United Stated · New York Completed: Apr 1, 2026 16:47 UTCYour site declined by 17 points (A → C)
Compared to scan from 4 hours ago
Score: 75 / 100 17
Based on 4 categories, 27 sections
The overall score is a weighted average of individual category scores. Categories with more impact on user experience and security carry more weight.
Weights reflect general web best practices. Individual needs may differ.
No viewport meta tag found
<html lang> attribute is missing
No privacy policy link detected
[](https://beavercheck.com/results/21372a68-1248-4fca-85ba-0b46c29bbb7c)<a href="https://beavercheck.com/results/21372a68-1248-4fca-85ba-0b46c29bbb7c"><img src="https://beavercheck.com/badge?url=https%3A%2F%2Fbeavercheck.com%2F" alt="BeaverCheck Score"></a>https://beavercheck.com/badge?url=https%3A%2F%2Fbeavercheck.com%2FThis badge auto-updates with your latest scan result.
Thanks for your feedback!
Industry-standard audits powered by Google Lighthouse.
Key metrics that affect user experience.
Desktop audit not available for this result.
Connection-level performance breakdown.
HTTP/2 provides multiplexing and header compression for better performance.
| Name | Secure | HttpOnly | SameSite | Size | Issues |
|---|---|---|---|---|---|
| bc_csrf | ✓ | ✓ | Lax | 39 B | — |
| bc_csrf | ✓ | ✓ | Lax | 39 B | — |
Extended security checks beyond standard header analysis
No known JavaScript library vulnerabilities detected.
No sensitive files exposed — all paths returned 404.
| Path | Status | Category | Risk |
|---|---|---|---|
| /.git/HEAD | ✓ Not found | Version Control | — |
| /.git/config | ✓ Not found | Version Control | — |
| /.svn/entries | ✓ Not found | Version Control | — |
| /.env | ✓ Not found | Configuration | — |
| /.env.local | ✓ Not found | Configuration | — |
| /.env.production | ✓ Not found | Configuration | — |
| /wp-config.php | ✓ Not found | Configuration | — |
| /.htaccess | ✓ Not found | Configuration | — |
| /phpinfo.php | ✓ Not found | Debug | — |
| /server-status | ✓ Not found | Debug | — |
| /server-info | ✓ Not found | Debug | — |
| /.well-known/security.txt | ✓ Not found | Security Policy | — |
No CORS headers detected.
Cross-origin requests are blocked by browser same-origin policy.
Origin reflection test
Some servers mirror the request Origin header, which can be exploited. Test manually:
curl -sI -H "Origin: https://evil.com" <url> | grep -i access-control
No security.txt found at /.well-known/security.txt
Content quality analysis not available for this result.
Performance analysis not available for this result.
Desktop audit not available for this result.
| A | 51.210.209.19 |
| AAAA | — |
| CNAME | — |
| NS | dns14.ovh.net, ns14.ovh.net |
| MX | 0 mail.appscyborg.com |
| TXT | SPF v=spf1 mx -all |
| CAA | Lookup not available with standard resolver |
Multiple A records provide failover if one server goes down.
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
https://beavercheck.com/
382 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://beavercheck.com/ | 200 | 382 ms | HTTP/1.1 | nginx |
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
User-agent: *
Allow: /
Disallow: /rate-limited
Disallow: /results/*/pdf
Disallow: /submit
Sitemap: https://beavercheck.com/sitemap.xml
# AI model context
# See https://beavercheck.com/llms.txt for a summary
# See https://beavercheck.com/llms-full.txt for detailed context
www / non-www
Preferred variant: non-www
HTTP → HTTPS
Consistent
Newly registered domains may face SEO trust challenges. Search engines generally give more authority to older domains. This is informational — not a problem to fix.
This is an automated check, not legal advice. Consult a privacy professional for GDPR/CCPA compliance.
A privacy policy page is recommended for transparency and may be legally required.
BeaverCheck detects technical indicators of consent management. This does not constitute a legal compliance assessment. Consult a privacy professional for GDPR/CCPA compliance.
The lang attribute on <html> is required for screen readers and WCAG 3.1.1 compliance.
The <html lang> attribute and Content-Language header should agree.
No viewport meta tag found. Mobile devices will render at desktop width.
<meta name="viewport" content="width=device-width, initial-scale=1">Without a viewport meta tag, the page will not render correctly on mobile devices.
Consider using a CDN to improve global delivery speed and reduce origin load.
A CDN can significantly improve load times for users around the world by caching content at edge nodes closer to them.
No Cache-Control header
Adding a Cache-Control header can significantly improve repeat-visit performance.
Browsers will use heuristic caching, which can be unpredictable. Set explicit cache headers.
| Location | Status | TTFB | DNS | Connect | TLS | Total |
|---|---|---|---|---|---|---|
NL Amsterdam | 200 ✓ | 40ms | 10ms | 6ms | 10ms | 41ms |
UN New York | 200 ✓ | 396ms | 74ms | 80ms | 83ms | 396ms |
UN Santa Clara (Full audit) | 200 ✓ | 779ms | 163ms | 153ms | 157ms | 780ms |
SG Singapore | 200 ✓ | 916ms | 270ms | 161ms | 164ms | 916ms |
BR Sao Paulo | 200 ✓ | 968ms | 190ms | 193ms | 197ms | 969ms |
| Average | 620ms | 141ms | 119ms | 122ms | 620ms |
Accessibility analysis not available for this result.
SEO analysis not available for this result.
HSTS, with Nginx CDN
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
No build tool detected
A framework (HSTS) was detected but no bundler was identified. The build tool may not be detectable from output patterns, or the site may use the framework's built-in bundler.
Minimal technology footprint
Only 2 technologies detected. This suggests a simple setup with minimal dependencies — excellent for performance and security.
| Metric | Previous | Current | Change |
|---|---|---|---|
| TTFB † | 469 ms | 396 ms | -73 ms |
| DNS † | 157 ms | 74 ms | -84 ms |
| TLS † | 81 ms | 83 ms | +2 ms |
| Connect † | 76 ms | 80 ms | +3 ms |
| Total † | 470 ms | 396 ms | -73 ms |
† Timing metrics may vary by worker location and do not necessarily indicate site changes.
content-security-policy default-src 'self'; script-src 'self' 'nonce-zSX+4rj3jroN013pHPrgXg==' 'sha25... → default-src 'self'; script-src 'self' 'nonce-fowibmah7gIPKKsKyFPMIA==' 'sha25...set-cookie bc_csrf=f0bac427b06f62388fa8776cc29c5b6d; Path=/; Max-Age=3600; HttpOnly; Sec... → bc_csrf=bc8f9be642c540a726ecbbb464e7df30; Path=/; Max-Age=3600; HttpOnly; Sec...12 headers unchanged
2 technologies unchanged
Send Feedback