Website report
misola.co.nz · Christchurch
Assessed 15 October 2026. Part of our assessment of New Zealand websites.
Passes 16 of 21 checks
Checks we could not read are left out of the count.
The mirror
A hair salon in Wigram, Christchurch, offering Japanese-style hairdressing, styling, and head spa services. The site features online booking, a gallery of work, and customer reviews.
Most important first.
Your site does not tell browsers to always use the secure connection.
Why it matters: Without this instruction, a browser may still try the insecure address first, which leaves room for the connection to be tampered with.
How to fix it: Ask your developer or host to add the Strict-Transport-Security header once HTTPS works on every page.
Your domain does not publish an SPF record, so mail servers cannot tell which senders are genuinely yours.
Why it matters: Without it, your own emails are more likely to land in spam, and others find it easier to send mail that claims to come from you.
How to fix it: Add an SPF record in your domain's DNS settings; your email provider publishes the exact line to use.
Your domain does not publish a DMARC record, which lets anyone send email that claims to come from your domain.
Why it matters: A DMARC policy tells receiving mail servers what to do with mail that fails your checks, which protects your customers and your inbox placement.
How to fix it: Add a DMARC record in your DNS, starting with a monitoring policy, then tighten it once your legitimate mail passes.
We found no street address on your homepage.
Why it matters: A visible address tells customers and AI assistants where you are, and matches you to your Google listing.
How to fix it: Add your street address to the homepage, in the same form as on your Google listing.
Your homepage is missing the tags that make a full preview when it is shared.
Why it matters: When someone shares your link, these tags decide the picture, title and description people see in the post.
How to fix it: Add Open Graph tags (title, description and image); most website builders have a social sharing setting for this.
4 of 7 checks passed
Secure connection (HTTPS)
Your homepage loads over a secure connection (https://www.misola.co.nz/).
Valid security certificate
Your site presents a valid security certificate.
Certificate not about to expire
Your certificate runs until 2026-12-23, well past our check on 2026-10-17.
Always-secure instruction (HSTS)
Your site does not tell browsers to always use the secure connection.
Security headers
We could not read this part of your site.
Email sender record (SPF)
Your domain does not publish an SPF record, so mail servers cannot tell which senders are genuinely yours.
Email protection policy (DMARC)
Your domain does not publish a DMARC record, which lets anyone send email that claims to come from your domain.
Domain receives email
Your domain is set up to receive email.
12 of 14 checks passed
AI guide file (llms.txt)
Your site publishes an llms.txt file for AI assistants.
Search and AI crawlers allowed
Your site lets search engines and AI assistants read it.
Sitemap available
Your site declares a sitemap.
Structured data
Your homepage carries structured data (Organization).
Business described as a business
Your structured data describes you as a business or organisation.
Homepage title
Your homepage has a title.
Homepage description
Your homepage has a meta description.
One main heading
Your homepage has a single main heading.
Language declared
Your homepage declares its language.
Link preview when shared
Your homepage is missing the tags that make a full preview when it is shared.
Phone number findable
We found a phone number on your homepage.
Email address findable
We found an email address on your homepage.
Address findable
We found no street address on your homepage.
Contact form findable
We found a contact form on your site.
See where your business stands against its competitors - free.
My branch isn't here - we'll scrape your market for $7.