Audit Result

Found 54 characters. Length is optimal.

Found 132 characters. Good snippet length.

Canonical link not found.

Fix: Add <link rel="canonical" href="https://example.com/page"> to avoid duplicate URL ambiguity.

Favicon found and reachable: /img/lightlogo.png?v=2 (HTTP 200).

Viewport configured: width=device-width, initial-scale=1

No lang attribute on the <html> element.

Fix: Set <html lang="en"> (or the correct locale) for accessibility and search engines.

Exactly one H1 found: "Monetize yourTelegram channelschannelscommunity.".

Detected 1 heading level jumps.

• • Skipped from h2 to h4: "Turn your communityinto recurring revenue" -> "Product".

Fix: Follow semantic order (h1 -> h2 -> h3) and avoid skipping heading levels.

1 of 8 images are missing alt text.

Fix: Add meaningful alt attributes to all informative images for accessibility and image SEO.

Page is served over HTTPS.

2 HTTPS hardening issues detected.

• • HSTS is missing includeSubDomains.
• • Could not probe the HTTP version of this page.
• • Strict-Transport-Security: max-age=15552000

Fix: Set Strict-Transport-Security with a long max-age, add includeSubDomains, and redirect all HTTP requests to HTTPS.

Core security headers were detected.

3 CSP hardening issues detected.

• • script-src/default-src permits 'unsafe-inline'.
• • CSP is missing object-src 'none'.
• • CSP is missing a base-uri restriction.
• • Content-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' https://sdk.cashfree.com https://sellgram.ndrive.app https://telegram.org https://accounts.google.com https://invitejs.trustpilot.com https://widget.trustpilot.com https://clicks.page;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://sellgram.ndrive.app https://accounts.google.com;font-src 'self' https://fonts.gstatic.com https://sellgram.ndrive.app;img-src 'self' data: https: https://sellgram.ndrive.app;connect-src 'self' https://api.cashfree.com https://sandbox.cashfree.com https://sdk.cashfree.com https://sellgram.ndrive.app wss://sellgram.ndrive.app wss://sellgram.ndrive.app:* https://accounts.google.com https://clicks.page;frame-src 'self' https://merchant.sellgram.in https://sdk.cashfree.com https://sandbox.cashfree.com https://api.cashfree.com https://sellgram.ndrive.app https://accounts.google.com;frame-ancestors 'self'

Fix: Tighten Content-Security-Policy by removing unsafe directives and adding object-src, base-uri, and frame-ancestors restrictions.

No first-party cookies were set during the initial page load.

Server response headers do not expose version tokens.

Domain appears to be behind Cloudflare.

• • server: cloudflare
• • cf-cache-status: DYNAMIC
• • cf-ray: a40f22021b1486d6-IAD

Loaded in 1.55s (perceived).

Fix: Reduce payload size, cache static assets, and remove non-critical JS from initial load.

2 scripts and 1 styles may block rendering.

• • script: https://sdk.cashfree.com/js/v3/cashfree.js
• • script: https://telegram.org/js/telegram-web-app.js
• • style: https://sellgram.in/assets/app-D6SlUrld.css

Fix: Defer non-critical scripts and inline critical CSS to improve first paint speed.

Text-like assets appear compressed.

Found robots.txt (200).

Found sitemap (200) at https://sellgram.in/sitemap.xml.

No robots meta tag defined.

Fix: Add <meta name="robots" content="index,follow"> (or the intended directive) in <head>.

All 2 controls are labeled.

Header, nav, main, and footer landmarks are present.

24 interactive elements appear smaller than 48px.

• • a.v2-logo (SELLGRAM) - 145x32px
• • a (Features) - 105x38px
• • a (How it works) - 140x38px
• • a (Pricing) - 90x38px
• • a (FAQ) - 64x38px
• • a.v2-nav-tg-link (Join SellGram Official Channel) - 119x38px
• • button.v2-ghost (Login) - 79x39px
• • button.active (₹INR) - 101x46px
• • button ($USD) - 106x46px
• • a.v2-logo (SELLGRAM) - 341x32px
• • a.v2-tg-channel-pill (Join Official Telegram Channel) - 306x40px
• • a (Features) - 228x22px
• • a (How it works) - 228x22px
• • a (Pricing) - 228x22px
• • a (FAQ) - 228x22px
• • a (Contact Us) - 228x22px
• • a (Terms of Service) - 228x22px
• • a (Privacy Policy) - 228x22px
• • a (Refund Policy) - 228x22px
• • a (Disclaimer) - 228x22px
• • button (Login) - 228x22px
• • a (Sign up) - 228x22px
• • a (Telegram Support) - 228x22px
• • a.v2-soc-btn.x-btn (X (Twitter)) - 40x40px

Fix: Increase target size to at least 48x48 CSS pixels for touch interactions.

Core Open Graph tags are present.

og:image exists but is not an absolute URL.

Fix: Use an absolute URL in <meta property="og:image">.

twitter:card set to summary_large_image.

No JSON-LD schema scripts found.

Fix: Add JSON-LD structured data matching your page type (Organization, Article, Product, etc.).

Manifest or Apple touch icon is missing.

Fix: Link your web app manifest and apple-touch-icon for improved install/share experiences.

2 social preview quality issues detected.

• • ISSUE: og:url should be an absolute URL.
• • ISSUE: Use an absolute URL for og:image or twitter:image.
• • GUIDELINE: Optimal og:title length: 40-60 characters (acceptable: 10-70).
• • GUIDELINE: Optimal og:description length: 110-160 characters (acceptable: 50-200).
• • GUIDELINE: Optimal preview image size: 1200x630 pixels.
• • GUIDELINE: Optimal preview image aspect ratio: 1.91:1.
• • GUIDELINE: Optimal preview image file size: under 5 MB.
• • GUIDELINE: Recommended twitter:card: summary_large_image.

Fix: Use absolute OG/Twitter URLs, keep metadata lengths in recommended ranges, and provide a preview image near 1200x630 under 5MB.

Checked 14 links. No broken internal links found.

1 external links returned errors or timed out.

• • https://www.instagram.com/sellgram_in/ (HTTP 429)

Fix: Replace dead external URLs or point to working alternatives.

All 36 links use non-empty href values.

Largest Contentful Paint: 1.55s.

Cumulative Layout Shift: 0.000.

Total Blocking Time estimate: 40ms.

1 asset requests failed.

• • https://static.cloudflareinsights.com/beacon.min.js/v31edd6df95cf4e85bb4c19e7a9bdbcba1788362987495 (csp)

Fix: Fix missing files, update asset URLs, and ensure static assets return HTTP 200.

2 JavaScript runtime issues detected.

• • Request failed: https://static.cloudflareinsights.com/beacon.min.js/v31edd6df95cf4e85bb4c19e7a9bdbcba1788362987495 (csp, type: script)
• • Loading the script 'https://static.cloudflareinsights.com/beacon.min.js/v31edd6df95cf4e85bb4c19e7a9bdbcba1788362987495' violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' https://sdk.cashfree.com https://sellgram.ndrive.app https://telegram.org https://accounts.google.com https://invitejs.trustpilot.com https://widget.trustpilot.com https://clicks.page". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback. The action has been blocked. [https://sellgram.in/:1]

Fix: Fix JS files returning 404/failed requests and resolve the listed runtime exceptions.