bluemountain.ca website report
Ontario's Winter & Summer Destination | Blue Mountain Resort
Last scanned
Overall score
Excellent
About bluemountain.ca
bluemountain.ca is a website. It describes itself as “Visit Ontario's only year-round mountain resort and spa - Blue Mountain Resort”. It is also on Facebook, Instagram and X.
Score profile
Top issues to fix
7 issues found · 1 high priority
Missing Content-Security-Policy header
SecurityAdd a CSP to control which sources can run scripts — the strongest single defense against XSS.
Missing X-Content-Type-Options header
SecurityAdd X-Content-Type-Options: nosniff to stop MIME-sniffing attacks.
Missing X-Frame-Options header
SecurityAdd X-Frame-Options (or a CSP frame-ancestors rule) to prevent clickjacking via hidden iframes.
3 cookies without Secure/HttpOnly flags
SecuritySet Secure and HttpOnly on session cookies so they can't leak over HTTP or be read by injected scripts.
robots.txt not found
SEOPublish /robots.txt with a Sitemap: directive to guide crawlers.
sitemap.xml not found
SEOPublish an XML sitemap and reference it from robots.txt to speed up page discovery.
+1 more issue — details in the sections below.
How it compares
bluemountain.ca scores higher overall than 90% of the 163,243 sites we have scanned.
vs. All scanned sites
163,243 sitesThe dot is this site; the tick is the typical (median) score for the group. The number on the right is the percentile: the share of the group this site scores above.
Technology stack
No technologies were detected in the latest scan.
Hosting & DNS
- IP address
- —
- ASN
- —
- IPv6
- Not supported
- HTTP
- HTTP/2
Show DNS record values
TXT record contents are not republished; only their count is shown.
Security
bluemountain.ca uses TLS 1.3 with a certificate valid for 85 more days and sets 1 of 6 recommended security headers.
Security headers1 of 6 set
- HSTSForces HTTPS
- CSPBlocks injected scripts
- X-Frame-OptionsStops clickjacking
- X-Content-TypeStops MIME sniffing
- Referrer-PolicyLimits URL leakage
- Permissions-PolicyRestricts browser features
TLS certificate
- Names covered
- 2
- Cookies set
- 5
Email security
bluemountain.ca scores D for email security, with no SPF record and DMARC policy “reject”.
- SPFNot set
No SPF record: anyone can claim to send mail from this domain.
- DMARCGood
Forged mail is rejected; reports are collected.
- MTA-STSNot set
Not published; mail to this domain can be downgraded to plaintext.
- BIMINot set
Not published (optional).
Performance & carbon
bluemountain.ca scores 100/100 for performance, with an estimated load time of 0.6 s. A visit emits an estimated 0.05 g of CO2 (grade A+).
Page weight
- HTML 132 KB
- JavaScript 2.3 KB
- CSS 798 B
- Est. load
- 566 ms
- Response
- 564 ms
- Scripts / CSS
- 14 / 4
Carbon per visitA+
0.05 g CO2 per uncached view
Estimate from the Sustainable Web Design model. HTML, JavaScript and CSS only; images, video and fonts are not measured. Treat it as a lower bound for comparing pages, not an audit.
SEO & accessibility
bluemountain.ca scores 90/100 for SEO and 100/100 for accessibility, with 2 SEO issues to fix.
Heading structure
One H1: good.
Image alt text
61 images · 5 without alt text · 17 lazy-loaded
Links
- Internal 66
- External 37
- Broken 20
SEO issues2
- robots.txt not found
- sitemap.xml not found
Accessibility issues0
No accessibility issues detected.
Technical details
Page metadata, social tags, crawl files and scan information.
Meta tags
- Title
- Ontario's Winter & Summer Destination | Blue Mountain Resort
- Description
- Visit Ontario's only year-round mountain resort and spa - Blue Mountain Resort. Enjoy world-class skiing, golf, spas & dining. Book Your Vacation Online.
- Canonical
- https://www.bluemountain.ca/
- Language
- en
- Robots meta
Crawl files
- robots.txt
- Not found
- Disallow rules
- 0
- sitemap.xml
- Not found
- URLs in sitemap
- 0
Structured data
- Microdata items
- 0
- RDFa items
- 0
Scan
- Final URL
- https://www.bluemountain.ca/
- HTTP status
- 200
- Redirects
- https://bluemountain.ca → https://www.bluemountain.ca/
- Scanned
- Aug 24, 2026, 1:23 PM
Own bluemountain.ca? Show your score
Add this badge to your site. It always shows the latest scan.
<a href="https://sitegraph.tech/site/bluemountain-ca"><img src="https://sitegraph.tech/badge/bluemountain-ca.svg" alt="bluemountain.ca on SiteGraph" width="190" height="20" /></a>See something wrong on this report? Request a correction or ask for something to be removed.
Frequently asked questions about bluemountain.ca
- What is bluemountain.ca?
- bluemountain.ca is a website. It describes itself as “Visit Ontario's only year-round mountain resort and spa - Blue Mountain Resort”. It is also on Facebook, Instagram and X.
- Is bluemountain.ca secure?
- bluemountain.ca uses TLS 1.3 with a certificate valid for 85 more days and sets 1 of 6 recommended security headers.
- Is bluemountain.ca protected against email spoofing?
- bluemountain.ca scores D for email security, with no SPF record and DMARC policy “reject”.
- How does bluemountain.ca compare with similar sites?
- bluemountain.ca scores higher overall than 90% of the 163,243 sites we have scanned.
- What is bluemountain.ca's overall score?
- bluemountain.ca has an overall SiteGraph score of 91/100, combining SEO (90), performance (100), security (75) and accessibility (100).
Open Graph & Twitter