiS+I/BMy3HCHA+3DAxmZDtd2t1//uDMwHsrmHsgp5IGJkegLH… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00nXS4LCZtdKf42enCndyygMPGlF/eSymynhcHpFIoxW7lemaiYPbxnRXEF7xoj1wMQSyS8Q8RuEnR2/6Q… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zxvhNyiVF/VfXg6sTgAmQMP6TGSCElFUy8t6nYsdF4zCMLSd0G0yINsZQNdV2lZeGJ5jTJEWipsqjWS42…
selectors probed - selector1:
Certificate (current)
Entrust OV TLS Issuing ECC CA 2
Expires in 38 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- findings
-
- CSP uses wildcard sources
- missing frame protection
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- content-security-policy
default-src 'self'; script-src 'self' 'sha256-I+yvI62KX6Z5LVtENtjL/kxF9h1ZYUggU1kDka869G0=' 'sha256-Rtjp9WRsyLj3MhvlnjNB+Q7b80U2fyLA8UDX7SxVHww=' www.google.com www.gstatic.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com tagmanager.google.com ajax.googleapis.com www.youtube.com www.instagram.com platform.instagram.com connect.facebook.net platform.twitter.com maps.googleapis.com js.stripe.com *.mouseflow.com oc-cdn-ocprod.azureedge.net js.adsrvr.org acdn.adnxs.com td.doubleclick.net fls.doubleclick.net ad.doubleclick.net static.hotjar.com insight.adsrvr.org cdn.cluepixel.com googleads.g.doubleclick.net 'sha256-UoA7nvriU60zOTZW2g0sSLi9WN8sUcpZUK5hpi3RWe0=' 'sha256-fIjdh6B0PaOWzp4kv/wQzkIQHDNTa508q4nfJfOYWdY=' 'sha256-eneI88rvkpXWNgW3shFBNZTeDlY8+1C/oquS4IFW6pA=' 'sha256-yJpR1tvXg47eEnQ9eYi+i4cb/xz+gFUqA23Zm/GPjTs=' 'sha256-E3ZaSEGN6tUilhA0fnWszZ2Kh1RZa7dClTU/95JxLnk=' 'sha256-Q7SzRjLD2ZMqALRlsNs4iURWA1EpUIrdo8NJ3Aj+YiA=' 'sha256-udP5n5SvPqwYuvf0D2d7XQJSW4nofIo2- strict-transport-security
max-age=63072000