Scanned sites / www.massageexperts.ca / 2026-11-03-1147

www.massageexperts.ca scan from 2026-11-03 11:47:20 UTC DR 26

DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.

Scan 2026-11-03-1147

Scanned 2026-11-03 11:47:20 UTC, finished 2026-11-03 13:38:07 UTC. Found on page 3 of brave web search results

Site: https://www.massageexperts.ca/

Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.

77/ 100Good

On November 3, 2026 the Site Spider crawled 646 pages and 1016 assets of www.massageexperts.ca, starting from https://www.massageexperts.ca/. It scored 77 out of 100, a good result. 13 of 33 checks found something to fix, led by meta descriptions (583), heavy assets (26), sitemap coverage (611); 6 checks passed. Most of the points went to meta descriptions (−7.5), heavy assets (−6), sitemap coverage (−5.9). 14 checks found something the score does not count, listed as noted. 4 checks were not run because the crawl fetched nothing for them. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.

Security review: Medium4 medium, 2 low and 1 info findings. See the security findings ↓

Pages crawled
646
Assets fetched
1016
Status
Completed
Checks with issues
13 of 33
CoverageJob finished, partial coverage

1,662 of 1,662 discovered URLs were fetched, 7,547 left out by the 5,000-page and 1,000-asset budget. The job finished, but the crawl did not reach everything it found. HTML only: nothing here ran JavaScript. 300 link destinations on other sites were checked, 59 left unchecked.

  • Title tags124 issues
    124 of 611 pages have title issues. 11 noindex or canonicalized pages excluded.
    −2 points
  • Meta descriptions583 issues
    583 of 611 pages have meta description issues. 11 noindex or canonicalized pages excluded.
    −7.5 points
  • Headings50 issues
    50 of 611 pages have heading issues. 11 noindex or canonicalized pages excluded.
    −0.5 points
  • Broken links6 issues
    125 internal links point at 6 broken URLs.
    −0.2 points
  • Links to other sites3 issues
    3 destinations answered with an error, 61 could not be determined (timeouts, rate limits or refusals), 59 were left unchecked by the per-scan cap, of 300 destinations checked.
    −0.2 points
  • Redirects18 issues
    18 redirecting URLs, 2 of them chained.
    −0.1 points
  • Non-200 responses7 issues
    25 URLs did not return a 2xx response. 24 of them are pages, 7 with an error status; the rest are assets or redirects.
    −0.1 points
  • Rate limitedOK
    The site did not rate limit the crawler.
  • Indexability3 issues
    3 of 613 indexable pages have indexability warnings. 9 pages noindex by design.
  • Image alt textOK
    0 of 8117 image references have no alt attribute. 7001 use an empty alt (decorative), which is fine.
  • Heavy assets26 issues
    26 assets larger than 500 KB among 1016 fetched assets.
    −6 points
  • Orphan pages3 issues
    3 pages have no internal links pointing at them.
  • Sitemap coverage611 issues
    20 sitemaps listing 0 URLs: 611 crawled pages missing, 0 listed URLs broken or redirecting, 0 reachable only via the sitemap.
    −5.9 points
  • Internal link counts49 noted
    Internal link counts for 500 pages; 49 worth a look.
  • Thin content2 issues
    2 of 611 pages have fewer than 200 words. 11 noindex or canonicalized pages excluded.
  • Duplicate content7 issues
    1 group of pages with identical HTML.
    −0.1 points
  • URL format18 noted
    18 of 646 page URLs are harder to read, share or cache than they need to be.
  • Canonicals13 noted
    13 of 622 pages have a canonical worth checking.
  • Robots directives620 noted
    620 pages carry a robots directive; 2 carry none.
  • Anchor text24 noted
    24 destinations are linked without useful anchor text, or with nofollow.
  • Title and heading structure480 noted
    480 of 611 pages could use the title, heading and snippet space better. 11 noindex or canonicalized pages excluded.
  • Image weight and alt length167 noted
    167 images over 100 KB; 0 with alt text over 100 characters.
  • Response anomalies4 noted
    4 URLs answered in a way worth looking at.
  • HTML and head validation20 noted
    20 of 622 pages have HTML problems: 20 with head tags outside <head>, 0 over 2 MB.
  • hreflang24 noted
    8 of 230 pages with hreflang have problems: 24 findings.
  • Structured data574 noted
    620 of 611 indexable pages carry structured data: BreadcrumbList (620), ListItem (620), WebSite (620), Organization (620), WebPage (620). 574 pages with errors a rich result would fail on.
  • Near duplicates184 noted
    184 pages in 46 groups read almost the same as another page (95% alike or more).
  • Soft 404sOK
    None of 622 pages answering 200 reads like an error page.
  • AccessibilityNot checked
    Not checked: the accessibility audit runs in the browser. Tick "Include JavaScript rendering checks" when you request a scan to run it.
  • Link positions106 noted
    106 of 608 linked pages are linked only from the template, never from another page's content.
  • PaginationOK
    2 pages in pagination sequences; 0 with problems.
  • Headers and cookiesOK
    2 cookies set by the site; 14 response headers recorded across 1662 URLs.
  • Orphans in searchNot checked
    Not checked: import a Search Console Pages export on the scan page to find pages Google shows that the site does not link to.
  • Link ScoreOK
    Link Score (internal PageRank, 0-100) for 622 pages; 82 hold almost none (10 or less).
  • JavaScript renderingNot checked
    Not checked: this scan did not render pages. Tick "Include JavaScript rendering checks" when you request a scan to compare the served HTML with what a browser builds.
  • PageSpeed InsightsNot checked
    Not checked yet: PageSpeed Insights runs on the top pages once the crawl has finished.
  • Spelling50 noted
    50 words an English dictionary does not know, on 129 pages. Product names and jargon will appear here too.

Where this scan sits among all scanned sites

2754 sites, median 80%, average 79%

www.massageexperts.ca scores 77%, higher than 36% of the 2754 scanned sites. See the full ranking.

0641280%: 0 sites1%: 0 sites2%: 0 sites3%: 0 sites4%: 0 sites5%: 0 sites6%: 0 sites7%: 0 sites8%: 0 sites9%: 1 site10%: 0 sites11%: 0 sites12%: 0 sites13%: 0 sites14%: 1 site15%: 0 sites16%: 0 sites17%: 0 sites18%: 0 sites19%: 0 sites20%: 0 sites21%: 1 site22%: 0 sites23%: 0 sites24%: 0 sites25%: 0 sites26%: 0 sites27%: 0 sites28%: 1 site29%: 0 sites30%: 0 sites31%: 0 sites32%: 0 sites33%: 0 sites34%: 0 sites35%: 2 sites36%: 1 site37%: 1 site38%: 3 sites39%: 2 sites40%: 3 sites41%: 1 site42%: 2 sites43%: 3 sites44%: 2 sites45%: 6 sites46%: 5 sites47%: 5 sites48%: 6 sites49%: 8 sites50%: 6 sites51%: 6 sites52%: 8 sites53%: 9 sites54%: 10 sites55%: 9 sites56%: 7 sites57%: 16 sites58%: 18 sites59%: 9 sites60%: 15 sites61%: 13 sites62%: 20 sites63%: 29 sites64%: 21 sites65%: 33 sites66%: 42 sites67%: 41 sites68%: 39 sites69%: 51 sites70%: 46 sites71%: 78 sites72%: 74 sites73%: 81 sites74%: 79 sites75%: 87 sites76%: 96 sites77%: 107 sites78%: 124 sites79%: 109 sites80%: 124 sites81%: 121 sites82%: 127 sites83%: 118 sites84%: 128 sites85%: 102 sites86%: 93 sites87%: 93 sites88%: 77 sites89%: 72 sites90%: 54 sites91%: 56 sites92%: 41 sites93%: 28 sites94%: 24 sites95%: 14 sites96%: 17 sites97%: 15 sites98%: 7 sites99%: 2 sites100%: 104 sites77% here100%90%80%70%60%50%40%30%20%10%0%

Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).

Internal link map

Loading the link map...

Start page (centre)OKRedirectErrorOrphanLinked from most pagesOne inbound link or noneRings = clicks from the start page. Size = inbound links. Drag to pan, scroll to zoom, click a page to see only its links.

Fix plan

Written by gpt-4o-mini from the scan findings

Your website has several key issues to address, especially with broken links, redirects, and title and meta description problems. Focus on these for immediate impact.

  1. 1

    Fix Broken Links

    Why: Broken links negatively impact user experience and SEO authority.

    How: Locate the listed broken URLs and update or remove the links in your content.

    Checks: broken-links

  2. 2

    Resolve Redirects

    Why: Chained redirects can slow down page loading times and confuse crawlers.

    How: Simplify redirects by ensuring each URL points directly to the final destination.

    Checks: redirects

  3. 3

    Update Title Tags

    Why: Many pages lack optimized title tags, affecting search engine visibility.

    How: Create unique and descriptive title tags for all affected pages.

    Checks: titles

  4. 4

    Enhance Meta Descriptions

    Why: A significant number of pages have missing or duplicated meta descriptions.

    How: Generate engaging and unique meta descriptions for the identified pages.

    Checks: meta-descriptions

  5. 5

    Address Headings Issues

    Why: Missing H1 tags can hinder both SEO and user understanding.

    How: Add appropriate H1 headings to all pages lacking them.

    Checks: headings

  6. 6

    Improve Sitemap Coverage

    Why: Many crawled pages are not listed in your sitemap, limiting their discoverability.

    How: Update your sitemap to include all important pages.

    Checks: sitemap-coverage

Generated automatically; verify each change against your own site before relying on it.

Security review

Written by gpt-4o-mini from 16 checks over the crawl

The website has several security vulnerabilities that could expose it to attacks. Key issues include missing security headers, cookies lacking protection, and the use of a vulnerable JavaScript library. Implementing recommended fixes will enhance protection against attacks such as cross-site scripting and clickjacking.

  • 0 high
  • 4 medium
  • 2 low
  • 1 info
  1. 1

    Missing Content Security PolicyMedium

    Why it matters: Without a CSP, the site is vulnerable to cross-site scripting and data injection attacks.

    Fix: Implement a Content-Security-Policy header: `Content-Security-Policy: default-src 'self';`.

    Evidence: Content Security Policy

  2. 2

    Missing X-Frame-OptionsMedium

    Why it matters: This allows clickjacking attacks by letting the site be framed by potentially malicious pages.

    Fix: Add `X-Frame-Options: DENY` header to your responses.

    Evidence: Clickjacking protection

  3. 3

    Unprotected CookiesMedium

    Why it matters: Cookies not having Secure, HttpOnly, and SameSite flags expose them to theft and unauthorized access.

    Fix: Set flags on cookies: `Set-Cookie: <cookie_name>; Secure; HttpOnly; SameSite=Strict`.

    Evidence: Cookie flags

  4. 4

    Vulnerable JavaScript LibraryMedium

    Why it matters: Using jQuery 3.1.1 exposes the site to known vulnerabilities, potentially allowing exploitation.

    Fix: Upgrade jQuery to at least version 3.5.0.

    Evidence: Vulnerable JavaScript libraries

  5. 5

    Missing X-Content-Type-OptionsLow

    Why it matters: Without this header, browsers may incorrectly interpret file types, leading to security risks.

    Fix: Add `X-Content-Type-Options: nosniff` header in your HTTP responses.

    Evidence: MIME sniffing protection

  6. 6

    Missing Referrer-PolicyLow

    Why it matters: Without a referrer policy, sensitive URL information may be shared with third-party sites.

    Fix: Include a `Referrer-Policy: no-referrer` header.

    Evidence: Referrer policy

  7. 7

    Missing Permissions-PolicyInfo

    Why it matters: Not using a Permissions-Policy could allow unnecessary browser features to be accessed by scripts.

    Fix: Add `Permissions-Policy: geolocation=(self), microphone=()`, adjusting as needed.

    Evidence: Permissions policy

What the checks found

  • FoundContent Security PolicyMedium

    None of the 622 HTML pages send a Content-Security-Policy header or meta tag, so the browser has no restriction on where scripts, styles and frames may load from.

    • https://www.massageexperts.ca/ → no content-security-policy
    • https://www.massageexperts.ca/fr/ → no content-security-policy
    • https://www.massageexperts.ca/treatments/ → no content-security-policy
    • https://www.massageexperts.ca/treatments/your-first-visit-massage/ → no content-security-policy
    • https://www.massageexperts.ca/treatments/therapeutic-massage/ → no content-security-policy
    • https://www.massageexperts.ca/treatments/deep-tissue-massage/ → no content-security-policy
    • https://www.massageexperts.ca/treatments/hot-stone-massage/ → no content-security-policy
    • https://www.massageexperts.ca/treatments/prenatal-massage/ → no content-security-policy
    • https://www.massageexperts.ca/treatments/cf1-therapeutic-massage/ → no content-security-policy
    • https://www.massageexperts.ca/treatments/couples-massage/ → no content-security-policy
    • https://www.massageexperts.ca/treatments/cupping-therapy/ → no content-security-policy
    • https://www.massageexperts.ca/treatments/lymphatic-drainage/ → no content-security-policy
  • FoundClickjacking protectionMedium

    No HTML page sends x-frame-options. Without X-Frame-Options (or a CSP frame-ancestors directive) the pages can be embedded in a frame on another site and overlaid with invisible controls.

    • https://www.massageexperts.ca/ → no x-frame-options
    • https://www.massageexperts.ca/fr/ → no x-frame-options
    • https://www.massageexperts.ca/treatments/ → no x-frame-options
    • https://www.massageexperts.ca/treatments/your-first-visit-massage/ → no x-frame-options
    • https://www.massageexperts.ca/treatments/therapeutic-massage/ → no x-frame-options
    • https://www.massageexperts.ca/treatments/deep-tissue-massage/ → no x-frame-options
    • https://www.massageexperts.ca/treatments/hot-stone-massage/ → no x-frame-options
    • https://www.massageexperts.ca/treatments/prenatal-massage/ → no x-frame-options
    • https://www.massageexperts.ca/treatments/cf1-therapeutic-massage/ → no x-frame-options
    • https://www.massageexperts.ca/treatments/couples-massage/ → no x-frame-options
    • https://www.massageexperts.ca/treatments/cupping-therapy/ → no x-frame-options
    • https://www.massageexperts.ca/treatments/lymphatic-drainage/ → no x-frame-options
  • FoundMIME sniffing protectionLow

    No HTML page sends x-content-type-options. Without X-Content-Type-Options: nosniff a browser may run a file as a script because of its contents rather than its declared type.

    • https://www.massageexperts.ca/ → no x-content-type-options
    • https://www.massageexperts.ca/fr/ → no x-content-type-options
    • https://www.massageexperts.ca/treatments/ → no x-content-type-options
    • https://www.massageexperts.ca/treatments/your-first-visit-massage/ → no x-content-type-options
    • https://www.massageexperts.ca/treatments/therapeutic-massage/ → no x-content-type-options
    • https://www.massageexperts.ca/treatments/deep-tissue-massage/ → no x-content-type-options
    • https://www.massageexperts.ca/treatments/hot-stone-massage/ → no x-content-type-options
    • https://www.massageexperts.ca/treatments/prenatal-massage/ → no x-content-type-options
    • https://www.massageexperts.ca/treatments/cf1-therapeutic-massage/ → no x-content-type-options
    • https://www.massageexperts.ca/treatments/couples-massage/ → no x-content-type-options
    • https://www.massageexperts.ca/treatments/cupping-therapy/ → no x-content-type-options
    • https://www.massageexperts.ca/treatments/lymphatic-drainage/ → no x-content-type-options
  • FoundReferrer policyLow

    No HTML page sends referrer-policy. Without a Referrer-Policy the full page address, including any query string, is sent to every site a visitor clicks through to.

    • https://www.massageexperts.ca/ → no referrer-policy
    • https://www.massageexperts.ca/fr/ → no referrer-policy
    • https://www.massageexperts.ca/treatments/ → no referrer-policy
    • https://www.massageexperts.ca/treatments/your-first-visit-massage/ → no referrer-policy
    • https://www.massageexperts.ca/treatments/therapeutic-massage/ → no referrer-policy
    • https://www.massageexperts.ca/treatments/deep-tissue-massage/ → no referrer-policy
    • https://www.massageexperts.ca/treatments/hot-stone-massage/ → no referrer-policy
    • https://www.massageexperts.ca/treatments/prenatal-massage/ → no referrer-policy
    • https://www.massageexperts.ca/treatments/cf1-therapeutic-massage/ → no referrer-policy
    • https://www.massageexperts.ca/treatments/couples-massage/ → no referrer-policy
    • https://www.massageexperts.ca/treatments/cupping-therapy/ → no referrer-policy
    • https://www.massageexperts.ca/treatments/lymphatic-drainage/ → no referrer-policy
  • FoundPermissions policyInfo

    No HTML page sends permissions-policy. A Permissions-Policy header turns off browser features the site does not use (camera, microphone, geolocation), limiting what an injected script could do.

    • https://www.massageexperts.ca/ → no permissions-policy
    • https://www.massageexperts.ca/fr/ → no permissions-policy
    • https://www.massageexperts.ca/treatments/ → no permissions-policy
    • https://www.massageexperts.ca/treatments/your-first-visit-massage/ → no permissions-policy
    • https://www.massageexperts.ca/treatments/therapeutic-massage/ → no permissions-policy
    • https://www.massageexperts.ca/treatments/deep-tissue-massage/ → no permissions-policy
    • https://www.massageexperts.ca/treatments/hot-stone-massage/ → no permissions-policy
    • https://www.massageexperts.ca/treatments/prenatal-massage/ → no permissions-policy
    • https://www.massageexperts.ca/treatments/cf1-therapeutic-massage/ → no permissions-policy
    • https://www.massageexperts.ca/treatments/couples-massage/ → no permissions-policy
    • https://www.massageexperts.ca/treatments/cupping-therapy/ → no permissions-policy
    • https://www.massageexperts.ca/treatments/lymphatic-drainage/ → no permissions-policy
  • FoundCookie flagsMedium

    6 of 8 cookies are missing protective flags. Without HttpOnly a script can read the cookie; without Secure it travels over plain HTTP; without SameSite it is sent on cross-site requests.

    • 03 Nov 2026 12:54:05 GMT (set by https://www.massageexperts.ca/normanview/?page_id=32) lacks Secure, HttpOnly, SameSite
    • 03 Nov 2026 13:04:23 GMT (set by https://www.massageexperts.ca/halifaxnorth/?post_type=service&p=589) lacks Secure, HttpOnly, SameSite
    • 03 Nov 2026 13:14:27 GMT (set by https://www.massageexperts.ca/dartmouth/?post_type=service&p=591) lacks Secure, HttpOnly, SameSite
    • 03 Nov 2026 13:15:55 GMT (set by https://www.massageexperts.ca/bedford/?post_type=service&p=227) lacks Secure, HttpOnly, SameSite
    • 03 Nov 2026 13:16:02 GMT (set by https://www.massageexperts.ca/lavalchomedey/front-page/insurance/) lacks Secure, HttpOnly, SameSite
    • 03 Nov 2026 13:24:33 GMT (set by https://www.massageexperts.ca/lavalchomedey/fr/assurance/) lacks Secure, HttpOnly, SameSite
  • FoundVulnerable JavaScript librariesMedium

    1 library with published vulnerabilities: jQuery 3.1.1. Whether they are exploitable depends on how the site uses them, but each has a fixed release.

    • jQuery 3.1.1 in https://www.massageexperts.ca/wp-content/plugins/gravityforms/js/placeholders.j…: CVE-2019-11358 (prototype pollution), CVE-2020-11022, CVE-2020-11023 (XSS via HTML passed to DOM methods); fixed in 3.5.0
  • NoteSoftware version disclosure

    Responses name the framework in an X-Powered-By header but hide the version.

    • server: cloudflare (1662 responses)
    • x-powered-by: WP Engine (664 responses)
8 checks passed
  • OKHTTPS

    All 622 crawled pages were served over HTTPS.

  • OKHTTP Strict Transport Security

    strict-transport-security is set on all 622 HTML pages.

  • OKMixed content

    No HTTPS page loads a script, stylesheet, font or image over plain HTTP.

  • OKForms over HTTPS

    83 forms found, all on HTTPS pages posting to HTTPS addresses.

  • OKKeys and secrets in page code

    No API keys, tokens or private keys were found in the sampled HTML and scripts.

  • OKExposed files and listings

    None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.

  • OKThird-party scripts

    The sampled pages load no scripts from other domains.

  • OKSensitive paths in robots.txt

    robots.txt does not point at admin, backup or private paths.

A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.

Sites scoring near www.massageexperts.ca

Their neighbours in the SEO rank table, which orders every scanned site by health score.

DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.

This report was produced by the DIY SEO Hub Site Spider crawling www.massageexperts.ca from its pages as published, the way a search engine does. It shows summary figures only.

Own www.massageexperts.ca?

  • Claim this site to manage the listing, hide it from the public lists, or keep it.
  • Want it gone instead? Ask through the support form or e-mail support@diyseohub.com, naming www.massageexperts.ca. Removal needs no account and no proof of purchase.