MGT-COMMERCE GmbH | Magento Hosting | free web hosting control panel

What Dr Urls found on mgt-commerce.com

From the audit of their public home page on 23/10/2026, worst first. Each links to what it means and how it is fixed.

• high
  Links implemented with JavaScript only

  While Google can execute JavaScript, it does not always follow JavaScript-based navigation.

• medium
  Button has no accessible text

  Buttons without accessible text are announced as just 'button' by screen readers, making them impossible to identify and use for visually impaired users.

• medium
  Cache-Control header missing

  Proper caching prevents browsers from re-downloading unchanged resources, dramatically improving repeat visit performance.

• medium
  Duplicate ID attributes found

  Duplicate IDs cause label elements, aria-labelledby, aria-describedby, and fragment link targets to associate with the wrong element.

• medium
  Images missing width and height attributes

  Missing image dimensions are the leading cause of Cumulative Layout Shift (CLS), a Core Web Vital and ranking factor.

• medium
  Render-blocking CSS or JavaScript

  Render-blocking resources directly impact First Contentful Paint (FCP) and Largest Contentful Paint (LCP), both Core Web Vitals metrics.

• medium
  Scripts without async or defer

  Synchronous scripts halt HTML parsing while the browser downloads and executes them.

• medium
  Too many external CSS stylesheets

  Multiple CSS files multiply HTTP requests and increase the total blocking time before the page can render.

• low
  ETag header missing on resources

  Without ETags, browsers cannot efficiently validate whether cached resources have changed.

• low
  Link is named for screen readers but has no anchor text

  Nothing is broken for users.

• low
  Missing preconnect hints for critical origins

  Each new origin connection requires DNS resolution, TCP handshake, and TLS negotiation, adding 100-300ms of latency.

• low
  X-Content-Type-Options header missing

  Without this header, browsers may interpret files as a different content type than intended, which can lead to XSS attacks when a malicious file is interpreted as executable scrip…

6 security findings are not listed on this public page; the site's owner sees them in a full audit after claiming it.