Scanned sites / cafd.com / 2026-09-17-0700

cafd.com scan from 2026-09-17 07:00:02 UTC DR 24

DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.

Scan 2026-09-17-0700

Scanned 2026-09-17 07:00:02 UTC, finished 2026-09-17 07:00:15 UTC. Found on page 2 of chatgpt for browser (api usage) results

Site: https://cafd.com/

Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.

100/ 100Excellent

On September 17, 2026 the Site Spider crawled 1 page and 2 assets of cafd.com, starting from https://cafd.com/. It scored 100 out of 100, an excellent result. All 12 checks passed: nothing needs fixing. 2 checks found something the score does not count, listed as noted. 25 checks were not run because the crawl fetched nothing for them.

Security review: Medium1 medium and 1 low findings. See the security findings ↓

Pages crawled
1
Assets fetched
2
Status
Completed
Checks with issues
0 of 12
CoverageComplete crawl

3 of 3 discovered URLs were fetched. The crawl reached everything it found. HTML only: nothing here ran JavaScript.

  • Title tagsNot checked
    Not checked: the crawl fetched nothing this check can look at.
  • Meta descriptionsNot checked
    Not checked: the crawl fetched nothing this check can look at.
  • HeadingsNot checked
    Not checked: the crawl fetched nothing this check can look at.
  • Broken linksNot checked
    Not checked: the crawl fetched nothing this check can look at.
  • Links to other sitesNot checked
    Not checked: the crawl fetched nothing this check can look at.
  • RedirectsNot checked
    Not checked: the crawl fetched nothing this check can look at.
  • Non-200 responsesNot checked
    Not checked: the crawl fetched nothing this check can look at.
  • Rate limitedNot checked
    Not checked: the crawl fetched nothing this check can look at.
  • IndexabilityNot checked
    Not checked: the crawl fetched nothing this check can look at.
  • Image alt textNot checked
    Not checked: the crawl fetched nothing this check can look at.
  • Heavy assetsOK
    0 assets larger than 500 KB among 2 fetched assets.
  • Orphan pagesNot checked
    Not checked: the crawl fetched nothing this check can look at.
  • Sitemap coverageNot checked
    Not checked: the crawl fetched nothing this check can look at.
  • Internal link countsOK
    Internal link counts for 0 pages; none is a dead end or buried.
  • Thin contentNot checked
    Not checked: the crawl fetched nothing this check can look at.
  • Duplicate contentNot checked
    Not checked: the crawl fetched nothing this check can look at.
  • URL formatOK
    All 1 page URL are plain lowercase addresses without parameters.
  • CanonicalsOK
    0 of 0 pages have a canonical worth checking.
  • Robots directivesOK
    No page carries a robots directive; all 0 pages are open to search engines.
  • Anchor textOK
    Every internal link has descriptive, followed anchor text.
  • Title and heading structureOK
    0 of 0 pages could use the title, heading and snippet space better.
  • Image weight and alt lengthOK
    No image is over 100 KB or carries alt text over 100 characters.
  • Response anomaliesOK
    No redirect loops, header redirects or pages served as something other than HTML.
  • HTML and head validationNot checked
    Not checked: the crawl fetched no HTML pages.
  • hreflangNot checked
    Not checked: the crawl fetched no HTML pages.
  • Structured dataNot checked
    Not checked: the crawl fetched no HTML pages.
  • Near duplicatesNot checked
    Not checked: the crawl fetched no HTML pages.
  • Soft 404sNot checked
    Not checked: the crawl fetched no HTML pages.
  • AccessibilityNot checked
    Not checked: the accessibility audit runs in the browser. Tick "Include JavaScript rendering checks" when you request a scan to run it.
  • Link positionsNot checked
    Not checked: this scan was crawled before link positions were recorded. Scan the site again to run it.
  • PaginationNot checked
    Not checked: the crawl fetched no HTML pages.
  • Headers and cookies3 noted
    4 cookies set by the site, 3 missing a protective flag; 13 response headers recorded across 3 URLs.
  • Orphans in searchNot checked
    Not checked: import a Search Console Pages export on the scan page to find pages Google shows that the site does not link to.
  • Link ScoreOK
    No page answered 200, so there is no link equity to share.
  • JavaScript renderingNot checked
    Not checked: this scan did not render pages. Tick "Include JavaScript rendering checks" when you request a scan to compare the served HTML with what a browser builds.
  • PageSpeed Insights1 noted
    Mobile performance ? on average across 1 page; 1 below Google's good thresholds.
  • SpellingNot checked
    Not checked: the crawl fetched no HTML pages.

Where this scan sits among all scanned sites

2873 sites, median 80%, average 79%

cafd.com scores 100%, higher than 95% of the 2873 scanned sites. See the full ranking.

0751500%: 0 sites1%: 0 sites2%: 0 sites3%: 0 sites4%: 0 sites5%: 0 sites6%: 0 sites7%: 0 sites8%: 0 sites9%: 1 site10%: 0 sites11%: 0 sites12%: 0 sites13%: 0 sites14%: 1 site15%: 0 sites16%: 0 sites17%: 0 sites18%: 0 sites19%: 0 sites20%: 0 sites21%: 1 site22%: 0 sites23%: 0 sites24%: 0 sites25%: 0 sites26%: 0 sites27%: 0 sites28%: 1 site29%: 0 sites30%: 0 sites31%: 0 sites32%: 0 sites33%: 0 sites34%: 0 sites35%: 2 sites36%: 1 site37%: 1 site38%: 3 sites39%: 2 sites40%: 3 sites41%: 1 site42%: 2 sites43%: 3 sites44%: 2 sites45%: 6 sites46%: 5 sites47%: 5 sites48%: 6 sites49%: 8 sites50%: 6 sites51%: 7 sites52%: 8 sites53%: 9 sites54%: 9 sites55%: 9 sites56%: 8 sites57%: 17 sites58%: 18 sites59%: 10 sites60%: 15 sites61%: 13 sites62%: 20 sites63%: 29 sites64%: 22 sites65%: 33 sites66%: 43 sites67%: 42 sites68%: 42 sites69%: 52 sites70%: 46 sites71%: 81 sites72%: 76 sites73%: 81 sites74%: 82 sites75%: 87 sites76%: 95 sites77%: 109 sites78%: 132 sites79%: 111 sites80%: 128 sites81%: 125 sites82%: 132 sites83%: 119 sites84%: 130 sites85%: 106 sites86%: 95 sites87%: 96 sites88%: 80 sites89%: 75 sites90%: 55 sites91%: 59 sites92%: 43 sites93%: 29 sites94%: 25 sites95%: 15 sites96%: 18 sites97%: 16 sites98%: 8 sites99%: 3 sites100%: 150 sites100% here100%90%80%70%60%50%40%30%20%10%0%

Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).

Internal link map

Loading the link map...

Start page (centre)OKRedirectErrorOrphanLinked from most pagesOne inbound link or noneRings = clicks from the start page. Size = inbound links. Drag to pan, scroll to zoom, click a page to see only its links.

Fix plan

Written by gpt-4o-mini from the scan findings

Written from an earlier version of the analysis. The findings on this page have been recomputed since, so counts and labels here may differ from what the plan describes. The advice still points at the same checks.

The site has a health score of 90/100, but there are issues with non-200 responses for the homepage and the robots.txt file. Addressing these will improve accessibility and ensure proper crawling.

  1. 1

    Fix Homepage Non-200 Response

    Why: The homepage currently returns a 403 status, blocking access to users and search engines.

    How: Adjust server settings to allow access to the homepage for all users.

    Checks: status-codes

  2. 2

    Fix Robots.txt Non-200 Response

    Why: The robots.txt file is returning a 403 status, which can prevent search engines from crawling the site properly.

    How: Update permissions for the robots.txt file to ensure it is publicly accessible.

    Checks: status-codes

Generated automatically; verify each change against your own site before relying on it.

Security review

Written by gpt-4o-mini from 16 checks over the crawl

The site has issues with server information disclosure and cookie security settings that could expose vulnerabilities. Immediate actions are recommended to enhance security.

  • 0 high
  • 1 medium
  • 1 low
  • 0 info
  1. 1

    Insecure Cookie FlagsMedium

    Why it matters: Three cookies lack protective security flags, increasing the risk of cookie theft or unauthorized access.

    Fix: Set the following flags: `HttpOnly`, `Secure`, and `SameSite` for the affected cookies.

    Evidence: Cookie flags

  2. 2

    Server Version DisclosureLow

    Why it matters: The server reveals exact version information, allowing attackers to exploit known vulnerabilities.

    Fix: Remove the `X-Powered-By` header or set it to a generic value to obscure software version details.

    Evidence: Software version disclosure

What the checks found

  • FoundSoftware version disclosureLow

    Responses reveal the exact server or framework version, which lets an attacker look up known vulnerabilities for it without guessing.

    • server: cloudflare (3 responses)
    • x-powered-by: PHP/8.3.31 (1 response)
  • FoundCookie flagsMedium

    3 of 4 cookies are missing protective flags. Without HttpOnly a script can read the cookie; without Secure it travels over plain HTTP; without SameSite it is sent on cross-site requests.

    • datadome (set by https://cafd.com/robots.txt) lacks HttpOnly
    • language (set by https://cafd.com/sitemap.xml) lacks Secure, HttpOnly, SameSite
    • currency (set by https://cafd.com/sitemap.xml) lacks Secure, HttpOnly, SameSite
3 checks passed, 11 not applicable
  • OKKeys and secrets in page code

    No API keys, tokens or private keys were found in the sampled HTML and scripts.

  • OKExposed files and listings

    None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.

  • OKThird-party scripts

    The sampled pages load no scripts from other domains.

  • Not applicableHTTPS

    No HTML page was fetched, so transport security could not be judged.

  • Not applicableHTTP Strict Transport Security

    No page was served over HTTPS, so this header does not apply yet.

  • Not applicableContent Security Policy

    No HTML page was fetched.

  • Not applicableClickjacking protection

    No HTML page was fetched.

  • Not applicableMIME sniffing protection

    No HTML page was fetched.

  • Not applicableReferrer policy

    No HTML page was fetched.

  • Not applicablePermissions policy

    No HTML page was fetched.

  • Not applicableMixed content

    No page was served over HTTPS, so mixed content does not apply yet.

  • Not applicableForms over HTTPS

    No forms were found on the sampled pages.

  • Not applicableVulnerable JavaScript libraries

    No recognisable library versions were found in the sampled scripts.

  • Not applicableSensitive paths in robots.txt

    No robots.txt was fetched.

A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.

Sites scoring near cafd.com

Their neighbours in the SEO rank table, which orders every scanned site by health score.

DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.

This report was produced by the DIY SEO Hub Site Spider crawling cafd.com from its pages as published, the way a search engine does. It shows summary figures only.

Own cafd.com?