WQI.web​qualityindex
Method v1.1.0 85 live / 86 total factors methodology

/ / d / freshcoatweb.com

freshcoatweb.com

53 / 100
overall · band: medium
scanned2026-04-26 23:23:42Z
methodv0.1 — 2026-04-25
verdicts29 pass 4 warn 39 fail 14 n/a
rescan
writes a fresh score to the registry

Categories

Security47/ 100 · 9 measured
Performance70/ 100 · 9 measured
SEO43/ 100 · 7 measured
AI-readiness25/ 100 · 4 measured
Privacy33/ 100 · 6 measured
Accessibility78/ 100 · 5 measured
Brand presence12/ 100 · 16 measured
Email health61/ 100 · 16 measured

Site facts

Snapshot date
2026-04-26
Factors scored
72 / 86
Composite score
53/100
Method version
v0.1 — 2026-04-25

Security· 47/100

#FactorVerdictScoreEvidence
4Security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy, X-Content-Type-Options)warn70security_headers_score=70, missing=Content-Security-Policy|X-XSS-Protection
5SSL certificate validity & expiration windown/a—Scoring not yet implemented
6WordPress REST API user enumeration exposurepass100not_wordpress
7Sensitive path exposure (.git, .env, /admin, xmlrpc.php, wp-login.php)pass100total_checked=6
22DNSSEC validationfail0ds_present=false, ad_bit=false
23CAA recordsfail0records=\# 22 00 05 69 73 73 75 65 6c 65 74 73 65 6e 63 72 79 70 74 2e 6f 72 67|\# 15 00 05 69 73 73 75 65 70 6b 69 2e 67 6f 6f 67|\# 18 00 05 69 73 73 75 65 73 65 63 74 69 67 6f 2e 63 6f 6d, has_issue=false, has_iodef=false
26HSTS preload list inclusionfail30hsts_header=max-age=63072000; includeSubDomains; preload, preload_status=unknown
27TLS minimum version & cipher suite qualityfail20status=READY, grades=T, worst=T
28Subdomain takeover surfacepass100findings={"subdomain":"mail.freshcoatweb.com","cname":"mail.experialstudio.com.","dangling":false}, dangling_count=0
29Spam / phishing blocklist presencefail0listed=true, response_code=0, answers=127.255.255.254

Performance· 70/100

#FactorVerdictScoreEvidence
8Mobile PageSpeed score + Core Web Vitals (LCP, FCP, CLS)pass80performance_score=76, lcp_ms=3726.5, cls=0, components={"perf":76,"lcp":70,"cls":100}
9HTTP/2 supportn/a—Scoring not yet implemented
10Compression (Brotli / gzip)pass100perf_compression=br
30HTTP/3 supportfail0supports_h3=false
31IPv6 supportfail0aaaa_count=0
32Image optimization (WebP/AVIF)pass100id=image-delivery-insight, lighthouse_score=1
33Desktop PageSpeed scoren/a—Scoring not yet implemented
34Core Web Vitals from CrUX (Real User Monitoring)n/a—Scoring not yet implemented
35Lazy loading on below-fold imagespass100id=image-delivery-insight, lighthouse_score=1
36Font loading strategy (FOUT/FOIT/swap)pass100id=font-display-insight, lighthouse_score=1
37Total homepage byte weightpass100html_bytes=83179, subresource_bytes=282, total_bytes=83461, total_kb=82, sampled=15, total_refs=15
38Largest unused JavaScript bundlewarn50deferred_scripts=12, sample=/_next/static/chunks/966935ce33be230b.js?dpl=dpl_HND8C3xPezJ7Rxwe9vsG2SmQTgxL|/_next/static/chunks/4c1b1e9d4e60ae1d.js?dpl=dpl_HND8C3xPezJ7Rxwe9vsG2SmQTgxL|/_next/static/chunks/f2f58a7e93290fbb.js?dpl=dpl_HND8C3xPezJ7Rxwe…

SEO· 43/100

#FactorVerdictScoreEvidence
11Title, meta description, OG, Twitter cards, canonicalpass100title=true, description=true, og=true, twitter=true, canonical=true
12Schema.org structured data presencefail0structured_data_absent
13H1 tag presencefail0h1_count=0
14Sitemap.xml + robots.txt presencepass100has_robots_txt=true, has_sitemap=true
39Schema.org type validity (parsed JSON-LD)n/a—Scoring not yet implemented
40Breadcrumb schemafail0present=false
41FAQ / HowTo schema (where applicable)n/a—n/a — not_applicable
42hreflang for multi-language sitesn/a—n/a — single_language
43Internal link depth (clicks from homepage to deepest content)pass100max_depth=1, pages_fetched=1, pages_seen=2, capped_at=50
61Better Business Bureau accreditationfail0no_link_on_site

AI-readiness· 25/100

#FactorVerdictScoreEvidence
15llms.txt presencefail0has_llms_txt=false
16AI crawler robots.txt directivespass100robots_ai_blocked_count=0
44AI plugin manifest (.well-known/ai-plugin.json)fail0status=404
45JSON-LD richness score for LLMsfail0org_complete=false, has_address=false, has_contact_point=false, has_same_as=false, has_content_type=false, breakdown={"coreOrg":0,"contact":0,"sameAs":0,"contentType":0}

Privacy· 33/100

#FactorVerdictScoreEvidence
46Cookie banner presence + CMP detectionfail0banner_detected=false
47Privacy policy page presencefail0found=false
48Terms of service page presencefail0found=false
49Third-party tracker countpass100count=0
50CCPA "Do Not Sell or Share My Personal Information" linkfail0found=false
51Cookie scan — actual cookies set on first loadpass100count=0, with_cmp=false

Accessibility· 78/100

#FactorVerdictScoreEvidence
52Accessibility statement pagefail0found=false
53axe-core / WAVE accessibility scanpass95accessibility_category=0.95
54Image alt text coveragen/a—Scoring not yet implemented
55Heading hierarchy validitypass100lighthouse_score=1
56Color contrast (WCAG AA)pass100lighthouse_score=1, failing_count=0
57ARIA labels presence and validitypass93total_aria_audits=22, applicable=14, passing=13, failing=aria-input-field-name
58Skip-to-content linkn/a—Scoring not yet implemented

Brand presence· 12/100

#FactorVerdictScoreEvidence
17Domain age (RDAP / WHOIS)fail20domain_age_years=0.2
18Wayback Machine site age & last snapshotn/a—Scoring not yet implemented
19Google Business Profile presence + ratingfail0found=false
20News mentions in last 30 daysfail20news_mentions_count=0
21Wikipedia entityfail0found=false
59Yelp presence + rating + review countfail0no_link_on_site
60Trustpilot presence + ratingfail0no_link_on_site
62LinkedIn Company Page (presence + employee count + follower count)fail0no_link_on_site
63Bing Placesn/a—n/a — no_public_url_convention
64Apple Maps presence (Apple Business Connect)fail0no_link_on_site
65Facebook Page presencefail0no_link_on_site
66Instagram presence (link from site → IG profile)fail0no_link_on_site
67Web App Manifest (manifest.json)n/a—Scoring not yet implemented
68Service Worker / PWA capabilityn/a—Scoring not yet implemented
69Analytics tools detectedfail0count=0
70Payment processors detectedn/a—n/a — no_payment_detected
71Marketing automation tools detectedfail0count=0
72Customer support tools detectedfail0count=0
73Tag manager presencewarn50count=0
74Ad networks detectedpass100count=0
83Visible contact form on sitefail0detected=false, count=0

Email health· 61/100

#FactorVerdictScoreEvidence
1DMARC enforcementpass100present=true, policy=reject
2DKIM signingfail0present=false
3SPF record present and validpass100present=true, raw="v=spf1 ip4:143.198.54.110 mx ~all", qualifier=softfail
24MTA-STS & TLS-RPTpass100sts_txt=v=STSv1; id=20260219T063231, tls_rpt=v=TLSRPTv1; rua=mailto:tlsreports@freshcoatweb.com, policy_ok=true
25BIMI + VMCfail0no_bimi
75Branded domain email address (vs free Gmail/Yahoo)pass100branded=true, provider=generic
76Email provider class (Workspace / 365 / Zoho / self-hosted / shared)warn70provider=unclassified_enterprise, mx=mail.experialstudio.com, source=mx_classifier
77DMARC aggregate reporting enabled (rua=)pass100has_dmarc_reporting=true, audit_flag=true, derived_from_raw=true, source=derived_from_raw, dmarc_raw="v=DMARC1;p=reject;rua=mailto:dmarcreports@freshcoatweb.com!10m"
78Free-email exposure on contact page (gmail/yahoo/outlook visible)pass100Scored
79Newsletter signup form detectedfail0detected=false
80Email Service Provider (ESP) detectedfail0Scored
81Transactional email provider detected (from SPF includes)fail0Scored
82SPF lookup count (10-limit deliverability check)pass100lookups=1, limit=10
84Mailto: direct contact link presentpass100addresses=hello@freshcoatweb.com|hello@freshcoatweb.com|hello@freshcoatweb.com, branded=hello@freshcoatweb.com|hello@freshcoatweb.com|hello@freshcoatweb.com
85Email forwarding service detected (improvmx, forwardemail, etc.)pass100hosts=mail.experialstudio.com, kind=unknown
86Lead magnet / signup incentive detected (free download, ebook, etc.)fail0detected=false

Scores are computed under method v0.1 — 2026-04-25. See the methodology for the full factor list and per-factor specifications.