Scanned sites / www.gfn.de
SEO report for www.gfn.de DR 52
The latest Site Spider scan of www.gfn.de, with 1 scan on record. Each scan is at its own address, for example /domain/www-gfn-de/2026-11-03-1345.
DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.
Latest scan
Scanned 2026-11-03 13:45:40 UTC, finished 2026-11-03 14:28:24 UTC
Site: https://www.gfn.de/
Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.
On November 3, 2026 the Site Spider crawled 1 page and 71 assets of www.gfn.de, starting from https://www.gfn.de/. It scored 94 out of 100, an excellent result. 2 of 33 checks found something to fix, led by redirects (18), heavy assets (3); 23 checks passed. Most of the points went to redirects (−4), heavy assets (−1.8). 8 checks found something the score does not count, listed as noted. 4 checks were not run because the crawl fetched nothing for them. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.
Security review: Medium3 medium and 1 info findings. See the security findings ↓
- Pages crawled
- 1
- Assets fetched
- 71
- Status
- Completed
- Checks with issues
- 2 of 33
72 of 72 discovered URLs were fetched. The crawl reached everything it found. HTML only: nothing here ran JavaScript. 5 link destinations on other sites were checked.
- Title tagsOK0 of 1 page have title issues.
- Meta descriptionsOK0 of 1 page have meta description issues.
- HeadingsOK0 of 1 page have heading issues.
- Broken linksOK0 internal links point at 0 broken URLs.
- Links to other sites3 noted0 destinations answered with an error, 3 could not be determined (timeouts, rate limits or refusals), of 5 destinations checked.
- Redirects18 issues25 redirecting URLs, 18 of them chained.−4 points
- Non-200 responses31 noted31 URLs did not return a 2xx response. 0 of them are pages, 0 with an error status; the rest are assets or redirects.
- Rate limitedOKThe site did not rate limit the crawler.
- IndexabilityOK0 of 1 indexable page have indexability warnings.
- Image alt textOK0 of 3 image references have no alt attribute.
- Heavy assets3 issues3 assets larger than 500 KB among 71 fetched assets.−1.8 points
- Orphan pagesOK0 pages have no internal links pointing at them.
- Sitemap coverage632 noted4 sitemaps listing 632 URLs: 0 crawled pages missing, 0 listed URLs broken or redirecting, 0 reachable only via the sitemap. 632 listed URLs not crawled within the 5000-page budget.
- Internal link counts1 notedInternal link counts for 1 page; 1 worth a look.
- Thin contentOK0 of 1 page have fewer than 200 words.
- Duplicate contentOK0 groups of pages with identical HTML.
- URL formatOKAll 1 page URL are plain lowercase addresses without parameters.
- CanonicalsOK0 of 1 page have a canonical worth checking.
- Robots directives1 noted1 page carries a robots directive; 0 carry none.
- Anchor text1 noted1 destination are linked without useful anchor text, or with nofollow.
- Title and heading structureOK0 of 1 page could use the title, heading and snippet space better.
- Image weight and alt length1 noted0 images over 100 KB; 1 with alt text over 100 characters.
- Response anomaliesOKNo redirect loops, header redirects or pages served as something other than HTML.
- HTML and head validationOKAll 1 page keep their head tags in <head>, once each, under Googlebot's 2 MB.
- hreflangOKNo page declares hreflang.
- Structured dataOK1 of 1 indexable page carry structured data: BreadcrumbList (1), ListItem (1), WebSite (1), Organization (1), WebPage (1). 0 pages with errors a rich result would fail on.
- Near duplicatesOKNo near duplicates among 1 page with enough text to compare.
- Soft 404sOKNone of 1 page answering 200 reads like an error page.
- AccessibilityNot checkedNot checked: the accessibility audit runs in the browser. Tick "Include JavaScript rendering checks" when you request a scan to run it.
- Link positionsOK0 of 0 linked pages are linked only from the template, never from another page's content.
- PaginationOKNo page declares rel=next or rel=prev pagination.
- Headers and cookies1 noted1 cookie set by the site, 1 missing a protective flag; 17 response headers recorded across 72 URLs.
- Orphans in searchNot checkedNot checked: import a Search Console Pages export on the scan page to find pages Google shows that the site does not link to.
- Link ScoreOKLink Score (internal PageRank, 0-100) for 1 page; 0 hold almost none (10 or less).
- JavaScript renderingNot checkedNot checked: this scan did not render pages. Tick "Include JavaScript rendering checks" when you request a scan to compare the served HTML with what a browser builds.
- PageSpeed InsightsNot checkedNot checked yet: PageSpeed Insights runs on the top pages once the crawl has finished.
- SpellingOKNo unfamiliar lower-case words on 1 page (English pages only).
Where this site sits among all scanned sites
2802 sites, median 80%, average 79%
www.gfn.de scores 94%, higher than 93% of the 2802 scanned sites. See the full ranking.
Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).
Internal link map
Loading the link map...
Fix plan
Written by gpt-4o-mini from the scan findingsThe site's health is good, but there are opportunities to enhance performance and indexability. Key issues include redirects and heavy assets.
- 1
Resolve Redirects
Why: Chained redirects can slow down site speed and harm SEO.
How: Identify and eliminate unnecessary redirects, simplifying the redirection paths.
Checks: redirects
- 2
Fix Non-200 Responses
Why: Non-200 responses can hinder access to essential resources.
How: Review the listed URLs and ensure they return a 2xx response.
Checks: status-codes
- 3
Optimize Heavy Assets
Why: Large assets can slow page loading times.
How: Compress or optimize assets exceeding 500 KB for better performance.
Checks: heavy-assets
- 4
Expand Sitemap Coverage
Why: URLs not crawled due to budget limitations may be missing from search results.
How: Consider optimizing your sitemap to ensure important URLs are crawled.
Evidence: 632 URLs: not crawled (over budget).
632 pages affected
Checks: sitemap-coverage
Generated automatically; verify each change against your own site before relying on it.
Security review
Written by gpt-4o-mini from 16 checks over the crawlThe website gfn.de has several security issues that need to be addressed. The most critical include missing cookie flags which expose user data, and a lack of permissions policy that could allow unauthorized access to certain browser features. Additionally, a Google API key was found in the code which should be restricted for security.
- 0 high
- 3 medium
- 0 low
- 1 info
- 1
Missing Cookie FlagsMedium
Why it matters: Cookies without protective flags can be accessed by scripts, risking user data exposure.
Fix: Set the following flags for the cookie 'wp-wpml_current_language': 'Secure', 'HttpOnly', 'SameSite=Lax'.
Evidence: Cookie flags
- 2
Leaked Google API KeyMedium
Why it matters: The exposed API key can lead to unauthorized use of your Google services.
Fix: Restrict the API key in Google Cloud Console by setting HTTP referrer restrictions.
Evidence: Keys and secrets in page code
- 3
Weak Content Security PolicyMedium
Why it matters: The current CSP allows 'unsafe-inline' and 'unsafe-eval', which weaken protection against script injection.
Fix: Update the CSP to avoid 'unsafe-inline' and 'unsafe-eval' directives.
Evidence: Content Security Policy
- 4
Missing Permissions PolicyInfo
Why it matters: No permissions-policy header may allow unauthorized features access to injected scripts.
Fix: Add a Permissions-Policy header: 'Permissions-Policy: geolocation=(self), microphone=(), camera=()'.
Evidence: Permissions policy
What the checks found
- FoundPermissions policyInfo
No HTML page sends permissions-policy. A Permissions-Policy header turns off browser features the site does not use (camera, microphone, geolocation), limiting what an injected script could do.
- https://www.gfn.de/ → no permissions-policy
- FoundCookie flagsMedium
1 of 1 cookie are missing protective flags. Without HttpOnly a script can read the cookie; without Secure it travels over plain HTTP; without SameSite it is sent on cross-site requests.
- wp-wpml_current_language (set by https://www.gfn.de/) lacks Secure, HttpOnly
- FoundKeys and secrets in page codeMedium
1 credential-like value found in code served to every visitor: Google API key.
- Google API key AIzaSy…Mk (39 chars) in https://www.gfn.de/wp-content/cache/borlabs-cookie/1/borlabs-cookie-config-de.j…: browser keys are expected in pages, but must be restricted by HTTP referrer and API in the Google Cloud console
- NoteContent Security Policy
A Content-Security-Policy is set, but it allows inline or eval scripts ('unsafe-inline' / 'unsafe-eval'), which removes most of its protection against injected scripts.
- https://www.gfn.de/ → default-src 'self' secure.gravatar.com www.etermin.net develop.gfn.de staging.gfn.de www.gfn.de chatbot.gfn.de jnn-pa.googleapis.com maps.googleapis.com fonts.gstatic.com maps.gstatic.com www.gstatic.com rns.matelso.de www.google.com cm.g.doubleclick.net googleads.g.doubleclick.net i.ytimg.com www.g
12 checks passed
- OKHTTPS
All 1 crawled page were served over HTTPS.
- OKHTTP Strict Transport Security
strict-transport-security is set on all 1 HTML page.
- OKClickjacking protection
x-frame-options is set on all 1 HTML page.
- OKMIME sniffing protection
x-content-type-options is set on all 1 HTML page.
- OKReferrer policy
referrer-policy is set on all 1 HTML page.
- OKSoftware version disclosure
The Server header names a product without a version, and there is no X-Powered-By header.
- OKMixed content
No HTTPS page loads a script, stylesheet, font or image over plain HTTP.
- OKForms over HTTPS
3 forms found, all on HTTPS pages posting to HTTPS addresses.
- OKVulnerable JavaScript libraries
2 library versions recognised, none with known vulnerabilities.
- OKExposed files and listings
None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.
- OKThird-party scripts
Scripts from 2 other domains all carry Subresource Integrity hashes.
- OKSensitive paths in robots.txt
robots.txt does not point at admin, backup or private paths.
A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.
Earlier scans of www.gfn.de
No other scans of this site yet.
Sites scoring near www.gfn.de
Their neighbours in the SEO rank table, which orders every scanned site by health score.
- sublimeelectricid.netDR 1095/100 · rank 168 · 289 pages
- 5starroofingandcontracting.comDR 494/100 · rank 182 · 114 pages
- www.mtneurospine.comDR 094/100 · rank 182 · 109 pages
- coldsite-ucalgary.azurewebsites.netDR 9294/100 · rank 182 · 1 page
- www.postmaelectric.caDR 194/100 · rank 182 · 128 pages
- redtreevet.comDR 894/100 · rank 182 · 10 pages
DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.
This report was produced by the DIY SEO Hub Site Spider crawling www.gfn.de from its pages as published, the way a search engine does. It shows summary figures only.
Own www.gfn.de?
- Claim this site to manage the listing, hide it from the public lists, or keep it.
- Want it gone instead? Ask through the support form or e-mail support@diyseohub.com, naming www.gfn.de. Removal needs no account and no proof of purchase.