Audit Result

UUID: 01a09a3a-8269-7269-bc7a-2990063f04b8

Share on X Recheck Back to history
s.posmana.com

https://s.posmana.com/#/?q=&cat=all&sort=featured

Scanned 1 month ago

82
Fair Score
39 total checks
Passed
26
Warnings
12
Errors
1

Meta Information

  • Title Tag Pass

    Found 38 characters. Length is optimal.

  • Meta Description Pass

    Found 121 characters. Good snippet length.

  • Canonical URL Pass

    Canonical found: https://s.posmana.com/#/

  • Favicon Pass

    Favicon found and reachable: data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect width='32' height='32' rx='8' fill='%23f2f2f2'/%3E%3Cpath d='M16 5l9 11-9 11-9-11z' fill='%232b6cd4'/%3E%3Ccircle cx='16' cy='16' r='3' fill='%23e9a23b'/%3E%3C/svg%3E (HTTP 200).

  • Viewport Meta Pass

    Viewport configured: width=device-width, initial-scale=1.0

  • HTML Lang Pass

    Language declared as "fa".

Content Structure

  • H1 Tag Pass

    Exactly one H1 found: "هر تراکنش;یک دست‌دادنِگرم و مطمئن.".

  • Heading Hierarchy Pass

    Valid heading flow across 13 headings.

  • Image Alt Text Pass

    All 1 images include alt text.

Technical Optimization

  • HTTPS Pass

    Page is served over HTTPS.

  • HSTS & HTTPS Redirect Warning

    2 HTTPS hardening issues detected.

    • • HSTS is missing includeSubDomains.
    • • Could not probe the HTTP version of this page.
    • • Strict-Transport-Security: max-age=31536000

    Fix: Set Strict-Transport-Security with a long max-age, add includeSubDomains, and redirect all HTTP requests to HTTPS.

  • Security Headers Warning

    Missing: content-security-policy, x-frame-options, x-content-type-options, referrer-policy.

    Full HTTP headers (17)
    • • age: 0
    • • alt-svc: h3=":443"; ma=86400
    • • cache-control: public,max-age=0,must-revalidate
    • • cache-status: "Netlify Edge"; fwd=miss; fwd-status=200; stored
    • • cf-cache-status: DYNAMIC
    • • cf-ray: a3a65518fdf61b59-IAD
    • • content-encoding: zstd
    • • content-signal: ai-train=allowed, ai-input=allowed, ai-output=allowed
    • • content-type: text/html; charset=utf-8
    • • date: Sun, 13 Sep 2026 10:05:15 GMT
    • • link: </llms.txt>; rel="llms-txt", </llms.json>; rel="llms-json", </feed.xml>; rel="alternate"; type="application/rss+xml"
    • • nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
    • • report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=fIGNSx1juUpx4qXf4Cnb0qOCxqZvJrwbFZ5bHLZ%2Ba5D0wwM4DC64ZntLg57gnDpEZGCd2pTYgwpXsQZIsOaSfClXfHKDe7tznu9OJFpNSHAFem0Hx0mkORBk4FOdAKCq%2F3D6XN%2Fw5qhF2Zmh"}]}
    • • server: cloudflare
    • • strict-transport-security: max-age=31536000
    • • vary: Accept-Encoding
    • • x-nf-request-id: 01M2D3MTYTXN43GA66EYT29PP3

    Fix: Add the missing security headers at your reverse proxy or application layer.

  • CSP Quality Warning

    Content-Security-Policy header is missing.

    • • Missing Content-Security-Policy header.

    Fix: Define a restrictive Content-Security-Policy and avoid unsafe directives such as unsafe-inline and unsafe-eval.

  • Cookie Security Pass

    No first-party cookies were set during the initial page load.

  • Server Version Disclosure Pass

    Server response headers do not expose version tokens.

  • Cloudflare Proxy Pass

    Domain appears to be behind Cloudflare.

    • • server: cloudflare
    • • cf-cache-status: DYNAMIC
    • • cf-ray: a3a65518fdf61b59-IAD
  • Perceived Load Time Pass

    Loaded in 1.47s (perceived).

  • Render Blocking Resources Warning

    0 scripts and 1 styles may block rendering.

    • • style: https://s.posmana.com/assets/index-BmfMEs1g.css

    Fix: Defer non-critical scripts and inline critical CSS to improve first paint speed.

  • Compression Warning

    2 text resources look uncompressed.

    • • https://drive.google.com/auth_warmup (text/html; charset=utf-8)
    • • https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js (text/javascript)

    Fix: Enable Brotli or Gzip compression for HTML, CSS, JS, and JSON responses.

  • Robots.txt Pass

    Found robots.txt (200).

  • Sitemap File Pass

    Found sitemap (200) at https://s.posmana.com/sitemap.xml.

  • Crawl Directives Warning

    No robots meta tag defined.

    Fix: Add <meta name="robots" content="index,follow"> (or the intended directive) in <head>.

Accessibility Basics

  • Form Labels Error

    21 of 25 controls are missing labels.

    • • input[type="text"] (name)
    • • input[type="email"] (email)
    • • input[type="text"] (phone)
    • • input[type="text"] (topic)
    • • textarea (message)
    • • input (bot-field)
    • • input[type="text"] (name)
    • • input[type="text"] (phone)
    • • input[type="text"] (business)
    • • input[type="text"] (city)
    • • input[type="text"] (device)
    • • input (bot-field)
    • • input[type="text"] (name)
    • • input[type="text"] (phone)
    • • input[type="text"] (model)
    • • input[type="text"] (condition)
    • • textarea (notes)
    • • input (bot-field)
    • • input[type="email"] (email)
    • • input (bot-field)
    • • input[type="text"].hidden (bot-field)

    Fix: Associate each form control with a visible label, aria-label, or aria-labelledby.

  • Landmarks Pass

    Header, nav, main, and footer landmarks are present.

  • Tap Target Size Warning

    25 interactive elements appear smaller than 48px.

    • • a.flex.items-center (مانا — صفحه اصلی) - 136x38px
    • • a.px-3.py-1.5 (فروشگاه) - 72x34px
    • • a.px-3.py-1.5 (بازار کارتخوان) - 94x32px
    • • a.px-3.py-1.5 (بازارچه) - 59x32px
    • • a.px-3.py-1.5 (راهنمای شهرها) - 108x32px
    • • a.px-3.py-1.5 (پذیرنده شوید) - 94x32px
    • • a.btn-blue.ms-1 (داشبورد پذیرندگان) - 120x35px
    • • button.relative.w-10 (سبد خرید — ۰ قلم) - 40x40px
    • • button.chip.chip-active (همه۶) - 69x39px
    • • button.chip (رومیزی۲) - 82x39px
    • • button.chip (سیار۲) - 69x39px
    • • button.chip (خودپرداز۱) - 87x39px
    • • button.chip (لوازم جانبی۱) - 103x39px
    • • button.h-1.5.rounded-full (نمای دستگاه) - 20x6px
    • • button.h-1.5.rounded-full (نمای ترمینال) - 6x6px
    • • button.absolute.start-2 (نمای قبلی) - 32x32px
    • • button.absolute.end-2 (نمای بعدی) - 32x32px
    • • a.mt-1.5.inline-flex (مانا S9 پرو) - 353x28px
    • • button.shrink-0.h-10 (افزودن) - 97x40px
    • • button.h-1.5.rounded-full (نمای دستگاه) - 20x6px
    • • button.h-1.5.rounded-full (نمای ترمینال) - 6x6px
    • • button.absolute.start-2 (نمای قبلی) - 32x32px
    • • button.absolute.end-2 (نمای بعدی) - 32x32px
    • • a.mt-1.5.inline-flex (مانا گو مینی) - 353x28px
    • • button.shrink-0.h-10 (افزودن) - 97x40px

    Fix: Increase target size to at least 48x48 CSS pixels for touch interactions.

Social & Rich Results

  • Open Graph Basics Pass

    Core Open Graph tags are present.

  • Open Graph Image Pass

    og:image is present and absolute.

    Open Graph Image
  • Twitter Card Pass

    twitter:card set to summary_large_image.

  • Structured Data Pass

    JSON-LD schema detected.

  • PWA Metadata Warning

    Manifest or Apple touch icon is missing.

    Fix: Link your web app manifest and apple-touch-icon for improved install/share experiences.

  • Open Graph/Twitter Quality Warning

    1 social preview quality issues detected.

    • • ISSUE: Could not determine preview image dimensions.
    • • GUIDELINE: Optimal og:title length: 40-60 characters (acceptable: 10-70).
    • • GUIDELINE: Optimal og:description length: 110-160 characters (acceptable: 50-200).
    • • GUIDELINE: Optimal preview image size: 1200x630 pixels.
    • • GUIDELINE: Optimal preview image aspect ratio: 1.91:1.
    • • GUIDELINE: Optimal preview image file size: under 5 MB.
    • • GUIDELINE: Recommended twitter:card: summary_large_image.
    • • MEASURED: Image size: 0.01 MB

    Fix: Use absolute OG/Twitter URLs, keep metadata lengths in recommended ranges, and provide a preview image near 1200x630 under 5MB.

Links Analysis

  • Internal Links Pass

    Checked 5 links. No broken internal links found.

  • External Links Warning

    1 external links returned errors or timed out.

    • • https://mastodon.social/@auric (HTTP 410)

    Fix: Replace dead external URLs or point to working alternatives.

  • Link Format Pass

    All 55 links use non-empty href values.

Performance & Runtime

  • Core Web Vitals: LCP Pass

    Largest Contentful Paint: 1.97s.

  • Core Web Vitals: CLS Pass

    Cumulative Layout Shift: 0.002.

  • Main Thread Blocking (TBT) Warning

    Total Blocking Time estimate: 443ms.

    Fix: Reduce heavy JavaScript work, split long tasks, and defer non-critical scripts.

  • Broken Assets Pass

    No failed CSS/JS/image/font/media requests detected.

  • JavaScript Runtime Errors Warning

    2 JavaScript runtime issues detected.

    • • Failed to load resource: the server responded with a status of 401 () [https://accounts.google.com/ServiceLogin?passive=1209600&osid=1&continue=https://drive.google.com/drivesharing/clientmodel?id%3D1TCmIp7J6s8u0yppKriHWrs4FOg7M20fx%26foreignService%3Dtexmex%26authuser%3D0%26origin%3Dhttps://drive.google.com&followup=https://drive.google.com/drivesharing/clientmodel?id%3D1TCmIp7J6s8u0yppKriHWrs4FOg7M20fx%26foreignService%3Dtexmex%26authuser%3D0%26origin%3Dhttps://drive.google.com:1]
    • • Permissions policy violation: compute-pressure is not allowed in this document. [https://youtube.googleapis.com/s/player/8c3fda2d/house_brand_player.vflset/en_US/base.js:3828]

    Fix: Fix JS files returning 404/failed requests and resolve the listed runtime exceptions.