{ "url": "https://www.tamilsexzone.com", "auditedAt": "2026-07-27T15:46:35.480Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete audit. Representative browser routes encountered Cloudflare verification; those challenge states were directly judged as issues and raw route HTML was also inspected.", "page": { "appType": "mpa", "framework": "WordPress", "notes": "Public adult-media catalogue with server-rendered listing/detail/form templates, an AgeVerif gate, and intermittent Cloudflare bot challenges." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "discoverability", "trace", "har", "headers", "cookies", "trackers", "secrets", "images", "lighthouse", "heap-summary", "raw-http-fetch" ], "guidanceConsulted": [ "dark-mode", "adapt-scrollbar-to-contrast-preferences", "cross-document-transitions", "scroll-progress-indicator", "declarative-dialog-popover-control", "size-aware-styling", "css", "interest-triggered-action-previews", "forms", "optimize-image-priority", "optimize-preload-priority", "identify-heavy-scripts", "accessibility", "fluid-scaling", "html", "search-hidden-content", "security", "privacy", "passkeys", "detect-initial-visibility-state", "translator", "autofill-sign-in-form", "passkey-management", "deliver-optimized-decorative-images", "deprioritize-background-fetches", "physics-based-easing", "light-dismiss-a-dialog", "accessible-error-announcement", "visually-stable-font-fallbacks", "break-up-long-tasks", "improve-text-layout-and-legibility", "flicker-free-client-side-ab-testing", "persistent-toast-notifications", "autofill-address-form", "webmcp", "language-model", "manage-recurring-intervals" ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "Homepage first viewport with age-verification gate", "condition": "desktop", "findingIds": [ "F001" ] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "Mobile first viewport with age-verification gate", "condition": "360x800", "findingIds": [ "F008" ] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "Homepage under dark preference", "condition": "prefers-color-scheme: dark", "findingIds": [ "F001" ] }, { "type": "screenshot", "path": "evidence/detail-mobile.png", "caption": "Detail route interrupted by Cloudflare challenge", "condition": "360x800", "findingIds": [ "F009", "F024" ] }, { "type": "screenshot", "path": "evidence/404-mobile.png", "caption": "404 route challenge state", "condition": "360x800", "findingIds": [ "F024" ] }, { "type": "layout", "path": "evidence/home-layout-mobile.json", "caption": "Mobile overflow, CLS, and long-task metrics", "condition": "360x800", "findingIds": [ "F004" ] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "Rendered homepage DOM and CSS", "condition": "default", "findingIds": [ "F016", "F022", "F025", "F027" ] }, { "type": "other", "path": "evidence/probe.json", "caption": "DOM, forms, semantics, responsive-feature and target-size probe", "condition": "default", "findingIds": [ "F003", "F005", "F006", "F007", "F013", "F015", "F019", "F022", "F026" ] }, { "type": "other", "path": "evidence/reduced-motion.json", "caption": "Reduced-motion animation probe", "condition": "prefers-reduced-motion: reduce", "findingIds": [] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "DevTools load trace", "condition": "default", "findingIds": [] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "Compact FCP/LCP/TBT trace summary", "condition": "default", "findingIds": [ "F010" ] }, { "type": "har", "path": "evidence/home.har", "caption": "Load network archive", "condition": "default", "findingIds": [ "F011" ] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "Network totals, third parties, blockers, and hygiene", "condition": "default", "findingIds": [ "F011", "F012", "F021", "F029" ] }, { "type": "other", "path": "evidence/images.json", "caption": "Image dimensions, formats, sizing, lazy loading and alt audit", "condition": "default", "findingIds": [ "F017", "F028" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "Security response header inspection", "condition": "default", "findingIds": [ "F020", "F023" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "Cookie attributes inspection", "condition": "default", "findingIds": [] }, { "type": "other", "path": "evidence/trackers.json", "caption": "Third-party origin inspection", "condition": "default", "findingIds": [ "F021", "F029" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "Client-side secret scan", "condition": "default", "findingIds": [] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "Raw HTML vs rendered-content comparison", "condition": "no JavaScript", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "Discoverability rendered browser view", "condition": "JavaScript enabled", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "Discoverability crawler view", "condition": "JavaScript disabled", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "Lighthouse performance, accessibility, best-practices and SEO run", "condition": "mobile", "findingIds": [ "F002", "F007", "F010", "F011", "F012", "F013", "F014", "F016", "F017", "F018", "F019" ] }, { "type": "heap", "path": "evidence/heap-baseline.json", "caption": "Baseline heap summary", "condition": "before interaction", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-post-scroll-valid.json", "caption": "Heap after ten full-page scroll cycles", "condition": "after repeated scroll", "findingIds": [] }, { "type": "dom", "path": "evidence/categories-raw.html", "caption": "Raw categories template HTML", "condition": "raw fetch", "findingIds": [] }, { "type": "dom", "path": "evidence/detail-raw.html", "caption": "Raw detail template HTML", "condition": "raw fetch", "findingIds": [ "F009" ] }, { "type": "dom", "path": "evidence/report-form-raw.html", "caption": "Raw report-form template HTML", "condition": "raw fetch", "findingIds": [] }, { "type": "dom", "path": "evidence/not-found-raw.html", "caption": "Raw 404 template HTML", "condition": "raw fetch", "findingIds": [ "F024" ] }, { "type": "other", "path": "evidence/robots.txt", "caption": "Robots policy", "condition": "raw fetch", "findingIds": [] }, { "type": "other", "path": "evidence/sitemap.xml", "caption": "Sitemap index", "condition": "raw fetch", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Emulated-media captures and probe show the fixed dark presentation, one reduced-motion rule, zero active animations, and Lighthouse contrast failures.", "evidence": "Desktop and prefers-color-scheme:dark screenshots are effectively identical; the site is hard-coded dark and the white age-verification card remains white.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png", "evidence/reduced-motion.json", "evidence/lighthouse.json" ], "findingIds": [ "F001" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "Emulated-media captures and probe show the fixed dark presentation, one reduced-motion rule, zero active animations, and Lighthouse contrast failures.", "evidence": "Under prefers-reduced-motion: reduce the probe found the preference active, one matching CSS rule, and zero active animations after load.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png", "evidence/reduced-motion.json", "evidence/lighthouse.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "issues", "confidence": "high", "method": "Emulated-media captures and probe show the fixed dark presentation, one reduced-motion rule, zero active animations, and Lighthouse contrast failures.", "evidence": "Lighthouse failed color-contrast and link-in-text-block; the page relies on color for some links.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png", "evidence/reduced-motion.json", "evidence/lighthouse.json" ], "findingIds": [ "F002" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Rendered CSS/DOM probe found no View Transition or scroll-timeline markers; the site uses ordinary MPA links and native scrolling without custom gesture handlers.", "evidence": "The live style probe found no view-transition marker and navigation is a traditional MPA with no cross-document transition declaration.", "pathIds": [ "home" ], "artifacts": [ "evidence/probe.json" ], "findingIds": [ "F003" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "medium", "method": "Rendered CSS/DOM probe found no View Transition or scroll-timeline markers; the site uses ordinary MPA links and native scrolling without custom gesture handlers.", "evidence": "No scroll-linked parallax, reveal, carousel, or scrollytelling interaction is present to implement.", "pathIds": [ "home" ], "artifacts": [ "evidence/probe.json" ], "reason": "No scroll-linked parallax, reveal, carousel, or scrollytelling interaction is present to implement." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "high", "method": "Rendered CSS/DOM probe found no View Transition or scroll-timeline markers; the site uses ordinary MPA links and native scrolling without custom gesture handlers.", "evidence": "CSS/DOM inspection found native scrolling and links, with no custom pointermove/swipe handlers fighting platform behavior.", "pathIds": [ "home" ], "artifacts": [ "evidence/probe.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "The 6,187px mobile page and rendered CSS were inspected for sticky/scroll-state, anchor-positioning, and attention cues.", "evidence": "Mobile layout is 6,187px tall, while the CSS/DOM probe found no scroll-state query, shrinking header, or progress indicator.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-layout-mobile.json", "evidence/probe.json" ], "findingIds": [ "F004" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "medium", "method": "The 6,187px mobile page and rendered CSS were inspected for sticky/scroll-state, anchor-positioning, and attention cues.", "evidence": "No tooltip, attached popover, or edge-positioned menu requiring anchor positioning was present in the audited surfaces.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-layout-mobile.json", "evidence/probe.json" ], "reason": "No tooltip, attached popover, or edge-positioned menu requiring anchor positioning was present in the audited surfaces." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "The 6,187px mobile page and rendered CSS were inspected for sticky/scroll-state, anchor-positioning, and attention cues.", "evidence": "The 6,187px mobile page and rendered CSS were inspected for sticky/scroll-state, anchor-positioning, and attention cues.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-layout-mobile.json", "evidence/probe.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "high", "method": "Desktop/mobile screenshots show the required age-verification gate; DOM inspection found custom role=dialog UI but no dialog, popover, or details elements.", "evidence": "The only on-load full-screen interruption is the proportionate age-verification safety gate; it exposes one clear continuation action and no unrelated promotion.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/probe.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Desktop/mobile screenshots show the required age-verification gate; DOM inspection found custom role=dialog UI but no dialog, popover, or details elements.", "evidence": "Probe found role=dialog on a DIV, but zero , popover, or details elements; login/reset and age UI depend on custom behavior.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/probe.json" ], "findingIds": [ "F005" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "Desktop/mobile screenshots show the required age-verification gate; DOM inspection found custom role=dialog UI but no dialog, popover, or details elements.", "evidence": "The underlying page devotes the main document to catalogue cards and content; the safety gate is compact and contains no competing advertising.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/probe.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "At 360x800, layout reported scrollWidth=clientWidth=360 and 0px overflow; the probe found no container queries and 18 visible controls below 24px in one dimension.", "evidence": "At 360x800 layout reported 360px scrollWidth, 360px clientWidth, viewport meta present, and 0px horizontal overflow.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-layout-mobile.json", "evidence/probe.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "At 360x800, layout reported scrollWidth=clientWidth=360 and 0px overflow; the probe found no container queries and 18 visible controls below 24px in one dimension.", "evidence": "The rendered stylesheet probe found no @container rules; catalogue cards are reused across sidebar and main grids.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-layout-mobile.json", "evidence/probe.json" ], "findingIds": [ "F006" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "At 360x800, layout reported scrollWidth=clientWidth=360 and 0px overflow; the probe found no container queries and 18 visible controls below 24px in one dimension.", "evidence": "The live probe counted 18 visible links/buttons/inputs under 24px in width or height at desktop; Lighthouse also reported links with weak discernibility.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-layout-mobile.json", "evidence/probe.json" ], "findingIds": [ "F007" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "issues", "confidence": "medium", "method": "Homepage, category, detail, report form, and a 404 were requested. The first visit showed a third-party age gate; later rendered routes hit Cloudflare verification, while raw HTML remained available.", "evidence": "The full-viewport age card says only “Start” and “We must check your age,” with no method, privacy link, provider explanation, or alternative before transfer to AgeVerif.", "pathIds": [ "home", "categories", "detail", "report-form", "not-found" ], "artifacts": [ "evidence/home-mobile.png", "evidence/detail-mobile.png", "evidence/not-found-raw.html" ], "findingIds": [ "F008" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "medium", "method": "Homepage, category, detail, report form, and a 404 were requested. The first visit showed a third-party age gate; later rendered routes hit Cloudflare verification, while raw HTML remained available.", "evidence": "Homepage initially rendered the age gate, but the detail route screenshot later showed Cloudflare “Verify you are human”; raw detail HTML was available while the rendered journey could not continue.", "pathIds": [ "home", "categories", "detail", "report-form", "not-found" ], "artifacts": [ "evidence/home-mobile.png", "evidence/detail-mobile.png", "evidence/not-found-raw.html" ], "findingIds": [ "F009" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "Homepage, category, detail, report form, and a 404 were requested. The first visit showed a third-party age gate; later rendered routes hit Cloudflare verification, while raw HTML remained available.", "evidence": "Raw 404 returned HTTP 404 with “Page not found” and a Return to Home action; required form fields expose aria-required/aria-invalid state.", "pathIds": [ "home", "categories", "detail", "report-form", "not-found" ], "artifacts": [ "evidence/home-mobile.png", "evidence/detail-mobile.png", "evidence/not-found-raw.html" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Trace measured FCP/LCP 1.545s and TBT 6.59ms in one run; Lighthouse measured LCP 5.6s. CLS was 0.00025. HAR found seven parser-blocking stylesheets and parser-inserted scripts.", "evidence": "Lighthouse measured LCP 5.6s and performance 0.74, although a separate trace measured LCP 1.545s; the variance itself signals an unreliable load path.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-layout-mobile.json", "evidence/home-summary.json", "evidence/lighthouse.json" ], "findingIds": [ "F010" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Trace measured FCP/LCP 1.545s and TBT 6.59ms in one run; Lighthouse measured LCP 5.6s. CLS was 0.00025. HAR found seven parser-blocking stylesheets and parser-inserted scripts.", "evidence": "Layout observer measured CLS 0.000246 with only two tiny shifts and image cards generally reserve a 16:9 aspect ratio.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-layout-mobile.json", "evidence/home-summary.json", "evidence/lighthouse.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "Trace measured FCP/LCP 1.545s and TBT 6.59ms in one run; Lighthouse measured LCP 5.6s. CLS was 0.00025. HAR found seven parser-blocking stylesheets and parser-inserted scripts.", "evidence": "Trace found one 56.59ms long task and only 6.59ms total blocking time, with no long tasks in the mobile layout observer.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-layout-mobile.json", "evidence/home-summary.json", "evidence/lighthouse.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Trace measured FCP/LCP 1.545s and TBT 6.59ms in one run; Lighthouse measured LCP 5.6s. CLS was 0.00025. HAR found seven parser-blocking stylesheets and parser-inserted scripts.", "evidence": "HAR identified seven VeryHigh-priority parser-inserted stylesheets plus parser-inserted jQuery and AgeVerif scripts; Lighthouse estimated 680ms render-blocking savings and weak font/cache delivery.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-layout-mobile.json", "evidence/home-summary.json", "evidence/lighthouse.json" ], "findingIds": [ "F011" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Trace measured FCP/LCP 1.545s and TBT 6.59ms in one run; Lighthouse measured LCP 5.6s. CLS was 0.00025. HAR found seven parser-blocking stylesheets and parser-inserted scripts.", "evidence": "HAR loaded 16 scripts and seven stylesheets; Lighthouse found about 11KiB unused CSS plus unminified CSS/JS savings, including Contact Form 7 assets on the homepage.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-layout-mobile.json", "evidence/home-summary.json", "evidence/lighthouse.json" ], "findingIds": [ "F012" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Lighthouse scored accessibility 0.79 and failed contrast, iframe title, link name, link-in-text, and zoom. DOM found unlabelled search/login fields and a heading sequence beginning H3/H2 before H1.", "evidence": "Lighthouse failed iframe-title and link-name. The live DOM has two iframes with empty titles and search/login text inputs without associated labels.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/probe.json" ], "findingIds": [ "F013" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Lighthouse scored accessibility 0.79 and failed contrast, iframe title, link name, link-in-text, and zoom. DOM found unlabelled search/login fields and a heading sequence beginning H3/H2 before H1.", "evidence": "Lighthouse failed its color-contrast audit and reported links distinguishable only by color.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/probe.json" ], "findingIds": [ "F014" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Lighthouse scored accessibility 0.79 and failed contrast, iframe title, link name, link-in-text, and zoom. DOM found unlabelled search/login fields and a heading sequence beginning H3/H2 before H1.", "evidence": "The live heading sequence begins H3 Categories, H3 Tags, H2 sections, then reaches the page H1 near the footer; this weakens structural navigation.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/probe.json" ], "findingIds": [ "F015" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Lighthouse scored accessibility 0.79 and failed contrast, iframe title, link name, link-in-text, and zoom. DOM found unlabelled search/login fields and a heading sequence beginning H3/H2 before H1.", "evidence": "Lighthouse scored accessibility 0.79 and failed contrast, iframe title, link name, link-in-text, and zoom. DOM found unlabelled search/login fields and a heading sequence beginning H3/H2 before H1.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/probe.json" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Lighthouse scored accessibility 0.79 and failed contrast, iframe title, link name, link-in-text, and zoom. DOM found unlabelled search/login fields and a heading sequence beginning H3/H2 before H1.", "evidence": "DOM contains maximum-scale=1.0,user-scalable=0 and Lighthouse failed meta-viewport; this prevents users from magnifying content.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/probe.json" ], "findingIds": [ "F016" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Lighthouse reported no console errors, but three deprecated-API warnings and inspector issues; DOM confirms doctype/charset while images reports two unsized images.", "evidence": "Lighthouse errors-in-console audit scored 1 with no captured console errors.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/images.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Lighthouse reported no console errors, but three deprecated-API warnings and inspector issues; DOM confirms doctype/charset while images reports two unsized images.", "evidence": "Images primitive found two images without width/height; Lighthouse unsized-images also failed partially.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/images.json" ], "findingIds": [ "F017" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Lighthouse reported no console errors, but three deprecated-API warnings and inspector issues; DOM confirms doctype/charset while images reports two unsized images.", "evidence": "Lighthouse found three deprecation warnings from the Cloudflare challenge script and cookie issues in DevTools.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/images.json" ], "findingIds": [ "F018" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "Discoverability found HTTP 200, 96% raw/rendered word coverage, title/H1/description in raw HTML, and no JS shell. robots.txt points to a working sitemap; one ad anchor is not crawlable.", "evidence": "Discoverability found HTTP 200, 96% raw/rendered word coverage, title/H1/description in raw HTML, and no JS shell. robots.txt points to a working sitemap; one ad anchor is not crawlable.", "pathIds": [ "home", "categories", "detail" ], "artifacts": [ "evidence/discoverability.json", "evidence/robots.txt", "evidence/sitemap.xml" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "Discoverability found HTTP 200, 96% raw/rendered word coverage, title/H1/description in raw HTML, and no JS shell. robots.txt points to a working sitemap; one ad anchor is not crawlable.", "evidence": "Lighthouse failed crawlable-anchors for article.ad > a with no href; the probe counted three #/#! or missing destinations.", "pathIds": [ "home", "categories", "detail" ], "artifacts": [ "evidence/discoverability.json", "evidence/robots.txt", "evidence/sitemap.xml" ], "findingIds": [ "F019" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "pass", "confidence": "high", "method": "Discoverability found HTTP 200, 96% raw/rendered word coverage, title/H1/description in raw HTML, and no JS shell. robots.txt points to a working sitemap; one ad anchor is not crawlable.", "evidence": "Discoverability found HTTP 200, 96% raw/rendered word coverage, title/H1/description in raw HTML, and no JS shell. robots.txt points to a working sitemap; one ad anchor is not crawlable.", "pathIds": [ "home", "categories", "detail" ], "artifacts": [ "evidence/discoverability.json", "evidence/robots.txt", "evidence/sitemap.xml" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "pass", "confidence": "high", "method": "Discoverability found HTTP 200, 96% raw/rendered word coverage, title/H1/description in raw HTML, and no JS shell. robots.txt points to a working sitemap; one ad anchor is not crawlable.", "evidence": "Discoverability found HTTP 200, 96% raw/rendered word coverage, title/H1/description in raw HTML, and no JS shell. robots.txt points to a working sitemap; one ad anchor is not crawlable.", "pathIds": [ "home", "categories", "detail" ], "artifacts": [ "evidence/discoverability.json", "evidence/robots.txt", "evidence/sitemap.xml" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Headers, cookies, trackers, secrets, and HAR were inspected: HTTPS/HSTS/nosniff/XFO/Permissions-Policy are present; CSP and Referrer-Policy are absent; no exposed secrets were found.", "evidence": "Headers primitive confirms HTTPS, HSTS, nosniff and X-Frame-Options, but no Content-Security-Policy header is served.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json", "evidence/trackers.json", "evidence/secrets.json", "evidence/home-summary.json" ], "findingIds": [ "F020" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Headers, cookies, trackers, secrets, and HAR were inspected: HTTPS/HSTS/nosniff/XFO/Permissions-Policy are present; CSP and Referrer-Policy are absent; no exposed secrets were found.", "evidence": "HAR recorded 32/55 third-party requests and 424,378 third-party bytes, including AgeVerif statistics and advertising origins; trackers found eight external origins before the user completed verification.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json", "evidence/trackers.json", "evidence/secrets.json", "evidence/home-summary.json" ], "findingIds": [ "F021" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Headers, cookies, trackers, secrets, and HAR were inspected: HTTPS/HSTS/nosniff/XFO/Permissions-Policy are present; CSP and Referrer-Policy are absent; no exposed secrets were found.", "evidence": "Login markup exposes username and password fields, with no WebAuthn/passkey registration or authentication affordance.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json", "evidence/trackers.json", "evidence/secrets.json", "evidence/home-summary.json" ], "findingIds": [ "F022" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Headers, cookies, trackers, secrets, and HAR were inspected: HTTPS/HSTS/nosniff/XFO/Permissions-Policy are present; CSP and Referrer-Policy are absent; no exposed secrets were found.", "evidence": "Headers primitive found no Referrer-Policy; CSP/frame-ancestors is also unavailable, although X-Frame-Options and Permissions-Policy are present.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json", "evidence/trackers.json", "evidence/secrets.json", "evidence/home-summary.json" ], "findingIds": [ "F023" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "No-JS/raw HTML retained 96% of content and representative raw routes returned meaningful HTML. Rendered detail/404 requests encountered Cloudflare verification; the raw 404 returned HTTP 404 with a Return to Home action.", "evidence": "Discoverability measured 96% raw/rendered content coverage, no empty SPA mount, and title/H1/description survived without JavaScript.", "pathIds": [ "home", "detail", "not-found" ], "artifacts": [ "evidence/discoverability.json", "evidence/detail-mobile.png", "evidence/not-found-raw.html" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "issues", "confidence": "medium", "method": "No-JS/raw HTML retained 96% of content and representative raw routes returned meaningful HTML. Rendered detail/404 requests encountered Cloudflare verification; the raw 404 returned HTTP 404 with a Return to Home action.", "evidence": "Detail and 404 screenshots showed Cloudflare verification instead of route content; the 404 capture was nearly blank while raw HTML returned a meaningful recovery page.", "pathIds": [ "home", "detail", "not-found" ], "artifacts": [ "evidence/discoverability.json", "evidence/detail-mobile.png", "evidence/not-found-raw.html" ], "findingIds": [ "F024" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "medium", "method": "No-JS/raw HTML retained 96% of content and representative raw routes returned meaningful HTML. Rendered detail/404 requests encountered Cloudflare verification; the raw 404 returned HTTP 404 with a Return to Home action.", "evidence": "This public media catalogue is an MPA, not an installable application; offline media playback is not part of the observed intent.", "pathIds": [ "home", "detail", "not-found" ], "artifacts": [ "evidence/discoverability.json", "evidence/detail-mobile.png", "evidence/not-found-raw.html" ], "reason": "This public media catalogue is an MPA, not an installable application; offline media playback is not part of the observed intent." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "No-JS/raw HTML retained 96% of content and representative raw routes returned meaningful HTML. Rendered detail/404 requests encountered Cloudflare verification; the raw 404 returned HTTP 404 with a Return to Home action.", "evidence": "The origin returns a real HTTP 404 with explanatory copy and a home recovery link rather than a soft-404 or empty shell.", "pathIds": [ "home", "detail", "not-found" ], "artifacts": [ "evidence/discoverability.json", "evidence/detail-mobile.png", "evidence/not-found-raw.html" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "The document declares lang=en-US and the visible copy is English/Tamil transliteration; CSS contains extensive physical left/right properties. No dates, currencies, recurring events, or time-zone-sensitive UI were present.", "evidence": "DOM CSS contains extensive margin-left, padding-left/right, text-align:left/right and directional positioning, with no evidence of a logical-property strategy.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json" ], "findingIds": [ "F025" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "medium", "method": "The document declares lang=en-US and the visible copy is English/Tamil transliteration; CSS contains extensive physical left/right properties. No dates, currencies, recurring events, or time-zone-sensitive UI were present.", "evidence": "No rendered dates, numbers, currencies, durations, or calendar data requires locale formatting on the audited templates.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json" ], "reason": "No rendered dates, numbers, currencies, durations, or calendar data requires locale formatting on the audited templates." }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "medium", "method": "The document declares lang=en-US and the visible copy is English/Tamil transliteration; CSS contains extensive physical left/right properties. No dates, currencies, recurring events, or time-zone-sensitive UI were present.", "evidence": "No events, schedules, recurring intervals, or time-zone-sensitive values appear on the audited templates.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json" ], "reason": "No events, schedules, recurring intervals, or time-zone-sensitive values appear on the audited templates." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "high", "method": "Age-gate, login/reset, search, and report-form markup were reviewed. Login is password-only; sign-in/search fields omit autocomplete and some labels. Required report fields expose aria-required/aria-invalid.", "evidence": "Observed advertising is labelled AD and the age check does not use confirmshaming, forced continuity, preselected consent, or a disguised decline control.", "pathIds": [ "home", "report-form" ], "artifacts": [ "evidence/probe.json", "evidence/report-form-raw.html" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "pass", "confidence": "medium", "method": "Age-gate, login/reset, search, and report-form markup were reviewed. Login is password-only; sign-in/search fields omit autocomplete and some labels. Required report fields expose aria-required/aria-invalid.", "evidence": "Report-form markup marks required controls with aria-required and initial aria-invalid=false, providing a semantic basis for post-interaction validation.", "pathIds": [ "home", "report-form" ], "artifacts": [ "evidence/probe.json", "evidence/report-form-raw.html" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Age-gate, login/reset, search, and report-form markup were reviewed. Login is password-only; sign-in/search fields omit autocomplete and some labels. Required report fields expose aria-required/aria-invalid.", "evidence": "Live forms probe found null autocomplete on username, password, reset-email, and search fields.", "pathIds": [ "home", "report-form" ], "artifacts": [ "evidence/probe.json", "evidence/report-form-raw.html" ], "findingIds": [ "F026" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "issues", "confidence": "high", "method": "Age-gate, login/reset, search, and report-form markup were reviewed. Login is password-only; sign-in/search fields omit autocomplete and some labels. Required report fields expose aria-required/aria-invalid.", "evidence": "The account surface offers username/password login and lost-password reset only; no passkey management or reauthentication flow is exposed.", "pathIds": [ "home", "report-form" ], "artifacts": [ "evidence/probe.json", "evidence/report-form-raw.html" ], "findingIds": [ "F027" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "HAR transferred 696,392 bytes over 55 requests, including 424,378 third-party bytes. Images found 42 legacy-format images, 12 oversized, and 10 eager below-fold.", "evidence": "Images primitive found 42/42 images in JPEG/PNG, 12 oversized, 10 eager below-fold, and zero AVIF/WebP assets.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json", "evidence/home-summary.json" ], "findingIds": [ "F028" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "pass", "confidence": "high", "method": "HAR transferred 696,392 bytes over 55 requests, including 424,378 third-party bytes. Images found 42 legacy-format images, 12 oversized, and 10 eager below-fold.", "evidence": "Trace and layout recorded negligible blocking work after load and no repeating long tasks; no autoplay media began behind the age gate.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json", "evidence/home-summary.json" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "HAR transferred 696,392 bytes over 55 requests, including 424,378 third-party bytes. Images found 42 legacy-format images, 12 oversized, and 10 eager below-fold.", "evidence": "HAR attributed 424,378 of 696,392 transferred bytes to third-party origins and loaded multiple ad/stats/verification services before interaction.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json", "evidence/home-summary.json" ], "findingIds": [ "F029" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "medium", "method": "Raw content is crawler-visible, but this media catalogue declares no agent-facing intent or transaction/tool surface; WebMCP and on-device inference are not applicable to the audited purpose.", "evidence": "No declared agent-facing transaction/tool surface exists for this media catalogue; emerging WebMCP exposure is not required.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json", "evidence/probe.json" ], "reason": "No declared agent-facing transaction/tool surface exists for this media catalogue; emerging WebMCP exposure is not required." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "medium", "method": "Raw content is crawler-visible, but this media catalogue declares no agent-facing intent or transaction/tool surface; WebMCP and on-device inference are not applicable to the audited purpose.", "evidence": "No summarisation, generation, or inference task is part of the observed core experience, so built-in on-device AI is not applicable.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json", "evidence/probe.json" ], "reason": "No summarisation, generation, or inference task is part of the observed core experience, so built-in on-device AI is not applicable." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "Heap baseline was 131,194 nodes / 7,497,538 bytes; after ten full-page scroll cycles it was 132,059 / 7,565,080. Closures stayed flat (5,859 to 5,857) and no Detached constructor appeared among leading constructors.", "evidence": "After ten full-page scroll cycles, heap grew only 67,542 bytes (0.9%) and 865 nodes across independent cold captures; closure count decreased by two.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post-scroll-valid.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "high", "method": "Heap baseline was 131,194 nodes / 7,497,538 bytes; after ten full-page scroll cycles it was 132,059 / 7,565,080. Closures stayed flat (5,859 to 5,857) and no Detached constructor appeared among leading constructors.", "evidence": "A 7.5MB summarized heap and about 131k heap nodes are proportionate to a 42-image WordPress catalogue page.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post-scroll-valid.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "high", "method": "Heap baseline was 131,194 nodes / 7,497,538 bytes; after ten full-page scroll cycles it was 132,059 / 7,565,080. Closures stayed flat (5,859 to 5,857) and no Detached constructor appeared among leading constructors.", "evidence": "No Detached constructor appeared in leading heap constructors and closure count was flat (5,859 to 5,857) after repeated scrolling.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post-scroll-valid.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F001", "F002" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F003" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F004" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F005" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F006", "F007" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F008", "F009" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F010", "F011", "F012" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F013", "F014", "F015", "F016" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F017", "F018" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F019" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F020", "F021", "F022", "F023" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F024" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F025" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F026", "F027" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F028", "F029" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "All registered checks were judged not applicable to the observed site intent: No declared agent-facing transaction/tool surface exists for this media catalogue; emerging WebMCP exposure is not required. No summarisation, generation, or inference task is part of the observed core experience, so built-in on-device AI is not applicable." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Homepage/listing and entry gate; represents the primary catalogue landing template.", "url": "https://www.tamilsexzone.com/", "conditions": [ "desktop", "viewport 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "no JavaScript" ], "result": "issues" }, { "id": "categories", "description": "Categories index; represents taxonomy/listing navigation.", "url": "https://www.tamilsexzone.com/categories/", "conditions": [ "raw HTML", "rendered browser attempt" ], "result": "issues" }, { "id": "detail", "description": "Representative content detail route and primary watch journey.", "url": "https://www.tamilsexzone.com/teen-desi-nude-blowjob/", "conditions": [ "raw HTML", "viewport 360x800", "rendered browser attempt" ], "result": "issues" }, { "id": "report-form", "description": "Report-content form; represents the main user-submission flow.", "url": "https://www.tamilsexzone.com/report-content/", "conditions": [ "raw HTML", "form semantics" ], "result": "issues" }, { "id": "not-found", "description": "Unknown URL; represents HTTP failure and recovery state.", "url": "https://www.tamilsexzone.com/this-page-does-not-exist-audit", "conditions": [ "raw HTTP", "viewport 360x800" ], "result": "issues" } ], "findings": [ { "id": "F002", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "respect-user-preferences", "principleCheckId": "respects-contrast", "severity": "high", "confidence": "high", "summary": "Essential UI does not consistently meet contrast requirements.", "evidence": "Lighthouse failed color-contrast and link-in-text-block; the page relies on color for some links.", "suggestedFix": "Use tested foreground/background tokens and non-color link affordances that survive high-contrast modes.", "guidanceId": "adapt-scrollbar-to-contrast-preferences", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/lighthouse.json" ], "effort": "medium" }, { "id": "F009", "pathId": "detail", "url": "https://www.tamilsexzone.com/teen-desi-nude-blowjob/", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "severity": "high", "confidence": "medium", "summary": "Representative content routes are interrupted by bot verification.", "evidence": "Homepage initially rendered the age gate, but the detail route screenshot later showed Cloudflare “Verify you are human”; raw detail HTML was available while the rendered journey could not continue.", "suggestedFix": "Tune bot protection so legitimate browsers can reach age verification and content, and add a clear retry/support path when challenge completion fails.", "guidanceId": "forms", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/detail-mobile.png", "evidence/detail-raw.html" ], "effort": "medium" }, { "id": "F010", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "severity": "high", "confidence": "high", "summary": "Load performance is inconsistent and can miss the good LCP threshold.", "evidence": "Lighthouse measured LCP 5.6s and performance 0.74, although a separate trace measured LCP 1.545s; the variance itself signals an unreliable load path.", "suggestedFix": "Prioritize the true LCP asset, reduce challenge/third-party variability, and validate field LCP/INP/CLS across uncached visits.", "guidanceId": "optimize-image-priority", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/lighthouse.json", "evidence/home-trace-summary.json" ], "effort": "medium" }, { "id": "F013", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "severity": "high", "confidence": "high", "summary": "Several controls and frames lack accessible names.", "evidence": "Lighthouse failed iframe-title and link-name. The live DOM has two iframes with empty titles and search/login text inputs without associated labels.", "suggestedFix": "Add meaningful iframe titles, real labels for every input, and discernible text or aria-label for icon/ad links.", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/probe.json", "evidence/lighthouse.json" ], "effort": "small" }, { "id": "F014", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "severity": "high", "confidence": "high", "summary": "Text and link contrast is below WCAG minimums.", "evidence": "Lighthouse failed its color-contrast audit and reported links distinguishable only by color.", "suggestedFix": "Adjust theme tokens to meet WCAG contrast and underline links in text rather than relying on color alone.", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/lighthouse.json" ], "effort": "small" }, { "id": "F016", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "severity": "high", "confidence": "high", "summary": "The viewport explicitly disables user zoom.", "evidence": "DOM contains maximum-scale=1.0,user-scalable=0 and Lighthouse failed meta-viewport; this prevents users from magnifying content.", "suggestedFix": "Remove maximum-scale and user-scalable restrictions; keep responsive reflow and adequately sized controls.", "guidanceId": "fluid-scaling", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/home-dom.json", "evidence/lighthouse.json" ], "effort": "small" }, { "id": "F020", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "severity": "high", "confidence": "high", "summary": "Content Security Policy is missing.", "evidence": "Headers primitive confirms HTTPS, HSTS, nosniff and X-Frame-Options, but no Content-Security-Policy header is served.", "suggestedFix": "Deploy a nonce/hash-based CSP in report-only mode, inventory required origins, then enforce it without unsafe-inline/eval.", "guidanceId": "security", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/headers.json" ], "effort": "medium" }, { "id": "F021", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "severity": "high", "confidence": "high", "summary": "Third-party requests and statistics calls begin before meaningful consent.", "evidence": "HAR recorded 32/55 third-party requests and 424,378 third-party bytes, including AgeVerif statistics and advertising origins; trackers found eight external origins before the user completed verification.", "suggestedFix": "Minimize pre-consent calls, document necessary verification processing, gate analytics/ads on consent, and proxy or self-host essential assets where appropriate.", "guidanceId": "privacy", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "effort": "medium" }, { "id": "F024", "pathId": "detail", "url": "https://www.tamilsexzone.com/teen-desi-nude-blowjob/", "principleId": "be-resilient", "principleCheckId": "resilient-runtime-behaviour", "severity": "high", "confidence": "medium", "summary": "Bot-defense runtime behavior can replace real pages with an unproductive challenge.", "evidence": "Detail and 404 screenshots showed Cloudflare verification instead of route content; the 404 capture was nearly blank while raw HTML returned a meaningful recovery page.", "suggestedFix": "Provide a robust challenge failure state, preserve page context, avoid repeated challenges, and allow retry/support without losing the destination.", "guidanceId": "detect-initial-visibility-state", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/detail-mobile.png", "evidence/404-mobile.png", "evidence/not-found-raw.html" ], "effort": "medium" }, { "id": "F001", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "severity": "medium", "confidence": "high", "summary": "The experience does not adapt its palette to the user color-scheme preference.", "evidence": "Desktop and prefers-color-scheme:dark screenshots are effectively identical; the site is hard-coded dark and the white age-verification card remains white.", "suggestedFix": "Declare color-scheme and use preference-responsive surface tokens with light-dark() or prefers-color-scheme.", "guidanceId": "dark-mode", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/home-desktop.png", "evidence/home-dark.png" ], "effort": "small" }, { "id": "F005", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "severity": "medium", "confidence": "high", "summary": "Modal UI is implemented as custom divs instead of native dialog primitives.", "evidence": "Probe found role=dialog on a DIV, but zero , popover, or details elements; login/reset and age UI depend on custom behavior.", "suggestedFix": "Use for modal account flows and declarative popover/details for transient or disclosure UI, preserving focus and light dismiss.", "guidanceId": "declarative-dialog-popover-control", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/probe.json" ], "effort": "medium" }, { "id": "F007", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "severity": "medium", "confidence": "high", "summary": "Several interactive targets are too small for reliable touch use.", "evidence": "The live probe counted 18 visible links/buttons/inputs under 24px in width or height at desktop; Lighthouse also reported links with weak discernibility.", "suggestedFix": "Increase control hit areas toward 44x44 CSS px, retain visible focus, and provide non-hover affordances.", "guidanceId": "css", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/probe.json", "evidence/lighthouse.json" ], "effort": "small" }, { "id": "F008", "pathId": "detail", "url": "https://www.tamilsexzone.com/teen-desi-nude-blowjob/", "principleId": "support-core-task-success", "principleCheckId": "clear-purpose-and-primary-action", "severity": "medium", "confidence": "medium", "summary": "The first action is vague and gives no decision context.", "evidence": "The full-viewport age card says only “Start” and “We must check your age,” with no method, privacy link, provider explanation, or alternative before transfer to AgeVerif.", "suggestedFix": "Rename the action to describe the verification step and disclose method, provider, data use, privacy terms, and recovery options in the gate.", "guidanceId": "interest-triggered-action-previews", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/home-mobile.png" ], "effort": "medium" }, { "id": "F011", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "severity": "medium", "confidence": "high", "summary": "The critical path contains avoidable render-blocking resources.", "evidence": "HAR identified seven VeryHigh-priority parser-inserted stylesheets plus parser-inserted jQuery and AgeVerif scripts; Lighthouse estimated 680ms render-blocking savings and weak font/cache delivery.", "suggestedFix": "Inline only critical CSS, defer noncritical plugin styles/scripts, use font-display, and load verification code at the latest safe point.", "guidanceId": "optimize-preload-priority", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/home-summary.json", "evidence/home.har", "evidence/lighthouse.json" ], "effort": "medium" }, { "id": "F015", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "severity": "medium", "confidence": "high", "summary": "Heading order does not reflect the visual reading hierarchy.", "evidence": "The live heading sequence begins H3 Categories, H3 Tags, H2 sections, then reaches the page H1 near the footer; this weakens structural navigation.", "suggestedFix": "Place the page H1 first in main content and nest H2/H3 sections in logical order; verify keyboard focus order alongside it.", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/probe.json" ], "effort": "small" }, { "id": "F017", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "severity": "medium", "confidence": "high", "summary": "Some images lack intrinsic dimensions.", "evidence": "Images primitive found two images without width/height; Lighthouse unsized-images also failed partially.", "suggestedFix": "Add width and height matching intrinsic aspect ratio to logo/decorative images and preserve aspect-ratio in responsive CSS.", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/images.json", "evidence/lighthouse.json" ], "effort": "small" }, { "id": "F018", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "severity": "medium", "confidence": "high", "summary": "The browser reports deprecated APIs and inspector issues.", "evidence": "Lighthouse found three deprecation warnings from the Cloudflare challenge script and cookie issues in DevTools.", "suggestedFix": "Update or configure third-party challenge code to supported APIs and resolve emitted cookie/inspector issues.", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/lighthouse.json" ], "effort": "medium" }, { "id": "F019", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "be-discoverable", "principleCheckId": "crawlable-and-mobile-friendly", "severity": "medium", "confidence": "high", "summary": "At least one prominent ad card is not a crawlable link.", "evidence": "Lighthouse failed crawlable-anchors for article.ad > a with no href; the probe counted three #/#! or missing destinations.", "suggestedFix": "Give genuine navigation controls real href destinations and use buttons for in-page actions.", "guidanceId": "search-hidden-content", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/lighthouse.json", "evidence/probe.json" ], "effort": "small" }, { "id": "F022", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "severity": "medium", "confidence": "high", "summary": "Authentication is password-only and omits modern credential support.", "evidence": "Login markup exposes username and password fields, with no WebAuthn/passkey registration or authentication affordance.", "suggestedFix": "Offer passkeys/WebAuthn alongside fallback recovery and use correct username/current-password autocomplete tokens.", "guidanceId": "passkeys", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/home-dom.json", "evidence/probe.json" ], "effort": "medium" }, { "id": "F023", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "severity": "medium", "confidence": "high", "summary": "Referrer Policy is missing and browser defenses are incomplete.", "evidence": "Headers primitive found no Referrer-Policy; CSP/frame-ancestors is also unavailable, although X-Frame-Options and Permissions-Policy are present.", "suggestedFix": "Set a strict-origin-when-cross-origin or stricter Referrer-Policy and fold clickjacking protection into CSP frame-ancestors.", "guidanceId": "security", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/headers.json" ], "effort": "small" }, { "id": "F025", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "severity": "medium", "confidence": "high", "summary": "The stylesheet is heavily tied to physical left/right layout.", "evidence": "DOM CSS contains extensive margin-left, padding-left/right, text-align:left/right and directional positioning, with no evidence of a logical-property strategy.", "suggestedFix": "Replace physical spacing/positioning with inline/block logical properties and test translated/RTL layouts.", "guidanceId": "translator", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/home-dom.json" ], "effort": "small" }, { "id": "F026", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "severity": "medium", "confidence": "high", "summary": "Sign-in and search inputs omit autocomplete assistance.", "evidence": "Live forms probe found null autocomplete on username, password, reset-email, and search fields.", "suggestedFix": "Add username, current-password, email, and search autocomplete/inputmode tokens as appropriate.", "guidanceId": "autofill-sign-in-form", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/probe.json" ], "effort": "small" }, { "id": "F027", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "be-trustworthy", "principleCheckId": "safe-commercial-and-account-flows", "severity": "medium", "confidence": "high", "summary": "Account access lacks phishing-resistant authentication and clear modern recovery affordances.", "evidence": "The account surface offers username/password login and lost-password reset only; no passkey management or reauthentication flow is exposed.", "suggestedFix": "Add passkey sign-in/management, preserve a clear recovery route, and require reauthentication for sensitive account actions.", "guidanceId": "passkey-management", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/home-dom.json" ], "effort": "medium" }, { "id": "F028", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "severity": "medium", "confidence": "high", "summary": "Image delivery wastes bytes through legacy formats and oversized variants.", "evidence": "Images primitive found 42/42 images in JPEG/PNG, 12 oversized, 10 eager below-fold, and zero AVIF/WebP assets.", "suggestedFix": "Generate AVIF/WebP srcsets, right-size candidates, lazy-load below-fold cards, and preserve eager priority only for the LCP image.", "guidanceId": "deliver-optimized-decorative-images", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/images.json" ], "effort": "medium" }, { "id": "F029", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "severity": "medium", "confidence": "high", "summary": "Third-party resources consume most transferred bytes without a stated budget.", "evidence": "HAR attributed 424,378 of 696,392 transferred bytes to third-party origins and loaded multiple ad/stats/verification services before interaction.", "suggestedFix": "Set a per-template third-party budget, defer nonessential media/scripts, and remove vendors that do not justify their byte/privacy cost.", "guidanceId": "deprioritize-background-fetches", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "effort": "medium" }, { "id": "F003", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "severity": "low", "confidence": "high", "summary": "Route changes are abrupt rather than continuity-preserving.", "evidence": "The live style probe found no view-transition marker and navigation is a traditional MPA with no cross-document transition declaration.", "suggestedFix": "Add progressive cross-document View Transitions for list-to-detail and filter navigation, with a no-motion fallback.", "guidanceId": "cross-document-transitions", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/probe.json" ], "effort": "medium" }, { "id": "F004", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "severity": "low", "confidence": "high", "summary": "The long catalogue has no scroll-state navigation feedback.", "evidence": "Mobile layout is 6,187px tall, while the CSS/DOM probe found no scroll-state query, shrinking header, or progress indicator.", "suggestedFix": "Add a lightweight scroll progress or state-aware sticky header using declarative scroll-state/scroll-driven CSS.", "guidanceId": "scroll-progress-indicator", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/home-layout-mobile.json" ], "effort": "small" }, { "id": "F006", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "severity": "low", "confidence": "high", "summary": "Reusable content cards do not use component-level responsiveness.", "evidence": "The rendered stylesheet probe found no @container rules; catalogue cards are reused across sidebar and main grids.", "suggestedFix": "Give reusable card containers container-type and adapt card composition with @container queries, retaining viewport fallbacks.", "guidanceId": "size-aware-styling", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/probe.json" ], "effort": "small" }, { "id": "F012", "pathId": "home", "url": "https://www.tamilsexzone.com/", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "severity": "low", "confidence": "high", "summary": "Plugin and third-party code ships before it is needed.", "evidence": "HAR loaded 16 scripts and seven stylesheets; Lighthouse found about 11KiB unused CSS plus unminified CSS/JS savings, including Contact Form 7 assets on the homepage.", "suggestedFix": "Conditionally enqueue WordPress plugin assets per template, remove unused styles, and defer third-party code.", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "modern-web-guidance", "artifacts": [ "evidence/home-summary.json", "evidence/lighthouse.json" ], "effort": "medium" } ], "taskList": [ { "id": "T002", "title": "Use tested foreground/background tokens and non-color link affordances that survive high-contrast modes.", "priority": 1, "findingIds": [ "F002" ], "guidanceId": "adapt-scrollbar-to-contrast-preferences", "status": "open" }, { "id": "T009", "title": "Tune bot protection so legitimate browsers can reach age verification and content, and add a clear retry/support path when challenge completion fails.", "priority": 2, "findingIds": [ "F009" ], "guidanceId": "forms", "status": "open" }, { "id": "T010", "title": "Prioritize the true LCP asset, reduce challenge/third-party variability, and validate field LCP/INP/CLS across uncached visits.", "priority": 3, "findingIds": [ "F010" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T013", "title": "Add meaningful iframe titles, real labels for every input, and discernible text or aria-label for icon/ad links.", "priority": 4, "findingIds": [ "F013" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T014", "title": "Adjust theme tokens to meet WCAG contrast and underline links in text rather than relying on color alone.", "priority": 5, "findingIds": [ "F014" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T016", "title": "Remove maximum-scale and user-scalable restrictions; keep responsive reflow and adequately sized controls.", "priority": 6, "findingIds": [ "F016" ], "guidanceId": "fluid-scaling", "status": "open" }, { "id": "T020", "title": "Deploy a nonce/hash-based CSP in report-only mode, inventory required origins, then enforce it without unsafe-inline/eval.", "priority": 7, "findingIds": [ "F020" ], "guidanceId": "security", "status": "open" }, { "id": "T021", "title": "Minimize pre-consent calls, document necessary verification processing, gate analytics/ads on consent, and proxy or self-host essential assets where appropriate.", "priority": 8, "findingIds": [ "F021" ], "guidanceId": "privacy", "status": "open" }, { "id": "T024", "title": "Provide a robust challenge failure state, preserve page context, avoid repeated challenges, and allow retry/support without losing the destination.", "priority": 9, "findingIds": [ "F024" ], "guidanceId": "detect-initial-visibility-state", "status": "open" }, { "id": "T001", "title": "Declare color-scheme and use preference-responsive surface tokens with light-dark() or prefers-color-scheme.", "priority": 10, "findingIds": [ "F001" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T005", "title": "Use for modal account flows and declarative popover/details for transient or disclosure UI, preserving focus and light dismiss.", "priority": 11, "findingIds": [ "F005" ], "guidanceId": "declarative-dialog-popover-control", "status": "open" }, { "id": "T007", "title": "Increase control hit areas toward 44x44 CSS px, retain visible focus, and provide non-hover affordances.", "priority": 12, "findingIds": [ "F007" ], "guidanceId": "css", "status": "open" }, { "id": "T008", "title": "Rename the action to describe the verification step and disclose method, provider, data use, privacy terms, and recovery options in the gate.", "priority": 13, "findingIds": [ "F008" ], "guidanceId": "interest-triggered-action-previews", "status": "open" }, { "id": "T011", "title": "Inline only critical CSS, defer noncritical plugin styles/scripts, use font-display, and load verification code at the latest safe point.", "priority": 14, "findingIds": [ "F011" ], "guidanceId": "optimize-preload-priority", "status": "open" }, { "id": "T015", "title": "Place the page H1 first in main content and nest H2/H3 sections in logical order; verify keyboard focus order alongside it.", "priority": 15, "findingIds": [ "F015" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T017", "title": "Add width and height matching intrinsic aspect ratio to logo/decorative images and preserve aspect-ratio in responsive CSS.", "priority": 16, "findingIds": [ "F017" ], "guidanceId": "html", "status": "open" }, { "id": "T018", "title": "Update or configure third-party challenge code to supported APIs and resolve emitted cookie/inspector issues.", "priority": 17, "findingIds": [ "F018" ], "guidanceId": "html", "status": "open" }, { "id": "T019", "title": "Give genuine navigation controls real href destinations and use buttons for in-page actions.", "priority": 18, "findingIds": [ "F019" ], "guidanceId": "search-hidden-content", "status": "open" }, { "id": "T022", "title": "Offer passkeys/WebAuthn alongside fallback recovery and use correct username/current-password autocomplete tokens.", "priority": 19, "findingIds": [ "F022" ], "guidanceId": "passkeys", "status": "open" }, { "id": "T023", "title": "Set a strict-origin-when-cross-origin or stricter Referrer-Policy and fold clickjacking protection into CSP frame-ancestors.", "priority": 20, "findingIds": [ "F023" ], "guidanceId": "security", "status": "open" }, { "id": "T025", "title": "Replace physical spacing/positioning with inline/block logical properties and test translated/RTL layouts.", "priority": 21, "findingIds": [ "F025" ], "guidanceId": "translator", "status": "open" }, { "id": "T026", "title": "Add username, current-password, email, and search autocomplete/inputmode tokens as appropriate.", "priority": 22, "findingIds": [ "F026" ], "guidanceId": "autofill-sign-in-form", "status": "open" }, { "id": "T027", "title": "Add passkey sign-in/management, preserve a clear recovery route, and require reauthentication for sensitive account actions.", "priority": 23, "findingIds": [ "F027" ], "guidanceId": "passkey-management", "status": "open" }, { "id": "T028", "title": "Generate AVIF/WebP srcsets, right-size candidates, lazy-load below-fold cards, and preserve eager priority only for the LCP image.", "priority": 24, "findingIds": [ "F028" ], "guidanceId": "deliver-optimized-decorative-images", "status": "open" }, { "id": "T029", "title": "Set a per-template third-party budget, defer nonessential media/scripts, and remove vendors that do not justify their byte/privacy cost.", "priority": 25, "findingIds": [ "F029" ], "guidanceId": "deprioritize-background-fetches", "status": "open" }, { "id": "T003", "title": "Add progressive cross-document View Transitions for list-to-detail and filter navigation, with a no-motion fallback.", "priority": 26, "findingIds": [ "F003" ], "guidanceId": "cross-document-transitions", "status": "open" }, { "id": "T004", "title": "Add a lightweight scroll progress or state-aware sticky header using declarative scroll-state/scroll-driven CSS.", "priority": 27, "findingIds": [ "F004" ], "guidanceId": "scroll-progress-indicator", "status": "open" }, { "id": "T006", "title": "Give reusable card containers container-type and adapt card composition with @container queries, retaining viewport fallbacks.", "priority": 28, "findingIds": [ "F006" ], "guidanceId": "size-aware-styling", "status": "open" }, { "id": "T012", "title": "Conditionally enqueue WordPress plugin assets per template, remove unused styles, and defer third-party code.", "priority": 29, "findingIds": [ "F012" ], "guidanceId": "identify-heavy-scripts", "status": "open" } ], "budget": { "pathCount": 5, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-27T15-46-35-480Z" }