ben10fingersclub.com

Standards-mode <!doctype html> present.

<html> declares a language.

Character encoding declared.

Responsive viewport meta present.

Page has a non-empty <title>.

Meta description present.

No rel="canonical" — risks duplicate-content dilution.

No favicon/app-icon links found.

No theme-color — mobile browser UI will not match your brand.

No color-scheme — form controls and scrollbars will not adapt to dark mode.

Open Graph tags present.

No feed discovery link found — only relevant if the site publishes a feed.

Feed content quality cannot be assessed from a page scan.

No popover attributes — only applies if the page has popovers/menus.

No robots.txt found at the site root.

No sitemap.xml found and none referenced in robots.txt.

No sitemap index — only needed once you exceed 50k URLs / 50MB.

No image/video sitemap extensions detected.

URL path is clean and readable.

http:// redirects to https with a 3xx status.

Nonexistent paths return a real 404/410.

Indexing is not being blocked by robots meta / X-Robots-Tag.

Exactly one <h1> heading.

4 internal links found.

No JSON-LD — add schema.org structured data for rich results.

No breadcrumb structured data or navigation found.

IndexNow integration cannot be detected from a page scan.

Colour contrast requires rendering analysis — review with an automated contrast checker.

All 5 images declare alt text.

No form fields requiring labels.

Keyboard operability needs interactive testing.

Focus-indicator visibility needs rendering review.

No skip link — keyboard users must tab through the nav on every page.

Only 2/4 core landmarks found — add <main>, <nav>, <header>, <footer>.

No obvious ARIA misuse, but full review needs assistive-tech testing.

Link-text quality needs manual review.

No empty links or buttons detected.

Form-error accessibility needs interactive testing.

Document language is declared.

No inline prefers-reduced-motion rule — verify external CSS respects reduced motion.

No accessibility-overlay widget detected.

No audio/video requiring captions.

No data tables on the page.

Touch-target sizing needs rendering measurement.

Not used — only relevant for collapsible/accordion content.

Could not confirm use of native interactive elements.

CSS selector strategy needs source review.

Page is served over HTTPS.

No Strict-Transport-Security header — browsers will not enforce HTTPS.

No CSP header — the page has no defence-in-depth against injected scripts.

No /.well-known/security.txt — researchers have no disclosure contact.

No X-Content-Type-Options: nosniff — browsers may MIME-sniff responses.

No frame-ancestors or X-Frame-Options — the page can be framed for clickjacking.

No Referrer-Policy — full URLs may leak to third parties.

No Permissions-Policy — powerful browser features are not locked down.

No cross-origin scripts requiring SRI.

No cookies set on the document response.

CAA records are not collected by the scanner — check your DNS provider.

DNSSEC status is not collected by the scanner.

No /.well-known/ resources found.

No change-password redirect — recommended if the site has accounts.

Not present — only relevant for OIDC identity providers.

Not present — recommended if the site exposes public APIs.

Not present — only relevant for federated identity.

Not present — only needed for iOS Universal Links.

Not present — only needed for Android App Links.

Not present — only relevant for Fediverse servers.

Not present — optional prefetch-proxy control file.

No agent-readiness signals (no llms.txt, no structured data).

No /llms.txt — agents have no curated map of your key content.

No /llms-full.txt — optional full-content variant.

No Markdown source endpoint detected — recommended for content/doc sites.

robots.txt has no explicit AI-crawler rules — state your stance on GPTBot/ClaudeBot/etc.

No Content-Signal directives — optional usage-preference signalling.

Web Bot Auth support cannot be detected from a scan.

URL has no obvious session/volatile parameters.

No structured data — agents must scrape prose instead of reading typed facts.

No machine-readable alternates detected — recommended for listings/data pages.

No HTTP Link header — recommended to surface related resources to agents.

No MCP/tool discovery endpoint — optional.

No A2A agent card — optional.

Agent Skills discovery cannot be detected automatically.

DNS-AID records are not collected by the scanner.

NLWeb support cannot be detected automatically.

WebMCP support cannot be detected automatically.

Schemamap support cannot be detected automatically.

Lab load completed in 2159ms (a proxy). Confirm LCP/INP/CLS with field data.

None of 2 raster images use WebP/AVIF — convert from PNG/JPEG.

No loading="lazy" on images/iframes — below-the-fold media loads eagerly.

No resource hints — preconnect to critical origins and preload the LCP asset.

No Cache-Control header on the document — set explicit caching for HTML and assets.

Not set — optional; helps cache/prefetch URLs that differ only by tracking params.

Document is compressed (br).

No inline font-display/preload — ensure web fonts use font-display: swap to avoid invisible text.

0 render-blocking stylesheet(s) in <head>.

No external blocking scripts.

Protocol version not captured — verify HTTP/2/3 is enabled at your edge/CDN.

No Speculation Rules — optionally prerender/prefetch likely next pages.

No resource hints found on the page.

No View Transitions detected — optional polish for navigations.

BFCache eligibility needs runtime testing.

No content-visibility detected — optional offscreen-render optimisation.

No CSS containment detected — optional.

Not detected — optional.

No scrollbar-gutter — optional; prevents layout shift when scrollbars toggle.

No privacy policy link found — link one from every page (usually the footer).

No consent manager detected (and no document cookies) — required if you set non-essential cookies.

GPC handling is server-side and cannot be confirmed from a scan.

No third-party scripts detected.

No analytics detected, or an unrecognised provider.

Data-minimisation practices need a manual review of forms and backend.

Missing pages return 404 with a substantial (likely custom) error page.

Maintenance behaviour can only be observed during downtime.

No service worker detected — optional offline/PWA support.

No <link rel="manifest"> — add a web app manifest for installability.

Monitoring is operational and cannot be detected from the page.