ferplast.com website review

Not measured in this review.

• Fails Core Web Vitals for real visitors

  Real Chrome users on phones do not pass Google's Core Web Vitals on your site (28-day field data from the Chrome UX Report (opens in a new tab)). Google uses this in ranking.

• Real-user CLS: 0.34

  0.34

  For real visitors the layout shifts by 0.34 (75th percentile). Good is under 0.1.

• Tap response (INP) held steady for real visitors

  +2%

  Over the last 25 four-week periods to 2026-10-31, real Chrome visitors' tap response (inp) went from 129 ms to 130 ms at the 75th percentile (Chrome UX Report (opens in a new tab) history).

• Largest content (LCP) held steady for real visitors

  -5%

  Over the last 25 four-week periods to 2026-10-31, real Chrome visitors' largest content (lcp) went from 2.4 s to 2.2 s at the 75th percentile (Chrome UX Report (opens in a new tab) history).

• Page weight: 3.7 MB

  3.7 MB

  Your homepage downloads 3.7 MB on a phone, 1.2 MB of it images (31%). Under 2 MB keeps phones on slow connections fast.

• 2 images below the first screen load straight away

  2 images further down the page (77 KiB) download before anyone scrolls to them. Adding loading="lazy" lets the first screen load first.

  Elements (2)

• About 1.1 g of CO₂ per visit

  1.06 g

  By the Sustainable Web Design model, a visit to your homepage emits about 1.06 g of CO₂e: 127.0 kg a year at 10,000 visits a month. It scales with page weight, so every byte cut lowers it.

• Invalid ARIA attributes

  2 elements use ARIA attributes their role does not allow, which confuses screen readers.

  Elements (2)

• Certain ARIA roles must contain particular children (2 elements)

  Certain ARIA roles must contain particular children: 2 elements on the page fail this check, rated critical by axe-core.

  Elements (2)

• Certain ARIA roles must be contained by particular parents (2 elements)

  Certain ARIA roles must be contained by particular parents: 2 elements on the page fail this check, rated critical by axe-core.

  Elements (2)

• ARIA attributes must conform to valid values (2 elements)

  ARIA attributes must conform to valid values: 2 elements on the page fail this check, rated critical by axe-core.

  Elements (2)

• Hidden but focusable

  5 elements hidden from screen readers can still receive keyboard focus.

  Elements (3)

• 2 tap targets too small

  2 tap targets are too small or too close together to hit reliably with a finger.

  Elements (2)

• Malformed lists

  Some lists contain elements other than list items, which screen readers announce wrongly.

  Elements (1)

• Interactive controls must not be nested (1 element)

  Interactive controls must not be nested: 1 element on the page fails this check, rated serious by axe-core.

  Elements (1)

• 7 images without alt text

  7 images have no alt text, which hurts accessibility and image search.

  View source

• 3 links without text

  3 visible links have no text or label, so screen readers cannot say where they go.

• Elements marked as presentational should be consistently ignored (2 elements)

  Elements marked as presentational should be consistently ignored: 2 elements on the page fail this check, rated minor by axe-core.

  Elements (2)

• Headings skip levels

  Headings skip levels (h1 → h3), which makes the page harder to scan with a screen reader.

  View sourceElements (1)

• Structured data has 2 problems

  Structured data found (Organization, PetStore and WebSite) but with 2 problems, for example “Organization: missing name”.

  View source

• 155 internal links, 12 external

  The homepage links to 155 pages on ferplast.com and 12 external pages.

• Organization data is thin (3 of 6 facts)

  Your Organization JSON-LD is missing name, description and contact details. These are the facts AI assistants use to describe a business and to tell it apart from others with a similar name.

  View source

• 15 internal pages checked

  We fetched 15 pages linked from your homepage (of 70 found) and read each the way a search engine does.

• 1 JavaScript error while loading

  1 error was logged to the browser console while the page loaded, for example “SyntaxError: Unexpected end of JSON input”.

• Short HSTS lifetime

  HSTS is set, but max-age is 91 days; one year is the recommended minimum.

• No Referrer-Policy

  No Referrer-Policy header, so full URLs can leak to the sites you link to.

• No Permissions-Policy

  No Permissions-Policy header to switch off camera, microphone and location for embedded content.

• Deprecated X-XSS-Protection

  X-XSS-Protection is set to “1; mode=block”; the header is deprecated and can introduce bugs. Use 0 or remove it.

• No security.txt

  There is no /.well-known/security.txt telling researchers how to report a security problem to you.

• DNSSEC is off

  ferplast.com's DNS answers are not signed. DNSSEC stops attackers forging them to send visitors or email elsewhere; most registrars switch it on in a click, though most sites still run without it.

• No call to action on the first screen

  On a phone, there is no call to action on the first screen: visitors have to scroll to find out what to do next.

• No social proof

  No testimonials, customer logos, ratings or customer counts on the homepage: nothing tells a new visitor that others already trust you.

• No phone number on the homepage

  A local customer looking to call finds no phone number on the homepage. Add one, ideally as a tap-to-call link.

• No analytics detected

  No analytics or tag manager detected in the HTML, so you can't measure whether any of these fixes work.

• No direct contact details

  No phone number or email link on the homepage, so ready-to-buy visitors have one fewer way to reach you.

• No opening hours

  The homepage shows no opening hours. If customers visit or call, show when.

• No map or directions link

  There is no link to Google or Apple Maps. A directions link is one tap for a phone visitor.

• About 328 words of copy

  The homepage carries about 328 words of visible text.

• DMARC is monitor-only (p=none)

  DMARC is set to p=none, so mail pretending to be ferplast.com is still delivered. Reports are on, so moving to quarantine is the next step.

• Email authentication score: 70/100

  Email authentication: SPF record 25 points, plus 15 when it ends in -all (10 for ~all); DMARC record 25, plus 25 for a reject policy (15 for quarantine); a DKIM key on a common selector 10.

• 3 trackers load before any consent

  3

  Before a visitor clicks anything, the page loads Google Analytics, Google Tag Manager and Klaviyo (measured from a US location before any click). A consent tool (iubenda) is installed; check it blocks these until visitors agree where the law requires it.

• 23 cookies set on arrival

  23

  Opening the homepage sets 23 cookies (measured from a US location before any click).

• 21 other companies contacted

  Loading the homepage contacts 21 hosts run by other companies (fonts, scripts, analytics, ads), each of which sees the visitor's IP address.