{ "url": "https://cdn.33apk.com", "auditedAt": "2026-07-19T23:03:40.000Z", "mode": "report", "status": "completed", "statusDetail": "Atomic coverage complete. The host is a genuine single-page static infrastructure disclaimer; external surveza.ai legal documents were not treated as templates of cdn.33apk.com.", "page": { "appType": "mpa", "framework": "none detected", "notes": "Static, server-rendered disclaimer/abuse-contact page. robots.txt and sitemap.xml return 404; all navigable HTTP links leave the audited host, so homepage-only coverage is explicit and representative." }, "evidenceUsed": [ "screenshot", "dom", "layout-metrics", "evaluate-probe", "trace", "har", "discoverability", "secrets", "headers", "cookies", "trackers", "images", "heap-summary", "lighthouse", "axe-core", "HTTP recon", "Modern Web Guidance 0.0.172" ], "guidanceConsulted": [ "dark-mode", "accessibility", "css-layout", "forms", "performance", "security", "html", "fluid-scaling", "size-aware-styling", "light-dismiss-a-dialog", "declarative-dialog-popover-control", "coordinate-global-events", "validate-input-after-interaction", "efficient-background-processing", "webmcp", "language-model", "manage-recurring-intervals" ], "artifacts": [ { "type": "screenshot", "path": "evidence/desktop.png", "caption": "Desktop first viewport", "condition": "1365x768", "findingIds": [ "F07" ] }, { "type": "screenshot", "path": "evidence/mobile.png", "caption": "Mobile first viewport and reflow", "condition": "360x800" }, { "type": "screenshot", "path": "evidence/dark.png", "caption": "Dark-preference capture", "condition": "prefers-color-scheme: dark", "findingIds": [ "F01" ] }, { "type": "screenshot", "path": "evidence/contrast.png", "caption": "High-contrast-preference capture", "condition": "prefers-contrast: more", "findingIds": [ "F18" ] }, { "type": "dom", "path": "evidence/dom.json", "caption": "Rendered DOM and CSS", "findingIds": [ "F02", "F04", "F15" ] }, { "type": "layout", "path": "evidence/layout-desktop.json", "caption": "Desktop layout metrics and shift observer" }, { "type": "layout", "path": "evidence/layout-mobile.json", "caption": "Mobile layout, overflow, and shift observer", "findingIds": [ "F09" ] }, { "type": "trace", "path": "evidence/trace.json", "caption": "DevTools performance trace" }, { "type": "trace-summary", "path": "evidence/trace-summary.json", "caption": "Compact trace timings and main-thread summary", "findingIds": [ "F03" ] }, { "type": "har", "path": "evidence/network.har", "caption": "HAR 1.2 network capture", "findingIds": [ "F04" ] }, { "type": "har-summary", "path": "evidence/network-summary.json", "caption": "Compact request, third-party, weight, and hygiene summary", "findingIds": [ "F04", "F05", "F15", "F17" ] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "Raw-HTML versus rendered-content comparison", "findingIds": [ "F11" ] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "Rendered browser view" }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "Crawler/no-JavaScript view" }, { "type": "other", "path": "evidence/secrets.json", "caption": "Client-side secret scan" }, { "type": "other", "path": "evidence/headers.json", "caption": "Security response header audit", "findingIds": [ "F14" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "Cookie security/privacy audit", "findingIds": [ "F15" ] }, { "type": "other", "path": "evidence/trackers.json", "caption": "Third-party origin and tracker inventory", "findingIds": [ "F15", "F17" ] }, { "type": "other", "path": "evidence/images.json", "caption": "Rendered image audit", "findingIds": [ "F06", "F09" ] }, { "type": "heap", "path": "evidence/heap.json", "caption": "Readable V8 heap summary" }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "Lighthouse audit JSON", "findingIds": [ "F03", "F10" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-summary.json", "caption": "Compact Lighthouse scores and failures", "findingIds": [ "F03", "F04", "F05", "F09", "F10", "F11" ] }, { "type": "other", "path": "evidence/probe.json", "caption": "Custom metadata, focus, media, feature, and interaction probe", "findingIds": [ "F01", "F02", "F08", "F11", "F12", "F13", "F18" ] }, { "type": "other", "path": "evidence/axe.json", "caption": "axe-core accessibility results", "findingIds": [ "F06", "F07", "F08", "F18" ] }, { "type": "other", "path": "evidence/recon.txt", "caption": "HTTP headers, robots.txt, and sitemap.xml recon", "findingIds": [ "F12", "F14", "F16" ] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Check-specific evidence gathering", "evidence": "The dark-mode screenshot is pixel-identical in layout and palette to the light capture; the computed CSS probe found no color-scheme, prefers-color-scheme, or light-dark() support.", "pathIds": [ "home" ], "artifacts": [ "evidence/dark.png", "evidence/probe.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "Reduced-motion emulation plus animation/CSS probe", "evidence": "The page has no active animations and no auto-advance, so there is no non-essential motion to suppress.", "pathIds": [ "home" ], "artifacts": [ "evidence/probe.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "issues", "confidence": "high", "method": "Check-specific evidence gathering", "evidence": "The prefers-contrast: more capture preserves the normal palette, while axe measures the secondary 12 px text at only 4.11:1.", "pathIds": [ "home" ], "artifacts": [ "evidence/contrast.png", "evidence/axe.json", "evidence/probe.json" ], "findingIds": [ "F18" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "pass", "confidence": "medium", "method": "Recon, DOM interaction inventory, and visual review", "evidence": "The only interactions are native navigation/mail links; there is no abrupt same-document state swap or same-site route transition, and no custom JavaScript transition work.", "pathIds": [ "home" ], "artifacts": [ "evidence/dom.json", "evidence/desktop.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "DOM/CSS and page-length inspection", "evidence": "No parallax, scrollytelling, entry reveal, carousel, or other scroll-linked motion exists.", "reason": "No parallax, scrollytelling, entry reveal, carousel, or other scroll-linked motion exists." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "not-applicable", "confidence": "high", "method": "DOM/CSS interaction inventory", "evidence": "No gesture-driven control or scroll-snap surface exists; only ordinary links are interactive.", "reason": "No gesture-driven control or scroll-snap surface exists; only ordinary links are interactive." }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "not-applicable", "confidence": "high", "method": "Desktop/mobile screenshots and CSS inspection", "evidence": "The single static view has no persistent navigation chrome or long-form position-dependent control.", "reason": "The single static view has no persistent navigation chrome or long-form position-dependent control." }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "DOM/CSS overlay inventory", "evidence": "There are no tooltips, popovers, or menus to anchor.", "reason": "There are no tooltips, popovers, or menus to anchor." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "medium", "method": "DOM and visual hierarchy review", "evidence": "The single view has a clear two-column reading order, visibly underlined links, and a prominent support contact; there are no in-page jumps or moved-focus states needing additional cues.", "pathIds": [ "home" ], "artifacts": [ "evidence/desktop.png", "evidence/mobile.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "high", "method": "Initial desktop/mobile screenshots and DOM inspection", "evidence": "No pop-up, interstitial, consent wall, or content-obscuring banner appears on load.", "pathIds": [ "home" ], "artifacts": [ "evidence/desktop.png", "evidence/mobile.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "not-applicable", "confidence": "high", "method": "DOM control inventory", "evidence": "No overlay, disclosure, custom select, or dismissible rich control exists.", "reason": "No overlay, disclosure, custom select, or dismissible rich control exists." }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "Desktop and mobile screenshot review", "evidence": "The card is content-led, with minimal navigation and no competing application frame.", "pathIds": [ "home" ], "artifacts": [ "evidence/desktop.png", "evidence/mobile.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "Layout primitives and screenshots at 1365×768 and 360×800", "evidence": "Mobile scrollWidth equals clientWidth (360 px), horizontal overflow is 0, and content reflows to one column.", "pathIds": [ "home" ], "artifacts": [ "evidence/layout-mobile.json", "evidence/mobile.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "not-applicable", "confidence": "medium", "method": "DOM/CSS reuse and layout inspection", "evidence": "No component is reused in differently sized parent containers; the single page layout adapts adequately through its one viewport breakpoint.", "reason": "No component is reused in differently sized parent containers; the single page layout adapts adequately through its one viewport breakpoint." }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Check-specific evidence gathering", "evidence": "The focused Terms link computed to outline-style none and no box shadow; the stylesheet includes :focus { outline: 0 } and a:hover/a:active outline removal without a :focus-visible replacement.", "pathIds": [ "home" ], "artifacts": [ "evidence/probe.json", "evidence/dom.json" ], "findingIds": [ "F02" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "First-viewport screenshots and content review", "evidence": "The opening text clearly states the domain purpose and responsibility; support contact is prominent.", "pathIds": [ "home" ], "artifacts": [ "evidence/desktop.png", "evidence/mobile.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "pass", "confidence": "medium", "method": "Link and primary-action inspection", "evidence": "The only primary action is contacting support, exposed as a direct mailto link; legal-policy links have real hrefs.", "pathIds": [ "home" ], "artifacts": [ "evidence/probe.json" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "not-applicable", "confidence": "high", "method": "Flow inventory", "evidence": "The root is a static informational document with no loading, submission, empty, partial-completion, or success state.", "reason": "The root is a static informational document with no loading, submission, empty, partial-completion, or success state." }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Check-specific evidence gathering", "evidence": "Lighthouse measured LCP at 2.8 s (good is at most 2.5 s) and FCP at 2.5 s, while the first-party trace measured LCP 1.15 s on an unthrottled run.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/lighthouse-summary.json", "evidence/trace-summary.json" ], "findingIds": [ "F03" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Layout-shift observers at desktop and mobile", "evidence": "Observed CLS was 0.006 desktop and 0.041 mobile, both within the good threshold.", "pathIds": [ "home" ], "artifacts": [ "evidence/layout-desktop.json", "evidence/layout-mobile.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "Trace, layout long-task observers, and Lighthouse TBT", "evidence": "Trace and both layout runs found zero long tasks; TBT was 0 ms.", "pathIds": [ "home" ], "artifacts": [ "evidence/trace-summary.json", "evidence/lighthouse-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Check-specific evidence gathering", "evidence": "HAR identified three parser-inserted VeryHigh-priority stylesheets; DOM confirms they are synchronous head links. Lighthouse estimates 1,740 ms render-blocking savings and 76 KiB cache savings.", "pathIds": [ "home" ], "artifacts": [ "evidence/network-summary.json", "evidence/network.har", "evidence/dom.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F04" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Check-specific evidence gathering", "evidence": "Yandex Metrika tag.js transfers about 90 KiB, 58% of the entire 156 KiB load; Lighthouse reports about 47 KiB unused JavaScript.", "pathIds": [ "home" ], "artifacts": [ "evidence/network-summary.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F05" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Check-specific evidence gathering", "evidence": "axe reports a critical image-alt violation for body > img; the image primitive also found the injected 1×1 GIF without alt.", "pathIds": [ "home" ], "artifacts": [ "evidence/axe.json", "evidence/images.json" ], "findingIds": [ "F06" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Check-specific evidence gathering", "evidence": "axe found nine 12 px text/link nodes at #7d7d7d on white with a 4.11:1 ratio, below the required 4.5:1.", "pathIds": [ "home" ], "artifacts": [ "evidence/axe.json", "evidence/desktop.png" ], "findingIds": [ "F07" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Check-specific evidence gathering", "evidence": "The DOM probe found no h1-h6 elements; axe flags page-has-heading-one, and the focus probe found outline-style none.", "pathIds": [ "home" ], "artifacts": [ "evidence/axe.json", "evidence/probe.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "medium", "method": "Desktop/mobile visual review", "evidence": "Text wraps without clipping at 360 px and uses a readable family and line layout; contrast is assessed separately and fails its dedicated check.", "pathIds": [ "home" ], "artifacts": [ "evidence/desktop.png", "evidence/mobile.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Mobile reflow, viewport, and keyboard target review", "evidence": "Reflow has no overflow and scaling is permitted, but link focus is invisible and compact policy links lack robust target treatment.", "pathIds": [ "home" ], "artifacts": [ "evidence/mobile.png", "evidence/probe.json" ], "findingIds": [ "F02" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "medium", "method": "Lighthouse runtime audits and loaded-page execution", "evidence": "Lighthouse did not report console errors or uncaught exceptions, and all first-party content rendered.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Check-specific evidence gathering", "evidence": "Lighthouse flags unsized images and the image primitive reports missing width/height on the logo and injected tracking image; a measured mobile CLS of 0.041 corroborates small late movement.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json", "evidence/layout-mobile.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F09" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Check-specific evidence gathering", "evidence": "Lighthouse’s inspector-issues audit scored 0; the same run also reports third-party-cookie issues associated with the tracking stack.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "issues", "confidence": "high", "method": "Check-specific evidence gathering", "evidence": "The title is only “Surveza” and there is no meta description; Lighthouse fails meta-description.", "pathIds": [ "home" ], "artifacts": [ "evidence/probe.json", "evidence/lighthouse-summary.json", "evidence/discoverability.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "high", "method": "DOM link/viewport probe and robots fetch", "evidence": "All visible links have real hrefs, link text is descriptive, a viewport meta exists, and no robots directive blocks indexing.", "pathIds": [ "home" ], "artifacts": [ "evidence/probe.json", "evidence/recon.txt" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Check-specific evidence gathering", "evidence": "The page returns 200 and is indexable, but the probe found no canonical; /robots.txt and /sitemap.xml both return generic nginx 404 pages.", "pathIds": [ "home" ], "artifacts": [ "evidence/probe.json", "evidence/recon.txt" ], "findingIds": [ "F12" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Check-specific evidence gathering", "evidence": "The probe found zero Open Graph tags and zero JSON-LD blocks despite the page representing the Surveza organization and infrastructure purpose.", "pathIds": [ "home" ], "artifacts": [ "evidence/probe.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Check-specific evidence gathering", "evidence": "HTTPS and nosniff are present, but CSP, clickjacking protection, Referrer-Policy, and Permissions-Policy are absent; HSTS is only max-age=1.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/recon.txt" ], "findingIds": [ "F14" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Check-specific evidence gathering", "evidence": "HAR shows 15 of 21 requests and 125,587 of 156,021 bytes are third-party; Yandex Webvisor is enabled, five third-party origins load, and four SameSite=None analytics cookies are set.", "pathIds": [ "home" ], "artifacts": [ "evidence/network-summary.json", "evidence/trackers.json", "evidence/cookies.json", "evidence/dom.json" ], "findingIds": [ "F15" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "not-applicable", "confidence": "high", "method": "DOM/source and journey inventory", "evidence": "The page requests no browser permission and exposes no authentication flow.", "reason": "The page requests no browser permission and exposes no authentication flow." }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Security-header primitive", "evidence": "No CSP/frame-ancestors, X-Frame-Options, Referrer-Policy, or Permissions-Policy is present and HSTS is effectively disabled at max-age=1.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F14" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Discoverability no-JS/raw HTML comparison", "evidence": "Raw HTML contains 100% of rendered content words and is not a JavaScript shell.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json", "evidence/discoverability-crawler.png" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "not-applicable", "confidence": "high", "method": "DOM/runtime inventory", "evidence": "No overlay, menu, reactive state, or asynchronous core dependency exists to exercise.", "reason": "No overlay, menu, reactive state, or asynchronous core dependency exists to exercise." }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Site-type judgement and PWA probe", "evidence": "This is a brochure/disclaimer page rather than an app; no installability or offline app experience is reasonably required.", "reason": "This is a brochure/disclaimer page rather than an app; no installability or offline app experience is reasonably required." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "issues", "confidence": "high", "method": "Check-specific evidence gathering", "evidence": "Both /robots.txt and /sitemap.xml returned the generic nginx 404 document with no branding, explanation, home link, or recovery action.", "pathIds": [ "home" ], "artifacts": [ "evidence/recon.txt" ], "findingIds": [ "F16" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "pass", "confidence": "medium", "method": "DOM lang and layout/CSS inspection", "evidence": "html lang=\"en\" is correct; content is intentionally English/LTR and the flex layout does not depend on physical source ordering.", "pathIds": [ "home" ], "artifacts": [ "evidence/dom.json", "evidence/probe.json" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Content and source inspection", "evidence": "The page renders no dates, numbers, prices, currencies, or durations requiring locale formatting.", "reason": "The page renders no dates, numbers, prices, currencies, or durations requiring locale formatting." }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Content and source inspection", "evidence": "No events, schedules, or stored/displayed times exist.", "reason": "No events, schedules, or stored/displayed times exist." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "medium", "method": "Visual/content review", "evidence": "No upsell, confirmshaming, disguised advertisement, continuity trap, or coercive consent wall is shown; privacy collection is judged separately.", "pathIds": [ "home" ], "artifacts": [ "evidence/desktop.png" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "not-applicable", "confidence": "high", "method": "Form inventory", "evidence": "There are no forms or user-editable fields.", "reason": "There are no forms or user-editable fields." }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "not-applicable", "confidence": "high", "method": "Form/input inventory", "evidence": "There are no inputs requiring autocomplete or assistance.", "reason": "There are no inputs requiring autocomplete or assistance." }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "not-applicable", "confidence": "high", "method": "Journey inventory", "evidence": "The page explicitly conducts no transactions and exposes no subscription, checkout, auth, or account flow.", "reason": "The page explicitly conducts no transactions and exposes no subscription, checkout, auth, or account flow." }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "pass", "confidence": "high", "method": "HAR and image audit", "evidence": "The complete image transfer is only 12.8 KiB; the main decorative asset is WebP and the logo is SVG at an appropriate display size.", "pathIds": [ "home" ], "artifacts": [ "evidence/network-summary.json", "evidence/images.json" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "HAR/trace review of background analytics", "evidence": "The static page initiates tracking scripts, beacons, cookie-sync images, and redirects that do not support its content task.", "pathIds": [ "home" ], "artifacts": [ "evidence/network-summary.json", "evidence/trackers.json" ], "findingIds": [ "F17" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Check-specific evidence gathering", "evidence": "Third parties account for 80% of transferred bytes; the 90 KiB Yandex script alone outweighs all first-party content threefold and initiates redirects and background requests.", "pathIds": [ "home" ], "artifacts": [ "evidence/network-summary.json", "evidence/trackers.json" ], "findingIds": [ "F17" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Contextual applicability judgement", "evidence": "This static infrastructure disclaimer has no transactional or productivity capability that warrants a WebMCP tool.", "reason": "This static infrastructure disclaimer has no transactional or productivity capability that warrants a WebMCP tool." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Contextual applicability judgement", "evidence": "No summarisation, generation, translation workflow, or other inference task is part of this page.", "reason": "No summarisation, generation, translation workflow, or other inference task is part of this page." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "not-applicable", "confidence": "high", "method": "Interaction inventory before heap testing", "evidence": "The page has no representative repeatable interaction beyond native links; fabricating one would not test a real session behavior.", "reason": "The page has no representative repeatable interaction beyond native links; fabricating one would not test a real session behavior." }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "medium", "method": "Single heap-summary footprint assessment", "evidence": "The static page heap summary is proportionate: 71,390 nodes in the V8 snapshot graph and 2.94 MiB total self size.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "Heap constructor summary and static runtime inventory", "evidence": "No Detached* constructor appears among retained top constructors; no dynamic component lifecycle or repeating timer-driven UI exists.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap.json", "evidence/probe.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01", "F18" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "pass" }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "pass" }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "pass" }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F02" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "pass" }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F03", "F04", "F05" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F06", "F07", "F08", "F02" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F09", "F10" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F11", "F12", "F13" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F14", "F15" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F16" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "pass" }, { "principleId": "be-trustworthy", "expectation": "default", "status": "pass" }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F17" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "This static infrastructure disclaimer has no transactional or productivity capability that warrants a WebMCP tool. No summarisation, generation, translation workflow, or other inference task is part of this page." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Root disclaimer page, the only same-host public content archetype found. Covers purpose, support contact, policy links, responsive presentation, crawler output, performance, privacy, security, accessibility, and static memory footprint. Not covered: off-host surveza.ai legal pages and unknown generated survey URLs because they are different origins/templates and no same-host routes were discoverable.", "url": "https://cdn.33apk.com/", "conditions": [ "1365x768", "360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "prefers-contrast: more", "raw HTML/no JavaScript", "Lighthouse mobile throttling" ], "result": "issues" } ], "findings": [ { "id": "F01", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "The page ignores the user’s dark color-scheme preference.", "evidence": "The dark-mode screenshot is pixel-identical in layout and palette to the light capture; the computed CSS probe found no color-scheme, prefers-color-scheme, or light-dark() support.", "artifacts": [ "evidence/dark.png", "evidence/probe.json" ], "suggestedFix": "Declare color-scheme: light dark and use prefers-color-scheme or light-dark() tokens for the page, card, text, links, and accent surface.", "effort": "small" }, { "id": "F02", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Keyboard focus is deliberately removed from links.", "evidence": "The focused Terms link computed to outline-style none and no box shadow; the stylesheet includes :focus { outline: 0 } and a:hover/a:active outline removal without a :focus-visible replacement.", "artifacts": [ "evidence/probe.json", "evidence/dom.json" ], "suggestedFix": "Remove global focus-outline suppression and add a high-contrast :focus-visible ring with adequate offset; preserve non-hover cues and verify target size.", "effort": "trivial" }, { "id": "F03", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Mobile LCP misses the good Core Web Vitals threshold.", "evidence": "Lighthouse measured LCP at 2.8 s (good is at most 2.5 s) and FCP at 2.5 s, while the first-party trace measured LCP 1.15 s on an unthrottled run.", "artifacts": [ "evidence/lighthouse.json", "evidence/lighthouse-summary.json", "evidence/trace-summary.json" ], "suggestedFix": "Shorten the critical path by self-hosting/subsetting the font, inlining or consolidating critical CSS, and deferring non-essential third-party work.", "effort": "medium" }, { "id": "F04", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "performance", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Render-blocking styles and a remote font delay first render.", "evidence": "HAR identified three parser-inserted VeryHigh-priority stylesheets; DOM confirms they are synchronous head links. Lighthouse estimates 1,740 ms render-blocking savings and 76 KiB cache savings.", "artifacts": [ "evidence/network-summary.json", "evidence/network.har", "evidence/dom.json", "evidence/lighthouse-summary.json" ], "suggestedFix": "Inline minimal critical CSS, consolidate local CSS, self-host/subset the font with a resilient fallback, and set durable immutable caching for versioned assets.", "effort": "medium" }, { "id": "F05", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "performance", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Analytics dominates JavaScript delivery on a static disclaimer page.", "evidence": "Yandex Metrika tag.js transfers about 90 KiB, 58% of the entire 156 KiB load; Lighthouse reports about 47 KiB unused JavaScript.", "artifacts": [ "evidence/network-summary.json", "evidence/lighthouse-summary.json" ], "suggestedFix": "Remove session-wide analytics from this static page or load a minimal, consent-gated measurement path after the core content and user choice.", "effort": "small" }, { "id": "F06", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "A dynamically injected tracking image has no text alternative or presentational role.", "evidence": "axe reports a critical image-alt violation for body > img; the image primitive also found the injected 1×1 GIF without alt.", "artifacts": [ "evidence/axe.json", "evidence/images.json" ], "suggestedFix": "Mark tracking pixels alt=\"\" and role=\"presentation\" (or remove them); retain meaningful alt text for content images.", "effort": "trivial" }, { "id": "F07", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Small gray body text fails WCAG AA contrast.", "evidence": "axe found nine 12 px text/link nodes at #7d7d7d on white with a 4.11:1 ratio, below the required 4.5:1.", "artifacts": [ "evidence/axe.json", "evidence/desktop.png" ], "suggestedFix": "Darken secondary text to achieve at least 4.5:1 and retest normal, dark, and high-contrast conditions.", "effort": "trivial" }, { "id": "F08", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "The page has no heading structure and keyboard focus is invisible.", "evidence": "The DOM probe found no h1-h6 elements; axe flags page-has-heading-one, and the focus probe found outline-style none.", "artifacts": [ "evidence/axe.json", "evidence/probe.json" ], "suggestedFix": "Use one descriptive h1 and logical subordinate headings, and restore a visible :focus-visible treatment.", "effort": "small" }, { "id": "F09", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "html", "guidanceCategory": "html", "severity": "low", "confidence": "high", "summary": "Images lack explicit intrinsic dimensions.", "evidence": "Lighthouse flags unsized images and the image primitive reports missing width/height on the logo and injected tracking image; a measured mobile CLS of 0.041 corroborates small late movement.", "artifacts": [ "evidence/images.json", "evidence/layout-mobile.json", "evidence/lighthouse-summary.json" ], "suggestedFix": "Add intrinsic width and height to the logo and any retained pixel image so space is reserved before fetch completion.", "effort": "trivial" }, { "id": "F10", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "guidanceId": "html", "guidanceCategory": "html", "severity": "low", "confidence": "medium", "summary": "Chrome reports inspector issues during load.", "evidence": "Lighthouse’s inspector-issues audit scored 0; the same run also reports third-party-cookie issues associated with the tracking stack.", "artifacts": [ "evidence/lighthouse.json", "evidence/lighthouse-summary.json" ], "suggestedFix": "Inspect and resolve the DevTools Issues entries, prioritising third-party-cookie and tracker-related warnings.", "effort": "small" }, { "id": "F11", "principleId": "be-discoverable", "principleCheckId": "title-and-description", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "Search metadata does not describe the page.", "evidence": "The title is only “Surveza” and there is no meta description; Lighthouse fails meta-description.", "artifacts": [ "evidence/probe.json", "evidence/lighthouse-summary.json", "evidence/discoverability.json" ], "suggestedFix": "Write a specific title such as “Survey landing-page infrastructure | Surveza” and a concise description matching the disclaimer.", "effort": "trivial" }, { "id": "F12", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "The public page lacks canonical, robots, and sitemap signals.", "evidence": "The page returns 200 and is indexable, but the probe found no canonical; /robots.txt and /sitemap.xml both return generic nginx 404 pages.", "artifacts": [ "evidence/probe.json", "evidence/recon.txt" ], "suggestedFix": "Add a self-referencing canonical and publish intentional robots.txt and sitemap.xml responses consistent with the desired indexing policy.", "effort": "small" }, { "id": "F13", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "html", "guidanceCategory": "html", "severity": "low", "confidence": "high", "summary": "The organization/disclaimer page has no share preview or structured metadata.", "evidence": "The probe found zero Open Graph tags and zero JSON-LD blocks despite the page representing the Surveza organization and infrastructure purpose.", "artifacts": [ "evidence/probe.json" ], "suggestedFix": "Add accurate Open Graph/Twitter metadata and minimal Organization/WebPage JSON-LD that matches visible content.", "effort": "small" }, { "id": "F14", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "security", "severity": "high", "confidence": "high", "summary": "Browser security policy headers are materially incomplete.", "evidence": "HTTPS and nosniff are present, but CSP, clickjacking protection, Referrer-Policy, and Permissions-Policy are absent; HSTS is only max-age=1.", "artifacts": [ "evidence/headers.json", "evidence/recon.txt" ], "suggestedFix": "Deploy a restrictive CSP (including frame-ancestors), long-lived HSTS after rollout validation, strict-origin-when-cross-origin or stricter Referrer-Policy, and a least-privilege Permissions-Policy.", "effort": "medium" }, { "id": "F15", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "security", "guidanceCategory": "security", "severity": "high", "confidence": "high", "summary": "A static disclaimer loads extensive session analytics and cookie synchronisation without an on-page choice.", "evidence": "HAR shows 15 of 21 requests and 125,587 of 156,021 bytes are third-party; Yandex Webvisor is enabled, five third-party origins load, and four SameSite=None analytics cookies are set.", "artifacts": [ "evidence/network-summary.json", "evidence/trackers.json", "evidence/cookies.json", "evidence/dom.json" ], "suggestedFix": "Disable Webvisor and cookie syncing by default, minimise measurement, gate non-essential analytics on explicit consent where required, and document each retained processor.", "effort": "medium" }, { "id": "F16", "principleId": "be-resilient", "principleCheckId": "network-and-http-failure-states", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "Missing routes return a dead-end server error page.", "evidence": "Both /robots.txt and /sitemap.xml returned the generic nginx 404 document with no branding, explanation, home link, or recovery action.", "artifacts": [ "evidence/recon.txt" ], "suggestedFix": "Serve an intentional lightweight 404 page with a clear explanation and links back to the root and support contact.", "effort": "small" }, { "id": "F17", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "efficient-background-processing", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Third-party tracking is disproportionate to this static page’s user value.", "evidence": "Third parties account for 80% of transferred bytes; the 90 KiB Yandex script alone outweighs all first-party content threefold and initiates redirects and background requests.", "artifacts": [ "evidence/network-summary.json", "evidence/trackers.json" ], "suggestedFix": "Remove non-essential trackers, defer any justified telemetry, and set a strict third-party request/byte budget for this static surface.", "effort": "small" }, { "id": "F18", "principleId": "respect-user-preferences", "principleCheckId": "respects-contrast", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "medium", "confidence": "high", "summary": "High-contrast preference does not improve already marginal text contrast.", "evidence": "The prefers-contrast: more capture preserves the normal palette, while axe measures the secondary 12 px text at only 4.11:1.", "artifacts": [ "evidence/contrast.png", "evidence/axe.json", "evidence/probe.json" ], "suggestedFix": "Add a prefers-contrast: more treatment that increases secondary-text and focus-indicator contrast, and verify forced-colors behavior.", "effort": "small" } ], "taskList": [ { "id": "T1", "title": "Minimise and consent-gate tracking", "priority": 1, "findingIds": [ "F05", "F15", "F17" ], "guidanceId": "security", "status": "open" }, { "id": "T2", "title": "Restore inclusive focus, headings, contrast, and image semantics", "priority": 2, "findingIds": [ "F02", "F06", "F07", "F08", "F18" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T3", "title": "Deploy complete browser security policies", "priority": 3, "findingIds": [ "F14" ], "guidanceId": "security", "status": "open" }, { "id": "T4", "title": "Shorten the critical rendering path", "priority": 4, "findingIds": [ "F03", "F04" ], "guidanceId": "performance", "status": "open" }, { "id": "T5", "title": "Add descriptive indexing and sharing metadata", "priority": 5, "findingIds": [ "F11", "F12", "F13" ], "guidanceId": "html", "status": "open" }, { "id": "T6", "title": "Reserve image space and resolve DevTools issues", "priority": 6, "findingIds": [ "F09", "F10" ], "guidanceId": "html", "status": "open" }, { "id": "T7", "title": "Provide a recoverable 404 page", "priority": 7, "findingIds": [ "F16" ], "guidanceId": "html", "status": "open" }, { "id": "T8", "title": "Honor dark color preference", "priority": 8, "findingIds": [ "F01" ], "guidanceId": "dark-mode", "status": "open" } ], "budget": { "pathCount": 1, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-19T23-01-35-044Z" }