Skip to content

Changes

https://www.ferdowsspa.com
Compared to previous audit · 3 minutes ago View previous audit
28
New issues
28
Resolved
20
score changes
CategoryPreviousCurrentChange
CompositeB (81)B (81)—
PerformanceB (80)B (82) +2.000
SecurityB (84)C (77) -7.000
AccessibilityC (75)C (77) +2.000
SEOB (87)A (93) +6.000
InfrastructureB (85)B (87) +2.000
ComplianceC (75)C (74) -1.000
ContentB (80)B (85) +5.000
SustainabilityC (79)B (81) +2.000
MetricPreviousCurrentChange
Performance 47004600 -100
Accessibility 1000010000—
Best Practices 96009600—
SEO 1000010000—
PWA 00—
Desktop Performance 84008300 -100
Desktop Accessibility 1000010000—
Desktop Best Practices 96009600—
Desktop SEO 1000010000—
FCP 3.44 s3.46 s—
LCP 10.12 s9.08 s -1.04 s
TBT 906 ms969 ms +62 ms
CLS 0.0010.001—
Desktop FCP 766 ms824 ms +58 ms
Desktop LCP 2.75 s2.74 s—
Desktop TBT 49 ms88 ms +39 ms
Desktop CLS 0.0010.003 +0.002
TTFB †131 ms75 ms -57 ms
DNS †57 ms1 ms -56 ms
TLS †25 ms22 ms -3 ms
Connect †17 ms17 ms -0 ms
Total †132 ms117 ms -15 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

CRITICAL Broken link: https://www.elation-enterprises.com/ content
CRITICAL Cookie 'ssr-caching' is missing the Secure flag security
WARNING 100 of 101 links are healthy content
WARNING 257 third-party resources (93% of weight) performance
WARNING Referrer-Policy header is missing security
WARNING Cookie 'sec-fetch-unsupported' is missing the HttpOnly flag security
WARNING 1 advertising/retargeting trackers detected compliance
WARNING Cookie 'ssr-caching' has no SameSite attribute security
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING 200 inline style attribute(s) detected security
WARNING 263 HTTP requests — consider bundling or reducing performance
WARNING https://pagead2.googlesyndication.com/pagead/manag...: 120 KB unused (73%) performance
WARNING 4 render-blocking <script src> tag(s) without async/defer performance
WARNING Total image weight: 1068 KB (1.0 MB) content
WARNING https://pagead2.googlesyndication.com/pagead/manag...: 411ms CPU time performance
WARNING Permissions-Policy header is missing security
WARNING 0.69g CO2 — above the median website (0.60g) sustainability
WARNING No Permissions-Policy header security
WARNING X-Frame-Options header is missing security
WARNING https://www.ferdowsspa.com/: 1112ms CPU time performance
WARNING https://static.parastorage.com/unpkg/react@18.3.1/...: 649ms CPU time performance
WARNING All 29 images use legacy formats (JPEG/PNG/GIF) content
WARNING Cross-Origin-Embedder-Policy header is missing security
WARNING Unattributable: 1885ms CPU time performance
WARNING Total JS execution time is 5.5 s -- over the 3.5s budget performance
WARNING 2 unclassified cookie(s) set before any consent step compliance
WARNING HSTS is enabled but missing includeSubDomains security
WARNING Cookie 'ssr-caching' is missing the HttpOnly flag security
CRITICAL HSTS header is missing security
CRITICAL 89 of 102 links are healthy content
CRITICAL Broken link: https://www.ferdowsspa.com/women-menu content
CRITICAL Broken link: https://www.ferdowsspa.com/about content
CRITICAL Broken link: https://www.ferdowsspa.com/terms-conditions content
CRITICAL Broken link: https://www.ferdowsspa.com/services content
CRITICAL Canonical target returns 403 seo
CRITICAL Broken link: https://www.ferdowsspa.com/treatments content
CRITICAL Broken link: https://www.ferdowsspa.com/men-menu content
CRITICAL Broken link: https://www.ferdowsspa.com/contact content
CRITICAL Broken link: https://www.ferdowsspa.com/mission content
CRITICAL Broken link: https://www.ferdowsspa.com/privacy-policy content
CRITICAL Broken link: https://www.ferdowsspa.com/shipping-policy content
CRITICAL Broken link: https://www.ferdowsspa.com/blog content
WARNING https://static.parastorage.com/unpkg/react@18.3.1/...: 457ms CPU time performance
WARNING Broken link: https://www.ferdowsspa.com content
WARNING 0.83g CO2 — above the median website (0.60g) sustainability
WARNING Unattributable: 1976ms CPU time performance
WARNING Compressed response missing `Vary` header performance
WARNING All 30 images use legacy formats (JPEG/PNG/GIF) content
WARNING https://pagead2.googlesyndication.com/pagead/manag...: 120 KB unused (72%) performance
WARNING Unexpected status code: HTTP 403 accessibility
WARNING https://www.ferdowsspa.com/: 1052ms CPU time performance
WARNING Broken link: https://www.ferdowsspa.com/blog-feed.xml content
WARNING 256 third-party resources (93% of weight) performance
WARNING 262 HTTP requests — consider bundling or reducing performance
WARNING https://pagead2.googlesyndication.com/pagead/manag...: 483ms CPU time performance
WARNING No favicon.ico at site root accessibility
CRITICAL 1 link(s) with no accessible text accessibility
CRITICAL Content-Security-Policy header is missing security
WARNING Missing or invalid @context in block #2 content
WARNING External script from pagead2.googlesyndication.com lacks integrity attribute security
WARNING JavaScript is 1.6 MB — consider code splitting or lazy loading performance
WARNING https://pagead2.googlesyndication.com/pagead/js/ad...: 30 KB unused (53%) performance
WARNING Page weight 2.9 MB exceeds 1 MB target by 1.9 MB performance
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING External script from browser.sentry-cdn.com lacks integrity attribute security
WARNING Registrar lock is NOT enabled infrastructure
WARNING 12 images missing explicit width/height content
WARNING 1 internal links have no anchor text seo
WARNING 3 image(s) with generic alt text accessibility
WARNING 11 link(s) open in new tab without warning accessibility
WARNING CNAME record at zone apex infrastructure
WARNING Missing or invalid @context in block #1 content
WARNING No DMARC record found security
WARNING https://static.parastorage.com/services/profile-ca...: 37 KB unused (66%) performance
WARNING Twitter card is `summary_large_image` but OG image is 1126×1020 (ratio 1.10:1) -- closer to square content
WARNING Title is 114 characters — will be truncated in search results seo
WARNING External script from static.parastorage.com lacks integrity attribute security
WARNING Page weighs 10.1 MB (2.9 MB transferred) performance
WARNING https://browser.sentry-cdn.com/7.120.3/bundle.trac...: 28 KB unused (71%) performance
WARNING https://static.parastorage.com/services/wix-thunde...: 34 KB unused (61%) performance
WARNING 1 heading(s) are over 120 characters -- likely a misformatted paragraph accessibility
WARNING SRI adoption: 0/50 third-party resources protected (0%) security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING 2 image(s) with filename as alt text accessibility
WARNING No SPF record found security
WARNING <iframe> missing title attribute (src="https://pagead2.googlesyndication.com/pagead/html/r20261019/r20190131/zrt_looku…") accessibility
WARNING Third-party code accounts for 93% of page weight (2.7 MiB of 2.9 MiB) performance
WARNING No accessibility statement detected compliance
+ alt-svc h3=":443"; ma=86400
+ cf-cache-status HIT
+ link <https://static.parastorage.com/>; rel=preconnect; crossorigin, <https://stat...
+ vary Accept-Encoding
+ x-wix-request-id 1792509423.134055367730114521
+ etag W/"b1af2fbecd4c12c2856c37c0aeab533d"
+ content-language en
+ strict-transport-security max-age=31556952
+ set-cookie ssr-caching=cache#desc=hit#varnish=hit_hit#dc#desc=cloudflare; Max-Age=20, se...
+ cache-control public,max-age=0,must-revalidate
− origin-agent-cluster ?1
− accept-ch Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, ...
− x-frame-options SAMEORIGIN
− permissions-policy accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(...
− critical-ch Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, ...
− cross-origin-embedder-policy require-corp
− cf-mitigated challenge
− cross-origin-resource-policy same-origin
− referrer-policy same-origin
− cross-origin-opener-policy same-origin

5 headers unchanged

+ HTTP/3 Miscellaneous
+ Cloudflare Bot Management Security
+ HSTS Security
+ Underscore.js JavaScript libraries v4.18.1
− Lodash JavaScript libraries

15 technologies unchanged

Looking ahead

+17 pts
B (81) Could reach A+ (98)
Security +23Accessibility +20Performance +18Content +15Compliance +13Infrastructure +8SEO +7Sustainability +4

Estimate — actual results may vary (60 issues to fix)

Website improvement report — Ferdowsspa

October 20, 2026 → October 20, 2026

B B 81 → 81 0 pts

28

Resolved

28

New issues

32

Still remaining

Financial summary

Investment delivered

₪8,450 in development time

Investment remaining

₪31,425 to complete the remaining items

Ongoing risk

₪3/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score81 (B)81 (B)0
Performance80 (B)82 (B)+2
Security84 (B)77 (C)-7
Accessibility75 (C)77 (C)+2
SEO87 (B)93 (A)+6
Infrastructure85 (B)87 (B)+2
Compliance75 (C)74 (C)-1
Content80 (B)85 (B)+5
Sustainability79 (C)81 (B)+2

Resolved (28)

  • HSTS header is missing (Security)

    → Reduced attack surface for visitors

  • https://static.parastorage.com/unpkg/react@18.3.1/...: 457ms CPU time (Performance)

    → Page loads faster for users

  • 89 of 102 links are healthy (Content)

    → Stronger social sharing and on-page quality

  • Broken link: https://www.ferdowsspa.com (Content)

    → Stronger social sharing and on-page quality

  • Broken link: https://www.ferdowsspa.com/women-menu (Content)

    → Stronger social sharing and on-page quality

  • Broken link: https://www.ferdowsspa.com/about (Content)

    → Stronger social sharing and on-page quality

  • 0.83g CO2 — above the median website (0.60g) (Sustainability)

    → Lower carbon footprint per page view

  • Unattributable: 1976ms CPU time (Performance)

    → Page loads faster for users

  • Broken link: https://www.ferdowsspa.com/terms-conditions (Content)

    → Stronger social sharing and on-page quality

  • Compressed response missing `Vary` header (Performance)

    → Page loads faster for users

  • All 30 images use legacy formats (JPEG/PNG/GIF) (Content)

    → Stronger social sharing and on-page quality

  • Broken link: https://www.ferdowsspa.com/services (Content)

    → Stronger social sharing and on-page quality

  • https://pagead2.googlesyndication.com/pagead/manag...: 120 KB unused (72%) (Performance)

    → Page loads faster for users

  • Canonical target returns 403 (SEO)

    → Better search engine visibility

  • Broken link: https://www.ferdowsspa.com/treatments (Content)

    → Stronger social sharing and on-page quality

…and 13 more resolved issue(s)

Recommended next steps (60)

  • Sprint 1

    Broken link: https://www.elation-enterprises.com/ (Content)

  • Sprint 1

    Cookie 'ssr-caching' is missing the Secure flag (Security)

  • Sprint 1

    1 link(s) with no accessible text (Accessibility)

  • Sprint 2

    Content-Security-Policy header is missing (Security)

  • Sprint 1

    100 of 101 links are healthy (Content)

  • Sprint 1

    257 third-party resources (93% of weight) (Performance)

  • Sprint 1

    Referrer-Policy header is missing (Security)

  • Sprint 1

    Cookie 'sec-fetch-unsupported' is missing the HttpOnly flag (Security)

  • Sprint 2

    1 advertising/retargeting trackers detected (Compliance)

  • Sprint 1

    Cookie 'ssr-caching' has no SameSite attribute (Security)

  • Sprint 1

    Cross-Origin-Opener-Policy header is missing (Security)

  • Sprint 2

    200 inline style attribute(s) detected (Security)

  • Sprint 2

    263 HTTP requests — consider bundling or reducing (Performance)

  • Sprint 3

    https://pagead2.googlesyndication.com/pagead/manag...: 120 KB unused (73%) (Performance)

  • Sprint 2

    4 render-blocking <script src> tag(s) without async/defer (Performance)

…and 45 more recommended item(s)

Send Feedback