Scanned sites / nicholsmarineinc.com

SEO report for nicholsmarineinc.com

The latest Site Spider scan of nicholsmarineinc.com, with 1 scan on record. Each scan is at its own address, for example /domain/nicholsmarineinc-com/2026-10-04-0500.

Latest scan

Scanned 10/4/2026, 5:00:01 AM, finished 10/4/2026, 8:13:11 AM. Found on page 3 of chatgpt for browser (api usage) results

Site: https://nicholsmarineinc.com/

Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.

78/ 100Good

On October 4, 2026 the Site Spider crawled 747 pages and 5253 assets of nicholsmarineinc.com, starting from https://nicholsmarineinc.com/. It scored 78 out of 100, a good result. 11 of 16 checks found something to fix, led by heavy assets (381), meta descriptions (432), sitemap coverage (439); 4 checks passed. Most of the points went to heavy assets (−6), meta descriptions (−4.7), sitemap coverage (−3.6). 1 check found something the score does not count, listed as noted. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.

Security review: Medium3 medium, 3 low and 1 info findings. See the security findings ↓

Pages crawled
747
Assets fetched
5253
Status
Completed
Checks with issues
11 of 16
CoverageJob finished, partial coverage

6,000 of 6,000 discovered URLs were fetched, 28,713 left out by the 5,000-page and 1,000-asset budget. The job finished, but the crawl did not reach everything it found. HTML only: nothing here ran JavaScript. 156 link destinations on other sites were checked.

  • Title tags122 issues
    122 of 439 pages have title issues. 299 noindex or canonicalized pages excluded.
    −1.7 points
  • Meta descriptions432 issues
    432 of 439 pages have meta description issues. 299 noindex or canonicalized pages excluded.
    −4.7 points
  • Headings327 issues
    327 of 439 pages have heading issues. 299 noindex or canonicalized pages excluded.
    −2.7 points
  • Broken links3 issues
    16 internal links point at 3 broken URLs.
    −0.1 points
  • Links to other sites12 issues
    12 destinations answered with an error, 13 could not be determined (timeouts, rate limits or refusals), of 156 destinations checked.
    −0.6 points
  • Redirects7 issues
    7 redirecting URLs, 1 of them chained.
  • Non-200 responses3 issues
    10 URLs did not return a 2xx response. 9 of them are pages, 3 with an error status; the rest are assets or redirects.
  • Rate limitedOK
    The site did not rate limit the crawler.
  • Indexability170 issues
    170 of 616 indexable pages have indexability warnings. 122 pages noindex by design.
    −2.3 points
  • Image alt textOK
    0 of 18246 image references have no alt attribute. 4256 use an empty alt (decorative), which is fine.
  • Heavy assets381 issues
    381 assets larger than 500 KB among 5253 fetched assets.
    −6 points
  • Orphan pages1 issue
    1 page have no internal links pointing at them.
  • Sitemap coverage439 issues
    1 sitemap listing 0 URLs: 439 crawled pages missing, 0 listed URLs broken or redirecting, 0 reachable only via the sitemap.
    −3.6 points
  • Internal link countsOK
    Internal link counts for 500 pages.
  • Thin contentOK
    0 of 439 pages have fewer than 200 words. 299 noindex or canonicalized pages excluded.
  • Duplicate contentOK
    0 groups of pages with identical HTML.

Where this site sits among all scanned sites

2057 sites, median 80%, average 78%

nicholsmarineinc.com scores 78%, higher than 41% of the 2057 scanned sites. See the full ranking.

0511020%: 0 sites1%: 0 sites2%: 0 sites3%: 0 sites4%: 0 sites5%: 0 sites6%: 0 sites7%: 0 sites8%: 0 sites9%: 0 sites10%: 0 sites11%: 0 sites12%: 0 sites13%: 0 sites14%: 0 sites15%: 0 sites16%: 0 sites17%: 0 sites18%: 0 sites19%: 0 sites20%: 0 sites21%: 1 site22%: 0 sites23%: 0 sites24%: 0 sites25%: 0 sites26%: 0 sites27%: 0 sites28%: 1 site29%: 0 sites30%: 0 sites31%: 0 sites32%: 0 sites33%: 0 sites34%: 0 sites35%: 2 sites36%: 2 sites37%: 2 sites38%: 3 sites39%: 1 site40%: 1 site41%: 2 sites42%: 0 sites43%: 1 site44%: 1 site45%: 4 sites46%: 4 sites47%: 5 sites48%: 2 sites49%: 4 sites50%: 4 sites51%: 3 sites52%: 9 sites53%: 6 sites54%: 8 sites55%: 6 sites56%: 6 sites57%: 7 sites58%: 14 sites59%: 6 sites60%: 11 sites61%: 13 sites62%: 16 sites63%: 20 sites64%: 18 sites65%: 30 sites66%: 24 sites67%: 41 sites68%: 35 sites69%: 25 sites70%: 43 sites71%: 48 sites72%: 65 sites73%: 54 sites74%: 58 sites75%: 75 sites76%: 82 sites77%: 77 sites78%: 97 sites79%: 82 sites80%: 102 sites81%: 102 sites82%: 102 sites83%: 90 sites84%: 86 sites85%: 73 sites86%: 73 sites87%: 70 sites88%: 66 sites89%: 51 sites90%: 37 sites91%: 42 sites92%: 29 sites93%: 18 sites94%: 16 sites95%: 7 sites96%: 7 sites97%: 8 sites98%: 1 site99%: 2 sites100%: 56 sites78% here100%90%80%70%60%50%40%30%20%10%0%

Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).

Internal link map

Loading the link map...

Start page (centre)OKRedirectErrorOrphanLinked from most pagesOne inbound link or noneRings = clicks from the start page. Size = inbound links. Drag to pan, scroll to zoom, click a page to see only its links.

Fix plan

Written by gpt-4o-mini from the scan findings

Your website has several technical issues that need addressing to improve SEO performance. Key areas include broken links, redirects, and meta descriptions. Prioritize fixing these for better visibility in search engines.

  1. 1

    Fix Broken Links

    Why: Addressing these links will prevent errors and enhance user experience.

    How: Update or remove the 16 internal links pointing to broken URLs.

    Checks: broken-links

  2. 2

    Reduce Redirects

    Why: Minimizing redirects can speed up page loading times and improve crawl efficiency.

    How: Clear the 7 redirects, including resolving the chained redirect.

    Checks: redirects

  3. 3

    Improve Sitemap Coverage

    Why: A complete sitemap boosts indexing by search engines.

    How: Update your sitemap to include the 439 missing URLs.

    Evidence: 439 URLs: not in sitemap.

    439 pages affected

    Checks: sitemap-coverage

  4. 4

    Fix Meta Descriptions

    Why: Creating unique meta descriptions can improve click-through rates.

    How: Write meta descriptions for the 432 pages with issues.

    Evidence: 348 pages have no meta description at all.

    348 pages affected

    Checks: meta-descriptions

  5. 5

    Clean Up Heavy Assets

    Why: Optimizing large assets will enhance site loading speeds.

    How: Compress or reduce size for images larger than 500 KB.

    Evidence: 1.5 MB of image, loaded by 738 pages, so every visitor to any of them downloads it.

    738 pages affected

    Depends on: If it is a download rather than part of the page, weight matters less; move it out of the page instead.

    Checks: heavy-assets

  6. 6

    Resolve Heading Issues

    Why: Ensuring proper heading structure can help with SEO.

    How: Adjust pages to have only one H1 tag each; review the 327 affected pages.

    Checks: headings

Generated automatically; verify each change against your own site before relying on it.

Security review

Written by gpt-4o-mini from 16 checks over the crawl

Your website has several security issues that need attention. Most importantly, there's no Content Security Policy, and you're missing key headers for clickjacking protection and MIME sniffing protection. An exposed Google API key also poses a medium risk. Implementing the recommended fixes will strengthen your site's security.

  • 0 high
  • 3 medium
  • 3 low
  • 1 info
  1. 1

    Missing Content Security Policy (CSP)Medium

    Why it matters: Without a CSP, there are no restrictions on where scripts, styles, and frames can load from, increasing the risk of cross-site scripting attacks.

    Fix: Add a Content-Security-Policy header to limit where resources can be loaded from. Example: `Content-Security-Policy: default-src 'self';`

    Evidence: Content Security Policy

  2. 2

    Missing X-Frame-Options HeaderMedium

    Why it matters: Lack of this header allows your pages to be embedded in frames on other sites, making them vulnerable to clickjacking attacks.

    Fix: Set the X-Frame-Options header. Example: `X-Frame-Options: DENY` or `SAMEORIGIN`.

    Evidence: Clickjacking protection

  3. 3

    Exposed Google API KeyMedium

    Why it matters: Credentials found in the page code can be exploited if not restricted, potentially leading to unauthorized access.

    Fix: Restrict the Google API key usage to specific HTTP referrers in the Google Cloud console.

    Evidence: Keys and secrets in page code

  4. 4

    Missing X-Content-Type-Options HeaderLow

    Why it matters: Without this header, browsers may incorrectly execute files as scripts based on their content rather than their declared type.

    Fix: Add the X-Content-Type-Options header. Example: `X-Content-Type-Options: nosniff`.

    Evidence: MIME sniffing protection

  5. 5

    Missing Referrer-Policy HeaderLow

    Why it matters: Not having a Referrer-Policy allows full URLs, including sensitive data, to be sent to other sites when users navigate away.

    Fix: Set a Referrer-Policy header. Example: `Referrer-Policy: no-referrer`.

    Evidence: Referrer policy

  6. 6

    Revealing Server Banner InformationLow

    Why it matters: Disclosing software versions helps attackers find known vulnerabilities to exploit.

    Fix: Configure the server to hide version details. Use `server: Cloudflare` and remove the `X-Powered-By` header.

    Evidence: Software version disclosure

  7. 7

    Missing Permissions-Policy HeaderInfo

    Why it matters: This header can limit what modern browser features are available, potentially reducing attack vectors for injected scripts.

    Fix: Implement a Permissions-Policy header. Example: `Permissions-Policy: geolocation=(self)`.

    Evidence: Permissions policy

What the checks found

  • FoundContent Security PolicyMedium

    None of the 738 HTML pages send a Content-Security-Policy header or meta tag, so the browser has no restriction on where scripts, styles and frames may load from.

    • https://nicholsmarineinc.com/ → no content-security-policy
    • https://nicholsmarineinc.com/all-inventory/ → no content-security-policy
    • https://nicholsmarineinc.com/new-boats/ → no content-security-policy
    • https://nicholsmarineinc.com/pre-owned-boats/ → no content-security-policy
    • https://nicholsmarineinc.com/bennington/ → no content-security-policy
    • https://nicholsmarineinc.com/chaparral/ → no content-security-policy
    • https://nicholsmarineinc.com/vexus/ → no content-security-policy
    • https://nicholsmarineinc.com/mastercraft/ → no content-security-policy
    • https://nicholsmarineinc.com/robalo/ → no content-security-policy
    • https://nicholsmarineinc.com/caymas/ → no content-security-policy
    • https://nicholsmarineinc.com/Sylvan/ → no content-security-policy
    • https://nicholsmarineinc.com/evotti/ → no content-security-policy
  • FoundClickjacking protectionMedium

    No HTML page sends x-frame-options. Without X-Frame-Options (or a CSP frame-ancestors directive) the pages can be embedded in a frame on another site and overlaid with invisible controls.

    • https://nicholsmarineinc.com/ → no x-frame-options
    • https://nicholsmarineinc.com/all-inventory/ → no x-frame-options
    • https://nicholsmarineinc.com/new-boats/ → no x-frame-options
    • https://nicholsmarineinc.com/pre-owned-boats/ → no x-frame-options
    • https://nicholsmarineinc.com/bennington/ → no x-frame-options
    • https://nicholsmarineinc.com/chaparral/ → no x-frame-options
    • https://nicholsmarineinc.com/vexus/ → no x-frame-options
    • https://nicholsmarineinc.com/mastercraft/ → no x-frame-options
    • https://nicholsmarineinc.com/robalo/ → no x-frame-options
    • https://nicholsmarineinc.com/caymas/ → no x-frame-options
    • https://nicholsmarineinc.com/Sylvan/ → no x-frame-options
    • https://nicholsmarineinc.com/evotti/ → no x-frame-options
  • FoundMIME sniffing protectionLow

    No HTML page sends x-content-type-options. Without X-Content-Type-Options: nosniff a browser may run a file as a script because of its contents rather than its declared type.

    • https://nicholsmarineinc.com/ → no x-content-type-options
    • https://nicholsmarineinc.com/all-inventory/ → no x-content-type-options
    • https://nicholsmarineinc.com/new-boats/ → no x-content-type-options
    • https://nicholsmarineinc.com/pre-owned-boats/ → no x-content-type-options
    • https://nicholsmarineinc.com/bennington/ → no x-content-type-options
    • https://nicholsmarineinc.com/chaparral/ → no x-content-type-options
    • https://nicholsmarineinc.com/vexus/ → no x-content-type-options
    • https://nicholsmarineinc.com/mastercraft/ → no x-content-type-options
    • https://nicholsmarineinc.com/robalo/ → no x-content-type-options
    • https://nicholsmarineinc.com/caymas/ → no x-content-type-options
    • https://nicholsmarineinc.com/Sylvan/ → no x-content-type-options
    • https://nicholsmarineinc.com/evotti/ → no x-content-type-options
  • FoundReferrer policyLow

    No HTML page sends referrer-policy. Without a Referrer-Policy the full page address, including any query string, is sent to every site a visitor clicks through to.

    • https://nicholsmarineinc.com/ → no referrer-policy
    • https://nicholsmarineinc.com/all-inventory/ → no referrer-policy
    • https://nicholsmarineinc.com/new-boats/ → no referrer-policy
    • https://nicholsmarineinc.com/pre-owned-boats/ → no referrer-policy
    • https://nicholsmarineinc.com/bennington/ → no referrer-policy
    • https://nicholsmarineinc.com/chaparral/ → no referrer-policy
    • https://nicholsmarineinc.com/vexus/ → no referrer-policy
    • https://nicholsmarineinc.com/mastercraft/ → no referrer-policy
    • https://nicholsmarineinc.com/robalo/ → no referrer-policy
    • https://nicholsmarineinc.com/caymas/ → no referrer-policy
    • https://nicholsmarineinc.com/Sylvan/ → no referrer-policy
    • https://nicholsmarineinc.com/evotti/ → no referrer-policy
  • FoundPermissions policyInfo

    No HTML page sends permissions-policy. A Permissions-Policy header turns off browser features the site does not use (camera, microphone, geolocation), limiting what an injected script could do.

    • https://nicholsmarineinc.com/ → no permissions-policy
    • https://nicholsmarineinc.com/all-inventory/ → no permissions-policy
    • https://nicholsmarineinc.com/new-boats/ → no permissions-policy
    • https://nicholsmarineinc.com/pre-owned-boats/ → no permissions-policy
    • https://nicholsmarineinc.com/bennington/ → no permissions-policy
    • https://nicholsmarineinc.com/chaparral/ → no permissions-policy
    • https://nicholsmarineinc.com/vexus/ → no permissions-policy
    • https://nicholsmarineinc.com/mastercraft/ → no permissions-policy
    • https://nicholsmarineinc.com/robalo/ → no permissions-policy
    • https://nicholsmarineinc.com/caymas/ → no permissions-policy
    • https://nicholsmarineinc.com/Sylvan/ → no permissions-policy
    • https://nicholsmarineinc.com/evotti/ → no permissions-policy
  • FoundSoftware version disclosureLow

    Responses reveal the exact server or framework version, which lets an attacker look up known vulnerabilities for it without guessing.

    • server: cloudflare (6000 responses)
    • x-powered-by: PHP/8.5.9 (898 responses)
  • FoundKeys and secrets in page codeMedium

    1 credential-like value found in code served to every visitor: Google API key.

    • Google API key AIzaSy…t8 (39 chars) in https://nicholsmarineinc.com/nichols-marine-longview-tx/: browser keys are expected in pages, but must be restricted by HTTP referrer and API in the Google Cloud console
  • NoteThird-party scripts

    Scripts run from 3 other domains without Subresource Integrity, so a compromise of any of them changes what runs on this site. (Tag managers and analytics rarely support SRI; a Content-Security-Policy that names these hosts is the usual control.)

    • bit.ly (40 script tags)
    • www.google.com (40 script tags)
    • cdn.jsdelivr.net (24 script tags)
7 checks passed, 1 not applicable
  • OKHTTPS

    All 738 crawled pages were served over HTTPS.

  • OKHTTP Strict Transport Security

    strict-transport-security is set on all 738 HTML pages.

  • OKMixed content

    No HTTPS page loads a script, stylesheet, font or image over plain HTTP.

  • OKForms over HTTPS

    74 forms found, all on HTTPS pages posting to HTTPS addresses.

  • OKVulnerable JavaScript libraries

    2 library versions recognised, none with known vulnerabilities.

  • OKExposed files and listings

    None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.

  • OKSensitive paths in robots.txt

    robots.txt does not point at admin, backup or private paths.

  • Not applicableCookie flags

    The crawl set no cookies, so there are no cookie flags to check.

A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.

Earlier scans of nicholsmarineinc.com

No other scans of this site yet.

Sites scoring near nicholsmarineinc.com

Their neighbours in the SEO rank table, which orders every scanned site by health score.

This report was produced by the DIY SEO Hub Site Spider crawling nicholsmarineinc.com from its pages as published, the way a search engine does. It shows summary figures only.

Own nicholsmarineinc.com?

  • Claim this site to manage the listing, hide it from the public lists, or keep it.
  • Want it gone instead? Ask through the support form or e-mail support@diyseohub.com, naming nicholsmarineinc.com. Removal needs no account and no proof of purchase.
nicholsmarineinc.com SEO report | DIY SEO Hub