Scanned sites / www.highteabakery.com
SEO report for www.highteabakery.com
The latest Site Spider scan of www.highteabakery.com, with 1 scan on record. Each scan is at its own address, for example /domain/www-highteabakery-com/2026-10-03-0131.
Latest scan
Scanned 10/3/2026, 1:31:17 AM, finished 10/3/2026, 6:48:40 AM. Found on page 4 of brave web search results
Site: https://www.highteabakery.com/
Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.
On October 3, 2026 the Site Spider crawled 312 pages and 1147 assets of www.highteabakery.com, starting from https://www.highteabakery.com/. It scored 77 out of 100, a good result. 14 of 16 checks found something to fix, led by heavy assets (53), sitemap coverage (230), meta descriptions (131); 1 check passed. Most of the points went to heavy assets (−6), sitemap coverage (−4.7), meta descriptions (−3.6). 1 check found something the score does not count, listed as noted. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.
Security review: High1 high, 5 medium, 2 low and 1 info findings. See the security findings ↓
- Pages crawled
- 312
- Assets fetched
- 1147
- Status
- Completed
- Checks with issues
- 14 of 16
1,459 of 1,517 discovered URLs were fetched, 57 blocked by robots.txt, 698 left out by the 5,000-page and 1,000-asset budget. The job finished, but the crawl did not reach everything it found. HTML only: nothing here ran JavaScript. 21 link destinations on other sites were checked.
- Title tags31 issues31 of 138 pages have title issues. 157 noindex or canonicalized pages excluded.−1.1 points
- Meta descriptions131 issues131 of 138 pages have meta description issues. 157 noindex or canonicalized pages excluded.−3.6 points
- Headings4 issues4 of 138 pages have heading issues. 157 noindex or canonicalized pages excluded.−0.1 points
- Broken links11 issues32 internal links point at 11 broken URLs.−0.7 points
- Links to other sites1 issue1 destination answered with an error, 7 could not be determined (timeouts, rate limits or refusals), of 21 destinations checked.−0.1 points
- Redirects5 issues40 redirecting URLs, 1 of them chained.−0.1 points
- Non-200 responses11 issues51 URLs did not return a 2xx response. 17 of them are pages, 11 with an error status; the rest are assets or redirects.−0.4 points
- Rate limitedOKThe site did not rate limit the crawler.
- Indexability2 issues2 of 289 indexable pages have indexability warnings. 6 pages noindex by design. 2 noindex pages are listed in the sitemap, which asks search engines both to visit and to ignore them.−0.1 points
- Image alt text1 issue1 of 837 image references have no alt attribute. 202 use an empty alt (decorative), which is fine.
- Heavy assets53 issues53 assets larger than 500 KB among 1147 fetched assets. 1 document over that size is listed but not counted: downloads are not page weight.−6 points
- Orphan pages229 issues229 pages have no internal links pointing at them.−3.1 points
- Sitemap coverage230 issues6 sitemaps listing 292 URLs: 0 crawled pages missing, 2 listed URLs broken or redirecting, 226 reachable only via the sitemap.−4.7 points
- Internal link countsOKInternal link counts for 295 pages.
- Thin content111 issues111 of 138 pages have fewer than 200 words. 157 noindex or canonicalized pages excluded.−3 points
- Duplicate content11 issues1 group of pages with identical HTML.−0.3 points
Where this site sits among all scanned sites
1963 sites, median 80%, average 79%
www.highteabakery.com scores 77%, higher than 35% of the 1963 scanned sites. See the full ranking.
Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).
Internal link map
Loading the link map...
Fix plan
Written by gpt-4o-mini from the scan findingsYour website has several SEO issues that need attention, particularly with broken links, redirects, and indexability. Address these to improve your site's health and search visibility.
- 1
Fix Broken Links
Why: Improving user experience and preventing 404 errors boosts SEO.
How: Update or remove links pointing to broken URLs, which can be found in the broken-links report.
Checks: broken-links
- 2
Resolve Redirect Issues
Why: Chained redirects can slow down page load times, affecting SEO.
How: Simplify redirects to create a direct link to the final destination without chaining.
Checks: redirects
- 3
Address Non-200 Status Codes
Why: URLs returning non-200 responses hinder accessibility for users and crawlers.
How: Identify URLs with errors and take corrective action like fixing or removing them.
Checks: status-codes
- 4
Optimize Title Tags and Meta Descriptions
Why: Proper title tags and meta descriptions boost click-through rates from search results.
How: Ensure all pages have unique and descriptive title tags and meta descriptions.
Checks: titles, meta-descriptions
- 5
Improve Indexability
Why: Noindexing pages in the sitemap confuses search engines and may lead to lost traffic.
How: Remove noindexed pages from the sitemap to align your indexing strategy.
Checks: indexability, sitemap-coverage
- 6
Enhance Content Quality
Why: Increasing word count on thin content pages improves engagement and SEO ranking.
How: Add valuable content to pages with fewer than 200 words to make them more informative.
Checks: thin-content
Generated automatically; verify each change against your own site before relying on it.
Security review
Written by gpt-4o-mini from 16 checks over the crawlThe website has several security vulnerabilities, particularly around HTTP usage and missing security headers, which could expose user data. It's crucial to implement HTTPS redirection, enforce HSTS, and add security-related headers across all pages to enhance protection.
- 1 high
- 5 medium
- 2 low
- 1 info
- 1
Insecure HTTP ResponseHigh
Why it matters: One page can be accessed without HTTPS, making it vulnerable to interception.
Fix: Implement a redirect from HTTP to HTTPS for the shop-online page.
Evidence: HTTPS
- 2
Missing HSTS HeaderMedium
Why it matters: Without HSTS, users may be at risk during their initial requests.
Fix: Add Strict-Transport-Security: max-age=31536000; includeSubDomains to all HTML responses.
Evidence: HTTP Strict Transport Security
- 3
Missing X-Frame-Options HeaderMedium
Why it matters: Absence of clickjacking protection could allow framing by malicious sites.
Fix: Add X-Frame-Options: DENY to all HTML responses.
Evidence: Clickjacking protection
- 4
Cookies Missing Security FlagsMedium
Why it matters: Lack of flags makes cookies susceptible to theft or misuse.
Fix: Set Secure, HttpOnly, and SameSite attributes for the _fbp cookie.
Evidence: Cookie flags
- 5
Form Submission over HTTPMedium
Why it matters: User data could be intercepted during form submission.
Fix: Change the form action URL to HTTPS on the shop-online page.
Evidence: Forms over HTTPS
- 6
Use of Vulnerable JavaScript LibraryMedium
Why it matters: Outdated jQuery UI contains identified security vulnerabilities.
Fix: Upgrade to jQuery UI version 1.13.2 or higher.
Evidence: Vulnerable JavaScript libraries
- 7
Missing X-Content-Type-Options HeaderLow
Why it matters: Lack of this header can lead to content being executed as scripts.
Fix: Add X-Content-Type-Options: nosniff to all HTML pages.
Evidence: MIME sniffing protection
- 8
Missing Referrer Policy HeaderLow
Why it matters: A missing policy exposes user's full page addresses to third-party sites.
Fix: Add Referrer-Policy: no-referrer-when-downgrade to all HTML responses.
Evidence: Referrer policy
- 9
Missing Permissions Policy HeaderInfo
Why it matters: Absence of this header allows potentially harmful features on the site.
Fix: Add Permissions-Policy: geolocation=(none), microphone=(none), camera=(none) to all HTML pages.
Evidence: Permissions policy
What the checks found
- FoundHTTPSHigh
1 page answered 200 over plain HTTP with no redirect to HTTPS, while 294 were served over HTTPS. Anyone on the network path can read or alter these pages.
- http://www.highteabakery.com/shop-online/ → 200 over http
- FoundHTTP Strict Transport SecurityMedium
No HTML page sends strict-transport-security. Without it a visitor who types the address without https:// can be intercepted on the first request.
- https://www.highteabakery.com/ → no strict-transport-security
- https://www.highteabakery.com/about/ → no strict-transport-security
- https://www.highteabakery.com/shop-online/ → no strict-transport-security
- https://www.highteabakery.com/product/imperial-cookie-gift-box-national/ → no strict-transport-security
- https://www.highteabakery.com/retail-cupcakes-cakes-menu/ → no strict-transport-security
- https://www.highteabakery.com/corporate/ → no strict-transport-security
- https://www.highteabakery.com/events/ → no strict-transport-security
- https://www.highteabakery.com/contact/ → no strict-transport-security
- https://www.highteabakery.com/privacy/ → no strict-transport-security
- https://www.highteabakery.com/product/hello-fall-collection-sep22-oct3/ → no strict-transport-security
- https://www.highteabakery.com/product/truth-reconciliation-collection/ → no strict-transport-security
- https://www.highteabakery.com/product/thanksgiving-collection/ → no strict-transport-security
- FoundClickjacking protectionMedium
2 of 295 HTML pages send x-frame-options. Without X-Frame-Options (or a CSP frame-ancestors directive) the pages can be embedded in a frame on another site and overlaid with invisible controls.
- https://www.highteabakery.com/ → no x-frame-options
- https://www.highteabakery.com/about/ → no x-frame-options
- https://www.highteabakery.com/shop-online/ → no x-frame-options
- https://www.highteabakery.com/product/imperial-cookie-gift-box-national/ → no x-frame-options
- https://www.highteabakery.com/retail-cupcakes-cakes-menu/ → no x-frame-options
- https://www.highteabakery.com/corporate/ → no x-frame-options
- https://www.highteabakery.com/events/ → no x-frame-options
- https://www.highteabakery.com/contact/ → no x-frame-options
- https://www.highteabakery.com/privacy/ → no x-frame-options
- http://www.highteabakery.com/shop-online/ → no x-frame-options
- https://www.highteabakery.com/product/hello-fall-collection-sep22-oct3/ → no x-frame-options
- https://www.highteabakery.com/product/truth-reconciliation-collection/ → no x-frame-options
- FoundMIME sniffing protectionLow
No HTML page sends x-content-type-options. Without X-Content-Type-Options: nosniff a browser may run a file as a script because of its contents rather than its declared type.
- https://www.highteabakery.com/ → no x-content-type-options
- https://www.highteabakery.com/about/ → no x-content-type-options
- https://www.highteabakery.com/shop-online/ → no x-content-type-options
- https://www.highteabakery.com/product/imperial-cookie-gift-box-national/ → no x-content-type-options
- https://www.highteabakery.com/retail-cupcakes-cakes-menu/ → no x-content-type-options
- https://www.highteabakery.com/corporate/ → no x-content-type-options
- https://www.highteabakery.com/events/ → no x-content-type-options
- https://www.highteabakery.com/contact/ → no x-content-type-options
- https://www.highteabakery.com/privacy/ → no x-content-type-options
- http://www.highteabakery.com/shop-online/ → no x-content-type-options
- https://www.highteabakery.com/product/hello-fall-collection-sep22-oct3/ → no x-content-type-options
- https://www.highteabakery.com/product/truth-reconciliation-collection/ → no x-content-type-options
- FoundReferrer policyLow
No HTML page sends referrer-policy. Without a Referrer-Policy the full page address, including any query string, is sent to every site a visitor clicks through to.
- https://www.highteabakery.com/ → no referrer-policy
- https://www.highteabakery.com/about/ → no referrer-policy
- https://www.highteabakery.com/shop-online/ → no referrer-policy
- https://www.highteabakery.com/product/imperial-cookie-gift-box-national/ → no referrer-policy
- https://www.highteabakery.com/retail-cupcakes-cakes-menu/ → no referrer-policy
- https://www.highteabakery.com/corporate/ → no referrer-policy
- https://www.highteabakery.com/events/ → no referrer-policy
- https://www.highteabakery.com/contact/ → no referrer-policy
- https://www.highteabakery.com/privacy/ → no referrer-policy
- http://www.highteabakery.com/shop-online/ → no referrer-policy
- https://www.highteabakery.com/product/hello-fall-collection-sep22-oct3/ → no referrer-policy
- https://www.highteabakery.com/product/truth-reconciliation-collection/ → no referrer-policy
- FoundPermissions policyInfo
No HTML page sends permissions-policy. A Permissions-Policy header turns off browser features the site does not use (camera, microphone, geolocation), limiting what an injected script could do.
- https://www.highteabakery.com/ → no permissions-policy
- https://www.highteabakery.com/about/ → no permissions-policy
- https://www.highteabakery.com/shop-online/ → no permissions-policy
- https://www.highteabakery.com/product/imperial-cookie-gift-box-national/ → no permissions-policy
- https://www.highteabakery.com/retail-cupcakes-cakes-menu/ → no permissions-policy
- https://www.highteabakery.com/corporate/ → no permissions-policy
- https://www.highteabakery.com/events/ → no permissions-policy
- https://www.highteabakery.com/contact/ → no permissions-policy
- https://www.highteabakery.com/privacy/ → no permissions-policy
- http://www.highteabakery.com/shop-online/ → no permissions-policy
- https://www.highteabakery.com/product/hello-fall-collection-sep22-oct3/ → no permissions-policy
- https://www.highteabakery.com/product/truth-reconciliation-collection/ → no permissions-policy
- FoundCookie flagsMedium
1 of 2 cookies are missing protective flags. Without HttpOnly a script can read the cookie; without Secure it travels over plain HTTP; without SameSite it is sent on cross-site requests.
- _fbp (set by https://www.highteabakery.com/) lacks Secure, HttpOnly, SameSite
- FoundForms over HTTPSMedium
1 form would send what visitors type over plain HTTP, where it can be read or changed on the way.
- http://www.highteabakery.com/shop-online/ has 1 form on a page served over plain HTTP
- FoundVulnerable JavaScript librariesMedium
1 library with published vulnerabilities: jQuery UI 1.12.1. Whether they are exploitable depends on how the site uses them, but each has a fixed release.
- jQuery UI 1.12.1 in https://ajax.googleapis.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js?ver=7.1.2: CVE-2021-41182, CVE-2021-41183, CVE-2021-41184, CVE-2022-31160 (XSS through widget options); fixed in 1.13.2
- NoteSoftware version disclosure
Responses name the framework in an X-Powered-By header but hide the version.
- server: cloudflare (1459 responses)
- x-powered-by: WP Engine (345 responses)
- NoteThird-party scripts
Scripts run from 6 other domains without Subresource Integrity, so a compromise of any of them changes what runs on this site. (Tag managers and analytics rarely support SRI; a Content-Security-Policy that names these hosts is the usual control.)
- ajax.googleapis.com (40 script tags)
- stats.wp.com (80 script tags)
- www.googletagmanager.com (40 script tags)
- unpkg.com (40 script tags)
- js.stripe.com (31 script tags)
- www.google.com (3 script tags)
- NoteSensitive paths in robots.txt
robots.txt lists 1 path that look private. robots.txt is public and does not restrict access, so it doubles as a map for anyone probing the site; those paths need real access control.
- Disallow: /wp-admin/
4 checks passed
- OKContent Security Policy
A Content-Security-Policy is set on 2 of 295 pages.
- OKMixed content
No HTTPS page loads a script, stylesheet, font or image over plain HTTP.
- OKKeys and secrets in page code
No API keys, tokens or private keys were found in the sampled HTML and scripts.
- OKExposed files and listings
None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.
A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.
Earlier scans of www.highteabakery.com
No other scans of this site yet.
Sites scoring near www.highteabakery.com
Their neighbours in the SEO rank table, which orders every scanned site by health score.
- mrsammonslaw.com77/100 · rank 1194 · 30 pages
- www.stridephysiotherapy.ca77/100 · rank 1194 · 253 pages
- yehmanlandscaping.com77/100 · rank 1194 · 73 pages
- www.travelingspud.com77/100 · rank 1194 · 1,475 pages
- www.dentalchoice.ca77/100 · rank 1194 · 841 pages
- lethbridgethaimassage.com77/100 · rank 1194 · 31 pages
This report was produced by the DIY SEO Hub Site Spider crawling www.highteabakery.com from its pages as published, the way a search engine does. It shows summary figures only.
Own www.highteabakery.com?
- Claim this site to manage the listing, hide it from the public lists, or keep it.
- Want it gone instead? Ask through the support form or e-mail support@diyseohub.com, naming www.highteabakery.com. Removal needs no account and no proof of purchase.