Website report
themortgagegirls.co.nz · Christchurch
Assessed 30 September 2026. Part of our assessment of New Zealand websites.
Passes 18 of 22 checks
Checks we could not read are left out of the count.
The mirror
A mortgage brokerage and financial advisory service based in Christchurch, New Zealand. The team provides home loan advice, first-home buyer support, investment property guidance, and insurance options to help clients achieve their property ownership goals.
Most important first.
Your site sends 2 of the 5 security headers we look for; missing: csp, x_frame_options, referrer_policy.
Why it matters: These headers tell browsers how to protect visitors - for example, stopping your pages being framed inside someone else's site.
How to fix it: Ask your developer or host to add the missing headers in the server or hosting settings.
Your site does not publish an llms.txt file.
Why it matters: An llms.txt file is a short, plain summary of your business and key pages that AI assistants can read quickly and quote accurately.
How to fix it: Create a text file at /llms.txt with a one-paragraph description of your business and links to your most important pages.
We found no sitemap for your site.
Why it matters: A sitemap lists every page you want found, so search engines and AI assistants do not miss the ones buried deep in your site.
How to fix it: Most website builders create a sitemap automatically; turn it on and list it in your robots.txt.
We found no contact form on your homepage.
Why it matters: A form lets a customer reach you at any hour without picking up the phone.
How to fix it: Add a simple contact form, or a clear link to one, on your homepage.
7 of 8 checks passed
Secure connection (HTTPS)
Your homepage loads over a secure connection (https://www.themortgagegirls.co.nz/).
Valid security certificate
Your site presents a valid security certificate.
Certificate not about to expire
Your certificate runs until 2026-12-08, well past our check on 2026-09-30.
Always-secure instruction (HSTS)
Your site tells browsers to always use the secure connection.
Security headers
Your site sends 2 of the 5 security headers we look for; missing: csp, x_frame_options, referrer_policy.
Email sender record (SPF)
Your domain publishes an SPF record listing who may send its email.
Email protection policy (DMARC)
Your domain publishes a DMARC policy.
Domain receives email
Your domain is set up to receive email.
11 of 14 checks passed
AI guide file (llms.txt)
Your site does not publish an llms.txt file.
Search and AI crawlers allowed
Your site lets search engines and AI assistants read it.
Sitemap available
We found no sitemap for your site.
Structured data
Your homepage carries structured data (BreadcrumbList, ImageObject, Organization, WPFooter, WPHeader, WebPage, WebSite).
Business described as a business
Your structured data describes you as a business or organisation.
Homepage title
Your homepage has a title.
Homepage description
Your homepage has a meta description.
One main heading
Your homepage has a single main heading.
Language declared
Your homepage declares its language.
Link preview when shared
Your homepage has the tags for a full preview when it is shared.
Phone number findable
We found a phone number on your homepage.
Email address findable
We found an email address on your homepage.
Address findable
We found an address on your homepage.
Contact form findable
We found no contact form on your homepage.
See where your business stands against its competitors - free.
My branch isn't here - we'll scrape your market for $7.