flutterhabit.com website review

Not measured in this review.

• Tap response (INP) got 13% slower for real visitors

  +13%

  Over the last 25 four-week periods to 2026-10-31, real Chrome visitors' tap response (inp) went from 171 ms to 188 ms at the 75th percentile (Chrome UX Report (opens in a new tab) history).

• Page weight: 4.8 MB

  4.8 MB

  Your homepage downloads 4.8 MB on a phone, 2.1 MB of it images (45%). Under 2 MB keeps phones on slow connections fast.

• 5 images far larger than shown

  826 KiB

  5 images are downloaded at several times the size a phone draws them, for example FH-PDP-Core-6Pair-Willow-1.jpg at 2,500 px wide, shown at 44 px. Resized copies would save about 826 KiB.

  Elements (5)

• 6 images below the first screen load straight away

  6 images further down the page (854 KiB) download before anyone scrolls to them. Adding loading="lazy" lets the first screen load first.

  Elements (5)

• About 1.4 g of CO₂ per visit

  1.36 g

  By the Sustainable Web Design model, a visit to your homepage emits about 1.36 g of CO₂e: 163.7 kg a year at 10,000 visits a month. It scales with page weight, so every byte cut lowers it.

• 5 buttons without a name

  5 buttons have no accessible name, so screen readers announce just “button”.

  Elements (3)

• Certain ARIA roles must be contained by particular parents (4 elements)

  Certain ARIA roles must be contained by particular parents: 4 elements on the page fail this check, rated critical by axe-core.

  Elements (3)

• Certain ARIA roles must contain particular children (2 elements)

  Certain ARIA roles must contain particular children: 2 elements on the page fail this check, rated critical by axe-core.

  Elements (2)

• 10 tap targets too small

  10 tap targets are too small or too close together to hit reliably with a finger.

  Elements (3)

• 4 text elements with low contrast

  4 text elements don't have enough contrast against the background to read easily, especially outdoors on a phone.

  Elements (3)

• 7 images without alt text

  7 images have no alt text, which hurts accessibility and image search.

  View sourceElements (1)

• Landmarks should have a unique role or role/label/title (i.e. accessible name) combination (1 element)

  Landmarks should have a unique role or role/label/title (i.e. accessible name) combination: 1 element on the page fails this check, rated moderate by axe-core.

  Elements (1)

• All page content should be contained by landmarks (1 element)

  All page content should be contained by landmarks: 1 element on the page fails this check, rated moderate by axe-core.

  Elements (1)

• 19 links without text

  19 visible links have no text or label, so screen readers cannot say where they go.

  Elements (1)

• 1 form field without a label

  1 form field has no label, so screen readers announce an empty box and autofill guesses.

  View source

• ARIA role should be appropriate for the element (2 elements)

  ARIA role should be appropriate for the element: 2 elements on the page fail this check, rated minor by axe-core.

  Elements (2)

• Headings skip levels

  Headings skip levels (h1 → h3), which makes the page harder to scan with a screen reader.

  View sourceElements (1)

• 2 H1 headlines

  There are 2 <h1> headlines (“” and “New to lashes?You'll be a natural.”). One clear main headline is easier for people and search engines.

  View source

• 321 internal links, 4 external

  The homepage links to 321 pages on flutterhabit.com and 4 external pages.

• 13 pages without a meta description

  /collections/new-arrivals, /collections/best-sellers, /collections/shop-all, /collections/the-sticktionary-edition-pre-glued-underlash-extensions, /collections/adhesives and /collections/bundles and 7 others have no meta description, so Google writes the search snippet from whatever text it finds.

  Elements (8)

• 13 pages without an H1

  /collections/new-arrivals, /collections/best-sellers, /collections/shop-all, /collections/lashes, /collections/the-sticktionary-edition-pre-glued-underlash-extensions and /collections/adhesives and 7 others have no <h1> headline, so visitors and search engines get no clear main topic.

• 15 internal pages checked

  We fetched 15 pages linked from your homepage (of 65 found) and read each the way a search engine does.

• 1 JavaScript error while loading

  1 error was logged to the browser console while the page loaded, for example “Failed to load resource: net::ERR_FAILED”.

• Short HSTS lifetime

  HSTS is set, but max-age is 91 days; one year is the recommended minimum.

• No Referrer-Policy

  No Referrer-Policy header, so full URLs can leak to the sites you link to.

• No Permissions-Policy

  No Permissions-Policy header to switch off camera, microphone and location for embedded content.

• Deprecated X-XSS-Protection

  X-XSS-Protection is set to “1; mode=block”; the header is deprecated and can introduce bugs. Use 0 or remove it.

• No security.txt

  There is no /.well-known/security.txt telling researchers how to report a security problem to you.

• No CAA record

  flutterhabit.com has no CAA record, so any certificate authority may issue a certificate for it. A CAA record naming your provider (for example letsencrypt.org) closes that door.

• DNSSEC is off

  flutterhabit.com's DNS answers are not signed. DNSSEC stops attackers forging them to send visitors or email elsewhere; most registrars switch it on in a click, though most sites still run without it.

• No phone number on the homepage

  A local customer looking to call finds no phone number on the homepage. Add one, ideally as a tap-to-call link.

• Thin social proof

  Social proof on the homepage: 433 testimonial or review blocks. Pairing it with named testimonials or customer logos makes it far more convincing.

• No direct contact details

  No phone number or email link on the homepage, so ready-to-buy visitors have one fewer way to reach you.

• No opening hours

  The homepage shows no opening hours. If customers visit or call, show when.

• No map or directions link

  There is no link to Google or Apple Maps. A directions link is one tap for a phone visitor.

• No risk reducer

  No guarantee or risk reducer (money-back, free trial, no credit card) is mentioned, which is often what tips a hesitant visitor.

• About 3,451 words of copy

  The homepage carries about 3,451 words of visible text.

• Email authentication score: 85/100

  Email authentication: SPF record 25 points, plus 15 when it ends in -all (10 for ~all); DMARC record 25, plus 25 for a reject policy (15 for quarantine); a DKIM key on a common selector 10.

• 1 tracker load before any consent

  1

  Before a visitor clicks anything, the page loads Klaviyo (measured from a US location before any click). A consent tool (Osano) is installed; check it blocks these until visitors agree where the law requires it.

• 9 cookies set on arrival

  9

  Opening the homepage sets 9 cookies, 1 of them by other companies (measured from a US location before any click).

• 44 other companies contacted

  Loading the homepage contacts 44 hosts run by other companies (fonts, scripts, analytics, ads), each of which sees the visitor's IP address.