hedon.com website review

Not measured in this review.

• Fails Core Web Vitals for real visitors

  Real Chrome users on phones do not pass Google's Core Web Vitals on your site (28-day field data from the Chrome UX Report (opens in a new tab)). Google uses this in ranking.

• Real-user LCP: 2.5 s

  2.5 s

  Real visitors wait 2.5 s for the largest content to appear (75th percentile). Good is under 2.5 s.

• Page weight: 4.7 MB

  4.7 MB

  Your homepage downloads 4.7 MB on a phone, 1.7 MB of it images (36%). Under 2 MB keeps phones on slow connections fast.

• About 1.3 g of CO₂ per visit

  1.33 g

  By the Sustainable Web Design model, a visit to your homepage emits about 1.33 g of CO₂e: 159.5 kg a year at 10,000 visits a month. It scales with page weight, so every byte cut lowers it.

• Images must have alternative text (9 elements)

  Images must have alternative text: 9 elements on the page fail this check, rated critical by axe-core.

  Elements (3)

• Invalid ARIA attributes

  4 elements use ARIA attributes their role does not allow, which confuses screen readers.

  Elements (3)

• Hidden but focusable

  8 elements hidden from screen readers can still receive keyboard focus.

  Elements (3)

• [role="img"] and [role="image"] elements must have alternative text (8 elements)

  [role="img"] and [role="image"] elements must have alternative text: 8 elements on the page fail this check, rated serious by axe-core.

  Elements (3)

• Scrollable region must have keyboard access (2 elements)

  Scrollable region must have keyboard access: 2 elements on the page fail this check, rated serious by axe-core.

  Elements (2)

• Links must have discernible text (1 element)

  Links must have discernible text: 1 element on the page fails this check, rated serious by axe-core.

  Elements (1)

• All page content should be contained by landmarks (1 element)

  All page content should be contained by landmarks: 1 element on the page fails this check, rated moderate by axe-core.

  Elements (1)

• 9 H1 headlines

  There are 9 <h1> headlines (“Hedon X Royal Enfield”, “The Art of Contrast” and “Iconic Evolution”). One clear main headline is easier for people and search engines.

  View source

• 537 internal links, 12 external

  The homepage links to 537 pages on hedon.com and 12 external pages.

• 2 pages share a title

  /en-us/collections/all-motorcycle-helmets and /en-us/collections/all-helmets-by-type all use the title “Hedon Motorcycle Helmets: Full & Open-Face”. Search engines can't tell which page to show for a search, so each competes with the others.

  Elements (2)

• 1 page without a meta description

  /en-us/collections/end-of-season-sale has no meta description, so Google writes the search snippet from whatever text it finds.

  Elements (1)

• 2 pages share a meta description

  /en-us/collections/all-motorcycle-helmets and /en-us/collections/all-helmets-by-type use the same meta description. A description written for each page earns more clicks.

• 1 link to non-canonical URLs

  Your homepage links to 1 page by a URL that isn't its canonical one, for example /collections/psilo-explorer, whose canonical is /en-us/collections/psilo-explorer. Linking straight to the canonical URL saves crawlers a detour and keeps ranking signals on one address.

  Elements (1)

• 3 pages without an H1

  /en-us/pages/terms-conditions, /en-us/collections/end-of-season-sale and /en-us/collections/all-helmets-by-type have no <h1> headline, so visitors and search engines get no clear main topic.

• 15 internal pages checked

  We fetched 15 pages linked from your homepage (of 50 found) and read each the way a search engine does.

• 2 JavaScript errors while loading

  2 errors were logged to the browser console while the page loaded, for example “gtag is not defined”.

• Short HSTS lifetime

  HSTS is set, but max-age is 91 days; one year is the recommended minimum.

• No Referrer-Policy

  No Referrer-Policy header, so full URLs can leak to the sites you link to.

• No Permissions-Policy

  No Permissions-Policy header to switch off camera, microphone and location for embedded content.

• Deprecated X-XSS-Protection

  X-XSS-Protection is set to “1; mode=block”; the header is deprecated and can introduce bugs. Use 0 or remove it.

• No security.txt

  There is no /.well-known/security.txt telling researchers how to report a security problem to you.

• No CAA record

  hedon.com has no CAA record, so any certificate authority may issue a certificate for it. A CAA record naming your provider (for example letsencrypt.org) closes that door.

• No phone number on the homepage

  A local customer looking to call finds no phone number on the homepage. Add one, ideally as a tap-to-call link.

• Thin social proof

  Social proof on the homepage: 2 trust badges. Pairing it with named testimonials or customer logos makes it far more convincing.

• No direct contact details

  No phone number or email link on the homepage, so ready-to-buy visitors have one fewer way to reach you.

• No opening hours

  The homepage shows no opening hours. If customers visit or call, show when.

• No map or directions link

  There is no link to Google or Apple Maps. A directions link is one tap for a phone visitor.

• About 1,271 words of copy

  The homepage carries about 1,271 words of visible text.

• Urgency cues

  The page uses urgency cues (a countdown or limited-time wording).

• DMARC is monitor-only (p=none)

  DMARC is set to p=none, so mail pretending to be hedon.com is still delivered. Add a report address, check the reports, then move to quarantine.

• Email authentication score: 75/100

  Email authentication: SPF record 25 points, plus 15 when it ends in -all (10 for ~all); DMARC record 25, plus 25 for a reject policy (15 for quarantine); a DKIM key on a common selector 10.

• 5 trackers load before any consent

  5

  Before a visitor clicks anything, the page loads Google Ads, Google Tag Manager, Klaviyo, Meta Pixel and Microsoft Clarity (measured from a US location before any click). No consent tool was detected. Visitors from the EU, UK and several US states must be asked first.

• 35 cookies set on arrival

  35

  Opening the homepage sets 35 cookies (measured from a US location before any click).

• No consent tool detected

  No known cookie consent tool loads with the page. Some sites build their own banner, and some only show one to visitors from the EU.

• 55 other companies contacted

  Loading the homepage contacts 55 hosts run by other companies (fonts, scripts, analytics, ads), each of which sees the visitor's IP address.