Audit Result

Found 27 characters. Keep title between 30 and 60 characters.

Fix: Add a unique <title> tag describing the main page intent in 30-60 characters.

Found 92 characters. Good snippet length.

Canonical found: https://www.picamed.ir/

Favicon found and reachable: /uploads/admin/sitefavicon-logo-20260913-3c9d5b.png (HTTP 200).

Viewport configured: width=device-width, initial-scale=1.0

Language declared as "fa".

Exactly one H1 found: "مرجع تخصصی پیکانول".

Valid heading flow across 12 headings.

All 33 images include alt text.

Page is served over HTTPS.

3 HTTPS hardening issues detected.

• • HSTS max-age is too short (2592000s).
• • HSTS is missing includeSubDomains.
• • Could not probe the HTTP version of this page.
• • Strict-Transport-Security: max-age=2592000

Fix: Set Strict-Transport-Security with a long max-age, add includeSubDomains, and redirect all HTTP requests to HTTPS.

Core security headers were detected.

3 CSP hardening issues detected.

• • script-src/default-src permits 'unsafe-inline'.
• • script-src/default-src permits 'unsafe-eval'.
• • CSP is missing object-src 'none'.
• • Content-Security-Policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' data:; connect-src 'self' https:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'

Fix: Tighten Content-Security-Policy by removing unsafe directives and adding object-src, base-uri, and frame-ancestors restrictions.

No first-party cookies were set during the initial page load.

Versioned headers detected: server.

• • server: nginx/1.28.3 (Ubuntu)

Fix: Hide or remove version tokens in Server and X-Powered-By headers.

Domain does not appear to be behind Cloudflare.

Loaded in 2.19s (perceived).

Fix: Reduce payload size, cache static assets, and remove non-critical JS from initial load.

1 scripts and 1 styles may block rendering.

• • script: https://www.picamed.ir/js/better-stack-errors.js?v=20260829-01
• • style: https://www.picamed.ir/css/styles.css?v=homepage-customers-logo-surface-v1

Fix: Defer non-critical scripts and inline critical CSS to improve first paint speed.

7 text resources look uncompressed.

• • https://www.picamed.ir/data/site-copy.json (application/json)
• • https://www.picamed.ir/api/settings (application/json; charset=utf-8)
• • https://www.picamed.ir/api/articles?view=summary (application/json; charset=utf-8)
• • https://www.picamed.ir/api/taxonomy (application/json; charset=utf-8)
• • https://www.picamed.ir/api/auth/me (application/json; charset=utf-8)
• • https://www.picamed.ir/api/articles/popular?limit=6 (application/json; charset=utf-8)
• • https://s2719134.eu-central-1a.betterstackdata.com/web/2719134 (text/plain)

Fix: Enable Brotli or Gzip compression for HTML, CSS, JS, and JSON responses.

Found robots.txt (200).

Found sitemap (200) at https://www.picamed.ir/sitemap.xml.

Robots meta found: index,follow,max-image-preview:large

All 0 controls are labeled.

Header, nav, main, and footer landmarks are present.

17 interactive elements appear smaller than 48px.

• • a (خانه) - 24x78px
• • a#articlesNavLink.nav-link (مقالات) - 39x78px
• • a (درباره ما) - 47x78px
• • button#cartBtn.action-btn.icon-action (Cart) - 42x42px
• • button#closeMenu.icon-btn.close-menu (×) - 29x40px
• • a (خانه) - 284x38px
• • a (فروشگاه) - 284x38px
• • a (مقالات) - 284x38px
• • a (درباره ما) - 284x38px
• • a (تماس با ما) - 284x38px
• • button.active (اسلاید ماشین ۱) - 30x9px
• • button (اسلاید ماشین ۲) - 9x9px
• • button (اسلاید ماشین ۳) - 9x9px
• • button (اسلاید ماشین ۴) - 9x9px
• • button (اسلاید ماشین ۵) - 9x9px
• • button.product-carousel-arrow.previous (محصولات قبلی) - 44x44px
• • button.product-carousel-arrow.next (محصولات بعدی) - 44x44px

Fix: Increase target size to at least 48x48 CSS pixels for touch interactions.

Core Open Graph tags are present.

og:image is present and absolute.

twitter:card set to summary_large_image.

JSON-LD schema detected.

Manifest or Apple touch icon is missing.

Fix: Link your web app manifest and apple-touch-icon for improved install/share experiences.

1 social preview quality issues detected.

• • ISSUE: Failed to fetch preview image: network error.
• • GUIDELINE: Optimal og:title length: 40-60 characters (acceptable: 10-70).
• • GUIDELINE: Optimal og:description length: 110-160 characters (acceptable: 50-200).
• • GUIDELINE: Optimal preview image size: 1200x630 pixels.
• • GUIDELINE: Optimal preview image aspect ratio: 1.91:1.
• • GUIDELINE: Optimal preview image file size: under 5 MB.
• • GUIDELINE: Recommended twitter:card: summary_large_image.

Fix: Use absolute OG/Twitter URLs, keep metadata lengths in recommended ranges, and provide a preview image near 1200x630 under 5MB.

Checked 42 links. No broken internal links found.

No broken external links found in checked URLs.

All 58 links use non-empty href values.

Largest Contentful Paint: 3.93s.

Fix: Improve LCP by optimizing above-the-fold media, reducing server latency, and inlining critical CSS.

Cumulative Layout Shift: 0.004.

Total Blocking Time estimate: 0ms.

No failed CSS/JS/image/font/media requests detected.

1 JavaScript runtime issues detected.

• • Request failed: https://s2719134.eu-central-1a.betterstackdata.com/web/2719134 (net::ERR_ABORTED, type: fetch)

Fix: Fix JS files returning 404/failed requests and resolve the listed runtime exceptions.