Scanned sites / boulevardlexus.com / 2026-09-20-1828

boulevardlexus.com scan from 9/20/2026, 6:28:18 PM

Scan 2026-09-20-1828

Scanned 9/20/2026, 6:28:18 PM, finished 9/20/2026, 7:25:21 PM

Site: https://boulevardlexus.com/

Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.

77/ 100Good

On September 20, 2026 the Site Spider crawled 1181 pages and 1000 assets of boulevardlexus.com, starting from https://boulevardlexus.com/. It scored 77 out of 100, a good result. 9 of 14 checks found something to fix, led by sitemap coverage (500), title tags (418), meta descriptions (392); 5 checks passed. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.

Security review: Medium2 medium and 3 low findings. See the security findings ↓

Pages crawled
1181
Assets fetched
1000
Status
Completed
Checks with issues
9 of 14
  • Title tags418 issues
    418 of 566 pages have title issues. 350 noindex or canonicalized pages excluded.
  • Meta descriptions392 issues
    392 of 566 pages have meta description issues. 350 noindex or canonicalized pages excluded.
  • Headings35 issues
    35 of 566 pages have heading issues. 350 noindex or canonicalized pages excluded.
  • Broken links6 issues
    8 internal links point at 6 broken URLs.
  • Redirects172 issues
    158 redirecting URLs, 19 of them chained.
  • Non-200 responses108 issues
    270 URLs did not return a 2xx response.
  • Rate limitedOK
    The site did not rate limit the crawler.
  • Indexability317 issues
    317 of 916 indexable pages have indexability warnings.
  • Image alt textOK
    0 of 40628 image references have no alt attribute. 9 use an empty alt (decorative), which is fine.
  • Heavy assets37 issues
    37 assets larger than 500 KB among the 100 heaviest.
  • Orphan pagesOK
    0 pages have no internal links pointing at them.
  • Sitemap coverage500 issues
    1 sitemap listing 0 URLs: 566 crawled pages missing, 0 listed URLs broken or redirecting, 0 reachable only via the sitemap.
  • Thin contentOK
    0 of 566 pages have fewer than 200 words. 350 noindex or canonicalized pages excluded.
  • Duplicate contentOK
    0 groups of pages with identical HTML.

Where this scan sits among all scanned sites

1129 sites, median 82%, average 80%

boulevardlexus.com scores 77%, higher than 30% of the 1129 scanned sites. See the full ranking.

029570%: 0 sites1%: 0 sites2%: 0 sites3%: 0 sites4%: 0 sites5%: 0 sites6%: 0 sites7%: 0 sites8%: 0 sites9%: 0 sites10%: 0 sites11%: 0 sites12%: 0 sites13%: 0 sites14%: 0 sites15%: 0 sites16%: 0 sites17%: 0 sites18%: 0 sites19%: 0 sites20%: 0 sites21%: 1 site22%: 0 sites23%: 0 sites24%: 0 sites25%: 0 sites26%: 0 sites27%: 0 sites28%: 1 site29%: 0 sites30%: 0 sites31%: 0 sites32%: 0 sites33%: 0 sites34%: 0 sites35%: 1 site36%: 1 site37%: 0 sites38%: 0 sites39%: 0 sites40%: 0 sites41%: 0 sites42%: 0 sites43%: 0 sites44%: 0 sites45%: 2 sites46%: 1 site47%: 1 site48%: 1 site49%: 0 sites50%: 3 sites51%: 4 sites52%: 1 site53%: 1 site54%: 3 sites55%: 1 site56%: 2 sites57%: 3 sites58%: 7 sites59%: 3 sites60%: 6 sites61%: 8 sites62%: 12 sites63%: 4 sites64%: 9 sites65%: 9 sites66%: 8 sites67%: 15 sites68%: 28 sites69%: 13 sites70%: 24 sites71%: 22 sites72%: 25 sites73%: 24 sites74%: 31 sites75%: 26 sites76%: 39 sites77%: 38 sites78%: 35 sites79%: 35 sites80%: 46 sites81%: 54 sites82%: 52 sites83%: 46 sites84%: 56 sites85%: 49 sites86%: 45 sites87%: 50 sites88%: 57 sites89%: 38 sites90%: 54 sites91%: 39 sites92%: 24 sites93%: 17 sites94%: 16 sites95%: 8 sites96%: 10 sites97%: 4 sites98%: 3 sites99%: 1 site100%: 12 sites77% here100%90%80%70%60%50%40%30%20%10%0%

Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).

Internal link map

Loading the link map...

Start page (centre)OKRedirectErrorOrphanLinked from most pagesOne inbound link or noneRings = clicks from the start page. Size = inbound links. Drag to pan, scroll to zoom, click a page to see only its links.

Fix plan

Written by gpt-4o-mini from the scan findings

Your site has several SEO issues that need addressing, but overall it has a good health score. Prioritize fixing broken links, redirects, and title/meta description issues for better visibility.

  1. 1

    Fix Broken Links

    Why: Improve user experience and SEO by ensuring all internal links work.

    How: Replace or remove broken links found in crawl results.

    Checks: broken-links

  2. 2

    Resolve Redirects

    Why: Chaining redirects can slow down site performance; simplify them.

    How: Directly link to final destination URLs and remove extra hops for 19 chained redirects.

    Checks: redirects

  3. 3

    Address Non-200 Responses

    Why: Improve indexing and user access by fixing URLs that return errors.

    How: Check and correct 270 URLs not returning 2xx responses.

    Checks: status-codes

  4. 4

    Optimize Title Tags

    Why: Improper title lengths can impact click-through rates on search results.

    How: Shorten titles over 60 characters for affected pages to match best practices.

    Checks: titles

  5. 5

    Improve Meta Descriptions

    Why: Missing meta descriptions reduce click-through rates from search engines.

    How: Add unique meta descriptions to the 392 affected pages.

    Checks: meta-descriptions

  6. 6

    Correct Heading Structures

    Why: Multiple H1s can confuse search engines about page content hierarchy.

    How: Limit each page to one H1 tag and adjust headings accordingly for 35 pages.

    Checks: headings

Generated automatically; verify each change against your own site before relying on it.

Security review

Written by gpt-4o-mini from 16 checks over the crawl

The website boulevardlexus.com has several security vulnerabilities, including missing security headers, exposed software versions, and outdated libraries. Addressing these issues will enhance overall site security and help protect against potential attacks.

  • 0 high
  • 2 medium
  • 3 low
  • 0 info
  1. 1

    Cookies Missing Security FlagsMedium

    Why it matters: Lack of flags like HttpOnly and SameSite increases the risk of cookie theft and cross-site request forgery.

    Fix: Set HttpOnly and SameSite attributes on the magnetis-source cookie.

    Evidence: Cookie flags

  2. 2

    Outdated JavaScript LibrariesMedium

    Why it matters: Using vulnerable libraries can expose the site to various attacks, including XSS.

    Fix: Upgrade jQuery to at least version 3.5.0 and Bootstrap to at least version 4.3.1.

    Evidence: Vulnerable JavaScript libraries

  3. 3

    Missing X-Content-Type-Options HeaderLow

    Why it matters: Without this header, browsers may misinterpret files' content types, which can lead to script execution vulnerabilities.

    Fix: Add the header X-Content-Type-Options: nosniff to all HTML responses.

    Evidence: MIME sniffing protection

  4. 4

    Missing Referrer-Policy HeaderLow

    Why it matters: The absence of this header allows full URLs to be sent to other sites, risking sensitive data exposure.

    Fix: Add the header Referrer-Policy: no-referrer to all HTML responses.

    Evidence: Referrer policy

  5. 5

    Exposed Software VersionsLow

    Why it matters: Revealing server and software versions invites targeted vulnerabilities attacks.

    Fix: Remove or hide the server banner info, specifically the headers: Server and X-Powered-By.

    Evidence: Software version disclosure

What the checks found

  • FoundMIME sniffing protectionLow

    No HTML page sends x-content-type-options. Without X-Content-Type-Options: nosniff a browser may run a file as a script because of its contents rather than its declared type.

    • https://boulevardlexus.com/ → no x-content-type-options
    • https://boulevardlexus.com/en → no x-content-type-options
    • https://boulevardlexus.com/rendez-vous-service → no x-content-type-options
    • https://boulevardlexus.com/vehicules-neufs → no x-content-type-options
    • https://boulevardlexus.com/inventaire-neuf → no x-content-type-options
    • https://boulevardlexus.com/prendre-rendez-vous → no x-content-type-options
    • https://boulevardlexus.com/occasion → no x-content-type-options
    • https://boulevardlexus.com/inventaire-certifie → no x-content-type-options
    • https://boulevardlexus.com/programme-certifie-lexus → no x-content-type-options
    • https://boulevardlexus.com/services-mecaniques → no x-content-type-options
    • https://boulevardlexus.com/service-desthetique → no x-content-type-options
    • https://boulevardlexus.com/centre-de-carrosserie → no x-content-type-options
  • FoundReferrer policyLow

    No HTML page sends referrer-policy. Without a Referrer-Policy the full page address, including any query string, is sent to every site a visitor clicks through to.

    • https://boulevardlexus.com/ → no referrer-policy
    • https://boulevardlexus.com/en → no referrer-policy
    • https://boulevardlexus.com/rendez-vous-service → no referrer-policy
    • https://boulevardlexus.com/vehicules-neufs → no referrer-policy
    • https://boulevardlexus.com/inventaire-neuf → no referrer-policy
    • https://boulevardlexus.com/prendre-rendez-vous → no referrer-policy
    • https://boulevardlexus.com/occasion → no referrer-policy
    • https://boulevardlexus.com/inventaire-certifie → no referrer-policy
    • https://boulevardlexus.com/programme-certifie-lexus → no referrer-policy
    • https://boulevardlexus.com/services-mecaniques → no referrer-policy
    • https://boulevardlexus.com/service-desthetique → no referrer-policy
    • https://boulevardlexus.com/centre-de-carrosserie → no referrer-policy
  • FoundSoftware version disclosureLow

    Responses reveal the exact server or framework version, which lets an attacker look up known vulnerabilities for it without guessing.

    • server: LiteSpeed (2054 responses)
    • x-powered-by: PHP/8.2.33 (1187 responses)
    • server: cloudflare (127 responses)
  • FoundCookie flagsMedium

    1 of 2 cookies are missing protective flags. Without HttpOnly a script can read the cookie; without Secure it travels over plain HTTP; without SameSite it is sent on cross-site requests.

    • magnetis-source (set by https://boulevardlexus.com/lexus-nx?utm_source=chatgpt.com) lacks HttpOnly, SameSite
  • FoundVulnerable JavaScript librariesMedium

    2 libraries with published vulnerabilities: jQuery 1.9.1, Bootstrap 4.2.1. Whether they are exploitable depends on how the site uses them, but each has a fixed release.

    • jQuery 1.9.1 in https://boulevardlexus.com/wp-content/themes/magnetis-dealer/assets/js/main.js?…: CVE-2015-9251 (XSS via cross-domain AJAX), CVE-2019-11358 (prototype pollution), CVE-2020-11022, CVE-2020-11023 (XSS via HTML passed to DOM methods); fixed in 3.5.0
    • Bootstrap 4.2.1 in https://boulevardlexus.com/wp-content/themes/magnetis-dealer/assets/js/main.js?…: CVE-2018-14040, CVE-2018-14041, CVE-2018-14042, CVE-2019-8331 (XSS through data attributes in tooltip, popover, collapse and scrollspy); fixed in 4.3.1
  • NoteThird-party scripts

    Scripts run from 5 other domains without Subresource Integrity, so a compromise of any of them changes what runs on this site. (Tag managers and analytics rarely support SRI; a Content-Security-Policy that names these hosts is the usual control.)

    • www.googletagmanager.com (40 script tags)
    • code.tidio.co (40 script tags)
    • kit.fontawesome.com (26 script tags)
    • www.google.com (26 script tags)
    • cdn.trustindex.io (1 script tag)
10 checks passed
  • OKHTTPS

    All 916 crawled pages were served over HTTPS.

  • OKHTTP Strict Transport Security

    strict-transport-security is set on all 916 HTML pages.

  • OKContent Security Policy

    A Content-Security-Policy is set.

  • OKClickjacking protection

    Every HTML page restricts framing through X-Frame-Options or a CSP frame-ancestors directive.

  • OKPermissions policy

    permissions-policy is set on all 916 HTML pages.

  • OKMixed content

    No HTTPS page loads a script, stylesheet, font or image over plain HTTP.

  • OKForms over HTTPS

    134 forms found, all on HTTPS pages posting to HTTPS addresses.

  • OKKeys and secrets in page code

    No API keys, tokens or private keys were found in the sampled HTML and scripts.

  • OKExposed files and listings

    None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.

  • OKSensitive paths in robots.txt

    robots.txt does not point at admin, backup or private paths.

A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.

Sites scoring near boulevardlexus.com

Their neighbours in the SEO rank table, which orders every scanned site by health score.

This report was produced by the DIY SEO Hub Site Spider crawling boulevardlexus.com from its pages as published, the way a search engine does. It shows summary figures only.

Own boulevardlexus.com?

  • Claim this site to manage the listing, hide it from the public lists, or keep it.
  • Want it gone instead? Ask through the support form or e-mail support@diyseohub.com, naming boulevardlexus.com. Removal needs no account and no proof of purchase.
boulevardlexus.com scan 2026-09-20-1828 | DIY SEO Hub