lspace.com website review

Not measured in this review.

• Fails Core Web Vitals for real visitors

  Real Chrome users on phones do not pass Google's Core Web Vitals on your site (28-day field data from the Chrome UX Report (opens in a new tab)). Google uses this in ranking.

• Real-user LCP: 4.3 s

  4.3 s

  Real visitors wait 4.3 s for the largest content to appear (75th percentile). Good is under 2.5 s.

• Real-user CLS: 0.33

  0.33

  For real visitors the layout shifts by 0.33 (75th percentile). Good is under 0.1.

• Real-user FCP: 4.0 s

  4.0 s

  Real visitors see the first content after 4.0 s (75th percentile). Good is under 1.8 s.

• Real-user INP: 212 ms

  212 ms

  Real visitors wait 212 ms for the page to respond to a tap (75th percentile). Good is under 200 ms.

• Tap response (INP) held steady for real visitors

  -1%

  Over the last 25 four-week periods to 2026-10-31, real Chrome visitors' tap response (inp) went from 214 ms to 211 ms at the 75th percentile (Chrome UX Report (opens in a new tab) history).

• Page weight: 4.4 MB

  4.4 MB

  Your homepage downloads 4.4 MB on a phone, 1.2 MB of it images (27%). Under 2 MB keeps phones on slow connections fast.

• An image on the first screen is lazy-loaded

  TripleImage_Mobile2_f6fc6c44-ffdf-4a4f-8b8f-9f451aee13d3.jpg is on the first screen but marked loading="lazy", so the browser waits before fetching it and the page looks finished later. Load it eagerly (and give it fetchpriority="high" if it is the main image).

  Elements (1)

• 4 images below the first screen load straight away

  4 images further down the page (110 KiB) download before anyone scrolls to them. Adding loading="lazy" lets the first screen load first.

  Elements (4)

• About 1.2 g of CO₂ per visit

  1.24 g

  By the Sustainable Web Design model, a visit to your homepage emits about 1.24 g of CO₂e: 148.6 kg a year at 10,000 visits a month. It scales with page weight, so every byte cut lowers it.

• 4 text elements with low contrast

  4 text elements don't have enough contrast against the background to read easily, especially outdoors on a phone.

  Elements (3)

• 2 tap targets too small

  2 tap targets are too small or too close together to hit reliably with a finger.

  Elements (2)

• All page content should be contained by landmarks (24 elements)

  All page content should be contained by landmarks: 24 elements on the page fail this check, rated moderate by axe-core.

  Elements (3)

• 20 links without text

  20 visible links have no text or label, so screen readers cannot say where they go.

  Elements (2)

• 5 form fields without a label

  5 form fields have no label, so screen readers announce an empty box and autofill guesses.

  View source

• Headings skip levels

  Headings skip levels (h2 → h5), which makes the page harder to scan with a screen reader.

• Structured data has 1 problem

  Structured data found (BreadcrumbList, Organization and WebSite) but with 1 problem, for example “WebSite: missing name”.

  View source

• Open Graph partly set

  Open Graph is missing og:title and og:description, so shared links fall back to guesses.

  View source

• No X (Twitter) card tag

  No twitter:card tag. X falls back to Open Graph, which is incomplete here.

• 334 internal links, 5 external

  The homepage links to 334 pages on lspace.com and 5 external pages.

• 2 pages without a meta description

  /apps/iwish and /pages/swim-shop have no meta description, so Google writes the search snippet from whatever text it finds.

  Elements (2)

• 15 pages without an H1

  /collections/holiday-romance, /collections/cozy-season, /apps/iwish, /collections/the-holiday-shop, /collections/merry-and-bright and /collections/gifts-under-100 and 9 others have no <h1> headline, so visitors and search engines get no clear main topic.

• 4 pages with very little text

  /collections/merry-and-bright, /collections/new-arrivals, /collections/sol-di-mar and /collections/everyday-by-lspace have under 150 words in the HTML. Thin pages rarely rank; if the text loads with JavaScript, crawlers that don't run it see even less.

• 15 internal pages checked

  We fetched 15 pages linked from your homepage (of 114 found) and read each the way a search engine does.

• 47 small tap targets

  47 of 124 tappable elements near the top of the page are smaller than 24 px, hard to hit with a thumb.

• 4 JavaScript errors while loading

  4 errors were logged to the browser console while the page loaded, for example “Failed to load resource: net::ERR_FAILED”.

• Short HSTS lifetime

  HSTS is set, but max-age is 91 days; one year is the recommended minimum.

• No Referrer-Policy

  No Referrer-Policy header, so full URLs can leak to the sites you link to.

• No Permissions-Policy

  No Permissions-Policy header to switch off camera, microphone and location for embedded content.

• Deprecated X-XSS-Protection

  X-XSS-Protection is set to “1; mode=block”; the header is deprecated and can introduce bugs. Use 0 or remove it.

• No security.txt

  There is no /.well-known/security.txt telling researchers how to report a security problem to you.

• Domain expires in 36 days

  lspace.com is registered until Dec 2026. Make sure auto-renew is on and the card on file is current.

• DNSSEC is off

  lspace.com's DNS answers are not signed. DNSSEC stops attackers forging them to send visitors or email elsewhere; most registrars switch it on in a click, though most sites still run without it.

• Thin social proof

  Social proof on the homepage: 9 customer or partner logos. Pairing it with named testimonials or customer logos makes it far more convincing.

• No direct contact details

  No phone number or email link on the homepage, so ready-to-buy visitors have one fewer way to reach you.

• No risk reducer

  No guarantee or risk reducer (money-back, free trial, no credit card) is mentioned, which is often what tips a hesitant visitor.

• About 373 words of copy

  The homepage carries about 373 words of visible text.

• Email authentication score: 95/100

  Email authentication: SPF record 25 points, plus 15 when it ends in -all (10 for ~all); DMARC record 25, plus 25 for a reject policy (15 for quarantine); a DKIM key on a common selector 10.

• 6 trackers load before any consent

  6

  Before a visitor clicks anything, the page loads Google Tag Manager, Hotjar, Klaviyo, Pinterest Tag and The Trade Desk and 1 more (measured from a US location before any click). A consent tool (OneTrust) is installed; check it blocks these until visitors agree where the law requires it.

• 18 cookies set on arrival

  18

  Opening the homepage sets 18 cookies (measured from a US location before any click).

• 66 other companies contacted

  Loading the homepage contacts 66 hosts run by other companies (fonts, scripts, analytics, ads), each of which sees the visitor's IP address.