{ "url": "https://download.moviespage.xyz", "auditedAt": "2026-07-19T05:28:00.000Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete audit of the response actually served. Recon found one error-like static archetype and no internal routes or flows; robots, sitemap, and a missing-route response were additionally inspected.", "page": { "appType": "mpa", "framework": "none detected", "notes": "The origin returns HTTP 200 with a 16-byte body containing only “*** BAD PAGE ***”. No bot challenge or auth wall was shown." }, "evidenceUsed": [ "dom", "screenshot", "emulated-media screenshots", "layout-metrics", "evaluate-probe", "trace", "har", "discoverability", "headers", "cookies", "trackers", "secrets", "images", "heap-summary", "Lighthouse", "HTTP probes", "Modern Web Guidance search" ], "guidanceConsulted": [ "dark-mode", "accessibility", "component-specific-light-dark-theme", "adapt-scrollbar-to-contrast-preferences", "interactive-content-reveal", "search-hidden-content", "agentic-forms", "faster-spa-view-transitions", "passkeys", "passkey-management", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "performance", "deprioritize-background-fetches", "coordinate-global-events", "capture-location-agnostic-data", "support-global-calendar-systems", "calculate-event-differentials", "translator", "autofill-payment-form", "forms", "autofill-sign-up-form", "autofill-sign-in-form", "autofill-address-form", "efficient-background-processing", "html", "deliver-optimized-decorative-images", "optimize-preload-priority", "summarizer", "agentic-javascript-tools", "webmcp", "language-model", "defer-work-until-scroll-ends", "persistent-top-layer-ui", "move-dom-element-without-losing-state", "directional-navigation-transitions", "scroll-entry-exit-effects", "css", "carousel-slide-effects", "stack-drill-down", "pull-to-reveal", "scroll-position-aware-elements", "scroll-target-on-load", "scroll-snap-state-sync", "navigation-drawer", "declarative-dialog-popover-control", "persistent-app-tours", "css-layout", "size-aware-styling", "scrollability-affordance-hints", "required-field-feedback", "validate-input-after-interaction", "schedule-tasks-by-priority", "accessible-error-announcement", "defer-rendering-heavy-content", "security" ], "artifacts": [ { "type": "screenshot", "path": "evidence/desktop.png", "caption": "Entry page at desktop viewport", "condition": "desktop", "findingIds": [ "F-001", "F-002", "F-005" ] }, { "type": "screenshot", "path": "evidence/mobile.png", "caption": "Entry page at 360x800", "condition": "viewport: 360x800", "findingIds": [ "F-001", "F-003" ] }, { "type": "screenshot", "path": "evidence/dark-reduced.png", "caption": "Entry under dark and reduced-motion preferences", "condition": "prefers-color-scheme: dark; prefers-reduced-motion: reduce", "findingIds": [ "F-002" ] }, { "type": "screenshot", "path": "evidence/high-contrast.png", "caption": "Entry under forced colors and increased contrast", "condition": "forced-colors: active; prefers-contrast: more", "findingIds": [] }, { "type": "dom", "path": "evidence/dom.json", "caption": "Rendered DOM and CSS inventory", "condition": "default", "findingIds": [ "F-001", "F-004", "F-010" ] }, { "type": "other", "path": "evidence/probe.json", "caption": "Ad-hoc semantic, metadata, focus, media-query, and CSS feature probe", "condition": "default", "findingIds": [ "F-002", "F-003", "F-006", "F-007", "F-008", "F-011" ] }, { "type": "layout", "path": "evidence/layout-mobile.json", "caption": "Mobile layout, CLS, long-task, and overflow metrics", "condition": "viewport: 360x800", "findingIds": [ "F-003" ] }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "Lighthouse performance, accessibility, best-practices, SEO, and agentic-browser audits", "condition": "mobile lab", "findingIds": [ "F-003", "F-006", "F-007", "F-008", "F-011" ] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "Raw HTML versus rendered DOM discoverability analysis", "condition": "JavaScript on/off", "findingIds": [ "F-001", "F-008", "F-010" ] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "Browser-rendered discoverability view", "condition": "JavaScript enabled", "findingIds": [ "F-010" ] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "Crawler discoverability view", "condition": "JavaScript disabled", "findingIds": [ "F-010" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "Security response-header audit", "condition": "default", "findingIds": [ "F-009" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "Cookie security audit", "condition": "default", "findingIds": [ "F-009" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "Client-side secret scan", "condition": "default", "findingIds": [] }, { "type": "other", "path": "evidence/trackers.json", "caption": "Third-party origin and tracker scan", "condition": "default", "findingIds": [] }, { "type": "other", "path": "evidence/images.json", "caption": "Image delivery and accessibility inventory", "condition": "default", "findingIds": [] }, { "type": "har", "path": "evidence/network.har", "caption": "Network archive", "condition": "default", "findingIds": [] }, { "type": "har-summary", "path": "evidence/network-summary.json", "caption": "Compact network summary", "condition": "default", "findingIds": [] }, { "type": "trace", "path": "evidence/trace.json", "caption": "DevTools load performance trace", "condition": "default", "findingIds": [] }, { "type": "trace-summary", "path": "evidence/trace-summary.json", "caption": "Compact performance trace summary", "condition": "default", "findingIds": [] }, { "type": "heap", "path": "evidence/heap.heapsnapshot", "caption": "Readable heap summary from static page state", "condition": "default", "findingIds": [] }, { "type": "other", "path": "evidence/http.txt", "caption": "Root headers, robots, sitemap, and missing-route responses", "condition": "default", "findingIds": [ "F-005", "F-008", "F-009" ] }, { "type": "other", "path": "coverage-manifest.json", "caption": "Atomic 58-check coverage manifest and evidence plan", "condition": "pre-audit", "findingIds": [] } ], "config": { "loaded": false }, "network": { "requestCount": 2, "transferredBytes": 1572, "thirdPartyRequests": 0 }, "metrics": { "fcp": 768.18, "lcp": 768.18, "cls": 0, "tbt": 0, "lighthouse": { "performance": 1, "accessibility": 0.5, "bestPractices": 0.96, "seo": 0.82 } }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Paired screenshots under default and prefers-color-scheme: dark plus CSS probe", "evidence": "The dark-emulated screenshot is pixel-equivalent to the light screenshot and the probe found no color-scheme CSS. The page remains a hard-coded white canvas.", "artifacts": [ "evidence/desktop.png", "evidence/dark-reduced.png" ], "pathIds": [ "entry" ], "findingIds": [ "F-002" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "Emulated prefers-reduced-motion: reduce plus getAnimations/CSS probe", "evidence": "The emulated reduced-motion state reported zero document animations and no animation CSS; there is no non-essential motion or auto-advance to suppress.", "artifacts": [ "evidence/dark-reduced.png", "evidence/probe.json" ], "pathIds": [ "entry" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "High-contrast screenshot plus Lighthouse contrast audit", "evidence": "The forced-colors/prefers-contrast screenshot retains clearly visible black text on a white canvas; Lighthouse also reports the color-contrast audit passing.", "artifacts": [ "evidence/high-contrast.png", "evidence/lighthouse.json" ], "pathIds": [ "entry" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "The served page has no routes, controls, or state changes to transition; the intended site interaction is unavailable.", "reason": "The served page has no routes, controls, or state changes to transition; the intended site interaction is unavailable." }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "pass", "confidence": "high", "method": "DOM/CSS inspection and animation feature probe", "evidence": "DOM, CSS, and animation probes found no scroll-linked visual treatment, scroll event code, or main-thread scroll handlers; the static response does not implement the anti-pattern this check guards against.", "artifacts": [ "evidence/dom.json", "evidence/probe.json" ], "pathIds": [ "entry" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "high", "method": "DOM/script and CSS interaction inspection", "evidence": "The static document ships no custom pointer handlers or platform-fighting gesture code; no gesture interaction is claimed by the observed surface.", "artifacts": [ "evidence/dom.json", "evidence/probe.json" ], "pathIds": [ "entry" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "The response is a single error-like text node with no navigation chrome or scrollable content journey.", "reason": "The response is a single error-like text node with no navigation chrome or scrollable content journey." }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "No tooltips, popovers, menus, or overlays are present.", "reason": "No tooltips, popovers, menus, or overlays are present." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "issues", "confidence": "high", "method": "First-viewport hierarchy and navigation/focus inventory", "evidence": "The page provides no navigation, heading, primary action, recovery link, focus move, or other cue to orient attention after reaching the unexplained bad state.", "artifacts": [ "evidence/desktop.png", "evidence/probe.json" ], "pathIds": [ "entry" ], "findingIds": [ "F-001" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "high", "method": "Load screenshot and overlay DOM probe", "evidence": "Load screenshots and DOM show no popup, interstitial, consent wall, or obscuring banner.", "artifacts": [ "evidence/desktop.png", "evidence/dom.json" ], "pathIds": [ "entry" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "No overlays, disclosures, selects, pickers, or rich controls are present.", "reason": "No overlays, disclosures, selects, pickers, or rich controls are present." }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "issues", "confidence": "high", "method": "First-viewport screenshot and DOM content inspection", "evidence": "The viewport contains only the generic text “*** BAD PAGE ***”; there is no user content for the otherwise empty canvas to prioritize.", "artifacts": [ "evidence/desktop.png", "evidence/dom.json" ], "pathIds": [ "entry" ], "findingIds": [ "F-001" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Mobile screenshot, layout metrics, and Lighthouse viewport audit", "evidence": "At a 360x800 emulation the page has no viewport meta and Chrome lays it out at a 980 CSS-pixel viewport, then scales it down. Lighthouse flags viewport optimization.", "artifacts": [ "evidence/mobile.png", "evidence/layout-mobile.json", "evidence/lighthouse.json" ], "pathIds": [ "entry" ], "findingIds": [ "F-003" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "The response has no authored components or CSS; there is nothing reused at differing container sizes.", "reason": "The response has no authored components or CSS; there is nothing reused at differing container sizes." }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "The DOM exposes zero links, buttons, inputs, or focusable controls, so there is no input-modality behavior to exercise.", "reason": "The DOM exposes zero links, buttons, inputs, or focusable controls, so there is no input-modality behavior to exercise." }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "issues", "confidence": "high", "method": "First-viewport screenshot, DOM, and heading/control probe", "evidence": "The only visible text is “*** BAD PAGE ***”. There is no heading, explanation, movie/download identity, or primary action.", "artifacts": [ "evidence/desktop.png", "evidence/dom.json", "evidence/probe.json" ], "pathIds": [ "entry" ], "findingIds": [ "F-001" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "DOM journey inventory", "evidence": "The DOM has no links, forms, buttons, or controls, so no download or other primary journey can begin, let alone complete.", "artifacts": [ "evidence/dom.json", "evidence/probe.json" ], "pathIds": [ "entry" ], "findingIds": [ "F-004" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "issues", "confidence": "high", "method": "Root screenshot plus root and missing-route HTTP probes", "evidence": "The page communicates an unexplained bad state but offers no retry, home link, support path, or recovery action. A missing route does return HTTP 404, but the root failure returns 200.", "artifacts": [ "evidence/desktop.png", "evidence/http.txt" ], "pathIds": [ "entry" ], "findingIds": [ "F-005" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "pass", "confidence": "high", "method": "Lighthouse and DevTools performance trace summary", "evidence": "Lighthouse measured LCP 0.77s, CLS 0, and TBT 0ms; trace measured LCP 0.93s and TBT 0ms. These are good lab values for the served response.", "artifacts": [ "evidence/lighthouse.json", "evidence/trace-summary.json" ], "pathIds": [ "entry" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Layout-shift observer and Lighthouse", "evidence": "The layout observer recorded CLS 0 with no shifts, and Lighthouse also measured CLS 0.", "artifacts": [ "evidence/layout-mobile.json", "evidence/lighthouse.json" ], "pathIds": [ "entry" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "Trace summary, long-task observer, and DOM/source inspection", "evidence": "Trace and layout observers found zero long tasks and 0ms total blocking time; the page ships no JavaScript.", "artifacts": [ "evidence/trace-summary.json", "evidence/layout-mobile.json", "evidence/dom.json" ], "pathIds": [ "entry" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "pass", "confidence": "high", "method": "HAR summary confirmed against DOM and response headers", "evidence": "The HAR contains two requests, 1,572 transferred bytes, no redirects, errors, or render-blocking candidates. The document is delivered over HTTP/2 and HTTP/3 is advertised.", "artifacts": [ "evidence/network-summary.json", "evidence/http.txt" ], "pathIds": [ "entry" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "pass", "confidence": "high", "method": "DOM/CSS inventory and HAR summary", "evidence": "The rendered response contains no CSS or JavaScript, and the HAR shows no third-party or script payload.", "artifacts": [ "evidence/dom.json", "evidence/network-summary.json" ], "pathIds": [ "entry" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "There are no interactive elements, images, forms, canvas, or expressive media requiring names, roles, labels, alt text, or an accessibility alternative.", "reason": "There are no interactive elements, images, forms, canvas, or expressive media requiring names, roles, labels, alt text, or an accessibility alternative." }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "pass", "confidence": "high", "method": "Lighthouse axe contrast audit and forced-colors screenshot", "evidence": "Lighthouse reports the text contrast audit passing, and the forced-colors screenshot keeps the only text legible.", "artifacts": [ "evidence/lighthouse.json", "evidence/high-contrast.png" ], "pathIds": [ "entry" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Lighthouse accessibility audits and DOM focus/landmark probe", "evidence": "Lighthouse reports no main landmark; the DOM contains no headings, landmarks, links, controls, or focus target, so neither semantic structure nor a keyboard path exists.", "artifacts": [ "evidence/lighthouse.json", "evidence/probe.json" ], "pathIds": [ "entry" ], "findingIds": [ "F-006" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Visual screenshots and computed browser-default rendering", "evidence": "The only text renders unclipped at the browser default 16px with strong black-on-white contrast at desktop and mobile conditions.", "artifacts": [ "evidence/desktop.png", "evidence/mobile.png" ], "pathIds": [ "entry" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Mobile layout metrics and Lighthouse viewport insight", "evidence": "The page omits meta viewport. At 360x800 Chrome uses a 980px layout viewport and scales it to 0.367, rather than providing true mobile reflow.", "artifacts": [ "evidence/layout-mobile.json", "evidence/mobile.png", "evidence/lighthouse.json" ], "pathIds": [ "entry" ], "findingIds": [ "F-003" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Lighthouse errors-in-console audit", "evidence": "Lighthouse captured no browser console errors or uncaught exceptions.", "artifacts": [ "evidence/lighthouse.json" ], "pathIds": [ "entry" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "DOM compatibility-mode probe and Lighthouse best-practices audit", "evidence": "The root response has no doctype and runs in BackCompat/quirks mode. Lighthouse fails the doctype audit. There are no image assets to assess.", "artifacts": [ "evidence/probe.json", "evidence/lighthouse.json", "evidence/dom.json" ], "pathIds": [ "entry" ], "findingIds": [ "F-007" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "pass", "confidence": "high", "method": "Lighthouse browser best-practices diagnostics", "evidence": "Lighthouse found no deprecated APIs, BFCache blocker, invalid source maps, paste prevention, startup permission prompts, or inspector issues.", "artifacts": [ "evidence/lighthouse.json" ], "pathIds": [ "entry" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "issues", "confidence": "high", "method": "Discoverability primitive, raw/rendered DOM, and Lighthouse SEO", "evidence": "The rendered and raw HTML have no title or meta description; Lighthouse fails both metadata audits.", "artifacts": [ "evidence/discoverability.json", "evidence/lighthouse.json", "evidence/dom.json" ], "pathIds": [ "entry" ], "findingIds": [ "F-008" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "DOM link/viewport probe, robots fetch, and Lighthouse SEO", "evidence": "There is no viewport meta and no link of any kind. robots.txt is syntactically valid, but it contains only explanatory content signals and no navigable site structure.", "artifacts": [ "evidence/probe.json", "evidence/http.txt", "evidence/lighthouse.json" ], "pathIds": [ "entry" ], "findingIds": [ "F-008" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "HTTP root/sitemap probes and canonical DOM probe", "evidence": "The broken root content is served as HTTP 200 with no canonical; sitemap.xml returns 404. This creates a soft-error indexing signal.", "artifacts": [ "evidence/http.txt", "evidence/probe.json" ], "pathIds": [ "entry" ], "findingIds": [ "F-008" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Structured-data and social-metadata DOM probe", "evidence": "The public entry page has no JSON-LD, Open Graph tags, canonical identity, or visible entity content to produce an accurate share preview.", "artifacts": [ "evidence/probe.json", "evidence/dom.json" ], "pathIds": [ "entry" ], "findingIds": [ "F-008" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Security-header, cookie, and raw response-header audits", "evidence": "HTTPS is used, but CSP, HSTS, X-Content-Type-Options, and clickjacking protection are missing. SITE_TOTAL_ID is set for one year without Secure and with SameSite=None.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json", "evidence/http.txt" ], "pathIds": [ "entry" ], "findingIds": [ "F-009" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "pass", "confidence": "high", "method": "HAR third-party accounting and tracker/cookie audit", "evidence": "HAR and tracker probes found zero third-party requests and zero known trackers; the load transfers only 1.6KB. The opaque first-party cookie is covered separately under cookie security.", "artifacts": [ "evidence/network-summary.json", "evidence/trackers.json", "evidence/cookies.json" ], "pathIds": [ "entry" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "pass", "confidence": "high", "method": "Lighthouse startup-permission audits and auth-surface DOM inspection", "evidence": "Lighthouse observed no notification or geolocation prompt on load. Authentication is not present on this response, so passkeys are not relevant to the observed surface.", "artifacts": [ "evidence/lighthouse.json", "evidence/probe.json" ], "pathIds": [ "entry" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Security response-header audit", "evidence": "The response omits HSTS, frame-ancestors/X-Frame-Options, Referrer-Policy, Permissions-Policy, and CSP; no browser-enforced defensive policy was observed.", "artifacts": [ "evidence/headers.json", "evidence/http.txt" ], "pathIds": [ "entry" ], "findingIds": [ "F-009" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "issues", "confidence": "high", "method": "Raw-vs-rendered discoverability comparison and crawler/browser screenshot pair", "evidence": "The raw and rendered HTML agree, but both expose only “*** BAD PAGE ***”. No-JavaScript availability therefore preserves the failure, not the core content or primary flow.", "artifacts": [ "evidence/discoverability.json", "evidence/discoverability-rendered.png", "evidence/discoverability-crawler.png", "evidence/dom.json" ], "pathIds": [ "entry" ], "findingIds": [ "F-010" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "No menus, overlays, dynamic state, background work, or asynchronous dependencies are present to exercise.", "reason": "No menus, overlays, dynamic state, background work, or asynchronous dependencies are present to exercise." }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "The observed surface is a minimal public download/content endpoint rather than an app; no product evidence establishes installability as a requirement.", "reason": "The observed surface is a minimal public download/content endpoint rather than an app; no product evidence establishes installability as a requirement." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "issues", "confidence": "high", "method": "Root and 404 state comparison", "evidence": "The root itself renders an unexplained failure-like state with no retry or recovery while returning HTTP 200; a real 404 uses an unrelated generic Apache error page.", "artifacts": [ "evidence/desktop.png", "evidence/http.txt" ], "pathIds": [ "entry" ], "findingIds": [ "F-005" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "DOM language/direction probe and Lighthouse accessibility", "evidence": "The html element has no lang or dir attribute, and Lighthouse fails html-has-lang. There is no authored CSS or translation-ready structure.", "artifacts": [ "evidence/probe.json", "evidence/lighthouse.json" ], "pathIds": [ "entry" ], "findingIds": [ "F-011" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "No dates, numbers, currencies, durations, calendars, or locale-sensitive data are rendered.", "reason": "No dates, numbers, currencies, durations, calendars, or locale-sensitive data are rendered." }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "No time, event, recurrence, or scheduling data is present.", "reason": "No time, event, recurrence, or scheduling data is present." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "high", "method": "Visual and DOM dark-pattern inspection", "evidence": "The first viewport and DOM contain no consent, upsell, advertisement, subscription, cancellation, or disguised control; no deceptive interaction is present.", "artifacts": [ "evidence/desktop.png", "evidence/dom.json" ], "pathIds": [ "entry" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "No form or editable input is present to validate or submit.", "reason": "No form or editable input is present to validate or submit." }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "No input fields are present, so autocomplete/autofill assistance is not applicable.", "reason": "No input fields are present, so autocomplete/autofill assistance is not applicable." }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "No checkout, subscription, consent, authentication, or account-management surface is exposed.", "reason": "No checkout, subscription, consent, authentication, or account-management surface is exposed." }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "The page contains no images, decorative assets, font files, video, or audio to optimise.", "reason": "The page contains no images, decorative assets, font files, video, or audio to optimise." }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "pass", "confidence": "high", "method": "HAR, trace, and DOM resource inspection", "evidence": "The HAR contains only the document and favicon, the trace has zero long tasks, and the DOM ships no scripts or background work.", "artifacts": [ "evidence/network-summary.json", "evidence/trace-summary.json", "evidence/dom.json" ], "pathIds": [ "entry" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "pass", "confidence": "high", "method": "HAR, tracker, and media/image inventory", "evidence": "No third-party requests, media, custom fonts, animation, or autoplay were observed; total transfer was 1,572 bytes.", "artifacts": [ "evidence/network-summary.json", "evidence/trackers.json", "evidence/images.json" ], "pathIds": [ "entry" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "This emerging check is contextual. The broken public response exposes no usable capability to wrap as a WebMCP or agentic tool; core availability must be restored first.", "reason": "This emerging check is contextual. The broken public response exposes no usable capability to wrap as a WebMCP or agentic tool; core availability must be restored first." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "No summarisation or language-model use case is visible on the served error-like response; built-in AI would not improve this state.", "reason": "No summarisation or language-model use case is visible on the served error-like response; built-in AI would not improve this state." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "The page has no real interaction, route, modal, feed, or state change to repeat; fabricating an interaction would not test representative use.", "reason": "The page has no real interaction, route, modal, feed, or state change to repeat; fabricating an interaction would not test representative use." }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "high", "method": "Single-state heap summary", "evidence": "The heap summary reports 26,300 nodes and 746,452 bytes total self size for the browser page, proportionate to the minimal static response.", "artifacts": [ "evidence/heap.heapsnapshot" ], "pathIds": [ "entry" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "high", "method": "Heap summary and script/DOM inventory", "evidence": "The response has no JavaScript, controls, or runtime interaction; the heap summary shows a bounded static state and there is no mechanism adding listeners, timers, or detached DOM.", "artifacts": [ "evidence/heap.heapsnapshot", "evidence/dom.json" ], "pathIds": [ "entry" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F-002" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "pass" }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F-001" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F-001" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F-003" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F-001", "F-004", "F-005" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "pass" }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F-006", "F-003" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F-007" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F-008" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F-009" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F-010", "F-005" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F-011" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "pass" }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "pass" }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "This emerging check is contextual. The broken public response exposes no usable capability to wrap as a WebMCP or agentic tool; core availability must be restored first. No summarisation or language-model use case is visible on the served error-like response; built-in AI would not improve this state." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "entry", "description": "Public entry response, the only discovered content archetype. It was audited at desktop/mobile and preference conditions; no navigation or primary flow exists. robots.txt, sitemap.xml, and a representative missing route were checked as supporting global/error surfaces. No additional content templates could be covered because the entry DOM contains no links and sitemap.xml is absent.", "url": "https://download.moviespage.xyz/", "conditions": [ "desktop", "viewport: 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "forced-colors: active", "JavaScript disabled" ], "result": "issues" } ], "findings": [ { "id": "F-001", "severity": "critical", "principleId": "support-core-task-success", "principleCheckId": "clear-purpose-and-primary-action", "guidanceId": "scrollability-affordance-hints", "confidence": "high", "summary": "The public entry page exposes no product content or primary action.", "evidence": "Desktop, mobile, raw, and rendered captures show only “*** BAD PAGE ***”; the DOM contains no heading, link, button, or form.", "artifacts": [ "evidence/desktop.png", "evidence/mobile.png", "evidence/dom.json", "evidence/discoverability.json" ], "suggestedFix": "Restore the intended page response first. Return a semantic main landmark with a descriptive h1, concise purpose, and one clear primary action instead of the placeholder failure text.", "effort": "large", "pathId": "entry", "url": "https://download.moviespage.xyz/" }, { "id": "F-002", "severity": "low", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "confidence": "high", "summary": "The page ignores the user’s dark color-scheme preference.", "evidence": "The default and dark-emulated screenshots are equivalent; CSS inspection found no color-scheme declaration or prefers-color-scheme rule.", "artifacts": [ "evidence/desktop.png", "evidence/dark-reduced.png", "evidence/probe.json" ], "suggestedFix": "Declare color-scheme: light dark and use system colors or light-dark() for page surfaces and text once the intended UI is restored.", "effort": "small", "pathId": "entry", "url": "https://download.moviespage.xyz/" }, { "id": "F-003", "severity": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "css-layout", "confidence": "high", "summary": "Mobile browsers receive a desktop-width layout viewport.", "evidence": "At 360x800, layout metrics report a 980px viewport scaled to 0.367 because meta viewport is absent; Lighthouse flags viewport optimization.", "artifacts": [ "evidence/mobile.png", "evidence/layout-mobile.json", "evidence/lighthouse.json" ], "suggestedFix": "Add and build the restored content with intrinsic/fluid sizing that reflows at narrow widths.", "effort": "trivial", "pathId": "entry", "url": "https://download.moviespage.xyz/" }, { "id": "F-004", "severity": "critical", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "forms", "confidence": "high", "summary": "No primary download or navigation flow can be started.", "evidence": "The rendered DOM has zero links, buttons, forms, or other focusable controls.", "artifacts": [ "evidence/dom.json", "evidence/probe.json" ], "suggestedFix": "Restore the intended end-to-end user journey with a real href or semantic control for the primary action, predictable steps, and no dead ends.", "effort": "large", "pathId": "entry", "url": "https://download.moviespage.xyz/" }, { "id": "F-005", "severity": "high", "principleId": "support-core-task-success", "principleCheckId": "clear-system-state-and-recovery", "guidanceId": "accessible-error-announcement", "confidence": "high", "summary": "Failure states are unexplained and unrecoverable.", "evidence": "The root returns HTTP 200 with “*** BAD PAGE ***” and no action; unknown paths return a generic Apache 404 with no route back.", "artifacts": [ "evidence/desktop.png", "evidence/http.txt" ], "suggestedFix": "Return an appropriate error status for failures and render an accessible error message with explanation, retry, home, and support/recovery actions.", "effort": "medium", "pathId": "entry", "url": "https://download.moviespage.xyz/" }, { "id": "F-006", "severity": "high", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "confidence": "high", "summary": "The document has no semantic structure or keyboard path.", "evidence": "Lighthouse reports no main landmark; the DOM probe finds no headings, landmarks, links, controls, or focusable elements.", "artifacts": [ "evidence/lighthouse.json", "evidence/probe.json" ], "suggestedFix": "Structure the restored page with header/nav/main/footer landmarks, a logical heading hierarchy, and semantic keyboard-focusable actions with visible focus.", "effort": "medium", "pathId": "entry", "url": "https://download.moviespage.xyz/" }, { "id": "F-007", "severity": "medium", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "html", "confidence": "high", "summary": "The entry document omits a doctype and renders in quirks mode.", "evidence": "DOM reports doctype null and compatMode BackCompat; Lighthouse fails its doctype audit.", "artifacts": [ "evidence/probe.json", "evidence/lighthouse.json" ], "suggestedFix": "Start the response with and retain an early UTF-8 charset declaration in a valid document head.", "effort": "trivial", "pathId": "entry", "url": "https://download.moviespage.xyz/" }, { "id": "F-008", "severity": "high", "principleId": "be-discoverable", "principleCheckId": "title-and-description", "guidanceId": "html", "confidence": "high", "summary": "The public endpoint provides none of the basic discovery or sharing signals.", "evidence": "There is no title, description, viewport, canonical, link, JSON-LD, or Open Graph metadata; sitemap.xml is 404 and the broken root returns 200.", "artifacts": [ "evidence/discoverability.json", "evidence/lighthouse.json", "evidence/probe.json", "evidence/http.txt" ], "suggestedFix": "After restoring content, add a unique title and description, canonical URL, crawlable descriptive links, accurate share/schema metadata, and a sitemap; return truthful HTTP statuses.", "effort": "medium", "pathId": "entry", "url": "https://download.moviespage.xyz/" }, { "id": "F-009", "severity": "high", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "confidence": "high", "summary": "Browser security headers are absent and the persistent cookie is not Secure.", "evidence": "Header audit finds no CSP, HSTS, nosniff, frame protection, Referrer-Policy, or Permissions-Policy. SITE_TOTAL_ID is one-year, SameSite=None, and lacks Secure.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json", "evidence/http.txt" ], "suggestedFix": "Set HSTS, a restrictive CSP including frame-ancestors, nosniff, Referrer-Policy, and a least-privilege Permissions-Policy. Mark the cookie Secure and choose Lax/Strict unless cross-site use is required.", "effort": "small", "pathId": "entry", "url": "https://download.moviespage.xyz/" }, { "id": "F-010", "severity": "high", "principleId": "be-resilient", "principleCheckId": "progressive-enhancement", "guidanceId": "html", "confidence": "high", "summary": "The server-rendered baseline preserves only the broken state.", "evidence": "Raw HTML and JavaScript-enabled rendering both contain only “*** BAD PAGE ***”; crawler and browser screenshots show the same unusable result.", "artifacts": [ "evidence/discoverability.json", "evidence/discoverability-rendered.png", "evidence/discoverability-crawler.png", "evidence/dom.json" ], "suggestedFix": "Serve the core page identity, content, navigation, and primary link/action in semantic HTML, then layer JavaScript enhancements on top.", "effort": "large", "pathId": "entry", "url": "https://download.moviespage.xyz/" }, { "id": "F-011", "severity": "medium", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "translator", "confidence": "high", "summary": "The document language and direction are undeclared.", "evidence": "The html element has neither lang nor dir; Lighthouse fails html-has-lang.", "artifacts": [ "evidence/probe.json", "evidence/lighthouse.json" ], "suggestedFix": "Set an accurate html lang value and use dir where needed; build restored layouts with logical properties and translation-ready markup.", "effort": "trivial", "pathId": "entry", "url": "https://download.moviespage.xyz/" } ], "taskList": [ { "id": "T-001", "title": "Restore the intended semantic page and primary flow", "priority": 1, "findingIds": [ "F-001", "F-004", "F-006", "F-010" ], "guidanceId": "html", "status": "open" }, { "id": "T-002", "title": "Ship truthful, actionable root and error responses", "priority": 2, "findingIds": [ "F-005" ], "guidanceId": "accessible-error-announcement", "status": "open" }, { "id": "T-003", "title": "Add discovery, share, and indexing metadata", "priority": 3, "findingIds": [ "F-008" ], "guidanceId": "html", "status": "open" }, { "id": "T-004", "title": "Set defensive security headers and secure cookie attributes", "priority": 4, "findingIds": [ "F-009" ], "guidanceId": "security", "status": "open" }, { "id": "T-005", "title": "Establish a standards-mode responsive document shell", "priority": 5, "findingIds": [ "F-003", "F-007", "F-011" ], "guidanceId": "html", "status": "open" }, { "id": "T-006", "title": "Honor the system color scheme in the restored UI", "priority": 6, "findingIds": [ "F-002" ], "guidanceId": "dark-mode", "status": "open" } ], "budget": { "wallClockSeconds": 240, "pathCount": 1, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-19T05-25-02-208Z" }