Scan report for domclimat.by
5 pages crawled — 3669 words, 45 images and 406 links read straight off the pages and checked for accessibility, performance, SEO, security, forms, links and infrastructure. 19 distinct problems found, counted 46 times across the pages.
Report updated 2026-09-16
Category scores
- Overall
- 93/100
- SEO
- 89/100 · Issues: 5
- Accessibility
- 97/100 · Issues: 5
- Performance
- 91/100 · Issues: 5
- Security
- 70/100 · Issues: 6
- Privacy
- 97/100 · Issues: 1
- HTML validity
- 94/100 · Issues: 10
- Forms
- 100/100 · No issues found
- Links
- 100/100 · No issues found
- Console
- 89/100 · Issues: 6
- Infrastructure
- 94/100 · Issues: 6
- Mobile
- 100/100 · No issues found
- Images
- 99/100 · Issues: 2
Quick Wins
High-impact, low-effort fixes, ranked by what this scan actually found.
- Send the charset in the Content-Type header — The browser knows the encoding before it reads the first byte, instead of guessing at it.
- Give the images width and height attributes — The page stops jumping under the reader as the images arrive.
- Escape the bare ampersands as & — Ampersands render as written instead of being read as the start of an entity.
- Add a skip link to the main content — Keyboard users reach the content without tabbing through the whole menu.
- Shorten the over-long titles — The whole title stays visible in search results.
- Publish an SPF record — Receiving servers can tell your mail from mail that only claims to be yours.
What the site checks found
- Medium — Security — The server still accepts TLS 1.1, withdrawn by RFC 8996 and refused by every browser.
- Low — Security — The Content-Security-Policy allows 'unsafe-inline' or 'unsafe-eval', which is what a script injection needs.
- Low — Security — No /.well-known/security.txt — anyone who finds a vulnerability has to guess where to report it.
- Medium — Security — No SPF record — anyone can send email that claims to come from this domain.
- Low — Security — No CAA record — any certificate authority may issue a certificate for this domain.
- Low — Security — The zone is not signed with DNSSEC, so a forged DNS answer cannot be detected.
- Medium — SEO — A URL that does not exist answers with HTTP 200 — search engines index missing pages as real ones.
- Low — Infrastructure — The domain publishes no MX records, so it cannot receive email.
- Low — Privacy — The site loads Yandex Metrica with no consent layer anywhere in the markup — under the GDPR and the ePrivacy Directive those tags need consent before they run.
Other sites scanned recently
Scan your own site
Get the same diagnostic report for your website in under a minute.