Scanned sites / www.coldcreekfarm.com / 2026-09-18-2100

www.coldcreekfarm.com scan from 9/18/2026, 9:00:01 PM

Scan 2026-09-18-2100

Scanned 9/18/2026, 9:00:01 PM, finished 9/18/2026, 9:21:14 PM. Found on page 1 of chatgpt for browser (api usage) results

Site: https://www.coldcreekfarm.com/about-us

Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.

80/ 100Good

On September 18, 2026 the Site Spider crawled 603 pages and 1004 assets of www.coldcreekfarm.com, starting from https://www.coldcreekfarm.com/about-us. It scored 80 out of 100, a good result. 12 of 14 checks found something to fix, led by indexability (576), image alt text (562), heavy assets (61); 2 checks passed. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.

Security review: Medium2 medium, 1 low and 1 info findings. See the security findings ↓

Pages crawled
603
Assets fetched
1004
Status
Completed
Checks with issues
12 of 14
  • Title tags53 issues
    53 of 118 pages have title issues. 458 noindex or canonicalized pages excluded.
  • Meta descriptions26 issues
    26 of 118 pages have meta description issues. 458 noindex or canonicalized pages excluded.
  • Headings3 issues
    3 of 118 pages have heading issues. 458 noindex or canonicalized pages excluded.
  • Broken links17 issues
    30 internal links point at 17 broken URLs.
  • Redirects11 issues
    10 redirecting URLs, 2 of them chained.
  • Non-200 responses17 issues
    28 URLs did not return a 2xx response.
  • Rate limitedOK
    The site did not rate limit the crawler.
  • Indexability576 issues
    576 of 576 indexable pages have indexability warnings.
  • Image alt text562 issues
    562 of 3908 image references have no alt attribute. 64 use an empty alt (decorative), which is fine.
  • Heavy assets61 issues
    61 assets larger than 500 KB among the 100 heaviest.
  • Orphan pagesOK
    0 pages have no internal links pointing at them.
  • Sitemap coverage13 issues
    1 sitemap listing 106 URLs: 13 crawled pages missing, 0 listed URLs broken or redirecting, 0 reachable only via the sitemap.
  • Thin content4 issues
    4 of 118 pages have fewer than 200 words. 458 noindex or canonicalized pages excluded.
  • Duplicate content17 issues
    2 groups of pages with identical HTML.

Where this scan sits among all scanned sites

1095 sites, median 82%, average 80%

www.coldcreekfarm.com scores 80%, higher than 39% of the 1095 scanned sites. See the full ranking.

028550%: 0 sites1%: 0 sites2%: 0 sites3%: 0 sites4%: 0 sites5%: 0 sites6%: 0 sites7%: 0 sites8%: 0 sites9%: 0 sites10%: 0 sites11%: 0 sites12%: 0 sites13%: 0 sites14%: 0 sites15%: 0 sites16%: 0 sites17%: 0 sites18%: 0 sites19%: 0 sites20%: 0 sites21%: 1 site22%: 0 sites23%: 0 sites24%: 0 sites25%: 0 sites26%: 0 sites27%: 0 sites28%: 1 site29%: 0 sites30%: 0 sites31%: 0 sites32%: 0 sites33%: 0 sites34%: 0 sites35%: 1 site36%: 1 site37%: 0 sites38%: 0 sites39%: 0 sites40%: 0 sites41%: 0 sites42%: 0 sites43%: 0 sites44%: 0 sites45%: 2 sites46%: 1 site47%: 1 site48%: 0 sites49%: 0 sites50%: 3 sites51%: 4 sites52%: 1 site53%: 1 site54%: 2 sites55%: 1 site56%: 2 sites57%: 3 sites58%: 6 sites59%: 3 sites60%: 5 sites61%: 8 sites62%: 12 sites63%: 4 sites64%: 9 sites65%: 9 sites66%: 7 sites67%: 15 sites68%: 27 sites69%: 12 sites70%: 23 sites71%: 22 sites72%: 24 sites73%: 24 sites74%: 31 sites75%: 26 sites76%: 38 sites77%: 37 sites78%: 34 sites79%: 31 sites80%: 43 sites81%: 53 sites82%: 49 sites83%: 45 sites84%: 55 sites85%: 47 sites86%: 46 sites87%: 47 sites88%: 55 sites89%: 39 sites90%: 52 sites91%: 37 sites92%: 25 sites93%: 17 sites94%: 16 sites95%: 8 sites96%: 10 sites97%: 4 sites98%: 2 sites99%: 1 site100%: 12 sites80% here100%90%80%70%60%50%40%30%20%10%0%

Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).

Internal link map

Loading the link map...

Start page (centre)OKRedirectErrorOrphanLinked from most pagesOne inbound link or noneRings = clicks from the start page. Size = inbound links. Drag to pan, scroll to zoom, click a page to see only its links.

Fix plan

Written by gpt-4o-mini from the scan findings

Your site has several critical SEO issues that need addressing. Focus on fixing broken links and non-200 responses first, along with improving title tags and meta descriptions for better search visibility.

  1. 1

    Fix Broken Links

    Why: Broken links negatively impact user experience and SEO rankings.

    How: Update or remove links pointing to broken URLs found in the crawl report.

    Checks: broken-links

  2. 2

    Resolve Non-200 Responses

    Why: Pages with non-200 responses can lead to higher bounce rates and detract from user experience.

    How: Identify and redirect or fix the URLs listed as non-200 responses.

    Checks: status-codes

  3. 3

    Update Title Tags

    Why: Optimized title tags improve click-through rates from search results.

    How: Create unique, meaningful title tags for pages with issues, ensuring they are longer than 30 characters.

    Checks: titles

  4. 4

    Improve Meta Descriptions

    Why: Enhanced meta descriptions can help increase organic CTR.

    How: Revise meta descriptions for pages marked as problematic, keeping them under 160 characters.

    Checks: meta-descriptions

  5. 5

    Fix Missing Headings

    Why: Proper headings help with SEO and content structure.

    How: Ensure every page has a clear H1 heading; add as needed for pages without one.

    Checks: headings

  6. 6

    Address Sitemap Coverage

    Why: Ensure all important pages are indexed by Google.

    How: Update your sitemap to include all crawled and indexable pages not currently listed.

    Checks: sitemap-coverage

Generated automatically; verify each change against your own site before relying on it.

Security review

Written by gpt-4o-mini from 16 checks over the crawl

This review identifies key areas where your website's security can be improved. Issues include missing security headers and cookie flags that expose vulnerabilities. Immediate action is needed to enhance protection against clickjacking and other potential threats.

  • 0 high
  • 2 medium
  • 1 low
  • 1 info
  1. 1

    Missing X-Frame-Options HeaderMedium

    Why it matters: Without this header, your pages can be embedded in frames, making them vulnerable to clickjacking.

    Fix: Add `X-Frame-Options: SAMEORIGIN` to your HTTP response headers.

    Evidence: Clickjacking protection

  2. 2

    Insufficient Cookie FlagsMedium

    Why it matters: Cookies lacking secure flags can be vulnerable to unauthorized access and cross-site request forgery.

    Fix: Set HttpOnly, Secure, and SameSite attributes on `PHPSESSID` and `csrf_ficms_cookie`.

    Evidence: Cookie flags

  3. 3

    Lack of Subresource Integrity for Third-Party ScriptsLow

    Why it matters: Compromised third-party scripts could run untrusted code on your site, leading to security issues.

    Fix: Consider implementing Subresource Integrity (SRI) or a Content Security Policy to mitigate risks from third-party scripts.

    Evidence: Third-party scripts

  4. 4

    Absence of Permissions-Policy HeaderInfo

    Why it matters: Not using this header leaves browser features exposed, increasing risk from malicious scripts.

    Fix: Add `Permissions-Policy: activate-camera=(), microphone=(), geolocation=()` to response headers to limit access to unused features.

    Evidence: Permissions policy

What the checks found

  • FoundClickjacking protectionMedium

    2 of 576 HTML pages send x-frame-options. Without X-Frame-Options (or a CSP frame-ancestors directive) the pages can be embedded in a frame on another site and overlaid with invisible controls.

    • https://www.coldcreekfarm.com/about-us → no x-frame-options
    • https://www.coldcreekfarm.com/ → no x-frame-options
    • https://www.coldcreekfarm.com/wedding-package-pricing → no x-frame-options
    • https://www.coldcreekfarm.com/wedding-vendors-north-georgia → no x-frame-options
    • https://www.coldcreekfarm.com/accommodations-in-north-georgia → no x-frame-options
    • https://www.coldcreekfarm.com/north-georgia-wedding-transportation → no x-frame-options
    • https://www.coldcreekfarm.com/weddings/rehearsal-dinner-brunch-options-north-georgia → no x-frame-options
    • https://www.coldcreekfarm.com/testimonials → no x-frame-options
    • https://www.coldcreekfarm.com/blog → no x-frame-options
    • https://www.coldcreekfarm.com/faq → no x-frame-options
    • https://www.coldcreekfarm.com/about-us/service-areas → no x-frame-options
    • https://www.coldcreekfarm.com/gallery → no x-frame-options
  • FoundPermissions policyInfo

    No HTML page sends permissions-policy. A Permissions-Policy header turns off browser features the site does not use (camera, microphone, geolocation), limiting what an injected script could do.

    • https://www.coldcreekfarm.com/about-us → no permissions-policy
    • https://www.coldcreekfarm.com/ → no permissions-policy
    • https://www.coldcreekfarm.com/wedding-package-pricing → no permissions-policy
    • https://www.coldcreekfarm.com/wedding-vendors-north-georgia → no permissions-policy
    • https://www.coldcreekfarm.com/accommodations-in-north-georgia → no permissions-policy
    • https://www.coldcreekfarm.com/north-georgia-wedding-transportation → no permissions-policy
    • https://www.coldcreekfarm.com/weddings/rehearsal-dinner-brunch-options-north-georgia → no permissions-policy
    • https://www.coldcreekfarm.com/testimonials → no permissions-policy
    • https://www.coldcreekfarm.com/blog → no permissions-policy
    • https://www.coldcreekfarm.com/faq → no permissions-policy
    • https://www.coldcreekfarm.com/about-us/service-areas → no permissions-policy
    • https://www.coldcreekfarm.com/gallery → no permissions-policy
  • FoundCookie flagsMedium

    2 of 2 cookies are missing protective flags. Without HttpOnly a script can read the cookie; without Secure it travels over plain HTTP; without SameSite it is sent on cross-site requests.

    • PHPSESSID (set by https://www.coldcreekfarm.com/about-us) lacks SameSite
    • csrf_ficms_cookie (set by https://www.coldcreekfarm.com/about-us) lacks HttpOnly, SameSite
  • NoteThird-party scripts

    Scripts run from 6 other domains without Subresource Integrity, so a compromise of any of them changes what runs on this site. (Tag managers and analytics rarely support SRI; a Content-Security-Policy that names these hosts is the usual control.)

    • www.googletagmanager.com (160 script tags)
    • cdn.userway.org (40 script tags)
    • connect.podium.com (40 script tags)
    • chat.mikla.ai (40 script tags)
    • www.google.com (2 script tags)
    • www.local-marketing-reports.com (1 script tag)
12 checks passed
  • OKHTTPS

    All 576 crawled pages were served over HTTPS.

  • OKHTTP Strict Transport Security

    strict-transport-security is set on all 576 HTML pages.

  • OKContent Security Policy

    A Content-Security-Policy is set.

  • OKMIME sniffing protection

    x-content-type-options is set on all 576 HTML pages.

  • OKReferrer policy

    referrer-policy is set on all 576 HTML pages.

  • OKSoftware version disclosure

    The Server header names a product without a version, and there is no X-Powered-By header.

  • OKMixed content

    No HTTPS page loads a script, stylesheet, font or image over plain HTTP.

  • OKForms over HTTPS

    122 forms found, all on HTTPS pages posting to HTTPS addresses.

  • OKVulnerable JavaScript libraries

    1 library version recognised, none with known vulnerabilities.

  • OKKeys and secrets in page code

    No API keys, tokens or private keys were found in the sampled HTML and scripts.

  • OKExposed files and listings

    None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.

  • OKSensitive paths in robots.txt

    robots.txt does not point at admin, backup or private paths.

A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.

This report was produced by the DIY SEO Hub Site Spider crawling www.coldcreekfarm.com from its public pages. Anyone can run a scan of any site they own or are authorised to check. Is this your site? Claim it to manage the listing, or ask for removal through the support form.

www.coldcreekfarm.com scan 2026-09-18-2100 | DIY SEO Hub