450 Heartbeats GmbH

What Dr Urls found on 450heartbeats.com

From the audit of their public home page on 22/10/2026, worst first. Each links to what it means and how it is fixed.

• medium
  Duplicate ID attributes found

  Duplicate IDs cause label elements, aria-labelledby, aria-describedby, and fragment link targets to associate with the wrong element.

• low
  Duplicate heading text on same page

  Duplicate headings reduce the uniqueness and semantic clarity of the page structure.

• low
  Excessive inline CSS

  Inline CSS cannot be cached separately by the browser, so it is re-downloaded with every page load.

• low
  Excessive inline JavaScript

  Inline JavaScript cannot be cached by the browser and must be parsed and executed every time the page loads.

• low
  Image has empty alt attribute

  If a content-relevant image has an empty alt attribute, search engines cannot understand what the image depicts, and it will not appear in image search results.

• low
  JavaScript files are not minified

  JavaScript is the most expensive resource type per byte because it must be downloaded, parsed, compiled, and executed.

• low
  Key resources not preloaded

  Without preloading, the browser discovers critical resources late in the parsing process, delaying their download.

• low
  Missing preconnect hints for critical origins

  Each new origin connection requires DNS resolution, TCP handshake, and TLS negotiation, adding 100-300ms of latency.

• low
  Title tag is too long

  Truncated titles hide important information and can reduce click-through rates.

• low
  X-Content-Type-Options header missing

  Without this header, browsers may interpret files as a different content type than intended, which can lead to XSS attacks when a malicious file is interpreted as executable scrip…

7 security findings are not listed on this public page; the site's owner sees them in a full audit after claiming it.