{ "url": "https://jaya9bangladesh.com", "auditedAt": "2026-07-18T22:43:53.708Z", "mode": "report", "status": "completed", "statusDetail": "Coverage complete. The requested URL redirects to https://jaya9bdt.com/, which is the rendered canonical host audited.", "page": { "appType": "hybrid", "framework": "Vue 2 / Vuetify with server HTML and client-rendered application surfaces", "notes": "Public Bengali gambling/betting site. Scope covers home, category, promotions, FAQ, auth entry, and route failure. Casino/slot/table/sports/fishing/crash pages were not separately captured because recon showed they share the category shell; no deposit or real-money transaction was performed." }, "evidenceUsed": [ "Modern Web Guidance search/retrieve", "screenshot", "dom", "evaluate-probe", "layout-metrics", "trace", "HAR", "Lighthouse", "headers", "cookies", "trackers", "secrets", "images", "discoverability", "heap-summary" ], "guidanceConsulted": [ "dark-mode", "accessibility", "css", "html", "forms", "performance", "security", "privacy", "navigation-drawer", "position-aware-tooltips", "required-field-feedback", "validate-input-after-interaction", "deliver-optimized-decorative-images", "efficient-background-processing", "coordinate-global-events", "agentic-forms", "language-model", "manage-recurring-intervals", "adapt-scrollbar-to-contrast-preferences" ], "artifacts": [ { "type": "other", "path": "evidence/controls.json", "caption": "controls" }, { "type": "other", "path": "evidence/cookies.json", "caption": "cookies" }, { "type": "screenshot", "path": "evidence/cricket-desktop.png", "caption": "cricket desktop" }, { "type": "other", "path": "evidence/cricket-metadata.json", "caption": "cricket metadata" }, { "type": "layout", "path": "evidence/cricket-mobile-layout.json", "caption": "cricket mobile layout" }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "discoverability crawler" }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "discoverability rendered" }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "discoverability" }, { "type": "screenshot", "path": "evidence/faq-desktop.png", "caption": "faq desktop" }, { "type": "other", "path": "evidence/headers.json", "caption": "headers" }, { "type": "heap", "path": "evidence/heap-baseline.json", "caption": "heap baseline" }, { "type": "heap", "path": "evidence/heap-post-login.json", "caption": "heap post login" }, { "type": "screenshot", "path": "evidence/home-contrast.png", "caption": "home contrast" }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "home dark" }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "home desktop" }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "home dom" }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "home mobile layout" }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile" }, { "type": "other", "path": "evidence/home-reduced-motion.json", "caption": "home reduced motion" }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "home summary" }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "home trace summary" }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "home trace" }, { "type": "har", "path": "evidence/home.har", "caption": "home" }, { "type": "other", "path": "evidence/images.json", "caption": "images" }, { "type": "lighthouse", "path": "evidence/lighthouse-summary.json", "caption": "lighthouse summary" }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "lighthouse" }, { "type": "other", "path": "evidence/login-controls.json", "caption": "login controls" }, { "type": "screenshot", "path": "evidence/login-dialog.png", "caption": "login dialog" }, { "type": "screenshot", "path": "evidence/not-found.png", "caption": "not found" }, { "type": "other", "path": "evidence/platform-probe.json", "caption": "platform probe" }, { "type": "other", "path": "evidence/platform-source-probe.json", "caption": "platform source probe" }, { "type": "other", "path": "evidence/promotion-metadata.json", "caption": "promotion metadata" }, { "type": "layout", "path": "evidence/promotion-mobile-layout.json", "caption": "promotion mobile layout" }, { "type": "screenshot", "path": "evidence/promotion-mobile.png", "caption": "promotion mobile" }, { "type": "other", "path": "evidence/quality-probe.json", "caption": "quality probe" }, { "type": "other", "path": "evidence/recon-page.json", "caption": "recon page" }, { "type": "other", "path": "evidence/recon-routes.json", "caption": "recon routes" }, { "type": "other", "path": "evidence/register-controls.json", "caption": "register controls" }, { "type": "screenshot", "path": "evidence/register-dialog.png", "caption": "register dialog" }, { "type": "other", "path": "evidence/resilience-seo.json", "caption": "resilience seo" }, { "type": "other", "path": "evidence/secrets.json", "caption": "secrets" }, { "type": "other", "path": "evidence/trackers.json", "caption": "trackers" } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Active review using home-dark.png across the representative path set", "evidence": "Dark emulation produced the same fixed blue/orange/light surfaces as the default capture; the CSS probe found no prefers-color-scheme or color-scheme support.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png" ], "findingIds": [ "F-01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "issues", "confidence": "high", "method": "Active review using home-reduced-motion.json across the representative path set", "evidence": "With prefers-reduced-motion: reduce, 10 animations remained running (one 3500ms and repeated 1000ms animations), and no reduced-motion CSS rule was found.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-reduced-motion.json" ], "findingIds": [ "F-02" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "issues", "confidence": "high", "method": "Active review using home-contrast.png across the representative path set", "evidence": "The high-contrast capture did not change the fixed palette, and the CSS probe found no prefers-contrast or forced-colors handling.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-contrast.png" ], "findingIds": [ "F-03" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Active review using platform-probe.json across the representative path set", "evidence": "CSS inspection found no view-transition rules; route/state changes use the legacy Vue shell without directional continuity.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json" ], "findingIds": [ "F-04" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "pass", "confidence": "high", "method": "Direct inspection using platform-probe.json", "evidence": "No scroll-linked animation effect or scroll handler-driven visual effect was observed; CSS inspection found no animation-timeline requirement to assess.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "issues", "confidence": "high", "method": "Active review using platform-probe.json across the representative path set", "evidence": "The nine-slide promotional carousel auto-advances, but CSS inspection found no scroll-snap or overscroll affordance for native touch navigation.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json" ], "findingIds": [ "F-05" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Active review using promotion-mobile.png across the representative path set", "evidence": "The long 4,161px to 7,324px pages expose static header/chrome; CSS inspection found no scroll-state queries or progress feedback.", "pathIds": [ "home" ], "artifacts": [ "evidence/promotion-mobile.png" ], "findingIds": [ "F-06" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "issues", "confidence": "high", "method": "Active review using platform-probe.json across the representative path set", "evidence": "The navigation uses custom dropdown/menu structures, while CSS inspection found no anchor-name, position-anchor, or fallback positioning rules.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json" ], "findingIds": [ "F-07" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "issues", "confidence": "high", "method": "Active review using home-desktop.png across the representative path set", "evidence": "The first view is dominated by an unrelated agent promotion; route and in-page navigation provide no visible destination cue or directional transition.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ], "findingIds": [ "F-08" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Active review using home-desktop.png across the representative path set", "evidence": "The desktop first viewport is dimmed and almost entirely obscured by a large agent-commission interstitial before any user action.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ], "findingIds": [ "F-09" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Active review using controls.json across the representative path set", "evidence": "The DOM contains eleven custom `div[role=dialog]` overlays rather than native dialog/popover primitives; the visible promotion could not be reliably dismissed by the interaction probe.", "pathIds": [ "home" ], "artifacts": [ "evidence/controls.json" ], "findingIds": [ "F-10" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "issues", "confidence": "high", "method": "Active review using home-desktop.png across the representative path set", "evidence": "Screenshots show stacked download, primary navigation, announcement, side tabs, floating social controls, carousel, game tabs, and popup competing with core content.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ], "findingIds": [ "F-11" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "Direct inspection using home-mobile-layout.json", "evidence": "Mobile layout measurements on home, cricket, and promotion reported 360px scrollWidth for a 360px viewport with zero horizontal overflow.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Active review using platform-probe.json across the representative path set", "evidence": "No `@container` or `container-type` usage was found despite reusable game, banner, and promotion components appearing across layouts.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json" ], "findingIds": [ "F-12" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Active review using platform-probe.json across the representative path set", "evidence": "Programmatic keyboard focus on the first control computed to `outline: none` and no box shadow; viewport metadata also disables user scaling.", "pathIds": [ "auth" ], "artifacts": [ "evidence/platform-probe.json" ], "findingIds": [ "F-13" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "issues", "confidence": "high", "method": "Active review using home-desktop.png across the representative path set", "evidence": "The homepage purpose and login/register actions are hidden behind a full-screen agent ad and numerous competing promotional controls.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ], "findingIds": [ "F-14" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Active review using login-controls.json across the representative path set", "evidence": "Login fields are injected without labels; the username field incorrectly uses autocomplete=new-password, and the interstitial remains above the attempted auth state.", "pathIds": [ "home" ], "artifacts": [ "evidence/login-controls.json" ], "findingIds": [ "F-15" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "issues", "confidence": "high", "method": "Active review using not-found.png across the representative path set", "evidence": "The unknown-route test renders a sparse failure page without the normal navigation context or a clear task-preserving recovery path.", "pathIds": [ "home" ], "artifacts": [ "evidence/not-found.png" ], "findingIds": [ "F-16" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Active review using lighthouse-summary.json across the representative path set", "evidence": "Lighthouse measured LCP 26.5s, TBT 540ms, and CLS 0.604 (performance 0.19); the trace independently measured LCP 7.43s.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json" ], "findingIds": [ "F-17" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "issues", "confidence": "high", "method": "Active review using home-mobile-layout.json across the representative path set", "evidence": "Layout measured CLS 0.594 on home and 0.800 on promotion; 37 of 47 images lack complete dimensions.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json" ], "findingIds": [ "F-18" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "issues", "confidence": "high", "method": "Active review using home-trace-summary.json across the representative path set", "evidence": "Trace found two long tasks up to 140ms; Lighthouse reported 5.3s main-thread work and 540ms TBT.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json" ], "findingIds": [ "F-19" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Active review using home-summary.json across the representative path set", "evidence": "HAR recorded 270 requests and 5.86MB; duplicated parser-blocking CSS and synchronous jQuery scripts delay rendering, and Lighthouse estimated 5.05s render-blocking savings.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json" ], "findingIds": [ "F-20" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Active review using lighthouse-summary.json across the representative path set", "evidence": "Lighthouse estimated 472KiB unused JavaScript and 107KiB unused CSS; app/vendor CSS and app JS are requested both with and without query strings.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json" ], "findingIds": [ "F-21" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Active review using images.json across the representative path set", "evidence": "Lighthouse failed button-name, link-name, and image-alt; the image audit found 28 missing alt values and login inputs have no labels.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F-22" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Active review using lighthouse-summary.json across the representative path set", "evidence": "Lighthouse failed color-contrast on the rendered homepage (accessibility score 0.74).", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json" ], "findingIds": [ "F-23" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Active review using quality-probe.json across the representative path set", "evidence": "The focus probe found no visible outline; the DOM has no main landmark and uses option/listbox roles for primary navigation.", "pathIds": [ "home" ], "artifacts": [ "evidence/quality-probe.json" ], "findingIds": [ "F-24" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "issues", "confidence": "high", "method": "Active review using home-mobile.png across the representative path set", "evidence": "Dense promotional imagery, long keyword-heavy headings, narrow labels, and competing overlays reduce reading comfort in desktop and mobile captures.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png" ], "findingIds": [ "F-25" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Active review using quality-probe.json across the representative path set", "evidence": "Viewport is `user-scalable=no`, Lighthouse failed meta-viewport, and probes found several 15–18px-high links and a 22x18 control.", "pathIds": [ "home" ], "artifacts": [ "evidence/quality-probe.json" ], "findingIds": [ "F-26" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Direct inspection using lighthouse-summary.json", "evidence": "Lighthouse did not report its errors-in-console audit as failing during the captured load.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Active review using images.json across the representative path set", "evidence": "Although doctype and UTF-8 are valid, Lighthouse found incorrect image aspect ratios and unsized images; image audit found 37 missing dimensions and 41 oversized images.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F-27" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Active review using lighthouse-summary.json across the representative path set", "evidence": "Lighthouse reported DevTools inspector issues, missing source maps for large first-party JS, legacy JavaScript, and third-party cookie issues.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json" ], "findingIds": [ "F-28" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "Direct inspection using cricket-metadata.json", "evidence": "Homepage, cricket, and promotion each expose descriptive rendered titles and meta descriptions.", "pathIds": [ "home" ], "artifacts": [ "evidence/cricket-metadata.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "Active review using lighthouse-summary.json across the representative path set", "evidence": "Lighthouse failed crawlable-anchors, and the viewport disables user scaling even though robots allows the public site.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json" ], "findingIds": [ "F-29" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "pass", "confidence": "high", "method": "Direct inspection using resilience-seo.json", "evidence": "Public pages return successfully with canonical URLs; robots allows general crawling and points to a populated sitemap.", "pathIds": [ "home" ], "artifacts": [ "evidence/resilience-seo.json" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "pass", "confidence": "high", "method": "Direct inspection using quality-probe.json", "evidence": "Homepage and representative routes expose JSON-LD plus Open Graph metadata aligned with visible entities.", "pathIds": [ "home" ], "artifacts": [ "evidence/quality-probe.json" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Active review using headers.json across the representative path set", "evidence": "HTTPS is used, but CSP, HSTS, nosniff, Referrer-Policy, and Permissions-Policy are absent; all eight observed cookies use SameSite=None and seven lack Secure.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F-30" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Active review using trackers.json across the representative path set", "evidence": "Tracker capture found 9 third-party origins and Google Tag Manager/Analytics; HAR attributed 34 requests and 2.67MB to third parties.", "pathIds": [ "home" ], "artifacts": [ "evidence/trackers.json" ], "findingIds": [ "F-31" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Active review using login-controls.json across the representative path set", "evidence": "The login surface exposes password-only fields with no passkey/WebAuthn affordance; username is mis-declared as new-password. No permission prompt fired on load.", "pathIds": [ "auth" ], "artifacts": [ "evidence/login-controls.json" ], "findingIds": [ "F-32" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Active review using headers.json across the representative path set", "evidence": "X-Frame-Options is present, but HSTS, CSP/frame-ancestors, Referrer-Policy, Permissions-Policy, and nosniff are missing.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F-33" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "issues", "confidence": "high", "method": "Active review using discoverability.json across the representative path set", "evidence": "Discoverability found only 24% raw/rendered content overlap; title, H1, and description are absent from raw HTML, leaving core content dependent on JavaScript.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json" ], "findingIds": [ "F-34" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "issues", "confidence": "high", "method": "Active review using home-desktop.png across the representative path set", "evidence": "The on-load custom overlay masks the application and could not be reliably dismissed by the scripted interaction; eleven custom dialog containers increase fragile state.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ], "findingIds": [ "F-35" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "issues", "confidence": "high", "method": "Active review using resilience-seo.json across the representative path set", "evidence": "This app-like betting product has no manifest link, no service-worker registration, and no installable/offline surface.", "pathIds": [ "home" ], "artifacts": [ "evidence/resilience-seo.json" ], "findingIds": [ "F-36" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "issues", "confidence": "high", "method": "Active review using not-found.png across the representative path set", "evidence": "The tested unknown route provides a weak recovery surface, while HAR also recorded a failed cricket data request without visible task recovery.", "pathIds": [ "home" ], "artifacts": [ "evidence/not-found.png" ], "findingIds": [ "F-37" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "Active review using cricket-metadata.json across the representative path set", "evidence": "Homepage, cricket, and promotion pages render predominantly Bengali content while `` remains `en`; no direction metadata is declared.", "pathIds": [ "home" ], "artifacts": [ "evidence/cricket-metadata.json" ], "findingIds": [ "F-38" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "issues", "confidence": "high", "method": "Active review using recon-page.json across the representative path set", "evidence": "The UI exposes BDT, locale selection, dates, and countdown behavior, but bundles ship date-fns and Moment while no locale-aware rendered semantics were found.", "pathIds": [ "home" ], "artifacts": [ "evidence/recon-page.json" ], "findingIds": [ "F-39" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement across representative paths", "evidence": "No event scheduling, booking, or user-visible zoned-time workflow was present in the representative public surfaces.", "reason": "No event scheduling, booking, or user-visible zoned-time workflow was present in the representative public surfaces." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "issues", "confidence": "high", "method": "Active review using home-desktop.png across the representative path set", "evidence": "An unsolicited agent-commission popup obscures the site, while bonus and acquisition claims dominate the page before terms or responsible-gaming context.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ], "findingIds": [ "F-40" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "issues", "confidence": "high", "method": "Active review using login-controls.json across the representative path set", "evidence": "Auth inputs have no associated labels or accessible error contract; generic placeholders are the only visible input assistance.", "pathIds": [ "home" ], "artifacts": [ "evidence/login-controls.json" ], "findingIds": [ "F-41" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Active review using login-controls.json across the representative path set", "evidence": "Both login fields use autocomplete=new-password, including the username field, preventing correct sign-in autofill.", "pathIds": [ "auth" ], "artifacts": [ "evidence/login-controls.json" ], "findingIds": [ "F-42" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "issues", "confidence": "high", "method": "Active review using promotion-mobile.png across the representative path set", "evidence": "Promotional bonus/commission messaging is visually dominant, while pricing, wagering commitment, cancellation/account controls, and reauthentication are not visible at entry.", "pathIds": [ "home" ], "artifacts": [ "evidence/promotion-mobile.png" ], "findingIds": [ "F-43" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Active review using images.json across the representative path set", "evidence": "Image audit found 41 oversized images, 40 legacy-format images, 20 below-fold images not lazy-loaded, and 12 missing responsive sources.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F-44" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Active review using home-summary.json across the representative path set", "evidence": "The page loads 270 requests, 53 scripts, duplicate app/vendor bundles, and animations remain active even under reduced-motion.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json" ], "findingIds": [ "F-45" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Active review using home-summary.json across the representative path set", "evidence": "Third parties consume 2.67MB; a 644KB GIF and 412KB animated GIF are major offenders, alongside duplicate analytics tags.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json" ], "findingIds": [ "F-46" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement across representative paths", "evidence": "Emerging contextual capability: this audit found no declared intent to expose gambling actions to AI agents; omission is not treated as a defect.", "reason": "Emerging contextual capability: this audit found no declared intent to expose gambling actions to AI agents; omission is not treated as a defect." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement across representative paths", "evidence": "No summarisation, generation, or other user task on the reviewed surfaces clearly benefits from on-device inference.", "reason": "No summarisation, generation, or other user task on the reviewed surfaces clearly benefits from on-device inference." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "Direct inspection using heap-post-login.json", "evidence": "After ten attempted login open/close cycles, heap self-size increased about 2.8% (38.79MB to 39.88MB) rather than showing order-of-magnitude or clearly unbounded growth; confidence is limited because snapshots are separate page launches.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-post-login.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "medium", "method": "Direct inspection using heap-baseline.json", "evidence": "Heap summary measured 38.79MB self-size at baseline; substantial but proportionate to this media-heavy Vue page, with no single application constructor dominating retained size.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "Direct inspection using heap-post-login.json", "evidence": "Neither baseline nor post-interaction top constructor summaries showed a Detached* population; post-interaction growth was modest, with no direct evidence of unbounded listeners/timers.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-post-login.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F-01", "F-02", "F-03" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F-04", "F-05" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F-06", "F-07", "F-08" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F-09", "F-10", "F-11" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F-12", "F-13" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F-14", "F-15", "F-16" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F-17", "F-18", "F-19", "F-20", "F-21" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F-22", "F-23", "F-24", "F-25", "F-26" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F-27", "F-28" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F-29" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F-30", "F-31", "F-32", "F-33" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F-34", "F-35", "F-36", "F-37" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F-38", "F-39" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F-40", "F-41", "F-42", "F-43" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F-44", "F-45", "F-46" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "Emerging contextual capability: this audit found no declared intent to expose gambling actions to AI agents; omission is not treated as a defect. No summarisation, generation, or other user task on the reviewed surfaces clearly benefits from on-device inference." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Homepage and primary acquisition surface; represents global shell, navigation, promotional interruption, content, login/register entry points, and shared footer.", "url": "https://jaya9bdt.com/", "conditions": [ "desktop 1440x1000", "mobile 360x800", "prefers-color-scheme: dark", "prefers-contrast: more", "prefers-reduced-motion: reduce", "keyboard focus", "JavaScript disabled" ], "result": "issues" }, { "id": "cricket", "description": "Cricket listing/detail archetype and primary betting-content journey; represents category pages.", "url": "https://jaya9bdt.com/cricket/", "conditions": [ "desktop 1440x1000", "mobile 360x800" ], "result": "issues" }, { "id": "promotion", "description": "Promotion listing archetype; high-risk commercial offer and long media-heavy page.", "url": "https://jaya9bdt.com/promotion/", "conditions": [ "mobile 360x800" ], "result": "issues" }, { "id": "faq", "description": "FAQ/content archetype; represents informational and responsible-gaming support pages.", "url": "https://jaya9bdt.com/info/faq", "conditions": [ "desktop 1440x1000" ], "result": "issues" }, { "id": "auth", "description": "Login and registration entry journey from the homepage; inspected modal controls and attempted open/close repetition.", "url": "https://jaya9bdt.com/", "conditions": [ "desktop 1440x1000", "repeated login interaction x10" ], "result": "issues" }, { "id": "not-found", "description": "Unknown-route recovery state used to assess HTTP/runtime failure handling.", "url": "https://jaya9bdt.com/this-route-does-not-exist-audit", "conditions": [ "desktop 1440x1000" ], "result": "issues" } ], "findings": [ { "id": "F-01", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "Honours prefers-color-scheme: a usable dark mode exists and is driven by the user's preference (color-scheme / prefers-color-scheme / light-dark()), not hard-coded light only.", "evidence": "Dark emulation produced the same fixed blue/orange/light surfaces as the default capture; the CSS probe found no prefers-color-scheme or color-scheme support.", "artifacts": [ "evidence/home-dark.png" ], "suggestedFix": "Add `color-scheme: light dark` and preference-driven surface/text tokens using `prefers-color-scheme` or `light-dark()`.", "effort": "medium" }, { "id": "F-02", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "respect-user-preferences", "principleCheckId": "respects-reduced-motion", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Honours prefers-reduced-motion: non-essential animations and auto-advance are reduced or removed when the user asks for less motion.", "evidence": "With prefers-reduced-motion: reduce, 10 animations remained running (one 3500ms and repeated 1000ms animations), and no reduced-motion CSS rule was found.", "artifacts": [ "evidence/home-reduced-motion.json" ], "suggestedFix": "Disable non-essential carousel, popup, and transition motion within `@media (prefers-reduced-motion: reduce)`.", "effort": "medium" }, { "id": "F-03", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "respect-user-preferences", "principleCheckId": "respects-contrast", "guidanceId": "adapt-scrollbar-to-contrast-preferences", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "Honours prefers-contrast / forced-colors: controls, text and scrollbars remain visible under high-contrast preferences.", "evidence": "The high-contrast capture did not change the fixed palette, and the CSS probe found no prefers-contrast or forced-colors handling.", "artifacts": [ "evidence/home-contrast.png" ], "suggestedFix": "Add forced-colors and prefers-contrast styles that preserve visible text, focus, controls, and scroll affordances.", "effort": "small" }, { "id": "F-04", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "css", "guidanceCategory": "css", "severity": "low", "confidence": "high", "summary": "State and route changes use View Transitions (including same-document, cross-document and scroll-driven/staggered) rather than instant, jarring swaps.", "evidence": "CSS inspection found no view-transition rules; route/state changes use the legacy Vue shell without directional continuity.", "artifacts": [ "evidence/platform-probe.json" ], "suggestedFix": "Progressively enhance meaningful route and state changes with View Transitions while retaining instant-navigation fallback.", "effort": "small" }, { "id": "F-05", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "implement-natural-interactions", "principleCheckId": "physical-gestures", "guidanceId": "css", "guidanceCategory": "css", "severity": "low", "confidence": "high", "summary": "Gesture-driven interactions and entry/exit motion feel native (declarative overscroll/scroll-snap, physics-based easing, animating to intrinsic sizes, pull/swipe gestures) rather than fighting the platform with custom pointer handlers.", "evidence": "The nine-slide promotional carousel auto-advances, but CSS inspection found no scroll-snap or overscroll affordance for native touch navigation.", "artifacts": [ "evidence/platform-probe.json" ], "suggestedFix": "Use native overflow plus scroll-snap for swipeable carousels and stop auto-advance when reduced motion is requested.", "effort": "small" }, { "id": "F-06", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "css", "guidanceCategory": "css", "severity": "low", "confidence": "high", "summary": "Sticky/affixed UI reacts to scroll state and position (e.g. the new scroll-state(scrolled) query, shrinking headers, progress indicators) so chrome responds to position instead of static or JS-driven toggling.", "evidence": "The long 4,161px to 7,324px pages expose static header/chrome; CSS inspection found no scroll-state queries or progress feedback.", "artifacts": [ "evidence/promotion-mobile.png" ], "suggestedFix": "Add lightweight scroll-state-aware navigation or progress only where it helps orientation on long pages.", "effort": "small" }, { "id": "F-07", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "provide-guided-navigation", "principleCheckId": "anchored-positioning", "guidanceId": "position-aware-tooltips", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "Tooltips, popovers and menus use CSS anchor positioning (with fallback positions) so they stay attached and reposition correctly rather than being manually positioned.", "evidence": "The navigation uses custom dropdown/menu structures, while CSS inspection found no anchor-name, position-anchor, or fallback positioning rules.", "artifacts": [ "evidence/platform-probe.json" ], "suggestedFix": "Use popover plus CSS anchor positioning and position fallbacks for menus near viewport edges.", "effort": "small" }, { "id": "F-08", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "provide-guided-navigation", "principleCheckId": "directs-attention", "guidanceId": "navigation-drawer", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "Navigation and in-page jumps guide attention (highlight effects, scroll/carousel markers, directional transitions, drill-down and drawer navigation) so the user can follow where focus moved.", "evidence": "The first view is dominated by an unrelated agent promotion; route and in-page navigation provide no visible destination cue or directional transition.", "artifacts": [ "evidence/home-desktop.png" ], "suggestedFix": "Preserve focus and add clear active/destination cues for drawer, route, and in-page navigation.", "effort": "small" }, { "id": "F-09", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "html", "guidanceCategory": "html", "severity": "critical", "confidence": "high", "summary": "No intrusive pop-ups, interstitials or banners that obscure content on load; overlays are dismissible and content-first.", "evidence": "The desktop first viewport is dimmed and almost entirely obscured by a large agent-commission interstitial before any user action.", "artifacts": [ "evidence/home-desktop.png" ], "suggestedFix": "Remove the on-load interstitial; show the promotion in content or after explicit intent, with an obvious semantic dismiss control.", "effort": "medium" }, { "id": "F-10", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "html", "guidanceCategory": "html", "severity": "high", "confidence": "high", "summary": "Overlays and rich controls use the right primitive: popover (with declarative light-dismiss) for transient UI, dialog for modal flows, details for disclosure, native-but-branded selects and pickers, rather than ad-hoc divs.", "evidence": "The DOM contains eleven custom `div[role=dialog]` overlays rather than native dialog/popover primitives; the visible promotion could not be reliably dismissed by the interaction probe.", "artifacts": [ "evidence/controls.json" ], "suggestedFix": "Replace custom modal divs with `` or `popover`, native focus handling, Escape, and light-dismiss behavior.", "effort": "medium" }, { "id": "F-11", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "reduced-chrome", "guidanceId": "css", "guidanceCategory": "css", "severity": "high", "confidence": "high", "summary": "Minimise non-content chrome and borders so the content is the focus, not the application frame; expressive/decorative visuals serve the content rather than crowd it.", "evidence": "Screenshots show stacked download, primary navigation, announcement, side tabs, floating social controls, carousel, game tabs, and popup competing with core content.", "artifacts": [ "evidence/home-desktop.png" ], "suggestedFix": "Remove duplicate chrome and consolidate promotional/navigation controls around the primary task.", "effort": "medium" }, { "id": "F-12", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "css", "guidanceCategory": "css", "severity": "low", "confidence": "high", "summary": "Components adapt to their container with container queries (incl. anchored container queries) and content/state-based styling where reused at different sizes, not only global viewport breakpoints.", "evidence": "No `@container` or `container-type` usage was found despite reusable game, banner, and promotion components appearing across layouts.", "artifacts": [ "evidence/platform-probe.json" ], "suggestedFix": "Adopt container queries for reusable cards and navigation modules, with viewport rules only for page-level composition.", "effort": "small" }, { "id": "F-13", "pathId": "auth", "url": "https://jaya9bdt.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Touch targets are adequately sized and hover-only affordances have a non-hover fallback, and keyboard focus is visible, so the UI works for touch, pointer and keyboard alike.", "evidence": "Programmatic keyboard focus on the first control computed to `outline: none` and no box shadow; viewport metadata also disables user scaling.", "artifacts": [ "evidence/platform-probe.json" ], "suggestedFix": "Provide a strong `:focus-visible` indicator, preserve zoom, and ensure controls have at least 44px touch affordances.", "effort": "medium" }, { "id": "F-14", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "support-core-task-success", "principleCheckId": "clear-purpose-and-primary-action", "guidanceId": "html", "guidanceCategory": "html", "severity": "high", "confidence": "high", "summary": "The page communicates what it is for and exposes the primary next action without requiring users to hunt through decorative content, generic copy, or competing calls to action.", "evidence": "The homepage purpose and login/register actions are hidden behind a full-screen agent ad and numerous competing promotional controls.", "artifacts": [ "evidence/home-desktop.png" ], "suggestedFix": "Make the core proposition and one primary action visible before promotions; demote secondary acquisition chrome.", "effort": "medium" }, { "id": "F-15", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "forms", "guidanceCategory": "forms", "severity": "high", "confidence": "high", "summary": "The representative primary flow can be completed end-to-end with predictable steps, no avoidable dead ends, no hidden required information, and no needless detours through modals, account walls, or upsells.", "evidence": "Login fields are injected without labels; the username field incorrectly uses autocomplete=new-password, and the interstitial remains above the attempted auth state.", "artifacts": [ "evidence/login-controls.json" ], "suggestedFix": "Use a semantic form with labelled username/current-password fields, correct autocomplete tokens, and an unobstructed submit/recovery path.", "effort": "medium" }, { "id": "F-16", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "support-core-task-success", "principleCheckId": "clear-system-state-and-recovery", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "Loading, empty, success, error, offline, and partial-completion states are visible and actionable; users can retry, undo, cancel, go back, or continue without losing context.", "evidence": "The unknown-route test renders a sparse failure page without the normal navigation context or a clear task-preserving recovery path.", "artifacts": [ "evidence/not-found.png" ], "suggestedFix": "Return a real 404 state with concise explanation, home/search/category recovery actions, and preserved site navigation.", "effort": "small" }, { "id": "F-17", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "guidanceCategory": "performance", "severity": "critical", "confidence": "high", "summary": "Core Web Vitals are in the good range: LCP is fast, interaction latency (INP) is low, and CLS is minimal; work is prioritised and deferred sensibly.", "evidence": "Lighthouse measured LCP 26.5s, TBT 540ms, and CLS 0.604 (performance 0.19); the trace independently measured LCP 7.43s.", "artifacts": [ "evidence/lighthouse-summary.json" ], "suggestedFix": "Prioritize the LCP asset, remove late layout injections, and reduce startup JavaScript until CWV reaches good thresholds.", "effort": "medium" }, { "id": "F-18", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-fast-and-stable", "principleCheckId": "visual-stability", "guidanceId": "performance", "guidanceCategory": "performance", "severity": "critical", "confidence": "high", "summary": "No cumulative layout shift from late content (images, banners, fonts) that arrives without reserved space.", "evidence": "Layout measured CLS 0.594 on home and 0.800 on promotion; 37 of 47 images lack complete dimensions.", "artifacts": [ "evidence/home-mobile-layout.json" ], "suggestedFix": "Reserve image/banner/popup space with dimensions or aspect-ratio and avoid inserting acquisition chrome above existing content.", "effort": "medium" }, { "id": "F-19", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-main-thread", "guidanceId": "performance", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "The main thread is not blocked by long tasks or heavy scripting; work is deferred, chunked, prioritised, or moved off-thread.", "evidence": "Trace found two long tasks up to 140ms; Lighthouse reported 5.3s main-thread work and 540ms TBT.", "artifacts": [ "evidence/home-trace-summary.json" ], "suggestedFix": "Profile startup bundles, split work, remove duplicate frameworks/utilities, and yield between non-critical tasks.", "effort": "medium" }, { "id": "F-20", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "performance", "guidanceCategory": "performance", "severity": "critical", "confidence": "high", "summary": "Critical resources are delivered efficiently: cache headers are useful, render-blocking chains are short, fonts do not block or shift text, HTTP delivery is modern, and network dependency trees do not delay the main content.", "evidence": "HAR recorded 270 requests and 5.86MB; duplicated parser-blocking CSS and synchronous jQuery scripts delay rendering, and Lighthouse estimated 5.05s render-blocking savings.", "artifacts": [ "evidence/home-summary.json" ], "suggestedFix": "Deduplicate CSS/JS URLs, defer non-critical scripts, preload only the LCP resource, and set durable caching/font-display policies.", "effort": "medium" }, { "id": "F-21", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "performance", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "The page does not ship large unused or duplicated JavaScript/CSS, avoidable legacy bundles, or third-party code that dominates the load without user value.", "evidence": "Lighthouse estimated 472KiB unused JavaScript and 107KiB unused CSS; app/vendor CSS and app JS are requested both with and without query strings.", "artifacts": [ "evidence/lighthouse-summary.json" ], "suggestedFix": "Remove duplicate bundle references, tree-shake route code, and lazy-load game/vendor modules after intent.", "effort": "medium" }, { "id": "F-22", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Interactive elements have accessible names, correct roles, and form fields have labels; images have alt text where meaningful; canvas/expressive content is exposed to assistive technology.", "evidence": "Lighthouse failed button-name, link-name, and image-alt; the image audit found 28 missing alt values and login inputs have no labels.", "artifacts": [ "evidence/images.json" ], "suggestedFix": "Give every control an accessible name, associate labels with auth fields, and provide meaningful or empty alt text intentionally.", "effort": "medium" }, { "id": "F-23", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Text and essential UI meet WCAG colour-contrast minimums against their background.", "evidence": "Lighthouse failed color-contrast on the rendered homepage (accessibility score 0.74).", "artifacts": [ "evidence/lighthouse-summary.json" ], "suggestedFix": "Adjust text and control tokens to WCAG contrast ratios in every state, including overlays and promotional surfaces.", "effort": "medium" }, { "id": "F-24", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Heading and landmark structure is logical, focus order follows reading order, keyboard focus is always visible, and interactive state survives DOM moves.", "evidence": "The focus probe found no visible outline; the DOM has no main landmark and uses option/listbox roles for primary navigation.", "artifacts": [ "evidence/quality-probe.json" ], "suggestedFix": "Add a main landmark, use native navigation semantics, and verify a visible, logical keyboard focus walk through dialogs and menus.", "effort": "medium" }, { "id": "F-25", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-inclusive", "principleCheckId": "legible-text", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "medium", "confidence": "high", "summary": "Text is legible and inclusively rendered: comfortable line layout, precise alignment, stable rendering across mixed fonts, no clipping or cramped wrapping that harms comprehension.", "evidence": "Dense promotional imagery, long keyword-heavy headings, narrow labels, and competing overlays reduce reading comfort in desktop and mobile captures.", "artifacts": [ "evidence/home-mobile.png" ], "suggestedFix": "Simplify copy, constrain line length, increase spacing, and keep text out of image-only promotional artwork.", "effort": "small" }, { "id": "F-26", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "The experience remains usable when zoomed or reflowed, touch targets are large enough, media has captions or equivalents where needed, and the viewport does not prevent user scaling.", "evidence": "Viewport is `user-scalable=no`, Lighthouse failed meta-viewport, and probes found several 15–18px-high links and a 22x18 control.", "artifacts": [ "evidence/quality-probe.json" ], "suggestedFix": "Remove user-scalable=no, support 200%+ zoom/reflow, and enlarge interactive hit areas.", "effort": "medium" }, { "id": "F-27", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "html", "guidanceCategory": "html", "severity": "high", "confidence": "high", "summary": "Valid doctype and charset, images sized with correct aspect ratio, no deprecated APIs misused, and CSS/HTML are well structured and not needlessly repetitive. (HTTPS, CSP and permission hygiene are judged under be-private-and-secure, not here.)", "evidence": "Although doctype and UTF-8 are valid, Lighthouse found incorrect image aspect ratios and unsized images; image audit found 37 missing dimensions and 41 oversized images.", "artifacts": [ "evidence/images.json" ], "suggestedFix": "Declare intrinsic dimensions/aspect ratio and serve correctly sized responsive image sources.", "effort": "medium" }, { "id": "F-28", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "The page uses the platform cleanly: no deprecated APIs, no avoidable BFCache blockers, no broken source maps or inspector issues, no stale vulnerable libraries, no paste-prevention on inputs, and no notification/geolocation prompts on load.", "evidence": "Lighthouse reported DevTools inspector issues, missing source maps for large first-party JS, legacy JavaScript, and third-party cookie issues.", "artifacts": [ "evidence/lighthouse-summary.json" ], "suggestedFix": "Resolve inspector/deprecation issues, publish production source maps securely, and stop shipping avoidable legacy bundles.", "effort": "small" }, { "id": "F-29", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-discoverable", "principleCheckId": "crawlable-and-mobile-friendly", "guidanceId": "html", "guidanceCategory": "html", "severity": "high", "confidence": "high", "summary": "Links are crawlable (real href), there is a viewport meta tag, robots does not block indexing, and link text is descriptive.", "evidence": "Lighthouse failed crawlable-anchors, and the viewport disables user scaling even though robots allows the public site.", "artifacts": [ "evidence/lighthouse-summary.json" ], "suggestedFix": "Use real descriptive href links for navigation and allow user scaling in the viewport declaration.", "effort": "medium" }, { "id": "F-30", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "security", "severity": "critical", "confidence": "high", "summary": "Served over HTTPS with a sensible Content-Security-Policy and secure, SameSite cookies; no mixed content or obvious transport/header smells.", "evidence": "HTTPS is used, but CSP, HSTS, nosniff, Referrer-Policy, and Permissions-Policy are absent; all eight observed cookies use SameSite=None and seven lack Secure.", "artifacts": [ "evidence/headers.json" ], "suggestedFix": "Deploy CSP in report-only then enforce it; add HSTS, nosniff, referrer/permissions policies, and secure least-permissive cookie attributes.", "effort": "medium" }, { "id": "F-31", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "privacy", "severity": "high", "confidence": "high", "summary": "No over-collection of user data, no leaky third parties, and analytics/background data collection is minimised and batched rather than chatty or session-wide by default.", "evidence": "Tracker capture found 9 third-party origins and Google Tag Manager/Analytics; HAR attributed 34 requests and 2.67MB to third parties.", "artifacts": [ "evidence/trackers.json" ], "suggestedFix": "Inventory vendors, remove redundant analytics IDs/feed widgets, collect only necessary events after appropriate consent, and cap third-party budgets.", "effort": "medium" }, { "id": "F-32", "pathId": "auth", "url": "https://jaya9bdt.com/", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "security", "guidanceCategory": "security", "severity": "medium", "confidence": "high", "summary": "Permission prompts are requested in context (not on load), and authentication uses modern, phishing-resistant methods (passkeys / WebAuthn) where relevant rather than passwords alone.", "evidence": "The login surface exposes password-only fields with no passkey/WebAuthn affordance; username is mis-declared as new-password. No permission prompt fired on load.", "artifacts": [ "evidence/login-controls.json" ], "suggestedFix": "Offer passkey sign-in/registration and retain a correctly annotated password fallback; request permissions only after user intent.", "effort": "small" }, { "id": "F-33", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "guidanceCategory": "security", "severity": "high", "confidence": "high", "summary": "Browser-enforced defenses are configured where appropriate: HSTS, clickjacking protection (frame-ancestors / X-Frame-Options), Trusted Types for XSS-sensitive apps, origin isolation, privacy-preserving third-party cookie posture, and sensible Referrer-Policy / Permissions-Policy.", "evidence": "X-Frame-Options is present, but HSTS, CSP/frame-ancestors, Referrer-Policy, Permissions-Policy, and nosniff are missing.", "artifacts": [ "evidence/headers.json" ], "suggestedFix": "Establish browser-enforced defense headers, including CSP frame-ancestors, and minimize allowed capabilities and referrer leakage.", "effort": "medium" }, { "id": "F-34", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-resilient", "principleCheckId": "progressive-enhancement", "guidanceId": "html", "guidanceCategory": "html", "severity": "high", "confidence": "high", "summary": "Core content and primary flows are reachable and usable without JavaScript and on older or non-Baseline browsers; modern features layer on as enhancements with fallbacks, and reactive/transition state stabilises rather than flickering before it settles.", "evidence": "Discoverability found only 24% raw/rendered content overlap; title, H1, and description are absent from raw HTML, leaving core content dependent on JavaScript.", "artifacts": [ "evidence/discoverability.json" ], "suggestedFix": "Server-render core headings, metadata, links, and content; layer betting interaction on as progressive enhancement.", "effort": "medium" }, { "id": "F-35", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-resilient", "principleCheckId": "resilient-runtime-behaviour", "guidanceId": "html", "guidanceCategory": "html", "severity": "high", "confidence": "high", "summary": "The page behaves robustly at runtime: overlays and menus never get cut off, DOM state survives moves, background work and async dependencies are sequenced and conditional rather than fragile, and initial visibility state is detected correctly.", "evidence": "The on-load custom overlay masks the application and could not be reliably dismissed by the scripted interaction; eleven custom dialog containers increase fragile state.", "artifacts": [ "evidence/home-desktop.png" ], "suggestedFix": "Use native top-layer primitives with tested Escape/light-dismiss, focus return, and viewport-edge behavior.", "effort": "medium" }, { "id": "F-36", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-resilient", "principleCheckId": "offline-and-installable", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "Where the site is an app, it is installable (web app manifest) and offers an offline fallback and works on flaky networks. (Contextual: a brochure or intrinsically-online site may reasonably not need this.)", "evidence": "This app-like betting product has no manifest link, no service-worker registration, and no installable/offline surface.", "artifacts": [ "evidence/resilience-seo.json" ], "suggestedFix": "Add a valid web app manifest and a conservative service worker that provides an offline shell and clear reconnect state.", "effort": "small" }, { "id": "F-37", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-resilient", "principleCheckId": "network-and-http-failure-states", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "HTTP errors, network failures, timeouts and stale data states are handled intentionally: users see useful recovery options rather than blank screens, infinite spinners, broken shells, or misleading success states.", "evidence": "The tested unknown route provides a weak recovery surface, while HAR also recorded a failed cricket data request without visible task recovery.", "artifacts": [ "evidence/not-found.png" ], "suggestedFix": "Handle route, HTTP, timeout, and fetch failures with explicit retry/back/home controls and honest stale-data messaging.", "effort": "small" }, { "id": "F-38", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Correct lang and dir attributes, logical CSS properties (inline/block) rather than physical left/right, and translation-ready markup so the layout and reading order survive other languages and writing modes.", "evidence": "Homepage, cricket, and promotion pages render predominantly Bengali content while `` remains `en`; no direction metadata is declared.", "artifacts": [ "evidence/cricket-metadata.json" ], "suggestedFix": "Set the correct BCP 47 language per locale (for example bn-BD), preserve dir, and use logical CSS properties.", "effort": "medium" }, { "id": "F-39", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-internationalised", "principleCheckId": "locale-aware-data", "guidanceId": "coordinate-global-events", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "Dates, numbers, currencies, durations and calendar systems are formatted locale-aware (Intl), location-agnostic where stored, and recurring intervals and event differentials are modelled correctly.", "evidence": "The UI exposes BDT, locale selection, dates, and countdown behavior, but bundles ship date-fns and Moment while no locale-aware rendered semantics were found.", "artifacts": [ "evidence/recon-page.json" ], "suggestedFix": "Format currency, dates, durations, and countdowns through Intl/Temporal-aware locale data rather than hard-coded strings.", "effort": "small" }, { "id": "F-40", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-trustworthy", "principleCheckId": "no-dark-patterns", "guidanceId": "html", "guidanceCategory": "html", "severity": "critical", "confidence": "high", "summary": "No deceptive design: no confirmshaming, forced continuity, disguised ads, or nagging consent walls; honest defaults; clear pricing and consent; easy reversal/cancel; predictable, declaratively-wired actions; and no hidden-text tricks (hidden content stays deep-linkable and indexable rather than used to deceive).", "evidence": "An unsolicited agent-commission popup obscures the site, while bonus and acquisition claims dominate the page before terms or responsible-gaming context.", "artifacts": [ "evidence/home-desktop.png" ], "suggestedFix": "Remove nagging acquisition overlays and present bonus eligibility, wagering terms, risks, and dismissal choices with equal prominence.", "effort": "medium" }, { "id": "F-41", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-trustworthy", "principleCheckId": "humane-error-handling", "guidanceId": "forms", "guidanceCategory": "forms", "severity": "high", "confidence": "high", "summary": "Forms prevent and recover from mistakes humanely: validate after interaction (not prematurely), give clear required-field feedback, announce errors accessibly, and signal invalid fields visibly rather than blaming the user.", "evidence": "Auth inputs have no associated labels or accessible error contract; generic placeholders are the only visible input assistance.", "artifacts": [ "evidence/login-controls.json" ], "suggestedFix": "Validate after interaction, keep labels visible, connect errors with aria-describedby, and announce a summary without erasing input.", "effort": "medium" }, { "id": "F-42", "pathId": "auth", "url": "https://jaya9bdt.com/", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "forms", "guidanceCategory": "forms", "severity": "high", "confidence": "high", "summary": "Input is assisted, not obstructed: correct autocomplete tokens so address, payment, sign-in and sign-up fields autofill, and inputs are highlighted/sized to help the user rather than trip them up.", "evidence": "Both login fields use autocomplete=new-password, including the username field, preventing correct sign-in autofill.", "artifacts": [ "evidence/login-controls.json" ], "suggestedFix": "Use `autocomplete=username` and `current-password`, appropriate input types/inputmode, and stable names.", "effort": "medium" }, { "id": "F-43", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-trustworthy", "principleCheckId": "safe-commercial-and-account-flows", "guidanceId": "privacy", "guidanceCategory": "privacy", "severity": "high", "confidence": "high", "summary": "Checkout, subscription, consent, authentication and account-management flows are clear, reversible, and proportionate: pricing and commitments are visible, cancellation is findable, sensitive actions re-authenticate when appropriate, and users are not tricked into continuity.", "evidence": "Promotional bonus/commission messaging is visually dominant, while pricing, wagering commitment, cancellation/account controls, and reauthentication are not visible at entry.", "artifacts": [ "evidence/promotion-mobile.png" ], "suggestedFix": "Place material terms beside the offer, make account closure/cancellation findable, and require reauthentication for sensitive account actions.", "effort": "medium" }, { "id": "F-44", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "deliver-optimized-decorative-images", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "Images and decorative assets are optimised and served at appropriate resolutions; decorative pseudo-element imagery and heavy decorative images are resolution-optimised rather than oversized.", "evidence": "Image audit found 41 oversized images, 40 legacy-format images, 20 below-fold images not lazy-loaded, and 12 missing responsive sources.", "artifacts": [ "evidence/images.json" ], "suggestedFix": "Generate AVIF/WebP responsive variants, size them to display density, lazy-load below-fold media, and prioritize only the LCP image.", "effort": "medium" }, { "id": "F-45", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "guidanceId": "efficient-background-processing", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "Background work and fetching are not wasteful: background processing is efficient and de-prioritised, and the lightest technique that achieves the result is preferred over heavy or redundant work.", "evidence": "The page loads 270 requests, 53 scripts, duplicate app/vendor bundles, and animations remain active even under reduced-motion.", "artifacts": [ "evidence/home-summary.json" ], "suggestedFix": "Remove duplicate work, pause offscreen/background animation, and defer category/vendor data until the user requests it.", "effort": "medium" }, { "id": "F-46", "pathId": "home", "url": "https://jaya9bdt.com/", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "efficient-background-processing", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "Third-party scripts, fonts, video, audio, animation and heavy media are proportionate to the user value they provide; autoplay or background media is avoided unless essential and resource use is cached or deferred where possible.", "evidence": "Third parties consume 2.67MB; a 644KB GIF and 412KB animated GIF are major offenders, alongside duplicate analytics tags.", "artifacts": [ "evidence/home-summary.json" ], "suggestedFix": "Replace GIFs with efficient video/static alternatives, defer non-essential media, and enforce a third-party byte/request budget.", "effort": "medium" } ], "taskList": [ { "id": "T-01", "title": "Remove the blocking acquisition interstitial and simplify entry-page hierarchy", "priority": 1, "findingIds": [ "F-09", "F-10", "F-11", "F-14", "F-15", "F-16", "F-40", "F-41", "F-42", "F-43" ], "guidanceId": "html", "status": "open" }, { "id": "T-02", "title": "Fix CWV by reserving layout and rebuilding LCP/resource priority", "priority": 2, "findingIds": [ "F-17", "F-18", "F-19", "F-20", "F-21" ], "guidanceId": "performance", "status": "open" }, { "id": "T-03", "title": "Deduplicate and defer bundles, analytics, and third-party media", "priority": 3, "findingIds": [ "F-44", "F-45", "F-46" ], "guidanceId": "performance", "status": "open" }, { "id": "T-04", "title": "Repair labels, names, contrast, zoom, focus, and target sizes", "priority": 4, "findingIds": [ "F-12", "F-13", "F-22", "F-23", "F-24", "F-25", "F-26" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T-05", "title": "Deploy a complete security-header and cookie baseline", "priority": 5, "findingIds": [ "F-30", "F-31", "F-32", "F-33" ], "guidanceId": "security", "status": "open" }, { "id": "T-06", "title": "Make core content and metadata available without JavaScript", "priority": 6, "findingIds": [ "F-29", "F-34", "F-35", "F-36", "F-37" ], "guidanceId": "html", "status": "open" }, { "id": "T-07", "title": "Correct auth semantics, autofill, errors, and add passkeys", "priority": 7, "findingIds": [ "F-14", "F-15", "F-16", "F-40", "F-41", "F-42", "F-43" ], "guidanceId": "forms", "status": "open" }, { "id": "T-08", "title": "Serve responsive modern images and stop background waste", "priority": 8, "findingIds": [ "F-27", "F-28", "F-44", "F-45", "F-46" ], "guidanceId": "deliver-optimized-decorative-images", "status": "open" }, { "id": "T-09", "title": "Respect dark, reduced-motion, and contrast preferences", "priority": 9, "findingIds": [ "F-01", "F-02", "F-03" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T-10", "title": "Correct Bengali language metadata and locale formatting", "priority": 10, "findingIds": [ "F-38", "F-39" ], "guidanceId": "accessibility", "status": "open" } ], "budget": { "pathCount": 6, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-18T22-35-29-168Z" }