backdropsource.com website review

Not measured in this review.

• Tap response (INP) got 42% slower for real visitors

  +42%

  Over the last 25 four-week periods to 2026-10-31, real Chrome visitors' tap response (inp) went from 104 ms to 146 ms at the 75th percentile (Chrome UX Report (opens in a new tab) history).

• Largest content (LCP) held steady for real visitors

  +9%

  Over the last 25 four-week periods to 2026-10-31, real Chrome visitors' largest content (lcp) went from 1.9 s to 2.1 s at the 75th percentile (Chrome UX Report (opens in a new tab) history).

• Page weight: 4.0 MB

  4.0 MB

  Your homepage downloads 4.0 MB on a phone, 583 KiB of it images (14%). Under 2 MB keeps phones on slow connections fast.

• About 1.1 g of CO₂ per visit

  1.12 g

  By the Sustainable Web Design model, a visit to your homepage emits about 1.12 g of CO₂e: 134.6 kg a year at 10,000 visits a month. It scales with page weight, so every byte cut lowers it.

• 15 tap targets too small

  15 tap targets are too small or too close together to hit reliably with a finger.

  Elements (3)

• 2 text elements with low contrast

  2 text elements don't have enough contrast against the background to read easily, especially outdoors on a phone.

  Elements (2)

• Frames without titles

  1 frame has no title, so screen-reader users cannot tell what it contains.

  Elements (1)

• Scrollable region must have keyboard access (1 element)

  Scrollable region must have keyboard access: 1 element on the page fails this check, rated serious by axe-core.

  Elements (1)

• 13 images without alt text

  13 images have no alt text, which hurts accessibility and image search.

  Elements (1)

• Contentinfo landmark should not be contained in another landmark (1 element)

  Contentinfo landmark should not be contained in another landmark: 1 element on the page fails this check, rated moderate by axe-core.

  Elements (1)

• Document should not have more than one contentinfo landmark (1 element)

  Document should not have more than one contentinfo landmark: 1 element on the page fails this check, rated moderate by axe-core.

  Elements (1)

• Landmarks should have a unique role or role/label/title (i.e. accessible name) combination (1 element)

  Landmarks should have a unique role or role/label/title (i.e. accessible name) combination: 1 element on the page fails this check, rated moderate by axe-core.

  Elements (1)

• 8 form fields without a label

  8 form fields have no label, so screen readers announce an empty box and autofill guesses.

• 5 links without text

  5 visible links have no text or label, so screen readers cannot say where they go.

• Headings skip levels

  Headings skip levels (h2 → h4), which makes the page harder to scan with a screen reader.

• No social preview image

  No Open Graph image, so links shared on LinkedIn, Slack or Facebook show no preview picture.

  View source

• 616 internal links, 20 external

  The homepage links to 616 pages on backdropsource.com and 20 external pages.

• 1 page without a title

  /customer_authentication/redirect has no <title>, so Google invents the link text in results.

  Elements (1)

• 1 linked page hidden from search

  /customer_authentication/redirect is marked noindex but linked from your homepage. If it is meant to be found, remove the noindex.

  Elements (1)

• 1 page without a meta description

  /customer_authentication/redirect has no meta description, so Google writes the search snippet from whatever text it finds.

  Elements (1)

• 15 pages without an H1

  /pages/our-work, /customer_authentication/redirect, /collections/media-walls, /products/premium-straight-tension-fabric-backdrop-display, /products/curved-tension-portable-media-wall and /products/3d-wall-box-fabric-exhibition-display and 9 others have no <h1> headline, so visitors and search engines get no clear main topic.

• 2 pages with very little text

  /collections/media-walls and /products/s-shape-wave-fabric-display-wall have under 150 words in the HTML. Thin pages rarely rank; if the text loads with JavaScript, crawlers that don't run it see even less.

• 15 internal pages checked

  We fetched 15 pages linked from your homepage (of 190 found) and read each the way a search engine does.

• 2 broken images

  2 images failed to load on a phone, for example https://bat.bing.com/action/0?ti=17530323&Ver=2&mid=1e506724-52ab-4a4d-afdc-859fe3efc614&bo=1&sid=d76f4280d9af11f1956a9188fdf5dabd&vid=d76f4bb0d9af11f1aa3341ffd321484a&vids=1&msclkid=N&pi=918639831&lg.

• 14 small tap targets

  14 of 57 tappable elements near the top of the page are smaller than 24 px, hard to hit with a thumb.

• 3 JavaScript errors while loading

  3 errors were logged to the browser console while the page loaded, for example “Failed to load resource: net::ERR_CERT_AUTHORITY_INVALID”.

• Short HSTS lifetime

  HSTS is set, but max-age is 91 days; one year is the recommended minimum.

• 1 link through redirect chains

  1 link go through two or more redirects, for example https://www.backdropsource.com/customer_authentication/redirect?locale=en&region_country=US.

• No Referrer-Policy

  No Referrer-Policy header, so full URLs can leak to the sites you link to.

• No Permissions-Policy

  No Permissions-Policy header to switch off camera, microphone and location for embedded content.

• Deprecated X-XSS-Protection

  X-XSS-Protection is set to “1; mode=block”; the header is deprecated and can introduce bugs. Use 0 or remove it.

• No security.txt

  There is no /.well-known/security.txt telling researchers how to report a security problem to you.

• DNSSEC is off

  backdropsource.com's DNS answers are not signed. DNSSEC stops attackers forging them to send visitors or email elsewhere; most registrars switch it on in a click, though most sites still run without it.

• Local business without LocalBusiness data

  Your homepage shows a street address but no LocalBusiness JSON-LD, so Google and AI assistants have to guess your address, hours and phone from the page text.

  View source

• A 13-field form

  Your longest form asks for 13 fields (2 required). Every extra field lowers completion.

• No map or directions link

  There is no link to Google or Apple Maps. A directions link is one tap for a phone visitor.

• About 665 words of copy

  The homepage carries about 665 words of visible text.

• DMARC is monitor-only (p=none)

  DMARC is set to p=none, so mail pretending to be backdropsource.com is still delivered. Reports are on, so moving to quarantine is the next step.

• Email authentication score: 70/100

  Email authentication: SPF record 25 points, plus 15 when it ends in -all (10 for ~all); DMARC record 25, plus 25 for a reject policy (15 for quarantine); a DKIM key on a common selector 10.

• 6 trackers load before any consent

  6

  Before a visitor clicks anything, the page loads Google Ads, Google Analytics, Google Tag Manager, Meta Pixel and Microsoft Ads and 1 more (measured from a US location before any click). No consent tool was detected. Visitors from the EU, UK and several US states must be asked first.

• 29 cookies set on arrival

  29

  Opening the homepage sets 29 cookies, 1 of them by other companies (measured from a US location before any click).

• No consent tool detected

  No known cookie consent tool loads with the page. Some sites build their own banner, and some only show one to visitors from the EU.

• 36 other companies contacted

  Loading the homepage contacts 36 hosts run by other companies (fonts, scripts, analytics, ads), each of which sees the visitor's IP address.