Scanned sites / www.coldcreekfarm.com
SEO report for www.coldcreekfarm.com
The latest Site Spider scan of www.coldcreekfarm.com, with 1 scan on record. Each scan is at its own address, for example /domain/www-coldcreekfarm-com/2026-09-18-2100.
Latest scan
Scanned 9/18/2026, 9:00:01 PM, finished 9/18/2026, 9:21:14 PM. Found on page 1 of chatgpt for browser (api usage) results
Site: https://www.coldcreekfarm.com/about-us
Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.
On September 18, 2026 the Site Spider crawled 603 pages and 1004 assets of www.coldcreekfarm.com, starting from https://www.coldcreekfarm.com/about-us. It scored 80 out of 100, a good result. 12 of 14 checks found something to fix, led by indexability (576), image alt text (562), heavy assets (61); 2 checks passed. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.
Security review: Medium2 medium, 1 low and 1 info findings. See the security findings ↓
- Pages crawled
- 603
- Assets fetched
- 1004
- Status
- Completed
- Checks with issues
- 12 of 14
- Title tags53 issues53 of 118 pages have title issues. 458 noindex or canonicalized pages excluded.
- Meta descriptions26 issues26 of 118 pages have meta description issues. 458 noindex or canonicalized pages excluded.
- Headings3 issues3 of 118 pages have heading issues. 458 noindex or canonicalized pages excluded.
- Broken links17 issues30 internal links point at 17 broken URLs.
- Redirects11 issues10 redirecting URLs, 2 of them chained.
- Non-200 responses17 issues28 URLs did not return a 2xx response.
- Rate limitedOKThe site did not rate limit the crawler.
- Indexability576 issues576 of 576 indexable pages have indexability warnings.
- Image alt text562 issues562 of 3908 image references have no alt attribute. 64 use an empty alt (decorative), which is fine.
- Heavy assets61 issues61 assets larger than 500 KB among the 100 heaviest.
- Orphan pagesOK0 pages have no internal links pointing at them.
- Sitemap coverage13 issues1 sitemap listing 106 URLs: 13 crawled pages missing, 0 listed URLs broken or redirecting, 0 reachable only via the sitemap.
- Thin content4 issues4 of 118 pages have fewer than 200 words. 458 noindex or canonicalized pages excluded.
- Duplicate content17 issues2 groups of pages with identical HTML.
Where this site sits among all scanned sites
1095 sites, median 82%, average 80%
www.coldcreekfarm.com scores 80%, higher than 39% of the 1095 scanned sites. See the full ranking.
Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).
Internal link map
Loading the link map...
Fix plan
Written by gpt-4o-mini from the scan findingsYour site has several critical SEO issues that need addressing. Focus on fixing broken links and non-200 responses first, along with improving title tags and meta descriptions for better search visibility.
- 1
Fix Broken Links
Why: Broken links negatively impact user experience and SEO rankings.
How: Update or remove links pointing to broken URLs found in the crawl report.
Checks: broken-links
- 2
Resolve Non-200 Responses
Why: Pages with non-200 responses can lead to higher bounce rates and detract from user experience.
How: Identify and redirect or fix the URLs listed as non-200 responses.
Checks: status-codes
- 3
Update Title Tags
Why: Optimized title tags improve click-through rates from search results.
How: Create unique, meaningful title tags for pages with issues, ensuring they are longer than 30 characters.
Checks: titles
- 4
Improve Meta Descriptions
Why: Enhanced meta descriptions can help increase organic CTR.
How: Revise meta descriptions for pages marked as problematic, keeping them under 160 characters.
Checks: meta-descriptions
- 5
Fix Missing Headings
Why: Proper headings help with SEO and content structure.
How: Ensure every page has a clear H1 heading; add as needed for pages without one.
Checks: headings
- 6
Address Sitemap Coverage
Why: Ensure all important pages are indexed by Google.
How: Update your sitemap to include all crawled and indexable pages not currently listed.
Checks: sitemap-coverage
Generated automatically; verify each change against your own site before relying on it.
Security review
Written by gpt-4o-mini from 16 checks over the crawlThis review identifies key areas where your website's security can be improved. Issues include missing security headers and cookie flags that expose vulnerabilities. Immediate action is needed to enhance protection against clickjacking and other potential threats.
- 0 high
- 2 medium
- 1 low
- 1 info
- 1
Missing X-Frame-Options HeaderMedium
Why it matters: Without this header, your pages can be embedded in frames, making them vulnerable to clickjacking.
Fix: Add `X-Frame-Options: SAMEORIGIN` to your HTTP response headers.
Evidence: Clickjacking protection
- 2
Insufficient Cookie FlagsMedium
Why it matters: Cookies lacking secure flags can be vulnerable to unauthorized access and cross-site request forgery.
Fix: Set HttpOnly, Secure, and SameSite attributes on `PHPSESSID` and `csrf_ficms_cookie`.
Evidence: Cookie flags
- 3
Lack of Subresource Integrity for Third-Party ScriptsLow
Why it matters: Compromised third-party scripts could run untrusted code on your site, leading to security issues.
Fix: Consider implementing Subresource Integrity (SRI) or a Content Security Policy to mitigate risks from third-party scripts.
Evidence: Third-party scripts
- 4
Absence of Permissions-Policy HeaderInfo
Why it matters: Not using this header leaves browser features exposed, increasing risk from malicious scripts.
Fix: Add `Permissions-Policy: activate-camera=(), microphone=(), geolocation=()` to response headers to limit access to unused features.
Evidence: Permissions policy
What the checks found
- FoundClickjacking protectionMedium
2 of 576 HTML pages send x-frame-options. Without X-Frame-Options (or a CSP frame-ancestors directive) the pages can be embedded in a frame on another site and overlaid with invisible controls.
- https://www.coldcreekfarm.com/about-us → no x-frame-options
- https://www.coldcreekfarm.com/ → no x-frame-options
- https://www.coldcreekfarm.com/wedding-package-pricing → no x-frame-options
- https://www.coldcreekfarm.com/wedding-vendors-north-georgia → no x-frame-options
- https://www.coldcreekfarm.com/accommodations-in-north-georgia → no x-frame-options
- https://www.coldcreekfarm.com/north-georgia-wedding-transportation → no x-frame-options
- https://www.coldcreekfarm.com/weddings/rehearsal-dinner-brunch-options-north-georgia → no x-frame-options
- https://www.coldcreekfarm.com/testimonials → no x-frame-options
- https://www.coldcreekfarm.com/blog → no x-frame-options
- https://www.coldcreekfarm.com/faq → no x-frame-options
- https://www.coldcreekfarm.com/about-us/service-areas → no x-frame-options
- https://www.coldcreekfarm.com/gallery → no x-frame-options
- FoundPermissions policyInfo
No HTML page sends permissions-policy. A Permissions-Policy header turns off browser features the site does not use (camera, microphone, geolocation), limiting what an injected script could do.
- https://www.coldcreekfarm.com/about-us → no permissions-policy
- https://www.coldcreekfarm.com/ → no permissions-policy
- https://www.coldcreekfarm.com/wedding-package-pricing → no permissions-policy
- https://www.coldcreekfarm.com/wedding-vendors-north-georgia → no permissions-policy
- https://www.coldcreekfarm.com/accommodations-in-north-georgia → no permissions-policy
- https://www.coldcreekfarm.com/north-georgia-wedding-transportation → no permissions-policy
- https://www.coldcreekfarm.com/weddings/rehearsal-dinner-brunch-options-north-georgia → no permissions-policy
- https://www.coldcreekfarm.com/testimonials → no permissions-policy
- https://www.coldcreekfarm.com/blog → no permissions-policy
- https://www.coldcreekfarm.com/faq → no permissions-policy
- https://www.coldcreekfarm.com/about-us/service-areas → no permissions-policy
- https://www.coldcreekfarm.com/gallery → no permissions-policy
- FoundCookie flagsMedium
2 of 2 cookies are missing protective flags. Without HttpOnly a script can read the cookie; without Secure it travels over plain HTTP; without SameSite it is sent on cross-site requests.
- PHPSESSID (set by https://www.coldcreekfarm.com/about-us) lacks SameSite
- csrf_ficms_cookie (set by https://www.coldcreekfarm.com/about-us) lacks HttpOnly, SameSite
- NoteThird-party scripts
Scripts run from 6 other domains without Subresource Integrity, so a compromise of any of them changes what runs on this site. (Tag managers and analytics rarely support SRI; a Content-Security-Policy that names these hosts is the usual control.)
- www.googletagmanager.com (160 script tags)
- cdn.userway.org (40 script tags)
- connect.podium.com (40 script tags)
- chat.mikla.ai (40 script tags)
- www.google.com (2 script tags)
- www.local-marketing-reports.com (1 script tag)
12 checks passed
- OKHTTPS
All 576 crawled pages were served over HTTPS.
- OKHTTP Strict Transport Security
strict-transport-security is set on all 576 HTML pages.
- OKContent Security Policy
A Content-Security-Policy is set.
- OKMIME sniffing protection
x-content-type-options is set on all 576 HTML pages.
- OKReferrer policy
referrer-policy is set on all 576 HTML pages.
- OKSoftware version disclosure
The Server header names a product without a version, and there is no X-Powered-By header.
- OKMixed content
No HTTPS page loads a script, stylesheet, font or image over plain HTTP.
- OKForms over HTTPS
122 forms found, all on HTTPS pages posting to HTTPS addresses.
- OKVulnerable JavaScript libraries
1 library version recognised, none with known vulnerabilities.
- OKKeys and secrets in page code
No API keys, tokens or private keys were found in the sampled HTML and scripts.
- OKExposed files and listings
None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.
- OKSensitive paths in robots.txt
robots.txt does not point at admin, backup or private paths.
A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.
Earlier scans of www.coldcreekfarm.com
No other scans of this site yet.
This report was produced by the DIY SEO Hub Site Spider crawling www.coldcreekfarm.com from its public pages. Anyone can run a scan of any site they own or are authorised to check. Is this your site? Claim it to manage the listing, or ask for removal through the support form.