Audit Result

Found 27 characters. Keep title between 30 and 60 characters.

Fix: Add a unique <title> tag describing the main page intent in 30-60 characters.

Found 92 characters. Good snippet length.

Canonical found: https://www.picamed.ir/

Favicon found and reachable: /uploads/admin/20260722060126699-b93e3824ea1e486389139a87771ae9b0.webp (HTTP 200).

Viewport configured: width=device-width, initial-scale=1.0

Language declared as "fa".

Exactly one H1 found: "مرجع تخصصی پیکانول".

Valid heading flow across 8 headings.

All 21 images include alt text.

Page is served over HTTPS.

2 HTTPS hardening issues detected.

• • Missing Strict-Transport-Security header.
• • Could not probe the HTTP version of this page.

Fix: Set Strict-Transport-Security with a long max-age, add includeSubDomains, and redirect all HTTP requests to HTTPS.

Missing: strict-transport-security.

Fix: Add the missing security headers at your reverse proxy or application layer.

3 CSP hardening issues detected.

• • script-src/default-src permits 'unsafe-inline'.
• • script-src/default-src permits 'unsafe-eval'.
• • CSP is missing object-src 'none'.
• • Content-Security-Policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' data:; connect-src 'self' https:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'

Fix: Tighten Content-Security-Policy by removing unsafe directives and adding object-src, base-uri, and frame-ancestors restrictions.

No first-party cookies were set during the initial page load.

Versioned headers detected: server.

• • server: nginx/1.28.3 (Ubuntu)

Fix: Hide or remove version tokens in Server and X-Powered-By headers.

Domain does not appear to be behind Cloudflare.

Loaded in 2.35s (perceived).

Fix: Reduce payload size, cache static assets, and remove non-critical JS from initial load.

1 scripts and 1 styles may block rendering.

• • script: https://www.picamed.ir/js/better-stack-errors.js?v=20260829-01
• • style: https://www.picamed.ir/css/styles.css?v=about-corrections-v1

Fix: Defer non-critical scripts and inline critical CSS to improve first paint speed.

7 text resources look uncompressed.

• • https://www.picamed.ir/data/site-copy.json (application/json)
• • https://www.picamed.ir/api/settings (application/json; charset=utf-8)
• • https://www.picamed.ir/api/taxonomy (application/json; charset=utf-8)
• • https://www.picamed.ir/api/articles?view=summary (application/json; charset=utf-8)
• • https://www.picamed.ir/api/auth/me (application/json; charset=utf-8)
• • https://www.picamed.ir/api/articles/popular?limit=3 (application/json; charset=utf-8)
• • https://s2719134.eu-central-1a.betterstackdata.com/web/2719134 (text/plain)

Fix: Enable Brotli or Gzip compression for HTML, CSS, JS, and JSON responses.

Found robots.txt (200).

Found sitemap (200) at https://www.picamed.ir/sitemap.xml.

Robots meta found: index,follow,max-image-preview:large

All 0 controls are labeled.

Header, nav, main, and footer landmarks are present.

17 interactive elements appear smaller than 48px.

• • a (خانه) - 24x78px
• • a#articlesNavLink.nav-link (مقالات) - 39x78px
• • a (درباره ما) - 47x78px
• • button#cartBtn.action-btn.icon-action (Cart) - 42x42px
• • button#closeMenu.icon-btn.close-menu (×) - 29x40px
• • a (خانه) - 284x38px
• • a (فروشگاه) - 284x38px
• • a (مقالات) - 284x38px
• • a (درباره ما) - 284x38px
• • a (تماس با ما) - 284x38px
• • button.active (اسلاید ماشین ۱) - 30x9px
• • button (اسلاید ماشین ۲) - 9x9px
• • button (اسلاید ماشین ۳) - 9x9px
• • button (اسلاید ماشین ۴) - 9x9px
• • button (اسلاید ماشین ۵) - 9x9px
• • button.product-carousel-arrow.previous (محصولات قبلی) - 44x44px
• • button.product-carousel-arrow.next (محصولات بعدی) - 44x44px

Fix: Increase target size to at least 48x48 CSS pixels for touch interactions.

Core Open Graph tags are present.

og:image is present and absolute.

twitter:card set to summary_large_image.

JSON-LD schema detected.

Manifest or Apple touch icon is missing.

Fix: Link your web app manifest and apple-touch-icon for improved install/share experiences.

1 social preview quality issues detected.

• • ISSUE: Failed to fetch preview image: network error.
• • GUIDELINE: Optimal og:title length: 40-60 characters (acceptable: 10-70).
• • GUIDELINE: Optimal og:description length: 110-160 characters (acceptable: 50-200).
• • GUIDELINE: Optimal preview image size: 1200x630 pixels.
• • GUIDELINE: Optimal preview image aspect ratio: 1.91:1.
• • GUIDELINE: Optimal preview image file size: under 5 MB.
• • GUIDELINE: Recommended twitter:card: summary_large_image.

Fix: Use absolute OG/Twitter URLs, keep metadata lengths in recommended ranges, and provide a preview image near 1200x630 under 5MB.

13 internal links returned errors.

• • https://www.picamed.ir/ (HTTP 500)
• • https://www.picamed.ir/store (HTTP 500)
• • https://www.picamed.ir/store?category=category-a11fa774288b (HTTP 500)
• • https://www.picamed.ir/store?category=category-6c590c0b1ab0 (HTTP 500)
• • https://www.picamed.ir/store?category=category-d7f6af6a556d (HTTP 500)
• • https://www.picamed.ir/store?category=category-c5e8236388e9 (HTTP 500)
• • https://www.picamed.ir/store?category=category-mt5it8de-kpj7x (HTTP 500)
• • https://www.picamed.ir/store?category=category-mt5j2f6x-qblh8 (HTTP 500)
• • https://www.picamed.ir/store?category=category-mt5j2os3-pf1jr (HTTP 500)
• • https://www.picamed.ir/store?category=category-mt5j2qcg-wljwl (HTTP 500)
• • https://www.picamed.ir/store?category=category-mt5j36ae-alos2 (HTTP 500)
• • https://www.picamed.ir/store?category=category-mt5j3s6i-pbuvi (HTTP 500)
• • https://www.picamed.ir/articles (HTTP 500)

Fix: Fix or remove the listed internal URLs, and ensure routes/pages return 200 responses.

No broken external links found in checked URLs.

All 58 links use non-empty href values.

Largest Contentful Paint: 3.63s.

Fix: Improve LCP by optimizing above-the-fold media, reducing server latency, and inlining critical CSS.

Cumulative Layout Shift: 0.004.

Total Blocking Time estimate: 7ms.

No failed CSS/JS/image/font/media requests detected.

2 JavaScript runtime issues detected.

• • Request failed: https://s2719134.eu-central-1a.betterstackdata.com/web/2719134 (net::ERR_ABORTED, type: fetch)
• • Failed to load resource: the server responded with a status of 500 (Internal Server Error) [https://www.picamed.ir/:1]

Fix: Fix JS files returning 404/failed requests and resolve the listed runtime exceptions.