{ "url": "https://arabxn.sex", "auditedAt": "2026-07-24T06:08:43.350Z", "mode": "report", "status": "completed", "statusDetail": "Atomic coverage complete. Six representative paths/templates were inspected; account, signup, payment, support modal and exhaustive pagination were not covered because they were absent from primary public navigation or outside the anonymous core journey.", "page": { "appType": "mpa", "framework": "Server-rendered PHP-style MPA with jQuery-era client scripts", "notes": "Public Arabic adult-video catalogue. Server HTML contains all primary content. Representative coverage includes home, latest listing, category directory, search empty state, video detail/playback and 404 recovery." }, "evidenceUsed": [ "screenshot", "dom", "layout-metrics", "evaluate-probe", "trace", "har", "discoverability", "headers", "cookies", "trackers", "secrets", "images", "heap-summary", "lighthouse", "curl-http-status", "Modern Web Guidance 0.0.172" ], "guidanceConsulted": [ "accessibility", "accessible-error-announcement", "adapt-scrollbar-to-contrast-preferences", "agentic-forms", "agentic-javascript-tools", "anchor-positioning-tab-underline", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "animated-select-picker", "apply-webgl-shaders", "autofill-address-form", "autofill-highlight-inputs", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "batch-analytics-events", "brand-consistent-forms", "branded-select-styling", "break-up-long-tasks", "calculate-event-differentials", "calculate-total-foreground-time", "calculate-with-intrinsic-sizes", "capture-location-agnostic-data", "carousel-slide-effects", "carousel-snap-highlights", "child-state-based-styling", "complex-shapes", "component-specific-light-dark-theme", "conditional-async-dependencies", "consistent-cross-document-transitions", "content-based-styling", "coordinate-global-events", "cross-document-transitions", "css", "css-layout", "custom-select-picker-layouts", "customize-scrollbar-color-and-thickness", "dark-mode", "declarative-button-actions", "declarative-dialog-popover-control", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "deliver-optimized-decorative-images", "deprioritize-background-fetches", "design-token-reactivity", "detect-initial-visibility-state", "directional-navigation-transitions", "dynamic-sibling-animations", "dynamic-sibling-styling", "efficient-background-processing", "export-html-media-from-canvas", "expose-canvas-content-to-browser-features", "faster-spa-view-transitions", "flicker-free-client-side-ab-testing", "fluid-scaling", "form-fields-automatically-fit-contents", "format-human-readable-durations", "forms", "full-session-analytics", "group-element-transitions", "highlight-text-ranges", "html", "identify-heavy-scripts", "identify-inp-causes", "improve-next-page-load-performance", "improve-text-layout-and-legibility", "individual-transform-properties", "interactions-in-complex-layouts", "interactive-content-in-3d-scenes", "interactive-content-reveal", "interest-triggered-action-previews", "interest-triggered-tooltips", "language-detection", "language-model", "light-dismiss-a-dialog", "manage-recurring-intervals", "model-partial-time-concepts", "move-dom-element-without-losing-state", "navigation-drawer", "optimize-image-priority", "optimize-preload-priority", "optimize-script-priority", "overflow-clipping-control", "parallax-scroll-effects", "passkey-authentication", "passkey-conditional-create", "passkey-management", "passkey-reauthentication", "passkey-registration", "passkeys", "performance", "persistent-app-tours", "persistent-toast-notifications", "persistent-top-layer-ui", "physics-based-easing", "platform-controls-dismiss-dialog", "position-aware-tooltips", "precise-text-alignment", "prevent-text-wrapping", "privacy", "pull-to-reveal", "reduce-style-repetition", "required-field-feedback", "resilient-context-menus-and-nested-dropdowns", "resolution-optimized-pseudo-elements", "rich-media-picker", "same-document-transitions", "schedule-tasks-by-priority", "scroll-entry-exit-effects", "scroll-position-aware-elements", "scroll-progress-indicator", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "scrollability-affordance-hints", "scrollytelling", "search-hidden-content", "security", "select-menu-interaction", "sequence-distributed-events", "shaped-cutouts", "shrinking-header-on-scroll", "size-aware-styling", "soft-edge-content-fade", "stabilize-reactive-state", "stack-drill-down", "style-parent-with-has", "summarizer", "support-global-calendar-systems", "swipe-to-remove", "translator", "validate-input-after-interaction", "visually-stable-font-fallbacks", "visually-stable-mixed-fonts", "visually-texture-content", "webmcp" ], "artifacts": [ { "type": "screenshot", "path": "evidence/categories-mobile.png", "caption": "Audit evidence: categories-mobile.png", "findingIds": [], "condition": "viewport: 360x800" }, { "type": "other", "path": "evidence/categories-probe.json", "caption": "Audit evidence: categories-probe.json", "findingIds": [ "F16" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "Audit evidence: cookies.json", "findingIds": [ "F14" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "Audit evidence: headers.json", "findingIds": [ "F14" ] }, { "type": "heap", "path": "evidence/heap-after-nav.heapsnapshot", "caption": "Audit evidence: heap-after-nav.heapsnapshot", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-baseline.heapsnapshot", "caption": "Audit evidence: heap-baseline.heapsnapshot", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-contrast.png", "caption": "Audit evidence: home-contrast.png", "findingIds": [], "condition": "prefers-contrast: more; forced-colors: active; viewport: 360x800" }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "Audit evidence: home-dark.png", "findingIds": [ "F01" ], "condition": "prefers-color-scheme: dark; viewport: 360x800" }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "Audit evidence: home-desktop.png", "findingIds": [ "F03", "F15" ] }, { "type": "screenshot", "path": "evidence/home-discoverability-crawler.png", "caption": "Audit evidence: home-discoverability-crawler.png", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-discoverability-rendered.png", "caption": "Audit evidence: home-discoverability-rendered.png", "findingIds": [] }, { "type": "discoverability", "path": "evidence/home-discoverability.json", "caption": "Audit evidence: home-discoverability.json", "findingIds": [] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "Audit evidence: home-dom.json", "findingIds": [ "F16" ] }, { "type": "layout", "path": "evidence/home-layout-mobile.json", "caption": "Audit evidence: home-layout-mobile.json", "findingIds": [], "condition": "viewport: 360x800" }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "Audit evidence: home-mobile.png", "findingIds": [ "F01", "F03", "F09", "F11" ], "condition": "viewport: 360x800" }, { "type": "other", "path": "evidence/home-recon.json", "caption": "Audit evidence: home-recon.json", "findingIds": [] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "Audit evidence: home-summary.json", "findingIds": [ "F05", "F06", "F15" ] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "Audit evidence: home-trace-summary.json", "findingIds": [ "F06" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "Audit evidence: home-trace.json", "findingIds": [] }, { "type": "har", "path": "evidence/home.har", "caption": "Audit evidence: home.har", "findingIds": [ "F06", "F15" ] }, { "type": "other", "path": "evidence/images.json", "caption": "Audit evidence: images.json", "findingIds": [ "F11" ] }, { "type": "screenshot", "path": "evidence/latest-mobile.png", "caption": "Audit evidence: latest-mobile.png", "findingIds": [], "condition": "viewport: 360x800" }, { "type": "other", "path": "evidence/latest-probe.json", "caption": "Audit evidence: latest-probe.json", "findingIds": [ "F16" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-home-summary.json", "caption": "Audit evidence: lighthouse-home-summary.json", "findingIds": [ "F06", "F07", "F08", "F09", "F10", "F11", "F12", "F13" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-home.json", "caption": "Audit evidence: lighthouse-home.json", "findingIds": [] }, { "type": "other", "path": "evidence/motion-modern-css.json", "caption": "Audit evidence: motion-modern-css.json", "findingIds": [] }, { "type": "other", "path": "evidence/platform-focus-css-probe.json", "caption": "Audit evidence: platform-focus-css-probe.json", "findingIds": [ "F01", "F02", "F03", "F04", "F08", "F10", "F13", "F15", "F16" ] }, { "type": "other", "path": "evidence/robots-headers.txt", "caption": "Audit evidence: robots-headers.txt", "findingIds": [] }, { "type": "other", "path": "evidence/robots.txt", "caption": "Audit evidence: robots.txt", "findingIds": [] }, { "type": "screenshot", "path": "evidence/search-mobile.png", "caption": "Audit evidence: search-mobile.png", "findingIds": [], "condition": "viewport: 360x800" }, { "type": "other", "path": "evidence/search-probe.json", "caption": "Audit evidence: search-probe.json", "findingIds": [ "F16" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "Audit evidence: secrets.json", "findingIds": [] }, { "type": "other", "path": "evidence/sitemap-headers.txt", "caption": "Audit evidence: sitemap-headers.txt", "findingIds": [] }, { "type": "other", "path": "evidence/sitemap.xml", "caption": "Audit evidence: sitemap.xml", "findingIds": [] }, { "type": "other", "path": "evidence/trackers.json", "caption": "Audit evidence: trackers.json", "findingIds": [ "F05", "F15" ] }, { "type": "screenshot", "path": "evidence/video-detail-mobile.png", "caption": "Audit evidence: video-detail-mobile.png", "findingIds": [ "F05" ], "condition": "viewport: 360x800" }, { "type": "other", "path": "evidence/video-detail-probe.json", "caption": "Audit evidence: video-detail-probe.json", "findingIds": [] }, { "type": "screenshot", "path": "evidence/video-mobile.png", "caption": "Audit evidence: video-mobile.png", "findingIds": [], "condition": "viewport: 360x800" }, { "type": "other", "path": "evidence/video-playback-flow.log", "caption": "Audit evidence: video-playback-flow.log", "findingIds": [ "F05" ] }, { "type": "other", "path": "evidence/video-player-controls.json", "caption": "Audit evidence: video-player-controls.json", "findingIds": [] }, { "type": "other", "path": "evidence/video-probe.json", "caption": "Audit evidence: video-probe.json", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "The dark-mode screenshot is identical to the default mobile screenshot; the CSS probe reports colorScheme=\"normal\" and no prefers-color-scheme, light-dark(), or color-scheme signal.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png", "evidence/home-mobile.png", "evidence/platform-focus-css-probe.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "evaluate under emulated reduced motion", "evidence": "No active animations were returned under prefers-reduced-motion: reduce; the interface is effectively motion-free.", "pathIds": [ "home" ], "artifacts": [ "evidence/motion-modern-css.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "forced-colors screenshot review", "evidence": "The forced-colors/high-contrast screenshot preserves all visible controls, images and text with strong system colors.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-contrast.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "CSS inspection across the homepage styles found no view-transition rules; navigation is a conventional MPA with no transition treatment.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-focus-css-probe.json" ], "findingIds": [ "F02" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "pass", "confidence": "high", "method": "visual review and stylesheet probe", "evidence": "The static catalogue has no scroll-linked parallax/reveal interaction, and CSS inspection found no scroll timelines to misuse.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-focus-css-probe.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "high", "method": "mobile interaction/DOM review", "evidence": "No custom swipe, drag, pull-to-refresh, or other gesture-driven UI is present; standard browser scrolling is retained.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "pass", "confidence": "high", "method": "mobile visual and CSS review", "evidence": "Header chrome scrolls away normally rather than remaining affixed or using JavaScript scroll toggles; no state-aware sticky chrome is needed on this short-control header.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "pass", "confidence": "high", "method": "DOM overlay probe across representative paths", "evidence": "No tooltip, popover, or edge-positioned menu was present on load across sampled templates, so no manually drifting overlay was observed.", "pathIds": [ "latest" ], "artifacts": [ "evidence/latest-probe.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "representative screenshots and heading probes", "evidence": "Each sampled template presents a page heading and visually distinct cards; search and 404 states keep users oriented with clear state text.", "pathIds": [ "search" ], "artifacts": [ "evidence/search-mobile.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "high", "method": "load screenshot review", "evidence": "Desktop and mobile load screenshots show content immediately with no load-time modal, banner, or content-obscuring interstitial.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "pass", "confidence": "high", "method": "DOM overlay/control probes", "evidence": "No overlay or disclosure was present in the sampled states; search and category controls use native form/button elements.", "pathIds": [ "latest" ], "artifacts": [ "evidence/latest-probe.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "mobile screenshot review", "evidence": "The mobile viewport is dominated by the video cards or directory content; the header occupies about 140 px and contains only identity, search, and navigation.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "layout primitive and mobile screenshots", "evidence": "At 360×800 the layout reports scrollWidth=clientWidth=360, horizontalOverflowPx=0, with a viewport meta present; screenshots show cards reflowing to one column.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-layout-mobile.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "The CSS probe found no @container or container-type declarations although the same card/list components appear in main and sidebar contexts.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-focus-css-probe.json", "evidence/home-desktop.png", "evidence/home-mobile.png" ], "findingIds": [ "F03" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "A scripted focus walk over the first 20 controls reported outline styles such as “none 3px” and boxShadow=\"none\" for every sampled link, input, and button.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-focus-css-probe.json" ], "findingIds": [ "F04" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "first viewport and heading review", "evidence": "The Arabic title/headings and first-view video grid make the catalogue purpose and selectable video actions immediately apparent.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "medium", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "The CDP playback attempt clicked .fp-play and then failed with “Inspected target navigated or closed”; the network evidence includes a.pemsrv.com/popunder1000.js and s.pemsrv.com/venor.php.", "pathIds": [ "video" ], "artifacts": [ "evidence/video-detail-mobile.png", "evidence/video-playback-flow.log", "evidence/home-summary.json", "evidence/trackers.json" ], "findingIds": [ "F05" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "search and 404 state review", "evidence": "A zero-result search explicitly says no data is available, and the 404 page clearly labels the error while offering related videos.", "pathIds": [ "search" ], "artifacts": [ "evidence/search-mobile.png" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "pass", "confidence": "high", "method": "Lighthouse plus DevTools trace", "evidence": "Lighthouse measured LCP 2.1 s, CLS 0 and TBT 0 ms; trace measured LCP 1.92 s and TBT 8.65 ms, all in good lab ranges.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "layout and image primitives", "evidence": "The mobile layout observer recorded CLS 0 with no shifts; all 24 images have explicit dimensions.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-layout-mobile.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "trace and Lighthouse", "evidence": "Trace recorded one 58.65 ms task and only 8.65 ms total blocking time; Lighthouse TBT was 0 ms.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "Lighthouse estimates 370 ms render-blocking savings and 79 KiB cache-lifetime savings; the HAR confirms parser-inserted high-priority CSS and a classic main.min.js without async/defer/module.", "pathIds": [ "home" ], "artifacts": [ "evidence/home.har", "evidence/home-summary.json", "evidence/lighthouse-home-summary.json", "evidence/home-trace-summary.json" ], "findingIds": [ "F06" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "Lighthouse reports about 41 KiB unused JavaScript, 16 KiB unused CSS, 4 KiB unminified CSS, and 9 KiB legacy JavaScript.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json" ], "findingIds": [ "F07" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "Lighthouse reports an unnamed navigation button and no main landmark; the DOM probe independently found one unnamed button, seven empty links, and zero main/[role=main] elements.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/platform-focus-css-probe.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "Lighthouse measured a 1.99:1 ratio for #3f3f3f text on #000000, below the required 4.5:1 for the 12–14 px metadata.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/home-mobile.png" ], "findingIds": [ "F09" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "A scripted focus walk over the first 20 controls reported outline styles such as “none 3px” and boxShadow=\"none\" for every sampled link, input, and button. Lighthouse reports an unnamed navigation button and no main landmark; the DOM probe independently found one unnamed button, seven empty links, and zero main/[role=main] elements.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-focus-css-probe.json", "evidence/lighthouse-home-summary.json" ], "findingIds": [ "F04", "F08" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "mobile screenshot review", "evidence": "Primary titles and card labels remain readable without clipping on 360 px layouts; the specific low-contrast metadata is separately recorded under sufficient-contrast.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "The live viewport meta is width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0; Lighthouse fails the user-scaling audit.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/platform-focus-css-probe.json" ], "findingIds": [ "F10" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Lighthouse console audit", "evidence": "Lighthouse’s errors-in-console audit passed with no logged browser errors.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "All 24 audited images lack srcset; nine loaded images are JPEG, and Lighthouse flags 336×189 thumbnails rendered at 392×221 with a 588×332 density-adjusted target.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json", "evidence/lighthouse-home-summary.json", "evidence/home-mobile.png" ], "findingIds": [ "F11" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "Lighthouse reports CacheControlNoStoreHTTPOnlyCookieModified as the actionable BFCache blocker.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "DOM metadata probes across paths", "evidence": "Homepage, listing, category, search, video and error templates all expose descriptive titles and meta descriptions.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "Lighthouse identifies the Support control as without href; the DOM probe also found seven empty links.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/platform-focus-css-probe.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "pass", "confidence": "high", "method": "metadata probes plus robots/sitemap and HTTP status", "evidence": "Public templates return successfully with self-referencing canonicals; robots.txt allows public content and a sitemap index is present. The tested missing route returns HTTP 404.", "pathIds": [ "home" ], "artifacts": [ "evidence/robots.txt" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "pass", "confidence": "high", "method": "video/listing metadata probe", "evidence": "The video detail includes VideoObject JSON-LD and matching Open Graph title/image/type; listing pages expose matching Open Graph metadata.", "pathIds": [ "video" ], "artifacts": [ "evidence/video-detail-probe.json" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "Headers evidence shows no CSP, HSTS, X-Content-Type-Options, Referrer-Policy, or Permissions-Policy. Cookies evidence shows PHPSESSID and kt_tcookie without Secure, and PHPSESSID without HttpOnly.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F14" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "The HAR records 39,515 third-party bytes, including a.pemsrv.com/popunder1000.js; the runtime also loads Cloudflare Zaraz and s.pemsrv.com/venor.php, while no consent surface was observed.", "pathIds": [ "home" ], "artifacts": [ "evidence/home.har", "evidence/home-summary.json", "evidence/trackers.json", "evidence/platform-focus-css-probe.json", "evidence/home-desktop.png" ], "findingIds": [ "F15" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "pass", "confidence": "high", "method": "Lighthouse permission audits and route recon", "evidence": "Lighthouse confirms no geolocation or notification request on load; no authentication UI is exposed on the representative public routes.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home.json" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "Headers evidence shows no CSP, HSTS, X-Content-Type-Options, Referrer-Policy, or Permissions-Policy. Cookies evidence shows PHPSESSID and kt_tcookie without Secure, and PHPSESSID without HttpOnly.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F14" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "no-JS/raw HTML comparison", "evidence": "Discoverability found 100% raw/rendered content coverage, title/H1/description in server HTML, and no JavaScript shell.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-discoverability.json" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "issues", "confidence": "medium", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "The CDP playback attempt clicked .fp-play and then failed with “Inspected target navigated or closed”; the network evidence includes a.pemsrv.com/popunder1000.js and s.pemsrv.com/venor.php.", "pathIds": [ "video" ], "artifacts": [ "evidence/video-detail-mobile.png", "evidence/video-playback-flow.log", "evidence/home-summary.json", "evidence/trackers.json" ], "findingIds": [ "F05" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Check-specific applicability judgement from representative-route recon.", "evidence": "This public video catalogue is a content MPA rather than an installable app; playback is intrinsically network-dependent, so PWA install/offline media support is not required.", "reason": "This public video catalogue is a content MPA rather than an installable app; playback is intrinsically network-dependent, so PWA install/offline media support is not required." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "error/search state screenshots", "evidence": "The custom 404 page clearly states the page is unavailable and offers related content; search has an explicit zero-results state rather than a blank shell.", "pathIds": [ "error" ], "artifacts": [ "evidence/video-mobile.png" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "Every sampled route has with no dir despite Arabic content. The stylesheet probe found only 3 logical-property matches versus 178 physical left/right properties.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json", "evidence/latest-probe.json", "evidence/categories-probe.json", "evidence/search-probe.json", "evidence/platform-focus-css-probe.json" ], "findingIds": [ "F16" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "pass", "confidence": "medium", "method": "representative screenshot/DOM review", "evidence": "Visible relative dates and counts are rendered in Arabic presentation on all listing templates; no currency or user-entered locale-sensitive data is present.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Check-specific applicability judgement from representative-route recon.", "evidence": "The representative pages expose no events, appointments, user-entered times, or time-zone-sensitive scheduling concepts.", "reason": "The representative pages expose no events, appointments, user-entered times, or time-zone-sensitive scheduling concepts." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "issues", "confidence": "medium", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "The CDP playback attempt clicked .fp-play and then failed with “Inspected target navigated or closed”; the network evidence includes a.pemsrv.com/popunder1000.js and s.pemsrv.com/venor.php.", "pathIds": [ "video" ], "artifacts": [ "evidence/video-detail-mobile.png", "evidence/video-playback-flow.log", "evidence/home-summary.json", "evidence/trackers.json" ], "findingIds": [ "F05" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "pass", "confidence": "high", "method": "search flow probe", "evidence": "The only public form is search; a valid zero-result query preserves the entered term and provides a clear empty-state message without blaming the user.", "pathIds": [ "search" ], "artifacts": [ "evidence/search-probe.json" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "not-applicable", "confidence": "high", "method": "Check-specific applicability judgement from representative-route recon.", "evidence": "The audited public routes contain only a search field, not address, payment, sign-in, or sign-up inputs where autocomplete tokens are relevant.", "reason": "The audited public routes contain only a search field, not address, payment, sign-in, or sign-up inputs where autocomplete tokens are relevant." }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "not-applicable", "confidence": "high", "method": "Check-specific applicability judgement from representative-route recon.", "evidence": "No checkout, subscription, consent, authentication, or account-management flow was exposed on the representative public routes.", "reason": "No checkout, subscription, consent, authentication, or account-management flow was exposed on the representative public routes." }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "All 24 audited images lack srcset; nine loaded images are JPEG, and Lighthouse flags 336×189 thumbnails rendered at 392×221 with a 588×332 density-adjusted target.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json", "evidence/lighthouse-home-summary.json", "evidence/home-mobile.png" ], "findingIds": [ "F11" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "The HAR records 39,515 third-party bytes, including a.pemsrv.com/popunder1000.js; the runtime also loads Cloudflare Zaraz and s.pemsrv.com/venor.php, while no consent surface was observed.", "pathIds": [ "home" ], "artifacts": [ "evidence/home.har", "evidence/home-summary.json", "evidence/trackers.json", "evidence/platform-focus-css-probe.json", "evidence/home-desktop.png" ], "findingIds": [ "F15" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, network, Lighthouse or interaction evidence as described in the linked finding.", "evidence": "The HAR records 39,515 third-party bytes, including a.pemsrv.com/popunder1000.js; the runtime also loads Cloudflare Zaraz and s.pemsrv.com/venor.php, while no consent surface was observed.", "pathIds": [ "home" ], "artifacts": [ "evidence/home.har", "evidence/home-summary.json", "evidence/trackers.json", "evidence/platform-focus-css-probe.json", "evidence/home-desktop.png" ], "findingIds": [ "F15" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Check-specific applicability judgement from representative-route recon.", "evidence": "No declared agent-facing intent or transactional capability was observed; this emerging capability is optional for this media catalogue.", "reason": "No declared agent-facing intent or transactional capability was observed; this emerging capability is optional for this media catalogue." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Check-specific applicability judgement from representative-route recon.", "evidence": "No user task on the representative routes requires on-device language-model or summarisation inference.", "reason": "No user task on the representative routes requires on-device language-model or summarisation inference." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "low", "method": "baseline/post heap summaries around repeated menu toggling", "evidence": "After 20 menu toggles, the post heap summary was smaller than baseline (35,418 vs 87,494 nodes; 1.22 MB vs 5.72 MB self size), so no retained-growth signal appeared, though third-party timing makes confidence low.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-after-nav.heapsnapshot" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "low", "method": "heap summary", "evidence": "Baseline heap totals were 87,494 nodes and 5.72 MB self size, proportionate for the rendered catalogue and third-party scripts.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "low", "method": "before/after heap constructor comparison", "evidence": "Neither baseline nor post top-constructor summaries contain Detached* populations, and repeated menu toggling did not increase total nodes or heap size.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-after-nav.heapsnapshot" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F02" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "pass", "findingIds": [] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "pass", "findingIds": [] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F03", "F04" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F05" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F06", "F07" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F08", "F09", "F04", "F10" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F11", "F12" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F13" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F14", "F15" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F05" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F16" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F05" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F11", "F15" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "No declared agent-facing intent or transactional capability was observed; this emerging capability is optional for this media catalogue. No user task on the representative routes requires on-device language-model or summarisation inference." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass", "findingIds": [] } ], "paths": [ { "id": "home", "description": "Homepage and primary video listing template; tested at desktop/mobile, dark, forced-colors, reduced-motion, keyboard-focus, no-JS, performance, security, network and memory conditions.", "url": "https://arabxn.sex/", "conditions": [ "desktop", "viewport: 360x800", "prefers-color-scheme: dark", "prefers-contrast: more + forced-colors", "prefers-reduced-motion: reduce", "keyboard-only", "JavaScript disabled/crawler view" ], "result": "issues" }, { "id": "latest", "description": "Latest-updates listing archetype, representing paginated/recent video listings.", "url": "https://arabxn.sex/latest-updates/", "conditions": [ "viewport: 360x800" ], "result": "issues" }, { "id": "categories", "description": "Category-directory archetype, representing taxonomy navigation.", "url": "https://arabxn.sex/categories/", "conditions": [ "viewport: 360x800" ], "result": "issues" }, { "id": "search", "description": "Primary search journey with a zero-results state.", "url": "https://arabxn.sex/search/?q=test", "conditions": [ "viewport: 360x800", "zero results" ], "result": "issues" }, { "id": "video", "description": "Video-detail archetype and primary playback action, using the first homepage video.", "url": "https://arabxn.sex/video/91/%D9%85%D8%BA%D8%A7%D9%85%D8%B1%D8%A7%D8%AA-%D8%B3%D9%83%D8%B3-%D9%85%D8%B5%D8%B1%D9%8A-%D9%81%D9%8A-%D8%B4%D9%82%D8%A9-%D9%85%D8%B9-%D8%A3%D8%B5%D8%AF%D9%82%D8%A7%D8%A1-%D9%85%D8%AA%D8%B9%D8%A9-%D8%AC%D8%A7%D9%85%D8%AF%D8%A9-%D8%B3%D9%83%D8%B3/", "conditions": [ "viewport: 360x800", "play control activated" ], "result": "failed" }, { "id": "error", "description": "Invalid video and arbitrary missing-route recovery state; verified the custom 404 page and HTTP status.", "url": "https://arabxn.sex/video/91/", "conditions": [ "viewport: 360x800", "HTTP failure" ], "result": "pass" } ], "findings": [ { "id": "F01", "pathId": "home", "url": "https://arabxn.sex/", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "severity": "medium", "confidence": "high", "summary": "The dark palette is hard-coded rather than tied to the user’s color-scheme preference.", "evidence": "The dark-mode screenshot is identical to the default mobile screenshot; the CSS probe reports colorScheme=\"normal\" and no prefers-color-scheme, light-dark(), or color-scheme signal.", "artifacts": [ "evidence/home-dark.png", "evidence/home-mobile.png", "evidence/platform-focus-css-probe.json" ], "suggestedFix": "Declare supported schemes early with a color-scheme meta/property and derive surfaces from prefers-color-scheme or light-dark(), including an intentional light palette.", "effort": "medium", "guidanceCategory": "user-experience" }, { "id": "F02", "pathId": "home", "url": "https://arabxn.sex/", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "cross-document-transitions", "severity": "low", "confidence": "high", "summary": "Navigation swaps pages abruptly and does not use cross-document View Transitions.", "evidence": "CSS inspection across the homepage styles found no view-transition rules; navigation is a conventional MPA with no transition treatment.", "artifacts": [ "evidence/platform-focus-css-probe.json" ], "suggestedFix": "Add @view-transition { navigation: auto } and stable view-transition-name values for shared header/content elements, with reduced-motion handling.", "effort": "small", "guidanceCategory": "user-experience" }, { "id": "F03", "pathId": "home", "url": "https://arabxn.sex/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "severity": "low", "confidence": "high", "summary": "Reusable cards adapt only through global responsive CSS, not their containing space.", "evidence": "The CSS probe found no @container or container-type declarations although the same card/list components appear in main and sidebar contexts.", "artifacts": [ "evidence/platform-focus-css-probe.json", "evidence/home-desktop.png", "evidence/home-mobile.png" ], "suggestedFix": "Give reusable list/card wrappers an appropriate container-type and move component layout changes into @container queries.", "effort": "medium", "guidanceCategory": "user-experience" }, { "id": "F04", "pathId": "home", "url": "https://arabxn.sex/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "severity": "high", "confidence": "high", "summary": "Keyboard focus is not visibly indicated across primary navigation and search controls.", "evidence": "A scripted focus walk over the first 20 controls reported outline styles such as “none 3px” and boxShadow=\"none\" for every sampled link, input, and button.", "artifacts": [ "evidence/platform-focus-css-probe.json" ], "suggestedFix": "Add a high-contrast :focus-visible treatment with sufficient offset for links, buttons, the search field, menu items, and player controls; verify the full Tab sequence.", "effort": "small", "guidanceCategory": "accessibility" }, { "id": "F05", "pathId": "video", "url": "https://arabxn.sex/video/91/%D9%85%D8%BA%D8%A7%D9%85%D8%B1%D8%A7%D8%AA-%D8%B3%D9%83%D8%B3-%D9%85%D8%B5%D8%B1%D9%8A-%D9%81%D9%8A-%D8%B4%D9%82%D8%A9-%D9%85%D8%B9-%D8%A3%D8%B5%D8%AF%D9%82%D8%A7%D8%A1-%D9%85%D8%AA%D8%B9%D8%A9-%D8%AC%D8%A7%D9%85%D8%AF%D8%A9-%D8%B3%D9%83%D8%B3/", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "privacy", "severity": "high", "confidence": "medium", "summary": "Activating the primary Play control causes an unsolicited navigation/target replacement before playback can be verified.", "evidence": "The CDP playback attempt clicked .fp-play and then failed with “Inspected target navigated or closed”; the network evidence includes a.pemsrv.com/popunder1000.js and s.pemsrv.com/venor.php.", "artifacts": [ "evidence/video-detail-mobile.png", "evidence/video-playback-flow.log", "evidence/home-summary.json", "evidence/trackers.json" ], "suggestedFix": "Remove the popunder/navigation handler from playback. Keep the current tab on the video, start media only from the explicit user gesture, and test play/pause/fullscreen end-to-end.", "effort": "medium", "guidanceCategory": "privacy" }, { "id": "F06", "pathId": "home", "url": "https://arabxn.sex/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "performance", "severity": "medium", "confidence": "high", "summary": "Render-blocking resources and short cache lifetimes add avoidable work to an otherwise fast page.", "evidence": "Lighthouse estimates 370 ms render-blocking savings and 79 KiB cache-lifetime savings; the HAR confirms parser-inserted high-priority CSS and a classic main.min.js without async/defer/module.", "artifacts": [ "evidence/home.har", "evidence/home-summary.json", "evidence/lighthouse-home-summary.json", "evidence/home-trace-summary.json" ], "suggestedFix": "Inline only critical CSS, defer non-critical styles, make non-critical JavaScript deferred/module-based, and use long immutable caching for versioned static assets.", "effort": "medium", "guidanceCategory": "performance" }, { "id": "F07", "pathId": "home", "url": "https://arabxn.sex/", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "severity": "low", "confidence": "high", "summary": "The page ships avoidable unused and legacy code.", "evidence": "Lighthouse reports about 41 KiB unused JavaScript, 16 KiB unused CSS, 4 KiB unminified CSS, and 9 KiB legacy JavaScript.", "artifacts": [ "evidence/lighthouse-home-summary.json" ], "suggestedFix": "Use coverage to split route-specific CSS/JS, remove dead rules and polyfills, minify CSS, and serve a modern bundle to Baseline browsers.", "effort": "medium", "guidanceCategory": "performance" }, { "id": "F08", "pathId": "home", "url": "https://arabxn.sex/", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "severity": "high", "confidence": "high", "summary": "Primary navigation semantics are incomplete.", "evidence": "Lighthouse reports an unnamed navigation button and no main landmark; the DOM probe independently found one unnamed button, seven empty links, and zero main/[role=main] elements.", "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/platform-focus-css-probe.json" ], "suggestedFix": "Give the menu/search icon controls explicit accessible names, ensure icon links have names, and wrap the unique page content in
.", "effort": "small", "guidanceCategory": "accessibility" }, { "id": "F09", "pathId": "home", "url": "https://arabxn.sex/", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "severity": "high", "confidence": "high", "summary": "Muted counts and video metadata do not meet minimum text contrast.", "evidence": "Lighthouse measured a 1.99:1 ratio for #3f3f3f text on #000000, below the required 4.5:1 for the 12–14 px metadata.", "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/home-mobile.png" ], "suggestedFix": "Raise muted text colors to at least 4.5:1 against black and re-test all card metadata, durations, ratings, and footer text.", "effort": "trivial", "guidanceCategory": "accessibility" }, { "id": "F10", "pathId": "home", "url": "https://arabxn.sex/", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "accessibility", "severity": "high", "confidence": "high", "summary": "The viewport declaration prevents mobile users from zooming.", "evidence": "The live viewport meta is width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0; Lighthouse fails the user-scaling audit.", "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/platform-focus-css-probe.json" ], "suggestedFix": "Remove maximum-scale and user-scalable restrictions so browser zoom remains available, then verify 200% and 400% reflow.", "effort": "trivial", "guidanceCategory": "accessibility" }, { "id": "F11", "pathId": "home", "url": "https://arabxn.sex/", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "optimize-image-priority", "severity": "medium", "confidence": "high", "summary": "Listing thumbnails are neither responsive nor consistently sharp at their rendered size.", "evidence": "All 24 audited images lack srcset; nine loaded images are JPEG, and Lighthouse flags 336×189 thumbnails rendered at 392×221 with a 588×332 density-adjusted target.", "artifacts": [ "evidence/images.json", "evidence/lighthouse-home-summary.json", "evidence/home-mobile.png" ], "suggestedFix": "Generate AVIF/WebP responsive variants, publish width descriptors in srcset with accurate sizes, and choose a source large enough for device pixel ratio.", "effort": "medium", "guidanceCategory": "performance" }, { "id": "F12", "pathId": "home", "url": "https://arabxn.sex/", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "guidanceId": "performance", "severity": "low", "confidence": "high", "summary": "The document cannot use the back/forward cache.", "evidence": "Lighthouse reports CacheControlNoStoreHTTPOnlyCookieModified as the actionable BFCache blocker.", "artifacts": [ "evidence/lighthouse-home-summary.json" ], "suggestedFix": "Avoid modifying a session cookie on anonymous read-only pages and replace blanket no-store with cache directives appropriate to public content.", "effort": "medium", "guidanceCategory": "performance" }, { "id": "F13", "pathId": "home", "url": "https://arabxn.sex/", "principleId": "be-discoverable", "principleCheckId": "crawlable-and-mobile-friendly", "guidanceId": "html", "severity": "low", "confidence": "high", "summary": "At least one footer destination is JavaScript-only rather than a crawlable link.", "evidence": "Lighthouse identifies the Support control as without href; the DOM probe also found seven empty links.", "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/platform-focus-css-probe.json" ], "suggestedFix": "Use real href destinations for all navigation, enhancing them with dialog behavior only after the baseline link works.", "effort": "trivial", "guidanceCategory": "html" }, { "id": "F14", "pathId": "home", "url": "https://arabxn.sex/", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "severity": "high", "confidence": "high", "summary": "Transport and browser defenses are incomplete, and session-related cookies are not hardened.", "evidence": "Headers evidence shows no CSP, HSTS, X-Content-Type-Options, Referrer-Policy, or Permissions-Policy. Cookies evidence shows PHPSESSID and kt_tcookie without Secure, and PHPSESSID without HttpOnly.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "suggestedFix": "Add HSTS, a nonce/hash-based CSP, nosniff, strict referrer/permissions policies, and frame-ancestors; mark session cookies Secure, HttpOnly, and appropriate SameSite.", "effort": "medium", "guidanceCategory": "security" }, { "id": "F15", "pathId": "home", "url": "https://arabxn.sex/", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "severity": "high", "confidence": "high", "summary": "Advertising/analytics code runs by default and includes a popunder vendor.", "evidence": "The HAR records 39,515 third-party bytes, including a.pemsrv.com/popunder1000.js; the runtime also loads Cloudflare Zaraz and s.pemsrv.com/venor.php, while no consent surface was observed.", "artifacts": [ "evidence/home.har", "evidence/home-summary.json", "evidence/trackers.json", "evidence/platform-focus-css-probe.json", "evidence/home-desktop.png" ], "suggestedFix": "Remove popunder code, minimise analytics, defer non-essential third parties until informed consent where required, and document each vendor’s purpose and retention.", "effort": "medium", "guidanceCategory": "privacy" }, { "id": "F16", "pathId": "home", "url": "https://arabxn.sex/", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "translator", "severity": "high", "confidence": "high", "summary": "Arabic pages declare English and omit RTL direction, while CSS is dominated by physical properties.", "evidence": "Every sampled route has with no dir despite Arabic content. The stylesheet probe found only 3 logical-property matches versus 178 physical left/right properties.", "artifacts": [ "evidence/home-dom.json", "evidence/latest-probe.json", "evidence/categories-probe.json", "evidence/search-probe.json", "evidence/platform-focus-css-probe.json" ], "suggestedFix": "Set lang=\"ar\" and dir=\"rtl\" at the document root, use dir=\"ltr\" only for isolated Latin content, and migrate layout to logical block/inline properties.", "effort": "medium", "guidanceCategory": "built-in-ai" } ], "taskList": [ { "id": "T01", "title": "Remove popunder behavior and make video playback stay in the current tab", "priority": 1, "findingIds": [ "F05" ], "guidanceId": "privacy", "status": "open" }, { "id": "T02", "title": "Restore keyboard and assistive-technology access: names, landmarks, focus, contrast and zoom", "priority": 2, "findingIds": [ "F04", "F08", "F09", "F10" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T03", "title": "Harden security headers and cookies", "priority": 3, "findingIds": [ "F14" ], "guidanceId": "security", "status": "open" }, { "id": "T04", "title": "Remove or consent-gate non-essential advertising and analytics", "priority": 4, "findingIds": [ "F15" ], "guidanceId": "privacy", "status": "open" }, { "id": "T05", "title": "Declare Arabic/RTL correctly and migrate layout to logical properties", "priority": 5, "findingIds": [ "F16" ], "guidanceId": "translator", "status": "open" }, { "id": "T06", "title": "Serve responsive modern thumbnail variants", "priority": 6, "findingIds": [ "F11" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T07", "title": "Reduce render blocking, unused code and anonymous-page BFCache blockers", "priority": 7, "findingIds": [ "F06", "F07", "F12" ], "guidanceId": "performance", "status": "open" }, { "id": "T08", "title": "Honor system color-scheme preferences", "priority": 8, "findingIds": [ "F01" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T09", "title": "Make every navigation destination a real named link", "priority": 9, "findingIds": [ "F13" ], "guidanceId": "html", "status": "open" }, { "id": "T10", "title": "Adopt View Transitions and container queries progressively", "priority": 10, "findingIds": [ "F02", "F03" ], "guidanceId": "cross-document-transitions", "status": "open" } ], "budget": { "pathCount": 6, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-24T05-56-00-529Z" }