callixe.com website review

Not measured in this review.

• Real-user TTFB: 804 ms

  804 ms

  Real visitors wait 804 ms for your server to start answering (75th percentile). Good is under 800 ms.

• Tap response (INP) held steady for real visitors

  -4%

  Over the last 25 four-week periods to 2026-10-31, real Chrome visitors' tap response (inp) went from 163 ms to 153 ms at the 75th percentile (Chrome UX Report (opens in a new tab) history).

• Largest content (LCP) held steady for real visitors

  -2%

  Over the last 25 four-week periods to 2026-10-31, real Chrome visitors' largest content (lcp) went from 1.4 s to 1.4 s at the 75th percentile (Chrome UX Report (opens in a new tab) history).

• Page weight: 4.5 MB

  4.5 MB

  Your homepage downloads 4.5 MB on a phone, 455 KiB of it images (10%). Under 2 MB keeps phones on slow connections fast.

• About 1.3 g of CO₂ per visit

  1.27 g

  By the Sustainable Web Design model, a visit to your homepage emits about 1.27 g of CO₂e: 152.5 kg a year at 10,000 visits a month. It scales with page weight, so every byte cut lowers it.

• 2 form fields without a label

  2 form fields have no label, so screen readers announce an empty box and autofill guesses.

  View source

• No social preview image

  No Open Graph image, so links shared on LinkedIn, Slack or Facebook show no preview picture.

  View source

• No XML sitemap

  No XML sitemap at https://callixe.com/sitemap.xml, so Google discovers your pages only by following links.

• One H1 headline

  Your <h1> is empty.

  View source

• 58 internal links, 3 external

  The homepage links to 58 pages on callixe.com and 3 external pages.

• 1 page without a title

  /customer_authentication/redirect has no <title>, so Google invents the link text in results.

  Elements (1)

• 1 linked page hidden from search

  /customer_authentication/redirect is marked noindex but linked from your homepage. If it is meant to be found, remove the noindex.

  Elements (1)

• 3 pages without a meta description

  /apps/help, /pages/hsa-fsa and /customer_authentication/redirect have no meta description, so Google writes the search snippet from whatever text it finds.

  Elements (3)

• 7 pages without an H1

  /pages/customer-stories, /pages/contact-us, /apps/track123, /pages/hsa-fsa, /customer_authentication/redirect and /products/thera-wrap and 1 other have no <h1> headline, so visitors and search engines get no clear main topic.

• 12 pages slow to respond

  /collections/all-products, /pages/customer-stories, /pages/our-story, /blogs/back-pain, /blogs/neck-pain and /blogs/whats-new/how-to-fix-forward-head-posture-at-home-fast and 6 others took over 3 s to send their HTML from our server.

• 15 internal pages checked

  We fetched 15 pages linked from your homepage (of 25 found) and read each the way a search engine does.

• 2 broken images

  2 images failed to load on a phone, for example https://flagcdn.com/w80/ac.png.

• 6 JavaScript errors while loading

  6 errors were logged to the browser console while the page loaded, for example “Failed to load resource: net::ERR_FAILED”.

• Short HSTS lifetime

  HSTS is set, but max-age is 91 days; one year is the recommended minimum.

• 1 link through redirect chains

  1 link go through two or more redirects, for example https://callixe.com/customer_authentication/redirect?locale=en&region_country=US.

• No Referrer-Policy

  No Referrer-Policy header, so full URLs can leak to the sites you link to.

• No Permissions-Policy

  No Permissions-Policy header to switch off camera, microphone and location for embedded content.

• Deprecated X-XSS-Protection

  X-XSS-Protection is set to “1; mode=block”; the header is deprecated and can introduce bugs. Use 0 or remove it.

• No security.txt

  There is no /.well-known/security.txt telling researchers how to report a security problem to you.

• No CAA record

  callixe.com has no CAA record, so any certificate authority may issue a certificate for it. A CAA record naming your provider (for example letsencrypt.org) closes that door.

• Local business without LocalBusiness data

  Your homepage shows a street address but no LocalBusiness JSON-LD, so Google and AI assistants have to guess your address, hours and phone from the page text.

  View source

• No opening hours

  The homepage shows no opening hours. If customers visit or call, show when.

• No map or directions link

  There is no link to Google or Apple Maps. A directions link is one tap for a phone visitor.

• About 1,170 words of copy

  The homepage carries about 1,170 words of visible text.

• DMARC is monitor-only (p=none)

  DMARC is set to p=none, so mail pretending to be callixe.com is still delivered. Add a report address, check the reports, then move to quarantine.

• Email authentication score: 70/100

  Email authentication: SPF record 25 points, plus 15 when it ends in -all (10 for ~all); DMARC record 25, plus 25 for a reject policy (15 for quarantine); a DKIM key on a common selector 10.

• 7 trackers load before any consent

  7

  Before a visitor clicks anything, the page loads Google Ads, Google Analytics, Google Tag Manager, Klaviyo and Meta Pixel and 2 mores (measured from a US location before any click). No consent tool was detected. Visitors from the EU, UK and several US states must be asked first.

• 37 cookies set on arrival

  37

  Opening the homepage sets 37 cookies, 2 of them by other companies (measured from a US location before any click).

• No consent tool detected

  No known cookie consent tool loads with the page. Some sites build their own banner, and some only show one to visitors from the EU.

• 49 other companies contacted

  Loading the homepage contacts 49 hosts run by other companies (fonts, scripts, analytics, ads), each of which sees the visitor's IP address.