forme.science website review

Not measured in this review.

• Fails Core Web Vitals for real visitors

  Real Chrome users on phones do not pass Google's Core Web Vitals on your site (28-day field data from the Chrome UX Report (opens in a new tab)). Google uses this in ranking.

• Real-user INP: 237 ms

  237 ms

  Real visitors wait 237 ms for the page to respond to a tap (75th percentile). Good is under 200 ms.

• Real-user FCP: 1.9 s

  1.9 s

  Real visitors see the first content after 1.9 s (75th percentile). Good is under 1.8 s.

• Tap response (INP) held steady for real visitors

  +9%

  Over the last 25 four-week periods to 2026-10-31, real Chrome visitors' tap response (inp) went from 191 ms to 230 ms at the 75th percentile (Chrome UX Report (opens in a new tab) history).

• Page weight: 6.1 MB

  6.1 MB

  Your homepage downloads 6.1 MB on a phone, 2.0 MB of it images (33%). Under 2 MB keeps phones on slow connections fast.

• About 1.7 g of CO₂ per visit

  1.73 g

  By the Sustainable Web Design model, a visit to your homepage emits about 1.73 g of CO₂e: 207.3 kg a year at 10,000 visits a month. It scales with page weight, so every byte cut lowers it.

• 3 buttons without a name

  3 buttons have no accessible name, so screen readers announce just “button”.

  Elements (3)

• Interactive controls must not be nested (5 elements)

  Interactive controls must not be nested: 5 elements on the page fail this check, rated serious by axe-core.

  Elements (3)

• ARIA toggle fields must have an accessible name (3 elements)

  ARIA toggle fields must have an accessible name: 3 elements on the page fail this check, rated serious by axe-core.

  Elements (3)

• ARIA input fields must have an accessible name (2 elements)

  ARIA input fields must have an accessible name: 2 elements on the page fail this check, rated serious by axe-core.

  Elements (2)

• Links look like plain text

  2 links inside paragraphs rely on colour alone to stand out.

  Elements (2)

• 2 tap targets too small

  2 tap targets are too small or too close together to hit reliably with a finger.

  Elements (2)

• 1 text element with low contrast

  1 text element doesn't have enough contrast against the background to read easily, especially outdoors on a phone.

  Elements (1)

• Malformed lists

  Some lists contain elements other than list items, which screen readers announce wrongly.

  Elements (1)

• 44 images without alt text

  44 images have no alt text, which hurts accessibility and image search.

  View sourceElements (3)

• All page content should be contained by landmarks (19 elements)

  All page content should be contained by landmarks: 19 elements on the page fail this check, rated moderate by axe-core.

  Elements (3)

• 5 links without text

  5 visible links have no text or label, so screen readers cannot say where they go.

  Elements (3)

• 4 form fields without a label

  4 form fields have no label, so screen readers announce an empty box and autofill guesses.

  View source

• Alternative text of images should not be repeated as text (9 elements)

  Alternative text of images should not be repeated as text: 9 elements on the page fail this check, rated minor by axe-core.

  Elements (3)

• ARIA role should be appropriate for the element (4 elements)

  ARIA role should be appropriate for the element: 4 elements on the page fail this check, rated minor by axe-core.

  Elements (3)

• Elements marked as presentational should be consistently ignored (4 elements)

  Elements marked as presentational should be consistently ignored: 4 elements on the page fail this check, rated minor by axe-core.

  Elements (3)

• Headings should not be empty (1 element)

  Headings should not be empty: 1 element on the page fails this check, rated minor by axe-core.

  Elements (1)

• Structured data has 2 problems

  Structured data found (MerchantReturnPolicy, Organization and WebSite) but with 2 problems, for example “Organization: sameAs is an empty list”.

  View source

• 121 internal links, 30 external

  The homepage links to 121 pages on forme.science and 30 external pages.

• 15 internal pages checked

  We fetched 15 pages linked from your homepage (of 48 found) and read each the way a search engine does.

• 1 broken image

  1 image failed to load on a phone, for example https://forme.science/.

• 20 small tap targets

  20 of 87 tappable elements near the top of the page are smaller than 24 px, hard to hit with a thumb.

• 4 JavaScript errors while loading

  4 errors were logged to the browser console while the page loaded, for example “Failed to load resource: net::ERR_FAILED”.

• Short HSTS lifetime

  HSTS is set, but max-age is 91 days; one year is the recommended minimum.

• 3 links through redirect chains

  3 links go through two or more redirects, for example https://forme.science/collections/starter-bundle?_cd=c4e84d286538e231c6c44c349193d419dfa1c173c1b3ce76ddbc2716f6433b23&_uid=96692568295&preview_theme_id=157041656039&preview_token=r2u45mmih3ddtz1bm0h8j04x7syv570z.

• No Referrer-Policy

  No Referrer-Policy header, so full URLs can leak to the sites you link to.

• No Permissions-Policy

  No Permissions-Policy header to switch off camera, microphone and location for embedded content.

• Deprecated X-XSS-Protection

  X-XSS-Protection is set to “1; mode=block”; the header is deprecated and can introduce bugs. Use 0 or remove it.

• No security.txt

  There is no /.well-known/security.txt telling researchers how to report a security problem to you.

• No CAA record

  forme.science has no CAA record, so any certificate authority may issue a certificate for it. A CAA record naming your provider (for example letsencrypt.org) closes that door.

• DNSSEC is off

  forme.science's DNS answers are not signed. DNSSEC stops attackers forging them to send visitors or email elsewhere; most registrars switch it on in a click, though most sites still run without it.

• No direct contact details

  No phone number or email link on the homepage, so ready-to-buy visitors have one fewer way to reach you.

• No risk reducer

  No guarantee or risk reducer (money-back, free trial, no credit card) is mentioned, which is often what tips a hesitant visitor.

• About 623 words of copy

  The homepage carries about 623 words of visible text.

• Urgency cues

  The page uses urgency cues (a countdown or limited-time wording).

• DMARC is monitor-only (p=none)

  DMARC is set to p=none, so mail pretending to be forme.science is still delivered. Add a report address, check the reports, then move to quarantine.

• Email authentication score: 70/100

  Email authentication: SPF record 25 points, plus 15 when it ends in -all (10 for ~all); DMARC record 25, plus 25 for a reject policy (15 for quarantine); a DKIM key on a common selector 10.

• 10 trackers load before any consent

  10

  Before a visitor clicks anything, the page loads Google Ads, Google Analytics, Google Tag Manager, Hotjar and Klaviyo and 5 mores (measured from a US location before any click). No consent tool was detected. Visitors from the EU, UK and several US states must be asked first.

• 48 cookies set on arrival

  48

  Opening the homepage sets 48 cookies, 1 of them by other companies (measured from a US location before any click).

• No consent tool detected

  No known cookie consent tool loads with the page. Some sites build their own banner, and some only show one to visitors from the EU.

• 94 other companies contacted

  Loading the homepage contacts 94 hosts run by other companies (fonts, scripts, analytics, ads), each of which sees the visitor's IP address.