# applinkaudit report: demo-shop.example

> Demo report on a fictional sample site.

**Score:** 35/100 · Scanned 2026-10-27T23:14:04.955Z

6 of 9 checks need attention (3 high priority).

- [ ] **apple-app-site-association at /.well-known/** (high): HTTP 301 (redirects to https://www.demo-shop.example/.well-known/apple-app-site-association).
- [ ] **AASA served without a redirect** (high): Redirects to https://www.demo-shop.example/.well-known/apple-app-site-association; Apple does not follow redirects.
- [ ] **AASA is valid JSON with a JSON content type** (medium): Parsed: no; Content-Type: text/html.
- [ ] **Universal Links app IDs are TeamID.bundleID** (high): No applinks app IDs.
- [ ] **Path rules defined with the current components format** (medium): No path rules.
- [ ] **Apple's CDN has a current copy** (medium): No CDN copy (HTTP 404).
- [x] **assetlinks.json served without a redirect** (high): Served with HTTP 200.
- [x] **Android app statement with valid SHA-256 fingerprints** (high): com.demoshop.app: 1 fingerprint(s), 0 malformed.
- [x] **Google's Digital Asset Links API sees your statements** (medium): 1 statement(s) visible to Google.

---
Reads only the public association files on your domain, Apple's public CDN copy and Google's public Digital Asset Links API (up to 5 requests). We cannot see your app's entitlements or intent filters; check those against the pack.