Valon Cengaj - Freelance Web Developer

What Dr Urls found on qevalon.com

From the audit of their public home page on 23/10/2026, worst first. Each links to what it means and how it is fixed.

• medium
  Cache-Control header missing

  Proper caching prevents browsers from re-downloading unchanged resources, dramatically improving repeat visit performance.

• medium
  Text resources not compressed

  Uncompressed text resources unnecessarily increase page load time and bandwidth consumption.

• low
  Duplicate heading text on same page

  Duplicate headings reduce the uniqueness and semantic clarity of the page structure.

• low
  ETag header missing on resources

  Without ETags, browsers cannot efficiently validate whether cached resources have changed.

• low
  Excessive inline CSS

  Inline CSS cannot be cached separately by the browser, so it is re-downloaded with every page load.

• low
  Images missing responsive srcset

  Without srcset, a 1200px wide image is downloaded on a 375px wide mobile screen, wasting bandwidth and slowing load times.

• low
  Images not using modern format

  WebP images are 25-35% smaller than equivalent JPEG images, and AVIF offers even greater savings.

• low
  Link is named for screen readers but has no anchor text

  Nothing is broken for users.

• low
  Missing preconnect hints for critical origins

  Each new origin connection requires DNS resolution, TCP handshake, and TLS negotiation, adding 100-300ms of latency.

• low
  Title tag is too long

  Truncated titles hide important information and can reduce click-through rates.

• low
  X-Content-Type-Options header missing

  Without this header, browsers may interpret files as a different content type than intended, which can lead to XSS attacks when a malicious file is interpreted as executable scrip…

8 security findings are not listed on this public page; the site's owner sees them in a full audit after claiming it.