Scanned sites / boulevardlexus.com / 2026-09-20-1828
boulevardlexus.com scan from 2026-09-20 18:28:18 UTC DR 21
DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.
Scan 2026-09-20-1828
Scanned 2026-09-20 18:28:18 UTC, finished 2026-09-20 19:25:21 UTC
Site: https://boulevardlexus.com/
Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.
On September 20, 2026 the Site Spider crawled 1181 pages and 1000 assets of boulevardlexus.com, starting from https://boulevardlexus.com/. It scored 76 out of 100, a good result. 9 of 27 checks found something to fix, led by heavy assets (37), title tags (418), sitemap coverage (566); 7 checks passed. Most of the points went to heavy assets (−6), title tags (−4.6), sitemap coverage (−3.7). 11 checks found something the score does not count, listed as noted. 10 checks were not run because the crawl fetched nothing for them. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.
Security review: Medium2 medium and 3 low findings. See the security findings ↓
- Pages crawled
- 1181
- Assets fetched
- 1000
- Status
- Completed
- Checks with issues
- 9 of 27
2,181 of 2,181 discovered URLs were fetched, 961 left out by the 5,000-page and 1,000-asset budget. The job finished, but the crawl did not reach everything it found. HTML only: nothing here ran JavaScript. 302 link destinations on other sites were checked, 4020 left unchecked.
- Title tags418 issues418 of 566 pages have title issues. 350 noindex or canonicalized pages excluded.−4.6 points
- Meta descriptions399 issues399 of 566 pages have meta description issues. 350 noindex or canonicalized pages excluded.−3.5 points
- Headings35 issues35 of 566 pages have heading issues. 350 noindex or canonicalized pages excluded.−0.2 points
- Broken links6 issues8 internal links point at 6 broken URLs.−0.1 points
- Links to other sites3,662 noted0 destinations answered with an error, 5 could not be determined (timeouts, rate limits or refusals), 4020 were left unchecked by the per-scan cap, of 300 destinations checked.
- Redirects172 issues158 redirecting URLs, 19 of them chained.−0.8 points
- Non-200 responses108 issues270 URLs did not return a 2xx response. 265 of them are pages, 108 with an error status; the rest are assets or redirects.−1.2 points
- Rate limitedOKThe site did not rate limit the crawler.
- Indexability317 issues317 of 916 indexable pages have indexability warnings.−3.5 points
- Image alt textOK0 of 40628 image references have no alt attribute. 9 use an empty alt (decorative), which is fine.
- Heavy assets37 issues37 assets larger than 500 KB among 1000 fetched assets.−6 points
- Orphan pagesOK0 pages have no internal links pointing at them.
- Sitemap coverage566 issues1 sitemap listing 0 URLs: 566 crawled pages missing, 0 listed URLs broken or redirecting, 0 reachable only via the sitemap.−3.7 points
- Internal link counts120 notedInternal link counts for 500 pages; 120 worth a look.
- Thin contentOK0 of 566 pages have fewer than 200 words. 350 noindex or canonicalized pages excluded.
- Duplicate contentOK0 groups of pages with identical HTML.
- URL format175 noted175 of 1181 page URLs are harder to read, share or cache than they need to be.
- Canonicals350 noted350 of 916 pages have a canonical worth checking.
- Robots directives916 noted916 pages carry a robots directive; 0 carry none.
- Anchor text538 noted538 destinations are linked without useful anchor text, or with nofollow.
- Title and heading structure421 noted421 of 566 pages could use the title, heading and snippet space better. 350 noindex or canonicalized pages excluded.
- Image weight and alt length95 noted94 images over 100 KB; 1 with alt text over 100 characters.
- Response anomalies20 noted20 URLs answered in a way worth looking at.
- HTML and head validationNot checkedNot checked: this scan was crawled before this check existed. Scan the site again to run it.
- hreflangNot checkedNot checked: this scan was crawled before this check existed. Scan the site again to run it.
- Structured dataNot checkedNot checked: this scan was crawled before this check existed. Scan the site again to run it.
- Near duplicatesNot checkedNot checked: this scan was crawled before this check existed. Scan the site again to run it.
- Soft 404sOKNone of 916 pages answering 200 reads like an error page.
- AccessibilityNot checkedNot checked: the accessibility audit runs in the browser. Tick "Include JavaScript rendering checks" when you request a scan to run it.
- Link positionsNot checkedNot checked: this scan was crawled before link positions were recorded. Scan the site again to run it.
- PaginationNot checkedNot checked: this scan was crawled before this check existed. Scan the site again to run it.
- Headers and cookies1 noted2 cookies set by the site, 1 missing a protective flag; 15 response headers recorded across 2181 URLs.
- Orphans in searchNot checkedNot checked: import a Search Console Pages export on the scan page to find pages Google shows that the site does not link to.
- Link ScoreOKLink Score (internal PageRank, 0-100) for 916 pages; 629 hold almost none (10 or less).
- JavaScript renderingNot checkedNot checked: this scan did not render pages. Tick "Include JavaScript rendering checks" when you request a scan to compare the served HTML with what a browser builds.
- PageSpeed Insights5 notedMobile performance 50 on average across 5 pages; 5 below Google's good thresholds.
- SpellingNot checkedNot checked: this scan was crawled before this check existed. Scan the site again to run it.
Where this scan sits among all scanned sites
2858 sites, median 80%, average 79%
boulevardlexus.com scores 76%, higher than 32% of the 2858 scanned sites. See the full ranking.
Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).
Internal link map
Loading the link map...
Fix plan
Written by gpt-4o-mini from the scan findingsWritten from an earlier version of the analysis. The findings on this page have been recomputed since, so counts and labels here may differ from what the plan describes. The advice still points at the same checks.
Your site has several SEO issues that need addressing, but overall it has a good health score. Prioritize fixing broken links, redirects, and title/meta description issues for better visibility.
- 1
Fix Broken Links
Why: Improve user experience and SEO by ensuring all internal links work.
How: Replace or remove broken links found in crawl results.
Checks: broken-links
- 2
Resolve Redirects
Why: Chaining redirects can slow down site performance; simplify them.
How: Directly link to final destination URLs and remove extra hops for 19 chained redirects.
Checks: redirects
- 3
Address Non-200 Responses
Why: Improve indexing and user access by fixing URLs that return errors.
How: Check and correct 270 URLs not returning 2xx responses.
Checks: status-codes
- 4
Optimize Title Tags
Why: Improper title lengths can impact click-through rates on search results.
How: Shorten titles over 60 characters for affected pages to match best practices.
Checks: titles
- 5
Improve Meta Descriptions
Why: Missing meta descriptions reduce click-through rates from search engines.
How: Add unique meta descriptions to the 392 affected pages.
Checks: meta-descriptions
- 6
Correct Heading Structures
Why: Multiple H1s can confuse search engines about page content hierarchy.
How: Limit each page to one H1 tag and adjust headings accordingly for 35 pages.
Checks: headings
Generated automatically; verify each change against your own site before relying on it.
Security review
Written by gpt-4o-mini from 16 checks over the crawlThe website boulevardlexus.com has several security vulnerabilities, including missing security headers, exposed software versions, and outdated libraries. Addressing these issues will enhance overall site security and help protect against potential attacks.
- 0 high
- 2 medium
- 3 low
- 0 info
- 1
Cookies Missing Security FlagsMedium
Why it matters: Lack of flags like HttpOnly and SameSite increases the risk of cookie theft and cross-site request forgery.
Fix: Set HttpOnly and SameSite attributes on the magnetis-source cookie.
Evidence: Cookie flags
- 2
Outdated JavaScript LibrariesMedium
Why it matters: Using vulnerable libraries can expose the site to various attacks, including XSS.
Fix: Upgrade jQuery to at least version 3.5.0 and Bootstrap to at least version 4.3.1.
Evidence: Vulnerable JavaScript libraries
- 3
Missing X-Content-Type-Options HeaderLow
Why it matters: Without this header, browsers may misinterpret files' content types, which can lead to script execution vulnerabilities.
Fix: Add the header X-Content-Type-Options: nosniff to all HTML responses.
Evidence: MIME sniffing protection
- 4
Missing Referrer-Policy HeaderLow
Why it matters: The absence of this header allows full URLs to be sent to other sites, risking sensitive data exposure.
Fix: Add the header Referrer-Policy: no-referrer to all HTML responses.
Evidence: Referrer policy
- 5
Exposed Software VersionsLow
Why it matters: Revealing server and software versions invites targeted vulnerabilities attacks.
Fix: Remove or hide the server banner info, specifically the headers: Server and X-Powered-By.
Evidence: Software version disclosure
What the checks found
- FoundMIME sniffing protectionLow
No HTML page sends x-content-type-options. Without X-Content-Type-Options: nosniff a browser may run a file as a script because of its contents rather than its declared type.
- https://boulevardlexus.com/ → no x-content-type-options
- https://boulevardlexus.com/en → no x-content-type-options
- https://boulevardlexus.com/rendez-vous-service → no x-content-type-options
- https://boulevardlexus.com/vehicules-neufs → no x-content-type-options
- https://boulevardlexus.com/inventaire-neuf → no x-content-type-options
- https://boulevardlexus.com/prendre-rendez-vous → no x-content-type-options
- https://boulevardlexus.com/occasion → no x-content-type-options
- https://boulevardlexus.com/inventaire-certifie → no x-content-type-options
- https://boulevardlexus.com/programme-certifie-lexus → no x-content-type-options
- https://boulevardlexus.com/services-mecaniques → no x-content-type-options
- https://boulevardlexus.com/service-desthetique → no x-content-type-options
- https://boulevardlexus.com/centre-de-carrosserie → no x-content-type-options
- FoundReferrer policyLow
No HTML page sends referrer-policy. Without a Referrer-Policy the full page address, including any query string, is sent to every site a visitor clicks through to.
- https://boulevardlexus.com/ → no referrer-policy
- https://boulevardlexus.com/en → no referrer-policy
- https://boulevardlexus.com/rendez-vous-service → no referrer-policy
- https://boulevardlexus.com/vehicules-neufs → no referrer-policy
- https://boulevardlexus.com/inventaire-neuf → no referrer-policy
- https://boulevardlexus.com/prendre-rendez-vous → no referrer-policy
- https://boulevardlexus.com/occasion → no referrer-policy
- https://boulevardlexus.com/inventaire-certifie → no referrer-policy
- https://boulevardlexus.com/programme-certifie-lexus → no referrer-policy
- https://boulevardlexus.com/services-mecaniques → no referrer-policy
- https://boulevardlexus.com/service-desthetique → no referrer-policy
- https://boulevardlexus.com/centre-de-carrosserie → no referrer-policy
- FoundSoftware version disclosureLow
Responses reveal the exact server or framework version, which lets an attacker look up known vulnerabilities for it without guessing.
- server: LiteSpeed (2054 responses)
- x-powered-by: PHP/8.2.33 (1187 responses)
- server: cloudflare (127 responses)
- FoundCookie flagsMedium
1 of 2 cookies are missing protective flags. Without HttpOnly a script can read the cookie; without Secure it travels over plain HTTP; without SameSite it is sent on cross-site requests.
- magnetis-source (set by https://boulevardlexus.com/lexus-nx?utm_source=chatgpt.com) lacks HttpOnly, SameSite
- FoundVulnerable JavaScript librariesMedium
2 libraries with published vulnerabilities: jQuery 1.9.1, Bootstrap 4.2.1. Whether they are exploitable depends on how the site uses them, but each has a fixed release.
- jQuery 1.9.1 in https://boulevardlexus.com/wp-content/themes/magnetis-dealer/assets/js/main.js?…: CVE-2015-9251 (XSS via cross-domain AJAX), CVE-2019-11358 (prototype pollution), CVE-2020-11022, CVE-2020-11023 (XSS via HTML passed to DOM methods); fixed in 3.5.0
- Bootstrap 4.2.1 in https://boulevardlexus.com/wp-content/themes/magnetis-dealer/assets/js/main.js?…: CVE-2018-14040, CVE-2018-14041, CVE-2018-14042, CVE-2019-8331 (XSS through data attributes in tooltip, popover, collapse and scrollspy); fixed in 4.3.1
- NoteThird-party scripts
Scripts run from 5 other domains without Subresource Integrity, so a compromise of any of them changes what runs on this site. (Tag managers and analytics rarely support SRI; a Content-Security-Policy that names these hosts is the usual control.)
- www.googletagmanager.com (40 script tags)
- code.tidio.co (40 script tags)
- kit.fontawesome.com (26 script tags)
- www.google.com (26 script tags)
- cdn.trustindex.io (1 script tag)
10 checks passed
- OKHTTPS
All 916 crawled pages were served over HTTPS.
- OKHTTP Strict Transport Security
strict-transport-security is set on all 916 HTML pages.
- OKContent Security Policy
A Content-Security-Policy is set.
- OKClickjacking protection
Every HTML page restricts framing through X-Frame-Options or a CSP frame-ancestors directive.
- OKPermissions policy
permissions-policy is set on all 916 HTML pages.
- OKMixed content
No HTTPS page loads a script, stylesheet, font or image over plain HTTP.
- OKForms over HTTPS
134 forms found, all on HTTPS pages posting to HTTPS addresses.
- OKKeys and secrets in page code
No API keys, tokens or private keys were found in the sampled HTML and scripts.
- OKExposed files and listings
None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.
- OKSensitive paths in robots.txt
robots.txt does not point at admin, backup or private paths.
A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.
Sites scoring near boulevardlexus.com
Their neighbours in the SEO rank table, which orders every scanned site by health score.
- franchimanagement.comDR 176/100 · rank 1848 · 17 pages
- www.picoulumber.comDR 876/100 · rank 1848 · 31 pages
- faulriversideky.comDR 876/100 · rank 1848 · 342 pages
- www.seacanfl.comDR 076/100 · rank 1848 · 15 pages
- piejunkie.caDR 2576/100 · rank 1848 · 130 pages
- vivacityfitness.caDR 476/100 · rank 1848 · 34 pages
DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.
This report was produced by the DIY SEO Hub Site Spider crawling boulevardlexus.com from its pages as published, the way a search engine does. It shows summary figures only.
Own boulevardlexus.com?
- Claim this site to manage the listing, hide it from the public lists, or keep it.
- Want it gone instead? Ask through the support form or e-mail support@diyseohub.com, naming boulevardlexus.com. Removal needs no account and no proof of purchase.