New York Capital Technologies, LLC

What Dr Urls found on nycapitaltech.com

From the audit of their public home page on 10/11/2026, worst first. Each links to what it means and how it is fixed.

• high
  Cacheable response sets a cookie, so no CDN will cache it

  The two headers contradict each other, and the contradiction is silent: the page looks cached, the CDN is configured, and every request still pays full origin latency.

• medium
  Form inputs missing autocomplete attribute

  WCAG 1.3.5 requires input purpose to be programmatically determined for inputs collecting user information.

• medium
  Images missing width and height attributes

  Missing image dimensions are the leading cause of Cumulative Layout Shift (CLS), a Core Web Vital and ranking factor.

• medium
  Missing meta description

  While meta descriptions are not a direct ranking factor, they significantly influence click-through rates.

• medium
  Open Graph og:image tag missing

  Social media posts with images receive significantly more engagement than text-only posts.

• medium
  Render-blocking CSS or JavaScript

  Render-blocking resources directly impact First Contentful Paint (FCP) and Largest Contentful Paint (LCP), both Core Web Vitals metrics.

• medium
  Scripts without async or defer

  Synchronous scripts halt HTML parsing while the browser downloads and executes them.

• medium
  Too many external CSS stylesheets

  Multiple CSS files multiply HTTP requests and increase the total blocking time before the page can render.

• low
  Apple touch icon missing

  The apple-touch-icon provides a branded icon when users bookmark your site on iOS devices.

• low
  Broken heading hierarchy

  Heading hierarchy provides a semantic outline of the page content.

• low
  CSS files are not minified

  Unminified CSS files are larger than necessary, increasing download time and delaying rendering.

• low
  Duplicate heading text on same page

  Duplicate headings reduce the uniqueness and semantic clarity of the page structure.

And 19 more. 6 security findings are not listed on this public page; the site's owner sees them in a full audit after claiming it.