Scanned sites / surferseo.com / 2026-09-25-0816
surferseo.com scan from 9/25/2026, 8:16:52 AM
Scan 2026-09-25-0816
Scanned 9/25/2026, 8:16:52 AM, finished 9/25/2026, 8:54:30 AM. Found with 42backlinks.com tool directory
Site: https://surferseo.com/
Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.
On September 25, 2026 the Site Spider crawled 834 pages and 3 assets of surferseo.com, starting from https://surferseo.com/. It scored 89 out of 100, a good result. 11 of 14 checks found something to fix, led by image alt text (284), redirects (251), meta descriptions (195); 3 checks passed. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.
Security review: Medium3 medium, 2 low and 1 info findings. See the security findings ↓
- Pages crawled
- 834
- Assets fetched
- 3
- Status
- Completed
- Checks with issues
- 11 of 14
- Title tags165 issues165 of 452 pages have title issues. 158 noindex or canonicalized pages excluded.
- Meta descriptions195 issues195 of 452 pages have meta description issues. 158 noindex or canonicalized pages excluded.
- Headings117 issues117 of 452 pages have heading issues. 158 noindex or canonicalized pages excluded.
- Broken links20 issues71 internal links point at 20 broken URLs.
- Redirects251 issues203 redirecting URLs, 120 of them chained.
- Non-200 responses22 issues225 URLs did not return a 2xx response.
- Rate limitedOKThe site did not rate limit the crawler.
- Indexability90 issues90 of 597 indexable pages have indexability warnings. 13 pages noindex by design.
- Image alt text284 issues284 of 16871 image references have no alt attribute. 12150 use an empty alt (decorative), which is fine.
- Heavy assetsOK0 assets larger than 500 KB among the 3 heaviest.
- Orphan pages26 issues26 pages have no internal links pointing at them.
- Sitemap coverage31 issues1 sitemap listing 541 URLs: 2 crawled pages missing, 4 listed URLs broken or redirecting, 24 reachable only via the sitemap.
- Thin contentOK0 of 452 pages have fewer than 200 words. 158 noindex or canonicalized pages excluded.
- Duplicate content4 issues1 group of pages with identical HTML.
Where this scan sits among all scanned sites
1254 sites, median 82%, average 80%
surferseo.com scores 89%, higher than 79% of the 1254 scanned sites. See the full ranking.
Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).
Internal link map
Loading the link map...
Fix plan
Written by gpt-4o-mini from the scan findingsYour site has some technical issues needing quick attention, including broken links and indexability warnings. Improving titles, meta descriptions, and fixing redirects will enhance user experience and search visibility.
- 1
Fix Broken Links
Why: 71 internal links are broken, affecting user navigation and SEO.
How: Identify broken URLs and remove or update links pointing to them. Use the site crawl results for specific URLs.
Checks: broken-links
- 2
Reduce Redirects
Why: 203 redirects, many of which are unnecessary, can slow down page load times.
How: Consolidate chained redirects by directly linking to the final URL instead.
Checks: redirects
- 3
Resolve Non-200 Responses
Why: 225 URLs did not return a 2xx response, affecting site usability.
How: Ensure all URLs return a valid page or update links to point to existing content.
Checks: status-codes
- 4
Improve Title Tags
Why: 165 pages have title issues, impacting SEO and click-through rates.
How: Rewrite titles to be unique and within 50-60 characters. Focus on keyword relevance.
Checks: titles
- 5
Enhance Meta Descriptions
Why: 195 pages need meta description fixes, essential for search visibility.
How: Update to be concise and compelling, keeping within 150-160 characters.
Checks: meta-descriptions
- 6
Fix Indexability Issues
Why: 90 pages have indexability warnings, potentially limiting search visibility.
How: Evaluate canonical tags and ensure they point correctly to the preferred version.
Checks: indexability
Generated automatically; verify each change against your own site before relying on it.
Security review
Written by gpt-4o-mini from 16 checks over the crawlThe website surferseo.com has several security issues that need immediate attention, primarily the lack of important security headers which can expose it to various risks. Key actions include implementing Content Security Policy and proper cookie attributes to enhance protection against script injection and man-in-the-middle attacks.
- 0 high
- 3 medium
- 2 low
- 1 info
- 1
Missing Content Security PolicyMedium
Why it matters: Without CSP, the site risks unauthorized script injections and data theft.
Fix: Add 'Content-Security-Policy: default-src 'self';' header.
Evidence: Content Security Policy
- 2
Missing X-Frame-OptionsMedium
Why it matters: Lack of this header exposes the site to clickjacking attacks.
Fix: Add 'X-Frame-Options: DENY' header.
Evidence: Clickjacking protection
- 3
Missing Secure Cookie FlagsMedium
Why it matters: Cookies can be accessed via scripts or transmitted over insecure channels.
Fix: Set cookies with 'Secure; HttpOnly; SameSite=Strict' attributes.
Evidence: Cookie flags
- 4
Missing X-Content-Type-OptionsLow
Why it matters: Without this header, browsers may treat files as different types than declared, leading to vulnerabilities.
Fix: Add 'X-Content-Type-Options: nosniff' header.
Evidence: MIME sniffing protection
- 5
Missing Referrer PolicyLow
Why it matters: Exposes users' previous URLs to third-party sites, which could compromise user privacy.
Fix: Add 'Referrer-Policy: no-referrer' header.
Evidence: Referrer policy
- 6
Missing Permissions PolicyInfo
Why it matters: Not restricting browser features could allow injected scripts to misuse them.
Fix: Add 'Permissions-Policy: activate-camera=(), geolocation=()' header.
Evidence: Permissions policy
What the checks found
- FoundContent Security PolicyMedium
None of the 610 HTML pages send a Content-Security-Policy header or meta tag, so the browser has no restriction on where scripts, styles and frames may load from.
- https://surferseo.com/ → no content-security-policy
- https://surferseo.com/free-ai-visibility-audit/ → no content-security-policy
- https://surferseo.com/pricing/ → no content-security-policy
- https://surferseo.com/enterprise/ → no content-security-policy
- https://surferseo.com/blog/why-use-surfer/ → no content-security-policy
- https://surferseo.com/updates/ → no content-security-policy
- https://surferseo.com/mcp/ → no content-security-policy
- https://surferseo.com/ai-tracker/ → no content-security-policy
- https://surferseo.com/content-audit/ → no content-security-policy
- https://surferseo.com/content-editor/ → no content-security-policy
- https://surferseo.com/topical-map/ → no content-security-policy
- https://surferseo.com/blog/sites/ → no content-security-policy
- FoundClickjacking protectionMedium
No HTML page sends x-frame-options. Without X-Frame-Options (or a CSP frame-ancestors directive) the pages can be embedded in a frame on another site and overlaid with invisible controls.
- https://surferseo.com/ → no x-frame-options
- https://surferseo.com/free-ai-visibility-audit/ → no x-frame-options
- https://surferseo.com/pricing/ → no x-frame-options
- https://surferseo.com/enterprise/ → no x-frame-options
- https://surferseo.com/blog/why-use-surfer/ → no x-frame-options
- https://surferseo.com/updates/ → no x-frame-options
- https://surferseo.com/mcp/ → no x-frame-options
- https://surferseo.com/ai-tracker/ → no x-frame-options
- https://surferseo.com/content-audit/ → no x-frame-options
- https://surferseo.com/content-editor/ → no x-frame-options
- https://surferseo.com/topical-map/ → no x-frame-options
- https://surferseo.com/blog/sites/ → no x-frame-options
- FoundMIME sniffing protectionLow
No HTML page sends x-content-type-options. Without X-Content-Type-Options: nosniff a browser may run a file as a script because of its contents rather than its declared type.
- https://surferseo.com/ → no x-content-type-options
- https://surferseo.com/free-ai-visibility-audit/ → no x-content-type-options
- https://surferseo.com/pricing/ → no x-content-type-options
- https://surferseo.com/enterprise/ → no x-content-type-options
- https://surferseo.com/blog/why-use-surfer/ → no x-content-type-options
- https://surferseo.com/updates/ → no x-content-type-options
- https://surferseo.com/mcp/ → no x-content-type-options
- https://surferseo.com/ai-tracker/ → no x-content-type-options
- https://surferseo.com/content-audit/ → no x-content-type-options
- https://surferseo.com/content-editor/ → no x-content-type-options
- https://surferseo.com/topical-map/ → no x-content-type-options
- https://surferseo.com/blog/sites/ → no x-content-type-options
- FoundReferrer policyLow
No HTML page sends referrer-policy. Without a Referrer-Policy the full page address, including any query string, is sent to every site a visitor clicks through to.
- https://surferseo.com/ → no referrer-policy
- https://surferseo.com/free-ai-visibility-audit/ → no referrer-policy
- https://surferseo.com/pricing/ → no referrer-policy
- https://surferseo.com/enterprise/ → no referrer-policy
- https://surferseo.com/blog/why-use-surfer/ → no referrer-policy
- https://surferseo.com/updates/ → no referrer-policy
- https://surferseo.com/mcp/ → no referrer-policy
- https://surferseo.com/ai-tracker/ → no referrer-policy
- https://surferseo.com/content-audit/ → no referrer-policy
- https://surferseo.com/content-editor/ → no referrer-policy
- https://surferseo.com/topical-map/ → no referrer-policy
- https://surferseo.com/blog/sites/ → no referrer-policy
- FoundPermissions policyInfo
No HTML page sends permissions-policy. A Permissions-Policy header turns off browser features the site does not use (camera, microphone, geolocation), limiting what an injected script could do.
- https://surferseo.com/ → no permissions-policy
- https://surferseo.com/free-ai-visibility-audit/ → no permissions-policy
- https://surferseo.com/pricing/ → no permissions-policy
- https://surferseo.com/enterprise/ → no permissions-policy
- https://surferseo.com/blog/why-use-surfer/ → no permissions-policy
- https://surferseo.com/updates/ → no permissions-policy
- https://surferseo.com/mcp/ → no permissions-policy
- https://surferseo.com/ai-tracker/ → no permissions-policy
- https://surferseo.com/content-audit/ → no permissions-policy
- https://surferseo.com/content-editor/ → no permissions-policy
- https://surferseo.com/topical-map/ → no permissions-policy
- https://surferseo.com/blog/sites/ → no permissions-policy
- FoundCookie flagsMedium
3 of 4 cookies are missing protective flags. Without HttpOnly a script can read the cookie; without Secure it travels over plain HTTP; without SameSite it is sent on cross-site requests.
- utm_source (set by https://surferseo.com/blog/seo-competitive-analysis/?utm_term=&utm_campaign=215…) lacks Secure, HttpOnly, SameSite
- utm_medium (set by https://surferseo.com/blog/seo-competitive-analysis/?utm_term=&utm_campaign=215…) lacks Secure, HttpOnly, SameSite
- utm_campaign (set by https://surferseo.com/blog/seo-competitive-analysis/?utm_term=&utm_campaign=215…) lacks Secure, HttpOnly, SameSite
- NoteThird-party scripts
Scripts run from 12 other domains without Subresource Integrity, so a compromise of any of them changes what runs on this site. (Tag managers and analytics rarely support SRI; a Content-Security-Policy that names these hosts is the usual control.)
- ajax.googleapis.com (40 script tags)
- assets.surferseo.art (255 script tags)
- d3e54v103j8qbb.cloudfront.net (33 script tags)
- marketing-assets.surferseo.art (231 script tags)
- www.google.com (2 script tags)
- cdn.jsdelivr.net (5 script tags)
- unpkg.com (3 script tags)
- js-eu1.hsforms.net (1 script tag)
- apis.google.com (1 script tag)
- hubspotv2.use1-marketplace-1p-apps-prod-red.if.webflow.services (1 script tag)
- app.surferseo.com (3 script tags)
- cdnjs.cloudflare.com (2 script tags)
8 checks passed, 1 not applicable
- OKHTTPS
All 610 crawled pages were served over HTTPS.
- OKHTTP Strict Transport Security
strict-transport-security is set on all 610 HTML pages.
- OKSoftware version disclosure
The Server header names a product without a version, and there is no X-Powered-By header.
- OKMixed content
No HTTPS page loads a script, stylesheet, font or image over plain HTTP.
- OKForms over HTTPS
59 forms found, all on HTTPS pages posting to HTTPS addresses.
- OKKeys and secrets in page code
No API keys, tokens or private keys were found in the sampled HTML and scripts.
- OKExposed files and listings
None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.
- OKSensitive paths in robots.txt
robots.txt does not point at admin, backup or private paths.
- Not applicableVulnerable JavaScript libraries
No recognisable library versions were found in the sampled scripts.
A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.
Sites scoring near surferseo.com
Their neighbours in the SEO rank table, which orders every scanned site by health score.
- www.manchesterdental.ca89/100 · rank 221 · 128 pages
- www.pinkladybathandbody.com89/100 · rank 221 · 355 pages
- www.gcoc.ca89/100 · rank 221 · 160 pages
- pinkladybathandbody.com89/100 · rank 221 · 350 pages
- mainepropertiesllc.com89/100 · rank 221 · 14 pages
- www.fratecuracao.com89/100 · rank 221 · 24 pages
This report was produced by the DIY SEO Hub Site Spider crawling surferseo.com from its pages as published, the way a search engine does. It shows summary figures only.
Own surferseo.com?
- Claim this site to manage the listing, hide it from the public lists, or keep it.
- Want it gone instead? Ask through the support form or e-mail support@diyseohub.com, naming surferseo.com. Removal needs no account and no proof of purchase.