Applied Blockchain

What Dr Urls found on appliedblockchain.com

From the audit of their public home page on 09/11/2026, worst first. Each links to what it means and how it is fixed.

• high
  Cacheable response sets a cookie, so no CDN will cache it

  The two headers contradict each other, and the contradiction is silent: the page looks cached, the CDN is configured, and every request still pays full origin latency.

• high
  Missing landmark elements

  WCAG 1.3.1 requires that page structure is programmatically determinable.

• high
  Time to First Byte (TTFB) is slow

  TTFB directly impacts all subsequent loading metrics.

• medium
  Form inputs missing associated labels

  Unlabelled form fields are unusable for screen reader users, who represent a significant portion of potential customers.

• medium
  Form inputs missing autocomplete attribute

  WCAG 1.3.5 requires input purpose to be programmatically determined for inputs collecting user information.

• medium
  Images missing width and height attributes

  Missing image dimensions are the leading cause of Cumulative Layout Shift (CLS), a Core Web Vital and ranking factor.

• medium
  Missing skip-to-content navigation link

  WCAG 2.4.1 requires a way to bypass blocks repeated on every page.

• medium
  Render-blocking CSS or JavaScript

  Render-blocking resources directly impact First Contentful Paint (FCP) and Largest Contentful Paint (LCP), both Core Web Vitals metrics.

• medium
  Tap targets too small or too close together

  Small or crowded tap targets cause accidental taps, frustrating mobile users and increasing bounce rates.

• low
  Below-the-fold images not lazy loaded

  Loading all images immediately increases initial page weight and competes with critical resources for bandwidth.

• low
  Excessive inline CSS

  Inline CSS cannot be cached separately by the browser, so it is re-downloaded with every page load.

• low
  Images missing responsive srcset

  Without srcset, a 1200px wide image is downloaded on a 375px wide mobile screen, wasting bandwidth and slowing load times.

And 3 more. 7 security findings are not listed on this public page; the site's owner sees them in a full audit after claiming it.