Sensitive data exposed in HTML: what it is, why it matters, and how to fix it

Email addresses or phone numbers are visible in the page HTML source, making them vulnerable to automated harvesting by bots and spammers.

Exposed email addresses and phone numbers are collected by scraper bots and used for spam, phishing, and social engineering attacks. This can lead to increased spam volume and targeted attacks against your organization or users.

Obfuscate email addresses and phone numbers using JavaScript rendering, contact forms, or encoding techniques. Consider using reCAPTCHA-protected contact forms instead of displaying raw contact information.

This is a medium-severity issue: individually modest, but it compounds — dozens of medium issues across hundreds of pages add up to a real quality deficit in how search engines assess the site. It belongs to the security family of checks.

Run a free Dr Urls audit: it crawls your site, detects sensitive data exposed in html on every affected page, shows example URLs, and generates a ready-to-use fix task. Re-scan after fixing to verify the issue is gone.