{"url":"https://play.ee/","date":"2026-09-01","siteName":"Perfectly formed web development team - gotoAndPlay","overall":76,"reasoning":"Site overall 76 is the mean of 5 pages. Scores range 73 (https://play.ee/software-development-work-index/) → 79 (https://play.ee/web-development-case-studies/). Weakest page: Mobile PSI 96 indicates strong performance (LCP 2.3 s, CLS 0.04), but security configuration is critically weak (Grade 20/100, HTTP not redirecting to HTTPS). W3C validation shows 8 errors with parser recovery failure at line 106, indicating broken DOM structure. Accessibility has a serious color-contrast violation and missing main landmark. Image assets lack explicit dimensions on all 53 instances, risking CLS. Overall score reflects high performance weighed down by security and structural quality issues.","confidence":"high","fixes":[{"priority":1,"category":"Security","title":"Force HTTPS redirect","impact":"Transport security, MITM protection","problem":"http://play.ee/ does not redirect to HTTPS, leaving the site vulnerable to downgrade attacks despite HTTPS support.","solution":"Configure the web server (Apache/Nginx) to return a 301 redirect for all HTTP traffic to HTTPS:\n```apache\nRewriteEngine On\nRewriteCond %{HTTPS} off\nRewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]\n```"},{"priority":1,"category":"Security","title":"Enforce HTTPS redirect","impact":"Transport security, downgrade attack prevention","problem":"Security audit reports 'http://play.ee/web-development-case-studies/ does not redirect to HTTPS', leaving users vulnerable to downgrade attacks.","solution":"Configure the web server (Apache/Nginx) to return a 301 redirect for all HTTP requests to HTTPS:\n```apache\nRewriteEngine On\nRewriteCond %{HTTPS} off\nRewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]\n```"},{"priority":1,"category":"Accessibility","title":"Fix color contrast violations","impact":"WCAG 1.4.3 compliance, readability","problem":"axe-core reports 1 serious violation: 'color-contrast' on multiple nodes including h1 and card titles.","solution":"Increase contrast ratio to ≥4.5:1 for normal text. Adjust CSS colors for `.heading__main` and `.card__title`:\n```css\n.heading__main { color: #333333; } /* Example adjustment */\n```"},{"priority":1,"category":"Security","title":"Enforce HTTPS redirect and add baseline security headers","impact":"Transport security, clickjacking protection, MIME sniffing","problem":"HTTP does not redirect to HTTPS (Grade 20/100); HSTS, X-Content-Type-Options, and X-Frame-Options are missing.","solution":"Configure server to redirect all HTTP traffic to HTTPS. Add these headers:\n```apache\nHeader always set Strict-Transport-Security \"max-age=63072000; includeSubDomains\"\nHeader always set X-Content-Type-Options \"nosniff\"\nHeader always set X-Frame-Options \"SAMEORIGIN\"\n```"},{"priority":1,"category":"Best Practices","title":"Fix HTML validation errors and parser recovery failure","impact":"DOM integrity, SEO rendering, cross-browser compatibility","problem":"W3C reports 8 errors including parser recovery failure at line 106; stray tags and invalid attributes detected.","solution":"Review lines 52–106 in source. Fix empty `href` on ``, remove `