valtellina.it

.it crawl

First seen 2026-05-22 · Last seen 2026-06-01 · ok HTTP/1.1 200 4465 ms crawled 2026-05-28

US · 13.248.234.182 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Home - Valtellina
Description: Portale ufficiale della Valtellina: neve, cultura, sport, gastronomia, natura. Scopri tutte le attività!
Language: it
Generator: FlexCMP - www.flexcmp.com
Canonical: https://www.valtellina.it/it/home

Open Graph

url: https://www.valtellina.it/
title: Home
site name: Valtellina

Technology

CDN: Amazon CloudFront
Server: Apache
jQuery: 3.4.1 known XSS (<3.5)
Stack: PHP

Fonts

Google Fonts

Third-party hosts loaded (6)

fonts.googleapis.com×3
cdn.jsdelivr.net×1
embeds.acswapp.com×1
fonts.gstatic.com×1
static.sojern.com×1
www.facebook.com×1

Social

Contact

Email

DNS records live

NS

dns.technorail.com
dns2.technorail.com
dns3.arubadns.net
dns4.arubadns.cz

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

a36b86cb35f74594be08bf5ca83a0200
b28qy5v5jyl11945rh313r0y6kgpvsb4

Verified for

Google
Microsoft 365

Email authentication partial

SPF

v=spf1 +a ip4:194.143.143.112 include:spf.protection.outlook.com include:_spf.aruba.it include:musvc.com include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrRvrbW3DMaWVwUaEc0KyK4C0oCxrxTOkbfHTuQo2G90U4eruZ+H2F4ssauiiwo1LzDgGD7F8PofsB…

selectors probed

Certificates

Loading certificate

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.valtellina.it/

present

strict-transport-security
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy

findings

missing Content Security Policy
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
content-security-policy-report-only: frame-ancestors 'self' https://sondriotrasporti.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com maps.googleapis.com s.adroll.com https://connect.facebook.net https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js; connect-src 'self' maps.googleapis.com; img-src 'self' 'unsafe-inline' data: https://maps.gstatic.com maps.googleapis.com