Every check ยท Page contents
Script hosts
What it checks
The hosts the home page loads scripts from: whether each still exists, and whether it's one of the polyfill.io network's.
Why it matters
A script runs with the page's full power. polyfill.io and its sister CDNs were changed in 2024 to send visitors to scam sites, and a script on a domain that has lapsed can be served by whoever registers it.
How to fix it
- Remove script tags for hosts that are gone or known to be bad.
- Serve scripts you rely on from your own site, or a CDN you trust, with integrity checks.
Check a site for this and everything else: snag.page. More on page contents: Mixed content Forms over HTTPS Libraries with known flaws Integrity on CDN files Generator tag