Audit Result

Found 42 characters. Length is optimal.

Found 135 characters. Good snippet length.

Canonical found: https://www.taste-music.ir/

Favicon found and reachable: /icons/icon-192x192.png (HTTP 200).

Viewport configured: width=device-width, initial-scale=1, maximum-scale=5, user-scalable=yes

Language declared as "fa".

Exactly one H1 found: "Taste Music؛ دانلود و پخش آنلاین آهنگ‌های ایرانی".

Valid heading flow across 18 headings.

All 11 images include alt text.

Page is served over HTTPS.

2 HTTPS hardening issues detected.

• • Missing Strict-Transport-Security header.
• • Could not probe the HTTP version of this page.

Fix: Set Strict-Transport-Security with a long max-age, add includeSubDomains, and redirect all HTTP requests to HTTPS.

Missing: strict-transport-security.

Fix: Add the missing security headers at your reverse proxy or application layer.

1 CSP hardening issues detected.

• • script-src/default-src permits 'unsafe-inline'.
• • Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://s1.mediaad.org https://api.mediaad.org https://api.tapsell.ir https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; media-src 'self' blob: https:; connect-src 'self' https://www.taste-music.ir https://taste-music.ir https://api.mediaad.org https://s1.mediaad.org https://api.tapsell.ir https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https:; font-src 'self' data:; frame-src 'self' https://s1.mediaad.org https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://pagead2.googlesyndication.com; frame-ancestors 'self'; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests; report-uri /api/csp-report

Fix: Tighten Content-Security-Policy by removing unsafe directives and adding object-src, base-uri, and frame-ancestors restrictions.

No first-party cookies were set during the initial page load.

Server response headers do not expose version tokens.

Domain does not appear to be behind Cloudflare.

Loaded in 1.16s (perceived).

9 scripts and 0 styles may block rendering.

• • script: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202609210101/show_ads_impl.js
• • script: https://www.taste-music.ir/_next/static/chunks/0cz1d0mv5g_q7.js
• • script: https://www.taste-music.ir/_next/static/chunks/1m_64zg9lhqrl.js
• • script: https://www.taste-music.ir/_next/static/chunks/3w1_jw-aathud.js
• • script: https://www.taste-music.ir/_next/static/chunks/2sgpswyhqzu9g.js
• • script: https://www.taste-music.ir/_next/static/chunks/36igo13x9fzb2.js
• • script: https://www.taste-music.ir/_next/static/chunks/0qgp5aqq1lip3.js
• • script: https://www.taste-music.ir/_next/static/chunks/2-q4pad9lnwl6.js
• • script: https://www.taste-music.ir/_next/static/chunks/2ufbqzbeyam3w.js

Fix: Defer non-critical scripts and inline critical CSS to improve first paint speed.

Text-like assets appear compressed.

Found robots.txt (200).

Found sitemap (200) at https://www.taste-music.ir/sitemap.xml.

Robots meta found: index, follow

All 2 controls are labeled.

Header, nav, main, and footer landmarks are present.

7 interactive elements appear smaller than 48px.

• • a.sr-only.focus:not-sr-only (رفتن به محتوای اصلی) - 1x1px
• • a.inline-flex.min-h-9 (پخش) - 72x36px
• • a.inline-flex.min-h-9 (پخش) - 72x36px
• • a.inline-flex.min-h-9 (پخش) - 72x36px
• • a.inline-flex.min-h-9 (پخش) - 72x36px
• • a.inline-flex.min-h-12 (قوانین) - 37x48px
• • a.inline-flex.min-h-12 (تبلیغات) - 41x48px

Fix: Increase target size to at least 48x48 CSS pixels for touch interactions.

Core Open Graph tags are present.

og:image is present and absolute.

twitter:card set to summary_large_image.

JSON-LD schema detected.

Manifest and Apple touch icon are configured.

Social preview metadata and image quality look good for Open Graph/Twitter.

• • GUIDELINE: Optimal og:title length: 40-60 characters (acceptable: 10-70).
• • GUIDELINE: Optimal og:description length: 110-160 characters (acceptable: 50-200).
• • GUIDELINE: Optimal preview image size: 1200x630 pixels.
• • GUIDELINE: Optimal preview image aspect ratio: 1.91:1.
• • GUIDELINE: Optimal preview image file size: under 5 MB.
• • GUIDELINE: Recommended twitter:card: summary_large_image.
• • MEASURED: Image size: 0.10 MB
• • MEASURED: Image dimensions: 1200x630

Checked 44 links. No broken internal links found.

No broken external links found in checked URLs.

All 48 links use non-empty href values.

Largest Contentful Paint: 1.39s.

Cumulative Layout Shift: 0.000.

Total Blocking Time estimate: 54ms.

1 asset requests failed.

• • https://ep2.adtrafficquality.google/sodar/sodar2.js (csp)

Fix: Fix missing files, update asset URLs, and ensure static assets return HTTP 200.

10 JavaScript runtime issues detected.

• • Request failed: https://www.taste-music.ir/discover/quiz?_rsc=5CB68i4pnAekjehf (net::ERR_ABORTED, type: fetch)
• • Request failed: https://ep2.adtrafficquality.google/sodar/sodar2.js (csp, type: script)
• • Request failed: https://www.taste-music.ir/discover/search?_rsc=5CB68i4pnAekjehf (net::ERR_ABORTED, type: fetch)
• • Request failed: https://www.taste-music.ir/discover/quiz?_rsc=71YCQO0d0lFGKnko (net::ERR_ABORTED, type: fetch)
• • Request failed: https://www.taste-music.ir/?_rsc=tXyZJ52UQVBCVsD3 (net::ERR_ABORTED, type: fetch)
• • Request failed: https://www.taste-music.ir/discover/quiz?_rsc=yIp22O3xgPPxC28X (net::ERR_ABORTED, type: fetch)
• • Failed to load resource: the server responded with a status of 403 () [https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7466711778806863&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1790615312&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32%2C43%3A32%2C44%3A32&format=0x0&url=https%3A%2F%2Fwww.taste-music.ir%2F&pra=5&aiof=11&asro=0&aimartd=4&aieuf=1&aicrs=1&uach=WyJMaW51eCIsIiIsIng4NiIsIiIsIjE0NS4wLjc2MzIuNiIsbnVsbCwwLG51bGwsIjY0IixbWyJOb3Q6QS1CcmFuZCIsIjk5LjAuMC4wIl0sWyJIZWFkbGVzc0Nocm9tZSIsIjE0NS4wLjc2MzIuNiJdLFsiQ2hyb21pdW0iLCIxNDUuMC43NjMyLjYiXV0sMF0.&dt=1790615312530&bpp=3&bdt=2191&idt=42&shv=r20260925&mjsv=m202609210101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=1741627628641&frm=20&pv=2&u_tz=120&u_his=2&u_h=800&u_w=1280&u_ah=800&u_aw=1280&u_cd=24&u_sd=1&dmc=4&adx=-12245933&ady=-12245933&biw=1280&bih=800&scr_x=0&scr_y=0&eid=95403099%2C95403358&oid=2&pvsid=8072731468075869&tmod=1925392030&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C800%2C1280%2C800&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&pgls=CAk.&ifi=1&uci=a!1&fsb=1&dtd=75:1]
• • Loading the script 'https://ep2.adtrafficquality.google/sodar/sodar2.js' violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' https://s1.mediaad.org https://api.mediaad.org https://api.tapsell.ir https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback. The action has been blocked. [https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202609210101/show_ads_impl.js:150]
• • W
• • Uncaught (in promise) undefined

Fix: Fix JS files returning 404/failed requests and resolve the listed runtime exceptions.