Scanned sites / ccfm.mb.ca
SEO report for ccfm.mb.ca DR 40
The latest Site Spider scan of ccfm.mb.ca, with 1 scan on record. Each scan is at its own address, for example /domain/ccfm-mb-ca/2026-11-02-2127.
DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.
Latest scan
Scanned 2026-11-02 21:27:15 UTC, finished 2026-11-02 23:51:36 UTC. Found on page 4 of brave web search results
Site: https://ccfm.mb.ca/
Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.
On November 2, 2026 the Site Spider crawled 434 pages and 529 assets of ccfm.mb.ca, starting from https://ccfm.mb.ca/. It scored 73 out of 100, a result that needs work. 13 of 33 checks found something to fix, led by meta descriptions (382), heavy assets (126), title tags (190); 9 checks passed. Most of the points went to meta descriptions (−7.2), heavy assets (−6), title tags (−4.5). 11 checks found something the score does not count, listed as noted. 4 checks were not run because the crawl fetched nothing for them. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.
Security review: Medium3 medium, 5 low and 2 info findings. See the security findings ↓
- Pages crawled
- 434
- Assets fetched
- 529
- Status
- Completed
- Checks with issues
- 13 of 33
963 of 975 discovered URLs were fetched, 6 blocked by robots.txt. The crawl reached everything it found. HTML only: nothing here ran JavaScript. 300 link destinations on other sites were checked, 4 left unchecked.
- Title tags190 issues190 of 382 pages have title issues. 42 noindex or canonicalized pages excluded.−4.5 points
- Meta descriptions382 issues382 of 382 pages have meta description issues. 42 noindex or canonicalized pages excluded.−7.2 points
- Headings9 issues9 of 382 pages have heading issues. 42 noindex or canonicalized pages excluded.−0.1 points
- Broken links3 issues422 internal links point at 3 broken URLs.−0.1 points
- Links to other sites9 issues9 destinations answered with an error, 53 could not be determined (timeouts, rate limits or refusals), 4 were left unchecked by the per-scan cap, of 300 destinations checked.−0.9 points
- Redirects7 issues11 redirecting URLs, 0 of them chained.−0.1 points
- Non-200 responses3 issues18 URLs did not return a 2xx response. 10 of them are pages, 3 with an error status; the rest are assets or redirects.−0.1 points
- Rate limitedOKThe site did not rate limit the crawler.
- Indexability36 issues36 of 420 indexable pages have indexability warnings. 4 pages noindex by design.−0.8 points
- Image alt text41 issues41 of 4874 image references have no alt attribute. 1187 use an empty alt (decorative), which is fine.−0.1 points
- Heavy assets126 issues126 assets larger than 500 KB among 529 fetched assets. 15 documents over that size are listed but not counted: downloads are not page weight.−6 points
- Orphan pages307 issues307 pages have no internal links pointing at them.−2.9 points
- Sitemap coverage307 issues9 sitemaps listing 409 URLs: 0 crawled pages missing, 0 listed URLs broken or redirecting, 307 reachable only via the sitemap.−4.3 points
- Internal link counts42 notedInternal link counts for 424 pages; 42 worth a look.
- Thin content8 issues8 of 382 pages have fewer than 200 words. 42 noindex or canonicalized pages excluded.−0.2 points
- Duplicate contentOK0 groups of pages with identical HTML.
- URL format15 noted15 of 434 page URLs are harder to read, share or cache than they need to be.
- Canonicals45 noted45 of 424 pages have a canonical worth checking.
- Robots directives424 noted424 pages carry a robots directive; 0 carry none.
- Anchor text12 noted12 destinations are linked without useful anchor text, or with nofollow.
- Title and heading structure151 noted151 of 382 pages could use the title, heading and snippet space better. 42 noindex or canonicalized pages excluded.
- Image weight and alt length296 noted296 images over 100 KB; 0 with alt text over 100 characters.
- Response anomaliesOKNo redirect loops, header redirects or pages served as something other than HTML.
- HTML and head validation2 noted2 of 424 pages have HTML problems: 2 with head tags outside <head>, 0 over 2 MB.
- hreflangOKNo page declares hreflang.
- Structured dataOKNo page carries structured data (382 indexable pages checked).
- Near duplicates49 noted49 pages in 18 groups read almost the same as another page (95% alike or more).
- Soft 404sOKNone of 424 pages answering 200 reads like an error page.
- AccessibilityNot checkedNot checked: the accessibility audit runs in the browser. Tick "Include JavaScript rendering checks" when you request a scan to run it.
- Link positions14 noted14 of 75 linked pages are linked only from the template, never from another page's content.
- PaginationOKNo page declares rel=next or rel=prev pagination.
- Headers and cookies2 noted2 cookies set by the site, 2 missing a protective flag; 17 response headers recorded across 963 URLs.
- Orphans in searchNot checkedNot checked: import a Search Console Pages export on the scan page to find pages Google shows that the site does not link to.
- Link ScoreOKLink Score (internal PageRank, 0-100) for 424 pages; 371 hold almost none (10 or less).
- JavaScript renderingNot checkedNot checked: this scan did not render pages. Tick "Include JavaScript rendering checks" when you request a scan to compare the served HTML with what a browser builds.
- PageSpeed InsightsNot checkedNot checked yet: PageSpeed Insights runs on the top pages once the crawl has finished.
- SpellingOKNo unfamiliar lower-case words on 382 pages (English pages only).
Where this site sits among all scanned sites
2664 sites, median 80%, average 78%
ccfm.mb.ca scores 73%, higher than 24% of the 2664 scanned sites. See the full ranking.
Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).
Internal link map
Loading the link map...
Fix plan
Written by gpt-4o-mini from the scan findingsYour website needs fixing for broken links, meta descriptions, and titles. Implementing these changes will improve user experience and SEO performance significantly.
- 1
Fix Broken Links
Why: 422 internal links point to broken URLs, harming user experience and SEO.
How: Identify broken links using the tool and replace or remove them from the referencing pages.
Checks: broken-links
- 2
Create Meta Descriptions
Why: 382 pages lack meta descriptions, potentially lowering click-through rates.
How: Write unique, compelling meta descriptions for each page including keywords relevant to the content.
Checks: meta-descriptions
- 3
Revise Title Tags
Why: 190 titles have issues, negatively impacting visibility and rankings.
How: Ensure each page has a unique title tag between 30-60 characters, focusing on relevant keywords.
Checks: titles
- 4
Add Headings
Why: 9 pages have heading issues that can impact content clarity and indexing.
How: Ensure each page has one H1 heading and appropriate H2 subheadings to improve structure.
Checks: headings
- 5
Improve Indexability
Why: 36 indexable pages have warnings that can affect their discoverability.
How: Review indexability issues and ensure proper canonical tags and settings are in place.
Checks: indexability
- 6
Shrink Heavy Assets
Why: 126 assets exceed 500 KB, impacting site load speed.
How: Optimize images and documents by compressing or resizing to enhance performance.
Checks: heavy-assets
Generated automatically; verify each change against your own site before relying on it.
Security review
Written by gpt-4o-mini from 16 checks over the crawlThe website ccfm.mb.ca has several security issues, including missing important HTTP headers, cookie protections, and mixed content. These findings may put user data at risk and expose the site to various attacks. Addressing these issues is crucial to improve the site's security posture.
- 0 high
- 3 medium
- 5 low
- 2 info
- 1
Missing HTTP Strict Transport Security (HSTS)Medium
Why it matters: Without HSTS, users can be intercepted on their first request to the site if they don't use HTTPS.
Fix: Add the header: Strict-Transport-Security: max-age=63072000; includeSubDomains; preload.
Evidence: HTTP Strict Transport Security
- 2
Missing X-Frame-Options HeaderMedium
Why it matters: Without this header, the site can be embedded in frames on malicious sites, risking clickjacking attacks.
Fix: Add the header: X-Frame-Options: DENY or use a CSP frame-ancestors directive.
Evidence: Clickjacking protection
- 3
Missing HttpOnly and Secure Flags on CookiesMedium
Why it matters: Without these flags, cookies can be accessed by scripts and sent over plain HTTP, posing security risks.
Fix: Set: PHPSESSID Secure; HttpOnly; SameSite=Lax. For wordpress_test_cookie, set: SameSite=Lax.
Evidence: Cookie flags
- 4
Missing X-Content-Type-Options HeaderLow
Why it matters: Without this header, browsers may misinterpret file types and execute scripts improperly.
Fix: Add the header: X-Content-Type-Options: nosniff.
Evidence: MIME sniffing protection
- 5
Missing Referrer-Policy HeaderLow
Why it matters: Without this policy, sensitive information may be leaked in the referrer header when users navigate away.
Fix: Add the header: Referrer-Policy: no-referrer-when-downgrade.
Evidence: Referrer policy
- 6
Server Version DisclosureLow
Why it matters: Revealing server details may expose vulnerabilities to attackers.
Fix: Configure the server to not disclose version information, or set header: Server: "".
Evidence: Software version disclosure
- 7
Mixed Content IssuesLow
Why it matters: Loading resources over HTTP on an HTTPS page compromises security and exposes the site to attacks.
Fix: Change URLs to use HTTPS for all resources.
Evidence: Mixed content
- 8
Third-Party Scripts Without Subresource IntegrityLow
Why it matters: Injecting malicious scripts from third-party sources can occur if these scripts are not secured.
Fix: Implement a Content-Security-Policy that defines allowed domains for third-party scripts.
Evidence: Third-party scripts
- 9
Lack of Permissions-Policy HeaderInfo
Why it matters: Not restricting permissions may allow undesirable capabilities for injected scripts.
Fix: Add the header: Permissions-Policy: geolocation=(self), microphone=(), camera=().
Evidence: Permissions policy
- 10
Sensitive Paths Listed in robots.txtInfo
Why it matters: Publicly listing sensitive directories can guide potential attackers to probe the site.
Fix: Consider removing or securing the Disallow: /wp-admin/ path.
Evidence: Sensitive paths in robots.txt
What the checks found
- FoundHTTP Strict Transport SecurityMedium
No HTML page sends strict-transport-security. Without it a visitor who types the address without https:// can be intercepted on the first request.
- https://ccfm.mb.ca/ → no strict-transport-security
- https://ccfm.mb.ca/le-ccfm/ → no strict-transport-security
- https://ccfm.mb.ca/lequipe/ → no strict-transport-security
- https://ccfm.mb.ca/carrieres/ → no strict-transport-security
- https://ccfm.mb.ca/les-amis-du-ccfm/ → no strict-transport-security
- https://ccfm.mb.ca/on-parle-de-nous/ → no strict-transport-security
- https://ccfm.mb.ca/spectacles/ → no strict-transport-security
- https://ccfm.mb.ca/ligue-dimprovisation-du-manitoba/ → no strict-transport-security
- https://ccfm.mb.ca/ateliers/ → no strict-transport-security
- https://ccfm.mb.ca/galerie-dart/ → no strict-transport-security
- https://ccfm.mb.ca/scolaire/ → no strict-transport-security
- https://ccfm.mb.ca/danse/ → no strict-transport-security
- FoundClickjacking protectionMedium
4 of 424 HTML pages send x-frame-options. Without X-Frame-Options (or a CSP frame-ancestors directive) the pages can be embedded in a frame on another site and overlaid with invisible controls.
- https://ccfm.mb.ca/ → no x-frame-options
- https://ccfm.mb.ca/le-ccfm/ → no x-frame-options
- https://ccfm.mb.ca/lequipe/ → no x-frame-options
- https://ccfm.mb.ca/carrieres/ → no x-frame-options
- https://ccfm.mb.ca/les-amis-du-ccfm/ → no x-frame-options
- https://ccfm.mb.ca/on-parle-de-nous/ → no x-frame-options
- https://ccfm.mb.ca/spectacles/ → no x-frame-options
- https://ccfm.mb.ca/ligue-dimprovisation-du-manitoba/ → no x-frame-options
- https://ccfm.mb.ca/ateliers/ → no x-frame-options
- https://ccfm.mb.ca/galerie-dart/ → no x-frame-options
- https://ccfm.mb.ca/scolaire/ → no x-frame-options
- https://ccfm.mb.ca/danse/ → no x-frame-options
- FoundMIME sniffing protectionLow
420 of 424 HTML pages send x-content-type-options. Without X-Content-Type-Options: nosniff a browser may run a file as a script because of its contents rather than its declared type.
- https://ccfm.mb.ca/wp-login.php?redirect_to=https%3A%2F%2Fccfm.mb.ca%2Fhello-world%2F → no x-content-type-options
- https://ccfm.mb.ca/wp-login.php?redirect_to=https%3A%2F%2Fccfm.mb.ca%2Fevents%2Fmy-bookings%2F → no x-content-type-options
- https://ccfm.mb.ca/wp-login.php?action=lostpassword → no x-content-type-options
- https://ccfm.mb.ca/wp-login.php → no x-content-type-options
- FoundReferrer policyLow
4 of 424 HTML pages send referrer-policy. Without a Referrer-Policy the full page address, including any query string, is sent to every site a visitor clicks through to.
- https://ccfm.mb.ca/ → no referrer-policy
- https://ccfm.mb.ca/le-ccfm/ → no referrer-policy
- https://ccfm.mb.ca/lequipe/ → no referrer-policy
- https://ccfm.mb.ca/carrieres/ → no referrer-policy
- https://ccfm.mb.ca/les-amis-du-ccfm/ → no referrer-policy
- https://ccfm.mb.ca/on-parle-de-nous/ → no referrer-policy
- https://ccfm.mb.ca/spectacles/ → no referrer-policy
- https://ccfm.mb.ca/ligue-dimprovisation-du-manitoba/ → no referrer-policy
- https://ccfm.mb.ca/ateliers/ → no referrer-policy
- https://ccfm.mb.ca/galerie-dart/ → no referrer-policy
- https://ccfm.mb.ca/scolaire/ → no referrer-policy
- https://ccfm.mb.ca/danse/ → no referrer-policy
- FoundPermissions policyInfo
420 of 424 HTML pages send permissions-policy. A Permissions-Policy header turns off browser features the site does not use (camera, microphone, geolocation), limiting what an injected script could do.
- https://ccfm.mb.ca/wp-login.php?redirect_to=https%3A%2F%2Fccfm.mb.ca%2Fhello-world%2F → no permissions-policy
- https://ccfm.mb.ca/wp-login.php?redirect_to=https%3A%2F%2Fccfm.mb.ca%2Fevents%2Fmy-bookings%2F → no permissions-policy
- https://ccfm.mb.ca/wp-login.php?action=lostpassword → no permissions-policy
- https://ccfm.mb.ca/wp-login.php → no permissions-policy
- FoundSoftware version disclosureLow
Responses reveal the exact server or framework version, which lets an attacker look up known vulnerabilities for it without guessing.
- server: Apache/2.4.58 (Ubuntu) (963 responses)
- FoundCookie flagsMedium
2 of 2 cookies are missing protective flags. Without HttpOnly a script can read the cookie; without Secure it travels over plain HTTP; without SameSite it is sent on cross-site requests.
- PHPSESSID (set by https://ccfm.mb.ca/) lacks Secure, HttpOnly, SameSite
- wordpress_test_cookie (set by https://ccfm.mb.ca/wp-login.php?redirect_to=https%3A%2F%2Fccfm.mb.ca%2Fhello-wo…) lacks SameSite
- FoundMixed contentLow
2 resources on HTTPS pages are loaded over plain HTTP.
- https://ccfm.mb.ca/le-patio-340/ loads image http://ccfm.mb.ca/wp-content/uploads/2026/05/LiquorMart-Logo-couleur.png
- https://ccfm.mb.ca/le-patio-340/ loads image http://ccfm.mb.ca/wp-content/uploads/2026/05/LiquorMart-Logo-couleur.png
- NoteThird-party scripts
Scripts run from 4 other domains without Subresource Integrity, so a compromise of any of them changes what runs on this site. (Tag managers and analytics rarely support SRI; a Content-Security-Policy that names these hosts is the usual control.)
- www.googletagmanager.com (40 script tags)
- cdn.jsdelivr.net (80 script tags)
- pagead2.googlesyndication.com (40 script tags)
- www.google.com (40 script tags)
- NoteSensitive paths in robots.txt
robots.txt lists 1 path that look private. robots.txt is public and does not restrict access, so it doubles as a map for anyone probing the site; those paths need real access control.
- Disallow: /wp-admin/
6 checks passed
- OKHTTPS
All 424 crawled pages were served over HTTPS.
- OKContent Security Policy
A Content-Security-Policy is set on 4 of 424 pages.
- OKForms over HTTPS
42 forms found, all on HTTPS pages posting to HTTPS addresses.
- OKVulnerable JavaScript libraries
2 library versions recognised, none with known vulnerabilities.
- OKKeys and secrets in page code
No API keys, tokens or private keys were found in the sampled HTML and scripts.
- OKExposed files and listings
None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.
A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.
Earlier scans of ccfm.mb.ca
No other scans of this site yet.
Sites scoring near ccfm.mb.ca
Their neighbours in the SEO rank table, which orders every scanned site by health score.
- showtymeacademy.comDR 474/100 · rank 1866 · 501 pages
- www.greenleafwa.comDR 473/100 · rank 1942 · 207 pages
- www.bcgsearch.comDR 6073/100 · rank 1942 · 4,937 pages
- www.timetocare.caDR 373/100 · rank 1942 · 115 pages
- highlowroofing.caDR 073/100 · rank 1942 · 284 pages
- auto-imports.caDR 373/100 · rank 1942 · 1,522 pages
DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.
This report was produced by the DIY SEO Hub Site Spider crawling ccfm.mb.ca from its pages as published, the way a search engine does. It shows summary figures only.
Own ccfm.mb.ca?
- Claim this site to manage the listing, hide it from the public lists, or keep it.
- Want it gone instead? Ask through the support form or e-mail support@diyseohub.com, naming ccfm.mb.ca. Removal needs no account and no proof of purchase.