https://facebook.com

Technical details

• Server —
• X-Powered-By —
• Content-Type text/html; charset="utf-8"
• Encoding br
• CSP Enabled
• HSTS Enabled

Key issues

1. `[role]`s are not contained by their required parent element
   0/100
   Some ARIA child roles must be contained by specific parent roles to properly perform their intended accessibility functions. [Learn more about ARIA roles and required parent element](https://dequeuniversity.com/rules/axe/4.11/aria-required-parent).
2. Does not use HTTPS
   0/100
   All sites should be protected with HTTPS, even ones that don't handle sensitive data. This includes avoiding [mixed content](https://developers.google.com/web/fundamentals/security/prevent-mixed-content/what-is-mixed-content), where some resources are loaded over HTTP despite the initial request being served over HTTPS. HTTPS prevents intruders from tampering with or passively listening in on the communications between your app and your users, and is a prerequisite for HTTP/2 and many new web platform APIs. [Learn more about HTTPS](https://developer.chrome.com/docs/lighthouse/pwa/is-on-https/).
3. Avoid multiple page redirects
   0/100
   Redirects introduce additional delays before the page can be loaded. [Learn how to avoid page redirects](https://developer.chrome.com/docs/lighthouse/performance/redirects/).
4. Render blocking requests
   0/100
   Requests are blocking the page's initial render, which may delay LCP. [Deferring or inlining](https://developer.chrome.com/docs/performance/insights/render-blocking) can move these network requests out of the critical path.
5. Reduce unused JavaScript
   0/100
   Reduce unused JavaScript and defer loading scripts until they are required to decrease bytes consumed by network activity. [Learn how to reduce unused JavaScript](https://developer.chrome.com/docs/lighthouse/performance/unused-javascript/).

Page assets

• CSS files 0
• JS files 0
• Images 1
• Checked image sizes 1
• Average size 1 KB

SEO files

• robots.txt Found (status 200)
• Sitemap in robots.txt Missing
• sitemap.xml Not found
• Valid XML Unknown

Advanced SEO

• Canonical URL —
• OpenGraph Missing
• Twitter Cards Not set
• Structured data (JSON-LD) None detected

SSL / TLS

• Overall Expires soon
• Notes Certificate will expire in 6 day(s).
• Host facebook.com
• Status Valid
• Valid from Oct 6 00:00:00 2025 GMT
• Valid to Jan 4 23:59:59 2026 GMT
• Days remaining 6 day(s)
• Protocol TLSv1.3 TLS 1.3
• Cipher TLS_CHACHA20_POLY1305_SHA256 (TLSv1.3)
• Issuer DigiCert Inc
• Subject *.facebook.com