Scanned sites / marshallauction.com / 2026-09-28-1700
marshallauction.com scan from 9/28/2026, 5:00:02 PM
Scan 2026-09-28-1700
Scanned 9/28/2026, 5:00:02 PM, finished 9/28/2026, 5:38:15 PM. Found on page 3 of chatgpt for browser (api usage) results
Site: https://marshallauction.com/
Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.
On September 28, 2026 the Site Spider crawled 352 pages and 1513 assets of marshallauction.com, starting from https://marshallauction.com/. It scored 73 out of 100, a result that needs work. 12 of 16 checks found something to fix, led by title tags (242), heavy assets (875), meta descriptions (243); 3 checks passed. Most of the points went to title tags (−7.4), meta descriptions (−6), heavy assets (−6). 1 check found something the score does not count, listed as noted. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.
Security review: High1 high, 4 medium, 1 low and 1 info findings. See the security findings ↓
- Pages crawled
- 352
- Assets fetched
- 1513
- Status
- Completed
- Checks with issues
- 12 of 16
1,865 of 1,910 discovered URLs were fetched, 194 left out by the 5,000-page and 1,000-asset budget. The job finished, but the crawl did not reach everything it found. HTML only: nothing here ran JavaScript. 67 link destinations on other sites were checked.
- Title tags242 issues242 of 257 pages have title issues. 68 noindex or canonicalized pages excluded.−7.4 points
- Meta descriptions243 issues243 of 257 pages have meta description issues. 68 noindex or canonicalized pages excluded.−6 points
- Headings14 issues14 of 257 pages have heading issues. 68 noindex or canonicalized pages excluded.−0.3 points
- Broken links3 issues3 internal links point at 3 broken URLs.−0.2 points
- Links to other sites2 issues2 destinations answered with an error, 29 could not be determined (timeouts, rate limits or refusals), of 67 destinations checked.−0.2 points
- Redirects24 issues25 redirecting URLs, 0 of them chained.−0.3 points
- Non-200 responses3 issues29 URLs did not return a 2xx response. 27 of them are pages, 3 with an error status; the rest are assets or redirects.−0.1 points
- Rate limitedOKThe site did not rate limit the crawler.
- Indexability21 issues21 of 325 indexable pages have indexability warnings.−0.6 points
- Image alt textOK0 of 1 image reference have no alt attribute. 1 use an empty alt (decorative), which is fine.
- Heavy assets875 issues875 assets larger than 500 KB among 1513 fetched assets. 125 documents over that size are listed but not counted: downloads are not page weight.−6 points
- Orphan pages21 issues21 pages have no internal links pointing at them.−0.3 points
- Sitemap coverage257 issues1 sitemap listing 0 URLs: 257 crawled pages missing, 0 listed URLs broken or redirecting, 0 reachable only via the sitemap.−4.7 points
- Internal link countsOKInternal link counts for 325 pages.
- Thin content55 issues55 of 257 pages have fewer than 200 words. 68 noindex or canonicalized pages excluded.−1.4 points
- Duplicate contentOK0 groups of pages with identical HTML.
Where this scan sits among all scanned sites
1692 sites, median 80%, average 79%
marshallauction.com scores 73%, higher than 23% of the 1692 scanned sites. See the full ranking.
Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).
Internal link map
Loading the link map...
Fix plan
Written by gpt-4o-mini from the scan findingsYour site has several key issues affecting performance and SEO. Focus on fixing broken links, improving sitemap coverage, addressing title and meta description issues, and optimizing heavy assets for better user experience.
- 1
Fix Broken Links
Why: Broken links harm user experience and SEO ranking.
How: Update or remove links pointing to non-existent pages.
Checks: broken-links
- 2
Improve Sitemap Coverage
Why: Missing pages in the sitemap hinder indexing and discoverability.
How: Update your sitemap to include all 257 crawled pages.
Checks: sitemap-coverage
- 3
Optimize Title Tags
Why: Most pages have title issues affecting SEO.
How: Review titles to ensure they are unique and meet best practices.
Checks: titles
- 4
Enhance Meta Descriptions
Why: Most pages lack or have ineffective meta descriptions.
How: Create compelling meta descriptions for the majority of pages.
Checks: meta-descriptions
- 5
Shrink Heavy Assets
Why: Large files can slow down your site’s performance.
How: Compress or remove large PDFs to improve load times.
Checks: heavy-assets
Generated automatically; verify each change against your own site before relying on it.
Security review
Written by gpt-4o-mini from 16 checks over the crawlThe website has significant security concerns primarily related to lacking HTTPS, HTTP Strict Transport Security, and other security headers. These issues could expose user data to threats. Immediate attention is needed to secure pages and implement appropriate headers, particularly to protect against man-in-the-middle attacks and unauthorized script execution.
- 1 high
- 4 medium
- 1 low
- 1 info
- 1
Insecure HTTP PagesHigh
Why it matters: Two pages are accessible over plain HTTP, making them susceptible to interception and alteration.
Fix: Ensure all pages are served securely over HTTPS and implement 301 redirects from HTTP to HTTPS.
Evidence: HTTPS
- 2
Missing HTTP Strict Transport Security (HSTS)Medium
Why it matters: Without HSTS, visitors typing the URL may be exposed to interception on their first request.
Fix: Add the header: Strict-Transport-Security: max-age=31536000; includeSubDomains to all responses.
Evidence: HTTP Strict Transport Security
- 3
No Content Security Policy (CSP)Medium
Why it matters: Absence of a CSP allows potential execution of harmful scripts which could compromise user data.
Fix: Implement a CSP header, such as Content-Security-Policy: default-src 'self'; to restrict resource loading.
Evidence: Content Security Policy
- 4
Lack of Clickjacking ProtectionMedium
Why it matters: Missing X-Frame-Options allows the site to be embedded in frames, risking user interaction deception.
Fix: Include the header: X-Frame-Options: DENY to prevent clickjacking.
Evidence: Clickjacking protection
- 5
Leaked Google API KeyMedium
Why it matters: An exposed Google API key could lead to unauthorized usage and potential charges.
Fix: Restrict the API key by HTTP referrer in the Google Cloud Console and consider rotating it.
Evidence: Keys and secrets in page code
- 6
No MIME Sniffing ProtectionLow
Why it matters: Without X-Content-Type-Options, browsers may incorrectly execute files based on their content.
Fix: Add the header: X-Content-Type-Options: nosniff to mitigate this risk.
Evidence: MIME sniffing protection
- 7
Missing Permissions PolicyInfo
Why it matters: Without a permissions-policy header, scripts can access APIs that may not be secured.
Fix: Add the header: Permissions-Policy: geolocation=(self), microphone=(), camera=() to limit access.
Evidence: Permissions policy
What the checks found
- FoundHTTPSHigh
2 pages answered 200 over plain HTTP with no redirect to HTTPS, while 323 were served over HTTPS. Anyone on the network path can read or alter these pages.
- http://marshallauction.com/contact-us/ → 200 over http
- http://marshallauction.com/farm-ranch-land-for-sale/ → 200 over http
- FoundHTTP Strict Transport SecurityMedium
No HTML page sends strict-transport-security. Without it a visitor who types the address without https:// can be intercepted on the first request.
- https://marshallauction.com/ → no strict-transport-security
- https://marshallauction.com/contact-us/ → no strict-transport-security
- https://marshallauction.com/farm-ranch-land-for-sale/ → no strict-transport-security
- https://marshallauction.com/sold-land/ → no strict-transport-security
- https://marshallauction.com/land-and-equipment-auctions/ → no strict-transport-security
- https://marshallauction.com/sold-auctions/ → no strict-transport-security
- https://marshallauction.com/real-estate-listings/ → no strict-transport-security
- https://marshallauction.com/sold-real-estate-listings/ → no strict-transport-security
- https://marshallauction.com/meet-the-marshall-team/ → no strict-transport-security
- https://marshallauction.com/resources/ → no strict-transport-security
- https://marshallauction.com/careers/ → no strict-transport-security
- https://marshallauction.com/in-the-news/ → no strict-transport-security
- FoundContent Security PolicyMedium
None of the 325 HTML pages send a Content-Security-Policy header or meta tag, so the browser has no restriction on where scripts, styles and frames may load from.
- https://marshallauction.com/ → no content-security-policy
- https://marshallauction.com/contact-us/ → no content-security-policy
- https://marshallauction.com/farm-ranch-land-for-sale/ → no content-security-policy
- https://marshallauction.com/sold-land/ → no content-security-policy
- https://marshallauction.com/land-and-equipment-auctions/ → no content-security-policy
- https://marshallauction.com/sold-auctions/ → no content-security-policy
- https://marshallauction.com/real-estate-listings/ → no content-security-policy
- https://marshallauction.com/sold-real-estate-listings/ → no content-security-policy
- https://marshallauction.com/meet-the-marshall-team/ → no content-security-policy
- https://marshallauction.com/resources/ → no content-security-policy
- https://marshallauction.com/careers/ → no content-security-policy
- https://marshallauction.com/in-the-news/ → no content-security-policy
- FoundClickjacking protectionMedium
No HTML page sends x-frame-options. Without X-Frame-Options (or a CSP frame-ancestors directive) the pages can be embedded in a frame on another site and overlaid with invisible controls.
- https://marshallauction.com/ → no x-frame-options
- https://marshallauction.com/contact-us/ → no x-frame-options
- https://marshallauction.com/farm-ranch-land-for-sale/ → no x-frame-options
- https://marshallauction.com/sold-land/ → no x-frame-options
- https://marshallauction.com/land-and-equipment-auctions/ → no x-frame-options
- https://marshallauction.com/sold-auctions/ → no x-frame-options
- https://marshallauction.com/real-estate-listings/ → no x-frame-options
- https://marshallauction.com/sold-real-estate-listings/ → no x-frame-options
- https://marshallauction.com/meet-the-marshall-team/ → no x-frame-options
- https://marshallauction.com/resources/ → no x-frame-options
- https://marshallauction.com/careers/ → no x-frame-options
- https://marshallauction.com/in-the-news/ → no x-frame-options
- FoundMIME sniffing protectionLow
No HTML page sends x-content-type-options. Without X-Content-Type-Options: nosniff a browser may run a file as a script because of its contents rather than its declared type.
- https://marshallauction.com/ → no x-content-type-options
- https://marshallauction.com/contact-us/ → no x-content-type-options
- https://marshallauction.com/farm-ranch-land-for-sale/ → no x-content-type-options
- https://marshallauction.com/sold-land/ → no x-content-type-options
- https://marshallauction.com/land-and-equipment-auctions/ → no x-content-type-options
- https://marshallauction.com/sold-auctions/ → no x-content-type-options
- https://marshallauction.com/real-estate-listings/ → no x-content-type-options
- https://marshallauction.com/sold-real-estate-listings/ → no x-content-type-options
- https://marshallauction.com/meet-the-marshall-team/ → no x-content-type-options
- https://marshallauction.com/resources/ → no x-content-type-options
- https://marshallauction.com/careers/ → no x-content-type-options
- https://marshallauction.com/in-the-news/ → no x-content-type-options
- FoundPermissions policyInfo
No HTML page sends permissions-policy. A Permissions-Policy header turns off browser features the site does not use (camera, microphone, geolocation), limiting what an injected script could do.
- https://marshallauction.com/ → no permissions-policy
- https://marshallauction.com/contact-us/ → no permissions-policy
- https://marshallauction.com/farm-ranch-land-for-sale/ → no permissions-policy
- https://marshallauction.com/sold-land/ → no permissions-policy
- https://marshallauction.com/land-and-equipment-auctions/ → no permissions-policy
- https://marshallauction.com/sold-auctions/ → no permissions-policy
- https://marshallauction.com/real-estate-listings/ → no permissions-policy
- https://marshallauction.com/sold-real-estate-listings/ → no permissions-policy
- https://marshallauction.com/meet-the-marshall-team/ → no permissions-policy
- https://marshallauction.com/resources/ → no permissions-policy
- https://marshallauction.com/careers/ → no permissions-policy
- https://marshallauction.com/in-the-news/ → no permissions-policy
- FoundKeys and secrets in page codeMedium
1 credential-like value found in code served to every visitor: Google API key.
- Google API key AIzaSy…qI (39 chars) in https://marshallauction.com/farm-ranch-land-for-sale/: browser keys are expected in pages, but must be restricted by HTTP referrer and API in the Google Cloud console
- NoteThird-party scripts
Scripts run from 2 other domains without Subresource Integrity, so a compromise of any of them changes what runs on this site. (Tag managers and analytics rarely support SRI; a Content-Security-Policy that names these hosts is the usual control.)
- www.google.com (40 script tags)
- maps.googleapis.com (3 script tags)
- NoteSensitive paths in robots.txt
robots.txt lists 1 path that look private. robots.txt is public and does not restrict access, so it doubles as a map for anyone probing the site; those paths need real access control.
- Disallow: /wp-admin/
6 checks passed, 1 not applicable
- OKReferrer policy
referrer-policy is set on all 325 HTML pages.
- OKSoftware version disclosure
The Server header names a product without a version, and there is no X-Powered-By header.
- OKMixed content
No HTTPS page loads a script, stylesheet, font or image over plain HTTP.
- OKForms over HTTPS
42 forms found, all on HTTPS pages posting to HTTPS addresses.
- OKVulnerable JavaScript libraries
1 library version recognised, none with known vulnerabilities.
- OKExposed files and listings
None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.
- Not applicableCookie flags
The crawl set no cookies, so there are no cookie flags to check.
A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.
Sites scoring near marshallauction.com
Their neighbours in the SEO rank table, which orders every scanned site by health score.
- jf-hair.com73/100 · rank 1257 · 51 pages
- ahavemassagespa.ca73/100 · rank 1257 · 10 pages
- customcpa.ca73/100 · rank 1257 · 629 pages
- www.chasefarmswells.com73/100 · rank 1257 · 7 pages
- www.rose-neath.com73/100 · rank 1257 · 1,085 pages
- www.feelchristmassy.co.uk73/100 · rank 1257 · 579 pages
This report was produced by the DIY SEO Hub Site Spider crawling marshallauction.com from its pages as published, the way a search engine does. It shows summary figures only.
Own marshallauction.com?
- Claim this site to manage the listing, hide it from the public lists, or keep it.
- Want it gone instead? Ask through the support form or e-mail support@diyseohub.com, naming marshallauction.com. Removal needs no account and no proof of purchase.