Scanned sites / www.idahoheating.com
SEO report for www.idahoheating.com DR 2
The latest Site Spider scan of www.idahoheating.com, with 1 scan on record. Each scan is at its own address, for example /domain/www-idahoheating-com/2026-11-02-0701.
DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.
Latest scan
Scanned 2026-11-02 07:01:32 UTC, finished 2026-11-03 05:31:41 UTC. Found on page 3 of brave web search results
Site: https://www.idahoheating.com/
Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.
On November 2, 2026 the Site Spider crawled 176 pages and 445 assets of www.idahoheating.com, starting from https://www.idahoheating.com/. It scored 87 out of 100, a good result. 12 of 33 checks found something to fix, led by meta descriptions (45), broken links (14), title tags (18); 9 checks passed. Most of the points went to meta descriptions (−2.7), broken links (−2.1), title tags (−1.3). 12 checks found something the score does not count, listed as noted. 4 checks were not run because the crawl fetched nothing for them. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.
Security review: Medium2 medium and 1 low findings. See the security findings ↓
- Pages crawled
- 176
- Assets fetched
- 445
- Status
- Completed
- Checks with issues
- 12 of 33
621 of 621 discovered URLs were fetched. The crawl reached everything it found. HTML only: nothing here ran JavaScript. 87 link destinations on other sites were checked.
- Title tags18 issues18 of 124 pages have title issues. 11 noindex or canonicalized pages excluded.−1.3 points
- Meta descriptions45 issues45 of 124 pages have meta description issues. 11 noindex or canonicalized pages excluded.−2.7 points
- Headings2 issues2 of 124 pages have heading issues. 11 noindex or canonicalized pages excluded.−0.1 points
- Broken links14 issues14 internal links point at 14 broken URLs.−2.1 points
- Links to other sites1 issue1 destination answered with an error, 64 could not be determined (timeouts, rate limits or refusals), of 87 destinations checked.−0.3 points
- Redirects29 issues28 redirecting URLs, 2 of them chained.−0.9 points
- Non-200 responses14 issues44 URLs did not return a 2xx response. 41 of them are pages, 14 with an error status; the rest are assets or redirects.−1 points
- Rate limitedOKThe site did not rate limit the crawler.
- Indexability5 issues5 of 133 indexable pages have indexability warnings. 2 pages noindex by design.−0.4 points
- Image alt textOK0 of 1644 image references have no alt attribute. 174 use an empty alt (decorative), which is fine.
- Heavy assets2 issues2 assets larger than 500 KB among 445 fetched assets.−1.2 points
- Orphan pages27 issues27 pages have no internal links pointing at them.−0.8 points
- Sitemap coverage27 issues4 sitemaps listing 124 URLs: 0 crawled pages missing, 0 listed URLs broken or redirecting, 27 reachable only via the sitemap.−1.2 points
- Internal link counts3 notedInternal link counts for 135 pages; 3 worth a look.
- Thin contentOK0 of 124 pages have fewer than 200 words. 11 noindex or canonicalized pages excluded.
- Duplicate content14 issues1 group of pages with identical HTML.−0.8 points
- URL format13 noted13 of 176 page URLs are harder to read, share or cache than they need to be.
- Canonicals11 noted11 of 135 pages have a canonical worth checking.
- Robots directives135 noted135 pages carry a robots directive; 0 carry none.
- Anchor text1 noted1 destination are linked without useful anchor text, or with nofollow.
- Title and heading structure9 noted9 of 124 pages could use the title, heading and snippet space better. 11 noindex or canonicalized pages excluded.
- Image weight and alt length18 noted2 images over 100 KB; 16 with alt text over 100 characters.
- Response anomalies13 noted13 URLs answered in a way worth looking at.
- HTML and head validationOKAll 135 pages keep their head tags in <head>, once each, under Googlebot's 2 MB.
- hreflangOKNo page declares hreflang.
- Structured dataOK135 of 124 indexable pages carry structured data: BreadcrumbList (134), ListItem (134), Organization (75), WebSite (75), Place (75). 0 pages with errors a rich result would fail on.
- Near duplicates7 noted7 pages in 2 groups read almost the same as another page (95% alike or more).
- Soft 404sOKNone of 135 pages answering 200 reads like an error page.
- AccessibilityNot checkedNot checked: the accessibility audit runs in the browser. Tick "Include JavaScript rendering checks" when you request a scan to run it.
- Link positions11 noted11 of 97 linked pages are linked only from the template, never from another page's content.
- PaginationOK7 pages in pagination sequences; 0 with problems.
- Headers and cookies1 noted3 cookies set by the site, 1 missing a protective flag; 18 response headers recorded across 621 URLs.
- Orphans in searchNot checkedNot checked: import a Search Console Pages export on the scan page to find pages Google shows that the site does not link to.
- Link ScoreOKLink Score (internal PageRank, 0-100) for 135 pages; 0 hold almost none (10 or less).
- JavaScript renderingNot checkedNot checked: this scan did not render pages. Tick "Include JavaScript rendering checks" when you request a scan to compare the served HTML with what a browser builds.
- PageSpeed InsightsNot checkedNot checked yet: PageSpeed Insights runs on the top pages once the crawl has finished.
- Spelling28 noted28 words an English dictionary does not know, on 30 pages. Product names and jargon will appear here too.
Where this site sits among all scanned sites
2704 sites, median 80%, average 78%
www.idahoheating.com scores 87%, higher than 79% of the 2704 scanned sites. See the full ranking.
Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).
Internal link map
Loading the link map...
Fix plan
Written by gpt-4o-mini from the scan findingsSeveral issues impacting SEO require attention, including broken links, redirects, and title and meta description problems. Addressing these will improve user experience and site performance.
- 1
Fix Broken Links
Why: 14 internal links currently point to broken URLs, negatively affecting user experience and SEO.
How: Identify and update or remove the broken links to the correct URLs.
Checks: broken-links
- 2
Optimize Redirects
Why: 28 redirects, including chained ones, can slow down site performance and dilute link equity.
How: Replace chained redirects with direct links to the final URLs to streamline page access.
Checks: redirects
- 3
Resolve Non-200 Responses
Why: 44 URLs are returning non-200 responses, which can hinder site indexing.
How: Investigate these URLs and correct errors to return a valid 200 status.
Checks: status-codes
- 4
Update Title Tags
Why: 18 pages have title issues, potentially affecting CTR on search results.
How: Edit titles to be concise (under 60 characters) and relevant to page content.
Checks: titles
- 5
Correct Meta Descriptions
Why: 45 pages have meta description issues that may affect visibility in SERPs.
How: Revise meta descriptions to be unique, relevant, and under 160 characters.
Checks: meta-descriptions
- 6
Add Missing Headings
Why: 2 pages lack H1 headings, which are crucial for indexing and SEO structure.
How: Add appropriate H1 tags to the affected pages for better content hierarchy.
Checks: headings
Generated automatically; verify each change against your own site before relying on it.
Security review
Written by gpt-4o-mini from 16 checks over the crawlThe site has several security issues needing attention. It lacks important security headers, exposing it to various risks. Additionally, many cookies do not have protective flags, which could allow unauthorized access. Addressing these findings will significantly enhance your site's security.
- 0 high
- 2 medium
- 1 low
- 0 info
- 1
Missing Content Security PolicyMedium
Why it matters: Without a Content Security Policy, the browser allows scripts and styles to load from any source, risking cross-site scripting attacks.
Fix: Implement a Content Security Policy header, e.g., `Content-Security-Policy: default-src 'self';`.
Evidence: Content Security Policy
- 2
Cookies Missing Protective FlagsMedium
Why it matters: 17 out of 19 cookies do not have Secure, HttpOnly, or SameSite flags, increasing vulnerability to attacks such as Cross-Site Scripting.
Fix: Modify cookie settings to include: Secure, HttpOnly, SameSite attributes for cookies.
Evidence: Cookie flags
- 3
No Referrer-Policy SetLow
Why it matters: Without a Referrer-Policy, users' full URLs can be exposed when they navigate to other sites, potentially revealing sensitive information.
Fix: Add a referrer policy header, e.g., `Referrer-Policy: no-referrer`.
Evidence: Referrer policy
What the checks found
- FoundContent Security PolicyMedium
None of the 135 HTML pages send a Content-Security-Policy header or meta tag, so the browser has no restriction on where scripts, styles and frames may load from.
- https://www.idahoheating.com/ → no content-security-policy
- https://www.idahoheating.com/hvac-services/ → no content-security-policy
- https://www.idahoheating.com/hvac-services/heating-repair/ → no content-security-policy
- https://www.idahoheating.com/hvac-services/heating-installation/ → no content-security-policy
- https://www.idahoheating.com/hvac-services/heating-maintenance/ → no content-security-policy
- https://www.idahoheating.com/hvac-services/boiler-repair/ → no content-security-policy
- https://www.idahoheating.com/hvac-services/boiler-installation/ → no content-security-policy
- https://www.idahoheating.com/hvac-services/boiler-maintenance/ → no content-security-policy
- https://www.idahoheating.com/hvac-services/furnace-repair/ → no content-security-policy
- https://www.idahoheating.com/hvac-services/furnace-installation/ → no content-security-policy
- https://www.idahoheating.com/hvac-services/furnace-maintenance/ → no content-security-policy
- https://www.idahoheating.com/hvac-services/mini-split-repair/ → no content-security-policy
- FoundReferrer policyLow
No HTML page sends referrer-policy. Without a Referrer-Policy the full page address, including any query string, is sent to every site a visitor clicks through to.
- https://www.idahoheating.com/ → no referrer-policy
- https://www.idahoheating.com/hvac-services/ → no referrer-policy
- https://www.idahoheating.com/hvac-services/heating-repair/ → no referrer-policy
- https://www.idahoheating.com/hvac-services/heating-installation/ → no referrer-policy
- https://www.idahoheating.com/hvac-services/heating-maintenance/ → no referrer-policy
- https://www.idahoheating.com/hvac-services/boiler-repair/ → no referrer-policy
- https://www.idahoheating.com/hvac-services/boiler-installation/ → no referrer-policy
- https://www.idahoheating.com/hvac-services/boiler-maintenance/ → no referrer-policy
- https://www.idahoheating.com/hvac-services/furnace-repair/ → no referrer-policy
- https://www.idahoheating.com/hvac-services/furnace-installation/ → no referrer-policy
- https://www.idahoheating.com/hvac-services/furnace-maintenance/ → no referrer-policy
- https://www.idahoheating.com/hvac-services/mini-split-repair/ → no referrer-policy
- FoundCookie flagsMedium
17 of 19 cookies are missing protective flags. Without HttpOnly a script can read the cookie; without Secure it travels over plain HTTP; without SameSite it is sent on cross-site requests.
- PHPSESSID (set by https://idahoheating.com/air-conditioning-installation/) lacks Secure, HttpOnly, SameSite
- 02 Nov 2026 20:58:38 GMT (set by https://www.idahoheating.com/opt-out-preferences/) lacks Secure, HttpOnly, SameSite
- 02 Nov 2026 21:04:18 GMT (set by https://www.idahoheating.com/electrical-services/electrical-repair/) lacks Secure, HttpOnly, SameSite
- 02 Nov 2026 21:04:30 GMT (set by https://www.idahoheating.com/electrical-services/electrical-installation/) lacks Secure, HttpOnly, SameSite
- 02 Nov 2026 21:05:21 GMT (set by https://www.idahoheating.com/electrical-services/switches-and-outlets-service/) lacks Secure, HttpOnly, SameSite
- 02 Nov 2026 21:05:32 GMT (set by https://www.idahoheating.com/electrical-services/lighting-repair/) lacks Secure, HttpOnly, SameSite
- 02 Nov 2026 21:06:34 GMT (set by https://www.idahoheating.com/electrical-services/lighting-installation/) lacks Secure, HttpOnly, SameSite
- 02 Nov 2026 21:07:38 GMT (set by https://www.idahoheating.com/electrical-services/electrical-safety-inspection/) lacks Secure, HttpOnly, SameSite
- 02 Nov 2026 21:07:49 GMT (set by https://www.idahoheating.com/electrical-services/home-surge-protection/) lacks Secure, HttpOnly, SameSite
- 02 Nov 2026 21:08:43 GMT (set by https://www.idahoheating.com/electrical-services/home-generator-repair/) lacks Secure, HttpOnly, SameSite
- 02 Nov 2026 21:08:53 GMT (set by https://www.idahoheating.com/electrical-services/home-generator-installation/) lacks Secure, HttpOnly, SameSite
- 02 Nov 2026 21:09:57 GMT (set by https://www.idahoheating.com/electrical-services/circuit-breaker-repair/) lacks Secure, HttpOnly, SameSite
- NoteSoftware version disclosure
Responses name the framework in an X-Powered-By header but hide the version.
- server: cloudflare (621 responses)
- x-powered-by: WP Engine (182 responses)
- NoteThird-party scripts
Scripts run from 1 other domain without Subresource Integrity, so a compromise of any of them changes what runs on this site. (Tag managers and analytics rarely support SRI; a Content-Security-Policy that names these hosts is the usual control.)
- cdn.trustindex.io (102 script tags)
- NoteSensitive paths in robots.txt
robots.txt lists 1 path that look private. robots.txt is public and does not restrict access, so it doubles as a map for anyone probing the site; those paths need real access control.
- Disallow: /wp-admin/
10 checks passed
- OKHTTPS
All 135 crawled pages were served over HTTPS.
- OKHTTP Strict Transport Security
strict-transport-security is set on all 135 HTML pages.
- OKClickjacking protection
x-frame-options is set on all 135 HTML pages.
- OKMIME sniffing protection
x-content-type-options is set on all 135 HTML pages.
- OKPermissions policy
permissions-policy is set on all 135 HTML pages.
- OKMixed content
No HTTPS page loads a script, stylesheet, font or image over plain HTTP.
- OKForms over HTTPS
71 forms found, all on HTTPS pages posting to HTTPS addresses.
- OKVulnerable JavaScript libraries
2 library versions recognised, none with known vulnerabilities.
- OKKeys and secrets in page code
No API keys, tokens or private keys were found in the sampled HTML and scripts.
- OKExposed files and listings
None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.
A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.
Earlier scans of www.idahoheating.com
No other scans of this site yet.
Sites scoring near www.idahoheating.com
Their neighbours in the SEO rank table, which orders every scanned site by health score.
- aigarden.techDR 088/100 · rank 403 · 9 pages
- dayleveling.comDR 088/100 · rank 403 · 4 pages
- www.saskatoondowntowndentist.caDR 787/100 · rank 480 · 36 pages
- www.premiumbarbershops.caDR 387/100 · rank 480 · 1 page
- www.purcellheating.caDR 687/100 · rank 480 · 152 pages
- www.turningpointphysio.caDR 2287/100 · rank 480 · 218 pages
DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.
This report was produced by the DIY SEO Hub Site Spider crawling www.idahoheating.com from its pages as published, the way a search engine does. It shows summary figures only.
Own www.idahoheating.com?
- Claim this site to manage the listing, hide it from the public lists, or keep it.
- Want it gone instead? Ask through the support form or e-mail support@diyseohub.com, naming www.idahoheating.com. Removal needs no account and no proof of purchase.