{ "url": "https://bollyflix.med", "auditedAt": "2026-07-19T00:08:00.000Z", "mode": "report", "status": "completed", "statusDetail": "Representative audit of the redirect target bollyflix.at. Adult-only category, pagination variants, and each individual title were not separately covered because they share the audited listing/detail templates; no external download link was opened because the visible detour itself established the flow issue.", "page": { "appType": "mpa", "framework": "WordPress", "notes": "bollyflix.med redirects to bollyflix.at. Server-rendered movie/download catalog with category, search, detail, comments, and external link-shortener download actions." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "trace", "har", "headers", "cookies", "trackers", "images", "secrets", "discoverability", "heap-summary", "lighthouse", "axe-core", "curl" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "Homepage desktop first viewport", "condition": "desktop", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "Homepage mobile full-page capture", "condition": "viewport: 360x800", "findingIds": [ "F04", "F06" ] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "Homepage under dark preference", "condition": "prefers-color-scheme: dark", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-contrast.png", "caption": "Homepage under forced colors/high contrast", "condition": "forced-colors: active", "findingIds": [] }, { "type": "screenshot", "path": "evidence/detail-mobile.png", "caption": "Detail page mobile capture", "condition": "viewport: 360x800", "findingIds": [ "F16" ] }, { "type": "screenshot", "path": "evidence/listing-mobile.png", "caption": "Category listing mobile capture", "condition": "viewport: 360x800", "findingIds": [] }, { "type": "screenshot", "path": "evidence/search-mobile.png", "caption": "Search results mobile capture", "condition": "viewport: 360x800", "findingIds": [] }, { "type": "screenshot", "path": "evidence/notfound-mobile.png", "caption": "404 recovery mobile capture", "condition": "viewport: 360x800", "findingIds": [] }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "Homepage mobile layout and CLS metrics", "condition": "viewport: 360x800", "findingIds": [] }, { "type": "layout", "path": "evidence/detail-layout.json", "caption": "Detail mobile layout and CLS metrics", "condition": "viewport: 360x800", "findingIds": [] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "DevTools load trace", "condition": "desktop load", "findingIds": [] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "Compact load trace metrics", "condition": "desktop load", "findingIds": [] }, { "type": "har", "path": "evidence/home.har", "caption": "Full network capture", "condition": "desktop load", "findingIds": [] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "Compact HAR network signals", "condition": "desktop load", "findingIds": [ "F11", "F31" ] }, { "type": "lighthouse", "path": "evidence/home-lighthouse.json", "caption": "Mobile Lighthouse audit", "condition": "mobile simulation", "findingIds": [] }, { "type": "other", "path": "evidence/home-lighthouse-summary.json", "caption": "Selected Lighthouse audit summary", "condition": "mobile simulation", "findingIds": [ "F10", "F18", "F24" ] }, { "type": "other", "path": "evidence/home-axe.json", "caption": "axe-core accessibility results", "condition": "desktop", "findingIds": [ "F02", "F13", "F14", "F15" ] }, { "type": "other", "path": "evidence/home-headers.json", "caption": "Security header inspection", "condition": "desktop", "findingIds": [ "F21", "F23" ] }, { "type": "other", "path": "evidence/home-trackers.json", "caption": "Third-party/tracker inventory", "condition": "desktop", "findingIds": [ "F22" ] }, { "type": "other", "path": "evidence/home-images.json", "caption": "Image delivery inventory", "condition": "desktop", "findingIds": [ "F19", "F29" ] }, { "type": "other", "path": "evidence/home-secrets.json", "caption": "Client secret scan", "condition": "desktop", "findingIds": [] }, { "type": "discoverability", "path": "evidence/home-discoverability.json", "caption": "Raw HTML vs rendered homepage comparison", "condition": "JavaScript disabled comparison", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-discoverability-rendered.png", "caption": "Rendered homepage crawler comparison", "condition": "JavaScript enabled", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-discoverability-crawler.png", "caption": "Crawler homepage comparison", "condition": "JavaScript disabled", "findingIds": [] }, { "type": "discoverability", "path": "evidence/detail-discoverability.json", "caption": "Raw HTML vs rendered detail comparison", "condition": "JavaScript disabled comparison", "findingIds": [] }, { "type": "screenshot", "path": "evidence/detail-discoverability-rendered.png", "caption": "Rendered detail crawler comparison", "condition": "JavaScript enabled", "findingIds": [] }, { "type": "screenshot", "path": "evidence/detail-discoverability-crawler.png", "caption": "Crawler detail comparison", "condition": "JavaScript disabled", "findingIds": [] }, { "type": "heap", "path": "evidence/home-heap-baseline.json", "caption": "Baseline heap summary", "condition": "before interaction", "findingIds": [] }, { "type": "heap", "path": "evidence/home-heap-post.json", "caption": "Heap after ten scroll/menu cycles", "condition": "after repeated interaction", "findingIds": [] }, { "type": "other", "path": "evidence/home-platform-probe.json", "caption": "CSS, focus, target, semantics, platform probe", "condition": "desktop", "findingIds": [ "F01", "F03", "F05", "F07", "F08", "F17", "F25" ] }, { "type": "other", "path": "evidence/home-reduced-probe.json", "caption": "Reduced-motion platform probe", "condition": "prefers-reduced-motion: reduce", "findingIds": [] }, { "type": "dom", "path": "evidence/home-recon.json", "caption": "Homepage structure and route recon", "condition": "desktop", "findingIds": [] }, { "type": "dom", "path": "evidence/detail-recon.json", "caption": "Detail metadata and primary-action recon", "condition": "desktop", "findingIds": [ "F09", "F26" ] }, { "type": "dom", "path": "evidence/detail-forms.json", "caption": "Detail form semantics probe", "condition": "desktop", "findingIds": [ "F27", "F28" ] }, { "type": "other", "path": "evidence/context-probe.json", "caption": "Internationalization, permissions, auth, and agent context probe", "condition": "desktop", "findingIds": [] }, { "type": "other", "path": "evidence/script-delivery.json", "caption": "Script placement and delivery attributes", "condition": "desktop", "findingIds": [ "F12", "F20", "F30" ] }, { "type": "other", "path": "evidence/robots.json", "caption": "robots.txt evidence", "condition": "crawler", "findingIds": [] }, { "type": "other", "path": "evidence/sitemap.json", "caption": "sitemap index evidence", "condition": "crawler", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "medium", "method": "DOM/evaluate probe", "evidence": "The site is hard-coded to one dark palette and does not react to the user color-scheme preference.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-platform-probe.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "The reduced-motion probe found no running animations and no auto-advancing content under `reduce`.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-reduced-probe.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "issues", "confidence": "high", "method": "axe-core accessibility scan", "evidence": "The forced-colors screenshot remains operable, but axe found four serious contrast failures and CSS has no prefers-contrast/forced-colors adaptation.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-axe.json" ], "findingIds": [ "F02" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "Navigation and content swaps are abrupt; the CSS probe found no View Transition declarations.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-platform-probe.json" ], "findingIds": [ "F03" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "No parallax, scrollytelling, entry reveal, or other scroll-linked animation exists on the representative templates.", "reason": "No parallax, scrollytelling, entry reveal, or other scroll-linked animation exists on the representative templates.", "pathIds": [ "home" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "not-applicable", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "No swipe, pull, carousel, draggable, or other gesture-driven control exists on the representative templates.", "reason": "No swipe, pull, carousel, draggable, or other gesture-driven control exists on the representative templates.", "pathIds": [ "home" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "visual screenshot review", "evidence": "The long 6,200px listing keeps static chrome and provides no scroll progress or position-aware navigation.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png" ], "findingIds": [ "F04" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "No user-facing tooltip or popover requiring anchored positioning was found.", "reason": "No user-facing tooltip or popover requiring anchored positioning was found.", "pathIds": [ "home" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "visual screenshot review", "evidence": "Breadcrumbs on detail pages and the explicit “Search Results for” heading make destination and context clear.", "pathIds": [ "home" ], "artifacts": [ "evidence/search-mobile.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "high", "method": "visual screenshot review", "evidence": "No full-screen interstitial obscured content on load; the domain notice is compact and dismissible.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "The page ships a custom `.modal`/WordPress editor overlay and no dialog, popover, or details primitives.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-platform-probe.json" ], "findingIds": [ "F05" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "issues", "confidence": "high", "method": "visual screenshot review", "evidence": "On mobile, logo, search, menu, eight category pills, and a domain banner consume roughly the first half viewport before content.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png" ], "findingIds": [ "F06" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "CDP layout metrics", "evidence": "Home, listing, search, and detail layout captures at 360x800 reported zero horizontal overflow and include a viewport meta tag.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "medium", "method": "DOM/evaluate probe", "evidence": "Components resize at the viewport level, but CSS inspection found no container queries for reusable cards/navigation.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-platform-probe.json" ], "findingIds": [ "F07" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "Programmatic keyboard focus showed `outline: none`; many controls are 34–43px high, below a 44px touch target.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-platform-probe.json" ], "findingIds": [ "F08" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "visual screenshot review", "evidence": "The listing immediately exposes search, categories, poster cards, and descriptive download titles.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "The primary download journey diverts through multiple identical generic links to `linksmod.top`, rather than exposing a clear predictable file action.", "pathIds": [ "detail" ], "artifacts": [ "evidence/detail-recon.json" ], "findingIds": [ "F09" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "visual screenshot review", "evidence": "A real HTTP 404 returns a visible “Error 404 Not Found” state with search-based recovery.", "pathIds": [ "notfound" ], "artifacts": [ "evidence/notfound-mobile.png" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Lighthouse audit", "evidence": "Mobile Lighthouse measured LCP 3.8s and FCP 3.0s, outside the good loading range; CLS 0.042 and TBT 0ms were good.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse-summary.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "CDP layout metrics", "evidence": "Observed CLS was 0.00022 on home and 0.0206 on detail, both comfortably low.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "HAR/trace summary review", "evidence": "The trace reported zero long tasks and 0ms total blocking time; one 64ms detail-page task was isolated.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "HAR/trace summary review", "evidence": "The load transferred 2.23MB across 83 requests; four parser-inserted head scripts lack async/defer and the HAR found multiple blocking candidates.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "The public page ships WordPress admin editor, TinyMCE, media-upload, jQuery UI, and link-editor bundles unrelated to viewing movie listings.", "pathIds": [ "home" ], "artifacts": [ "evidence/script-delivery.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "axe-core accessibility scan", "evidence": "axe found a critical unnamed search button and a serious unnamed back-to-top link; search input also has no explicit label.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-axe.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "axe-core accessibility scan", "evidence": "axe measured ratios as low as 2.37:1 for search text and 3.03:1 for Telegram text, below 4.5:1.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-axe.json" ], "findingIds": [ "F14" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "axe-core accessibility scan", "evidence": "axe found no main landmark and non-unique navigation landmarks; focus probing found no visible outline.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-axe.json" ], "findingIds": [ "F15" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "issues", "confidence": "high", "method": "visual screenshot review", "evidence": "Detail body copy renders low-contrast gray on charcoal with dense line breaks and inconsistent emphasis, reducing reading comfort.", "pathIds": [ "home" ], "artifacts": [ "evidence/detail-mobile.png" ], "findingIds": [ "F16" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "Narrow reflow works, but many category and navigation controls are only 34–43px high; the embedded trailer has no local text equivalent.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-platform-probe.json" ], "findingIds": [ "F17" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "issues", "confidence": "high", "method": "Lighthouse audit", "evidence": "Lighthouse captured a TypeError in `width.js` reading `clientWidth` from null.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse-summary.json" ], "findingIds": [ "F18" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "All 24 images use legacy PNG/JPEG without srcset; 23 are oversized and the logo lacks dimensions.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-images.json" ], "findingIds": [ "F19" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "Public pages expose WordPress editor/link UI, load dated editor/plugin bundles, and create an iframe with an invalid `https://undefined/…` origin.", "pathIds": [ "home" ], "artifacts": [ "evidence/script-delivery.json" ], "findingIds": [ "F20" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "Home has descriptive title and meta description; detail has a unique descriptive title and article metadata.", "pathIds": [ "home", "detail" ], "artifacts": [ "evidence/home-recon.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "Links use real hrefs, viewport metadata is present, and robots permits normal search crawling.", "pathIds": [ "home", "detail" ], "artifacts": [ "evidence/home-discoverability.json" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "pass", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "Pages return successful status, expose canonical URLs, allow indexing, and a current 22-part sitemap index is available.", "pathIds": [ "home", "detail" ], "artifacts": [ "evidence/sitemap.json" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "pass", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "Home exposes CollectionPage/Open Graph metadata and the detail page exposes matching Article JSON-LD.", "pathIds": [ "home", "detail" ], "artifacts": [ "evidence/detail-recon.json" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "CDP response-header inspection", "evidence": "HTTPS is used, but CSP, HSTS, nosniff, clickjacking, Referrer-Policy, and Permissions-Policy headers are all absent.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-headers.json" ], "findingIds": [ "F21" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "The page contacted 15 third-party origins including analytics and opaque ad-like domains; 79/83 HAR requests were classified third-party from the original host.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trackers.json" ], "findingIds": [ "F22" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "pass", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "No geolocation/notification/media permission request or authentication surface was found, so no out-of-context prompt or password-only flow was imposed.", "pathIds": [ "home" ], "artifacts": [ "evidence/context-probe.json" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "CDP response-header inspection", "evidence": "No HSTS, clickjacking defense, Referrer-Policy, Permissions-Policy, or CSP/Trusted Types baseline is configured.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-headers.json" ], "findingIds": [ "F23" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "Raw HTML contains 100% of rendered content tokens and crawler screenshots retain the complete listing without JavaScript.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-discoverability.json" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "issues", "confidence": "high", "method": "Lighthouse audit", "evidence": "Runtime robustness is undermined by a null `clientWidth` exception and a malformed `https://undefined/…` iframe on the detail template.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse-summary.json" ], "findingIds": [ "F24" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "This is a server-rendered content/download catalog, not an app-like experience; no install/offline intent is evident.", "reason": "This is a server-rendered content/download catalog, not an app-like experience; no install/offline intent is evident.", "pathIds": [ "home" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "visual screenshot review", "evidence": "A real unknown URL returns HTTP 404 with explanatory text and a search recovery control.", "pathIds": [ "notfound" ], "artifacts": [ "evidence/notfound-mobile.png" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "medium", "method": "DOM/evaluate probe", "evidence": "`lang=en-US` is present, but CSS uses physical left/right properties and no logical inline/block properties despite multilingual content.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-platform-probe.json" ], "findingIds": [ "F25" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "Representative pages contain no prices, numeric locale formatting, or machine-readable dates requiring locale-aware rendering.", "reason": "Representative pages contain no prices, numeric locale formatting, or machine-readable dates requiring locale-aware rendering.", "pathIds": [ "home" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "No scheduled events, times, recurring intervals, or time-zone-sensitive user data were found.", "reason": "No scheduled events, times, recurring intervals, or time-zone-sensitive user data were found.", "pathIds": [ "home" ] }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "issues", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "Primary “Download Links” are indistinguishable generic actions routed to an unrelated link-shortener while opaque ad scripts and an invalid hidden iframe load.", "pathIds": [ "detail" ], "artifacts": [ "evidence/detail-recon.json" ], "findingIds": [ "F26" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "issues", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "Comment fields rely on placeholder text, omit required semantics, and expose no evidence of interaction-timed or accessible validation.", "pathIds": [ "detail" ], "artifacts": [ "evidence/detail-forms.json" ], "findingIds": [ "F27" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "Name, email, URL, and search fields omit useful autocomplete tokens; search explicitly disables autocomplete.", "pathIds": [ "detail" ], "artifacts": [ "evidence/detail-forms.json" ], "findingIds": [ "F28" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "not-applicable", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "No checkout, subscription, authentication, consent, or account-management flow was present.", "reason": "No checkout, subscription, authentication, consent, or account-management flow was present.", "pathIds": [ "detail" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "23/24 images are oversized, all lack responsive sources, all use legacy formats, and 19 below-fold images load eagerly.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-images.json" ], "findingIds": [ "F29" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "The page loads 31 scripts including WordPress admin/editor stacks and unrelated UI libraries on a read-only listing.", "pathIds": [ "home" ], "artifacts": [ "evidence/script-delivery.json" ], "findingIds": [ "F30" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "HAR/trace summary review", "evidence": "Third parties account for about 2.23MB and 79 requests, including analytics, ad-like domains, fonts, and 1.47MB of images.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json" ], "findingIds": [ "F31" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "No declared agent-facing workflow exists; the emerging WebMCP capability check is out of scope for this download catalog.", "reason": "No declared agent-facing workflow exists; the emerging WebMCP capability check is out of scope for this download catalog.", "pathIds": [ "home" ] }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "DOM/evaluate probe", "evidence": "No summarization, translation, generation, or other inference use case requiring on-device AI was identified.", "reason": "No summarization, translation, generation, or other inference use case requiring on-device AI was identified.", "pathIds": [ "home" ] }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "baseline/post heap-summary comparison", "evidence": "After ten representative scroll/menu-state cycles, heap nodes fell from 214,768 to 214,684 and self size changed only +1,470 bytes.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-heap-post.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "medium", "method": "baseline/post heap-summary comparison", "evidence": "The baseline heap was 11.69MB for the image-rich listing and remained stable after interaction.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-heap-baseline.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "baseline/post heap-summary comparison", "evidence": "Before/after heap summaries did not grow in node/edge count across repeated interaction; no accumulating detached-node signal was observed.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-heap-post.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01", "F02" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F04" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F05", "F06" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F07", "F08" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F09" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F10", "F11", "F12" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F13", "F14", "F15", "F16", "F17" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F18", "F19", "F20" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "pass" }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F21", "F22", "F23" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F24" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F25" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F26", "F27", "F28" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F29", "F30", "F31" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "No declared agent-facing workflow exists; the emerging WebMCP capability check is out of scope for this download catalog. No summarization, translation, generation, or other inference use case requiring on-device AI was identified." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Homepage and newest-content listing; represents global shell, discovery, navigation, and first-load behavior.", "url": "https://bollyflix.med", "conditions": [ "desktop", "viewport: 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "forced-colors", "keyboard focus", "no JavaScript" ], "result": "issues" }, { "id": "listing", "description": "Bollywood category; represents taxonomy/listing templates.", "url": "https://bollyflix.at/movies/bollywood/", "conditions": [ "viewport: 360x800" ], "result": "issues" }, { "id": "detail", "description": "Dhamaal 4 detail; represents content metadata, media, comments, and the primary download journey.", "url": "https://bollyflix.at/dhamaal-4-2025-hindi-movie/", "conditions": [ "viewport: 360x800", "no JavaScript" ], "result": "issues" }, { "id": "search", "description": "Search results for Dhamaal; represents search completion and result cards.", "url": "https://bollyflix.at/?s=Dhamaal", "conditions": [ "viewport: 360x800" ], "result": "issues" }, { "id": "notfound", "description": "Unknown URL; represents HTTP failure and recovery.", "url": "https://bollyflix.at/definitely-not-a-real-page-404", "conditions": [ "viewport: 360x800" ], "result": "pass" } ], "findings": [ { "id": "F01", "pathId": "home", "url": "https://bollyflix.med", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "medium", "summary": "The site is hard-coded to one dark palette and does not react to the user color-scheme preference.", "evidence": "The site is hard-coded to one dark palette and does not react to the user color-scheme preference.", "artifacts": [ "evidence/home-platform-probe.json" ], "suggestedFix": "Add `color-scheme: light dark` and preference-driven surface/text tokens.", "effort": "small" }, { "id": "F02", "pathId": "home", "url": "https://bollyflix.med", "principleId": "respect-user-preferences", "principleCheckId": "respects-contrast", "guidanceId": "adapt-scrollbar-to-contrast-preferences", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "The forced-colors screenshot remains operable, but axe found four serious contrast failures and CSS has no prefers-contrast/forced-colors adaptation.", "evidence": "The forced-colors screenshot remains operable, but axe found four serious contrast failures and CSS has no prefers-contrast/forced-colors adaptation.", "artifacts": [ "evidence/home-axe.json" ], "suggestedFix": "Add high-contrast tokens and forced-colors fallbacks, then meet WCAG AA contrast.", "effort": "medium" }, { "id": "F03", "pathId": "home", "url": "https://bollyflix.med", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "same-document-transitions", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "Navigation and content swaps are abrupt", "evidence": "Navigation and content swaps are abrupt; the CSS probe found no View Transition declarations.", "artifacts": [ "evidence/home-platform-probe.json" ], "suggestedFix": "Use cross-document View Transitions for same-origin navigation, with reduced-motion handling.", "effort": "small" }, { "id": "F04", "pathId": "home", "url": "https://bollyflix.med", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "scroll-progress-indicator", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "The long 6,200px listing keeps static chrome and provides no scroll progress or position-aware navigation.", "evidence": "The long 6,200px listing keeps static chrome and provides no scroll progress or position-aware navigation.", "artifacts": [ "evidence/home-mobile.png" ], "suggestedFix": "Add a lightweight scroll progress/position affordance for long result listings.", "effort": "small" }, { "id": "F05", "pathId": "home", "url": "https://bollyflix.med", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "The page ships a custom `.modal`/WordPress editor overlay and no dialog, popover, or details primitives.", "evidence": "The page ships a custom `.modal`/WordPress editor overlay and no dialog, popover, or details primitives.", "artifacts": [ "evidence/home-platform-probe.json" ], "suggestedFix": "Remove leaked editor UI and use native dialog/popover primitives for any required overlay.", "effort": "small" }, { "id": "F06", "pathId": "home", "url": "https://bollyflix.med", "principleId": "maximize-content-reduce-noise", "principleCheckId": "reduced-chrome", "guidanceId": "scrollability-affordance-hints", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "On mobile, logo, search, menu, eight category pills, and a domain banner consume roughly the first half viewport before content.", "evidence": "On mobile, logo, search, menu, eight category pills, and a domain banner consume roughly the first half viewport before content.", "artifacts": [ "evidence/home-mobile.png" ], "suggestedFix": "Collapse secondary categories and domain messaging so primary content appears earlier.", "effort": "small" }, { "id": "F07", "pathId": "home", "url": "https://bollyflix.med", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "guidanceCategory": "user-experience", "severity": "low", "confidence": "medium", "summary": "Components resize at the viewport level, but CSS inspection found no container queries for reusable cards/navigation.", "evidence": "Components resize at the viewport level, but CSS inspection found no container queries for reusable cards/navigation.", "artifacts": [ "evidence/home-platform-probe.json" ], "suggestedFix": "Make card and navigation components adapt with container queries rather than only viewport rules.", "effort": "small" }, { "id": "F08", "pathId": "home", "url": "https://bollyflix.med", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Programmatic keyboard focus showed `outline: none`", "evidence": "Programmatic keyboard focus showed `outline: none`; many controls are 34–43px high, below a 44px touch target.", "artifacts": [ "evidence/home-platform-probe.json" ], "suggestedFix": "Add a strong `:focus-visible` ring and enlarge interactive targets to at least 44px.", "effort": "medium" }, { "id": "F09", "pathId": "detail", "url": "https://bollyflix.at/dhamaal-4-2025-hindi-movie/", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "forms", "guidanceCategory": "forms", "severity": "high", "confidence": "high", "summary": "The primary download journey diverts through multiple identical generic links to `linksmod.top`, rather than exposing a clear predictable file action.", "evidence": "The primary download journey diverts through multiple identical generic links to `linksmod.top`, rather than exposing a clear predictable file action.", "artifacts": [ "evidence/detail-recon.json" ], "suggestedFix": "Present verified format/size actions directly, identify destinations, and remove avoidable link-shortener detours.", "effort": "medium" }, { "id": "F10", "pathId": "home", "url": "https://bollyflix.med", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Mobile Lighthouse measured LCP 3.8s and FCP 3.0s, outside the good loading range", "evidence": "Mobile Lighthouse measured LCP 3.8s and FCP 3.0s, outside the good loading range; CLS 0.042 and TBT 0ms were good.", "artifacts": [ "evidence/home-lighthouse-summary.json" ], "suggestedFix": "Prioritize the LCP asset and remove load-chain overhead to bring LCP below 2.5s.", "effort": "small" }, { "id": "F11", "pathId": "home", "url": "https://bollyflix.med", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-script-priority", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "The load transferred 2.23MB across 83 requests", "evidence": "The load transferred 2.23MB across 83 requests; four parser-inserted head scripts lack async/defer and the HAR found multiple blocking candidates.", "artifacts": [ "evidence/home-summary.json" ], "suggestedFix": "Defer non-critical scripts, remove redirects, and prioritize only resources needed for first content.", "effort": "medium" }, { "id": "F12", "pathId": "home", "url": "https://bollyflix.med", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "The public page ships WordPress admin editor, TinyMCE, media-upload, jQuery UI, and link-editor bundles unrelated to viewing movie listings.", "evidence": "The public page ships WordPress admin editor, TinyMCE, media-upload, jQuery UI, and link-editor bundles unrelated to viewing movie listings.", "artifacts": [ "evidence/script-delivery.json" ], "suggestedFix": "Stop enqueueing admin/editor bundles and load page-specific scripts conditionally.", "effort": "medium" }, { "id": "F13", "pathId": "home", "url": "https://bollyflix.med", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "axe found a critical unnamed search button and a serious unnamed back-to-top link", "evidence": "axe found a critical unnamed search button and a serious unnamed back-to-top link; search input also has no explicit label.", "artifacts": [ "evidence/home-axe.json" ], "suggestedFix": "Give icon-only controls accessible names and explicitly label search fields.", "effort": "medium" }, { "id": "F14", "pathId": "home", "url": "https://bollyflix.med", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "axe measured ratios as low as 2.37:1 for search text and 3.03:1 for Telegram text, below 4.5:1.", "evidence": "axe measured ratios as low as 2.37:1 for search text and 3.03:1 for Telegram text, below 4.5:1.", "artifacts": [ "evidence/home-axe.json" ], "suggestedFix": "Use WCAG AA color pairs for text, placeholders, controls, and notices.", "effort": "medium" }, { "id": "F15", "pathId": "home", "url": "https://bollyflix.med", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "axe found no main landmark and non-unique navigation landmarks", "evidence": "axe found no main landmark and non-unique navigation landmarks; focus probing found no visible outline.", "artifacts": [ "evidence/home-axe.json" ], "suggestedFix": "Wrap core content in `
`, uniquely name navigation landmarks, and restore visible focus.", "effort": "medium" }, { "id": "F16", "pathId": "home", "url": "https://bollyflix.med", "principleId": "be-inclusive", "principleCheckId": "legible-text", "guidanceId": "improve-text-layout-and-legibility", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "Detail body copy renders low-contrast gray on charcoal with dense line breaks and inconsistent emphasis, reducing reading comfort.", "evidence": "Detail body copy renders low-contrast gray on charcoal with dense line breaks and inconsistent emphasis, reducing reading comfort.", "artifacts": [ "evidence/detail-mobile.png" ], "suggestedFix": "Increase body contrast, line-height, and spacing; use semantic headings instead of inline visual emphasis.", "effort": "small" }, { "id": "F17", "pathId": "home", "url": "https://bollyflix.med", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "medium", "confidence": "high", "summary": "Narrow reflow works, but many category and navigation controls are only 34–43px high", "evidence": "Narrow reflow works, but many category and navigation controls are only 34–43px high; the embedded trailer has no local text equivalent.", "artifacts": [ "evidence/home-platform-probe.json" ], "suggestedFix": "Increase target sizes and provide captions/transcript or a clear equivalent for embedded media.", "effort": "small" }, { "id": "F18", "pathId": "home", "url": "https://bollyflix.med", "principleId": "follow-best-practices", "principleCheckId": "no-console-errors", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "Lighthouse captured a TypeError in `width.js` reading `clientWidth` from null.", "evidence": "Lighthouse captured a TypeError in `width.js` reading `clientWidth` from null.", "artifacts": [ "evidence/home-lighthouse-summary.json" ], "suggestedFix": "Guard missing elements in the plugin script or stop loading it on templates where its target is absent.", "effort": "small" }, { "id": "F19", "pathId": "home", "url": "https://bollyflix.med", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "All 24 images use legacy PNG/JPEG without srcset", "evidence": "All 24 images use legacy PNG/JPEG without srcset; 23 are oversized and the logo lacks dimensions.", "artifacts": [ "evidence/home-images.json" ], "suggestedFix": "Emit dimensions, responsive `srcset`/`sizes`, and modern image formats.", "effort": "small" }, { "id": "F20", "pathId": "home", "url": "https://bollyflix.med", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "guidanceId": "html", "guidanceCategory": "html", "severity": "high", "confidence": "high", "summary": "Public pages expose WordPress editor/link UI, load dated editor/plugin bundles, and create an iframe with an invalid `https://undefined/…` origin.", "evidence": "Public pages expose WordPress editor/link UI, load dated editor/plugin bundles, and create an iframe with an invalid `https://undefined/…` origin.", "artifacts": [ "evidence/script-delivery.json" ], "suggestedFix": "Remove admin/editor assets from public templates and fix or remove the malformed iframe integration.", "effort": "medium" }, { "id": "F21", "pathId": "home", "url": "https://bollyflix.med", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "security", "severity": "high", "confidence": "high", "summary": "HTTPS is used, but CSP, HSTS, nosniff, clickjacking, Referrer-Policy, and Permissions-Policy headers are all absent.", "evidence": "HTTPS is used, but CSP, HSTS, nosniff, clickjacking, Referrer-Policy, and Permissions-Policy headers are all absent.", "artifacts": [ "evidence/home-headers.json" ], "suggestedFix": "Deploy CSP, HSTS, nosniff, frame-ancestors, Referrer-Policy, and Permissions-Policy headers.", "effort": "medium" }, { "id": "F22", "pathId": "home", "url": "https://bollyflix.med", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "privacy", "severity": "high", "confidence": "high", "summary": "The page contacted 15 third-party origins including analytics and opaque ad-like domains", "evidence": "The page contacted 15 third-party origins including analytics and opaque ad-like domains; 79/83 HAR requests were classified third-party from the original host.", "artifacts": [ "evidence/home-trackers.json" ], "suggestedFix": "Remove opaque advertising chains, minimize analytics, and allowlist only necessary third parties.", "effort": "medium" }, { "id": "F23", "pathId": "home", "url": "https://bollyflix.med", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "guidanceCategory": "security", "severity": "high", "confidence": "high", "summary": "No HSTS, clickjacking defense, Referrer-Policy, Permissions-Policy, or CSP/Trusted Types baseline is configured.", "evidence": "No HSTS, clickjacking defense, Referrer-Policy, Permissions-Policy, or CSP/Trusted Types baseline is configured.", "artifacts": [ "evidence/home-headers.json" ], "suggestedFix": "Add browser-enforced defensive policies, starting with HSTS and a nonce/hash-based CSP.", "effort": "medium" }, { "id": "F24", "pathId": "home", "url": "https://bollyflix.med", "principleId": "be-resilient", "principleCheckId": "resilient-runtime-behaviour", "guidanceId": "conditional-async-dependencies", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Runtime robustness is undermined by a null `clientWidth` exception and a malformed `https://undefined/…` iframe on the detail template.", "evidence": "Runtime robustness is undermined by a null `clientWidth` exception and a malformed `https://undefined/…` iframe on the detail template.", "artifacts": [ "evidence/home-lighthouse-summary.json" ], "suggestedFix": "Conditionally initialize plugins only when their target exists and validate all generated iframe origins.", "effort": "small" }, { "id": "F25", "pathId": "home", "url": "https://bollyflix.med", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "translator", "guidanceCategory": "built-in-ai", "severity": "low", "confidence": "medium", "summary": "`lang=en-US` is present, but CSS uses physical left/right properties and no logical inline/block properties despite multilingual content.", "evidence": "`lang=en-US` is present, but CSS uses physical left/right properties and no logical inline/block properties despite multilingual content.", "artifacts": [ "evidence/home-platform-probe.json" ], "suggestedFix": "Use logical properties and set `dir` where content or localization requires it.", "effort": "small" }, { "id": "F26", "pathId": "detail", "url": "https://bollyflix.at/dhamaal-4-2025-hindi-movie/", "principleId": "be-trustworthy", "principleCheckId": "no-dark-patterns", "guidanceId": "search-hidden-content", "guidanceCategory": "user-experience", "severity": "critical", "confidence": "high", "summary": "Primary “Download Links” are indistinguishable generic actions routed to an unrelated link-shortener while opaque ad scripts and an invalid hidden iframe load.", "evidence": "Primary “Download Links” are indistinguishable generic actions routed to an unrelated link-shortener while opaque ad scripts and an invalid hidden iframe load.", "artifacts": [ "evidence/detail-recon.json" ], "suggestedFix": "Use honest destination labels, remove disguised advertising/redirect chains, and disclose any external host before navigation.", "effort": "medium" }, { "id": "F27", "pathId": "detail", "url": "https://bollyflix.at/dhamaal-4-2025-hindi-movie/", "principleId": "be-trustworthy", "principleCheckId": "humane-error-handling", "guidanceId": "accessible-error-announcement", "guidanceCategory": "accessibility", "severity": "medium", "confidence": "high", "summary": "Comment fields rely on placeholder text, omit required semantics, and expose no evidence of interaction-timed or accessible validation.", "evidence": "Comment fields rely on placeholder text, omit required semantics, and expose no evidence of interaction-timed or accessible validation.", "artifacts": [ "evidence/detail-forms.json" ], "suggestedFix": "Add persistent labels, required attributes, `:user-invalid`, and announced error summaries after submission.", "effort": "small" }, { "id": "F28", "pathId": "detail", "url": "https://bollyflix.at/dhamaal-4-2025-hindi-movie/", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-address-form", "guidanceCategory": "forms", "severity": "medium", "confidence": "high", "summary": "Name, email, URL, and search fields omit useful autocomplete tokens", "evidence": "Name, email, URL, and search fields omit useful autocomplete tokens; search explicitly disables autocomplete.", "artifacts": [ "evidence/detail-forms.json" ], "suggestedFix": "Add appropriate autocomplete tokens such as name, email, and url; do not disable assistance without cause.", "effort": "small" }, { "id": "F29", "pathId": "home", "url": "https://bollyflix.med", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "deliver-optimized-decorative-images", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "23/24 images are oversized, all lack responsive sources, all use legacy formats, and 19 below-fold images load eagerly.", "evidence": "23/24 images are oversized, all lack responsive sources, all use legacy formats, and 19 below-fold images load eagerly.", "artifacts": [ "evidence/home-images.json" ], "suggestedFix": "Generate AVIF/WebP responsive variants and lazy-load below-fold posters.", "effort": "medium" }, { "id": "F30", "pathId": "home", "url": "https://bollyflix.med", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "guidanceId": "deprioritize-background-fetches", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "The page loads 31 scripts including WordPress admin/editor stacks and unrelated UI libraries on a read-only listing.", "evidence": "The page loads 31 scripts including WordPress admin/editor stacks and unrelated UI libraries on a read-only listing.", "artifacts": [ "evidence/script-delivery.json" ], "suggestedFix": "Remove non-user-facing bundles and conditionally load remaining features only when used.", "effort": "medium" }, { "id": "F31", "pathId": "home", "url": "https://bollyflix.med", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "efficient-background-processing", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "Third parties account for about 2.23MB and 79 requests, including analytics, ad-like domains, fonts, and 1.47MB of images.", "evidence": "Third parties account for about 2.23MB and 79 requests, including analytics, ad-like domains, fonts, and 1.47MB of images.", "artifacts": [ "evidence/home-summary.json" ], "suggestedFix": "Set a third-party budget, self-host essentials, remove opaque scripts, and defer non-critical media.", "effort": "medium" } ], "taskList": [ { "id": "T1", "title": "Make download navigation honest and direct", "priority": 1, "findingIds": [ "F09", "F26" ], "guidanceId": "search-hidden-content", "status": "open" }, { "id": "T2", "title": "Remove opaque third parties and deploy browser defenses", "priority": 2, "findingIds": [ "F21", "F22", "F23" ], "guidanceId": "security", "status": "open" }, { "id": "T3", "title": "Remove public admin/editor bundles and fix runtime errors", "priority": 3, "findingIds": [ "F12", "F18", "F20", "F24" ], "guidanceId": "identify-heavy-scripts", "status": "open" }, { "id": "T4", "title": "Repair accessible names, landmarks, focus, contrast, and targets", "priority": 4, "findingIds": [ "F08", "F13", "F14", "F15", "F17" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T5", "title": "Optimize responsive image delivery", "priority": 5, "findingIds": [ "F11", "F19", "F29" ], "guidanceId": "deliver-optimized-decorative-images", "status": "open" }, { "id": "T6", "title": "Reduce above-the-fold chrome and improve long-page guidance", "priority": 6, "findingIds": [ "F04", "F06" ], "guidanceId": "scroll-progress-indicator", "status": "open" }, { "id": "T7", "title": "Add preference-aware and component-aware styling", "priority": 7, "findingIds": [ "F01", "F02", "F07" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T8", "title": "Improve comments and input assistance", "priority": 8, "findingIds": [ "F27", "F28" ], "guidanceId": "accessible-error-announcement", "status": "open" } ], "budget": { "wallClockSeconds": 540, "pathCount": 5, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-18T23-59-01-826Z" }