{ "url": "https://www.mediafire.com", "auditedAt": "2026-07-19T19:25:06.002Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete public-site audit across five representative paths. Authenticated file management, destructive upload completion, payment submission, and account creation were intentionally not covered.", "page": { "appType": "mpa", "framework": "Legacy server-rendered jQuery application", "notes": "Public MPA with server-rendered content, legacy jQuery, app-like authenticated service, and broad third-party analytics." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "trace", "har", "discoverability", "headers", "cookies", "trackers", "secrets", "images", "heap-summary", "lighthouse/axe-core", "HTTP headers" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "other", "path": "evidence/404-headers.txt", "caption": "404 headers", "findingIds": [ "F11" ] }, { "type": "other", "path": "evidence/404-probe.json", "caption": "404 probe", "findingIds": [ "F11", "F17" ] }, { "type": "screenshot", "path": "evidence/404.png", "caption": "404", "findingIds": [ "F11" ] }, { "type": "screenshot", "path": "evidence/about-desktop.png", "caption": "about desktop", "findingIds": [] }, { "type": "layout", "path": "evidence/about-layout.json", "caption": "about layout", "findingIds": [ "F07" ] }, { "type": "screenshot", "path": "evidence/about-mobile.png", "caption": "about mobile", "findingIds": [] }, { "type": "other", "path": "evidence/about-probe.json", "caption": "about probe", "findingIds": [ "F17" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "cookies", "findingIds": [ "F20" ] }, { "type": "other", "path": "evidence/crawl-recon.json", "caption": "crawl recon", "findingIds": [ "F18" ] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "discoverability crawler", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "discoverability rendered", "findingIds": [] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "discoverability", "findingIds": [] }, { "type": "other", "path": "evidence/headers.json", "caption": "headers", "findingIds": [ "F20" ] }, { "type": "heap", "path": "evidence/heap-after-help.json", "caption": "heap after help", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-baseline.json", "caption": "heap baseline", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-contrast.png", "caption": "home contrast", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "home dark", "findingIds": [ "F01" ] }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "home desktop", "findingIds": [ "F06", "F10", "F21", "F26" ] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "home dom", "findingIds": [ "F05", "F10" ] }, { "type": "other", "path": "evidence/home-headers.txt", "caption": "home headers", "findingIds": [] }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "home mobile layout", "findingIds": [ "F04" ] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile", "findingIds": [] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "home summary", "findingIds": [ "F13", "F14", "F21", "F28" ] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "home trace summary", "findingIds": [ "F12" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "home trace", "findingIds": [] }, { "type": "har", "path": "evidence/home.har", "caption": "home", "findingIds": [ "F13" ] }, { "type": "other", "path": "evidence/images.json", "caption": "images", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse-selected.json", "caption": "lighthouse selected", "findingIds": [ "F14", "F16" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-summary.json", "caption": "lighthouse summary", "findingIds": [ "F12", "F15" ] }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "lighthouse", "findingIds": [] }, { "type": "screenshot", "path": "evidence/login-desktop.png", "caption": "login desktop", "findingIds": [ "F22" ] }, { "type": "other", "path": "evidence/login-invalid-probe.json", "caption": "login invalid probe", "findingIds": [] }, { "type": "layout", "path": "evidence/login-layout.json", "caption": "login layout", "findingIds": [] }, { "type": "screenshot", "path": "evidence/login-mobile.png", "caption": "login mobile", "findingIds": [ "F06" ] }, { "type": "other", "path": "evidence/login-probe.json", "caption": "login probe", "findingIds": [ "F22", "F27" ] }, { "type": "other", "path": "evidence/platform-probe.json", "caption": "platform probe", "findingIds": [ "F03", "F04", "F05", "F08", "F09", "F13", "F15", "F18", "F19", "F23", "F24" ] }, { "type": "other", "path": "evidence/preferences-probe.json", "caption": "preferences probe", "findingIds": [ "F01", "F02" ] }, { "type": "screenshot", "path": "evidence/pricing-desktop.png", "caption": "pricing desktop", "findingIds": [] }, { "type": "layout", "path": "evidence/pricing-layout.json", "caption": "pricing layout", "findingIds": [ "F07" ] }, { "type": "screenshot", "path": "evidence/pricing-mobile.png", "caption": "pricing mobile", "findingIds": [ "F06", "F25" ] }, { "type": "other", "path": "evidence/pricing-probe.json", "caption": "pricing probe", "findingIds": [ "F24", "F25" ] }, { "type": "other", "path": "evidence/recon.json", "caption": "recon", "findingIds": [ "F19" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "secrets", "findingIds": [] }, { "type": "other", "path": "evidence/trackers.json", "caption": "trackers", "findingIds": [ "F21", "F26", "F28" ] }, { "type": "other", "path": "evidence/upload-flow-probe.json", "caption": "upload flow probe", "findingIds": [ "F10" ] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "Under emulated prefers-color-scheme: dark, the body remained rgb(255,255,255), color-scheme computed to normal, and the dark screenshot was visually identical to light.", "findingIds": [ "F01" ], "artifacts": [ "evidence/home-dark.png", "evidence/preferences-probe.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "With prefers-reduced-motion: reduce active, getAnimations() still reported the 4,000 ms buttonPulse animation running.", "findingIds": [ "F02" ], "artifacts": [ "evidence/preferences-probe.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Representative-path visual/DOM/tool evidence review.", "evidence": "The prefers-contrast screenshot retained visible text and controls, and Lighthouse color-contrast passed.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-contrast.png", "evidence/lighthouse-selected.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "CSS/platform inspection found no view-transition rules while primary navigation uses ordinary cross-document links.", "findingIds": [ "F03" ], "artifacts": [ "evidence/platform-probe.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Recon and representative-path DOM/interaction inspection.", "evidence": "No scroll-linked animation is present, so there is no implementation to judge.", "reason": "No scroll-linked animation is present, so there is no implementation to judge." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "not-applicable", "confidence": "high", "method": "Recon and representative-path DOM/interaction inspection.", "evidence": "No gesture-driven carousel, swipe, pull, or snap interaction is present on representative public paths.", "reason": "No gesture-driven carousel, swipe, pull, or snap interaction is present on representative public paths." }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "The mobile landing page is 11,442 px tall, but CSS inspection found no scroll-state, progress, or sticky position feedback.", "findingIds": [ "F04" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/platform-probe.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "Recon and representative-path DOM/interaction inspection.", "evidence": "No tooltip or edge-positioned anchored popover is exposed on the representative public paths.", "reason": "No tooltip or edge-positioned anchored popover is exposed on the representative public paths." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "Representative-path visual/DOM/tool evidence review.", "evidence": "Headings, direct CTA labels, and page-specific content visibly orient users on the tested paths.", "pathIds": [ "home" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "Desktop and mobile screenshots show a fixed consent banner covering the lower 90-190 px, including pricing CTA content and login secondary actions.", "findingIds": [ "F06" ], "artifacts": [ "evidence/home-desktop.png", "evidence/pricing-mobile.png", "evidence/login-mobile.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "DOM inspection found two div role=dialog elements with manual onclick dismissal and iframe content; no dialog or popover primitives were used.", "findingIds": [ "F05" ], "artifacts": [ "evidence/home-dom.json", "evidence/platform-probe.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "Representative-path visual/DOM/tool evidence review.", "evidence": "Outside the consent overlay, screenshots show content-led layouts with restrained header chrome.", "pathIds": [ "home" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "At 360x800, pricing and about layout captures reported scrollWidth 370 vs clientWidth 360, a 10 px horizontal overflow.", "findingIds": [ "F07" ], "artifacts": [ "evidence/pricing-layout.json", "evidence/about-layout.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "Loaded CSS inspection found zero @container rules and zero logical sizing patterns despite cards and controls being reused across templates.", "findingIds": [ "F08" ], "artifacts": [ "evidence/platform-probe.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "Geometry probe found footer and policy links only 15-21 px tall, below a comfortable touch target, though keyboard focus on the main CTA was visible.", "findingIds": [ "F09" ], "artifacts": [ "evidence/platform-probe.json" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Representative-path visual/DOM/tool evidence review.", "evidence": "The first viewport clearly states file storage/sharing and exposes the Upload Files Now primary action.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "The CTA href says /upgrade/, its form action is /trial_account_signup.php, and activating it opens an invisible reCAPTCHA instead of a file picker or clearly explained signup step.", "findingIds": [ "F10" ], "artifacts": [ "evidence/home-dom.json", "evidence/upload-flow-probe.json", "evidence/home-desktop.png" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "A real HTTP 404 displays only a JavaScript history Back link and instructions to contact the administrator; there is no home, search, or relevant destination CTA, and the title remains generic.", "findingIds": [ "F11" ], "artifacts": [ "evidence/404.png", "evidence/404-probe.json", "evidence/404-headers.txt" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "Lighthouse measured LCP 12.2 s, TBT 350 ms, and time-to-interactive 12.4 s (performance 0.62); the independent trace measured FCP/LCP 2.82 s and one 120 ms task.", "findingIds": [ "F12" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-trace-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Representative-path visual/DOM/tool evidence review.", "evidence": "Lighthouse CLS was 0; mobile home CLS was 0 and login only 0.0077.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/login-layout.json", "evidence/lighthouse-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "Lighthouse measured LCP 12.2 s, TBT 350 ms, and time-to-interactive 12.4 s (performance 0.62); the independent trace measured FCP/LCP 2.82 s and one 120 ms task.", "findingIds": [ "F12" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-trace-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "HAR recorded 79 requests and 1.60 MB transferred, including 1.34 MB of script; parser-blocking jQuery 1.7.2 and reCAPTCHA plus three blocking stylesheets were confirmed in the DOM.", "findingIds": [ "F13" ], "artifacts": [ "evidence/home-summary.json", "evidence/home.har", "evidence/platform-probe.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "Lighthouse estimated 707 KiB unused JavaScript and 90 KiB unused CSS; the HAR shows repeated analytics/tag-manager payloads among the largest resources.", "findingIds": [ "F14" ], "artifacts": [ "evidence/lighthouse-selected.json", "evidence/home-summary.json" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "pass", "confidence": "high", "method": "Representative-path visual/DOM/tool evidence review.", "evidence": "Lighthouse accessibility scored 1.00; link names passed and all audited images had alt text.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/images.json" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "pass", "confidence": "high", "method": "Representative-path visual/DOM/tool evidence review.", "evidence": "Lighthouse color-contrast passed with no failing nodes.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-selected.json" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "DOM inspection found a visible logo H1 with no text plus the actual page H1; Lighthouse otherwise reported accessibility 1.00 and logical heading order.", "findingIds": [ "F15" ], "artifacts": [ "evidence/platform-probe.json", "evidence/lighthouse-summary.json" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Representative-path visual/DOM/tool evidence review.", "evidence": "Screenshots show readable line lengths, spacing, and unclipped primary copy across desktop/mobile paths.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/login-mobile.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "pass", "confidence": "high", "method": "Representative-path visual/DOM/tool evidence review.", "evidence": "Viewport allows scaling, key forms reflow at 360 px, and no required audio/video media is present.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/login-mobile.png" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Representative-path visual/DOM/tool evidence review.", "evidence": "Lighthouse errors-in-console audit passed with zero items.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-selected.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "pass", "confidence": "high", "method": "Representative-path visual/DOM/tool evidence review.", "evidence": "DOM has HTML doctype/UTF-8, Lighthouse image aspect-ratio passed, and the image probe found no missing alt text.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json", "evidence/images.json" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "Lighthouse found three deprecated API warnings, three BFCache failure reasons, two large scripts without valid source maps, and an inspector issue.", "findingIds": [ "F16" ], "artifacts": [ "evidence/lighthouse-selected.json" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "The About page and real 404 both report “File sharing and storage made simple”; About also reuses the generic homepage meta description.", "findingIds": [ "F17" ], "artifacts": [ "evidence/about-probe.json", "evidence/404-probe.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "high", "method": "Representative-path visual/DOM/tool evidence review.", "evidence": "Viewport and robots audits passed; raw content is crawlable, with one isolated javascript history link confined to the 404.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json", "evidence/crawl-recon.json" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "The homepage has no canonical link and /sitemap.xml returns HTTP 404, while robots.txt permits the public site.", "findingIds": [ "F18" ], "artifacts": [ "evidence/platform-probe.json", "evidence/crawl-recon.json" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "Open Graph metadata is present, but no JSON-LD or other schema.org data was found on the organization homepage.", "findingIds": [ "F19" ], "artifacts": [ "evidence/recon.json", "evidence/platform-probe.json" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "HTTPS is used, but HSTS is max-age=0, CSP only declares frame-ancestors, nosniff/referrer/permissions policies are absent, and 9 cookies were flagged insecure including ukey without Secure.", "findingIds": [ "F20" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "The tracker probe found 17 third-party origins and six known trackers; HAR attributed 61 requests and 1.56 MB to third parties while the consent banner was still visible.", "findingIds": [ "F21" ], "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json", "evidence/home-desktop.png" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "The login page exposes email/password and social providers but no passkey/WebAuthn flow; password autocomplete is explicitly off.", "findingIds": [ "F22" ], "artifacts": [ "evidence/login-probe.json", "evidence/login-desktop.png" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "HTTPS is used, but HSTS is max-age=0, CSP only declares frame-ancestors, nosniff/referrer/permissions policies are absent, and 9 cookies were flagged insecure including ukey without Secure.", "findingIds": [ "F20" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Representative-path visual/DOM/tool evidence review.", "evidence": "Discoverability measured 100% raw/rendered word coverage, title/H1/description present without JS, and no JS shell.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json", "evidence/discoverability-rendered.png", "evidence/discoverability-crawler.png" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "DOM inspection found two div role=dialog elements with manual onclick dismissal and iframe content; no dialog or popover primitives were used.", "findingIds": [ "F05" ], "artifacts": [ "evidence/home-dom.json", "evidence/platform-probe.json" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "No web app manifest was linked and no service worker controlled the page; the product promotes ongoing file access across devices.", "findingIds": [ "F23" ], "artifacts": [ "evidence/platform-probe.json" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "A real HTTP 404 displays only a JavaScript history Back link and instructions to contact the administrator; there is no home, search, or relevant destination CTA, and the title remains generic.", "findingIds": [ "F11" ], "artifacts": [ "evidence/404.png", "evidence/404-probe.json", "evidence/404-headers.txt" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "The site exposes a large language selector and lang=en-US, but loaded CSS used physical left/right properties and zero logical properties.", "findingIds": [ "F24" ], "artifacts": [ "evidence/pricing-probe.json", "evidence/platform-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "Pricing displays $5.83/month and $6.99 month-to-month while offering hundreds of languages, with no locale/currency alternative visible.", "findingIds": [ "F25" ], "artifacts": [ "evidence/pricing-probe.json", "evidence/pricing-mobile.png" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Recon and representative-path DOM/interaction inspection.", "evidence": "The representative public marketing, pricing, login, and information pages expose no dates, events, or time-zone-sensitive data.", "reason": "The representative public marketing, pricing, login, and information pages expose no dates, events, or time-zone-sensitive data." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "The banner says continued use means agreement, offers “I Accept” and a dismiss X but no reject/manage option, while tracker evidence confirms analytics already fires.", "findingIds": [ "F26" ], "artifacts": [ "evidence/home-desktop.png", "evidence/trackers.json" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "pass", "confidence": "high", "method": "Representative-path visual/DOM/tool evidence review.", "evidence": "Invalid login email invoked clear native browser validation before submission.", "pathIds": [ "home" ], "artifacts": [ "evidence/login-invalid-probe.json" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "The email field has no autocomplete token and the password field sets autocomplete=off, despite being a standard sign-in form.", "findingIds": [ "F27" ], "artifacts": [ "evidence/login-probe.json" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "pass", "confidence": "high", "method": "Representative-path visual/DOM/tool evidence review.", "evidence": "Pricing visibly states monthly/annual amounts, cancellation, and a money-back guarantee before purchase.", "pathIds": [ "home" ], "artifacts": [ "evidence/pricing-desktop.png", "evidence/pricing-probe.json" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "pass", "confidence": "high", "method": "Representative-path visual/DOM/tool evidence review.", "evidence": "Image transfer was only 85 KB; seven of eight img resources are SVG and all meaningful images have alt text.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json", "evidence/home-summary.json" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "Six tracker families execute on load; third-party transfers total 1.56 MB and include overlapping Google tags, Hotjar, Amplitude, DoubleClick and Cloudflare analytics.", "findingIds": [ "F28" ], "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Targeted screenshot, DOM/evaluate, layout, Lighthouse, HAR, or security primitive as cited.", "evidence": "Six tracker families execute on load; third-party transfers total 1.56 MB and include overlapping Google tags, Hotjar, Amplitude, DoubleClick and Cloudflare analytics.", "findingIds": [ "F28" ], "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Recon and representative-path DOM/interaction inspection.", "evidence": "No declared agent-facing capability exists on MediaFire itself; links to separate AI products do not make this site an agent-tool surface.", "reason": "No declared agent-facing capability exists on MediaFire itself; links to separate AI products do not make this site an agent-tool surface." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Recon and representative-path DOM/interaction inspection.", "evidence": "No summarisation or inference use case is presented on the representative MediaFire surfaces.", "reason": "No summarisation or inference use case is presented on the representative MediaFire surfaces." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "high", "method": "Representative-path visual/DOM/tool evidence review.", "evidence": "After 10 open/close help interactions, heap totals decreased from 29.94 MB/553,705 nodes to 29.72 MB/540,760 nodes.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-after-help.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "high", "method": "Representative-path visual/DOM/tool evidence review.", "evidence": "Heap snapshot was about 30 MB on the script-heavy landing page and remained bounded after interaction.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "high", "method": "Representative-path visual/DOM/tool evidence review.", "evidence": "The repeated help interaction produced no retained node/heap growth; totals decreased in the post snapshot.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-after-help.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01", "F02" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F04" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F06", "F05" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F07", "F08", "F09" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F10", "F11" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F12", "F13", "F14" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F15" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F16" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F17", "F18", "F19" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F20", "F21", "F22" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F05", "F23", "F11" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F24", "F25" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F26", "F27" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F28" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "All checks were judged not applicable to the observed public MediaFire surfaces." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Public landing page and primary upload entry point; represents marketing and first-use task discovery.", "url": "https://www.mediafire.com/", "conditions": [ "desktop", "360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "prefers-contrast: more", "keyboard focus", "no JavaScript crawler" ], "result": "issues" }, { "id": "pricing", "description": "Plan comparison and commercial decision journey.", "url": "https://www.mediafire.com/upgrade/", "conditions": [ "desktop", "360x800" ], "result": "issues" }, { "id": "login", "description": "Authentication form and input-assistance journey.", "url": "https://www.mediafire.com/login/", "conditions": [ "desktop", "360x800", "invalid email" ], "result": "issues" }, { "id": "about", "description": "Representative informational/content template.", "url": "https://www.mediafire.com/about/", "conditions": [ "desktop", "360x800" ], "result": "issues" }, { "id": "not-found", "description": "HTTP failure and recovery state.", "url": "https://www.mediafire.com/this-page-does-not-exist-web-uplift", "conditions": [ "desktop", "HTTP response inspection" ], "result": "issues" } ], "findings": [ { "id": "F01", "severity": "medium", "confidence": "high", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "web-quality", "summary": "Dark preference is ignored.", "evidence": "Under emulated prefers-color-scheme: dark, the body remained rgb(255,255,255), color-scheme computed to normal, and the dark screenshot was visually identical to light.", "suggestedFix": "Declare color-scheme and theme surfaces with prefers-color-scheme or light-dark().", "artifacts": [ "evidence/home-dark.png", "evidence/preferences-probe.json" ], "effort": "small", "pathId": "home", "url": "https://www.mediafire.com/" }, { "id": "F02", "severity": "medium", "confidence": "high", "principleId": "respect-user-preferences", "principleCheckId": "respects-reduced-motion", "guidanceId": "accessibility", "guidanceCategory": "web-quality", "summary": "Reduced-motion preference does not stop non-essential pulsing.", "evidence": "With prefers-reduced-motion: reduce active, getAnimations() still reported the 4,000 ms buttonPulse animation running.", "suggestedFix": "Disable non-essential animation inside @media (prefers-reduced-motion: reduce).", "artifacts": [ "evidence/preferences-probe.json" ], "effort": "small", "pathId": "home", "url": "https://www.mediafire.com/" }, { "id": "F03", "severity": "low", "confidence": "high", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "cross-document-transitions", "guidanceCategory": "web-quality", "summary": "Route changes use abrupt full-document swaps.", "evidence": "CSS/platform inspection found no view-transition rules while primary navigation uses ordinary cross-document links.", "suggestedFix": "Add same-origin cross-document View Transitions with a no-motion fallback.", "artifacts": [ "evidence/platform-probe.json" ], "effort": "medium", "pathId": "home", "url": "https://www.mediafire.com/" }, { "id": "F04", "severity": "low", "confidence": "high", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "scroll-progress-indicator", "guidanceCategory": "web-quality", "summary": "The very long landing page offers no position-aware navigation.", "evidence": "The mobile landing page is 11,442 px tall, but CSS inspection found no scroll-state, progress, or sticky position feedback.", "suggestedFix": "Add lightweight scroll-state-aware chrome or section progress cues for the long page.", "artifacts": [ "evidence/home-mobile-layout.json", "evidence/platform-probe.json" ], "effort": "medium", "pathId": "home", "url": "https://www.mediafire.com/" }, { "id": "F05", "severity": "medium", "confidence": "high", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "guidanceCategory": "web-quality", "summary": "Overlays are hand-built divs rather than platform primitives.", "evidence": "DOM inspection found two div role=dialog elements with manual onclick dismissal and iframe content; no dialog or popover primitives were used.", "suggestedFix": "Use dialog for modal flows and popover for transient UI, with declarative light dismiss and focus handling.", "artifacts": [ "evidence/home-dom.json", "evidence/platform-probe.json" ], "effort": "medium", "pathId": "home", "url": "https://www.mediafire.com/" }, { "id": "F06", "severity": "medium", "confidence": "high", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "light-dismiss-a-dialog", "guidanceCategory": "web-quality", "summary": "The cookie banner obscures primary content on every tested entry state.", "evidence": "Desktop and mobile screenshots show a fixed consent banner covering the lower 90-190 px, including pricing CTA content and login secondary actions.", "suggestedFix": "Use a compact, non-obscuring consent control with equivalent accept/reject choices.", "artifacts": [ "evidence/home-desktop.png", "evidence/pricing-mobile.png", "evidence/login-mobile.png" ], "effort": "small", "pathId": "home", "url": "https://www.mediafire.com/" }, { "id": "F07", "severity": "medium", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "fluid-scaling", "guidanceCategory": "web-quality", "summary": "Two representative templates overflow the mobile viewport.", "evidence": "At 360x800, pricing and about layout captures reported scrollWidth 370 vs clientWidth 360, a 10 px horizontal overflow.", "suggestedFix": "Remove the 370 px minimum/fixed width and use intrinsic fluid sizing.", "artifacts": [ "evidence/pricing-layout.json", "evidence/about-layout.json" ], "effort": "small", "pathId": "pricing", "url": "https://www.mediafire.com/upgrade/" }, { "id": "F08", "severity": "low", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "guidanceCategory": "web-quality", "summary": "Reusable components depend only on viewport-era CSS.", "evidence": "Loaded CSS inspection found zero @container rules and zero logical sizing patterns despite cards and controls being reused across templates.", "suggestedFix": "Adopt size container queries for reusable cards and navigation components.", "artifacts": [ "evidence/platform-probe.json" ], "effort": "medium", "pathId": "home", "url": "https://www.mediafire.com/" }, { "id": "F09", "severity": "low", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "guidanceCategory": "web-quality", "summary": "Several visible links have undersized touch boxes.", "evidence": "Geometry probe found footer and policy links only 15-21 px tall, below a comfortable touch target, though keyboard focus on the main CTA was visible.", "suggestedFix": "Increase hit areas to at least 24x24 CSS px, ideally 44x44 for primary touch controls.", "artifacts": [ "evidence/platform-probe.json" ], "effort": "small", "pathId": "home", "url": "https://www.mediafire.com/" }, { "id": "F10", "severity": "high", "confidence": "high", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "forms", "guidanceCategory": "web-quality", "summary": "The primary “Upload Files Now” action hides an account/captcha detour.", "evidence": "The CTA href says /upgrade/, its form action is /trial_account_signup.php, and activating it opens an invisible reCAPTCHA instead of a file picker or clearly explained signup step.", "suggestedFix": "Rename the action to set expectations or begin with a transparent signup step, then expose upload immediately after completion.", "artifacts": [ "evidence/home-dom.json", "evidence/upload-flow-probe.json", "evidence/home-desktop.png" ], "effort": "medium", "pathId": "home", "url": "https://www.mediafire.com/" }, { "id": "F11", "severity": "medium", "confidence": "high", "principleId": "support-core-task-success", "principleCheckId": "clear-system-state-and-recovery", "guidanceId": "persistent-toast-notifications", "guidanceCategory": "web-quality", "summary": "The 404 state provides weak recovery.", "evidence": "A real HTTP 404 displays only a JavaScript history Back link and instructions to contact the administrator; there is no home, search, or relevant destination CTA, and the title remains generic.", "suggestedFix": "Provide direct home/help/search links and a page-specific title while preserving the 404 status.", "artifacts": [ "evidence/404.png", "evidence/404-probe.json", "evidence/404-headers.txt" ], "effort": "small", "pathId": "not-found", "url": "https://www.mediafire.com/this-page-does-not-exist-web-uplift" }, { "id": "F12", "severity": "high", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "guidanceCategory": "web-quality", "summary": "Lab loading performance misses the LCP and responsiveness bar.", "evidence": "Lighthouse measured LCP 12.2 s, TBT 350 ms, and time-to-interactive 12.4 s (performance 0.62); the independent trace measured FCP/LCP 2.82 s and one 120 ms task.", "suggestedFix": "Prioritise the LCP resource and defer non-critical scripts and trackers.", "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-trace-summary.json" ], "effort": "large", "pathId": "home", "url": "https://www.mediafire.com/" }, { "id": "F13", "severity": "high", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-script-priority", "guidanceCategory": "web-quality", "summary": "Critical delivery is dominated by scripts and blocking legacy resources.", "evidence": "HAR recorded 79 requests and 1.60 MB transferred, including 1.34 MB of script; parser-blocking jQuery 1.7.2 and reCAPTCHA plus three blocking stylesheets were confirmed in the DOM.", "suggestedFix": "Load reCAPTCHA on intent, remove parser-blocking legacy jQuery, and defer or eliminate non-critical scripts/styles.", "artifacts": [ "evidence/home-summary.json", "evidence/home.har", "evidence/platform-probe.json" ], "effort": "large", "pathId": "home", "url": "https://www.mediafire.com/" }, { "id": "F14", "severity": "medium", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "web-quality", "summary": "The page ships substantial unused code.", "evidence": "Lighthouse estimated 707 KiB unused JavaScript and 90 KiB unused CSS; the HAR shows repeated analytics/tag-manager payloads among the largest resources.", "suggestedFix": "Split page-specific bundles and remove duplicate analytics and unused legacy CSS/JS.", "artifacts": [ "evidence/lighthouse-selected.json", "evidence/home-summary.json" ], "effort": "medium", "pathId": "home", "url": "https://www.mediafire.com/" }, { "id": "F15", "severity": "low", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "guidanceCategory": "web-quality", "summary": "Heading semantics include an empty visible H1 alongside the content H1.", "evidence": "DOM inspection found a visible logo H1 with no text plus the actual page H1; Lighthouse otherwise reported accessibility 1.00 and logical heading order.", "suggestedFix": "Use a non-heading logo wrapper and retain one descriptive H1 per page.", "artifacts": [ "evidence/platform-probe.json", "evidence/lighthouse-summary.json" ], "effort": "small", "pathId": "home", "url": "https://www.mediafire.com/" }, { "id": "F16", "severity": "medium", "confidence": "high", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "guidanceId": "html", "guidanceCategory": "web-quality", "summary": "Platform hygiene is dated and blocks browser optimisations.", "evidence": "Lighthouse found three deprecated API warnings, three BFCache failure reasons, two large scripts without valid source maps, and an inspector issue.", "suggestedFix": "Remove deprecated APIs/listeners that block BFCache and publish valid source maps for maintained first-party bundles.", "artifacts": [ "evidence/lighthouse-selected.json" ], "effort": "medium", "pathId": "home", "url": "https://www.mediafire.com/" }, { "id": "F17", "severity": "medium", "confidence": "high", "principleId": "be-discoverable", "principleCheckId": "title-and-description", "guidanceId": "html", "guidanceCategory": "web-quality", "summary": "Distinct public pages reuse the homepage title and description.", "evidence": "The About page and real 404 both report “File sharing and storage made simple”; About also reuses the generic homepage meta description.", "suggestedFix": "Give every public template a unique descriptive title and matching description.", "artifacts": [ "evidence/about-probe.json", "evidence/404-probe.json" ], "effort": "small", "pathId": "about", "url": "https://www.mediafire.com/about/" }, { "id": "F18", "severity": "medium", "confidence": "high", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "guidanceCategory": "web-quality", "summary": "Canonical and sitemap signals are incomplete.", "evidence": "The homepage has no canonical link and /sitemap.xml returns HTTP 404, while robots.txt permits the public site.", "suggestedFix": "Publish a sitemap and self-referencing canonical URLs for indexable templates.", "artifacts": [ "evidence/platform-probe.json", "evidence/crawl-recon.json" ], "effort": "small", "pathId": "home", "url": "https://www.mediafire.com/" }, { "id": "F19", "severity": "low", "confidence": "high", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "html", "guidanceCategory": "web-quality", "summary": "Organization metadata is shareable but not structured.", "evidence": "Open Graph metadata is present, but no JSON-LD or other schema.org data was found on the organization homepage.", "suggestedFix": "Add accurate Organization/WebSite JSON-LD matching visible content.", "artifacts": [ "evidence/recon.json", "evidence/platform-probe.json" ], "effort": "small", "pathId": "home", "url": "https://www.mediafire.com/" }, { "id": "F20", "severity": "high", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "web-quality", "summary": "Transport hardening and cookie flags are materially weak.", "evidence": "HTTPS is used, but HSTS is max-age=0, CSP only declares frame-ancestors, nosniff/referrer/permissions policies are absent, and 9 cookies were flagged insecure including ukey without Secure.", "suggestedFix": "Enable effective HSTS, deploy a restrictive CSP and baseline security headers, and mark all HTTPS cookies Secure with appropriate SameSite.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "effort": "medium", "pathId": "home", "url": "https://www.mediafire.com/" }, { "id": "F21", "severity": "high", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "web-quality", "summary": "Tracking starts before meaningful consent and dominates transfer cost.", "evidence": "The tracker probe found 17 third-party origins and six known trackers; HAR attributed 61 requests and 1.56 MB to third parties while the consent banner was still visible.", "suggestedFix": "Gate non-essential analytics behind explicit consent and consolidate/remove overlapping trackers.", "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json", "evidence/home-desktop.png" ], "effort": "medium", "pathId": "home", "url": "https://www.mediafire.com/" }, { "id": "F22", "severity": "medium", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkeys", "guidanceCategory": "web-quality", "summary": "Authentication is password/social-only and disables password-manager hints.", "evidence": "The login page exposes email/password and social providers but no passkey/WebAuthn flow; password autocomplete is explicitly off.", "suggestedFix": "Offer passkeys and use autocomplete=current-password/username while keeping social options.", "artifacts": [ "evidence/login-probe.json", "evidence/login-desktop.png" ], "effort": "medium", "pathId": "login", "url": "https://www.mediafire.com/login/" }, { "id": "F23", "severity": "medium", "confidence": "high", "principleId": "be-resilient", "principleCheckId": "offline-and-installable", "guidanceId": "offline fallback service worker web app manifest installable pwa", "guidanceCategory": "web-quality", "summary": "The app-like storage service has no install/offline surface.", "evidence": "No web app manifest was linked and no service worker controlled the page; the product promotes ongoing file access across devices.", "suggestedFix": "Add a manifest and service worker with an honest offline shell/fallback for previously available content.", "artifacts": [ "evidence/platform-probe.json" ], "effort": "large", "pathId": "home", "url": "https://www.mediafire.com/" }, { "id": "F24", "severity": "medium", "confidence": "high", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "translator", "guidanceCategory": "web-quality", "summary": "The translated surface is not bidirectionally robust.", "evidence": "The site exposes a large language selector and lang=en-US, but loaded CSS used physical left/right properties and zero logical properties.", "suggestedFix": "Use CSS logical properties and verify translated/RTL layouts rather than relying solely on machine translation.", "artifacts": [ "evidence/pricing-probe.json", "evidence/platform-probe.json" ], "effort": "medium", "pathId": "pricing", "url": "https://www.mediafire.com/upgrade/" }, { "id": "F25", "severity": "medium", "confidence": "high", "principleId": "be-internationalised", "principleCheckId": "locale-aware-data", "guidanceId": "support-global-calendar-systems", "guidanceCategory": "web-quality", "summary": "Commercial data is hard-coded to US dollars.", "evidence": "Pricing displays $5.83/month and $6.99 month-to-month while offering hundreds of languages, with no locale/currency alternative visible.", "suggestedFix": "Format currency and recurring price terms from locale-aware structured data using Intl.NumberFormat.", "artifacts": [ "evidence/pricing-probe.json", "evidence/pricing-mobile.png" ], "effort": "medium", "pathId": "pricing", "url": "https://www.mediafire.com/upgrade/" }, { "id": "F26", "severity": "high", "confidence": "high", "principleId": "be-trustworthy", "principleCheckId": "no-dark-patterns", "guidanceId": "privacy", "guidanceCategory": "web-quality", "summary": "Consent uses implied acceptance with no equivalent reject choice.", "evidence": "The banner says continued use means agreement, offers “I Accept” and a dismiss X but no reject/manage option, while tracker evidence confirms analytics already fires.", "suggestedFix": "Use explicit opt-in for non-essential tracking with equally prominent accept and reject/manage choices.", "artifacts": [ "evidence/home-desktop.png", "evidence/trackers.json" ], "effort": "small", "pathId": "home", "url": "https://www.mediafire.com/" }, { "id": "F27", "severity": "medium", "confidence": "high", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-sign-in-form", "guidanceCategory": "web-quality", "summary": "Sign-in obstructs autofill.", "evidence": "The email field has no autocomplete token and the password field sets autocomplete=off, despite being a standard sign-in form.", "suggestedFix": "Set autocomplete=username and autocomplete=current-password; do not suppress password managers.", "artifacts": [ "evidence/login-probe.json" ], "effort": "trivial", "pathId": "login", "url": "https://www.mediafire.com/login/" }, { "id": "F28", "severity": "medium", "confidence": "high", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "guidanceId": "deprioritize-background-fetches", "guidanceCategory": "web-quality", "summary": "Background analytics work is disproportionate to the landing page.", "evidence": "Six tracker families execute on load; third-party transfers total 1.56 MB and include overlapping Google tags, Hotjar, Amplitude, DoubleClick and Cloudflare analytics.", "suggestedFix": "Remove duplicate telemetry, batch what remains, and load it only after consent/idle.", "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json" ], "effort": "medium", "pathId": "home", "url": "https://www.mediafire.com/" } ], "taskList": [ { "id": "T01", "title": "Gate non-essential analytics behind explicit consent and consolidate/remove overlapping trackers.", "priority": 1, "findingIds": [ "F21" ], "guidanceId": "privacy", "status": "open" }, { "id": "T02", "title": "Enable effective HSTS, deploy a restrictive CSP and baseline security headers, and mark all HTTPS cookies Secure with appropriate SameSite.", "priority": 2, "findingIds": [ "F20" ], "guidanceId": "security", "status": "open" }, { "id": "T03", "title": "Prioritise the LCP resource and defer non-critical scripts and trackers.", "priority": 3, "findingIds": [ "F12" ], "guidanceId": "performance", "status": "open" }, { "id": "T04", "title": "Load reCAPTCHA on intent, remove parser-blocking legacy jQuery, and defer or eliminate non-critical scripts/styles.", "priority": 4, "findingIds": [ "F13" ], "guidanceId": "optimize-script-priority", "status": "open" }, { "id": "T05", "title": "Use explicit opt-in for non-essential tracking with equally prominent accept and reject/manage choices.", "priority": 5, "findingIds": [ "F26" ], "guidanceId": "privacy", "status": "open" }, { "id": "T06", "title": "Rename the action to set expectations or begin with a transparent signup step, then expose upload immediately after completion.", "priority": 6, "findingIds": [ "F10" ], "guidanceId": "forms", "status": "open" }, { "id": "T07", "title": "Split page-specific bundles and remove duplicate analytics and unused legacy CSS/JS.", "priority": 7, "findingIds": [ "F14" ], "guidanceId": "identify-heavy-scripts", "status": "open" }, { "id": "T08", "title": "Offer passkeys and use autocomplete=current-password/username while keeping social options.", "priority": 8, "findingIds": [ "F22" ], "guidanceId": "passkeys", "status": "open" }, { "id": "T09", "title": "Set autocomplete=username and autocomplete=current-password; do not suppress password managers.", "priority": 9, "findingIds": [ "F27" ], "guidanceId": "autofill-sign-in-form", "status": "open" }, { "id": "T10", "title": "Provide direct home/help/search links and a page-specific title while preserving the 404 status.", "priority": 10, "findingIds": [ "F11" ], "guidanceId": "persistent-toast-notifications", "status": "open" }, { "id": "T11", "title": "Remove the 370 px minimum/fixed width and use intrinsic fluid sizing.", "priority": 11, "findingIds": [ "F07" ], "guidanceId": "fluid-scaling", "status": "open" }, { "id": "T12", "title": "Add a manifest and service worker with an honest offline shell/fallback for previously available content.", "priority": 12, "findingIds": [ "F23" ], "guidanceId": "offline fallback service worker web app manifest installable pwa", "status": "open" }, { "id": "T13", "title": "Use CSS logical properties and verify translated/RTL layouts rather than relying solely on machine translation.", "priority": 13, "findingIds": [ "F24" ], "guidanceId": "translator", "status": "open" }, { "id": "T14", "title": "Format currency and recurring price terms from locale-aware structured data using Intl.NumberFormat.", "priority": 14, "findingIds": [ "F25" ], "guidanceId": "support-global-calendar-systems", "status": "open" }, { "id": "T15", "title": "Use dialog for modal flows and popover for transient UI, with declarative light dismiss and focus handling.", "priority": 15, "findingIds": [ "F05" ], "guidanceId": "declarative-dialog-popover-control", "status": "open" }, { "id": "T16", "title": "Use a compact, non-obscuring consent control with equivalent accept/reject choices.", "priority": 16, "findingIds": [ "F06" ], "guidanceId": "light-dismiss-a-dialog", "status": "open" }, { "id": "T17", "title": "Remove duplicate telemetry, batch what remains, and load it only after consent/idle.", "priority": 17, "findingIds": [ "F28" ], "guidanceId": "deprioritize-background-fetches", "status": "open" }, { "id": "T18", "title": "Give every public template a unique descriptive title and matching description.", "priority": 18, "findingIds": [ "F17" ], "guidanceId": "html", "status": "open" }, { "id": "T19", "title": "Publish a sitemap and self-referencing canonical URLs for indexable templates.", "priority": 19, "findingIds": [ "F18" ], "guidanceId": "html", "status": "open" }, { "id": "T20", "title": "Declare color-scheme and theme surfaces with prefers-color-scheme or light-dark().", "priority": 20, "findingIds": [ "F01" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T21", "title": "Disable non-essential animation inside @media (prefers-reduced-motion: reduce).", "priority": 21, "findingIds": [ "F02" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T22", "title": "Remove deprecated APIs/listeners that block BFCache and publish valid source maps for maintained first-party bundles.", "priority": 22, "findingIds": [ "F16" ], "guidanceId": "html", "status": "open" }, { "id": "T23", "title": "Use a non-heading logo wrapper and retain one descriptive H1 per page.", "priority": 23, "findingIds": [ "F15" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T24", "title": "Adopt size container queries for reusable cards and navigation components.", "priority": 24, "findingIds": [ "F08" ], "guidanceId": "size-aware-styling", "status": "open" }, { "id": "T25", "title": "Increase hit areas to at least 24x24 CSS px, ideally 44x44 for primary touch controls.", "priority": 25, "findingIds": [ "F09" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T26", "title": "Add same-origin cross-document View Transitions with a no-motion fallback.", "priority": 26, "findingIds": [ "F03" ], "guidanceId": "cross-document-transitions", "status": "open" }, { "id": "T27", "title": "Add lightweight scroll-state-aware chrome or section progress cues for the long page.", "priority": 27, "findingIds": [ "F04" ], "guidanceId": "scroll-progress-indicator", "status": "open" }, { "id": "T28", "title": "Add accurate Organization/WebSite JSON-LD matching visible content.", "priority": 28, "findingIds": [ "F19" ], "guidanceId": "html", "status": "open" } ], "budget": { "wallClockSeconds": 900, "pathCount": 5, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-19T19-25-06-002Z" }