/ / d / peninsulaepoxy.com

peninsulaepoxy.com

39 / 100

overall · band: low

scanned2026-04-26 23:23:52Z

methodv0.1 — 2026-04-25

verdicts21 pass 5 warn 45 fail 15 n/a

rescanwrites a fresh score to the registry

Site facts

#	Factor	Verdict	Score	Evidence
4	Security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy, X-Content-Type-Options)	fail	35	security_headers_score=35, missing=Content-Security-Policy\|X-Frame-Options\|Referrer-Policy\|Permissions-Policy\|X-XSS-Protection
5	SSL certificate validity & expiration window	n/a	—	Scoring not yet implemented
6	WordPress REST API user enumeration exposure	pass	100	not_wordpress
7	Sensitive path exposure (.git, .env, /admin, xmlrpc.php, wp-login.php)	pass	100	total_checked=6
22	DNSSEC validation	fail	0	ds_present=false, ad_bit=false
23	CAA records	fail	0	has_issue=false, has_iodef=false
26	HSTS preload list inclusion	fail	0	hsts_header=max-age=31556952, preload_status=unknown
27	TLS minimum version & cipher suite quality	n/a	—	Scoring not yet implemented
28	Subdomain takeover surface	pass	100	findings={"subdomain":"www.peninsulaepoxy.com","cname":"cdn1.wixdns.net.","dangling":false}, dangling_count=0
29	Spam / phishing blocklist presence	fail	0	listed=true, response_code=0, answers=127.255.255.254

#	Factor	Verdict	Score	Evidence
8	Mobile PageSpeed score + Core Web Vitals (LCP, FCP, CLS)	warn	63	performance_score=62, lcp_ms=5623.3977736136185, cls=0.004985, components={"perf":62,"lcp":30,"cls":100}
9	HTTP/2 support	pass	100	perf_http2=true
10	Compression (Brotli / gzip)	pass	100	perf_compression=br
30	HTTP/3 support	pass	100	source=alt_svc, alt_svc=h3=":443"; ma=2592000, supports_h3=true
31	IPv6 support	fail	0	aaaa_count=0
32	Image optimization (WebP/AVIF)	fail	30	id=image-delivery-insight, lighthouse_score=0, displayValue=Est savings of 45 KiB
33	Desktop PageSpeed score	n/a	—	Scoring not yet implemented
34	Core Web Vitals from CrUX (Real User Monitoring)	n/a	—	Scoring not yet implemented
35	Lazy loading on below-fold images	fail	40	id=image-delivery-insight, lighthouse_score=0, displayValue=Est savings of 45 KiB
36	Font loading strategy (FOUT/FOIT/swap)	fail	0	id=font-display-insight, lighthouse_score=0
37	Total homepage byte weight	pass	100	html_bytes=477363, subresource_bytes=0, total_bytes=477363, total_kb=466, sampled=0, total_refs=0
38	Largest unused JavaScript bundle	warn	50	deferred_scripts=8, sample=https://browser.sentry-cdn.com/7.120.3/modulemetadata.es5.min.js\|https://static.parastorage.com/unpkg/react-dom@18.3.1/umd/react-dom.production.min.js\|https://static.parastorage.com/unpkg/lodash@4.17.21/lodash.min.js\|https…

#	Factor	Verdict	Score	Evidence
11	Title, meta description, OG, Twitter cards, canonical	fail	0	title=false, description=false, og=false, twitter=false, canonical=false
12	Schema.org structured data presence	fail	0	structured_data_absent
13	H1 tag presence	fail	0	h1_count=0
14	Sitemap.xml + robots.txt presence	pass	100	has_robots_txt=true, has_sitemap=true
39	Schema.org type validity (parsed JSON-LD)	n/a	—	Scoring not yet implemented
40	Breadcrumb schema	fail	0	present=false
41	FAQ / HowTo schema (where applicable)	n/a	—	n/a — not_applicable
42	hreflang for multi-language sites	n/a	—	n/a — single_language
43	Internal link depth (clicks from homepage to deepest content)	pass	100	max_depth=1, pages_fetched=4, pages_seen=5, capped_at=50
61	Better Business Bureau accreditation	fail	0	no_link_on_site

#	Factor	Verdict	Score	Evidence
15	llms.txt presence	pass	100	has_llms_txt=true, size_bytes=2678
16	AI crawler robots.txt directives	pass	100	robots_ai_blocked_count=0
44	AI plugin manifest (.well-known/ai-plugin.json)	fail	0	status=400
45	JSON-LD richness score for LLMs	fail	0	org_complete=false, has_address=false, has_contact_point=false, has_same_as=false, has_content_type=false, breakdown={"coreOrg":0,"contact":0,"sameAs":0,"contentType":0}

#	Factor	Verdict	Score	Evidence
46	Cookie banner presence + CMP detection	fail	0	banner_detected=false
47	Privacy policy page presence	fail	0	found=false
48	Terms of service page presence	fail	0	found=false
49	Third-party tracker count	warn	60	count=4, hosts=browser.sentry-cdn.com\|siteassets.parastorage.com\|static.parastorage.com\|static.wixstatic.com
50	CCPA "Do Not Sell or Share My Personal Information" link	fail	0	found=false
51	Cookie scan — actual cookies set on first load	fail	0	count=4, names=_wixAB3\|sec-fetch-unsupported\|ssr-caching\|XSRF-TOKEN, with_cmp=false

#	Factor	Verdict	Score	Evidence
52	Accessibility statement page	fail	0	found=false
53	axe-core / WAVE accessibility scan	pass	93	accessibility_category=0.93
54	Image alt text coverage	pass	100	lighthouse_score=1, failing_count=0
55	Heading hierarchy validity	pass	100	lighthouse_score=1
56	Color contrast (WCAG AA)	pass	100	lighthouse_score=1, failing_count=0
57	ARIA labels presence and validity	pass	100	total_aria_audits=22, applicable=10, passing=10
58	Skip-to-content link	n/a	—	Scoring not yet implemented

#	Factor	Verdict	Score	Evidence
17	Domain age (RDAP / WHOIS)	pass	85	domain_age_years=6.1
18	Wayback Machine site age & last snapshot	n/a	—	Scoring not yet implemented
19	Google Business Profile presence + rating	fail	0	found=false
20	News mentions in last 30 days	fail	20	news_mentions_count=0
21	Wikipedia entity	fail	0	found=false
59	Yelp presence + rating + review count	fail	0	no_link_on_site
60	Trustpilot presence + rating	fail	0	no_link_on_site
62	LinkedIn Company Page (presence + employee count + follower count)	fail	0	no_link_on_site
63	Bing Places	n/a	—	n/a — no_public_url_convention
64	Apple Maps presence (Apple Business Connect)	fail	0	no_link_on_site
65	Facebook Page presence	pass	100	url=http://www.facebook.com/peninsulaepoxy, live=true
66	Instagram presence (link from site → IG profile)	fail	0	no_link_on_site
67	Web App Manifest (manifest.json)	n/a	—	Scoring not yet implemented
68	Service Worker / PWA capability	n/a	—	Scoring not yet implemented
69	Analytics tools detected	fail	0	count=0
70	Payment processors detected	n/a	—	n/a — no_payment_detected
71	Marketing automation tools detected	fail	0	count=0
72	Customer support tools detected	fail	0	count=0
73	Tag manager presence	warn	50	count=0
74	Ad networks detected	pass	100	count=0
83	Visible contact form on site	pass	100	detected=true, count=1

#	Factor	Verdict	Score	Evidence
1	DMARC enforcement	fail	0	present=false
2	DKIM signing	fail	0	present=false
3	SPF record present and valid	fail	0	present=false
24	MTA-STS & TLS-RPT	fail	0	policy_ok=false
25	BIMI + VMC	fail	0	no_bimi
75	Branded domain email address (vs free Gmail/Yahoo)	fail	0	branded=false, provider=none
76	Email provider class (Workspace / 365 / Zoho / self-hosted / shared)	n/a	—	Scoring not yet implemented
77	DMARC aggregate reporting enabled (rua=)	fail	0	has_dmarc_reporting=false, audit_flag=false, source=audit_flag
78	Free-email exposure on contact page (gmail/yahoo/outlook visible)	fail	0	addresses=peninsulaepoxy@gmail.com
79	Newsletter signup form detected	fail	0	detected=false
80	Email Service Provider (ESP) detected	fail	0	Scored
81	Transactional email provider detected (from SPF includes)	fail	0	no SPF record
82	SPF lookup count (10-limit deliverability check)	n/a	—	Scoring not yet implemented
84	Mailto: direct contact link present	warn	50	addresses=peninsulaepoxy@gmail.com, free=peninsulaepoxy@gmail.com
85	Email forwarding service detected (improvmx, forwardemail, etc.)	fail	0	no MX records
86	Lead magnet / signup incentive detected (free download, ebook, etc.)	pass	100	detected=true, sample=Free Estimate

Scores are computed under method v0.1 — 2026-04-25. See the methodology for the full factor list and per-factor specifications.