Scanned sites / normotim.com / 2026-09-28-0914
normotim.com scan from 9/28/2026, 9:14:13 AM
Scan 2026-09-28-0914
Scanned 9/28/2026, 9:14:13 AM, finished 9/28/2026, 9:45:52 AM
Site: https://normotim.com/
Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.
On September 28, 2026 the Site Spider crawled 218 pages and 1013 assets of normotim.com, starting from https://normotim.com/. It scored 72 out of 100, a result that needs work. 12 of 16 checks found something to fix, led by heavy assets (79), headings (173), title tags (101); 3 checks passed. Most of the points went to heavy assets (−6), headings (−5.2), title tags (−5.1). 1 check found something the score does not count, listed as noted. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.
Security review: Medium1 medium, 2 low and 1 info findings. See the security findings ↓
- Pages crawled
- 218
- Assets fetched
- 1013
- Status
- Completed
- Checks with issues
- 12 of 16
1,231 of 1,241 discovered URLs were fetched, 4,629 left out by the 5,000-page and 1,000-asset budget. The job finished, but the crawl did not reach everything it found. HTML only: nothing here ran JavaScript. 300 link destinations on other sites were checked, 160 left unchecked.
- Title tags101 issues101 of 185 pages have title issues. 15 noindex or canonicalized pages excluded.−5.1 points
- Meta descriptions88 issues88 of 185 pages have meta description issues. 15 noindex or canonicalized pages excluded.−3.5 points
- Headings173 issues173 of 185 pages have heading issues. 15 noindex or canonicalized pages excluded.−5.2 points
- Broken links9 issues18 internal links point at 9 broken URLs.−0.9 points
- Links to other sites5 issues5 destinations answered with an error, 103 could not be determined (timeouts, rate limits or refusals), 160 were left unchecked by the per-scan cap, of 300 destinations checked.−1 points
- Redirects9 issues11 redirecting URLs, 1 of them chained.−0.2 points
- Non-200 responses10 issues21 URLs did not return a 2xx response. 18 of them are pages, 10 with an error status; the rest are assets or redirects.−0.5 points
- Rate limitedOKThe site did not rate limit the crawler.
- Indexability12 issues12 of 200 indexable pages have indexability warnings.−0.6 points
- Image alt text3,784 issues3784 of 5272 image references have no alt attribute. 515 use an empty alt (decorative), which is fine.−4.3 points
- Heavy assets79 issues79 assets larger than 500 KB among 1013 fetched assets.−6 points
- Orphan pages35 issues35 pages have no internal links pointing at them.−0.7 points
- Sitemap coverage41 issues6 sitemaps listing 183 URLs: 6 crawled pages missing, 0 listed URLs broken or redirecting, 35 reachable only via the sitemap.−1.2 points
- Internal link countsOKInternal link counts for 200 pages.
- Thin contentOK0 of 185 pages have fewer than 200 words. 15 noindex or canonicalized pages excluded.
- Duplicate contentOK0 groups of pages with identical HTML.
Where this scan sits among all scanned sites
1329 sites, median 80%, average 79%
normotim.com scores 72%, higher than 20% of the 1329 scanned sites. See the full ranking.
Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).
Internal link map
Loading the link map...
Fix plan
Written by gpt-4o-mini from the scan findingsYour website has multiple technical SEO issues that need addressing for better performance. Focus on fixing broken links, redirects, and title/meta issues first, as these have the highest impact on user experience and search visibility.
- 1
Fix Broken Links
Why: 18 internal links directing users to broken pages create a poor user experience and hinder SEO.
How: Identify the pages with broken links and either update or remove the links to the correct URLs.
Checks: broken-links
- 2
Resolve Redirects
Why: 11 URLs are redirecting, with one being a chained redirect, which can slow down page loading.
How: Eliminate unnecessary redirects by updating links to direct to the final URLs or simplify the redirect chain.
Checks: redirects
- 3
Improve Title Tags
Why: 101 page title issues could reduce click-through rates and impact rankings.
How: Adjust titles longer than 60 characters to be concise and relevant for better SEO performance.
Checks: titles
- 4
Enhance Meta Descriptions
Why: 88 pages with meta description issues can result in unoptimized SERP listings.
How: Modify descriptions over 160 characters to align with the target keywords and improve engagement.
Checks: meta-descriptions
- 5
Address Heading Issues
Why: 173 pages lack proper heading structure, which is essential for SEO and accessibility.
How: Ensure each page includes a single H1 tag and subsequent headings follow a logical hierarchy.
Checks: headings
- 6
Shrink Heavy Assets
Why: 79 assets over 500 KB can slow down your website, hindering user experience.
How: Compress images and other assets to improve loading speed; consider replacing or removing the largest files.
Checks: heavy-assets
Generated automatically; verify each change against your own site before relying on it.
Security review
Written by gpt-4o-mini from 16 checks over the crawlThe security review identified several areas for improvement on your website. Key issues include missing security headers that protect user data and cookies lacking essential flags. Additionally, there are mixed content warnings due to loading resources over HTTP. Addressing these vulnerabilities will strengthen your site's overall security.
- 0 high
- 1 medium
- 2 low
- 1 info
- 1
Incomplete Cookie FlagsMedium
Why it matters: Cookies can be accessed by scripts and transmitted insecurely without proper flags.
Fix: Set Secure, HttpOnly, and SameSite attributes for all cookies.
Evidence: Cookie flags
- 2
Missing Referrer PolicyLow
Why it matters: Without a Referrer-Policy, sensitive information can be sent to third-party sites.
Fix: Add the header: Referrer-Policy: no-referrer.
Evidence: Referrer policy
- 3
Mixed Content IssuesLow
Why it matters: Loading resources over HTTP on HTTPS pages can expose users to attacks.
Fix: Update all resource URLs to load over HTTPS.
Evidence: Mixed content
- 4
Missing Permissions PolicyInfo
Why it matters: A Permissions-Policy can limit features a page can access, enhancing safety.
Fix: Add the header: Permissions-Policy: geolocation=(self), microphone=(), camera=().
Evidence: Permissions policy
What the checks found
- FoundReferrer policyLow
2 of 200 HTML pages send referrer-policy. Without a Referrer-Policy the full page address, including any query string, is sent to every site a visitor clicks through to.
- https://normotim.com/ → no referrer-policy
- https://normotim.com/cart → no referrer-policy
- https://normotim.com/collections/all → no referrer-policy
- https://normotim.com/products/normotim → no referrer-policy
- https://normotim.com/products/lithium-ascorbate-1-mg → no referrer-policy
- https://normotim.com/pages/science → no referrer-policy
- https://normotim.com/pages/what-is-lithium-ascorbate → no referrer-policy
- https://normotim.com/pages/lithium-plays-a-crucial-role-in-alzheimer-s-disease → no referrer-policy
- https://normotim.com/pages/lithium-is-essential-for-human-health → no referrer-policy
- https://normotim.com/pages/company → no referrer-policy
- https://normotim.com/blogs/news → no referrer-policy
- https://normotim.com/pages/faqs → no referrer-policy
- FoundPermissions policyInfo
No HTML page sends permissions-policy. A Permissions-Policy header turns off browser features the site does not use (camera, microphone, geolocation), limiting what an injected script could do.
- https://normotim.com/ → no permissions-policy
- https://normotim.com/cart → no permissions-policy
- https://normotim.com/collections/all → no permissions-policy
- https://normotim.com/products/normotim → no permissions-policy
- https://normotim.com/products/lithium-ascorbate-1-mg → no permissions-policy
- https://normotim.com/pages/science → no permissions-policy
- https://normotim.com/pages/what-is-lithium-ascorbate → no permissions-policy
- https://normotim.com/pages/lithium-plays-a-crucial-role-in-alzheimer-s-disease → no permissions-policy
- https://normotim.com/pages/lithium-is-essential-for-human-health → no permissions-policy
- https://normotim.com/pages/company → no permissions-policy
- https://normotim.com/blogs/news → no permissions-policy
- https://normotim.com/pages/faqs → no permissions-policy
- FoundCookie flagsMedium
9 of 12 cookies are missing protective flags. Without HttpOnly a script can read the cookie; without Secure it travels over plain HTTP; without SameSite it is sent on cross-site requests.
- localization (set by https://normotim.com/) lacks Secure, HttpOnly
- cart_currency (set by https://normotim.com/) lacks Secure, HttpOnly
- discount_code (set by https://normotim.com/discount/POPUP5?redirect=/collections/all/products/normotim) lacks Secure, HttpOnly
- cart (set by https://normotim.com/discount/POPUP5?redirect=/collections/all/products/normotim) lacks Secure, HttpOnly
- 12 Oct 2026 09:17:41 GMT (set by https://normotim.com/blogs/news/normotim-impact-of-super-lithium-on-neuroplasti…) lacks Secure, HttpOnly, SameSite
- 12 Oct 2026 09:18:02 GMT (set by https://normotim.com/blogs/news/super-lithium-how-can-over-the-counter-lithium-…) lacks Secure, HttpOnly, SameSite
- 12 Oct 2026 09:18:03 GMT (set by https://normotim.com/blogs/news/normotim-super-lithium-as-a-solution-to-reduce-…) lacks Secure, HttpOnly, SameSite
- 12 Oct 2026 09:18:04 GMT (set by https://normotim.com/blogs/news/normotim-potential-of-super-lithium-in-addictio…) lacks Secure, HttpOnly, SameSite
- 12 Oct 2026 09:18:05 GMT (set by https://normotim.com/blogs/news/normotim-the-role-of-lithium-ascorbate-in-promo…) lacks Secure, HttpOnly, SameSite
- FoundMixed contentLow
200 resources on HTTPS pages are loaded over plain HTTP.
- https://normotim.com/ loads image http://normotim.com/cdn/shop/files/Main_image_shopped_white_bg_v2_3000x3000_a0f15b9f-26f3…
- https://normotim.com/cart loads image http://normotim.com/cdn/shop/files/Main_image_shopped_white_bg_v2_3000x3000_a0f15b9f-26f3…
- https://normotim.com/collections/all loads image http://normotim.com/cdn/shop/files/Main_image_shopped_white_bg_v2_3000x3000_a0f15b9f-26f3…
- https://normotim.com/products/normotim loads image http://normotim.com/cdn/shop/files/Main_image_shopped_white_bg_v2_3000x3000_a0f15b9f-26f3…
- https://normotim.com/products/lithium-ascorbate-1-mg loads image http://normotim.com/cdn/shop/files/0430_LA_1_mg.jpg?v=1746649693
- https://normotim.com/pages/science loads image http://normotim.com/cdn/shop/files/Main_image_shopped_white_bg_v2_3000x3000_a0f15b9f-26f3…
- https://normotim.com/pages/what-is-lithium-ascorbate loads image http://normotim.com/cdn/shop/files/Main_image_shopped_white_bg_v2_3000x3000_a0f15b9f-26f3…
- https://normotim.com/pages/lithium-plays-a-crucial-role-in-alzheimer-… loads image http://normotim.com/cdn/shop/files/Main_image_shopped_white_bg_v2_3000x3000_a0f15b9f-26f3…
- https://normotim.com/pages/lithium-is-essential-for-human-health loads image http://normotim.com/cdn/shop/files/Main_image_shopped_white_bg_v2_3000x3000_a0f15b9f-26f3…
- https://normotim.com/pages/company loads image http://normotim.com/cdn/shop/files/Main_image_shopped_white_bg_v2_3000x3000_a0f15b9f-26f3…
- https://normotim.com/blogs/news loads image http://normotim.com/cdn/shop/files/Main_image_shopped_white_bg_v2_3000x3000_a0f15b9f-26f3…
- https://normotim.com/pages/faqs loads image http://normotim.com/cdn/shop/files/Main_image_shopped_white_bg_v2_3000x3000_a0f15b9f-26f3…
- NoteThird-party scripts
Scripts run from 5 other domains without Subresource Integrity, so a compromise of any of them changes what runs on this site. (Tag managers and analytics rarely support SRI; a Content-Security-Policy that names these hosts is the usual control.)
- cdn.jsdelivr.net (40 script tags)
- shop.app (40 script tags)
- cdn.shopify.com (209 script tags)
- static.klaviyo.com (40 script tags)
- cdn-widgetsrepository.yotpo.com (40 script tags)
10 checks passed, 1 not applicable
- OKHTTPS
All 200 crawled pages were served over HTTPS.
- OKHTTP Strict Transport Security
strict-transport-security is set on all 200 HTML pages.
- OKContent Security Policy
A Content-Security-Policy is set.
- OKClickjacking protection
x-frame-options is set on all 200 HTML pages.
- OKMIME sniffing protection
x-content-type-options is set on all 200 HTML pages.
- OKSoftware version disclosure
The Server header names a product without a version, and there is no X-Powered-By header.
- OKForms over HTTPS
166 forms found, all on HTTPS pages posting to HTTPS addresses.
- OKKeys and secrets in page code
No API keys, tokens or private keys were found in the sampled HTML and scripts.
- OKExposed files and listings
None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.
- OKSensitive paths in robots.txt
robots.txt does not point at admin, backup or private paths.
- Not applicableVulnerable JavaScript libraries
No recognisable library versions were found in the sampled scripts.
A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.
Sites scoring near normotim.com
Their neighbours in the SEO rank table, which orders every scanned site by health score.
- dimehair.ca73/100 · rank 993 · 1 page
- reginadancecity.ca73/100 · rank 993 · 107 pages
- www.gcoc.ca72/100 · rank 1025 · 160 pages
- www.mckaguemillard.com72/100 · rank 1025 · 66 pages
- syedwasi.com72/100 · rank 1025 · 15 pages
- demakiscpa.com72/100 · rank 1025 · 1 page
This report was produced by the DIY SEO Hub Site Spider crawling normotim.com from its pages as published, the way a search engine does. It shows summary figures only.
Own normotim.com?
- Claim this site to manage the listing, hide it from the public lists, or keep it.
- Want it gone instead? Ask through the support form or e-mail support@diyseohub.com, naming normotim.com. Removal needs no account and no proof of purchase.