andar.com website review

Not measured in this review.

• Tap response (INP) held steady for real visitors

  +2%

  Over the last 25 four-week periods to 2026-10-31, real Chrome visitors' tap response (inp) went from 175 ms to 171 ms at the 75th percentile (Chrome UX Report (opens in a new tab) history).

• Page weight: 5.6 MB

  5.6 MB

  Your homepage downloads 5.6 MB on a phone, 2.0 MB of it images (36%). Under 2 MB keeps phones on slow connections fast.

• About 1.6 g of CO₂ per visit

  1.58 g

  By the Sustainable Web Design model, a visit to your homepage emits about 1.58 g of CO₂e: 190.2 kg a year at 10,000 visits a month. It scales with page weight, so every byte cut lowers it.

• 49 text elements with low contrast

  49 text elements don't have enough contrast against the background to read easily, especially outdoors on a phone.

  Elements (3)

• Page should contain a level-one heading (1 element)

  Page should contain a level-one heading: 1 element on the page fails this check, rated moderate by axe-core.

  Elements (1)

• All page content should be contained by landmarks (1 element)

  All page content should be contained by landmarks: 1 element on the page fails this check, rated moderate by axe-core.

  Elements (1)

• 23 links without text

  23 visible links have no text or label, so screen readers cannot say where they go.

• 2 form fields without a label

  2 form fields have no label, so screen readers announce an empty box and autofill guesses.

  View source

• Headings skip levels

  Headings skip levels (h3 → h5), which makes the page harder to scan with a screen reader.

  View source

• No H1 headline

  There is no <h1>, so neither visitors nor Google get a clear main headline.

• Meta description is long (197 characters)

  Your meta description is 197 characters; Google truncates after about 160, so the end of your pitch is cut.

  View source

• Structured data has 2 problems

  Structured data found (Organization and WebSite) but with 2 problems, for example “Organization: logo is not an absolute URL ("//www.andar.com/cdn/shop/files/Andar_Favicon_100x100_dc…”.

  View source

• 233 internal links, 21 external

  The homepage links to 233 pages on andar.com and 21 external pages.

• 7 pages without a meta description

  /collections/crossbody-bags-1, /collections/shoulder-bags, /collections/backpacks, /collections/totes-2, /collections/clutches-1 and /collections/work-bags and 1 other have no meta description, so Google writes the search snippet from whatever text it finds.

  Elements (7)

• 15 internal pages checked

  We fetched 15 pages linked from your homepage (of 106 found) and read each the way a search engine does.

• 6 JavaScript errors while loading

  6 errors were logged to the browser console while the page loaded, for example “Failed to load resource: the server responded with a status of 403 ()”.

• Short HSTS lifetime

  HSTS is set, but max-age is 91 days; one year is the recommended minimum.

• No Referrer-Policy

  No Referrer-Policy header, so full URLs can leak to the sites you link to.

• No Permissions-Policy

  No Permissions-Policy header to switch off camera, microphone and location for embedded content.

• Deprecated X-XSS-Protection

  X-XSS-Protection is set to “1; mode=block”; the header is deprecated and can introduce bugs. Use 0 or remove it.

• No security.txt

  There is no /.well-known/security.txt telling researchers how to report a security problem to you.

• No CAA record

  andar.com has no CAA record, so any certificate authority may issue a certificate for it. A CAA record naming your provider (for example letsencrypt.org) closes that door.

• DNSSEC is off

  andar.com's DNS answers are not signed. DNSSEC stops attackers forging them to send visitors or email elsewhere; most registrars switch it on in a click, though most sites still run without it.

• No social proof

  No testimonials, customer logos, ratings or customer counts on the homepage: nothing tells a new visitor that others already trust you.

• Local business without LocalBusiness data

  Your homepage shows a street address but no LocalBusiness JSON-LD, so Google and AI assistants have to guess your address, hours and phone from the page text.

  View source

• No phone number on the homepage

  A local customer looking to call finds no phone number on the homepage. Add one, ideally as a tap-to-call link.

• No direct contact details

  No phone number or email link on the homepage, so ready-to-buy visitors have one fewer way to reach you.

• No opening hours

  The homepage shows no opening hours. If customers visit or call, show when.

• No map or directions link

  There is no link to Google or Apple Maps. A directions link is one tap for a phone visitor.

• No risk reducer

  No guarantee or risk reducer (money-back, free trial, no credit card) is mentioned, which is often what tips a hesitant visitor.

• About 706 words of copy

  The homepage carries about 706 words of visible text.

• Email authentication score: 85/100

  Email authentication: SPF record 25 points, plus 15 when it ends in -all (10 for ~all); DMARC record 25, plus 25 for a reject policy (15 for quarantine); a DKIM key on a common selector 10.

• 6 trackers load before any consent

  6

  Before a visitor clicks anything, the page loads Google Ads, Google Tag Manager, Klaviyo, Meta Pixel and Microsoft Ads and 1 more (measured from a US location before any click). No consent tool was detected. Visitors from the EU, UK and several US states must be asked first.

• 28 cookies set on arrival

  28

  Opening the homepage sets 28 cookies (measured from a US location before any click).

• No consent tool detected

  No known cookie consent tool loads with the page. Some sites build their own banner, and some only show one to visitors from the EU.

• 63 other companies contacted

  Loading the homepage contacts 63 hosts run by other companies (fonts, scripts, analytics, ads), each of which sees the visitor's IP address.