SiteScan.top

Scan report for quadromoto.pl

5 pages crawled — 4090 words, 394 images and 429 links read straight off the pages and checked for accessibility, performance, SEO, security, forms, links and infrastructure. {distinct} distinct problems found, counted 84 times across the pages.

Report updated 2026-09-04

Category scores

Overall
92/100
SEO
95/100 · Issues: 7
Accessibility
95/100 · Issues: 9
Performance
87/100 · Issues: 17
Security
73/100 · Issues: 29
Privacy
91/100 · Issues: 5
HTML validity
100/100 · No issues found
Forms
97/100 · Issues: 5
Links
97/100 · Issues: 1
Console
Not measured
Infrastructure
91/100 · Issues: 11

Quick Wins

High-impact, low-effort fixes, ranked by what this scan actually found.

  • Send X-Content-Type-Options: nosniff — Browsers stop guessing content types and executing files as scripts.
  • Send an X-Frame-Options header — The site cannot be framed for click-jacking.
  • Send a Referrer-Policy header — Internal URLs stop leaking to third-party sites.
  • Send a Permissions-Policy header — Camera, microphone and geolocation stay switched off for embedded content.
  • Add rel="noopener" to target="_blank" links — External tabs can no longer reach back into the opener window.
  • Add an apple-touch-icon and a web app manifest — A site saved to a phone home screen gets its own icon.

What the site checks found

  • Low — The Content-Security-Policy allows 'unsafe-inline' or 'unsafe-eval', which is what a script injection needs.
  • Low — Internal links that reach their page through a redirect: 1 of 10 checked.
  • Low — The DMARC policy is p=none: failures are reported but the forged mail is still delivered.
  • Low — No CAA record — any certificate authority may issue a certificate for this domain.
  • Low — The host has no AAAA record — visitors on IPv6-only networks reach it only through their carrier gateway.
  • Low — The zone is not signed with DNSSEC, so a forged DNS answer cannot be detected.

Other sites scanned recently

Scan your own site

Get the same diagnostic report for your website in under a minute.