Skip to content

Changes

https://bangbros.com
Compared to previous audit · 3 days ago View previous audit

New York, United Stated Madrid, Spain

These audits ran from different locations. Timing metrics (TTFB, DNS, TLS) may reflect network path differences rather than site changes.

22
New issues
23
Resolved
23
score changes
CategoryPreviousCurrentChange
CompositeC (78)C (78)
PerformanceC (76)C (76)
SecurityC (79)B (80) +1.000
AccessibilityC (73)C (74) +1.000
SEOA (92)A (91) -1.000
InfrastructureB (89)B (88) -1.000
ComplianceD (65)D (65)
ContentD (65)D (65)
SustainabilityD (65)D (68) +3.000
MetricPreviousCurrentChange
Performance 700200 -500
Accessibility 92008700 -500
Best Practices 96009600
SEO 100009200 -800
PWA 00
Desktop Performance 39003100 -800
Desktop Accessibility 87008300 -400
Desktop Best Practices 96009600
Desktop SEO 1000010000
FCP 10.52 s8.21 s -2.31 s
LCP 21.75 s22.59 s +842 ms
TBT 1.21 s2.80 s +1.59 s
CLS 2.4670.973 -1.494
Desktop FCP 838 ms772 ms -66 ms
Desktop LCP 3.95 s9.80 s +5.85 s
Desktop TBT 211 ms238 ms +28 ms
Desktop CLS 0.6591.178 +0.518
TTFB 581 ms277 ms -304 ms
DNS 29 ms4 ms -25 ms
TLS 4 ms10 ms +5 ms
Connect 0 ms1 ms +0 ms
Total 988 ms354 ms -634 ms

† Timing metrics may vary by worker location and do not necessarily indicate site changes.

CRITICAL Page weighs 11.3 MB (5.1 MB transferred) performance
WARNING Third-party code accounts for 98% of page weight (5.0 MiB of 5.1 MiB) performance
WARNING https://app-assets.project1content.com/tour/vendor...: 2272ms CPU time performance
WARNING Total JS execution time is 11.0 s -- over the 3.5s budget performance
WARNING DNS resolution is slow (243 ms) infrastructure
WARNING Unattributable: 1064ms CPU time performance
WARNING 2 of 2 <nav> elements are unlabeled accessibility
WARNING https://onelist.project1content.com/static/js/main...: 241 KB unused (66%) performance
WARNING 2 render-blocking <script src> tag(s) without async/defer performance
WARNING 182 of 184 links are healthy content
WARNING https://media-public-fl.project1content.com//m=eeE... is missing width/height — may cause layout shift performance
WARNING Page weight 5.1 MB exceeds 1 MB target by 4.1 MB performance
WARNING 1.45g CO2 — above the median website (0.60g) sustainability
WARNING Images are 1.3 MB — compress or use modern formats performance
WARNING https://www.gstatic.com/recaptcha/releases/rL1ELiQ...: 1406ms CPU time performance
WARNING 104 HTTP requests — consider bundling or reducing performance
WARNING 1.45g CO2 per page view sustainability
WARNING 98 third-party resources (98% of weight) performance
WARNING https://app-assets.project1content.com/tour/main.b...: 2988ms CPU time performance
WARNING https://bangbros.com/: 1438ms CPU time performance
WARNING Third-party scripts: 8183ms (75% of total) performance
WARNING https://app-assets.project1content.com/tour/vendor...: 394 KB unused (56%) performance
CRITICAL Page weighs 11.5 MB (5.3 MB transferred) performance
CRITICAL 1 button(s) with no accessible text accessibility
CRITICAL 1 link(s) with no accessible text accessibility
WARNING 81 of 83 links are healthy content
WARNING Transfer efficiency: 75% sustainability
WARNING /phpinfo.php is publicly accessible security
WARNING https://media-public-ht.project1content.com/m=eeEa... is missing width/height — may cause layout shift performance
WARNING Images are 1.5 MB — compress or use modern formats performance
WARNING Unattributable: 757ms CPU time performance
WARNING https://www.gstatic.com/recaptcha/releases/rL1ELiQ...: 830ms CPU time performance
WARNING Third-party code accounts for 98% of page weight (5.2 MiB of 5.3 MiB) performance
WARNING Third-party scripts: 5947ms (76% of total) performance
WARNING 106 HTTP requests — consider bundling or reducing performance
WARNING 1.50g CO2 per page view sustainability
WARNING https://onelist.project1content.com/static/js/main...: 255 KB unused (66%) performance
WARNING 1.50g CO2 — above the median website (0.60g) sustainability
WARNING 3 of 3 <nav> elements are unlabeled accessibility
WARNING https://app-assets.project1content.com/tour/main.b...: 2123ms CPU time performance
WARNING https://app-assets.project1content.com/tour/vendor...: 1943ms CPU time performance
WARNING https://bangbros.com/: 978ms CPU time performance
WARNING 100 third-party resources (98% of weight) performance
WARNING https://app-assets.project1content.com/tour/vendor...: 395 KB unused (56%) performance
WARNING Page weight 5.3 MB exceeds 1 MB target by 4.3 MB performance
CRITICAL 2 control(s) without accessible label accessibility
CRITICAL 3 non-essential cookie(s) set without consent banner compliance
CRITICAL Cookie 'app_session_id' is missing the Secure flag security
CRITICAL Viewport prevents user zooming compliance
CRITICAL No <main> landmark found accessibility
CRITICAL No H1 heading found accessibility
CRITICAL Broken link: https://bangbros.com/join1 content
CRITICAL Cookie 'instance_token' is missing the Secure flag security
WARNING 153 inline style attribute(s) detected security
WARNING External script from www.google.com lacks integrity attribute security
WARNING Cookie '__s' is missing the HttpOnly flag security
WARNING SRI adoption: 2/30 third-party resources protected (6%) security
WARNING Privacy Policy not detected compliance
WARNING External script from onelist.project1content.com lacks integrity attribute security
WARNING https://app-assets.project1content.com/tour/assets... is missing width/height — may cause layout shift performance
WARNING Permissions-Policy header not set -- features default to allow-on-same-origin security
WARNING External link from fonts.googleapis.com lacks integrity attribute security
WARNING External script from onenavigation.project1content.com lacks integrity attribute security
WARNING form-action directive is missing security
WARNING Cookie 'instance_token' has no SameSite attribute security
WARNING 6 images significantly larger than display size content
WARNING 12 images missing explicit width/height content
WARNING default-src directive is missing security
WARNING 1 field(s) would benefit from inputmode attribute accessibility
WARNING X-Powered-By header reveals technology stack security
WARNING Cookie 'app_session_id' has no SameSite attribute security
WARNING Skip navigation link is missing (WCAG 2.4.1) accessibility
WARNING 26 link(s) with generic text accessibility
WARNING https://images-assets-ht.project1content.com/BangB... is missing width/height — may cause layout shift performance
WARNING No DMARC record found security
WARNING Permissions-Policy header is missing security
WARNING https://images-assets-ht.project1content.com/Commo... is missing width/height — may cause layout shift performance
WARNING No Open Graph meta tags found content
WARNING Cross-Origin-Opener-Policy header is missing security
WARNING base-uri directive is missing security
WARNING External link from onelist.project1content.com lacks integrity attribute security
WARNING 1 link(s) open in new tab without warning accessibility
WARNING GDPR Article 13 disclosure coverage: 0 / 8 categories compliance
WARNING Cookie 'instance_token' is missing the HttpOnly flag security
WARNING Title is only 11 characters — consider expanding seo
WARNING Registrar lock is NOT enabled infrastructure
WARNING Referrer-Policy header is missing security
WARNING Broken link: https://fonts.googleapis.com/css?family=Open Sans|Open Sa... content
WARNING 1 unmuted autoplay media element(s) on page content
WARNING No Permissions-Policy header security
WARNING Cookie 'app_session_id' is missing the HttpOnly flag security
WARNING https://images-assets.project1content.com/assets/b... is missing width/height — may cause layout shift performance
WARNING X-Frame-Options header is missing security
WARNING 19 link(s) open in a new tab without rel=noopener security
WARNING 1 field(s) missing recommended autocomplete attribute accessibility
WARNING All 12 images use legacy formats (JPEG/PNG/GIF) content
WARNING <iframe> missing title attribute (src="") accessibility
WARNING JavaScript is 2.2 MB — consider code splitting or lazy loading performance
WARNING https://www.gstatic.com/recaptcha/releases/rL1ELiQ...: 186 KB unused (50%) performance
WARNING External script from app-assets.project1content.com lacks integrity attribute security
WARNING Cross-Origin-Embedder-Policy header is missing security
set-cookie
instance_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJtaW5kZ2VlayIsI... instance_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJtaW5kZ2VlayIsI...
x-trace
2BFD172A141C28827AFC0D5CD6CBBE7D8F6A262D22EC93F94EC8D82F1600 2BADAF9DD94EA1AE50849D39D8340DE179D345881B5CF75B24F455F1E100
etag
W/"1cf463-UwlymdlSg1HAKa2xm9I9XpPj6Ns" W/"1cf41a-vwMusfM6/YTRhCnb6TP7nIm8XOU"

16 headers unchanged

+ Underscore.js JavaScript libraries v4.17.21

18 technologies unchanged

Looking ahead

+19 pts
C (78) Could reach A+ (97)
Accessibility +26Performance +24Content +23Compliance +22Security +20Infrastructure +8Sustainability +8SEO +4

Estimate — actual results may vary (78 issues to fix)

Website improvement report — Bangbros

July 13, 2026 → July 16, 2026

C C 78 → 78 0 pts

23

Resolved

22

New issues

56

Still remaining

Financial summary

Investment delivered

$4,608 in development time

Investment remaining

$9,725 to complete the remaining items

Ongoing risk

$1/month in ongoing exposure

Figures are estimates based on local developer hourly rate, industry CPC, and regulatory fine ranges.

Performance by category

MetricBeforeAfterChange
Overall score78 (C)78 (C)0
Performance76 (C)76 (C)0
Security79 (C)80 (B)+1
Accessibility73 (C)74 (C)+1
SEO92 (A)91 (A)-1
Infrastructure89 (B)88 (B)-1
Compliance65 (D)65 (D)0
Content65 (D)65 (D)0
Sustainability65 (D)68 (D)+3

Resolved (23)

  • 81 of 83 links are healthy (Content)

    → Stronger social sharing and on-page quality

  • Transfer efficiency: 75% (Sustainability)

    → Lower carbon footprint per page view

  • /phpinfo.php is publicly accessible (Security)

    → Reduced attack surface for visitors

  • https://media-public-ht.project1content.com/m=eeEa... is missing width/height — may cause layout shift (Performance)

    → Page loads faster for users

  • Page weighs 11.5 MB (5.3 MB transferred) (Performance)

    → Page loads faster for users

  • Images are 1.5 MB — compress or use modern formats (Performance)

    → Page loads faster for users

  • Unattributable: 757ms CPU time (Performance)

    → Page loads faster for users

  • 1 button(s) with no accessible text (Accessibility)

    → Improved usability for assistive technology users

  • https://www.gstatic.com/recaptcha/releases/rL1ELiQ...: 830ms CPU time (Performance)

    → Page loads faster for users

  • 1 link(s) with no accessible text (Accessibility)

    → Improved usability for assistive technology users

  • Third-party code accounts for 98% of page weight (5.2 MiB of 5.3 MiB) (Performance)

    → Page loads faster for users

  • Third-party scripts: 5947ms (76% of total) (Performance)

    → Page loads faster for users

  • 106 HTTP requests — consider bundling or reducing (Performance)

    → Page loads faster for users

  • 1.50g CO2 per page view (Sustainability)

    → Lower carbon footprint per page view

  • https://onelist.project1content.com/static/js/main...: 255 KB unused (66%) (Performance)

    → Page loads faster for users

…and 8 more resolved issue(s)

Recommended next steps (78)

  • Sprint 1

    Page weighs 11.3 MB (5.1 MB transferred) (Performance)

  • Sprint 2

    2 control(s) without accessible label (Accessibility)

  • Sprint 2

    3 non-essential cookie(s) set without consent banner (Compliance)

  • Sprint 1

    Cookie 'app_session_id' is missing the Secure flag (Security)

  • Sprint 1

    Viewport prevents user zooming (Compliance)

  • Sprint 1

    No <main> landmark found (Accessibility)

  • Sprint 1

    No H1 heading found (Accessibility)

  • Sprint 1

    Broken link: https://bangbros.com/join1 (Content)

  • Sprint 1

    Cookie 'instance_token' is missing the Secure flag (Security)

  • Sprint 3

    Third-party code accounts for 98% of page weight (5.0 MiB of 5.1 MiB) (Performance)

  • Sprint 1

    https://app-assets.project1content.com/tour/vendor...: 2272ms CPU time (Performance)

  • Sprint 2

    Total JS execution time is 11.0 s -- over the 3.5s budget (Performance)

  • Sprint 2

    DNS resolution is slow (243 ms) (Infrastructure)

  • Sprint 1

    Unattributable: 1064ms CPU time (Performance)

  • Sprint 1

    2 of 2 <nav> elements are unlabeled (Accessibility)

…and 63 more recommended item(s)

Send Feedback