Scanned sites / www.gfn.de / 2026-11-03-1345

www.gfn.de scan from 2026-11-03 13:45:40 UTC DR 52

DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.

Scan 2026-11-03-1345

Scanned 2026-11-03 13:45:40 UTC, finished 2026-11-03 14:28:24 UTC

Site: https://www.gfn.de/

Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.

94/ 100Excellent

On November 3, 2026 the Site Spider crawled 1 page and 71 assets of www.gfn.de, starting from https://www.gfn.de/. It scored 94 out of 100, an excellent result. 2 of 33 checks found something to fix, led by redirects (18), heavy assets (3); 23 checks passed. Most of the points went to redirects (−4), heavy assets (−1.8). 8 checks found something the score does not count, listed as noted. 4 checks were not run because the crawl fetched nothing for them. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.

Security review: Medium3 medium and 1 info findings. See the security findings ↓

Pages crawled
1
Assets fetched
71
Status
Completed
Checks with issues
2 of 33
CoverageComplete crawl

72 of 72 discovered URLs were fetched. The crawl reached everything it found. HTML only: nothing here ran JavaScript. 5 link destinations on other sites were checked.

  • Title tagsOK
    0 of 1 page have title issues.
  • Meta descriptionsOK
    0 of 1 page have meta description issues.
  • HeadingsOK
    0 of 1 page have heading issues.
  • Broken linksOK
    0 internal links point at 0 broken URLs.
  • Links to other sites3 noted
    0 destinations answered with an error, 3 could not be determined (timeouts, rate limits or refusals), of 5 destinations checked.
  • Redirects18 issues
    25 redirecting URLs, 18 of them chained.
    −4 points
  • Non-200 responses31 noted
    31 URLs did not return a 2xx response. 0 of them are pages, 0 with an error status; the rest are assets or redirects.
  • Rate limitedOK
    The site did not rate limit the crawler.
  • IndexabilityOK
    0 of 1 indexable page have indexability warnings.
  • Image alt textOK
    0 of 3 image references have no alt attribute.
  • Heavy assets3 issues
    3 assets larger than 500 KB among 71 fetched assets.
    −1.8 points
  • Orphan pagesOK
    0 pages have no internal links pointing at them.
  • Sitemap coverage632 noted
    4 sitemaps listing 632 URLs: 0 crawled pages missing, 0 listed URLs broken or redirecting, 0 reachable only via the sitemap. 632 listed URLs not crawled within the 5000-page budget.
  • Internal link counts1 noted
    Internal link counts for 1 page; 1 worth a look.
  • Thin contentOK
    0 of 1 page have fewer than 200 words.
  • Duplicate contentOK
    0 groups of pages with identical HTML.
  • URL formatOK
    All 1 page URL are plain lowercase addresses without parameters.
  • CanonicalsOK
    0 of 1 page have a canonical worth checking.
  • Robots directives1 noted
    1 page carries a robots directive; 0 carry none.
  • Anchor text1 noted
    1 destination are linked without useful anchor text, or with nofollow.
  • Title and heading structureOK
    0 of 1 page could use the title, heading and snippet space better.
  • Image weight and alt length1 noted
    0 images over 100 KB; 1 with alt text over 100 characters.
  • Response anomaliesOK
    No redirect loops, header redirects or pages served as something other than HTML.
  • HTML and head validationOK
    All 1 page keep their head tags in <head>, once each, under Googlebot's 2 MB.
  • hreflangOK
    No page declares hreflang.
  • Structured dataOK
    1 of 1 indexable page carry structured data: BreadcrumbList (1), ListItem (1), WebSite (1), Organization (1), WebPage (1). 0 pages with errors a rich result would fail on.
  • Near duplicatesOK
    No near duplicates among 1 page with enough text to compare.
  • Soft 404sOK
    None of 1 page answering 200 reads like an error page.
  • AccessibilityNot checked
    Not checked: the accessibility audit runs in the browser. Tick "Include JavaScript rendering checks" when you request a scan to run it.
  • Link positionsOK
    0 of 0 linked pages are linked only from the template, never from another page's content.
  • PaginationOK
    No page declares rel=next or rel=prev pagination.
  • Headers and cookies1 noted
    1 cookie set by the site, 1 missing a protective flag; 17 response headers recorded across 72 URLs.
  • Orphans in searchNot checked
    Not checked: import a Search Console Pages export on the scan page to find pages Google shows that the site does not link to.
  • Link ScoreOK
    Link Score (internal PageRank, 0-100) for 1 page; 0 hold almost none (10 or less).
  • JavaScript renderingNot checked
    Not checked: this scan did not render pages. Tick "Include JavaScript rendering checks" when you request a scan to compare the served HTML with what a browser builds.
  • PageSpeed InsightsNot checked
    Not checked yet: PageSpeed Insights runs on the top pages once the crawl has finished.
  • SpellingOK
    No unfamiliar lower-case words on 1 page (English pages only).

Where this scan sits among all scanned sites

2811 sites, median 80%, average 79%

www.gfn.de scores 94%, higher than 93% of the 2811 scanned sites. See the full ranking.

0661310%: 0 sites1%: 0 sites2%: 0 sites3%: 0 sites4%: 0 sites5%: 0 sites6%: 0 sites7%: 0 sites8%: 0 sites9%: 1 site10%: 0 sites11%: 0 sites12%: 0 sites13%: 0 sites14%: 1 site15%: 0 sites16%: 0 sites17%: 0 sites18%: 0 sites19%: 0 sites20%: 0 sites21%: 1 site22%: 0 sites23%: 0 sites24%: 0 sites25%: 0 sites26%: 0 sites27%: 0 sites28%: 1 site29%: 0 sites30%: 0 sites31%: 0 sites32%: 0 sites33%: 0 sites34%: 0 sites35%: 2 sites36%: 1 site37%: 1 site38%: 3 sites39%: 2 sites40%: 3 sites41%: 1 site42%: 2 sites43%: 3 sites44%: 2 sites45%: 6 sites46%: 5 sites47%: 5 sites48%: 6 sites49%: 8 sites50%: 6 sites51%: 6 sites52%: 8 sites53%: 9 sites54%: 9 sites55%: 9 sites56%: 8 sites57%: 16 sites58%: 18 sites59%: 9 sites60%: 15 sites61%: 13 sites62%: 20 sites63%: 29 sites64%: 21 sites65%: 33 sites66%: 42 sites67%: 42 sites68%: 41 sites69%: 51 sites70%: 46 sites71%: 79 sites72%: 76 sites73%: 81 sites74%: 78 sites75%: 87 sites76%: 95 sites77%: 109 sites78%: 128 sites79%: 110 sites80%: 126 sites81%: 123 sites82%: 131 sites83%: 120 sites84%: 130 sites85%: 106 sites86%: 93 sites87%: 94 sites88%: 78 sites89%: 74 sites90%: 55 sites91%: 56 sites92%: 42 sites93%: 28 sites94%: 25 sites95%: 14 sites96%: 17 sites97%: 15 sites98%: 7 sites99%: 2 sites100%: 127 sites94% here100%90%80%70%60%50%40%30%20%10%0%

Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).

Internal link map

Loading the link map...

Start page (centre)OKRedirectErrorOrphanLinked from most pagesOne inbound link or noneRings = clicks from the start page. Size = inbound links. Drag to pan, scroll to zoom, click a page to see only its links.

Fix plan

Written by gpt-4o-mini from the scan findings

The site's health is good, but there are opportunities to enhance performance and indexability. Key issues include redirects and heavy assets.

  1. 1

    Resolve Redirects

    Why: Chained redirects can slow down site speed and harm SEO.

    How: Identify and eliminate unnecessary redirects, simplifying the redirection paths.

    Checks: redirects

  2. 2

    Fix Non-200 Responses

    Why: Non-200 responses can hinder access to essential resources.

    How: Review the listed URLs and ensure they return a 2xx response.

    Checks: status-codes

  3. 3

    Optimize Heavy Assets

    Why: Large assets can slow page loading times.

    How: Compress or optimize assets exceeding 500 KB for better performance.

    Checks: heavy-assets

  4. 4

    Expand Sitemap Coverage

    Why: URLs not crawled due to budget limitations may be missing from search results.

    How: Consider optimizing your sitemap to ensure important URLs are crawled.

    Evidence: 632 URLs: not crawled (over budget).

    632 pages affected

    Checks: sitemap-coverage

Generated automatically; verify each change against your own site before relying on it.

Security review

Written by gpt-4o-mini from 16 checks over the crawl

The website gfn.de has several security issues that need to be addressed. The most critical include missing cookie flags which expose user data, and a lack of permissions policy that could allow unauthorized access to certain browser features. Additionally, a Google API key was found in the code which should be restricted for security.

  • 0 high
  • 3 medium
  • 0 low
  • 1 info
  1. 1

    Missing Cookie FlagsMedium

    Why it matters: Cookies without protective flags can be accessed by scripts, risking user data exposure.

    Fix: Set the following flags for the cookie 'wp-wpml_current_language': 'Secure', 'HttpOnly', 'SameSite=Lax'.

    Evidence: Cookie flags

  2. 2

    Leaked Google API KeyMedium

    Why it matters: The exposed API key can lead to unauthorized use of your Google services.

    Fix: Restrict the API key in Google Cloud Console by setting HTTP referrer restrictions.

    Evidence: Keys and secrets in page code

  3. 3

    Weak Content Security PolicyMedium

    Why it matters: The current CSP allows 'unsafe-inline' and 'unsafe-eval', which weaken protection against script injection.

    Fix: Update the CSP to avoid 'unsafe-inline' and 'unsafe-eval' directives.

    Evidence: Content Security Policy

  4. 4

    Missing Permissions PolicyInfo

    Why it matters: No permissions-policy header may allow unauthorized features access to injected scripts.

    Fix: Add a Permissions-Policy header: 'Permissions-Policy: geolocation=(self), microphone=(), camera=()'.

    Evidence: Permissions policy

What the checks found

  • FoundPermissions policyInfo

    No HTML page sends permissions-policy. A Permissions-Policy header turns off browser features the site does not use (camera, microphone, geolocation), limiting what an injected script could do.

    • https://www.gfn.de/ → no permissions-policy
  • FoundCookie flagsMedium

    1 of 1 cookie are missing protective flags. Without HttpOnly a script can read the cookie; without Secure it travels over plain HTTP; without SameSite it is sent on cross-site requests.

    • wp-wpml_current_language (set by https://www.gfn.de/) lacks Secure, HttpOnly
  • FoundKeys and secrets in page codeMedium

    1 credential-like value found in code served to every visitor: Google API key.

    • Google API key AIzaSy…Mk (39 chars) in https://www.gfn.de/wp-content/cache/borlabs-cookie/1/borlabs-cookie-config-de.j…: browser keys are expected in pages, but must be restricted by HTTP referrer and API in the Google Cloud console
  • NoteContent Security Policy

    A Content-Security-Policy is set, but it allows inline or eval scripts ('unsafe-inline' / 'unsafe-eval'), which removes most of its protection against injected scripts.

    • https://www.gfn.de/ → default-src 'self' secure.gravatar.com www.etermin.net develop.gfn.de staging.gfn.de www.gfn.de chatbot.gfn.de jnn-pa.googleapis.com maps.googleapis.com fonts.gstatic.com maps.gstatic.com www.gstatic.com rns.matelso.de www.google.com cm.g.doubleclick.net googleads.g.doubleclick.net i.ytimg.com www.g
12 checks passed
  • OKHTTPS

    All 1 crawled page were served over HTTPS.

  • OKHTTP Strict Transport Security

    strict-transport-security is set on all 1 HTML page.

  • OKClickjacking protection

    x-frame-options is set on all 1 HTML page.

  • OKMIME sniffing protection

    x-content-type-options is set on all 1 HTML page.

  • OKReferrer policy

    referrer-policy is set on all 1 HTML page.

  • OKSoftware version disclosure

    The Server header names a product without a version, and there is no X-Powered-By header.

  • OKMixed content

    No HTTPS page loads a script, stylesheet, font or image over plain HTTP.

  • OKForms over HTTPS

    3 forms found, all on HTTPS pages posting to HTTPS addresses.

  • OKVulnerable JavaScript libraries

    2 library versions recognised, none with known vulnerabilities.

  • OKExposed files and listings

    None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.

  • OKThird-party scripts

    Scripts from 2 other domains all carry Subresource Integrity hashes.

  • OKSensitive paths in robots.txt

    robots.txt does not point at admin, backup or private paths.

A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.

Sites scoring near www.gfn.de

Their neighbours in the SEO rank table, which orders every scanned site by health score.

DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.

This report was produced by the DIY SEO Hub Site Spider crawling www.gfn.de from its pages as published, the way a search engine does. It shows summary figures only.

Own www.gfn.de?