Made By Unfold

What Dr Urls found on madebyunfold.co

From the audit of their public home page on 21/10/2026, worst first. Each links to what it means and how it is fixed.

• high
  Cacheable response sets a cookie, so no CDN will cache it

  The two headers contradict each other, and the contradiction is silent: the page looks cached, the CDN is configured, and every request still pays full origin latency.

• medium
  Above-fold images not prioritized

  The Largest Contentful Paint (LCP) element is often a hero image.

• medium
  Form inputs missing autocomplete attribute

  WCAG 1.3.5 requires input purpose to be programmatically determined for inputs collecting user information.

• medium
  Images missing width and height attributes

  Missing image dimensions are the leading cause of Cumulative Layout Shift (CLS), a Core Web Vital and ranking factor.

• medium
  Link has malformed or empty href

  Malformed links cannot pass link equity and waste crawl budget when search engines attempt to follow them.

• medium
  Render-blocking CSS or JavaScript

  Render-blocking resources directly impact First Contentful Paint (FCP) and Largest Contentful Paint (LCP), both Core Web Vitals metrics.

• medium
  Scripts without async or defer

  Synchronous scripts halt HTML parsing while the browser downloads and executes them.

• medium
  Stylesheets loaded in body

  Stylesheets in the body block rendering of subsequent content and can cause visible layout shifts as styles are applied incrementally.

• low
  Below-the-fold images not lazy loaded

  Loading all images immediately increases initial page weight and competes with critical resources for bandwidth.

• low
  CSS files are not minified

  Unminified CSS files are larger than necessary, increasing download time and delaying rendering.

• low
  Data table missing caption

  Table captions help all users (including screen reader users) understand the purpose and context of the table before navigating its contents.

• low
  ETag header missing on resources

  Without ETags, browsers cannot efficiently validate whether cached resources have changed.

And 8 more. 6 security findings are not listed on this public page; the site's owner sees them in a full audit after claiming it.