Nellie's working overtime

hint #1: Elements must have sufficient color contrast: Element has insufficient color contrast of 4.03 (foreground color: #428bca, background color: #29282a, font size: 10.5pt (14px), font weight: normal). Expected contrast ratio of 4.5:1

<a href="javascript:void(0);" data-toggle="modal" data-target="#modal_DMCA">DMCA</a>

axe/language: 1 hints

hint #1: <html> element must have a lang attribute

<html>

axe/sensory-and-visual-cues: 1 hints

hint #1: Zooming and scaling must not be disabled: maximum-scale on <meta> tag disables zooming on mobile devices

<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1.0, user-scalable=0">

Compatibility

content-type: 2 hints

hint #1: 'content-type' header charset value should be 'utf-8'.

Content-Type: text/css

hint #2: 'content-type' header charset value should be 'utf-8'.

Content-Type: application/javascript

highest-available-document-mode: 1 hints

hint #1: 'x-ua-compatible' meta element should not be specified as it is not needed.

<meta http-equiv="X-UA-Compatible" content="IE=edge">

meta-viewport: 2 hints

hint #1: 'viewport' meta element 'content' attribute value should not contain disallowed property 'maximum-scale'.

<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1.0, user-scalable=0">

hint #2: 'viewport' meta element 'content' attribute value should not contain disallowed property 'user-scalable'.

<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1.0, user-scalable=0">

PWA

apple-touch-icons: 1 hints

hint #1: 'apple-touch-icon' link element was not specified.

Performance

http-cache: 14 hints

hint #1: No "cache-control" header or empty value found. It should have a value

hint #2: Static resources should use the "immutable" directive: Directives used: public, max-age=31536000

Cache-Control: public, max-age=31536000

hint #3: Static resources should use the "immutable" directive: Directives used: public, max-age=31536000

Cache-Control: public, max-age=31536000

hint #4: Static resources should have a long cache value (31536000): Directives used: public, no-transform

Cache-Control: public, no-transform

hint #5: Static resources should use the "immutable" directive: Directives used: public, no-transform

http://code.jquery.com/jquery-1.11.1.min.js

Cache-Control: public, no-transform

hint #6: Static resources should use the "immutable" directive: Directives used: max-age=315360000, public

Cache-Control: max-age=315360000, public

hint #7: Static resources should have a long cache value (31536000): Directives used: public, no-transform

Cache-Control: public, no-transform

hint #8: Static resources should use the "immutable" directive: Directives used: public, no-transform

http://netdna.bootstrapcd … halflings-regular.woff

Cache-Control: public, no-transform

hint #9: Static resources should use the "immutable" directive: Directives used: public, max-age=31536000

Cache-Control: public, max-age=31536000

hint #10: Static resources should use the "immutable" directive: Directives used: public, max-age=31536000

http://fonts.gstatic … 3bXL8LICs1xZosUZiZQ.woff2

Cache-Control: public, max-age=31536000

hint #11: Static resources should use the "immutable" directive: Directives used: public, max-age=31536000

http://fonts.gstatic … 3bXL8LICs1_FvsUZiZQ.woff2

Cache-Control: public, max-age=31536000

hint #12: Static resources should use the "immutable" directive: Directives used: public, max-age=31536000

http://fonts.gstatic … 3bXL8LICs169vsUZiZQ.woff2

Cache-Control: public, max-age=31536000

hint #13: The directive "must-revalidate" is not recommended

https://stats.g.doublecli … IGBAgEAB~&z=830758911

Cache-Control: no-cache, no-store, must-revalidate

hint #14: No "cache-control" header or empty value found. It should have a value

http://fileto.host/favicon.ico

http-compression: 11 hints

hint #1: Response should not be compressed for requests made with 'accept-encoding: identity'.

<link rel="stylesheet" href="//netdna.bootstrapcdn.com/bootstrap/3.1.1/css/bootstrap.min.css">

hint #2: Response should be compressed with Zopfli when gzip compression is requested.

<link rel="stylesheet" href="//netdna.bootstrapcdn.com/bootstrap/3.1.1/css/bootstrap.min.css">

hint #3: Response should not be compressed with Brotli over HTTP.

<link rel="stylesheet" href="//netdna.bootstrapcdn.com/bootstrap/3.1.1/css/bootstrap.min.css">

hint #4: Response should not be compressed for requests made with 'accept-encoding: identity'.

<script src="//netdna.bootstrapcdn.com/bootstrap/3.1.1/js/bootstrap.min.js"></script>

hint #5: Response should be compressed with Zopfli when gzip compression is requested.

<script src="//netdna.bootstrapcdn.com/bootstrap/3.1.1/js/bootstrap.min.js"></script>

hint #6: Response should not be compressed with Brotli over HTTP.

<script src="//netdna.bootstrapcdn.com/bootstrap/3.1.1/js/bootstrap.min.js"></script>

hint #7: Response should be compressed with Zopfli when gzip compression is requested.

http://code.jquery.com/jquery-1.11.1.min.js

<link rel="stylesheet" href="http://fileto.host/static/style.css" type="text/css">

hint #8: Response should be compressed with Zopfli when gzip compression is requested.

<script src="//code.jquery.com/jquery-1.11.1.min.js"></script>

hint #9: Response should be compressed with Zopfli when gzip compression is requested.

http://netdna.bootstrapcd … halflings-regular.woff

<script type="text/javascript" src="http://fileto.host/static/functions.js"></script>

hint #10: Response should not be compressed.

hint #11: Response should not include 'content-encoding' header.

http://netdna.bootstrapcd … halflings-regular.woff

Content-Encoding: gzip

no-html-only-headers: 3 hints

http://fonts.gstatic … 3bXL8LICs1xZosUZiZQ.woff2

hint #1: Response should not include unneeded 'x-xss-protection' header.

hint #2: Response should not include unneeded 'x-xss-protection' header.

http://fonts.gstatic … 3bXL8LICs1_FvsUZiZQ.woff2

hint #3: Response should not include unneeded 'x-xss-protection' header.

http://fonts.gstatic … 3bXL8LICs169vsUZiZQ.woff2

no-http-redirects: 1 hints

hint #1: 1 redirect detected for 'http://www.fileto.host/' (max is 0).

http://www.fileto.host/

Pitfalls

No issues

Security

https-only: 1 hints

hint #1: Site should be served over HTTPS.

no-disallowed-headers: 3 hints

hint #1: Response should not include disallowed 'x-powered-by' header.

x-powered-by: php/5.6.40

hint #2: Response should not include disallowed 'x-powered-by' header.

x-powered-by: thinkcms v4

hint #3: Response should not include disallowed 'x-powered-by' header.

x-powered-by: thinkcms v4

no-protocol-relative-urls: 4 hints

hint #1: '//netdna.bootstrapcdn.com/bootstrap/3.1.1/css/bootstrap.min.css' should not be specified as a protocol-relative URL.

<link rel="stylesheet" href="//netdna.bootstrapcdn.com/bootstrap/3.1.1/css/bootstrap.min.css">

hint #2: '//www.google-analytics.com/analytics.js' should not be specified as a protocol-relative URL.

<script async="" src="//www.google-analytics.com/analytics.js"></script>

hint #3: '//code.jquery.com/jquery-1.11.1.min.js' should not be specified as a protocol-relative URL.

<script src="//code.jquery.com/jquery-1.11.1.min.js"></script>

hint #4: '//netdna.bootstrapcdn.com/bootstrap/3.1.1/js/bootstrap.min.js' should not be specified as a protocol-relative URL.

<script src="//netdna.bootstrapcdn.com/bootstrap/3.1.1/js/bootstrap.min.js"></script>

sri: 3 hints

hint #1: Cross-origin resource <a href="http://netdna.bootstrapcdn.com/bootstrap/3.1.1/css/bootstrap.min.css">http://netdna.bootstrapcdn.com/bootstrap/3.1.1/css/bootstrap.min.css</a> needs a "crossorigin" attribute to be eligible for integrity validation

<link rel="stylesheet" href="//netdna.bootstrapcdn.com/bootstrap/3.1.1/css/bootstrap.min.css">

hint #2: Cross-origin resource <a href="http://netdna.bootstrapcdn.com/bootstrap/3.1.1/js/bootstrap.min.js">http://netdna.bootstrapcdn.com/bootstrap/3.1.1/js/bootstrap.min.js</a> needs a "crossorigin" attribute to be eligible for integrity validation

<script src="//netdna.bootstrapcdn.com/bootstrap/3.1.1/js/bootstrap.min.js"></script>

hint #3: Cross-origin resource <a href="http://code.jquery.com/jquery-1.11.1.min.js">http://code.jquery.com/jquery-1.11.1.min.js</a> needs a "crossorigin" attribute to be eligible for integrity validation

<script src="//code.jquery.com/jquery-1.11.1.min.js"></script>

strict-transport-security: 10 hints