{ "url": "https://www.croxyproxy.com", "auditedAt": "2026-07-21T22:53:40.646Z", "mode": "report", "status": "completed", "statusDetail": "Atomic coverage complete. Representative public templates and the primary entry journey were exercised; authenticated post-login and live proxied third-party browsing were not covered because they require account/external-session scope.", "page": { "appType": "mpa", "framework": "server-rendered MPA with legacy Bootstrap/jQuery-style UI and third-party consent/ad tooling", "notes": "Public multilingual web-proxy service. Covered homepage, service detail, content listing/article, support form, legal page, RTL locale, and 404. Not covered: post-login account management, Patreon checkout, browser extension UI, or proxied destinations beyond the entry attempt." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "trace", "har", "discoverability", "headers", "cookies", "trackers", "secrets", "images", "heap-summary", "lighthouse" ], "guidanceConsulted": [ "dark-mode", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "scrollytelling", "physics-based-easing", "shrinking-header-on-scroll", "anchor-positioning-tab-underline", "directional-navigation-transitions", "light-dismiss-a-dialog", "declarative-dialog-popover-control", "complex-shapes", "fluid-scaling", "size-aware-styling", "css", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "identify-inp-causes", "visually-stable-font-fallbacks", "break-up-long-tasks", "optimize-image-priority", "identify-heavy-scripts", "highlight-text-ranges", "move-dom-element-without-losing-state", "security", "html", "search-hidden-content", "language-model", "privacy", "passkeys", "flicker-free-client-side-ab-testing", "resilient-context-menus-and-nested-dropdowns", "passkey-management", "persistent-toast-notifications", "translator", "support-global-calendar-systems", "coordinate-global-events", "autofill-address-form", "autofill-payment-form", "deliver-optimized-decorative-images", "deprioritize-background-fetches", "webmcp", "faster-spa-view-transitions", "calculate-with-intrinsic-sizes", "manage-recurring-intervals" ], "artifacts": [ { "type": "other", "path": "evidence/404-probe.json", "caption": "404 probe", "findingIds": [] }, { "type": "screenshot", "path": "evidence/404.png", "caption": "404", "findingIds": [] }, { "type": "screenshot", "path": "evidence/arabic-mobile.png", "caption": "arabic mobile", "findingIds": [] }, { "type": "other", "path": "evidence/arabic-probe.json", "caption": "arabic probe", "findingIds": [] }, { "type": "screenshot", "path": "evidence/article-discoverability-crawler.png", "caption": "article discoverability crawler", "findingIds": [] }, { "type": "screenshot", "path": "evidence/article-discoverability-rendered.png", "caption": "article discoverability rendered", "findingIds": [] }, { "type": "discoverability", "path": "evidence/article-discoverability.json", "caption": "article discoverability", "findingIds": [] }, { "type": "other", "path": "evidence/article-images.json", "caption": "article images", "findingIds": [ "F012" ] }, { "type": "other", "path": "evidence/article-meta.json", "caption": "article meta", "findingIds": [ "F013", "F014" ] }, { "type": "screenshot", "path": "evidence/blog-article.png", "caption": "blog article", "findingIds": [ "F003", "F014" ] }, { "type": "screenshot", "path": "evidence/blog-list.png", "caption": "blog list", "findingIds": [] }, { "type": "other", "path": "evidence/blog-meta.json", "caption": "blog meta", "findingIds": [] }, { "type": "dom", "path": "evidence/consent-dom.json", "caption": "consent dom", "findingIds": [ "F004", "F016", "F018" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "cookies", "findingIds": [ "F015" ] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "discoverability crawler", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "discoverability rendered", "findingIds": [] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "discoverability", "findingIds": [] }, { "type": "other", "path": "evidence/feedback-form-probe.json", "caption": "feedback form probe", "findingIds": [ "F019" ] }, { "type": "screenshot", "path": "evidence/feedback-form.png", "caption": "feedback form", "findingIds": [] }, { "type": "other", "path": "evidence/feedback-invalid-probe.json", "caption": "feedback invalid probe", "findingIds": [] }, { "type": "screenshot", "path": "evidence/feedback-invalid.png", "caption": "feedback invalid", "findingIds": [] }, { "type": "other", "path": "evidence/focus-targets.json", "caption": "focus targets", "findingIds": [ "F005", "F010" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "headers", "findingIds": [ "F015" ] }, { "type": "heap", "path": "evidence/heap-baseline.heapsnapshot", "caption": "heap baseline", "findingIds": [ "F021" ] }, { "type": "heap", "path": "evidence/heap-post.heapsnapshot", "caption": "heap post", "findingIds": [ "F021" ] }, { "type": "screenshot", "path": "evidence/home-after-consent.png", "caption": "home after consent", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-consented-desktop.png", "caption": "home consented desktop", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-contrast.png", "caption": "home contrast", "findingIds": [ "F001", "F009" ] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "home dark", "findingIds": [ "F001" ] }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "home desktop", "findingIds": [ "F004", "F006", "F018" ] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "home dom", "findingIds": [ "F002" ] }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "home mobile layout", "findingIds": [ "F007" ] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile", "findingIds": [ "F004" ] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "home summary", "findingIds": [ "F008", "F016", "F020" ] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "home trace summary", "findingIds": [ "F007" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "home trace", "findingIds": [] }, { "type": "har", "path": "evidence/home.har", "caption": "home", "findingIds": [ "F008" ] }, { "type": "other", "path": "evidence/images.json", "caption": "images", "findingIds": [ "F012" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-summary.json", "caption": "lighthouse summary", "findingIds": [ "F007", "F008", "F009", "F011", "F012", "F013" ] }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "lighthouse", "findingIds": [] }, { "type": "other", "path": "evidence/motion-modern-css.json", "caption": "motion modern css", "findingIds": [ "F001", "F002", "F003" ] }, { "type": "other", "path": "evidence/platform-a11y-seo.json", "caption": "platform a11y seo", "findingIds": [ "F010" ] }, { "type": "screenshot", "path": "evidence/proxy-flow-after.png", "caption": "proxy flow after", "findingIds": [] }, { "type": "other", "path": "evidence/proxy-flow-probe.json", "caption": "proxy flow probe", "findingIds": [] }, { "type": "screenshot", "path": "evidence/proxy-flow-result.png", "caption": "proxy flow result", "findingIds": [ "F006" ] }, { "type": "dom", "path": "evidence/proxy-info-dom.json", "caption": "proxy info dom", "findingIds": [] }, { "type": "screenshot", "path": "evidence/proxy-info.png", "caption": "proxy info", "findingIds": [] }, { "type": "other", "path": "evidence/recon.json", "caption": "recon", "findingIds": [] }, { "type": "dom", "path": "evidence/repeat-interaction-dom.json", "caption": "repeat interaction dom", "findingIds": [ "F021" ] }, { "type": "other", "path": "evidence/robots.json", "caption": "robots", "findingIds": [ "F013" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "secrets", "findingIds": [] }, { "type": "other", "path": "evidence/signin-probe.json", "caption": "signin probe", "findingIds": [ "F017", "F019" ] }, { "type": "other", "path": "evidence/sitemap.json", "caption": "sitemap", "findingIds": [ "F013" ] }, { "type": "other", "path": "evidence/terms-meta.json", "caption": "terms meta", "findingIds": [] }, { "type": "screenshot", "path": "evidence/terms-mobile.png", "caption": "terms mobile", "findingIds": [ "F003" ] }, { "type": "other", "path": "evidence/trackers.json", "caption": "trackers", "findingIds": [ "F016", "F020" ] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "The dark and default screenshots are pixel-identical, the CSS probe found no prefers-color-scheme rule, and Lighthouse found 3.02:1 quick-link contrast.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png", "evidence/home-contrast.png", "evidence/motion-modern-css.json" ], "findingIds": [ "F001" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "evaluate under prefers-reduced-motion: reduce", "evidence": "The media query matched and getAnimations() returned no active animations; no non-essential motion remained.", "pathIds": [ "home" ], "artifacts": [ "evidence/motion-modern-css.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "The dark and default screenshots are pixel-identical, the CSS probe found no prefers-color-scheme rule, and Lighthouse found 3.02:1 quick-link contrast.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png", "evidence/home-contrast.png", "evidence/motion-modern-css.json" ], "findingIds": [ "F001" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "CSS inspection found no view-transition, animation-timeline, scroll-snap, or related modern interaction declarations across the homepage DOM.", "pathIds": [ "home" ], "artifacts": [ "evidence/motion-modern-css.json", "evidence/home-dom.json" ], "findingIds": [ "F002" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Recon and representative-template interaction inventory", "evidence": "No scroll-linked/parallax/scrollytelling motion exists on the representative templates, so there is no implementation to move off main thread.", "reason": "No scroll-linked/parallax/scrollytelling motion exists on the representative templates, so there is no implementation to move off main thread." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "not-applicable", "confidence": "high", "method": "Recon and representative-template interaction inventory", "evidence": "No swipe, pull, carousel, drag, or other gesture-driven component exists on the audited public templates.", "reason": "No swipe, pull, carousel, drag, or other gesture-driven component exists on the audited public templates." }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "The long article and terms captures show static chrome; CSS inspection found no scroll-state, anchor positioning, transition, or attention-highlight support.", "pathIds": [ "article" ], "artifacts": [ "evidence/blog-article.png", "evidence/terms-mobile.png", "evidence/motion-modern-css.json" ], "findingIds": [ "F003" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "The long article and terms captures show static chrome; CSS inspection found no scroll-state, anchor positioning, transition, or attention-highlight support.", "pathIds": [ "article" ], "artifacts": [ "evidence/blog-article.png", "evidence/terms-mobile.png", "evidence/motion-modern-css.json" ], "findingIds": [ "F003" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "The long article and terms captures show static chrome; CSS inspection found no scroll-state, anchor positioning, transition, or attention-highlight support.", "pathIds": [ "article" ], "artifacts": [ "evidence/blog-article.png", "evidence/terms-mobile.png", "evidence/motion-modern-css.json" ], "findingIds": [ "F003" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "Fresh-load desktop and mobile screenshots show the primary proxy form dimmed behind a consent dialog describing processing by 210 partners; only Consent and Manage options are offered.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/consent-dom.json" ], "findingIds": [ "F004" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "Fresh-load desktop and mobile screenshots show the primary proxy form dimmed behind a consent dialog describing processing by 210 partners; only Consent and Manage options are offered.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/consent-dom.json" ], "findingIds": [ "F004" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "visual review of consent-free content templates", "evidence": "Blog, feedback, and terms screenshots use sparse content-first layouts with little application frame.", "pathIds": [ "blog-list", "feedback", "terms" ], "artifacts": [ "evidence/blog-list.png", "evidence/feedback-form.png", "evidence/terms-mobile.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "mobile screenshots plus layout and RTL probe", "evidence": "Terms and Arabic templates reflow at 360px; Arabic reports zero overflow. Homepage layout scrollWidth equals its CSS inner width, with no clipped core content in the screenshot.", "pathIds": [ "home", "terms", "arabic" ], "artifacts": [ "evidence/home-mobile.png", "evidence/terms-mobile.png", "evidence/arabic-probe.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "CSS inspection found no view-transition, animation-timeline, scroll-snap, or related modern interaction declarations across the homepage DOM.", "pathIds": [ "home" ], "artifacts": [ "evidence/motion-modern-css.json", "evidence/home-dom.json" ], "findingIds": [ "F002" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "The focus probe reports outline-style none for links, the URL input, and buttons; social controls measure 36x32px and many text links are only 17px high.", "pathIds": [ "home" ], "artifacts": [ "evidence/focus-targets.json" ], "findingIds": [ "F005" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "first-viewport screenshot and DOM review", "evidence": "The page identifies itself as a secure web proxy and places a URL/search field with Go action prominently behind the consent layer.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/recon.json" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "The proxy journey screenshot remains at the full-page consent state with the URL field obscured; the initial task cannot begin without accepting or navigating a complex vendor-management flow.", "pathIds": [ "proxy-flow" ], "artifacts": [ "evidence/proxy-flow-result.png", "evidence/home-desktop.png" ], "findingIds": [ "F006" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "invalid form submission and unknown-route test", "evidence": "Native required-field messages appear after submit; the 404 page explains the error and offers Homepage and support recovery links.", "pathIds": [ "feedback", "not-found" ], "artifacts": [ "evidence/feedback-invalid-probe.json", "evidence/404-probe.json", "evidence/404.png" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "Lighthouse reports Performance 0.87, Speed Index 5.4s, TTI 12.4s, TBT 210ms, and CLS 0.135; the first-party trace still shows LCP 1.71s with no long tasks in that separate run.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-trace-summary.json", "evidence/home-mobile-layout.json" ], "findingIds": [ "F007" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "Lighthouse reports Performance 0.87, Speed Index 5.4s, TTI 12.4s, TBT 210ms, and CLS 0.135; the first-party trace still shows LCP 1.71s with no long tasks in that separate run.; Both image audits report missing width/height and srcset; the 700px PNG logo is displayed at 340px and Lighthouse flags the logo as unsized.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-trace-summary.json", "evidence/home-mobile-layout.json", "evidence/images.json", "evidence/article-images.json" ], "findingIds": [ "F007", "F012" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "Lighthouse reports Performance 0.87, Speed Index 5.4s, TTI 12.4s, TBT 210ms, and CLS 0.135; the first-party trace still shows LCP 1.71s with no long tasks in that separate run.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-trace-summary.json", "evidence/home-mobile-layout.json" ], "findingIds": [ "F007" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "HAR captured 47 requests and 1.88MB transferred, including 42 third-party requests and 1.80MB third-party bytes. Lighthouse estimates 546KiB unused JavaScript and 44KiB unused CSS.; Both image audits report missing width/height and srcset; the 700px PNG logo is displayed at 340px and Lighthouse flags the logo as unsized.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home.har", "evidence/lighthouse-summary.json", "evidence/images.json", "evidence/article-images.json" ], "findingIds": [ "F008", "F012" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "HAR captured 47 requests and 1.88MB transferred, including 42 third-party requests and 1.80MB third-party bytes. Lighthouse estimates 546KiB unused JavaScript and 44KiB unused CSS.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home.har", "evidence/lighthouse-summary.json" ], "findingIds": [ "F008" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "pass", "confidence": "high", "method": "Lighthouse and DOM/form inspection", "evidence": "Lighthouse accessibility scored 0.96; inspected feedback fields have explicit labels and both images have non-empty alt text.", "pathIds": [ "home", "feedback" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/feedback-form-probe.json", "evidence/images.json" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "Lighthouse identifies repeated quick-link failures at 3.02:1 (#6a9452 on #e9f0e5), below the expected 4.5:1 for normal text.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-contrast.png" ], "findingIds": [ "F009" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "The focus probe found no visible outline on focusable controls; the DOM probe found no main/nav/header/footer landmarks and multiple 36x32 or 17px-high targets.", "pathIds": [ "home" ], "artifacts": [ "evidence/focus-targets.json", "evidence/platform-a11y-seo.json" ], "findingIds": [ "F010" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "desktop/mobile visual review", "evidence": "Body and heading text reflow without clipping on article, feedback, and legal templates and uses readable spacing.", "pathIds": [ "article", "feedback", "terms" ], "artifacts": [ "evidence/blog-article.png", "evidence/feedback-form.png", "evidence/terms-mobile.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "The focus probe found no visible outline on focusable controls; the DOM probe found no main/nav/header/footer landmarks and multiple 36x32 or 17px-high targets.", "pathIds": [ "home" ], "artifacts": [ "evidence/focus-targets.json", "evidence/platform-a11y-seo.json" ], "findingIds": [ "F010" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "Lighthouse records an uncaught adsbygoogle error, three deprecation warnings, and three BFCache failure reasons.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json" ], "findingIds": [ "F011" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "Both image audits report missing width/height and srcset; the 700px PNG logo is displayed at 340px and Lighthouse flags the logo as unsized.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json", "evidence/article-images.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F012" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "Lighthouse records an uncaught adsbygoogle error, three deprecation warnings, and three BFCache failure reasons.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json" ], "findingIds": [ "F011" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "DOM metadata probes across templates", "evidence": "Homepage, article, terms, and support pages expose descriptive titles; homepage/article/terms expose descriptions.", "pathIds": [ "home", "article", "terms" ], "artifacts": [ "evidence/platform-a11y-seo.json", "evidence/article-meta.json", "evidence/terms-meta.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "Lighthouse finds proxy quick links implemented with data-href rather than href. robots.txt exists, but /sitemap.xml returns the branded not-found page and inspected pages expose no canonical URL.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/robots.json", "evidence/sitemap.json", "evidence/article-meta.json" ], "findingIds": [ "F013" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "Lighthouse finds proxy quick links implemented with data-href rather than href. robots.txt exists, but /sitemap.xml returns the branded not-found page and inspected pages expose no canonical URL.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/robots.json", "evidence/sitemap.json", "evidence/article-meta.json" ], "findingIds": [ "F013" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "The representative article has a descriptive title and meta description but no JSON-LD and no Open Graph tags.", "pathIds": [ "article" ], "artifacts": [ "evidence/article-meta.json", "evidence/blog-article.png" ], "findingIds": [ "F014" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "CSP allows unsafe-inline and unsafe-eval; X-Frame-Options/frame-ancestors, Referrer-Policy, and Permissions-Policy are absent. Four analytics/consent cookies are not Secure and all seven cookies use SameSite=None.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F015" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "The tracker probe sees 13 third-party origins and known Google trackers; HAR attributes 1.80MB of 1.88MB to third parties, while the consent UI describes 210 partners and precise-geolocation use.", "pathIds": [ "home" ], "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json", "evidence/consent-dom.json" ], "findingIds": [ "F016" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "The exercised sign-in modal contains email/password fields with empty autocomplete attributes and no WebAuthn/Passkey capability in the loaded document.", "pathIds": [ "home" ], "artifacts": [ "evidence/signin-probe.json" ], "findingIds": [ "F017" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "CSP allows unsafe-inline and unsafe-eval; X-Frame-Options/frame-ancestors, Referrer-Policy, and Permissions-Policy are absent. Four analytics/consent cookies are not Secure and all seven cookies use SameSite=None.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F015" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "raw HTML versus rendered DOM and crawler screenshots", "evidence": "Discoverability captured 80% homepage and 86% article content in raw HTML, with title, H1, and description present and no JS shell.", "pathIds": [ "home", "article" ], "artifacts": [ "evidence/discoverability.json", "evidence/article-discoverability.json" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "high", "method": "responsive screenshots and repeated language-menu interaction", "evidence": "Menus and forms remained inside viewports; ten language-menu toggles left the DOM count unchanged.", "pathIds": [ "home", "feedback", "arabic" ], "artifacts": [ "evidence/repeat-interaction-dom.json", "evidence/feedback-form.png", "evidence/arabic-mobile.png" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Recon and representative-template interaction inventory", "evidence": "The core product is an intrinsically online web proxy; offline proxying and installability are not meaningful requirements.", "reason": "The core product is an intrinsically online web proxy; offline proxying and installability are not meaningful requirements." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "unknown-route recovery test", "evidence": "The not-found route renders a clear error explanation plus links to homepage and support rather than a blank shell.", "pathIds": [ "not-found" ], "artifacts": [ "evidence/404-probe.json", "evidence/404.png" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "pass", "confidence": "high", "method": "English and Arabic DOM/mobile probes", "evidence": "English declares lang=en/dir=auto; Arabic declares lang=ar/dir=rtl, translates the main heading, reflows at 360px, and reports zero overflow.", "pathIds": [ "home", "arabic" ], "artifacts": [ "evidence/arabic-probe.json", "evidence/arabic-mobile.png" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Recon and representative-template interaction inventory", "evidence": "The public templates expose no dates, prices, currencies, measurements, or other locale-sensitive data beyond a copyright year.", "reason": "The public templates expose no dates, prices, currencies, measurements, or other locale-sensitive data beyond a copyright year." }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Recon and representative-template interaction inventory", "evidence": "No events, schedules, timestamps, or time-zone-sensitive concepts appear on the audited public templates.", "reason": "No events, schedules, timestamps, or time-zone-sensitive concepts appear on the audited public templates." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "The initial dialog offers a one-click Consent button but no equal Reject button, despite listing 210 partners, legitimate-interest processing, and precise geolocation.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/consent-dom.json" ], "findingIds": [ "F018" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "pass", "confidence": "high", "method": "invalid-submit probe", "evidence": "Required feedback fields use native post-interaction validation and return clear “Please fill in this field” messages.", "pathIds": [ "feedback" ], "artifacts": [ "evidence/feedback-invalid-probe.json" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "Feedback email and sign-in email/password fields all report empty autocomplete values; sign-in is password-only.", "pathIds": [ "feedback" ], "artifacts": [ "evidence/feedback-form-probe.json", "evidence/signin-probe.json" ], "findingIds": [ "F019" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "Feedback email and sign-in email/password fields all report empty autocomplete values; sign-in is password-only.", "pathIds": [ "feedback" ], "artifacts": [ "evidence/feedback-form-probe.json", "evidence/signin-probe.json" ], "findingIds": [ "F019" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "Both image audits report missing width/height and srcset; the 700px PNG logo is displayed at 340px and Lighthouse flags the logo as unsized.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json", "evidence/article-images.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F012" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "HAR attributes 96% of transferred bytes to third parties; GTM, Font Awesome, ads, consent, feedback, sharing, and fonts dominate a simple URL-entry page.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "findingIds": [ "F020" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "HAR attributes 96% of transferred bytes to third parties; GTM, Font Awesome, ads, consent, feedback, sharing, and fonts dominate a simple URL-entry page.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "findingIds": [ "F020" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Recon and representative-template interaction inventory", "evidence": "This emerging capability was judged out of scope: the public site does not declare an agent-facing product surface or intent.", "reason": "This emerging capability was judged out of scope: the public site does not declare an agent-facing product surface or intent." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Recon and representative-template interaction inventory", "evidence": "No summarisation or language-model task is part of the observed proxy-entry, content, or support journeys, so on-device inference is not applicable.", "reason": "No summarisation or language-model task is part of the observed proxy-entry, content, or support journeys, so on-device inference is not applicable." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "baseline/post heap summaries plus ten-toggle DOM probe", "evidence": "After ten language-menu open/close cycles, DOM nodes stayed 5,452; heap changed by about 0.42MB (1.4%) with stable major constructor counts, not evidence of unbounded growth.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot", "evidence/repeat-interaction-dom.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "issues", "confidence": "medium", "method": "Evidence primitive(s) and/or Lighthouse as detailed in linked findings", "evidence": "The baseline heap summary contains 461,255 V8 nodes and 29.5MB self size, including 132,916 native nodes and 27,666 closures. Repeating the language toggle did not grow DOM nodes, so this is footprint rather than a demonstrated leak.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot", "evidence/repeat-interaction-dom.json" ], "findingIds": [ "F021" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "heap constructor comparison and repeated-interaction DOM probe", "evidence": "No Detached* constructor appears among leading retained constructors and ten toggles add zero DOM nodes; this did not show accumulating detached DOM.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot", "evidence/repeat-interaction-dom.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F001" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F002" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F003" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F004" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F002", "F005" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F006" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F007", "F012", "F008" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F009", "F010" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F011", "F012" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F013", "F014" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F015", "F016", "F017" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "pass" }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "pass" }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F018", "F019" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F012", "F020" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "All checks were judged not applicable to this site’s observed scope: This emerging capability was judged out of scope: the public site does not declare an agent-facing product surface or intent. No summarisation or language-model task is part of the observed proxy-entry, content, or support journeys, so on-device inference is not applicable." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "issues", "findingIds": [ "F021" ] } ], "paths": [ { "id": "home", "description": "Homepage and proxy-entry archetype: first viewport, preferences, responsive layout, metadata, and primary action.", "url": "https://www.croxyproxy.com/", "conditions": [ "desktop 1440x1000", "mobile 360x800", "prefers-color-scheme: dark", "prefers-contrast: more", "prefers-reduced-motion: reduce", "keyboard focus" ], "result": "issues" }, { "id": "proxy-flow", "description": "Primary journey: attempt to enter https://example.com and start proxy browsing; the mandatory consent interstitial remained the first blocking state.", "url": "https://www.croxyproxy.com/", "conditions": [ "fresh profile", "initial load" ], "result": "issues" }, { "id": "proxy-info", "description": "Informational/detail template representing service documentation.", "url": "https://www.croxyproxy.com/proxy", "conditions": [ "desktop 1440x1000" ], "result": "issues" }, { "id": "blog-list", "description": "Content listing archetype representing proxy-guide navigation.", "url": "https://www.croxyproxy.com/blog/posts", "conditions": [ "desktop 1440x1000" ], "result": "issues" }, { "id": "article", "description": "Long-form article archetype, including raw-HTML discoverability and share metadata.", "url": "https://www.croxyproxy.com/blog/posts/the-differences-between-proxy-and-vpn-services", "conditions": [ "desktop 1440x1000", "JavaScript disabled crawler view" ], "result": "issues" }, { "id": "feedback", "description": "Primary support form, including labels, autocomplete, and invalid-submit recovery.", "url": "https://www.croxyproxy.com/feedback/form", "conditions": [ "desktop 1440x1000", "invalid submit" ], "result": "issues" }, { "id": "terms", "description": "Long legal-content template at a narrow viewport.", "url": "https://www.croxyproxy.com/terms", "conditions": [ "mobile 360x800" ], "result": "pass" }, { "id": "arabic", "description": "RTL/localised homepage representative for language, direction, and mobile reflow.", "url": "https://www.croxyproxy.com/_ar/", "conditions": [ "mobile 360x800", "RTL" ], "result": "pass" }, { "id": "not-found", "description": "HTTP/error recovery surface using a deliberately unknown route.", "url": "https://www.croxyproxy.com/not-a-real-page-audit", "conditions": [ "desktop 1000x800" ], "result": "pass" } ], "findings": [ { "id": "F001", "pathId": "home", "url": "https://www.croxyproxy.com/", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "The site does not adapt to dark or higher-contrast preferences.", "evidence": "The dark and default screenshots are pixel-identical, the CSS probe found no prefers-color-scheme rule, and Lighthouse found 3.02:1 quick-link contrast.", "artifacts": [ "evidence/home-dark.png", "evidence/home-contrast.png", "evidence/motion-modern-css.json" ], "suggestedFix": "Declare color-scheme, provide dark surface/text tokens using prefers-color-scheme or light-dark(), and add a prefers-contrast/forced-colors treatment.", "effort": "medium" }, { "id": "F002", "pathId": "home", "url": "https://www.croxyproxy.com/", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "same-document-transitions", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "Page and route changes use abrupt legacy navigation with no modern transition support.", "evidence": "CSS inspection found no view-transition, animation-timeline, scroll-snap, or related modern interaction declarations across the homepage DOM.", "artifacts": [ "evidence/motion-modern-css.json", "evidence/home-dom.json" ], "suggestedFix": "Use cross-document View Transitions for same-origin navigation, preserve reduced-motion fallbacks, and only add declarative motion where it clarifies state.", "effort": "medium" }, { "id": "F003", "pathId": "article", "url": "https://www.croxyproxy.com/blog/posts/the-differences-between-proxy-and-vpn-services", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "shrinking-header-on-scroll", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "Long pages and the language menu provide little state-aware navigation guidance.", "evidence": "The long article and terms captures show static chrome; CSS inspection found no scroll-state, anchor positioning, transition, or attention-highlight support.", "artifacts": [ "evidence/blog-article.png", "evidence/terms-mobile.png", "evidence/motion-modern-css.json" ], "suggestedFix": "Add a lightweight progress/current-location cue on long content and anchor-position the language menu with fallback positions.", "effort": "medium" }, { "id": "F004", "pathId": "home", "url": "https://www.croxyproxy.com/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "light-dismiss-a-dialog", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "A full-screen consent interstitial obscures the page and offers no equal first-layer reject action.", "evidence": "Fresh-load desktop and mobile screenshots show the primary proxy form dimmed behind a consent dialog describing processing by 210 partners; only Consent and Manage options are offered.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/consent-dom.json" ], "suggestedFix": "Do not block core content for non-essential processing. Provide equally prominent Accept and Reject actions, minimise partners/purposes, and retain a clear settings route.", "effort": "medium" }, { "id": "F005", "pathId": "home", "url": "https://www.croxyproxy.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "medium", "confidence": "high", "summary": "Keyboard focus is not visibly indicated and several targets are undersized.", "evidence": "The focus probe reports outline-style none for links, the URL input, and buttons; social controls measure 36x32px and many text links are only 17px high.", "artifacts": [ "evidence/focus-targets.json" ], "suggestedFix": "Add a high-contrast :focus-visible ring and expand compact controls/links to at least a comfortable 44x44 CSS-pixel hit area without relying on hover.", "effort": "medium" }, { "id": "F006", "pathId": "proxy-flow", "url": "https://www.croxyproxy.com/", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "forms", "guidanceCategory": "forms", "severity": "high", "confidence": "high", "summary": "The mandatory consent wall interrupts the core proxy task before the user can enter a destination.", "evidence": "The proxy journey screenshot remains at the full-page consent state with the URL field obscured; the initial task cannot begin without accepting or navigating a complex vendor-management flow.", "artifacts": [ "evidence/proxy-flow-result.png", "evidence/home-desktop.png" ], "suggestedFix": "Keep the proxy input available before optional ad/analytics consent and defer non-essential scripts until an explicit choice.", "effort": "medium" }, { "id": "F007", "pathId": "home", "url": "https://www.croxyproxy.com/", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "Mobile lab performance is slow and visually unstable.", "evidence": "Lighthouse reports Performance 0.87, Speed Index 5.4s, TTI 12.4s, TBT 210ms, and CLS 0.135; the first-party trace still shows LCP 1.71s with no long tasks in that separate run.", "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-trace-summary.json", "evidence/home-mobile-layout.json" ], "suggestedFix": "Prioritise the main content, reserve late UI space, delay non-essential ad/analytics work, and break/defer interaction work until after the core form is usable.", "effort": "medium" }, { "id": "F008", "pathId": "home", "url": "https://www.croxyproxy.com/", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "Third-party and unused JavaScript dominate delivery.", "evidence": "HAR captured 47 requests and 1.88MB transferred, including 42 third-party requests and 1.80MB third-party bytes. Lighthouse estimates 546KiB unused JavaScript and 44KiB unused CSS.", "artifacts": [ "evidence/home-summary.json", "evidence/home.har", "evidence/lighthouse-summary.json" ], "suggestedFix": "Load one analytics configuration only after consent, remove redundant tag-manager/ad bundles, defer optional sharing/feedback code, and split page-specific code.", "effort": "medium" }, { "id": "F009", "pathId": "home", "url": "https://www.croxyproxy.com/", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Quick-link text fails WCAG contrast.", "evidence": "Lighthouse identifies repeated quick-link failures at 3.02:1 (#6a9452 on #e9f0e5), below the expected 4.5:1 for normal text.", "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-contrast.png" ], "suggestedFix": "Use a darker green or change the background so normal text reaches at least 4.5:1 in every theme and state.", "effort": "medium" }, { "id": "F010", "pathId": "home", "url": "https://www.croxyproxy.com/", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "medium", "confidence": "high", "summary": "Focus visibility, landmark structure, and compact targets weaken keyboard and assistive use.", "evidence": "The focus probe found no visible outline on focusable controls; the DOM probe found no main/nav/header/footer landmarks and multiple 36x32 or 17px-high targets.", "artifacts": [ "evidence/focus-targets.json", "evidence/platform-a11y-seo.json" ], "suggestedFix": "Introduce semantic landmarks, retain logical headings, add :focus-visible styles, and enlarge compact targets while preserving reading order.", "effort": "medium" }, { "id": "F011", "pathId": "home", "url": "https://www.croxyproxy.com/", "principleId": "follow-best-practices", "principleCheckId": "no-console-errors", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "The page logs an ad exception and uses deprecated browser APIs.", "evidence": "Lighthouse records an uncaught adsbygoogle error, three deprecation warnings, and three BFCache failure reasons.", "artifacts": [ "evidence/lighthouse-summary.json" ], "suggestedFix": "Fix or isolate the ad slot sizing error, update/remove scripts using deprecated storage/ad APIs, and avoid unnecessary no-store responses that block BFCache.", "effort": "medium" }, { "id": "F012", "pathId": "home", "url": "https://www.croxyproxy.com/", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "Images lack intrinsic dimensions and responsive delivery.", "evidence": "Both image audits report missing width/height and srcset; the 700px PNG logo is displayed at 340px and Lighthouse flags the logo as unsized.", "artifacts": [ "evidence/images.json", "evidence/article-images.json", "evidence/lighthouse-summary.json" ], "suggestedFix": "Set width and height (or aspect-ratio), export an SVG/modern raster logo, and provide responsive sources where raster assets vary by density.", "effort": "medium" }, { "id": "F013", "pathId": "home", "url": "https://www.croxyproxy.com/", "principleId": "be-discoverable", "principleCheckId": "crawlable-and-mobile-friendly", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "Important quick links are not crawlable and indexing signals are incomplete.", "evidence": "Lighthouse finds proxy quick links implemented with data-href rather than href. robots.txt exists, but /sitemap.xml returns the branded not-found page and inspected pages expose no canonical URL.", "artifacts": [ "evidence/lighthouse-summary.json", "evidence/robots.json", "evidence/sitemap.json", "evidence/article-meta.json" ], "suggestedFix": "Use real href attributes with JS enhancement, publish a valid sitemap, and add self-referencing canonicals plus hreflang across localised variants.", "effort": "medium" }, { "id": "F014", "pathId": "article", "url": "https://www.croxyproxy.com/blog/posts/the-differences-between-proxy-and-vpn-services", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "Article pages omit structured data and social-preview metadata.", "evidence": "The representative article has a descriptive title and meta description but no JSON-LD and no Open Graph tags.", "artifacts": [ "evidence/article-meta.json", "evidence/blog-article.png" ], "suggestedFix": "Add accurate Article JSON-LD and Open Graph/Twitter metadata matching the visible title, description, image, locale, and canonical URL.", "effort": "medium" }, { "id": "F015", "pathId": "home", "url": "https://www.croxyproxy.com/", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "security", "severity": "high", "confidence": "high", "summary": "Security policy and cookie defaults are weaker than the service promise warrants.", "evidence": "CSP allows unsafe-inline and unsafe-eval; X-Frame-Options/frame-ancestors, Referrer-Policy, and Permissions-Policy are absent. Four analytics/consent cookies are not Secure and all seven cookies use SameSite=None.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "suggestedFix": "Move to nonce/hash-based CSP, set frame-ancestors, Referrer-Policy and a restrictive Permissions-Policy, and set Secure plus the narrowest viable SameSite/HttpOnly cookie attributes.", "effort": "medium" }, { "id": "F016", "pathId": "home", "url": "https://www.croxyproxy.com/", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "privacy", "severity": "high", "confidence": "high", "summary": "The privacy footprint is disproportionate to the simple proxy-entry page.", "evidence": "The tracker probe sees 13 third-party origins and known Google trackers; HAR attributes 1.80MB of 1.88MB to third parties, while the consent UI describes 210 partners and precise-geolocation use.", "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json", "evidence/consent-dom.json" ], "suggestedFix": "Default to no non-essential collection, reduce vendors and duplicate analytics IDs, batch essential telemetry, and load advertising/sharing only after explicit consent.", "effort": "medium" }, { "id": "F017", "pathId": "home", "url": "https://www.croxyproxy.com/", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkeys", "guidanceCategory": "passkeys", "severity": "medium", "confidence": "high", "summary": "Sign-in is password-only and lacks autofill tokens.", "evidence": "The exercised sign-in modal contains email/password fields with empty autocomplete attributes and no WebAuthn/Passkey capability in the loaded document.", "artifacts": [ "evidence/signin-probe.json" ], "suggestedFix": "Add username/current-password tokens immediately and offer passkeys/WebAuthn as the phishing-resistant primary or upgrade path.", "effort": "medium" }, { "id": "F018", "pathId": "home", "url": "https://www.croxyproxy.com/", "principleId": "be-trustworthy", "principleCheckId": "no-dark-patterns", "guidanceId": "custom-button-actions", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "Consent choice architecture favours acceptance over refusal.", "evidence": "The initial dialog offers a one-click Consent button but no equal Reject button, despite listing 210 partners, legitimate-interest processing, and precise geolocation.", "artifacts": [ "evidence/home-desktop.png", "evidence/consent-dom.json" ], "suggestedFix": "Offer Reject all beside Accept all with equal prominence, use privacy-preserving defaults, and avoid forcing optional consent to reach the primary service.", "effort": "medium" }, { "id": "F019", "pathId": "feedback", "url": "https://www.croxyproxy.com/feedback/form", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-sign-in-form", "guidanceCategory": "forms", "severity": "medium", "confidence": "high", "summary": "Account and support inputs omit useful autocomplete assistance.", "evidence": "Feedback email and sign-in email/password fields all report empty autocomplete values; sign-in is password-only.", "artifacts": [ "evidence/feedback-form-probe.json", "evidence/signin-probe.json" ], "suggestedFix": "Use email, username, current-password, and relevant support-form autocomplete tokens, then add passkeys and clear account/cancellation controls.", "effort": "medium" }, { "id": "F020", "pathId": "home", "url": "https://www.croxyproxy.com/", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "deprioritize-background-fetches", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "Third-party scripts and media consume most of the page budget without serving the core form.", "evidence": "HAR attributes 96% of transferred bytes to third parties; GTM, Font Awesome, ads, consent, feedback, sharing, and fonts dominate a simple URL-entry page.", "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "suggestedFix": "Set a page-weight/third-party budget, remove duplicate analytics and oversized icon libraries, self-host/subset fonts, and defer optional vendors until needed and consented.", "effort": "medium" }, { "id": "F021", "pathId": "home", "url": "https://www.croxyproxy.com/", "principleId": "be-memory-efficient", "principleCheckId": "bounded-footprint", "guidanceId": "manage-recurring-intervals", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "medium", "summary": "The idle memory footprint is heavy for a mostly static entry page.", "evidence": "The baseline heap summary contains 461,255 V8 nodes and 29.5MB self size, including 132,916 native nodes and 27,666 closures. Repeating the language toggle did not grow DOM nodes, so this is footprint rather than a demonstrated leak.", "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot", "evidence/repeat-interaction-dom.json" ], "suggestedFix": "Remove redundant vendor bundles, lazy-load consent/vendor detail UI, and track heap/DOM budgets in repeated-session tests.", "effort": "medium" } ], "taskList": [ { "id": "T001", "title": "Make consent non-blocking, symmetric, and privacy-minimal", "priority": 1, "findingIds": [ "F004", "F006", "F016", "F018" ], "guidanceId": "privacy", "status": "open" }, { "id": "T002", "title": "Remove duplicate/optional third-party bundles and enforce a page budget", "priority": 2, "findingIds": [ "F007", "F008", "F020" ], "guidanceId": "identify-heavy-scripts", "status": "open" }, { "id": "T003", "title": "Harden CSP, browser policies, and cookie attributes", "priority": 3, "findingIds": [ "F015" ], "guidanceId": "security", "status": "open" }, { "id": "T004", "title": "Fix contrast, focus visibility, targets, and landmarks", "priority": 4, "findingIds": [ "F001", "F005", "F009", "F010" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T005", "title": "Reserve image/UI space and optimise responsive assets", "priority": 5, "findingIds": [ "F007", "F012" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T006", "title": "Repair crawlable links, sitemap, canonical, hreflang, and article metadata", "priority": 6, "findingIds": [ "F013", "F014" ], "guidanceId": "html", "status": "open" }, { "id": "T007", "title": "Add autofill tokens and passkey-capable authentication", "priority": 7, "findingIds": [ "F017", "F019" ], "guidanceId": "passkeys", "status": "open" }, { "id": "T008", "title": "Fix console/deprecation/BFCache hygiene", "priority": 8, "findingIds": [ "F011" ], "guidanceId": "html", "status": "open" }, { "id": "T009", "title": "Add preference-aware theming and restrained modern navigation cues", "priority": 9, "findingIds": [ "F001", "F002", "F003" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T010", "title": "Set and monitor a proportionate heap/DOM budget", "priority": 10, "findingIds": [ "F021" ], "guidanceId": "manage-recurring-intervals", "status": "open" } ], "budget": { "pathCount": 9, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-21T22-53-40-646Z" }