https://drrajeevagarwal.in/blog/donon-stanon-mein-dard-ke-kaaran/

Real users experience slow Largest Contentful Paint (Chrome UX Report field data). Optimise the largest above-the-fold element: serve a properly sized, modern-format hero image, preload it, and cut render-blocking CSS/JS.

Potential hacked-site/injected-code signals found. Scan source for obfuscated scripts and hidden iframes, check for unexpected admin users and recently modified files, restore from a clean backup, update CMS/plugins, then request a review in Search Console.

<script>eval(atob("...base64..."))</script>

<!-- remove injected script; patch the vulnerability that allowed it -->

Every page needs exactly one <h1> tag — the primary heading. It tells both users and search engines what the page is about, and is the strongest on-page ranking signal.

<body>
  <div>Page content with no H1</div>
</body>

<body>
  <h1>Your Main Page Heading</h1>
  <!-- rest of content -->
</body>

Set explicit width/height on every <img> to prevent Cumulative Layout Shift. Browser reserves the box before the image loads.

<img src="photo.jpg" alt="...">

<img src="photo.jpg" width="800" height="600" alt="...">

Add an Open Graph image so links to this page render as a rich card on social platforms. Use 1200x630 px, JPEG/PNG, under 1MB.

<head>
  <!-- no og:image -->
</head>

<head>
  <meta property="og:image" content="https://yoursite.com/og-image.jpg">
  <meta property="og:image:width" content="1200">
  <meta property="og:image:height" content="630">
</head>

Show expertise: author bio with credentials, citations to reputable sources, in-depth coverage of the topic, technical accuracy.

Add trust signals: clear contact info, privacy policy, terms of service, customer reviews, security badges, real photos of team/location.

Meta description is outside the 120-160 character range. Too short = thin content; too long = truncated by Google.

<meta name="description" content="179 chars">

<meta name="description" content="Rewritten description, 120-160 chars, with the primary keyword and a value proposition.">

Enable gzip or Brotli compression on your server. Typically cuts text payload by 70-80% — easy LCP win.

Demonstrate first-hand experience: original photos, personal anecdotes, before/after results, screenshots from the actual product/service.

Build authoritativeness: links from respected sites in your niche, mentions in industry publications, About page detailing your expertise.

Add Strict-Transport-Security header so browsers refuse HTTP for your domain after the first visit. Bumps SSL Labs grade to A+.

Strict-Transport-Security: max-age=31536000; includeSubDomains

Add rel="noopener noreferrer" to target="_blank" links. Without noopener, the linked page can manipulate your window object — security + perf risk.

<a href="https://other.com" target="_blank">External</a>

<a href="https://other.com" target="_blank" rel="noopener noreferrer">External</a>

Publish a DMARC record to tell receivers what to do with mail that fails SPF/DKIM, and where to send reports. Start at p=none to monitor, then tighten to quarantine/reject.

# no _dmarc TXT record

_dmarc.example.com.  IN  TXT  "v=DMARC1; p=quarantine; rua=mailto:dmarc@example.com"

Some images exceed the size budget and slow the page. Resize to the displayed dimensions, compress, and serve modern formats (WebP/AVIF) with responsive srcset.

<img src="hero.jpg">  <!-- 1.8 MB, 4000px wide -->

<img src="hero.webp" srcset="hero-800.webp 800w, hero-1600.webp 1600w" sizes="100vw" width="1600" height="900" loading="lazy">

Lead each section with a direct, citable answer to the question users would ask. AI engines (ChatGPT, Perplexity) cite the clearest, most specific sentences.

Add concrete facts — numbers, dates, percentages, named sources. Vague prose doesn't get cited; specific data does.

Add bulleted lists, sub-headings, definitions, and TL;DR sections. AI engines prefer clearly structured content for extraction.

Cite authoritative external sources (links, references). Pages that cite reputable sources are themselves cited more often.

Restricted schema types (e.g., FAQPage) are now reserved for government/health sites. Using them on other sites does nothing useful and may flag as spam.

Add the recommended HTTP security headers at the server/CDN level to harden the site.

# missing headers

# nginx
add_header X-Frame-Options "SAMEORIGIN";
add_header X-Content-Type-Options "nosniff";
add_header Referrer-Policy "strict-origin-when-cross-origin";
add_header Permissions-Policy "geolocation=(), microphone=()";
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";

Convert images to WebP or AVIF — typically 25-50% smaller than JPEG/PNG with no visible quality loss. Use <picture> for fallback.

<img src="photo.jpg">

<picture>
  <source type="image/avif" srcset="photo.avif">
  <source type="image/webp" srcset="photo.webp">
  <img src="photo.jpg" alt="...">
</picture>

Add loading="lazy" to images below the fold. Saves bandwidth, speeds up initial page load.

<img src="below-fold.jpg">

<img src="below-fold.jpg" loading="lazy" width="..." height="..." alt="...">

Replace generic anchor text ("click here", "read more") with descriptive phrases containing the target page's keywords. Anchors are a strong relevance signal.

<a href="/laptops">click here</a>

<a href="/laptops">programming laptops review</a>

Add X-Content-Type-Options: nosniff so browsers honour the Content-Type and don't MIME-sniff for malicious files.

X-Content-Type-Options: nosniff

Add a Content-Security-Policy header to block XSS by whitelisting allowed script/style sources.

Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'