Scanned sites / www.heritagesmilesdental.com / 2026-11-11-0834

www.heritagesmilesdental.com scan from 2026-11-11 08:34:38 UTC DR 3

DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.

Scan 2026-11-11-0834

Scanned 2026-11-11 08:34:38 UTC, finished 2026-11-11 08:39:18 UTC. Found with openstreetmap overpass

Site: https://www.heritagesmilesdental.com/

Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.

85/ 100Good

On November 11, 2026 the Site Spider crawled 163 pages and 457 assets of www.heritagesmilesdental.com, starting from https://www.heritagesmilesdental.com/. It scored 85 out of 100, a good result. 10 of 33 checks found something to fix, led by heavy assets (10), links to other sites (99), title tags (25); 12 checks passed. Most of the points went to heavy assets (−6), links to other sites (−4), title tags (−1.9). 11 checks found something the score does not count, listed as noted. 4 checks were not run because the crawl fetched nothing for them. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.

Security review: High1 high, 4 medium, 3 low and 1 info findings. See the security findings ↓

Pages crawled
163
Assets fetched
457
Status
Completed
Checks with issues
10 of 33
CoverageComplete crawl

620 of 620 discovered URLs were fetched. The crawl reached everything it found. HTML only: nothing here ran JavaScript. 300 link destinations on other sites were checked, 468 left unchecked.

  • Title tags25 issues
    25 of 112 pages have title issues. 20 noindex or canonicalized pages excluded.
    −1.9 points
  • Meta descriptions22 issues
    22 of 112 pages have meta description issues. 20 noindex or canonicalized pages excluded.
    −1.3 points
  • HeadingsOK
    0 of 112 pages have heading issues. 20 noindex or canonicalized pages excluded.
  • Broken links1 issue
    1 internal link point at 1 broken URL.
    −0.2 points
  • Links to other sites99 issues
    99 destinations answered with an error, 40 could not be determined (timeouts, rate limits or refusals), 468 were left unchecked by the per-scan cap, of 300 destinations checked.
    −4 points
  • Redirects30 issues
    30 redirecting URLs, 12 of them chained.
    −0.9 points
  • Non-200 responses1 issue
    31 URLs did not return a 2xx response. 31 of them are pages, 1 with an error status; the rest are assets or redirects.
    −0.1 points
  • Rate limitedOK
    The site did not rate limit the crawler.
  • Indexability2 issues
    2 of 123 indexable pages have indexability warnings. 9 pages noindex by design. 1 noindex page is listed in the sitemap, which asks search engines both to visit and to ignore it.
    −0.2 points
  • Image alt textOK
    0 of 789 image references have no alt attribute. 102 use an empty alt (decorative), which is fine.
  • Heavy assets10 issues
    10 assets larger than 500 KB among 457 fetched assets.
    −6 points
  • Orphan pages12 issues
    12 pages have no internal links pointing at them.
    −0.4 points
  • Sitemap coverage3 issues
    1 sitemap listing 114 URLs: 0 crawled pages missing, 0 listed URLs broken or redirecting, 2 reachable only via the sitemap.
    −0.1 points
  • Internal link counts9 noted
    Internal link counts for 132 pages; 9 worth a look.
  • Thin contentOK
    0 of 112 pages have fewer than 200 words. 20 noindex or canonicalized pages excluded.
  • Duplicate contentOK
    0 groups of pages with identical HTML.
  • URL format5 noted
    5 of 163 page URLs are harder to read, share or cache than they need to be.
  • Canonicals20 noted
    20 of 132 pages have a canonical worth checking.
  • Robots directives132 noted
    132 pages carry a robots directive; 0 carry none.
  • Anchor text8 noted
    8 destinations are linked without useful anchor text, or with nofollow.
  • Title and heading structure40 noted
    40 of 112 pages could use the title, heading and snippet space better. 20 noindex or canonicalized pages excluded.
  • Image weight and alt length50 noted
    50 images over 100 KB; 0 with alt text over 100 characters.
  • Response anomaliesOK
    No redirect loops, header redirects or pages served as something other than HTML.
  • HTML and head validationOK
    All 132 pages keep their head tags in <head>, once each, under Googlebot's 2 MB.
  • hreflangOK
    No page declares hreflang.
  • Structured dataOK
    88 of 112 indexable pages carry structured data: FAQPage (59), Question (59), Answer (59), BlogPosting (52), Organization (52). 0 pages with errors a rich result would fail on.
  • Near duplicatesOK
    No near duplicates among 112 pages with enough text to compare.
  • Soft 404sOK
    None of 132 pages answering 200 reads like an error page.
  • AccessibilityNot checked
    Not checked: the accessibility audit runs in the browser. Tick "Include JavaScript rendering checks" when you request a scan to run it.
  • Link positions7 noted
    7 of 111 linked pages are linked only from the template, never from another page's content.
  • Pagination9 noted
    98 pages in pagination sequences; 9 with problems.
  • Headers and cookies1 noted
    1 cookie set by the site, 1 missing a protective flag; 11 response headers recorded across 620 URLs.
  • Orphans in searchNot checked
    Not checked: import a Search Console Pages export on the scan page to find pages Google shows that the site does not link to.
  • Link ScoreOK
    Link Score (internal PageRank, 0-100) for 132 pages; 0 hold almost none (10 or less).
  • JavaScript renderingNot checked
    Not checked: this scan did not render pages. Tick "Include JavaScript rendering checks" when you request a scan to compare the served HTML with what a browser builds.
  • PageSpeed InsightsNot checked
    Not checked yet: PageSpeed Insights runs on the top pages once the crawl has finished.
  • Spelling41 noted
    41 words an English dictionary does not know, on 57 pages. Product names and jargon will appear here too.

Where this scan sits among all scanned sites

2891 sites, median 80%, average 79%

www.heritagesmilesdental.com scores 85%, higher than 70% of the 2891 scanned sites. See the full ranking.

0761520%: 0 sites1%: 0 sites2%: 0 sites3%: 0 sites4%: 0 sites5%: 0 sites6%: 0 sites7%: 0 sites8%: 0 sites9%: 1 site10%: 0 sites11%: 0 sites12%: 0 sites13%: 0 sites14%: 1 site15%: 0 sites16%: 0 sites17%: 0 sites18%: 0 sites19%: 0 sites20%: 0 sites21%: 1 site22%: 0 sites23%: 0 sites24%: 0 sites25%: 0 sites26%: 0 sites27%: 0 sites28%: 1 site29%: 0 sites30%: 0 sites31%: 0 sites32%: 0 sites33%: 0 sites34%: 0 sites35%: 2 sites36%: 1 site37%: 1 site38%: 3 sites39%: 2 sites40%: 3 sites41%: 1 site42%: 2 sites43%: 3 sites44%: 2 sites45%: 6 sites46%: 5 sites47%: 5 sites48%: 6 sites49%: 8 sites50%: 6 sites51%: 7 sites52%: 8 sites53%: 9 sites54%: 10 sites55%: 10 sites56%: 8 sites57%: 17 sites58%: 18 sites59%: 10 sites60%: 15 sites61%: 13 sites62%: 20 sites63%: 29 sites64%: 22 sites65%: 33 sites66%: 43 sites67%: 43 sites68%: 42 sites69%: 54 sites70%: 47 sites71%: 80 sites72%: 77 sites73%: 82 sites74%: 82 sites75%: 87 sites76%: 95 sites77%: 109 sites78%: 132 sites79%: 113 sites80%: 129 sites81%: 123 sites82%: 134 sites83%: 121 sites84%: 130 sites85%: 105 sites86%: 96 sites87%: 94 sites88%: 82 sites89%: 73 sites90%: 57 sites91%: 60 sites92%: 43 sites93%: 30 sites94%: 26 sites95%: 16 sites96%: 18 sites97%: 16 sites98%: 8 sites99%: 3 sites100%: 152 sites85% here100%90%80%70%60%50%40%30%20%10%0%

Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).

Internal link map

Loading the link map...

Start page (centre)OKRedirectErrorOrphanLinked from most pagesOne inbound link or noneRings = clicks from the start page. Size = inbound links. Drag to pan, scroll to zoom, click a page to see only its links.

Fix plan

Written by gpt-4o-mini from the scan findings

Your site has several SEO issues that need fixing. Prioritizing these tasks will help improve user experience and search engine visibility significantly. Here’s a concise plan.

  1. 1

    Fix Broken Link

    Why: One internal broken link can harm user experience and SEO.

    How: Update or remove the link pointing to the broken URL.

    Checks: broken-links

  2. 2

    Reduce Redirects

    Why: Too many redirects can slow down your page load times.

    How: Reduce chained redirects by updating links to point directly to the final URL.

    Checks: redirects

  3. 3

    Improve Meta Descriptions

    Why: Meta descriptions play a crucial role in click-through rates from search results.

    How: Rewrite meta descriptions to be under 160 characters and compelling.

    Checks: meta-descriptions

  4. 4

    Optimize Title Tags

    Why: Proper title tags improve SEO and user engagement.

    How: Modify title tags to be concise, ideally under 60 characters.

    Checks: titles

  5. 5

    Address Indexability Issues

    Why: Noindex pages listed in the sitemap can confuse search engines.

    How: Decide if the noindex page should be removed from the sitemap.

    Checks: indexability

  6. 6

    Reduce Heavy Assets

    Why: Large assets can slow down your site’s loading speed.

    How: Compress or replace large images and scripts with more optimized versions.

    Checks: heavy-assets

Generated automatically; verify each change against your own site before relying on it.

Security review

Written by gpt-4o-mini from 16 checks over the crawl

Your website has several security vulnerabilities that can expose sensitive information and make it more susceptible to attacks. Key issues include unsecured HTTP pages, missing security headers, and inadequate cookie protections. Addressing these will greatly enhance your site's security posture.

  • 1 high
  • 4 medium
  • 3 low
  • 1 info
  1. 1

    Insecure HTTP PagesHigh

    Why it matters: Ten pages served over HTTP can be read or altered by attackers.

    Fix: Redirect all HTTP traffic to HTTPS to ensure secure connections.

    Evidence: HTTPS

  2. 2

    Missing HSTS HeaderMedium

    Why it matters: Failure to implement HSTS can expose users to man-in-the-middle attacks.

    Fix: Add the header 'Strict-Transport-Security: max-age=31536000; includeSubDomains' to all pages.

    Evidence: HTTP Strict Transport Security

  3. 3

    Missing Content Security PolicyMedium

    Why it matters: Without a CSP, the site is vulnerable to script injections.

    Fix: Add a Content-Security-Policy header to restrict content sources, e.g., 'Content-Security-Policy: default-src 'self';'.

    Evidence: Content Security Policy

  4. 4

    Missing X-Frame-Options HeaderMedium

    Why it matters: Pages can be embedded in frames, increasing clickjacking risks.

    Fix: Add 'X-Frame-Options: DENY' to prevent page framing.

    Evidence: Clickjacking protection

  5. 5

    Insecure CookiesMedium

    Why it matters: Cookies lacking security flags can be exploited by attackers.

    Fix: Set cookies with 'HttpOnly', 'Secure', and 'SameSite=Strict' attributes.

    Evidence: Cookie flags

  6. 6

    Missing X-Content-Type-Options HeaderLow

    Why it matters: Without this header, browsers may interpret files inappropriately, leading to security issues.

    Fix: Add 'X-Content-Type-Options: nosniff' to all HTML responses.

    Evidence: MIME sniffing protection

  7. 7

    Missing Referrer-Policy HeaderLow

    Why it matters: Full URLs may be exposed when users navigate away from your site.

    Fix: Implement 'Referrer-Policy: no-referrer' to limit URL exposure.

    Evidence: Referrer policy

  8. 8

    Server Banner DisclosureLow

    Why it matters: Revealing server details may help attackers in targeting vulnerabilities.

    Fix: Remove 'X-Powered-By' header and configure server to hide version information.

    Evidence: Software version disclosure

  9. 9

    Missing Permissions-Policy HeaderInfo

    Why it matters: Without this, unnecessary browser features may be accessible to injected scripts.

    Fix: Add 'Permissions-Policy: geolocation=(self)' to restrict features.

    Evidence: Permissions policy

What the checks found

  • FoundHTTPSHigh

    10 pages answered 200 over plain HTTP with no redirect to HTTPS, while 122 were served over HTTPS. Anyone on the network path can read or alter these pages.

    • http://www.heritagesmilesdental.com/latest-news/ → 200 over http
    • http://www.heritagesmilesdental.com/services/tooth-extractions/ → 200 over http
    • http://www.heritagesmilesdental.com/services/emergency-dentistry/ → 200 over http
    • http://www.heritagesmilesdental.com/services/root-canal-therapy/ → 200 over http
    • http://www.heritagesmilesdental.com/services/porcelain-veneers/ → 200 over http
    • http://www.heritagesmilesdental.com/services/family-dentistry/ → 200 over http
    • http://www.heritagesmilesdental.com/services/dentures/ → 200 over http
    • http://www.heritagesmilesdental.com/services/teeth-whitening/ → 200 over http
    • http://www.heritagesmilesdental.com/services/sedation-dentistry/ → 200 over http
    • http://www.heritagesmilesdental.com/services/general-dentistry/ → 200 over http
  • FoundHTTP Strict Transport SecurityMedium

    No HTML page sends strict-transport-security. Without it a visitor who types the address without https:// can be intercepted on the first request.

    • https://www.heritagesmilesdental.com/ → no strict-transport-security
    • https://www.heritagesmilesdental.com/canadian-dental-care-plan/ → no strict-transport-security
    • https://www.heritagesmilesdental.com/services-cosmetic-general-orthodontics/ → no strict-transport-security
    • https://www.heritagesmilesdental.com/services/family-dentistry/ → no strict-transport-security
    • https://www.heritagesmilesdental.com/services/childrens-dentistry/ → no strict-transport-security
    • https://www.heritagesmilesdental.com/services/sedation-dentistry/ → no strict-transport-security
    • https://www.heritagesmilesdental.com/services/cosmetic-dentistry/ → no strict-transport-security
    • https://www.heritagesmilesdental.com/services/teeth-whitening/ → no strict-transport-security
    • https://www.heritagesmilesdental.com/services/porcelain-veneers/ → no strict-transport-security
    • https://www.heritagesmilesdental.com/services/general-dentistry/ → no strict-transport-security
    • https://www.heritagesmilesdental.com/services/dental-cleanings/ → no strict-transport-security
    • https://www.heritagesmilesdental.com/services/oral-exams/ → no strict-transport-security
  • FoundContent Security PolicyMedium

    None of the 132 HTML pages send a Content-Security-Policy header or meta tag, so the browser has no restriction on where scripts, styles and frames may load from.

    • https://www.heritagesmilesdental.com/ → no content-security-policy
    • https://www.heritagesmilesdental.com/canadian-dental-care-plan/ → no content-security-policy
    • https://www.heritagesmilesdental.com/services-cosmetic-general-orthodontics/ → no content-security-policy
    • https://www.heritagesmilesdental.com/services/family-dentistry/ → no content-security-policy
    • https://www.heritagesmilesdental.com/services/childrens-dentistry/ → no content-security-policy
    • https://www.heritagesmilesdental.com/services/sedation-dentistry/ → no content-security-policy
    • https://www.heritagesmilesdental.com/services/cosmetic-dentistry/ → no content-security-policy
    • https://www.heritagesmilesdental.com/services/teeth-whitening/ → no content-security-policy
    • https://www.heritagesmilesdental.com/services/porcelain-veneers/ → no content-security-policy
    • https://www.heritagesmilesdental.com/services/general-dentistry/ → no content-security-policy
    • https://www.heritagesmilesdental.com/services/dental-cleanings/ → no content-security-policy
    • https://www.heritagesmilesdental.com/services/oral-exams/ → no content-security-policy
  • FoundClickjacking protectionMedium

    No HTML page sends x-frame-options. Without X-Frame-Options (or a CSP frame-ancestors directive) the pages can be embedded in a frame on another site and overlaid with invisible controls.

    • https://www.heritagesmilesdental.com/ → no x-frame-options
    • https://www.heritagesmilesdental.com/canadian-dental-care-plan/ → no x-frame-options
    • https://www.heritagesmilesdental.com/services-cosmetic-general-orthodontics/ → no x-frame-options
    • https://www.heritagesmilesdental.com/services/family-dentistry/ → no x-frame-options
    • https://www.heritagesmilesdental.com/services/childrens-dentistry/ → no x-frame-options
    • https://www.heritagesmilesdental.com/services/sedation-dentistry/ → no x-frame-options
    • https://www.heritagesmilesdental.com/services/cosmetic-dentistry/ → no x-frame-options
    • https://www.heritagesmilesdental.com/services/teeth-whitening/ → no x-frame-options
    • https://www.heritagesmilesdental.com/services/porcelain-veneers/ → no x-frame-options
    • https://www.heritagesmilesdental.com/services/general-dentistry/ → no x-frame-options
    • https://www.heritagesmilesdental.com/services/dental-cleanings/ → no x-frame-options
    • https://www.heritagesmilesdental.com/services/oral-exams/ → no x-frame-options
  • FoundMIME sniffing protectionLow

    No HTML page sends x-content-type-options. Without X-Content-Type-Options: nosniff a browser may run a file as a script because of its contents rather than its declared type.

    • https://www.heritagesmilesdental.com/ → no x-content-type-options
    • https://www.heritagesmilesdental.com/canadian-dental-care-plan/ → no x-content-type-options
    • https://www.heritagesmilesdental.com/services-cosmetic-general-orthodontics/ → no x-content-type-options
    • https://www.heritagesmilesdental.com/services/family-dentistry/ → no x-content-type-options
    • https://www.heritagesmilesdental.com/services/childrens-dentistry/ → no x-content-type-options
    • https://www.heritagesmilesdental.com/services/sedation-dentistry/ → no x-content-type-options
    • https://www.heritagesmilesdental.com/services/cosmetic-dentistry/ → no x-content-type-options
    • https://www.heritagesmilesdental.com/services/teeth-whitening/ → no x-content-type-options
    • https://www.heritagesmilesdental.com/services/porcelain-veneers/ → no x-content-type-options
    • https://www.heritagesmilesdental.com/services/general-dentistry/ → no x-content-type-options
    • https://www.heritagesmilesdental.com/services/dental-cleanings/ → no x-content-type-options
    • https://www.heritagesmilesdental.com/services/oral-exams/ → no x-content-type-options
  • FoundReferrer policyLow

    No HTML page sends referrer-policy. Without a Referrer-Policy the full page address, including any query string, is sent to every site a visitor clicks through to.

    • https://www.heritagesmilesdental.com/ → no referrer-policy
    • https://www.heritagesmilesdental.com/canadian-dental-care-plan/ → no referrer-policy
    • https://www.heritagesmilesdental.com/services-cosmetic-general-orthodontics/ → no referrer-policy
    • https://www.heritagesmilesdental.com/services/family-dentistry/ → no referrer-policy
    • https://www.heritagesmilesdental.com/services/childrens-dentistry/ → no referrer-policy
    • https://www.heritagesmilesdental.com/services/sedation-dentistry/ → no referrer-policy
    • https://www.heritagesmilesdental.com/services/cosmetic-dentistry/ → no referrer-policy
    • https://www.heritagesmilesdental.com/services/teeth-whitening/ → no referrer-policy
    • https://www.heritagesmilesdental.com/services/porcelain-veneers/ → no referrer-policy
    • https://www.heritagesmilesdental.com/services/general-dentistry/ → no referrer-policy
    • https://www.heritagesmilesdental.com/services/dental-cleanings/ → no referrer-policy
    • https://www.heritagesmilesdental.com/services/oral-exams/ → no referrer-policy
  • FoundPermissions policyInfo

    No HTML page sends permissions-policy. A Permissions-Policy header turns off browser features the site does not use (camera, microphone, geolocation), limiting what an injected script could do.

    • https://www.heritagesmilesdental.com/ → no permissions-policy
    • https://www.heritagesmilesdental.com/canadian-dental-care-plan/ → no permissions-policy
    • https://www.heritagesmilesdental.com/services-cosmetic-general-orthodontics/ → no permissions-policy
    • https://www.heritagesmilesdental.com/services/family-dentistry/ → no permissions-policy
    • https://www.heritagesmilesdental.com/services/childrens-dentistry/ → no permissions-policy
    • https://www.heritagesmilesdental.com/services/sedation-dentistry/ → no permissions-policy
    • https://www.heritagesmilesdental.com/services/cosmetic-dentistry/ → no permissions-policy
    • https://www.heritagesmilesdental.com/services/teeth-whitening/ → no permissions-policy
    • https://www.heritagesmilesdental.com/services/porcelain-veneers/ → no permissions-policy
    • https://www.heritagesmilesdental.com/services/general-dentistry/ → no permissions-policy
    • https://www.heritagesmilesdental.com/services/dental-cleanings/ → no permissions-policy
    • https://www.heritagesmilesdental.com/services/oral-exams/ → no permissions-policy
  • FoundSoftware version disclosureLow

    Responses reveal the exact server or framework version, which lets an attacker look up known vulnerabilities for it without guessing.

    • server: cloudflare (620 responses)
    • x-powered-by: WP Rocket/3.23 (2 responses)
  • FoundCookie flagsMedium

    1 of 1 cookie are missing protective flags. Without HttpOnly a script can read the cookie; without Secure it travels over plain HTTP; without SameSite it is sent on cross-site requests.

    • PHPSESSID (set by https://www.heritagesmilesdental.com/author/admin/) lacks Secure, HttpOnly, SameSite
  • NoteSensitive paths in robots.txt

    robots.txt lists 1 path that look private. robots.txt is public and does not restrict access, so it doubles as a map for anyone probing the site; those paths need real access control.

    • Disallow: /wp-admin/
5 checks passed, 1 not applicable
  • OKMixed content

    No HTTPS page loads a script, stylesheet, font or image over plain HTTP.

  • OKVulnerable JavaScript libraries

    1 library version recognised, none with known vulnerabilities.

  • OKKeys and secrets in page code

    No API keys, tokens or private keys were found in the sampled HTML and scripts.

  • OKExposed files and listings

    None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.

  • OKThird-party scripts

    The sampled pages load no scripts from other domains.

  • Not applicableForms over HTTPS

    No forms were found on the sampled pages.

A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.

Sites scoring near www.heritagesmilesdental.com

Their neighbours in the SEO rank table, which orders every scanned site by health score.

DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.

This report was produced by the DIY SEO Hub Site Spider crawling www.heritagesmilesdental.com from its pages as published, the way a search engine does. It shows summary figures only.

Own www.heritagesmilesdental.com?

  • Claim this site to manage the listing, hide it from the public lists, or keep it.
  • Want it gone instead? Ask through the support form or e-mail support@diyseohub.com, naming www.heritagesmilesdental.com. Removal needs no account and no proof of purchase.