Audit Result

Found 67 characters. Keep title between 30 and 60 characters.

Fix: Add a unique <title> tag describing the main page intent in 30-60 characters.

Found 204 characters. Keep description around 70-160 characters.

Fix: Add <meta name="description" content="..."> in <head> with a clear page summary.

Canonical found: https://www.phonepe.com/

Favicon found and reachable: https://www.phonepe.com/webstatic/14913/favicon-32x32.png?v=1e5c98f168b1aeec4e1d02c0739fa229 (HTTP 200).

Viewport configured: width=device-width, minimum-scale=1.0 initial-scale=1

Language declared as "en".

No H1 heading found.

Fix: Use a single, descriptive <h1> that states the primary purpose of the page.

Detected 6 heading level jumps.

• • Skipped from h2 to h6: "Simple, fast &secure transactions" -> "UPI Lite".
• • Skipped from h2 to h6: "Travel, stays & commute" -> "Flights".
• • Skipped from h2 to h6: "Smart savingsstart here" -> "Gold".
• • Skipped from h2 to h4: "Empowering yourbusiness with PhonePe" -> "Offline Payments".
• • Skipped from h4 to h6: "PhonePe Ads" -> "Innovation".
• • Skipped from h3 to h6: "Your money stays safe." -> "Trusted by".

Fix: Follow semantic order (h1 -> h2 -> h3) and avoid skipping heading levels.

73 of 300 images are missing alt text.

Fix: Add meaningful alt attributes to all informative images for accessibility and image SEO.

Page is served over HTTPS.

2 HTTPS hardening issues detected.

• • HSTS max-age is too short (0s).
• • Could not probe the HTTP version of this page.
• • Strict-Transport-Security: max-age=0; includeSubDomains; preload

Fix: Set Strict-Transport-Security with a long max-age, add includeSubDomains, and redirect all HTTP requests to HTTPS.

Missing: x-frame-options, referrer-policy.

Fix: Add the missing security headers at your reverse proxy or application layer.

1 CSP hardening issues detected.

• • script-src/default-src permits 'unsafe-inline'.
• • Content-Security-Policy: default-src 'self' https://www.phonepe.com https://phonepe.com https://website.phonepe.com; media-src 'self' https://www.phonepe.com https://phonepe.com https://website.phonepe.com; prefetch-src 'self' https://www.phonepe.com https://phonepe.com https://website.phonepe.com; script-src https://www.phonepe.com https://www.googletagmanager.com https://phonepe.com https://website.phonepe.com https://www.gstatic.com https://www.google.com https://cdn.jotfor.ms https://form.jotform.me https://code.jquery.com https://www.google-analytics.com https://platform.twitter.com/ https://www.googleadservices.com https://static.ads-twitter.com https://googleads.g.doubleclick.net https://connect.facebook.net https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline'; style-src https://www.phonepe.com https://phonepe.com https://website.phonepe.com https://cdn.jotfor.ms https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline'; img-src data: https://website.phonepe.com data: https://www.phonepe.com https://phonepe.com https://imgstatic.phonepe.com https://images.phonepe.com https://cdn.jotfor.ms www.googletagmanager.com 'self' https://www.google-analytics.com https://*.doubleclick.net https://adservice.google.com https://css.page-source.com https://www.google.com https://www.google.co.in https://www.facebook.com https://analytics.twitter.com https://t.co https://www.googleadservices.com/; font-src https://www.phonepe.com https://phonepe.com https://website.phonepe.com https://cdn.jotfor.ms https://fonts.gstatic.com/ 'self'; connect-src https://www.google-analytics.com https://boards-api.greenhouse.io https://api.phonepe.com https://www.phonepe.com https://phon.pe https://phonepe.com https://website.phonepe.com https://insights-api.phonepe.com https://sentry.phonepe.com https://page-source.com https://css.page-source.com https://logo.page-source.com https://cdn.page-source.com https://hcaptcha.com https://*.hcaptcha.com https://www.googleadservices.com/ https://www.google.com/ 'self'; frame-src https://www.greenhouse.io https://script.google.com/a/macros/phonepe.com/ https://boards.greenhouse.io https://boards-api.greenhouse.io https://form.jotform.me https://docs.google.com https://qr.phonepe.com https://www.google.com https://phonepe.helpshift.com https://phonepe.freshdesk.com https://hcaptcha.com https://*.hcaptcha.com *.phonepe.com https://www.sisainfosec.com https://website.phonepe.com https://www.youtube.com https://platform.twitter.com/ https://*.doubleclick.net https://bugbase.ai; frame-ancestors https://mercury.phonepe.com https://mercury-t1.phonepe.com https://mercury-t2.phonepe.com https://bugbase.ai; base-uri 'self'; object-src 'none'; report-uri https://csp.phonepe.com/log

Fix: Tighten Content-Security-Policy by removing unsafe directives and adding object-src, base-uri, and frame-ancestors restrictions.

No first-party cookies were set during the initial page load.

Server response headers do not expose version tokens.

Domain appears to be behind Cloudflare.

• • server: cloudflare
• • cf-cache-status: HIT
• • cf-ray: a3afcaa918ba82e0-IAD

Loaded in 0.71s (perceived).

0 scripts and 1 styles may block rendering.

• • style: https://www.phonepe.com/webstatic/14913/styles.cecd4579709ea1f00e3a.css

Fix: Defer non-critical scripts and inline critical CSS to improve first paint speed.

1 text resources look uncompressed.

• • https://css.page-source.com/resizeimage.ashx?ig=www.phonepe.com&sz=165401 (text/plain)

Fix: Enable Brotli or Gzip compression for HTML, CSS, JS, and JSON responses.

Found robots.txt (200).

Found sitemap (200) at https://www.phonepe.com/sitemap.xml.

No robots meta tag defined.

Fix: Add <meta name="robots" content="index,follow"> (or the intended directive) in <head>.

All 0 controls are labeled.

Missing landmarks: nav.

Fix: Use semantic regions (<header>, <nav>, <main>, <footer>) for navigation and assistive tech.

24 interactive elements appear smaller than 48px.

• • a (Investor Relations) - 160x17px
• • a (Contact Us) - 100x17px
• • a (Trust & Safety) - 125x17px
• • a.link.link-primary (Explore Now) - 151x41px
• • a.link.link-primary (Get your PhonePe POS) - 214x41px
• • a.link.link-primary (Get Started) - 144x41px
• • a.link.link-tertiary (Explore Now) - 151x41px
• • a.link.link-tertiary (Invest Now) - 142x41px
• • a.link.link-tertiary (Explore) - 119x41px
• • a.link.link-primary (Explore Now) - 151x41px
• • a.link.link-primary (Get your PhonePe POS) - 214x41px
• • a.link.link-primary (Get Started) - 144x41px
• • a.link.link-tertiary (Explore Now) - 151x41px
• • a.link.link-tertiary (Invest Now) - 142x41px
• • a.link.link-tertiary (Explore) - 119x41px
• • a.link.link-primary (Explore Now) - 151x41px
• • button (1) - 40x15px
• • button (2) - 15x15px
• • button (3) - 15x15px
• • button (4) - 15x15px
• • button (5) - 15x15px
• • button (6) - 15x15px
• • a.link.link-tertiary (KNOW MORE) - 93x27px
• • a.link.link-tertiary (KNOW MORE) - 93x27px

Fix: Increase target size to at least 48x48 CSS pixels for touch interactions.

Core Open Graph tags are present.

og:image is present and absolute.

twitter:card set to summary.

JSON-LD schema detected.

Manifest and Apple touch icon are configured.

2 social preview quality issues detected.

• • ISSUE: og:description should typically be between 50 and 200 characters.
• • ISSUE: twitter:card should be summary_large_image for richer previews.
• • GUIDELINE: Optimal og:title length: 40-60 characters (acceptable: 10-70).
• • GUIDELINE: Optimal og:description length: 110-160 characters (acceptable: 50-200).
• • GUIDELINE: Optimal preview image size: 1200x630 pixels.
• • GUIDELINE: Optimal preview image aspect ratio: 1.91:1.
• • GUIDELINE: Optimal preview image file size: under 5 MB.
• • GUIDELINE: Recommended twitter:card: summary_large_image.
• • MEASURED: Image size: 0.09 MB
• • MEASURED: Image dimensions: 1218x638

Fix: Use absolute OG/Twitter URLs, keep metadata lengths in recommended ranges, and provide a preview image near 1200x630 under 5MB.

Checked 68 links. No broken internal links found.

1 external links returned errors or timed out.

• • https://www.youtube.com/@PhonePe_/ (HTTP 404)

Fix: Replace dead external URLs or point to working alternatives.

All 202 links use non-empty href values.

Largest Contentful Paint: 0.71s.

Cumulative Layout Shift: 0.002.

Total Blocking Time estimate: 74ms.

1 asset requests failed.

• • https://www.googletagmanager.com/gtag/js?id=G-29ZXKW9R52&cx=c&_slc=1 (net::ERR_BLOCKED_BY_ORB)

Fix: Fix missing files, update asset URLs, and ensure static assets return HTTP 200.

7 JavaScript runtime issues detected.

• • Request failed: https://www.google.com/ccm/collect?rcb=16&frm=0&apvc=1&ae=g&auid=548323324.1789393103&dt=PhonePe%3A%20UPI%20Payments%2C%20Investment%2C%20Insurance%2C%20Recharges%2C%20DTH%20%26%20More&en=page_view&dl=https%3A%2F%2Fwww.phonepe.com%2F&scrsrc=www.googletagmanager.com&rnd=977633532.1789393103&navt=n&npa=0&ep.ads_data_redaction=0&gtm=45He6992v838805631za200zd838805631xea&gcd=13l3l3l3l1l1&dma=0&tag_exp=115616985~115938466~115938468~118897920~118897930~120385423~120469145~120469153&tft=1789393102536&tfd=423&fmt=8 (net::ERR_ABORTED, type: fetch)
• • Request failed: https://www.googletagmanager.com/gtag/js?id=G-29ZXKW9R52&cx=c&_slc=1 (net::ERR_BLOCKED_BY_ORB, type: script)
• • Unrecognized Content-Security-Policy directive 'prefetch-src'. [https://www.phonepe.com/:1]
• • Connecting to 'https://ad.doubleclick.net/ccm/s/collect?auid=548323324.1789393103&gtm=45He6992v838805631za200zd838805631xea&fmt=8' violates the following Content Security Policy directive: "connect-src https://www.google-analytics.com https://boards-api.greenhouse.io https://api.phonepe.com https://www.phonepe.com https://phon.pe https://phonepe.com https://website.phonepe.com https://insights-api.phonepe.com https://sentry.phonepe.com https://page-source.com https://css.page-source.com https://logo.page-source.com https://cdn.page-source.com https://hcaptcha.com https://*.hcaptcha.com https://www.googleadservices.com/ https://www.google.com/ 'self'". The action has been blocked. [https://www.googletagmanager.com/gtm.js?id=GTM-MZ5VBXT:371]
• • Fetch API cannot load https://ad.doubleclick.net/ccm/s/collect?auid=548323324.1789393103&gtm=45He6992v838805631za200zd838805631xea&fmt=8. Refused to connect because it violates the document's Content Security Policy. [https://www.googletagmanager.com/gtm.js?id=GTM-MZ5VBXT:371]
• • Loading the font 'data:font/woff;base64,d09GRk9UVE8AAAVkAAsAAAAAB1wAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABDRkYgAAABCAAAAi4AAAKbH/pWDkZGVE0AAAM4AAAAGgAAABxt0civR0RFRgAAA1QAAAAcAAAAIAAyAARPUy8yAAADcAAAAFIAAABgUBj/rmNtYXAAAAPEAAAAUAAAAWIiC0SwaGVhZAAABBQAAAAuAAAANgABMftoaGVhAAAERAAAABwAAAAkA+UCA2htdHgAAARgAAAADgAAAA4ESgBKbWF4cAAABHAAAAAGAAAABgAFUABuYW1lAAAEeAAAANwAAAFuBSeBwnBvc3QAAAVUAAAAEAAAACAAAwABeJw9ks9vEkEUx2cpWyeUoFYgNkHi2Wt7N3rVm3cTs3UVLC4LxIWEQvi1P3i7O1tYLJDAmlgKGEhQrsajf0j7J3jYTXrQWUrMJG+++b55n5e8NwwKBhHDMLv5kxT3ATEBxKBn3qOAl...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' violates the following Content Security Policy directive: "font-src https://www.phonepe.com https://phonepe.com https://website.phonepe.com https://cdn.jotfor.ms https://fonts.gstatic.com/ 'self'". The action has been blocked. [https://www.phonepe.com/:1]
• • Loading the font 'data:font/ttf;base64,AAEAAAANAIAAAwBQRkZUTW3RyK8AAAdIAAAAHEdERUYANAAGAAAHKAAAACBPUy8yT/b9sgAAAVgAAABWY21hcCIPRb0AAAHIAAABYmdhc3D//wADAAAHIAAAAAhnbHlmP5u2YAAAAzwAAAIsaGVhZAABMfsAAADcAAAANmhoZWED5QIFAAABFAAAACRobXR4BkoASgAAAbAAAAAWbG9jYQD2AaIAAAMsAAAAEG1heHAASwBHAAABOAAAACBuYW1lBSeBwgAABWgAAAFucG9zdC+zMgMAAAbYAAAARQABAAAAAQAA8MQQT18PPPUACwIAAAAAAM9xeH8AAAAAz3F4fwAlACUB2wHbAAAACAACAAAAAAAAAAEAAAHbAAAALgIAAAAAAAHbAAEAAAAAAAAAAAAAAAAAAAAEAAEAAAAHAEQAAgAAAAAAAgAAAAEAAQAAAEAAAAAAAAAAAQIAAZAABQAIAUwBZgAAAEcBTAFmAA...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' violates the following Content Security Policy directive: "font-src https://www.phonepe.com https://phonepe.com https://website.phonepe.com https://cdn.jotfor.ms https://fonts.gstatic.com/ 'self'". The action has been blocked. [https://www.phonepe.com/:1]

Fix: Fix JS files returning 404/failed requests and resolve the listed runtime exceptions.