Audit Result

Found 55 characters. Length is optimal.

Found 145 characters. Good snippet length.

Canonical found: https://mexico.hairmex.com/

No favicon link found in <head>.

Fix: Add <link rel="icon" href="/favicon.ico"> to ensure browser tab and bookmark visibility.

Viewport configured: width=device-width, initial-scale=1.0

Language declared as "en".

No H1 heading found.

Fix: Use a single, descriptive <h1> that states the primary purpose of the page.

Detected 2 heading level jumps.

• • Skipped from h2 to h4: "Patient Transformations" -> "FUE Hair Transplant".
• • Skipped from h2 to h4: "Patient Stories & Procedure Videos" -> "FUE Mega Session".

Fix: Follow semantic order (h1 -> h2 -> h3) and avoid skipping heading levels.

1 of 50 images are missing alt text.

Fix: Add meaningful alt attributes to all informative images for accessibility and image SEO.

Page is served over HTTPS.

2 HTTPS hardening issues detected.

• • Missing Strict-Transport-Security header.
• • Could not probe the HTTP version of this page.

Fix: Set Strict-Transport-Security with a long max-age, add includeSubDomains, and redirect all HTTP requests to HTTPS.

Missing: strict-transport-security, x-frame-options, x-content-type-options, referrer-policy.

Fix: Add the missing security headers at your reverse proxy or application layer.

3 CSP hardening issues detected.

• • CSP is missing object-src 'none'.
• • CSP is missing a base-uri restriction.
• • CSP is missing frame-ancestors protection.
• • Content-Security-Policy: upgrade-insecure-requests;

Fix: Tighten Content-Security-Policy by removing unsafe directives and adding object-src, base-uri, and frame-ancestors restrictions.

No first-party cookies were set during the initial page load.

Versioned headers detected: x-powered-by.

• • x-powered-by: PHP/7.4.33

Fix: Hide or remove version tokens in Server and X-Powered-By headers.

Domain does not appear to be behind Cloudflare.

Loaded in 1.51s (perceived).

Fix: Reduce payload size, cache static assets, and remove non-critical JS from initial load.

0 scripts and 6 styles may block rendering.

• • style: https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700&display=swap
• • style: https://cdn.jsdelivr.net/npm/swiper@8/swiper-bundle.min.css
• • style: https://mexico.hairmex.com/assets/css/style.css?v=1789265879
• • style: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css
• • style: https://cdn.jsdelivr.net/npm/@fancyapps/[email protected]/dist/fancybox.css
• • style: https://cdn.jsdelivr.net/gh/lipis/[email protected]/css/flag-icons.min.css

Fix: Defer non-critical scripts and inline critical CSS to improve first paint speed.

2 text resources look uncompressed.

• • https://www.youtube.com/s/_/ytembeds/_/ss/k=ytembeds.base.HY7wD9GGp-g.L.W.O/am=AAAAQA/d=1/br=1/rs=AGKMywE4Kjs9hFDhD74lwcLYIXdA_OMvQQ/m=root,base (text/css; charset=UTF-8)
• • https://www.youtube.com/api/stats/qoe?cpn=dIbNMVmRsFgJlC4x&el=embedded&ns=yt&fexp=v1%2C100673025%2C-76668381%2C27058999%2C34656%2C124674%2C117689%2C9252%2C16509%2C23206%2C100702%2C2878%2C12227%2C25059%2C4174%2C30446%2C18706%2C26008%2C5238%2C7778%2C16087%2C9404%2C23826%2C9500%2C1840%2C24118%2C29513%2C41206%2C20589%2C4199%2C30114%2C9181%2C15416%2C17458%2C20109%2C6032%2C1168%2C372%2C7759%2C34320%2C11462%2C26850%2C1938%2C277%2C12857%2C4366%2C9716%2C3614%2C7196%2C4419%2C2%2C12634%2C2288%2C3843%2C1166%2C3%2C3%2C15988%2C1340%2C9617%2C1287%2C3243%2C1%2C17340%2C9037%2C1538%2C7443%2C16454%2C2418%2C4%2C1891%2C1464%2C357%2C12073%2C2166%2C2072%2C6085%2C972%2C1237%2C7620%2C9119%2C2974%2C1849%2C675%2C1659%2C8439%2C2496%2C1713&cl=977222275&seq=1&event=streamingstats&docid=ec8ACzCHMUQ&cbr=HeadlessChrome&cbrver=145.0.7632.6&c=WEB_EMBEDDED_PLAYER&cver=2.20260911.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&vps=0.000:N,0.046:B,0.167:ER&ctmp=dttg:t.0;dtt.1;gl.0;tm.0,user_intent_bh:t.10;bh.0.000;th.0.000&cat=streaming&cmt=0.046:0.000,0.167:0.000,0.167:0.000&error=0.167:auth::0.000:ec.auth;ed.1;es.;a6s.1;r.Sign_in_to_confirm_you_re_not_a_bot&bat=0.167:1:1&vis=0.167:0&bh=0.167:0.000&qclc=ChBkSWJOTVZtUnNGZ0psQzR4EAE (text/html; charset=UTF-8)

Fix: Enable Brotli or Gzip compression for HTML, CSS, JS, and JSON responses.

Found robots.txt (200).

Found sitemap (200) at https://mexico.hairmex.com/sitemap.xml.

No robots meta tag defined.

Fix: Add <meta name="robots" content="index,follow"> (or the intended directive) in <head>.

All 0 controls are labeled.

Header, nav, main, and footer landmarks are present.

15 interactive elements appear smaller than 48px.

• • a.btn-top-action.financing (Apply Financing) - 146x36px
• • a.btn-top-action.deposit (Pay as Deposit) - 140x36px
• • a.btn-top-action.booking (Book Appointment) - 167x36px
• • button.current-lang (EN) - 66x27px
• • button#theme-toggle.theme-toggle-btn (Toggle Theme) - 18x28px
• • a (Login) - 61x23px
• • a (Register) - 85x23px
• • button.hp-hero-nav.prev - 44x44px
• • button.hp-hero-nav.next - 44x44px
• • a ([email protected]) - 186x23px
• • a (+52-663-234-0015) - 135x23px
• • a (WhatsApp) - 77x23px
• • a ([email protected]) - 195x23px
• • a (1-840-209-9802) - 117x23px
• • a (WhatsApp) - 77x23px

Fix: Increase target size to at least 48x48 CSS pixels for touch interactions.

Core Open Graph tags are present.

og:image is missing.

Fix: Add <meta property="og:image" content="https://..."> with a high-quality share image.

twitter:card set to summary.

JSON-LD schema detected.

Manifest and Apple touch icon are configured.

2 social preview quality issues detected.

• • ISSUE: Use an absolute URL for og:image or twitter:image.
• • ISSUE: twitter:card should be summary_large_image for richer previews.
• • GUIDELINE: Optimal og:title length: 40-60 characters (acceptable: 10-70).
• • GUIDELINE: Optimal og:description length: 110-160 characters (acceptable: 50-200).
• • GUIDELINE: Optimal preview image size: 1200x630 pixels.
• • GUIDELINE: Optimal preview image aspect ratio: 1.91:1.
• • GUIDELINE: Optimal preview image file size: under 5 MB.
• • GUIDELINE: Recommended twitter:card: summary_large_image.

Fix: Use absolute OG/Twitter URLs, keep metadata lengths in recommended ranges, and provide a preview image near 1200x630 under 5MB.

1 internal links returned errors.

• • https://mexico.hairmex.com/index.php?page=stem-cell-therapy (HTTP 404)

Fix: Fix or remove the listed internal URLs, and ensure routes/pages return 200 responses.

1 external links returned errors or timed out.

• • https://www.carecredit.com/go/733MJM/ (HTTP 503)

Fix: Replace dead external URLs or point to working alternatives.

8 links are empty, invalid, or placeholder-only.

• • href="#"
• • href="#"
• • href="#"
• • href="#"
• • href="#"
• • href="#"
• • href="#"
• • href="#"

Fix: Replace empty/#/javascript href values with real destinations or use buttons for non-navigation actions.

Largest Contentful Paint: 1.51s.

Cumulative Layout Shift: 0.002.

Total Blocking Time estimate: 55ms.

No failed CSS/JS/image/font/media requests detected.

1 JavaScript runtime issues detected.

• • Request failed: https://www.youtube.com/api/stats/qoe?cpn=dIbNMVmRsFgJlC4x&el=embedded&ns=yt&fexp=v1%2C100673025%2C-76668381%2C27058999%2C34656%2C124674%2C117689%2C9252%2C16509%2C23206%2C100702%2C2878%2C12227%2C25059%2C4174%2C30446%2C18706%2C26008%2C5238%2C7778%2C16087%2C9404%2C23826%2C9500%2C1840%2C24118%2C29513%2C41206%2C20589%2C4199%2C30114%2C9181%2C15416%2C17458%2C20109%2C6032%2C1168%2C372%2C7759%2C34320%2C11462%2C26850%2C1938%2C277%2C12857%2C4366%2C9716%2C3614%2C7196%2C4419%2C2%2C12634%2C2288%2C3843%2C1166%2C3%2C3%2C15988%2C1340%2C9617%2C1287%2C3243%2C1%2C17340%2C9037%2C1538%2C7443%2C16454%2C2418%2C4%2C1891%2C1464%2C357%2C12073%2C2166%2C2072%2C6085%2C972%2C1237%2C7620%2C9119%2C2974%2C1849%2C675%2C1659%2C8439%2C2496%2C1713&cl=977222275&seq=1&event=streamingstats&docid=ec8ACzCHMUQ&cbr=HeadlessChrome&cbrver=145.0.7632.6&c=WEB_EMBEDDED_PLAYER&cver=2.20260911.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&vps=0.000:N,0.046:B,0.167:ER&ctmp=dttg:t.0;dtt.1;gl.0;tm.0,user_intent_bh:t.10;bh.0.000;th.0.000&cat=streaming&cmt=0.046:0.000,0.167:0.000,0.167:0.000&error=0.167:auth::0.000:ec.auth;ed.1;es.;a6s.1;r.Sign_in_to_confirm_you_re_not_a_bot&bat=0.167:1:1&vis=0.167:0&bh=0.167:0.000&qclc=ChBkSWJOTVZtUnNGZ0psQzR4EAE (net::ERR_ABORTED, type: fetch)

Fix: Fix JS files returning 404/failed requests and resolve the listed runtime exceptions.