Scanned sites / feltmanewing.com / 2026-10-03-2138

feltmanewing.com scan from 10/3/2026, 9:38:08 PM

Scan 2026-10-03-2138

Scanned 10/3/2026, 9:38:08 PM, finished 10/4/2026, 5:53:56 AM. Found on page 5 of brave web search results

Site: https://feltmanewing.com/

Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.

73/ 100Needs work

On October 3, 2026 the Site Spider crawled 472 pages and 686 assets of feltmanewing.com, starting from https://feltmanewing.com/. It scored 73 out of 100, a result that needs work. 13 of 16 checks found something to fix, led by heavy assets (13), title tags (208), meta descriptions (257); 2 checks passed. Most of the points went to heavy assets (−6), title tags (−4.7), meta descriptions (−4.6). 1 check found something the score does not count, listed as noted. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.

Security review: Medium4 medium, 3 low and 1 info findings. See the security findings ↓

Pages crawled
472
Assets fetched
686
Status
Completed
Checks with issues
13 of 16
CoverageComplete crawl

1,158 of 1,158 discovered URLs were fetched. The crawl reached everything it found. HTML only: nothing here ran JavaScript. 46 link destinations on other sites were checked.

  • Title tags208 issues
    208 of 273 pages have title issues. 173 noindex or canonicalized pages excluded.
    −4.7 points
  • Meta descriptions257 issues
    257 of 273 pages have meta description issues. 173 noindex or canonicalized pages excluded.
    −4.6 points
  • Headings47 issues
    47 of 273 pages have heading issues. 173 noindex or canonicalized pages excluded.
    −0.6 points
  • Broken links1 issue
    1 internal link point at 1 broken URL.
  • Links to other sites6 issues
    6 destinations answered with an error, 22 could not be determined (timeouts, rate limits or refusals), of 46 destinations checked.
    −0.5 points
  • Redirects10 issues
    12 redirecting URLs, 0 of them chained.
    −0.1 points
  • Non-200 responses1 issue
    19 URLs did not return a 2xx response. 11 of them are pages, 1 with an error status; the rest are assets or redirects.
  • Rate limited15 issues
    15 URLs (15 pages) answered HTTP 429 on every try, so the crawler backed off and moved on without analysing them. A site that throttles crawlers this hard can throttle search engines too.
    −0.1 points
  • IndexabilityOK
    0 of 273 indexable pages have indexability warnings. 173 pages noindex by design.
  • Image alt text880 issues
    880 of 2937 image references have no alt attribute. 1643 use an empty alt (decorative), which is fine.
    −1.8 points
  • Heavy assets13 issues
    13 assets larger than 500 KB among 686 fetched assets.
    −6 points
  • Orphan pages189 issues
    189 pages have no internal links pointing at them.
    −1.7 points
  • Sitemap coverage189 issues
    1 sitemap listing 273 URLs: 0 crawled pages missing, 0 listed URLs broken or redirecting, 189 reachable only via the sitemap.
    −2.5 points
  • Internal link countsOK
    Internal link counts for 446 pages.
  • Thin content236 issues
    236 of 273 pages have fewer than 200 words. 173 noindex or canonicalized pages excluded.
    −4.2 points
  • Duplicate contentOK
    0 groups of pages with identical HTML.

Where this scan sits among all scanned sites

2057 sites, median 80%, average 78%

feltmanewing.com scores 73%, higher than 24% of the 2057 scanned sites. See the full ranking.

0521040%: 0 sites1%: 0 sites2%: 0 sites3%: 0 sites4%: 0 sites5%: 0 sites6%: 0 sites7%: 0 sites8%: 0 sites9%: 0 sites10%: 0 sites11%: 0 sites12%: 0 sites13%: 0 sites14%: 0 sites15%: 0 sites16%: 0 sites17%: 0 sites18%: 0 sites19%: 0 sites20%: 0 sites21%: 1 site22%: 0 sites23%: 0 sites24%: 0 sites25%: 0 sites26%: 0 sites27%: 0 sites28%: 1 site29%: 0 sites30%: 0 sites31%: 0 sites32%: 0 sites33%: 0 sites34%: 0 sites35%: 2 sites36%: 2 sites37%: 2 sites38%: 3 sites39%: 1 site40%: 1 site41%: 2 sites42%: 0 sites43%: 1 site44%: 1 site45%: 4 sites46%: 4 sites47%: 5 sites48%: 2 sites49%: 4 sites50%: 4 sites51%: 3 sites52%: 9 sites53%: 6 sites54%: 8 sites55%: 6 sites56%: 6 sites57%: 7 sites58%: 14 sites59%: 6 sites60%: 10 sites61%: 14 sites62%: 16 sites63%: 20 sites64%: 16 sites65%: 29 sites66%: 24 sites67%: 38 sites68%: 36 sites69%: 24 sites70%: 45 sites71%: 49 sites72%: 66 sites73%: 54 sites74%: 59 sites75%: 75 sites76%: 82 sites77%: 75 sites78%: 97 sites79%: 80 sites80%: 104 sites81%: 102 sites82%: 98 sites83%: 91 sites84%: 90 sites85%: 72 sites86%: 75 sites87%: 69 sites88%: 65 sites89%: 52 sites90%: 39 sites91%: 41 sites92%: 29 sites93%: 17 sites94%: 15 sites95%: 10 sites96%: 7 sites97%: 8 sites98%: 1 site99%: 2 sites100%: 56 sites73% here100%90%80%70%60%50%40%30%20%10%0%

Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).

Internal link map

Loading the link map...

Start page (centre)OKRedirectErrorOrphanLinked from most pagesOne inbound link or noneRings = clicks from the start page. Size = inbound links. Drag to pan, scroll to zoom, click a page to see only its links.

Fix plan

Written by gpt-4o-mini from the scan findings

Your website has several optimizations needed, focusing on fixing broken links, improving redirects, and addressing heavy assets. These changes will enhance user experience and site performance significantly.

  1. 1

    Fix Broken Links

    Why: 1 broken internal link negatively impacts user experience and SEO.

    How: Update the linking page to point to the correct URL or remove the link.

    Checks: broken-links

  2. 2

    Address Non-200 Responses

    Why: 19 URLs returning non-200 responses can lead to poor user experience and impact SEO.

    How: Check and resolve the issues on these URLs to ensure they return a 200 status.

    Checks: status-codes

  3. 3

    Improve Redirects

    Why: Having 12 redirects can slow down page load times and detract from user experience.

    How: Evaluate if you can eliminate some redirects by linking to the final URLs directly.

    Checks: redirects

  4. 4

    Optimize Heavy Assets

    Why: Large assets slow down page load times, affecting user experience.

    How: Shrink the identified images to improve load times; also consider serving them in a different format.

    Checks: heavy-assets

  5. 5

    Improve Title Tags

    Why: 208 pages with title issues limit click-through rates and search visibility.

    How: Create informative, unique title tags for each page; aim for optimal length.

    Checks: titles

  6. 6

    Add Missing Meta Descriptions

    Why: 204 pages lacking meta descriptions result in missed ranking opportunities.

    How: Write concise meta descriptions for these pages to improve click-through rates.

    Checks: meta-descriptions

Generated automatically; verify each change against your own site before relying on it.

Security review

Written by gpt-4o-mini from 16 checks over the crawl

The website has several security issues, primarily related to missing security headers and vulnerable libraries. It's critical to implement these fixes to secure visitor data and ensure a more robust security posture.

  • 0 high
  • 4 medium
  • 3 low
  • 1 info
  1. 1

    Missing HTTP Strict Transport Security (HSTS)Medium

    Why it matters: Without HSTS, visitors could be intercepted if they enter the URL without HTTPS.

    Fix: Set the header: Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

    Evidence: HTTP Strict Transport Security

  2. 2

    Missing X-Frame-Options HeaderMedium

    Why it matters: Absence of this header allows clickjacking attacks by embedding your site in a malicious frame.

    Fix: Set the header: X-Frame-Options: DENY

    Evidence: Clickjacking protection

  3. 3

    Cookies Missing Security FlagsMedium

    Why it matters: Lack of security flags puts cookies at risk from cross-site attacks.

    Fix: Set the flags for the cookie: Set-Cookie: wordpress_test_cookie; SameSite=Strict; HttpOnly; Secure

    Evidence: Cookie flags

  4. 4

    Outdated JavaScript LibraryMedium

    Why it matters: Using Bootstrap 3.3.4 contains known vulnerabilities, potentially exploitable depending on usage.

    Fix: Upgrade Bootstrap to at least version 3.4.1 to fix vulnerabilities.

    Evidence: Vulnerable JavaScript libraries

  5. 5

    Missing X-Content-Type-Options HeaderLow

    Why it matters: This can lead to MIME sniffing attacks where a file could be executed as a script.

    Fix: Set the header: X-Content-Type-Options: nosniff

    Evidence: MIME sniffing protection

  6. 6

    Missing Referrer-Policy HeaderLow

    Why it matters: Without this policy, sensitive information could leak to other sites through referrer headers.

    Fix: Set the header: Referrer-Policy: no-referrer

    Evidence: Referrer policy

  7. 7

    Mixed Content IssuesLow

    Why it matters: Loading resources over HTTP on an HTTPS page can compromise security.

    Fix: Update URLs to use HTTPS, e.g., 'https://feltmanewing.com/wp-content/uploads/2020/07/Lawpact-logos-couleur.png'

    Evidence: Mixed content

  8. 8

    Missing Permissions Policy HeaderInfo

    Why it matters: This header restricts browser features, helping limit the impact of malicious scripts.

    Fix: Set the header: Permissions-Policy: *;

    Evidence: Permissions policy

What the checks found

  • FoundHTTP Strict Transport SecurityMedium

    No HTML page sends strict-transport-security. Without it a visitor who types the address without https:// can be intercepted on the first request.

    • https://feltmanewing.com/ → no strict-transport-security
    • https://feltmanewing.com/blog/ → no strict-transport-security
    • https://feltmanewing.com/contact-2/ → no strict-transport-security
    • https://feltmanewing.com/practice_areas/personal-injury-lawyers/ → no strict-transport-security
    • https://feltmanewing.com/practice_areas/insurance-law/ → no strict-transport-security
    • https://feltmanewing.com/practice_areas/commercial-business-law/ → no strict-transport-security
    • https://feltmanewing.com/practice_areas/trust-estate-litigation/ → no strict-transport-security
    • https://feltmanewing.com/practice_areas/creditors-rights/ → no strict-transport-security
    • https://feltmanewing.com/practice_areas/real-estate-property-law/ → no strict-transport-security
    • https://feltmanewing.com/practice_areas/construction-law/ → no strict-transport-security
    • https://feltmanewing.com/practice_areas/intellectual-property/ → no strict-transport-security
    • https://feltmanewing.com/practice_areas/alternative-dispute-resolution/ → no strict-transport-security
  • FoundClickjacking protectionMedium

    153 of 446 HTML pages send x-frame-options. Without X-Frame-Options (or a CSP frame-ancestors directive) the pages can be embedded in a frame on another site and overlaid with invisible controls.

    • https://feltmanewing.com/ → no x-frame-options
    • https://feltmanewing.com/blog/ → no x-frame-options
    • https://feltmanewing.com/contact-2/ → no x-frame-options
    • https://feltmanewing.com/practice_areas/personal-injury-lawyers/ → no x-frame-options
    • https://feltmanewing.com/practice_areas/insurance-law/ → no x-frame-options
    • https://feltmanewing.com/practice_areas/commercial-business-law/ → no x-frame-options
    • https://feltmanewing.com/practice_areas/trust-estate-litigation/ → no x-frame-options
    • https://feltmanewing.com/practice_areas/creditors-rights/ → no x-frame-options
    • https://feltmanewing.com/practice_areas/real-estate-property-law/ → no x-frame-options
    • https://feltmanewing.com/practice_areas/construction-law/ → no x-frame-options
    • https://feltmanewing.com/practice_areas/intellectual-property/ → no x-frame-options
    • https://feltmanewing.com/practice_areas/alternative-dispute-resolution/ → no x-frame-options
  • FoundMIME sniffing protectionLow

    No HTML page sends x-content-type-options. Without X-Content-Type-Options: nosniff a browser may run a file as a script because of its contents rather than its declared type.

    • https://feltmanewing.com/ → no x-content-type-options
    • https://feltmanewing.com/blog/ → no x-content-type-options
    • https://feltmanewing.com/contact-2/ → no x-content-type-options
    • https://feltmanewing.com/practice_areas/personal-injury-lawyers/ → no x-content-type-options
    • https://feltmanewing.com/practice_areas/insurance-law/ → no x-content-type-options
    • https://feltmanewing.com/practice_areas/commercial-business-law/ → no x-content-type-options
    • https://feltmanewing.com/practice_areas/trust-estate-litigation/ → no x-content-type-options
    • https://feltmanewing.com/practice_areas/creditors-rights/ → no x-content-type-options
    • https://feltmanewing.com/practice_areas/real-estate-property-law/ → no x-content-type-options
    • https://feltmanewing.com/practice_areas/construction-law/ → no x-content-type-options
    • https://feltmanewing.com/practice_areas/intellectual-property/ → no x-content-type-options
    • https://feltmanewing.com/practice_areas/alternative-dispute-resolution/ → no x-content-type-options
  • FoundReferrer policyLow

    153 of 446 HTML pages send referrer-policy. Without a Referrer-Policy the full page address, including any query string, is sent to every site a visitor clicks through to.

    • https://feltmanewing.com/ → no referrer-policy
    • https://feltmanewing.com/blog/ → no referrer-policy
    • https://feltmanewing.com/contact-2/ → no referrer-policy
    • https://feltmanewing.com/practice_areas/personal-injury-lawyers/ → no referrer-policy
    • https://feltmanewing.com/practice_areas/insurance-law/ → no referrer-policy
    • https://feltmanewing.com/practice_areas/commercial-business-law/ → no referrer-policy
    • https://feltmanewing.com/practice_areas/trust-estate-litigation/ → no referrer-policy
    • https://feltmanewing.com/practice_areas/creditors-rights/ → no referrer-policy
    • https://feltmanewing.com/practice_areas/real-estate-property-law/ → no referrer-policy
    • https://feltmanewing.com/practice_areas/construction-law/ → no referrer-policy
    • https://feltmanewing.com/practice_areas/intellectual-property/ → no referrer-policy
    • https://feltmanewing.com/practice_areas/alternative-dispute-resolution/ → no referrer-policy
  • FoundPermissions policyInfo

    No HTML page sends permissions-policy. A Permissions-Policy header turns off browser features the site does not use (camera, microphone, geolocation), limiting what an injected script could do.

    • https://feltmanewing.com/ → no permissions-policy
    • https://feltmanewing.com/blog/ → no permissions-policy
    • https://feltmanewing.com/contact-2/ → no permissions-policy
    • https://feltmanewing.com/practice_areas/personal-injury-lawyers/ → no permissions-policy
    • https://feltmanewing.com/practice_areas/insurance-law/ → no permissions-policy
    • https://feltmanewing.com/practice_areas/commercial-business-law/ → no permissions-policy
    • https://feltmanewing.com/practice_areas/trust-estate-litigation/ → no permissions-policy
    • https://feltmanewing.com/practice_areas/creditors-rights/ → no permissions-policy
    • https://feltmanewing.com/practice_areas/real-estate-property-law/ → no permissions-policy
    • https://feltmanewing.com/practice_areas/construction-law/ → no permissions-policy
    • https://feltmanewing.com/practice_areas/intellectual-property/ → no permissions-policy
    • https://feltmanewing.com/practice_areas/alternative-dispute-resolution/ → no permissions-policy
  • FoundCookie flagsMedium

    1 of 2 cookies are missing protective flags. Without HttpOnly a script can read the cookie; without Secure it travels over plain HTTP; without SameSite it is sent on cross-site requests.

    • wordpress_test_cookie (set by https://feltmanewing.com/wp-login.php?redirect_to=https%3A%2F%2Ffeltmanewing.co…) lacks SameSite
  • FoundMixed contentLow

    2 resources on HTTPS pages are loaded over plain HTTP.

    • https://feltmanewing.com/lawpact/ loads image http://feltmanewing.com/wp-content/uploads/2020/07/Lawpact-logos-couleur.png
    • https://feltmanewing.com/lawpact/ loads image http://feltmanewing.com/wp-content/uploads/2020/07/Lawpact-logos-couleur.png
  • FoundVulnerable JavaScript librariesMedium

    1 library with published vulnerabilities: Bootstrap 3.3.4. Whether they are exploitable depends on how the site uses them, but each has a fixed release.

    • Bootstrap 3.3.4 in https://feltmanewing.com/wp-content/themes/legalpower/assets/js/bootstrap.min.j…: CVE-2016-10735, CVE-2018-14040, CVE-2018-14041, CVE-2018-14042, CVE-2019-8331 (XSS through data attributes in tooltip, popover, collapse and scrollspy); fixed in 3.4.1
  • FoundKeys and secrets in page codeMedium

    1 credential-like value found in code served to every visitor: Google API key.

    • Google API key AIzaSy…3M (39 chars) in https://feltmanewing.com/: browser keys are expected in pages, but must be restricted by HTTP referrer and API in the Google Cloud console
  • NoteThird-party scripts

    Scripts run from 4 other domains without Subresource Integrity, so a compromise of any of them changes what runs on this site. (Tag managers and analytics rarely support SRI; a Content-Security-Policy that names these hosts is the usual control.)

    • www.googletagmanager.com (40 script tags)
    • cdn.trustedsite.com (40 script tags)
    • maps.google.com (40 script tags)
    • www.google.com (40 script tags)
6 checks passed
  • OKHTTPS

    All 446 crawled pages were served over HTTPS.

  • OKContent Security Policy

    A Content-Security-Policy is set on 153 of 446 pages.

  • OKSoftware version disclosure

    The Server header names a product without a version, and there is no X-Powered-By header.

  • OKForms over HTTPS

    25 forms found, all on HTTPS pages posting to HTTPS addresses.

  • OKExposed files and listings

    None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.

  • OKSensitive paths in robots.txt

    robots.txt does not point at admin, backup or private paths.

A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.

Sites scoring near feltmanewing.com

Their neighbours in the SEO rank table, which orders every scanned site by health score.

This report was produced by the DIY SEO Hub Site Spider crawling feltmanewing.com from its pages as published, the way a search engine does. It shows summary figures only.

Own feltmanewing.com?

  • Claim this site to manage the listing, hide it from the public lists, or keep it.
  • Want it gone instead? Ask through the support form or e-mail support@diyseohub.com, naming feltmanewing.com. Removal needs no account and no proof of purchase.
feltmanewing.com scan 2026-10-03-2138 | DIY SEO Hub