{ "url": "https://sexmupxinh.net", "auditedAt": "2026-07-22T23:09:30.000Z", "mode": "report", "status": "completed", "statusDetail": "Atomic coverage complete across 58 checks and five representative path archetypes.", "page": { "appType": "mpa", "framework": "server-rendered custom/PHP-style MPA", "notes": "Vietnamese adult-video catalogue with listing, category, search, detail/player, and error templates." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "trace", "har", "discoverability", "images", "headers", "cookies", "trackers", "secrets", "lighthouse", "heap-summary", "direct-http" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "css", "brand-consistent-forms", "adapt-scrollbar-to-contrast-preferences", "accessibility", "directional-navigation-transitions", "carousel-slide-effects", "scrollytelling", "same-document-transitions", "cross-document-transitions", "consistent-cross-document-transitions", "group-element-transitions", "scroll-entry-exit-effects", "shrinking-header-on-scroll", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "stack-drill-down", "swipe-to-remove", "navigation-drawer", "scroll-position-aware-elements", "scrollability-affordance-hints", "scroll-target-on-load", "position-aware-tooltips", "interest-triggered-tooltips", "persistent-toast-notifications", "persistent-app-tours", "resilient-context-menus-and-nested-dropdowns", "carousel-snap-highlights", "pull-to-reveal", "highlight-text-ranges", "declarative-dialog-popover-control", "persistent-top-layer-ui", "search-hidden-content", "light-dismiss-a-dialog", "html", "animate-to-from-top-layer", "defer-rendering-heavy-content", "performance", "improve-text-layout-and-legibility", "efficient-background-processing", "css-layout", "size-aware-styling", "forms", "fluid-scaling", "interactive-content-reveal", "interest-triggered-action-previews", "declarative-button-actions", "capture-location-agnostic-data", "passkey-reauthentication", "accessible-error-announcement", "required-field-feedback", "stabilize-reactive-state", "webmcp", "optimize-preload-priority", "identify-inp-causes", "optimize-image-priority", "visually-stable-mixed-fonts", "visually-stable-font-fallbacks", "calculate-with-intrinsic-sizes", "schedule-tasks-by-priority", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "reduce-style-repetition", "style-parent-with-has", "branded-select-styling", "precise-text-alignment", "autofill-sign-in-form", "security", "agentic-forms", "passkey-conditional-create", "validate-input-after-interaction", "deliver-optimized-decorative-images", "shaped-cutouts", "translator", "language-detection", "summarizer", "language-model", "passkey-management", "privacy", "passkey-authentication", "passkey-registration", "full-session-analytics", "passkeys", "physics-based-easing", "parallax-scroll-effects", "detect-initial-visibility-state", "batch-analytics-events", "support-global-calendar-systems", "calculate-event-differentials", "manage-recurring-intervals", "model-partial-time-concepts", "coordinate-global-events", "sequence-distributed-events", "select-menu-interaction", "autofill-payment-form", "autofill-address-form", "autofill-sign-up-form", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "agentic-javascript-tools", "faster-spa-view-transitions", "animate-to-intrinsic-sizes", "move-dom-element-without-losing-state" ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "Homepage at 360×800 showing responsive two-column listing.", "condition": "viewport: 360x800", "findingIds": [ "F03", "F10", "F12" ] }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "Homepage desktop first viewport.", "condition": "desktop", "findingIds": [ "F01" ] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "Homepage under prefers-color-scheme: dark; visually/byte identical to default.", "condition": "prefers-color-scheme: dark", "findingIds": [ "F01" ] }, { "type": "screenshot", "path": "evidence/home-forced-colors.png", "caption": "Homepage under forced-colors, retaining visible controls and text.", "condition": "forced-colors: active", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-delayed.png", "caption": "Homepage after 12 seconds, with no obscuring interstitial.", "condition": "12-second load", "findingIds": [ "F18" ] }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "Mobile layout metrics: no overflow, CLS, or long tasks.", "condition": "viewport: 360x800", "findingIds": [ "F12" ] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "Compact performance trace summary.", "condition": "desktop load", "findingIds": [ "F06" ] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "Compact HAR summary for 45 requests and 1.03 MB transferred.", "condition": "5-second load", "findingIds": [ "F07", "F08", "F18", "F23", "F24" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-home.json", "caption": "Lighthouse mobile quality report.", "condition": "mobile simulated", "findingIds": [ "F06", "F07", "F08", "F10", "F13", "F14", "F23", "F24" ] }, { "type": "other", "path": "evidence/images.json", "caption": "Image audit covering dimensions, format, srcset, lazy loading, and alt.", "condition": "homepage", "findingIds": [ "F07", "F13", "F23" ] }, { "type": "other", "path": "evidence/platform-probe.json", "caption": "DOM/platform feature, metadata, target-size, and form probe.", "condition": "homepage", "findingIds": [ "F02", "F03", "F12", "F22" ] }, { "type": "other", "path": "evidence/focus-probe.json", "caption": "Computed focus-style probe for the search field.", "condition": "keyboard focus", "findingIds": [ "F03", "F11" ] }, { "type": "other", "path": "evidence/reduced-motion-probe.json", "caption": "Reduced-motion animation/transition probe.", "condition": "prefers-reduced-motion: reduce", "findingIds": [] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "Raw HTML versus rendered discoverability report.", "condition": "JavaScript on/off", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "Crawler-view screenshot with JavaScript disabled.", "condition": "JavaScript disabled", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "Rendered browser-view discoverability screenshot.", "condition": "JavaScript enabled", "findingIds": [] }, { "type": "other", "path": "evidence/headers.json", "caption": "Security response-header audit.", "condition": "homepage", "findingIds": [ "F17", "F19" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "Cookie security and retention audit.", "condition": "homepage", "findingIds": [ "F17" ] }, { "type": "other", "path": "evidence/trackers.json", "caption": "Third-party and known-tracker audit.", "condition": "homepage", "findingIds": [ "F18", "F24" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "Client-side secret scan; no findings.", "condition": "homepage", "findingIds": [] }, { "type": "other", "path": "evidence/http-signals.txt", "caption": "robots.txt, sitemap, redirect, and final 404 response evidence.", "condition": "direct HTTP", "findingIds": [ "F15" ] }, { "type": "screenshot", "path": "evidence/detail-mobile.png", "caption": "Detail page at 360×800 showing failed player surface.", "condition": "viewport: 360x800", "findingIds": [ "F02", "F04", "F05", "F09", "F20", "F21" ] }, { "type": "screenshot", "path": "evidence/detail-desktop.png", "caption": "Detail page desktop showing failed player surface.", "condition": "desktop", "findingIds": [ "F04", "F20" ] }, { "type": "other", "path": "evidence/detail-probe.json", "caption": "Detail metadata/player/control semantics probe.", "condition": "detail page", "findingIds": [ "F04", "F05", "F09", "F16", "F20" ] }, { "type": "screenshot", "path": "evidence/category-mobile.png", "caption": "Representative category listing at mobile size.", "condition": "viewport: 360x800", "findingIds": [] }, { "type": "screenshot", "path": "evidence/search-results-mobile.png", "caption": "Representative successful search results.", "condition": "viewport: 360x800", "findingIds": [] }, { "type": "screenshot", "path": "evidence/search-no-results-mobile.png", "caption": "No-results state with clear message.", "condition": "viewport: 360x800", "findingIds": [ "F21" ] }, { "type": "screenshot", "path": "evidence/404-mobile.png", "caption": "404 state with recovery navigation.", "condition": "viewport: 360x800", "findingIds": [ "F21" ] }, { "type": "heap", "path": "evidence/heap-detail-baseline.json", "caption": "Baseline detail-page heap summary.", "condition": "before repeated server toggles", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-detail-post.json", "caption": "Post-interaction heap summary after ten server toggles.", "condition": "after 10 toggles", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "The platform probe found no color-scheme declaration or prefers-color-scheme rule, and default and dark-emulated screenshots are byte-identical (229,260 bytes).", "pathIds": [ "homepage" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dark.png" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "Under emulated prefers-reduced-motion: reduce, matchMedia was true and the page exposed no active animations or transition elements.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/reduced-motion-probe.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "The forced-colors capture retained visible text, controls, current navigation state, and content boundaries.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/home-forced-colors.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "CSS/DOM inspection found no view-transition-name, @view-transition, or startViewTransition usage across the listing and detail templates.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/platform-probe.json", "evidence/detail-mobile.png" ], "findingIds": [ "F02" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon and representative-path DOM inspection", "evidence": "The representative templates contain no parallax, scrollytelling, or scroll-linked animation to implement. No scroll handlers or animation timelines were observed.", "reason": "No scroll-linked motion exists on the audited templates." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "Mobile navigation uses native horizontal overflow and content uses normal document scrolling; no custom pointer handlers fight platform gestures.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/home-mobile.png", "evidence/platform-probe.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon and representative-path DOM inspection", "evidence": "The templates have no sticky or affixed chrome whose state needs to react to scrolling.", "reason": "No sticky/affixed interface is present." }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon and representative-path DOM inspection", "evidence": "No tooltip, popover, or floating menu was present in the representative paths.", "reason": "No anchored overlay exists on these templates." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "Current navigation is visually highlighted, detail pages name the selected item above the player, and search results repeat the query as the section heading.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/home-mobile.png", "evidence/detail-mobile.png", "evidence/search-results-mobile.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "Initial and 12-second delayed screenshots show no interstitial, modal, or banner obscuring core content.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-delayed.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon and representative-path DOM inspection", "evidence": "No visible transient overlay or disclosure control was present during representative loads.", "reason": "No overlay/disclosure primitive is used in the observed UI." }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "The listing and detail templates reserve most post-header space for thumbnails or the player, with compact navigation and controls.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/home-mobile.png", "evidence/detail-mobile.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "At 360×800 the layout primitive reported scrollWidth=clientWidth=360, zero horizontal overflow, and a valid viewport meta tag.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon and representative-path DOM inspection", "evidence": "Cards appear in one grid context per viewport and are not reused simultaneously in differently sized containers; viewport adaptation is already evidenced separately.", "reason": "No component is reused across independently sized containers on the audited templates." }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "The focused search field computed to outline: none and no box-shadow. The submit control measured 32×28 px and the text input 170×28 px, below the 44×44 CSS-pixel target guidance.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/focus-probe.json", "evidence/platform-probe.json", "evidence/home-mobile.png" ], "findingIds": [ "F03" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "The homepage immediately identifies a new-video listing; cards are direct links, search is visible, and detail pages place the player directly beneath the title.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/home-mobile.png", "evidence/detail-mobile.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "medium", "method": "Targeted visual/DOM/CDP evidence", "evidence": "After 5 seconds on the detail page at desktop and mobile sizes, the 16:9 player showed a broken-document icon. The iframe URL was present, but the core playback surface did not render.", "pathIds": [ "detail", "homepage" ], "artifacts": [ "evidence/detail-mobile.png", "evidence/detail-desktop.png", "evidence/detail-probe.json" ], "findingIds": [ "F04" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "issues", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "The detail screenshot shows only the browser broken-resource icon; there is no status text, retry action, or accessible error announcement near the player.", "pathIds": [ "detail", "homepage" ], "artifacts": [ "evidence/detail-mobile.png", "evidence/detail-probe.json" ], "findingIds": [ "F05" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Lighthouse plus corroborating first-party evidence", "evidence": "Lighthouse measured LCP at 3.0 s (score 0.77), above the 2.5 s good threshold, although the local trace measured 1.11 s and TBT remained low.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-trace-summary.json" ], "findingIds": [ "F06" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "The mobile layout observer recorded CLS 0 with no shifts over five seconds; thumbnail dimensions reserve grid space.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/home-mobile-layout.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "Lighthouse plus corroborating first-party evidence", "evidence": "The trace and layout observers found zero long tasks and total blocking time of 0–10.5 ms.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-mobile-layout.json", "evidence/lighthouse-home.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Lighthouse plus corroborating first-party evidence", "evidence": "Lighthouse identified a Google font stylesheet with about 812 ms wasted time and estimated 643 KiB image-delivery savings; the HAR transferred 1,026,355 bytes over 45 requests.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-summary.json", "evidence/images.json" ], "findingIds": [ "F07" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Lighthouse plus corroborating first-party evidence", "evidence": "Lighthouse estimated 89 KiB of unused JavaScript: about 70 KiB from Google Tag Manager and 21 KiB from jQuery 3.4.1.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-summary.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "The detail probe found Server controls as clickable list items and rating actions as SPAN elements with tabindex=-1; they are not exposed as operable buttons.", "pathIds": [ "detail", "homepage" ], "artifacts": [ "evidence/detail-probe.json", "evidence/detail-mobile.png" ], "findingIds": [ "F09" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Lighthouse plus corroborating first-party evidence", "evidence": "Lighthouse measured 3.45:1 for white text on the active #ff4141 navigation chip, 3.84:1 for pagination text, and 3.59:1 for the footer link, below 4.5:1.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-mobile.png" ], "findingIds": [ "F10" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "A direct focus probe confirmed document.activeElement was the search input while its computed outline was none and box-shadow was none.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/focus-probe.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "Mobile and desktop captures show readable line spacing and stable two-column reflow; card truncation uses ellipsis without clipping the grid.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/home-mobile.png", "evidence/home-desktop.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "The probe measured the search submit at 32×28 px and many navigation/text links at 40 px or 32 px tall. The viewport itself permits zoom and reflows without horizontal overflow.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/platform-probe.json", "evidence/home-mobile.png", "evidence/home-mobile-layout.json" ], "findingIds": [ "F12" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Lighthouse plus corroborating first-party evidence", "evidence": "Lighthouse’s errors-in-console audit scored 1 with zero logged browser errors.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/lighthouse-home.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Lighthouse plus corroborating first-party evidence", "evidence": "Lighthouse reported displayed ratios around 1.45 versus source ratios around 1.43, while markup declares 320×180 for 500×350 files; the image audit also found 28 oversized images.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/images.json" ], "findingIds": [ "F13" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Lighthouse plus corroborating first-party evidence", "evidence": "Lighthouse reported three deprecations from the Cloudflare challenge script, including Shared Storage and Protected Audience API warnings.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/lighthouse-home.json" ], "findingIds": [ "F14" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "The probe found a descriptive title and meta description; detail pages also use a content-specific title.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/platform-probe.json", "evidence/detail-probe.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "high", "method": "Lighthouse plus corroborating first-party evidence", "evidence": "Lighthouse passed crawlable anchors, link text, robots, and viewport audits; raw content coverage was 100%.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/discoverability.json" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "The fetched robots.txt contains “Sitemap: https:/sexmupxinh.net/sitemap.xml” with only one slash after the scheme, even though /sitemap.xml itself returns 200.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/http-signals.txt" ], "findingIds": [ "F15" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "The detail probe found only BreadcrumbList JSON-LD. The page represents a video and exposes title/description/player information, but no VideoObject entity is provided.", "pathIds": [ "detail", "homepage" ], "artifacts": [ "evidence/detail-probe.json" ], "findingIds": [ "F16" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "The header audit found no CSP or HSTS. Cookie evidence found both _ga cookies lacked Secure, used SameSite=None, and persisted for 400 days.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F17" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "The tracker audit found 8 third-party origins, including Google Tag Manager and Google Analytics. The HAR records third-party scripts and the 12-second screenshot shows no privacy choice.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json", "evidence/home-delayed.png" ], "findingIds": [ "F18" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon and representative-path DOM inspection", "evidence": "No authentication surface or permission request exists on the audited public video/listing flows.", "reason": "The site exposes neither authentication nor permission-gated capability on audited paths." }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "Headers evidence found no clickjacking protection, Referrer-Policy, Permissions-Policy, HSTS, or CSP; only X-Content-Type-Options was present.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F19" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "Discoverability evidence measured 100% raw/rendered content coverage, no JS shell, and matching title/H1/description without JavaScript.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/discoverability.json", "evidence/discoverability-crawler.png", "evidence/discoverability-rendered.png" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "issues", "confidence": "medium", "method": "Targeted visual/DOM/CDP evidence", "evidence": "Across desktop and mobile detail captures, the player iframe rendered a browser failure icon while the surrounding page stayed live; no fallback player or semantic error state replaced it.", "pathIds": [ "detail", "homepage" ], "artifacts": [ "evidence/detail-mobile.png", "evidence/detail-desktop.png", "evidence/detail-probe.json" ], "findingIds": [ "F20" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon and representative-path DOM inspection", "evidence": "This is a public streaming/content MPA rather than an installable app, and playback intrinsically requires network media.", "reason": "Installability/offline playback is not proportionate for this network-dependent content site." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "issues", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "The broken media surface provides neither a timeout message nor retry. By contrast, the tested 404 and empty-search pages do provide clear messages, isolating the gap to playback.", "pathIds": [ "detail", "homepage" ], "artifacts": [ "evidence/detail-mobile.png", "evidence/404-mobile.png", "evidence/search-no-results-mobile.png" ], "findingIds": [ "F21" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "The document correctly declares lang=vi, but the platform probe found no logical CSS properties; the captured stylesheet repeatedly uses left, right, margin-left, and padding-left.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/platform-probe.json" ], "findingIds": [ "F22" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon and representative-path DOM inspection", "evidence": "Audited templates present no dates, numbers, prices, currencies, durations, or calendar values requiring locale formatting.", "reason": "No locale-sensitive data appears on the audited templates." }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon and representative-path DOM inspection", "evidence": "No scheduled events or time-zone-sensitive values appear on audited paths.", "reason": "No time-zone-sensitive data is present." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "No consent wall, confirmshaming, forced continuity, disguised control, or subscription upsell appeared on initial or delayed loads; navigation and outbound actions are visually distinct.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/home-delayed.png", "evidence/home-mobile.png" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon and representative-path DOM inspection", "evidence": "The only form is an optional search field with no invalid/required state. Empty search results are explained clearly.", "reason": "No form with user-validation requirements exists; empty search is a result state, not invalid input." }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "pass", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "The only input is a free-text site search, for which address/payment/sign-in autocomplete tokens do not apply; it accepts text without obstruction.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/platform-probe.json", "evidence/search-results-mobile.png" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon and representative-path DOM inspection", "evidence": "No checkout, subscription, consent, authentication, or account-management flow is exposed on audited paths.", "reason": "No commercial or account flow exists in scope." }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Lighthouse plus corroborating first-party evidence", "evidence": "The image audit found 28 oversized images, 29 images without srcset, 29 legacy-format images, and zero modern-format images. Lighthouse estimated 643 KiB potential image savings.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/images.json", "evidence/lighthouse-home.json", "evidence/home-summary.json" ], "findingIds": [ "F23" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "pass", "confidence": "high", "method": "Targeted visual/DOM/CDP evidence", "evidence": "Trace/layout evidence recorded no long tasks, content is server-rendered, and below-fold thumbnails use lazy loading.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-mobile-layout.json", "evidence/images.json" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Lighthouse plus corroborating first-party evidence", "evidence": "The page contacts 8 third-party origins; Lighthouse attributes about 70 KiB unused JavaScript to GTM and about 21 KiB to jQuery, while the page’s core listing can render server-side without them.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/trackers.json", "evidence/lighthouse-home.json", "evidence/home-summary.json" ], "findingIds": [ "F24" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon and representative-path DOM inspection", "evidence": "No declared intent indicates agent-facing transactions or tools; this public content catalogue has no action requiring WebMCP exposure.", "reason": "No agent-facing capability or developer intent was identified." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon and representative-path DOM inspection", "evidence": "The experience has no summarization or inference task where on-device AI is necessary.", "reason": "No appropriate on-device inference use case was identified." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "Targeted visual/DOM/CDP evidence", "evidence": "After ten real server-control toggles, heap size was 6.49 MB versus 6.24 MB baseline (+4.0%) and node count 137,360 versus 134,929 (+1.8%); this bounded one-pass growth does not indicate an unbounded leak.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/heap-detail-baseline.json", "evidence/heap-detail-post.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "medium", "method": "Targeted visual/DOM/CDP evidence", "evidence": "The detail page baseline heap was 6.24 MB across 134,929 nodes, proportionate to a page with an embedded player and scripts.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/heap-detail-baseline.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "Targeted visual/DOM/CDP evidence", "evidence": "Baseline/post heap top constructors contained no Detached* population, and the small node increase after ten toggles did not show a growing detached-DOM signature.", "pathIds": [ "homepage" ], "artifacts": [ "evidence/heap-detail-baseline.json", "evidence/heap-detail-post.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F02" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "pass" }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "pass" }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F04", "F05" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F06", "F07", "F08" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F09", "F10", "F11", "F12" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F13", "F14" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F15", "F16" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F17", "F18", "F19" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F20", "F21" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F22" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "pass" }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F23", "F24" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "No agent-facing capability or developer intent was identified. No appropriate on-device inference use case was identified." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "homepage", "description": "Homepage/new-video listing: primary discovery template and global chrome.", "url": "https://sexmupxinh.net/", "conditions": [ "desktop", "viewport: 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "forced-colors: active", "12-second delayed load" ], "result": "issues" }, { "id": "category", "description": "Japanese category: representative category/listing archetype; other category pages share this template.", "url": "https://sexmupxinh.net/phim-sex-nhat-ban/", "conditions": [ "viewport: 360x800" ], "result": "issues" }, { "id": "search", "description": "Search results plus a no-results query: representative input and empty-state flow.", "url": "https://sexmupxinh.net/search/?do=search&qh=khong", "conditions": [ "successful query", "no-results query", "viewport: 360x800" ], "result": "issues" }, { "id": "detail", "description": "Video detail/player: primary consumption flow and the highest-risk interactive template.", "url": "https://sexmupxinh.net/phim/khong-the-cuong-lai-nguc-to-dam-cua-chi-gai/", "conditions": [ "desktop", "viewport: 360x800", "10 repeated server toggles" ], "result": "issues" }, { "id": "not-found", "description": "Unknown route: representative HTTP/network recovery template and indexing behavior.", "url": "https://sexmupxinh.net/this-route-does-not-exist-web-uplift/", "conditions": [ "viewport: 360x800", "direct HTTP status" ], "result": "pass" } ], "findings": [ { "id": "F01", "pathId": "homepage", "url": "https://sexmupxinh.net/", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "The site is hard-coded to one dark palette instead of following the user’s light/dark preference.", "evidence": "The platform probe found no color-scheme declaration or prefers-color-scheme rule, and default and dark-emulated screenshots are byte-identical (229,260 bytes).", "artifacts": [ "evidence/home-desktop.png", "evidence/home-dark.png" ], "suggestedFix": "Declare color-scheme and define preference-driven light and dark tokens with prefers-color-scheme or light-dark().", "effort": "small" }, { "id": "F02", "pathId": "homepage", "url": "https://sexmupxinh.net/", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "directional-navigation-transitions", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "Route changes and state changes swap abruptly without View Transitions.", "evidence": "CSS/DOM inspection found no view-transition-name, @view-transition, or startViewTransition usage across the listing and detail templates.", "artifacts": [ "evidence/platform-probe.json", "evidence/detail-mobile.png" ], "suggestedFix": "Use cross-document View Transitions for MPA navigation, with directional cues where they clarify forward/back movement.", "effort": "medium" }, { "id": "F03", "pathId": "homepage", "url": "https://sexmupxinh.net/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Keyboard focus is invisible on the search input, and several mobile controls are undersized.", "evidence": "The focused search field computed to outline: none and no box-shadow. The submit control measured 32×28 px and the text input 170×28 px, below the 44×44 CSS-pixel target guidance.", "artifacts": [ "evidence/focus-probe.json", "evidence/platform-probe.json", "evidence/home-mobile.png" ], "suggestedFix": "Add a strong :focus-visible treatment and enlarge interactive hit areas to at least 44×44 CSS px without shrinking visible layout unnecessarily.", "effort": "small" }, { "id": "F04", "pathId": "detail", "url": "https://sexmupxinh.net/phim/khong-the-cuong-lai-nguc-to-dam-cua-chi-gai/", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "performance", "guidanceCategory": "performance", "severity": "high", "confidence": "medium", "summary": "The representative watch flow reaches a broken player instead of playable media.", "evidence": "After 5 seconds on the detail page at desktop and mobile sizes, the 16:9 player showed a broken-document icon. The iframe URL was present, but the core playback surface did not render.", "artifacts": [ "evidence/detail-mobile.png", "evidence/detail-desktop.png", "evidence/detail-probe.json" ], "suggestedFix": "Serve a reliable player endpoint, detect embed/load failure, and offer a first-party fallback or alternate server that users can activate accessibly.", "effort": "medium" }, { "id": "F05", "pathId": "detail", "url": "https://sexmupxinh.net/phim/khong-the-cuong-lai-nguc-to-dam-cua-chi-gai/", "principleId": "support-core-task-success", "principleCheckId": "clear-system-state-and-recovery", "guidanceId": "accessible-error-announcement", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "The failed player state has no explanation or recovery action.", "evidence": "The detail screenshot shows only the browser broken-resource icon; there is no status text, retry action, or accessible error announcement near the player.", "artifacts": [ "evidence/detail-mobile.png", "evidence/detail-probe.json" ], "suggestedFix": "Replace the opaque iframe failure with a monitored loading/error state that explains the problem and offers Retry and alternate-server actions.", "effort": "small" }, { "id": "F06", "pathId": "homepage", "url": "https://sexmupxinh.net/", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Mobile lab LCP exceeds the good threshold.", "evidence": "Lighthouse measured LCP at 3.0 s (score 0.77), above the 2.5 s good threshold, although the local trace measured 1.11 s and TBT remained low.", "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-trace-summary.json" ], "suggestedFix": "Prioritize the actual LCP resource, reduce its bytes, and remove avoidable render-blocking work; verify with repeat mobile Lighthouse and field data.", "effort": "medium" }, { "id": "F07", "pathId": "homepage", "url": "https://sexmupxinh.net/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "performance", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Render-blocking CSS and inefficient image delivery delay useful content.", "evidence": "Lighthouse identified a Google font stylesheet with about 812 ms wasted time and estimated 643 KiB image-delivery savings; the HAR transferred 1,026,355 bytes over 45 requests.", "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-summary.json", "evidence/images.json" ], "suggestedFix": "Remove unused icon-font CSS, inline or preload only critical CSS, and serve correctly sized AVIF/WebP images through srcset/sizes.", "effort": "medium" }, { "id": "F08", "pathId": "homepage", "url": "https://sexmupxinh.net/", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "performance", "severity": "low", "confidence": "high", "summary": "The page ships avoidable unused JavaScript.", "evidence": "Lighthouse estimated 89 KiB of unused JavaScript: about 70 KiB from Google Tag Manager and 21 KiB from jQuery 3.4.1.", "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-summary.json" ], "suggestedFix": "Remove jQuery if native APIs cover its uses, and load analytics only after consent/need with a smaller, deferred integration.", "effort": "medium" }, { "id": "F09", "pathId": "detail", "url": "https://sexmupxinh.net/phim/khong-the-cuong-lai-nguc-to-dam-cua-chi-gai/", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "medium", "confidence": "high", "summary": "Player controls are implemented as non-semantic, non-keyboard controls.", "evidence": "The detail probe found Server controls as clickable list items and rating actions as SPAN elements with tabindex=-1; they are not exposed as operable buttons.", "artifacts": [ "evidence/detail-probe.json", "evidence/detail-mobile.png" ], "suggestedFix": "Use native button elements for server, like, and dislike actions, preserving accessible names, pressed state, and keyboard activation.", "effort": "small" }, { "id": "F10", "pathId": "homepage", "url": "https://sexmupxinh.net/", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "medium", "confidence": "high", "summary": "Several text/control combinations fail WCAG contrast.", "evidence": "Lighthouse measured 3.45:1 for white text on the active #ff4141 navigation chip, 3.84:1 for pagination text, and 3.59:1 for the footer link, below 4.5:1.", "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-mobile.png" ], "suggestedFix": "Adjust foreground/background tokens to reach at least 4.5:1 for normal text and retest all interactive states.", "effort": "small" }, { "id": "F11", "pathId": "homepage", "url": "https://sexmupxinh.net/", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Keyboard users cannot see focus on the search field.", "evidence": "A direct focus probe confirmed document.activeElement was the search input while its computed outline was none and box-shadow was none.", "artifacts": [ "evidence/focus-probe.json" ], "suggestedFix": "Define an obvious, high-contrast :focus-visible ring for all interactive elements; do not suppress the browser outline without a replacement.", "effort": "small" }, { "id": "F12", "pathId": "homepage", "url": "https://sexmupxinh.net/", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "fluid-scaling", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "Touch targets are too small on the mobile template.", "evidence": "The probe measured the search submit at 32×28 px and many navigation/text links at 40 px or 32 px tall. The viewport itself permits zoom and reflows without horizontal overflow.", "artifacts": [ "evidence/platform-probe.json", "evidence/home-mobile.png", "evidence/home-mobile-layout.json" ], "suggestedFix": "Increase hit areas to at least 44×44 CSS px while keeping the fluid two-column layout and user-scalable viewport.", "effort": "small" }, { "id": "F13", "pathId": "homepage", "url": "https://sexmupxinh.net/", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "performance", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Thumbnail dimensions/aspect ratios do not match the delivered images.", "evidence": "Lighthouse reported displayed ratios around 1.45 versus source ratios around 1.43, while markup declares 320×180 for 500×350 files; the image audit also found 28 oversized images.", "artifacts": [ "evidence/lighthouse-home.json", "evidence/images.json" ], "suggestedFix": "Generate thumbnails at the intended aspect ratio and declare matching intrinsic width/height or aspect-ratio values.", "effort": "small" }, { "id": "F14", "pathId": "homepage", "url": "https://sexmupxinh.net/", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "guidanceId": "security", "guidanceCategory": "security", "severity": "low", "confidence": "high", "summary": "A Cloudflare script triggers deprecated API warnings.", "evidence": "Lighthouse reported three deprecations from the Cloudflare challenge script, including Shared Storage and Protected Audience API warnings.", "artifacts": [ "evidence/lighthouse-home.json" ], "suggestedFix": "Update or reconfigure the Cloudflare challenge integration and confirm current scripts no longer invoke deprecated browser APIs.", "effort": "small" }, { "id": "F15", "pathId": "homepage", "url": "https://sexmupxinh.net/", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "robots.txt declares a malformed Sitemap URL.", "evidence": "The fetched robots.txt contains “Sitemap: https:/sexmupxinh.net/sitemap.xml” with only one slash after the scheme, even though /sitemap.xml itself returns 200.", "artifacts": [ "evidence/http-signals.txt" ], "suggestedFix": "Correct the directive to https://sexmupxinh.net/sitemap.xml and validate robots/sitemap consistency after deployment.", "effort": "trivial" }, { "id": "F16", "pathId": "detail", "url": "https://sexmupxinh.net/phim/khong-the-cuong-lai-nguc-to-dam-cua-chi-gai/", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "Video detail pages omit VideoObject structured data.", "evidence": "The detail probe found only BreadcrumbList JSON-LD. The page represents a video and exposes title/description/player information, but no VideoObject entity is provided.", "artifacts": [ "evidence/detail-probe.json" ], "suggestedFix": "Add accurate schema.org VideoObject JSON-LD, including name, description, thumbnailUrl, uploadDate when known, and embedUrl/contentUrl that matches visible content.", "effort": "small" }, { "id": "F17", "pathId": "homepage", "url": "https://sexmupxinh.net/", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "security", "severity": "high", "confidence": "high", "summary": "Important transport defenses are missing and analytics cookies are insecure.", "evidence": "The header audit found no CSP or HSTS. Cookie evidence found both _ga cookies lacked Secure, used SameSite=None, and persisted for 400 days.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "suggestedFix": "Deploy HSTS and a tested CSP, and set analytics cookies Secure with an appropriate SameSite policy and shorter retention.", "effort": "medium" }, { "id": "F18", "pathId": "homepage", "url": "https://sexmupxinh.net/", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "privacy", "severity": "high", "confidence": "high", "summary": "The page loads a broad tracking/third-party footprint without an evident consent choice.", "evidence": "The tracker audit found 8 third-party origins, including Google Tag Manager and Google Analytics. The HAR records third-party scripts and the 12-second screenshot shows no privacy choice.", "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json", "evidence/home-delayed.png" ], "suggestedFix": "Minimize third parties, gate non-essential analytics on informed consent, shorten retention, and document each remaining processor and purpose.", "effort": "medium" }, { "id": "F19", "pathId": "homepage", "url": "https://sexmupxinh.net/", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "guidanceCategory": "security", "severity": "high", "confidence": "high", "summary": "Browser-enforced security policies are largely absent.", "evidence": "Headers evidence found no clickjacking protection, Referrer-Policy, Permissions-Policy, HSTS, or CSP; only X-Content-Type-Options was present.", "artifacts": [ "evidence/headers.json" ], "suggestedFix": "Add frame-ancestors (or X-Frame-Options where needed), strict Referrer-Policy, least-privilege Permissions-Policy, HSTS, and a nonce/hash-based CSP.", "effort": "medium" }, { "id": "F20", "pathId": "detail", "url": "https://sexmupxinh.net/phim/khong-the-cuong-lai-nguc-to-dam-cua-chi-gai/", "principleId": "be-resilient", "principleCheckId": "resilient-runtime-behaviour", "guidanceId": "conditional-async-dependencies", "guidanceCategory": "performance", "severity": "high", "confidence": "medium", "summary": "The embedded player does not degrade robustly when its external runtime fails.", "evidence": "Across desktop and mobile detail captures, the player iframe rendered a browser failure icon while the surrounding page stayed live; no fallback player or semantic error state replaced it.", "artifacts": [ "evidence/detail-mobile.png", "evidence/detail-desktop.png", "evidence/detail-probe.json" ], "suggestedFix": "Treat the embed as an enhancement: monitor it, time out cleanly, and replace it with an accessible fallback plus alternate-server controls implemented as buttons.", "effort": "medium" }, { "id": "F21", "pathId": "detail", "url": "https://sexmupxinh.net/phim/khong-the-cuong-lai-nguc-to-dam-cua-chi-gai/", "principleId": "be-resilient", "principleCheckId": "network-and-http-failure-states", "guidanceId": "persistent-toast-notifications", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "Media/network failure is not translated into a useful recovery state.", "evidence": "The broken media surface provides neither a timeout message nor retry. By contrast, the tested 404 and empty-search pages do provide clear messages, isolating the gap to playback.", "artifacts": [ "evidence/detail-mobile.png", "evidence/404-mobile.png", "evidence/search-no-results-mobile.png" ], "suggestedFix": "Handle iframe/media load errors and timeouts with explicit status, Retry, and alternate-source options while preserving page context.", "effort": "small" }, { "id": "F22", "pathId": "homepage", "url": "https://sexmupxinh.net/", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "css", "guidanceCategory": "css", "severity": "low", "confidence": "high", "summary": "The stylesheet is tied to physical left/right directions.", "evidence": "The document correctly declares lang=vi, but the platform probe found no logical CSS properties; the captured stylesheet repeatedly uses left, right, margin-left, and padding-left.", "artifacts": [ "evidence/platform-probe.json" ], "suggestedFix": "Keep lang=vi and migrate layout-affecting rules to margin-inline, padding-inline, inset-inline, and inline-size so bidi/localized layouts remain viable.", "effort": "medium" }, { "id": "F23", "pathId": "homepage", "url": "https://sexmupxinh.net/", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "optimize-image-priority", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "Almost every thumbnail is oversized, legacy-format, and non-responsive.", "evidence": "The image audit found 28 oversized images, 29 images without srcset, 29 legacy-format images, and zero modern-format images. Lighthouse estimated 643 KiB potential image savings.", "artifacts": [ "evidence/images.json", "evidence/lighthouse-home.json", "evidence/home-summary.json" ], "suggestedFix": "Create AVIF/WebP variants at several widths, emit srcset/sizes, preserve matching intrinsic dimensions, and keep below-fold lazy loading.", "effort": "medium" }, { "id": "F24", "pathId": "homepage", "url": "https://sexmupxinh.net/", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "efficient-background-processing", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Third-party scripts consume bytes without proportionate visible value.", "evidence": "The page contacts 8 third-party origins; Lighthouse attributes about 70 KiB unused JavaScript to GTM and about 21 KiB to jQuery, while the page’s core listing can render server-side without them.", "artifacts": [ "evidence/trackers.json", "evidence/lighthouse-home.json", "evidence/home-summary.json" ], "suggestedFix": "Remove unnecessary third parties, replace jQuery with native code, and defer consented analytics until after core content is interactive.", "effort": "medium" } ], "taskList": [ { "id": "T01", "title": "Make player failure observable and recoverable, with a reliable fallback", "priority": 1, "findingIds": [ "F04", "F05", "F20", "F21" ], "guidanceId": "accessible-error-announcement", "status": "open" }, { "id": "T02", "title": "Deploy CSP/HSTS/clickjacking/privacy policies and secure analytics cookies", "priority": 2, "findingIds": [ "F17", "F18", "F19" ], "guidanceId": "security", "status": "open" }, { "id": "T03", "title": "Generate responsive AVIF/WebP thumbnails with matching intrinsic dimensions", "priority": 3, "findingIds": [ "F07", "F13", "F23" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T04", "title": "Restore visible keyboard focus, semantic media controls, contrast, and 44px targets", "priority": 4, "findingIds": [ "F03", "F09", "F10", "F11", "F12" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T05", "title": "Remove unused jQuery/analytics cost and defer consented third parties", "priority": 5, "findingIds": [ "F08", "F18", "F24" ], "guidanceId": "identify-heavy-scripts", "status": "open" }, { "id": "T06", "title": "Add VideoObject metadata and fix the robots.txt Sitemap URL", "priority": 6, "findingIds": [ "F15", "F16" ], "guidanceId": "html", "status": "open" }, { "id": "T07", "title": "Add preference-driven theming and progressive route transitions", "priority": 7, "findingIds": [ "F01", "F02" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T08", "title": "Adopt logical CSS properties and clear remaining platform warnings", "priority": 8, "findingIds": [ "F14", "F22" ], "guidanceId": "css", "status": "open" } ], "budget": { "pathCount": 5, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-22T23-04-08-295Z" }