{ "url": "https://m.beboo.ru", "auditedAt": "2026-07-23T21:09:51.963Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete audit of public entry, registration state, directory, legal, auth challenge and 404 archetypes. Account creation and authenticated areas were not covered to avoid creating an account.", "page": { "appType": "mpa", "framework": "Server-rendered legacy MPA with JavaScript registration steps", "notes": "Public dating service. /auth presented a Cloudflare verification wall; this was judged as observed flow evidence rather than an audit-wide blocker." }, "evidenceUsed": [ "screenshot", "dom", "layout-metrics", "evaluate-probe", "axe-core", "lighthouse", "trace", "har", "discoverability", "headers", "cookies", "trackers", "images", "secrets", "heap-summary" ], "guidanceConsulted": [ "dark-mode", "accessibility", "forms", "performance", "optimize-script-priority", "persistent-toast-notifications", "security", "privacy", "passkeys", "webmcp", "translator", "manage-recurring-intervals", "same-document-transitions", "scroll-progress-indicator", "size-aware-styling", "html" ], "artifacts": [ { "type": "screenshot", "path": "evidence/404-mobile.png", "caption": "404 mobile", "findingIds": [] }, { "type": "screenshot", "path": "evidence/agreement-mobile.png", "caption": "agreement mobile", "findingIds": [] }, { "type": "dom", "path": "evidence/auth-dom.json", "caption": "auth dom", "findingIds": [ "F06" ] }, { "type": "screenshot", "path": "evidence/auth-mobile.png", "caption": "auth mobile", "findingIds": [ "F06", "F14" ] }, { "type": "other", "path": "evidence/axe-home.json", "caption": "axe home", "findingIds": [ "F09" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "cookies", "findingIds": [ "F12" ] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "discoverability crawler", "findingIds": [ "F15" ] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "discoverability rendered", "findingIds": [ "F15" ] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "discoverability", "findingIds": [ "F15" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "headers", "findingIds": [ "F12" ] }, { "type": "heap", "path": "evidence/heap-baseline.heapsnapshot", "caption": "heap baseline", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-post-repeat.heapsnapshot", "caption": "heap post repeat", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-post.heapsnapshot", "caption": "heap post", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-dark-reduce.png", "caption": "home dark reduce", "findingIds": [ "F01" ] }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "home desktop", "findingIds": [] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "home dom", "findingIds": [ "F04" ] }, { "type": "screenshot", "path": "evidence/home-forced-colors.png", "caption": "home forced colors", "findingIds": [] }, { "type": "layout", "path": "evidence/home-layout-mobile.json", "caption": "home layout mobile", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile", "findingIds": [ "F01", "F09", "F18" ] }, { "type": "other", "path": "evidence/home-probe.json", "caption": "home probe", "findingIds": [ "F10", "F14", "F16", "F18" ] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "home summary", "findingIds": [ "F08", "F13" ] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "home trace summary", "findingIds": [ "F08" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "home trace", "findingIds": [] }, { "type": "har", "path": "evidence/home.har", "caption": "home", "findingIds": [ "F08", "F13" ] }, { "type": "other", "path": "evidence/images.json", "caption": "images", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse-home.json", "caption": "lighthouse home", "findingIds": [ "F09" ] }, { "type": "screenshot", "path": "evidence/listing-mobile.png", "caption": "listing mobile", "findingIds": [ "F03" ] }, { "type": "har-summary", "path": "evidence/memory-summary.json", "caption": "memory summary", "findingIds": [] }, { "type": "other", "path": "evidence/platform-probe.json", "caption": "platform probe", "findingIds": [ "F01", "F02", "F03", "F04", "F05", "F11", "F16", "F17" ] }, { "type": "other", "path": "evidence/registration-error-probe.json", "caption": "registration error probe", "findingIds": [ "F02", "F07", "F10", "F17" ] }, { "type": "screenshot", "path": "evidence/registration-name-step.png", "caption": "registration name step", "findingIds": [] }, { "type": "screenshot", "path": "evidence/registration-step.png", "caption": "registration step", "findingIds": [] }, { "type": "other", "path": "evidence/secrets.json", "caption": "secrets", "findingIds": [] }, { "type": "other", "path": "evidence/trackers.json", "caption": "trackers", "findingIds": [ "F13" ] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Screenshot comparison and computed-style/CSS probe", "evidence": "Dark and light screenshots are pixel-identical; computed color-scheme is normal and CSS has no dark preference rule.", "artifacts": [ "evidence/home-mobile.png", "evidence/home-dark-reduce.png", "evidence/platform-probe.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "medium", "method": "getAnimations and CSS rule probe", "evidence": "The entry page reports no active animations, and its CSS contains no animation that needs reducing.", "artifacts": [ "evidence/home-probe.json", "evidence/platform-probe.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Forced-colors and prefers-contrast screenshot", "evidence": "Forced-colors capture preserves all text, button boundaries, links and app-store controls with system colors.", "artifacts": [ "evidence/home-forced-colors.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Registration DOM interaction and CSS feature probe", "evidence": "The multi-step registration swaps hidden step containers through JavaScript and CSS contains no view-transition usage, producing abrupt state changes.", "artifacts": [ "evidence/registration-error-probe.json", "evidence/platform-probe.json" ], "findingIds": [ "F02" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "DOM/CSS and screenshot inspection", "evidence": "No parallax, reveal, carousel, or other scroll-linked motion exists on the representative pages.", "artifacts": [ "evidence/home-dom.json", "evidence/listing-mobile.png" ], "reason": "No parallax, reveal, carousel, or other scroll-linked motion exists on the representative pages." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "not-applicable", "confidence": "high", "method": "DOM and visual inspection", "evidence": "The audited public surfaces contain no gesture-driven carousel, swipe, pull-to-refresh, or custom pointer interaction.", "artifacts": [ "evidence/home-dom.json", "evidence/listing-mobile.png" ], "reason": "The audited public surfaces contain no gesture-driven carousel, swipe, pull-to-refresh, or custom pointer interaction." }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "medium", "method": "Long-page screenshot and CSS feature probe", "evidence": "The long city listing has static icon chrome and no scroll-state query, progress indicator, or scroll-position feedback.", "artifacts": [ "evidence/listing-mobile.png", "evidence/platform-probe.json" ], "findingIds": [ "F03" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "DOM probe", "evidence": "No tooltip, popover, menu, or other anchored overlay appears on the audited unauthenticated surfaces.", "artifacts": [ "evidence/home-probe.json" ], "reason": "No tooltip, popover, menu, or other anchored overlay appears on the audited unauthenticated surfaces." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "Mobile listing screenshot", "evidence": "The listing highlights the active search tab and uses a clear orange page heading and country heading to orient the user.", "artifacts": [ "evidence/listing-mobile.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "high", "method": "Initial-load screenshots", "evidence": "The entry page loads directly into registration content without an obscuring ad, modal, or consent wall.", "artifacts": [ "evidence/home-mobile.png", "evidence/home-desktop.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "not-applicable", "confidence": "high", "method": "DOM probe", "evidence": "No transient overlay or disclosure control is present on the audited public pages.", "artifacts": [ "evidence/home-probe.json" ], "reason": "No transient overlay or disclosure control is present on the audited public pages." }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "Desktop and mobile screenshots", "evidence": "The entry page is sparse and content-first, while the listing uses one compact four-item navigation bar.", "artifacts": [ "evidence/home-desktop.png", "evidence/listing-mobile.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "Mobile layout metrics", "evidence": "At 390x844 the layout reports scrollWidth 390, clientWidth 390, zero horizontal overflow, and a scalable viewport meta tag.", "artifacts": [ "evidence/home-layout-mobile.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "medium", "method": "CSS feature probe and DOM styles", "evidence": "The stylesheet has no container queries; reused registration and navigation components rely on fixed widths and viewport rules.", "artifacts": [ "evidence/platform-probe.json", "evidence/home-dom.json" ], "findingIds": [ "F04" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Focus walk and target rectangle probe", "evidence": "Programmatically focused visible links and registration controls all compute outline-style none; social controls are only 32x32 CSS pixels.", "artifacts": [ "evidence/platform-probe.json" ], "findingIds": [ "F05" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "First-viewport screenshot", "evidence": "The first viewport clearly states registration and offers two prominent gender choices plus an existing-account route.", "artifacts": [ "evidence/home-mobile.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Auth journey screenshot", "evidence": "The existing-account route is replaced by an indefinite Cloudflare security verification screen in this browser, preventing the login journey.", "artifacts": [ "evidence/auth-mobile.png", "evidence/auth-dom.json" ], "findingIds": [ "F06" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "issues", "confidence": "high", "method": "Invalid form submission probe", "evidence": "The invalid registration probe leaves empty .reg-error elements hidden with no role or aria-live announcement; focus remains on body.", "artifacts": [ "evidence/registration-error-probe.json" ], "findingIds": [ "F07" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "pass", "confidence": "high", "method": "Lighthouse and DevTools trace summary", "evidence": "Lighthouse reports LCP 1.9s, CLS 0 and TBT 10ms; trace reports LCP 1593ms and no long tasks.", "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-trace-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Layout, Lighthouse and image audit", "evidence": "Layout observer and Lighthouse both report CLS 0; the logo image has explicit dimensions.", "artifacts": [ "evidence/home-layout-mobile.json", "evidence/lighthouse-home.json", "evidence/images.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "DevTools trace and Lighthouse", "evidence": "The trace contains zero long tasks and 0ms total blocking time; Lighthouse TBT is 10ms.", "artifacts": [ "evidence/home-trace-summary.json", "evidence/lighthouse-home.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "HAR summary confirmed against script attributes in DOM", "evidence": "The HAR records 356.7KB across 26 requests, with analytics scripts taking about 1.8s and the first-party common script parser-inserted at High priority.", "artifacts": [ "evidence/home-summary.json", "evidence/home-dom.json", "evidence/home.har" ], "findingIds": [ "F08" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "HAR byte attribution", "evidence": "Third-party analytics account for 314KB of 357KB transferred, including both Google and Yandex stacks for a minimal registration screen.", "artifacts": [ "evidence/home-summary.json", "evidence/home.har" ], "findingIds": [ "F08" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Rendered registration DOM and invalid submission probe", "evidence": "Registration name and date/location controls are introduced by nearby headings but have no associated label; error containers have no live-region semantics.", "artifacts": [ "evidence/registration-error-probe.json" ], "findingIds": [ "F07" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "axe-core and Lighthouse", "evidence": "axe and Lighthouse identify 8 serious contrast failures; white on #4d8ec5 is 3.5:1 where 4.5:1 is required.", "artifacts": [ "evidence/axe-home.json", "evidence/lighthouse-home.json", "evidence/home-mobile.png" ], "findingIds": [ "F09" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Keyboard focus probe", "evidence": "The focus walk found outline none on every tested visible control, so keyboard location is not perceivable.", "artifacts": [ "evidence/platform-probe.json" ], "findingIds": [ "F05" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Mobile screenshots", "evidence": "Body copy and headings remain unclipped at 390px; agreement text has readable line length and spacing.", "artifacts": [ "evidence/home-mobile.png", "evidence/agreement-mobile.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Viewport metadata and target rectangle probe", "evidence": "The viewport allows 5x zoom and reflows, but five social-login links are only 32x32 CSS pixels, below the 44x44 target.", "artifacts": [ "evidence/home-probe.json", "evidence/platform-probe.json" ], "findingIds": [ "F05" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Lighthouse", "evidence": "Lighthouse errors-in-console audit passes with no items.", "artifacts": [ "evidence/lighthouse-home.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "pass", "confidence": "high", "method": "Platform probe, Lighthouse and image audit", "evidence": "The document has an HTML doctype and declared charset; Lighthouse passes doctype, charset and aspect ratio, and the image audit finds explicit dimensions.", "artifacts": [ "evidence/platform-probe.json", "evidence/lighthouse-home.json", "evidence/images.json" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "pass", "confidence": "high", "method": "Lighthouse and initial-load screenshot", "evidence": "Lighthouse passes deprecations and BFCache; no permission prompt appeared on load.", "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-mobile.png" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "DOM metadata probe", "evidence": "The page exposes a descriptive Russian title and meta description.", "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "DOM link inventory and platform probe", "evidence": "Primary registration choices are JavaScript-only href=\"#\" links, and several image links have no visible link text despite the viewport and robots file being valid.", "artifacts": [ "evidence/home-probe.json", "evidence/platform-probe.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "pass", "confidence": "high", "method": "Metadata, robots and sitemap probe", "evidence": "The page returned 200, declares the correct canonical, robots permits the entry page and points to successful sitemaps, with no observed noindex.", "artifacts": [ "evidence/home-probe.json", "evidence/platform-probe.json", "evidence/discoverability.json" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Structured metadata probe", "evidence": "Open Graph metadata is present, but there is no JSON-LD or other structured entity data for the public dating service.", "artifacts": [ "evidence/platform-probe.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Headers and cookies primitives", "evidence": "HTTPS is used, but CSP, HSTS and nosniff are absent; SESSIONID is neither Secure nor HttpOnly and all seven cookies use SameSite=None.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Tracker and HAR primitives", "evidence": "The minimal entry screen contacts seven third-party origins and loads Google/DoubleClick plus Yandex analytics before consent.", "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json", "evidence/home.har" ], "findingIds": [ "F13" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "medium", "method": "DOM auth inventory and auth journey", "evidence": "No permission prompt fires on load, but inspected sign-in choices expose federated providers only and no passkey/WebAuthn capability; existing-account auth is bot-gated.", "artifacts": [ "evidence/home-probe.json", "evidence/auth-mobile.png" ], "findingIds": [ "F14" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Headers primitive", "evidence": "X-Frame-Options is present, but HSTS, Referrer-Policy, Permissions-Policy and CSP/frame-ancestors are missing.", "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "issues", "confidence": "high", "method": "Discoverability browser/crawler comparison", "evidence": "The crawler screenshot with JavaScript disabled is blank even though the rendered page contains the entire registration entry experience.", "artifacts": [ "evidence/discoverability-rendered.png", "evidence/discoverability-crawler.png", "evidence/discoverability.json" ], "findingIds": [ "F15" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "medium", "method": "Journey screenshots and Lighthouse console audit", "evidence": "The registration step swap, long listing and 404 state rendered without clipped overlays or uncaught errors in the exercised states.", "artifacts": [ "evidence/home-mobile.png", "evidence/listing-mobile.png", "evidence/404-mobile.png", "evidence/lighthouse-home.json" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "issues", "confidence": "high", "method": "Manifest and service-worker probe", "evidence": "A manifest link exists but navigator.serviceWorker.getRegistrations() returns none, so this app-promoting service has no offline fallback.", "artifacts": [ "evidence/home-probe.json", "evidence/platform-probe.json" ], "findingIds": [ "F16" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "404 journey screenshot", "evidence": "A nonexistent route renders a useful, content-rich not-found state with navigation and alternative profiles rather than a blank shell.", "artifacts": [ "evidence/404-mobile.png" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "DOM/CSS and country-form inspection", "evidence": "html lang is ru, but CSS has no logical-property signal and extensively uses physical left/right positioning despite a global country selector.", "artifacts": [ "evidence/platform-probe.json", "evidence/registration-error-probe.json" ], "findingIds": [ "F17" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "issues", "confidence": "medium", "method": "Registration DOM and language probe", "evidence": "The product offers many countries but the interface remains Russian and the registration DOM shows hand-authored month/country strings with no evidence of locale-aware Intl formatting.", "artifacts": [ "evidence/registration-error-probe.json", "evidence/platform-probe.json" ], "findingIds": [ "F17" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Representative page inspection", "evidence": "No event time, appointment, calendar, or time-zone-sensitive value appears in the audited public registration, listing, legal, or error surfaces.", "artifacts": [ "evidence/home-mobile.png", "evidence/listing-mobile.png", "evidence/agreement-mobile.png" ], "reason": "No event time, appointment, calendar, or time-zone-sensitive value appears in the audited public registration, listing, legal, or error surfaces." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "issues", "confidence": "high", "method": "Metadata and first-viewport comparison", "evidence": "The title and meta promise dating “without registration,” while the first viewport is explicitly a registration gate and the main choices begin account creation.", "artifacts": [ "evidence/home-probe.json", "evidence/home-mobile.png" ], "findingIds": [ "F18" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "issues", "confidence": "high", "method": "Invalid form submission probe", "evidence": "Invalid registration submission does not expose a visible error, move focus to the field, or provide aria-live/role semantics.", "artifacts": [ "evidence/registration-error-probe.json" ], "findingIds": [ "F07" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "pass", "confidence": "high", "method": "Form inventory", "evidence": "Name, birthday and email fields use relevant given-name, bday-* and email autocomplete tokens.", "artifacts": [ "evidence/home-probe.json", "evidence/registration-error-probe.json" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "issues", "confidence": "high", "method": "Auth journey screenshot", "evidence": "The existing-account path cannot reach a sign-in form and remains on Cloudflare verification, leaving no visible recovery or alternative beyond waiting.", "artifacts": [ "evidence/auth-mobile.png" ], "findingIds": [ "F06" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "pass", "confidence": "high", "method": "Image audit", "evidence": "The only img is an appropriately sized SVG with explicit dimensions; image audit finds no oversizing or legacy format.", "artifacts": [ "evidence/images.json" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "HAR and tracker evidence", "evidence": "A minimal static registration screen starts Google, DoubleClick and Yandex analytics, including six redirects and background collection calls.", "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "HAR byte attribution and screenshot", "evidence": "Third parties transfer 314KB of 357KB total (88%), disproportionate to the sparse no-media entry page.", "artifacts": [ "evidence/home-summary.json", "evidence/home-mobile.png" ], "findingIds": [ "F13" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "WebMCP/source signal probe", "evidence": "This public dating entry surface declares no agent-facing capability or agentic workflow, and none is necessary for the audited unauthenticated task.", "artifacts": [ "evidence/platform-probe.json" ], "reason": "This public dating entry surface declares no agent-facing capability or agentic workflow, and none is necessary for the audited unauthenticated task." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Representative task inspection", "evidence": "The audited registration and directory tasks do not present a useful or necessary on-device inference use case.", "artifacts": [ "evidence/home-mobile.png", "evidence/listing-mobile.png" ], "reason": "The audited registration and directory tasks do not present a useful or necessary on-device inference use case." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "Baseline and post-interaction heap comparison", "evidence": "After 10 registration forward/back cycles, heap self size rose 3.2% and nodes 1.35%, a small first-use increase rather than evidence of unbounded growth.", "artifacts": [ "evidence/memory-summary.json", "evidence/heap-baseline.heapsnapshot", "evidence/heap-post-repeat.heapsnapshot" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "medium", "method": "Heap summary comparison", "evidence": "Baseline heap is 7.52MB across 150,143 nodes, proportionate to this small page; post-cycle heap remains 7.76MB.", "artifacts": [ "evidence/memory-summary.json", "evidence/heap-baseline.heapsnapshot", "evidence/heap-post-repeat.heapsnapshot" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "low", "method": "Before/after heap totals", "evidence": "Aggregate nodes increased only 1.35% after repeated real step changes, with no compounding symptom in this bounded sample; constructor-level detached-node evidence was unavailable.", "artifacts": [ "evidence/memory-summary.json", "evidence/heap-baseline.heapsnapshot", "evidence/heap-post-repeat.heapsnapshot" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F02" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "pass" }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F04", "F05" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F06", "F07" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F08" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F07", "F09", "F05" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "pass" }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F10", "F11" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F12", "F13", "F14" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F15", "F16" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F17" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F18", "F07", "F06" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F13" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "Derived from check outcomes." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Public entry and registration gate; primary acquisition surface and first registration state.", "url": "https://m.beboo.ru/", "conditions": [ "390x844", "1440x900", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "forced-colors: active", "keyboard focus", "invalid registration submission", "JavaScript disabled" ], "result": "issues" }, { "id": "directory", "description": "City directory/listing archetype representing public discovery and long-page navigation.", "url": "https://m.beboo.ru/znakomstva", "conditions": [ "390x844" ], "result": "issues" }, { "id": "auth", "description": "Existing-account login journey, a primary account flow.", "url": "https://m.beboo.ru/auth", "conditions": [ "390x844" ], "result": "failed" }, { "id": "legal", "description": "Terms page representing long-form legal/content template.", "url": "https://m.beboo.ru/agreement", "conditions": [ "390x844" ], "result": "pass" }, { "id": "not-found", "description": "Unknown route representing HTTP/navigation recovery state.", "url": "https://m.beboo.ru/does-not-exist-audit", "conditions": [ "390x844" ], "result": "pass" } ], "findings": [ { "id": "F01", "severity": "medium", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "modern-web-guidance", "summary": "No user-preference dark theme", "evidence": "The dark-condition screenshot is pixel-identical to light and computed color-scheme remains normal.", "suggestedFix": "Declare color-scheme: light dark and provide preference-driven surface and text tokens.", "artifacts": [ "evidence/home-mobile.png", "evidence/home-dark-reduce.png", "evidence/platform-probe.json" ], "effort": "small", "confidence": "high", "pathId": "home", "url": "https://m.beboo.ru/" }, { "id": "F02", "severity": "medium", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "same-document-transitions", "guidanceCategory": "modern-web-guidance", "summary": "Registration steps swap abruptly", "evidence": "The registration DOM hides and shows step containers with no view-transition CSS.", "suggestedFix": "Wrap step changes in document.startViewTransition with a no-motion fallback.", "artifacts": [ "evidence/registration-error-probe.json", "evidence/platform-probe.json" ], "effort": "medium", "confidence": "high", "pathId": "home", "url": "https://m.beboo.ru/" }, { "id": "F03", "severity": "low", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "scroll-progress-indicator", "guidanceCategory": "modern-web-guidance", "summary": "Long listings provide no scroll-position feedback", "evidence": "The city directory extends well below the viewport while CSS has no scroll-state or progress affordance.", "suggestedFix": "Keep active context visible and add a lightweight declarative scroll progress or scroll-state treatment.", "artifacts": [ "evidence/listing-mobile.png", "evidence/platform-probe.json" ], "effort": "small", "confidence": "high", "pathId": "home", "url": "https://m.beboo.ru/" }, { "id": "F04", "severity": "low", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "guidanceCategory": "modern-web-guidance", "summary": "Components do not respond to their containers", "evidence": "CSS inspection found no @container rules and fixed-width component styles dominate.", "suggestedFix": "Add container-type to reusable shells and adapt child layout with size container queries.", "artifacts": [ "evidence/platform-probe.json", "evidence/home-dom.json" ], "effort": "medium", "confidence": "high", "pathId": "home", "url": "https://m.beboo.ru/" }, { "id": "F05", "severity": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "summary": "Keyboard focus is invisible and social targets are undersized", "evidence": "Every tested focused control computed outline none; social links measure 32x32 CSS pixels.", "suggestedFix": "Restore a high-contrast :focus-visible ring and enlarge compact social targets to at least 44x44 CSS pixels.", "artifacts": [ "evidence/platform-probe.json" ], "effort": "small", "confidence": "high", "pathId": "home", "url": "https://m.beboo.ru/" }, { "id": "F06", "severity": "high", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "persistent-toast-notifications", "guidanceCategory": "modern-web-guidance", "summary": "Existing-user login is blocked by verification", "evidence": "The /auth journey stays on a Cloudflare “Verifying…” screen with no alternative or recovery.", "suggestedFix": "Tune bot protection for the login route, bound verification time, and expose retry/support recovery.", "artifacts": [ "evidence/auth-mobile.png", "evidence/auth-dom.json" ], "effort": "medium", "confidence": "high", "pathId": "home", "url": "https://m.beboo.ru/" }, { "id": "F07", "severity": "high", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "forms", "guidanceCategory": "modern-web-guidance", "summary": "Registration fields and errors are not accessibly associated", "evidence": "The name input has no label and hidden .reg-error nodes have no role/aria-live; invalid submission leaves focus on body.", "suggestedFix": "Use explicit labels, required semantics, aria-describedby, aria-invalid, and an aria-live error summary after interaction.", "artifacts": [ "evidence/registration-error-probe.json" ], "effort": "medium", "confidence": "high", "pathId": "home", "url": "https://m.beboo.ru/" }, { "id": "F08", "severity": "medium", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-script-priority", "guidanceCategory": "modern-web-guidance", "summary": "Analytics dominate delivery for a sparse page", "evidence": "HAR: 314KB of 357KB is third-party; Google and Yandex scripts each take about 1.8s.", "suggestedFix": "Load analytics after consent/idle, remove duplicate measurement, and defer non-critical first-party scripting.", "artifacts": [ "evidence/home-summary.json", "evidence/home.har", "evidence/home-trace-summary.json" ], "effort": "medium", "confidence": "high", "pathId": "home", "url": "https://m.beboo.ru/" }, { "id": "F09", "severity": "high", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "summary": "Core text and actions fail WCAG AA contrast", "evidence": "axe and Lighthouse report 8 failures at 3.5:1 for white text on #4d8ec5.", "suggestedFix": "Darken the blue surface or change foreground colors to reach at least 4.5:1 for normal text.", "artifacts": [ "evidence/axe-home.json", "evidence/lighthouse-home.json", "evidence/home-mobile.png" ], "effort": "small", "confidence": "high", "pathId": "home", "url": "https://m.beboo.ru/" }, { "id": "F10", "severity": "medium", "principleId": "be-discoverable", "principleCheckId": "crawlable-and-mobile-friendly", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "summary": "Primary action links are JavaScript-only fragments", "evidence": "The two registration choices use href=\"#\" and onclick, so they have no crawlable destination or no-JS action.", "suggestedFix": "Use buttons for state changes or real form submissions/URLs that work before JavaScript enhancement.", "artifacts": [ "evidence/home-probe.json", "evidence/registration-error-probe.json" ], "effort": "small", "confidence": "high", "pathId": "home", "url": "https://m.beboo.ru/" }, { "id": "F11", "severity": "low", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "summary": "Public entity metadata lacks structured data", "evidence": "Open Graph tags exist, but the structured-data probe found no JSON-LD.", "suggestedFix": "Add accurate schema.org Organization/WebSite metadata matching visible content.", "artifacts": [ "evidence/platform-probe.json" ], "effort": "small", "confidence": "high", "pathId": "home", "url": "https://m.beboo.ru/" }, { "id": "F12", "severity": "critical", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "modern-web-guidance", "summary": "Session cookie and browser defenses are unsafe", "evidence": "SESSIONID is not Secure or HttpOnly and uses SameSite=None; CSP, HSTS and nosniff are absent.", "suggestedFix": "Set Secure, HttpOnly and appropriate SameSite on session cookies; deploy HSTS, CSP and nosniff plus explicit referrer/permissions policy.", "artifacts": [ "evidence/cookies.json", "evidence/headers.json" ], "effort": "small", "confidence": "high", "pathId": "home", "url": "https://m.beboo.ru/" }, { "id": "F13", "severity": "high", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "modern-web-guidance", "summary": "Tracking starts before any visible choice", "evidence": "Seven third-party origins load on entry, including Google/DoubleClick and Yandex; they transfer 314KB.", "suggestedFix": "Minimise to one privacy-preserving measurement path, gate non-essential tracking on consent, and shorten retention.", "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json", "evidence/home.har" ], "effort": "medium", "confidence": "high", "pathId": "home", "url": "https://m.beboo.ru/" }, { "id": "F14", "severity": "medium", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkeys", "guidanceCategory": "modern-web-guidance", "summary": "No phishing-resistant sign-in option is exposed", "evidence": "The inspected entry exposes five federated providers but no WebAuthn/passkey path; direct login is bot-gated.", "suggestedFix": "Offer passkey registration/sign-in and retain accessible recovery alongside federated options.", "artifacts": [ "evidence/home-probe.json", "evidence/auth-mobile.png" ], "effort": "large", "confidence": "high", "pathId": "home", "url": "https://m.beboo.ru/" }, { "id": "F15", "severity": "high", "principleId": "be-resilient", "principleCheckId": "progressive-enhancement", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "summary": "The core entry experience is blank without JavaScript", "evidence": "Rendered screenshot shows registration; crawler/no-JS screenshot is entirely blank.", "suggestedFix": "Render the registration entry and meaningful links in server HTML, then enhance step behavior with JavaScript.", "artifacts": [ "evidence/discoverability-rendered.png", "evidence/discoverability-crawler.png", "evidence/discoverability.json" ], "effort": "large", "confidence": "high", "pathId": "home", "url": "https://m.beboo.ru/" }, { "id": "F16", "severity": "medium", "principleId": "be-resilient", "principleCheckId": "offline-and-installable", "guidanceId": "performance", "guidanceCategory": "modern-web-guidance", "summary": "App-like site has no service worker fallback", "evidence": "A manifest is linked, but no service-worker registration exists.", "suggestedFix": "Add an installable manifest audit and a minimal service worker with offline shell/recovery for public routes.", "artifacts": [ "evidence/home-probe.json", "evidence/platform-probe.json" ], "effort": "medium", "confidence": "high", "pathId": "home", "url": "https://m.beboo.ru/" }, { "id": "F17", "severity": "medium", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "translator", "guidanceCategory": "modern-web-guidance", "summary": "Global location support is not translation-ready", "evidence": "The country selector spans many locales, but the UI is fixed Russian and CSS contains physical left/right without logical-property support.", "suggestedFix": "Externalise strings, use locale-aware formatting and CSS logical properties, and test RTL/long translations.", "artifacts": [ "evidence/registration-error-probe.json", "evidence/platform-probe.json" ], "effort": "large", "confidence": "high", "pathId": "home", "url": "https://m.beboo.ru/" }, { "id": "F18", "severity": "high", "principleId": "be-trustworthy", "principleCheckId": "no-dark-patterns", "guidanceId": "forms", "guidanceCategory": "modern-web-guidance", "summary": "“Without registration” claim conflicts with the registration gate", "evidence": "Title/meta promise use without registration while the first screen is headed Registration and begins account creation.", "suggestedFix": "Make acquisition copy match the actual requirement, or provide the promised browse/use path without account creation.", "artifacts": [ "evidence/home-probe.json", "evidence/home-mobile.png" ], "effort": "small", "confidence": "high", "pathId": "home", "url": "https://m.beboo.ru/" } ], "taskList": [ { "id": "T01", "title": "Set Secure, HttpOnly and appropriate SameSite on session cookies; deploy HSTS, CSP and nosniff plus explicit referrer/permissions policy.", "priority": 1, "findingIds": [ "F12" ], "guidanceId": "security", "status": "open" }, { "id": "T02", "title": "Use explicit labels, required semantics, aria-describedby, aria-invalid, and an aria-live error summary after interaction.", "priority": 2, "findingIds": [ "F07" ], "guidanceId": "forms", "status": "open" }, { "id": "T03", "title": "Restore a high-contrast :focus-visible ring and enlarge compact social targets to at least 44x44 CSS pixels.", "priority": 3, "findingIds": [ "F05" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T04", "title": "Darken the blue surface or change foreground colors to reach at least 4.5:1 for normal text.", "priority": 4, "findingIds": [ "F09" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T05", "title": "Render the registration entry and meaningful links in server HTML, then enhance step behavior with JavaScript.", "priority": 5, "findingIds": [ "F15" ], "guidanceId": "html", "status": "open" }, { "id": "T06", "title": "Minimise to one privacy-preserving measurement path, gate non-essential tracking on consent, and shorten retention.", "priority": 6, "findingIds": [ "F13" ], "guidanceId": "privacy", "status": "open" }, { "id": "T07", "title": "Tune bot protection for the login route, bound verification time, and expose retry/support recovery.", "priority": 7, "findingIds": [ "F06" ], "guidanceId": "persistent-toast-notifications", "status": "open" }, { "id": "T08", "title": "Make acquisition copy match the actual requirement, or provide the promised browse/use path without account creation.", "priority": 8, "findingIds": [ "F18" ], "guidanceId": "forms", "status": "open" }, { "id": "T09", "title": "Load analytics after consent/idle, remove duplicate measurement, and defer non-critical first-party scripting.", "priority": 9, "findingIds": [ "F08" ], "guidanceId": "optimize-script-priority", "status": "open" }, { "id": "T10", "title": "Offer passkey registration/sign-in and retain accessible recovery alongside federated options.", "priority": 10, "findingIds": [ "F14" ], "guidanceId": "passkeys", "status": "open" }, { "id": "T11", "title": "Externalise strings, use locale-aware formatting and CSS logical properties, and test RTL/long translations.", "priority": 11, "findingIds": [ "F17" ], "guidanceId": "translator", "status": "open" }, { "id": "T12", "title": "Add an installable manifest audit and a minimal service worker with offline shell/recovery for public routes.", "priority": 12, "findingIds": [ "F16" ], "guidanceId": "performance", "status": "open" }, { "id": "T13", "title": "Use buttons for state changes or real form submissions/URLs that work before JavaScript enhancement.", "priority": 13, "findingIds": [ "F10" ], "guidanceId": "html", "status": "open" }, { "id": "T14", "title": "Declare color-scheme: light dark and provide preference-driven surface and text tokens.", "priority": 14, "findingIds": [ "F01" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T15", "title": "Wrap step changes in document.startViewTransition with a no-motion fallback.", "priority": 15, "findingIds": [ "F02" ], "guidanceId": "same-document-transitions", "status": "open" }, { "id": "T16", "title": "Add container-type to reusable shells and adapt child layout with size container queries.", "priority": 16, "findingIds": [ "F04" ], "guidanceId": "size-aware-styling", "status": "open" }, { "id": "T17", "title": "Add accurate schema.org Organization/WebSite metadata matching visible content.", "priority": 17, "findingIds": [ "F11" ], "guidanceId": "html", "status": "open" }, { "id": "T18", "title": "Keep active context visible and add a lightweight declarative scroll progress or scroll-state treatment.", "priority": 18, "findingIds": [ "F03" ], "guidanceId": "scroll-progress-indicator", "status": "open" } ], "budget": { "pathCount": 5, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-23T21-09-51-963Z" }