Website Technical Audit

chameleonhd.com

https://chameleonhd.com/
Download PDF

Executive summary

Missing recommended security headers: content-security-policy, x-frame-options, x-content-type-options, referrer-policy, permissions-policy. These harden the site against common attacks such as clickjacking and MIME sniffing.

64/100
Needs work

Score breakdown

SSL / TLS8/10
DNS6/8
Robots.txt1/3
Sitemap3/3
HTTP Security Headers1/6
Broken Links8/8
Redirects5/5
Forms1/6
Page Speed0/6
Mobile Rendering5/5
Accessibility0/5
Structured Data2/2
Cookies & Security3/3
Email Auth (SPF/DKIM/DMARC)5/5
HTTP/2 & HTTP/30/4
Compression & Cache6/6
Image Optimization0/5
Core Web Vitals10/10

Top findings

  1. 1.

    Missing HTTP security headers

    Missing recommended security headers: content-security-policy, x-frame-options, x-content-type-options, referrer-policy, permissions-policy. These harden the site against common attacks such as clickjacking and MIME sniffing.

  2. 2.

    JavaScript errors on a page with forms

    Console errors were captured on a page that contains forms. Script errors can prevent form validation or submission from working.

  3. 3.

    Large homepage size

    The homepage transfers roughly 10.5 MB. Heavy pages load slowly, especially on mobile networks.

  4. 4.

    Images missing alt text

    6 of 11 image(s) have no alt attribute.

  5. 5.

    Interactive controls without accessible names

    1 visible button(s) or link(s) have no accessible name (text, aria-label, or title).

Recommended fixes

  • MediumHTTP Security HeadersMissing HTTP security headers

    Missing recommended security headers: content-security-policy, x-frame-options, x-content-type-options, referrer-policy, permissions-policy. These harden the site against common attacks such as clickjacking and MIME sniffing.

    content-security-policy, x-frame-options, x-content-type-options, referrer-policy, permissions-policy
  • MediumFormsJavaScript errors on a page with forms

    Console errors were captured on a page that contains forms. Script errors can prevent form validation or submission from working.

    https://chameleonhd.com/signup

    Minified React error #418; visit https://react.dev/errors/418?args[]=text&args[]= for the full message or use the non-minified dev environment for full errors and additional helpful warnings.
  • MediumPage SpeedLarge homepage size

    The homepage transfers roughly 10.5 MB. Heavy pages load slowly, especially on mobile networks.

    https://chameleonhd.com/

  • MediumAccessibilityImages missing alt text

    6 of 11 image(s) have no alt attribute.

    https://chameleonhd.com/

  • MediumAccessibilityInteractive controls without accessible names

    1 visible button(s) or link(s) have no accessible name (text, aria-label, or title).

    https://chameleonhd.com/

  • MediumAccessibilityInteractive controls without accessible names

    2 visible button(s) or link(s) have no accessible name (text, aria-label, or title).

    https://chameleonhd.com/signup

  • MediumAccessibilityInteractive controls without accessible names

    1 visible button(s) or link(s) have no accessible name (text, aria-label, or title).

    https://chameleonhd.com/privacy-policy

  • MediumAccessibilityInteractive controls without accessible names

    1 visible button(s) or link(s) have no accessible name (text, aria-label, or title).

    https://chameleonhd.com/terms-and-conditions

  • MediumHTTP/2 & HTTP/3HTTP/2 and HTTP/3 not detected

    The server did not negotiate HTTP/2 (ALPN h2) and did not advertise HTTP/3 via Alt-Svc. Modern protocols improve multiplexing and latency.

    ALPN: http/1.1
  • MediumImage OptimizationOversized images served

    4 image(s) are much larger than their display size, wasting bandwidth.

    https://chameleonhd.com/

    https://chameleonhd.com/chameleon4.webp (784px → 35px)
    https://chameleonhd.com/cyberpunk-city-dawn.png (1376px → 500px)
    https://chameleonhd.com/boy-and-girl-fight.png (1376px → 500px)
    https://chameleonhd.com/travelling-paris.png (1376px → 500px)
  • LowSSL / TLSHSTS not enabled

    No Strict-Transport-Security header was found. HSTS prevents protocol downgrade attacks after the first HTTPS visit.

  • LowDNSNo IPv6 (AAAA) records

    The hostname has no AAAA records. Dual-stack (IPv4 + IPv6) improves reachability on modern networks.

    207.154.242.145
  • LowRobots.txtMissing robots.txt

    No robots.txt was found at the site root. A robots.txt file helps control crawler access to paths that should not be crawled.

  • LowPage SpeedJavaScript errors detected

    1 console error(s) were captured while loading the page.

    https://chameleonhd.com/signup

    Minified React error #418; visit https://react.dev/errors/418?args[]=text&args[]= for the full message or use the non-minified dev environment for full errors and additional helpful warnings.
  • LowImage OptimizationImages missing width/height attributes

    11 image(s) lack width/height attributes, which can contribute to layout shift (CLS).

    https://chameleonhd.com/

Screenshots

Chameleon HD service

Desktop
Desktop screenshot of https://chameleonhd.com/
Mobile
Mobile screenshot of https://chameleonhd.com/

Chameleon HD service

Desktop
Desktop screenshot of https://chameleonhd.com/signup
Mobile
Mobile screenshot of https://chameleonhd.com/signup

Chameleon HD Privacy Policy

Desktop
Desktop screenshot of https://chameleonhd.com/privacy-policy
Mobile
Mobile screenshot of https://chameleonhd.com/privacy-policy

Chameleon HD Terms and Conditions

Desktop
Desktop screenshot of https://chameleonhd.com/terms-and-conditions
Mobile
Mobile screenshot of https://chameleonhd.com/terms-and-conditions

Pages audited

  • https://chameleonhd.com/HTTP 200
  • https://chameleonhd.com/signupHTTP 200
  • https://chameleonhd.com/privacy-policyHTTP 200
  • https://chameleonhd.com/terms-and-conditionsHTTP 200

Want to go deeper on your report? Get in touch at admin@fiksudesign.fi.