idemitsu.com website review

Not measured in this review.

• Fails Core Web Vitals for real visitors

  Real Chrome users on phones do not pass Google's Core Web Vitals on your site (28-day field data from the Chrome UX Report (opens in a new tab)). Google uses this in ranking.

• Real-user LCP: 4.0 s

  4.0 s

  Real visitors wait 4.0 s for the largest content to appear (75th percentile). Good is under 2.5 s.

• Largest content (LCP) got 128% slower for real visitors

  +128%

  Over the last 25 four-week periods to 2026-10-24, real Chrome visitors' largest content (lcp) went from 1.6 s to 3.9 s at the 75th percentile (Chrome UX Report (opens in a new tab) history).

• Real-user FCP: 1.8 s

  1.8 s

  Real visitors see the first content after 1.8 s (75th percentile). Good is under 1.8 s.

• Tap response (INP) held steady for real visitors

  +4%

  Over the last 25 four-week periods to 2026-10-24, real Chrome visitors' tap response (inp) went from 172 ms to 182 ms at the 75th percentile (Chrome UX Report (opens in a new tab) history).

• No H1 headline

  There is no <h1>, so neither visitors nor Google get a clear main headline.

• Title is short (4 characters)

  Your title is only 4 characters: “出光興産”. Between 30 and 65 characters leaves room to say what you do and for whom.

  View source

• No structured data

  No structured data (JSON-LD), so Google can't show rich results such as your logo, ratings or FAQs.

• No canonical URL

  No canonical URL, so duplicate versions of the homepage (with or without www, with tracking parameters) can split ranking signals.

• No XML sitemap

  No XML sitemap at https://www.idemitsu.com/sitemap.xml, so Google discovers your pages only by following links.

• No robots.txt

  There is no robots.txt at idemitsu.com/robots.txt, the first file search crawlers ask for.

• No X (Twitter) card tag

  No twitter:card tag. X falls back to Open Graph, which is set, so this is minor.

• 35 internal links, 5 external

  The homepage links to 35 pages on idemitsu.com and 5 external pages.

• No Organization structured data

  There is no Organization (or LocalBusiness) JSON-LD, so search engines and AI assistants have no machine-readable facts about who runs the site: its name, logo, profiles and contact details.

• 1 page without a meta description

  /jp/company/brandstory/index.html has no meta description, so Google writes the search snippet from whatever text it finds.

  Elements (1)

• 2 pages with very little text

  /jp/company/managementplan/index.html and /jp/company/brandstory/index.html have under 150 words in the HTML. Thin pages rarely rank; if the text loads with JavaScript, crawlers that don't run it see even less.

• 2 pages slow to respond

  /jp/company/managementplan/index.html and /jp/company/brandstory/index.html took over 3 s to send their HTML from our server.

• 15 internal pages checked

  We fetched 15 pages linked from your homepage (of 33 found) and read each the way a search engine does.

• No Content-Security-Policy

  No Content-Security-Policy header, the main browser-side defence against injected scripts.

• HTTP/1.1 only

  The server only offers HTTP/1.1, so browsers open several connections and load files more slowly. Most hosts and CDNs turn on HTTP/2 with a setting.

• No Referrer-Policy

  No Referrer-Policy header, so full URLs can leak to the sites you link to.

• No Permissions-Policy

  No Permissions-Policy header to switch off camera, microphone and location for embedded content.

• Deprecated X-XSS-Protection

  X-XSS-Protection is set to “1; mode=block”; the header is deprecated and can introduce bugs. Use 0 or remove it.

• No security.txt

  There is no /.well-known/security.txt telling researchers how to report a security problem to you.

• No CAA record

  idemitsu.com has no CAA record, so any certificate authority may issue a certificate for it. A CAA record naming your provider (for example letsencrypt.org) closes that door.

• DNSSEC is off

  idemitsu.com's DNS answers are not signed. DNSSEC stops attackers forging them to send visitors or email elsewhere; most registrars switch it on in a click, though most sites still run without it.

• No calls to action

  We found no call-to-action buttons or links (such as “Book a demo” or “Get a quote”) anywhere on the homepage.

• No social proof

  No testimonials, customer logos, ratings or customer counts on the homepage: nothing tells a new visitor that others already trust you.

• No direct contact details

  No phone number or email link on the homepage, so ready-to-buy visitors have one fewer way to reach you.

• Only about 15 words

  The homepage has only about 15 words of visible text; thin pages give Google and first-time buyers little to go on.

• No form on the homepage

  There is no form on the homepage, so every lead has to click through to another page first.

• No risk reducer

  No guarantee or risk reducer (money-back, free trial, no credit card) is mentioned, which is often what tips a hesitant visitor.

• DMARC is monitor-only (p=none)

  DMARC is set to p=none, so mail pretending to be idemitsu.com is still delivered. Reports are on, so moving to quarantine is the next step.

• Email authentication score: 70/100

  Email authentication: SPF record 25 points, plus 15 when it ends in -all (10 for ~all); DMARC record 25, plus 25 for a reject policy (15 for quarantine); a DKIM key on a common selector 10.