{ "url": "https://www.pornhub.org", "auditedAt": "2026-07-18T16:29:32.298Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete report-mode audit. The .org start URL redirects to .com and presents a mandatory age gate; the gate, underlying homepage, listing/detail templates, login modal, and invalid-route recovery were inspected.", "page": { "appType": "mpa", "framework": "Server-rendered multi-page application with Vue components", "notes": "Public adult-media platform. Initial .org request redirects to .com. Legal age gate and cookie consent precede the underlying feed." }, "evidenceUsed": [ "screenshot", "transition-video", "dom", "layout-metrics", "evaluate-probe", "trace", "har", "lighthouse", "headers", "cookies", "trackers", "secrets", "images", "discoverability", "heap-summary", "raw-http" ], "guidanceConsulted": [ "dark-mode", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "scrollytelling", "physics-based-easing", "shrinking-header-on-scroll", "anchor-positioning-tab-underline", "directional-navigation-transitions", "light-dismiss-a-dialog", "declarative-dialog-popover-control", "complex-shapes", "fluid-scaling", "size-aware-styling", "css", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "identify-inp-causes", "visually-stable-font-fallbacks", "break-up-long-tasks", "optimize-image-priority", "identify-heavy-scripts", "highlight-text-ranges", "move-dom-element-without-losing-state", "security", "html", "search-hidden-content", "language-model", "privacy", "passkeys", "flicker-free-client-side-ab-testing", "resilient-context-menus-and-nested-dropdowns", "passkey-management", "persistent-toast-notifications", "translator", "support-global-calendar-systems", "coordinate-global-events", "autofill-address-form", "autofill-payment-form", "deliver-optimized-decorative-images", "deprioritize-background-fetches", "webmcp", "faster-spa-view-transitions", "manage-recurring-intervals" ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "Desktop age gate", "condition": "viewport 1440x900", "findingIds": [ "F-001", "F-009", "F-012", "F-019", "F-032" ] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "Mobile age gate showing clipping", "condition": "viewport 360x800", "findingIds": [ "F-001", "F-009", "F-012", "F-019", "F-032" ] }, { "type": "video", "path": "evidence/age-gate-flow.mp4", "caption": "Age gate, essential-cookie choice, and content transition", "condition": "desktop interaction", "findingIds": [ "F-003", "F-004", "F-006", "F-008", "F-034" ] }, { "type": "screenshot", "path": "evidence/home-after-gate.png", "caption": "Final frame after entering and choosing essential cookies", "condition": "desktop", "findingIds": [ "F-003", "F-004", "F-006", "F-008", "F-034" ] }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "Mobile overflow and CLS metrics", "condition": "viewport 360x800", "findingIds": [ "F-014" ] }, { "type": "layout", "path": "evidence/home-layout.json", "caption": "Desktop CLS metrics", "condition": "viewport 1440x900", "findingIds": [ "F-014" ] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "Rendered homepage DOM and CSS", "condition": "default", "findingIds": [ "F-010", "F-024", "F-027" ] }, { "type": "dom", "path": "evidence/detail-dom.json", "caption": "Rendered detail-page DOM and CSS", "condition": "default", "findingIds": [ "F-010", "F-024", "F-027" ] }, { "type": "other", "path": "evidence/comprehensive-probe.json", "caption": "Metadata, semantics, focus, targets, CSS and platform probe", "condition": "default", "findingIds": [ "F-002", "F-005", "F-007", "F-011", "F-018", "F-033" ] }, { "type": "other", "path": "evidence/login-modal.json", "caption": "Login form labels and autocomplete probe", "condition": "after age entry", "findingIds": [ "F-035" ] }, { "type": "other", "path": "evidence/login-validation.json", "caption": "Empty login submission validation probe", "condition": "after age entry", "findingIds": [ "F-035" ] }, { "type": "other", "path": "evidence/reduced-motion.json", "caption": "Animation probe", "condition": "prefers-reduced-motion: reduce", "findingIds": [] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "DevTools performance trace", "condition": "cold load", "findingIds": [] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "Compact trace timings and long-task summary", "condition": "cold load", "findingIds": [] }, { "type": "har", "path": "evidence/home.har", "caption": "Network archive", "condition": "cold load", "findingIds": [ "F-015", "F-037", "F-038" ] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "Compact network summary", "condition": "cold load", "findingIds": [ "F-015", "F-037", "F-038" ] }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "Lighthouse performance, accessibility, best-practices and SEO", "condition": "mobile cold load", "findingIds": [ "F-013", "F-016", "F-017", "F-020", "F-021", "F-023" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "Security response headers", "condition": "default", "findingIds": [ "F-028", "F-030" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "Cookie security attributes", "condition": "default", "findingIds": [ "F-028", "F-030" ] }, { "type": "other", "path": "evidence/trackers.json", "caption": "Third-party tracker inventory", "condition": "default", "findingIds": [ "F-029" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "Client secret scan", "condition": "default", "findingIds": [] }, { "type": "other", "path": "evidence/images.json", "caption": "Image dimensions, responsive sources and formats", "condition": "default", "findingIds": [ "F-022", "F-036" ] }, { "type": "discoverability", "path": "evidence/discoverability-home.json", "caption": "Raw HTML versus rendered discoverability", "condition": "homepage", "findingIds": [ "F-031" ] }, { "type": "screenshot", "path": "evidence/discoverability-home-rendered.png", "caption": "Browser-rendered crawler comparison", "condition": "JavaScript enabled", "findingIds": [ "F-031" ] }, { "type": "screenshot", "path": "evidence/discoverability-home-crawler.png", "caption": "Crawler-view comparison", "condition": "JavaScript disabled", "findingIds": [ "F-031" ] }, { "type": "heap", "path": "evidence/heap-baseline.json", "caption": "Baseline heap summary", "condition": "gate state", "findingIds": [ "F-039" ] }, { "type": "heap", "path": "evidence/heap-post.json", "caption": "Post-interaction heap summary", "condition": "entry plus ten focus/scroll cycles", "findingIds": [ "F-039" ] }, { "type": "other", "path": "evidence/robots.txt", "caption": "robots.txt response, which is homepage HTML", "condition": "crawler request", "findingIds": [ "F-025", "F-026" ] }, { "type": "other", "path": "evidence/sitemap.txt", "caption": "sitemap.xml 404 response", "condition": "crawler request", "findingIds": [ "F-025", "F-026" ] }, { "type": "other", "path": "evidence/error-state.json", "caption": "Invalid-route recovery probe", "condition": "invalid URL", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "Light and dark emulation produced byte-identical 99,208-byte screenshots; the DOM/CSS probe found no color-scheme, prefers-color-scheme, or light-dark() usage.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ], "findingIds": [ "F-001" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "Reduced-motion emulation matched true and getAnimations() returned zero active animations during the gate state.", "pathIds": [ "entry" ], "artifacts": [ "evidence/reduced-motion.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "CSS inspection found no prefers-contrast or forced-colors rules, so custom orange, grey, and black controls have no explicit high-contrast adaptation.", "pathIds": [ "entry" ], "artifacts": [ "evidence/comprehensive-probe.json" ], "findingIds": [ "F-002" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "The age-gate interaction video shows the modal disappearing into the content grid without a directional or continuity transition; CSS contains no authored view-transition rules.", "pathIds": [ "entry" ], "artifacts": [ "evidence/age-gate-flow.mp4", "evidence/home-after-gate.png" ], "findingIds": [ "F-003" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "medium", "method": "Recon of representative templates and interactions to determine check-specific applicability.", "evidence": "No parallax, scrollytelling, or entry/exit reveal behavior was observed on the age gate or representative feed state, so there is no scroll-linked effect to implement.", "reason": "No parallax, scrollytelling, or entry/exit reveal behavior was observed on the age gate or representative feed state, so there is no scroll-linked effect to implement." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "not-applicable", "confidence": "medium", "method": "Recon of representative templates and interactions to determine check-specific applicability.", "evidence": "No swipe, pull-to-reveal, carousel, or other gesture-driven primary interaction was present in the audited entry, listing, detail, or login surfaces.", "reason": "No swipe, pull-to-reveal, carousel, or other gesture-driven primary interaction was present in the audited entry, listing, detail, or login surfaces." }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "The post-gate screenshot shows a long card feed with static navigation, while CSS inspection found no scroll-state container query or progress affordance.", "pathIds": [ "entry" ], "artifacts": [ "evidence/age-gate-flow.mp4", "evidence/home-after-gate.png" ], "findingIds": [ "F-004" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "The main navigation exposes multiple dropdown menus, but CSS inspection found no anchor-name, position-anchor, or position-try usage.", "pathIds": [ "entry" ], "artifacts": [ "evidence/comprehensive-probe.json" ], "findingIds": [ "F-005" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "The age-gate flow swaps directly to a dense grid and CSS contains no view-transition, highlight, or scroll-marker styling to orient the user.", "pathIds": [ "entry" ], "artifacts": [ "evidence/age-gate-flow.mp4", "evidence/home-after-gate.png" ], "findingIds": [ "F-006" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "The blocking surface is a legally necessary age gate with clear Enter and Exit actions; cookie controls include an essential-only option.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "DOM inspection found zero dialog, popover, or details elements even though the page uses an age gate, cookie controls, login modal, and dropdowns.", "pathIds": [ "entry" ], "artifacts": [ "evidence/comprehensive-probe.json" ], "findingIds": [ "F-007" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "The post-gate first viewport contains two ad cards and repeated Remove Ads controls among content cards, plus a full-width cookie-choice nag at the bottom.", "pathIds": [ "entry" ], "artifacts": [ "evidence/age-gate-flow.mp4", "evidence/home-after-gate.png" ], "findingIds": [ "F-008" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "At 360x800, the heading, explanatory copy, law-enforcement link, and under-18 button extend beyond the right edge even though the body reports zero horizontal overflow, making the clipped content unreachable.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ], "findingIds": [ "F-009" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "CSS inspection across homepage, listing, and detail templates found no @container or container-type rules despite cards and overlays appearing in several widths.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-dom.json", "evidence/detail-dom.json" ], "findingIds": [ "F-010" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "The focus probe found no outline or box shadow on cookie buttons and search; many visible links are only 15-22px high.", "pathIds": [ "entry" ], "artifacts": [ "evidence/comprehensive-probe.json" ], "findingIds": [ "F-011" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "The first viewport states This is an adult website and presents explicit Enter and Exit actions.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "At 360px, the under-18 exit action and portions of the legal text are clipped off-screen, so the required entry/exit choice is not fully available.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ], "findingIds": [ "F-012" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "The gate explains why progress is blocked and provides Exit, parental-controls, terms, and law-enforcement routes.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "Lighthouse measured LCP 8.8s, FCP 3.9s, TTI 9.7s, and CLS 0.095 (performance score 0.61); the trace independently measured LCP 3.17s.", "pathIds": [ "entry" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F-013" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "The 360px layout observer recorded CLS 0.102 from a shift at about 4.83s; the desktop observer recorded 0.056.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-layout.json" ], "findingIds": [ "F-014" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "Trace recorded zero long tasks and 0ms total blocking time over 6.36s; Lighthouse TBT was 46ms.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-trace.json", "evidence/home-trace-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "HAR captured 173 requests and 5.27MB transferred, including 11 stylesheets, 40 scripts, ten parser/high-priority render-blocking candidates, and a 1.9MB document response.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home.har", "evidence/home-summary.json" ], "findingIds": [ "F-015" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "Lighthouse estimated 288KiB unused JavaScript and 74KiB unused CSS; three tag-manager bundles account for most unused JS.", "pathIds": [ "entry" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F-016" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "Lighthouse found multiple visible ad iframes without titles and a User Icon button whose accessible name does not include its visible Log in label.", "pathIds": [ "entry" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F-017" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "pass", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "Lighthouse color-contrast audit passed; white/grey text and orange controls remain legible against black in captured views.", "pathIds": [ "entry" ], "artifacts": [ "evidence/lighthouse.json" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "The gate has no h1 and the DOM probe found no main/nav landmarks; several cookie and search controls focus with no visible outline.", "pathIds": [ "entry" ], "artifacts": [ "evidence/comprehensive-probe.json" ], "findingIds": [ "F-018" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "The 360px screenshot cuts multiple lines at the right edge, including the heading and legally important age text.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ], "findingIds": [ "F-019" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "Lighthouse found a viewport declaration with maximum-scale=1 and user-scalable=no; the focus probe also found many sub-24px-high targets.", "pathIds": [ "entry" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F-020" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "Lighthouse captured TypeError: Cannot read properties of null (reading addEventListener) in setInstallButton at homepage line 4546.", "pathIds": [ "entry" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F-021" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "The image audit found three images without width/height, 33 without srcset, and 17 legacy-format assets, although doctype and UTF-8 are valid.", "pathIds": [ "entry" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F-022" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "Lighthouse reported an unload listener, deprecated Cast-control CSS, two deprecation warnings, inspector cookie issues, and four BFCache failure reasons.", "pathIds": [ "entry" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F-023" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "Homepage, listing, detail, and login recon all rendered title Pornhub; no meta description was present.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-dom.json", "evidence/detail-dom.json" ], "findingIds": [ "F-024" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "The homepage declares noindex,nofollow, 30 anchors have empty/javascript hrefs, Lighthouse found uncrawlable anchors, and /robots.txt returns the homepage HTML.", "pathIds": [ "entry" ], "artifacts": [ "evidence/robots.txt", "evidence/sitemap.txt" ], "findingIds": [ "F-025" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "The .org URL redirects to .com, the homepage canonical points to .com but also says noindex,nofollow, /robots.txt returns HTML, and /sitemap.xml returns 404.", "pathIds": [ "entry" ], "artifacts": [ "evidence/robots.txt", "evidence/sitemap.txt" ], "findingIds": [ "F-026" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "The inspected video detail rendered no JSON-LD, Open Graph, Twitter, or hreflang metadata and retained the generic Pornhub title.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-dom.json", "evidence/detail-dom.json" ], "findingIds": [ "F-027" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "Headers evidence found no CSP or X-Content-Type-Options; cookies evidence found the rp cookie not Secure and SameSite=None. HSTS is present.", "pathIds": [ "entry" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F-028" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "Tracker capture found 13 third-party origins including Google Tag Manager and DoubleClick; HAR recorded 171 cross-origin requests and 5.27MB before age confirmation.", "pathIds": [ "entry" ], "artifacts": [ "evidence/trackers.json" ], "findingIds": [ "F-029" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "pass", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "No permission prompt appeared on load; the sign-in modal exposes labelled identity-provider and email/password choices with correct email/current-password autocomplete.", "pathIds": [ "entry" ], "artifacts": [ "evidence/login-modal.json", "evidence/login-validation.json" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "Headers evidence found no CSP, nosniff, Referrer-Policy, or Permissions-Policy; X-Frame-Options and HSTS are present.", "pathIds": [ "entry" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F-030" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "Discoverability measured only 30-35% rendered-word coverage in raw HTML; listing/login URLs collapse to the generic homepage/gate and core navigation depends on scripted controls.", "pathIds": [ "entry" ], "artifacts": [ "evidence/discoverability-home.json", "evidence/discoverability-home-rendered.png", "evidence/discoverability-home-crawler.png" ], "findingIds": [ "F-031" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "The required modal clips content on mobile, /login collapses to the homepage gate before entry, and the homepage throws an uncaught listener exception.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ], "findingIds": [ "F-032" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "medium", "method": "Recon of representative templates and interactions to determine check-specific applicability.", "evidence": "This is an intrinsically online streaming and account service; installability/offline playback was not treated as a required core capability.", "reason": "This is an intrinsically online streaming and account service; installability/offline playback was not treated as a required core capability." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "A deliberately invalid route returns the user to the homepage/gate with a usable Home recovery path rather than a blank shell.", "pathIds": [ "entry" ], "artifacts": [ "evidence/error-state.json" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "The page offers many languages and sets lang=en, but has no dir attribute, no logical CSS properties, and at least 16 physical left/right declarations in the inspected CSS.", "pathIds": [ "entry" ], "artifacts": [ "evidence/comprehensive-probe.json" ], "findingIds": [ "F-033" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "medium", "method": "Recon of representative templates and interactions to determine check-specific applicability.", "evidence": "The audited gate, listing, detail shell, and login modal displayed no dates, currencies, or locale-sensitive numbers requiring formatting.", "reason": "The audited gate, listing, detail shell, and login modal displayed no dates, currencies, or locale-sensitive numbers requiring formatting." }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "medium", "method": "Recon of representative templates and interactions to determine check-specific applicability.", "evidence": "No events, schedules, stored times, or recurring time concepts were present in the representative surfaces.", "reason": "No events, schedules, stored times, or recurring time concepts were present in the representative surfaces." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "After Accept Only Essential Cookies, a persistent banner says features may be unavailable and recommends Accept All Cookies, weakening the user’s choice.", "pathIds": [ "entry" ], "artifacts": [ "evidence/age-gate-flow.mp4", "evidence/home-after-gate.png" ], "findingIds": [ "F-034" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "The login modal has email/password autocomplete tokens, but submitting empty fields produced no :invalid elements, no aria-invalid state, no live-region message, and no visible error text.", "pathIds": [ "entry" ], "artifacts": [ "evidence/login-modal.json", "evidence/login-validation.json" ], "findingIds": [ "F-035" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "pass", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "Login inspection found autocomplete=email and autocomplete=current-password, labelled fields, and a password visibility control.", "pathIds": [ "entry" ], "artifacts": [ "evidence/login-modal.json", "evidence/login-validation.json" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "pass", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "The login modal clearly identifies available providers, states regional registration limits, and does not hide a commitment or continuity action.", "pathIds": [ "entry" ], "artifacts": [ "evidence/login-modal.json", "evidence/login-validation.json" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "The image audit found 33 of 37 images without srcset and 17 legacy-format images; three images lack dimensions.", "pathIds": [ "entry" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F-036" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "Before entry, HAR recorded 173 requests, 38 XHR/fetches, 78 images, and 5.27MB; underlying feed assets and analytics are loaded behind the blocking gate.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home.har", "evidence/home-summary.json" ], "findingIds": [ "F-037" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "HAR attributes virtually all transfer from the .org start URL to cross-origin hosts after redirect, including about 1.0MB from TrafficJunky and 468KB from Google Tag Manager.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home.har", "evidence/home-summary.json" ], "findingIds": [ "F-038" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "medium", "method": "Recon of representative templates and interactions to determine check-specific applicability.", "evidence": "No developer intent requests agent-facing commerce or task APIs; exposing adult-content actions to agents would require a separate explicit safety design.", "reason": "No developer intent requests agent-facing commerce or task APIs; exposing adult-content actions to agents would require a separate explicit safety design." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "medium", "method": "Recon of representative templates and interactions to determine check-specific applicability.", "evidence": "No summarisation or language-model task is part of the core audited journey, so on-device inference is not presently applicable.", "reason": "No summarisation or language-model task is part of the core audited journey, so on-device inference is not presently applicable." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "After gate entry plus ten focus/scroll cycles, heap self size fell from 38,438,601 to 38,184,862 bytes; node count rose only 0.16%, with no unbounded growth signal.", "pathIds": [ "entry" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "issues", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "A single age-gated load retained about 38.4MB self size across 587,659 heap nodes and 52,371 closures before the underlying feed was usable.", "pathIds": [ "entry" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post.json" ], "findingIds": [ "F-039" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "high", "method": "Visual inspection plus targeted CDP evidence as described in the linked artifacts.", "evidence": "Before/after heap constructor summaries contained no Detached* population and closures changed from 52,371 to 52,372.", "pathIds": [ "entry" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F-001", "F-002" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F-003" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F-004", "F-005", "F-006" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F-007", "F-008" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F-009", "F-010", "F-011" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F-012" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F-013", "F-014", "F-015", "F-016" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F-017", "F-018", "F-019", "F-020" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F-021", "F-022", "F-023" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F-024", "F-025", "F-026", "F-027" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F-028", "F-029", "F-030" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F-031", "F-032" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F-033" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F-034", "F-035" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F-036", "F-037", "F-038" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "No developer intent requests agent-facing commerce or task APIs; exposing adult-content actions to agents would require a separate explicit safety design. No summarisation or language-model task is part of the core audited journey, so on-device inference is not presently applicable." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "issues", "findingIds": [ "F-039" ] } ], "paths": [ { "id": "entry", "description": "Mandatory age gate and cookie choice, followed by the underlying homepage/feed. Represents the global entry boundary and primary browse surface.", "url": "https://www.pornhub.org", "conditions": [ "desktop 1440x900", "mobile 360x800", "prefers-color-scheme light/dark", "prefers-reduced-motion reduce", "keyboard focus", "cold load" ], "result": "issues" }, { "id": "listing", "description": "Video listing template reached at /video; it redirects through the same gate and represents content indexes.", "url": "https://www.pornhub.com/video", "conditions": [ "mobile 360x800", "raw HTML versus rendered DOM" ], "result": "issues" }, { "id": "detail", "description": "Representative video detail URL discovered from homepage links; used for content metadata and crawlability.", "url": "https://www.pornhub.com/view_video.php?viewkey=ph5e653cd449d46", "conditions": [ "raw HTML versus rendered DOM" ], "result": "issues" }, { "id": "login", "description": "Login modal opened after clearing the age gate; fields, autocomplete, providers, and empty-submit recovery were inspected.", "url": "https://www.pornhub.com/", "conditions": [ "after age confirmation", "empty submit" ], "result": "issues" }, { "id": "error", "description": "Invalid route used to inspect HTTP/navigation recovery behavior.", "url": "https://www.pornhub.com/this-route-does-not-exist-web-uplift", "conditions": [ "invalid route" ], "result": "pass" } ], "findings": [ { "id": "F-001", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "Theme is fixed rather than preference-driven", "evidence": "Light and dark emulation produced byte-identical 99,208-byte screenshots; the DOM/CSS probe found no color-scheme, prefers-color-scheme, or light-dark() usage.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ], "suggestedFix": "Declare color-scheme and map surface tokens through prefers-color-scheme or light-dark().", "effort": "medium" }, { "id": "F-002", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "respect-user-preferences", "principleCheckId": "respects-contrast", "guidanceId": "adapt-scrollbar-to-contrast-preferences", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "High-contrast preferences are not handled", "evidence": "CSS inspection found no prefers-contrast or forced-colors rules, so custom orange, grey, and black controls have no explicit high-contrast adaptation.", "artifacts": [ "evidence/comprehensive-probe.json" ], "suggestedFix": "Add forced-colors and prefers-contrast rules that preserve text, focus, borders, and control affordances.", "effort": "medium" }, { "id": "F-003", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "same-document-transitions", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "State changes are abrupt", "evidence": "The age-gate interaction video shows the modal disappearing into the content grid without a directional or continuity transition; CSS contains no authored view-transition rules.", "artifacts": [ "evidence/age-gate-flow.mp4", "evidence/home-after-gate.png" ], "suggestedFix": "Use a same-document View Transition for the gate-to-content state and retain an instant fallback for reduced motion.", "effort": "medium" }, { "id": "F-004", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "shrinking-header-on-scroll", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "Long-feed navigation is not scroll-state aware", "evidence": "The post-gate screenshot shows a long card feed with static navigation, while CSS inspection found no scroll-state container query or progress affordance.", "artifacts": [ "evidence/age-gate-flow.mp4", "evidence/home-after-gate.png" ], "suggestedFix": "Add a compact sticky header or progress/return affordance driven by scroll-state or CSS scroll-linked state.", "effort": "medium" }, { "id": "F-005", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "provide-guided-navigation", "principleCheckId": "anchored-positioning", "guidanceId": "anchor-positioning-tab-underline", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "Menus do not use resilient anchor positioning", "evidence": "The main navigation exposes multiple dropdown menus, but CSS inspection found no anchor-name, position-anchor, or position-try usage.", "artifacts": [ "evidence/comprehensive-probe.json" ], "suggestedFix": "Progressively enhance dropdowns with CSS anchor positioning and fallback positions.", "effort": "medium" }, { "id": "F-006", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "provide-guided-navigation", "principleCheckId": "directs-attention", "guidanceId": "directional-navigation-transitions", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "Navigation state changes provide little attention guidance", "evidence": "The age-gate flow swaps directly to a dense grid and CSS contains no view-transition, highlight, or scroll-marker styling to orient the user.", "artifacts": [ "evidence/age-gate-flow.mp4", "evidence/home-after-gate.png" ], "suggestedFix": "Add a short directional transition and move focus to the content heading after entry.", "effort": "medium" }, { "id": "F-007", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "Overlays are custom div-based widgets", "evidence": "DOM inspection found zero dialog, popover, or details elements even though the page uses an age gate, cookie controls, login modal, and dropdowns.", "artifacts": [ "evidence/comprehensive-probe.json" ], "suggestedFix": "Use dialog for modal flows and popover/details for transient/disclosure UI, with native focus and light-dismiss behavior.", "effort": "medium" }, { "id": "F-008", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "maximize-content-reduce-noise", "principleCheckId": "reduced-chrome", "guidanceId": "complex-shapes", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "Ads and repeated controls crowd the content grid", "evidence": "The post-gate first viewport contains two ad cards and repeated Remove Ads controls among content cards, plus a full-width cookie-choice nag at the bottom.", "artifacts": [ "evidence/age-gate-flow.mp4", "evidence/home-after-gate.png" ], "suggestedFix": "Reduce repeated ad chrome, reserve fewer premium placements, and collapse repeated actions into one clearly labelled control.", "effort": "medium" }, { "id": "F-009", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "fluid-scaling", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "The mobile age gate is visibly clipped", "evidence": "At 360x800, the heading, explanatory copy, law-enforcement link, and under-18 button extend beyond the right edge even though the body reports zero horizontal overflow, making the clipped content unreachable.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ], "suggestedFix": "Replace fixed-width modal internals with max-inline-size:100%, fluid padding, wrapping button layout, and logical sizing.", "effort": "large" }, { "id": "F-010", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "Reusable UI relies on viewport styling only", "evidence": "CSS inspection across homepage, listing, and detail templates found no @container or container-type rules despite cards and overlays appearing in several widths.", "artifacts": [ "evidence/home-dom.json", "evidence/detail-dom.json" ], "suggestedFix": "Introduce container queries for card grids, navigation groups, and modal action rows.", "effort": "medium" }, { "id": "F-011", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "css", "guidanceCategory": "css", "severity": "high", "confidence": "high", "summary": "Keyboard focus and touch sizing are inconsistent", "evidence": "The focus probe found no outline or box shadow on cookie buttons and search; many visible links are only 15-22px high.", "artifacts": [ "evidence/comprehensive-probe.json" ], "suggestedFix": "Use :focus-visible with a high-contrast ring and provide at least 24x24 CSS px targets, preferably 44x44 for primary mobile controls.", "effort": "large" }, { "id": "F-012", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "forms", "guidanceCategory": "forms", "severity": "high", "confidence": "high", "summary": "The required age-confirmation flow breaks on mobile", "evidence": "At 360px, the under-18 exit action and portions of the legal text are clipped off-screen, so the required entry/exit choice is not fully available.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ], "suggestedFix": "Make the gate a single-column, fully reflowing flow and keep both Enter and Exit controls visible without horizontal clipping.", "effort": "large" }, { "id": "F-013", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "identify-inp-causes", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "Cold-load performance misses the Core Web Vitals bar", "evidence": "Lighthouse measured LCP 8.8s, FCP 3.9s, TTI 9.7s, and CLS 0.095 (performance score 0.61); the trace independently measured LCP 3.17s.", "artifacts": [ "evidence/lighthouse.json" ], "suggestedFix": "Prioritize the age-gate LCP element, shrink the document and critical chain, and delay non-essential ads/analytics until after consent and entry.", "effort": "large" }, { "id": "F-014", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-fast-and-stable", "principleCheckId": "visual-stability", "guidanceId": "visually-stable-font-fallbacks", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "Late content shifts the mobile layout", "evidence": "The 360px layout observer recorded CLS 0.102 from a shift at about 4.83s; the desktop observer recorded 0.056.", "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-layout.json" ], "suggestedFix": "Reserve space for banners and late UI, and add explicit dimensions/aspect ratios to the three unsized images.", "effort": "medium" }, { "id": "F-015", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-image-priority", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "The entry experience has a heavy critical network path", "evidence": "HAR captured 173 requests and 5.27MB transferred, including 11 stylesheets, 40 scripts, ten parser/high-priority render-blocking candidates, and a 1.9MB document response.", "artifacts": [ "evidence/home.har", "evidence/home-summary.json" ], "suggestedFix": "Inline only critical gate CSS, defer non-essential scripts, consolidate styles, and avoid loading the full feed and ad stack behind the gate.", "effort": "large" }, { "id": "F-016", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "Substantial unused code ships before the core task", "evidence": "Lighthouse estimated 288KiB unused JavaScript and 74KiB unused CSS; three tag-manager bundles account for most unused JS.", "artifacts": [ "evidence/lighthouse.json" ], "suggestedFix": "Load analytics and feed bundles conditionally after consent/entry and split gate CSS/JS from the full application bundle.", "effort": "large" }, { "id": "F-017", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Embedded ads and controls expose incorrect accessible names", "evidence": "Lighthouse found multiple visible ad iframes without titles and a User Icon button whose accessible name does not include its visible Log in label.", "artifacts": [ "evidence/lighthouse.json" ], "suggestedFix": "Give every meaningful iframe a concise title, mark decorative frames presentation-only, and align visible and accessible control names.", "effort": "large" }, { "id": "F-018", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "move-dom-element-without-losing-state", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "Landmarks and focus treatment do not provide a reliable keyboard path", "evidence": "The gate has no h1 and the DOM probe found no main/nav landmarks; several cookie and search controls focus with no visible outline.", "artifacts": [ "evidence/comprehensive-probe.json" ], "suggestedFix": "Use semantic main/nav landmarks, make the gate title an h1, and add persistent :focus-visible styling in logical tab order.", "effort": "large" }, { "id": "F-019", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-inclusive", "principleCheckId": "legible-text", "guidanceId": "improve-text-layout-and-legibility", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "Mobile text is clipped and cannot reflow", "evidence": "The 360px screenshot cuts multiple lines at the right edge, including the heading and legally important age text.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ], "suggestedFix": "Use fluid inline sizing, overflow-wrap, and responsive type/spacing so every line remains visible at 320-360px.", "effort": "large" }, { "id": "F-020", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Mobile zoom is disabled on a served variant", "evidence": "Lighthouse found a viewport declaration with maximum-scale=1 and user-scalable=no; the focus probe also found many sub-24px-high targets.", "artifacts": [ "evidence/lighthouse.json" ], "suggestedFix": "Remove maximum-scale and user-scalable restrictions and enlarge compact interactive targets.", "effort": "large" }, { "id": "F-021", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "follow-best-practices", "principleCheckId": "no-console-errors", "guidanceId": "security", "guidanceCategory": "security", "severity": "medium", "confidence": "high", "summary": "The homepage throws an uncaught exception", "evidence": "Lighthouse captured TypeError: Cannot read properties of null (reading addEventListener) in setInstallButton at homepage line 4546.", "artifacts": [ "evidence/lighthouse.json" ], "suggestedFix": "Guard the queried install element before attaching the listener and add an automated console-clean smoke test.", "effort": "medium" }, { "id": "F-022", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "css", "guidanceCategory": "css", "severity": "medium", "confidence": "high", "summary": "Image delivery is structurally incomplete", "evidence": "The image audit found three images without width/height, 33 without srcset, and 17 legacy-format assets, although doctype and UTF-8 are valid.", "artifacts": [ "evidence/images.json" ], "suggestedFix": "Add intrinsic dimensions and responsive sources; emit AVIF/WebP where supported while retaining fallbacks.", "effort": "medium" }, { "id": "F-023", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "Deprecated APIs and BFCache blockers remain", "evidence": "Lighthouse reported an unload listener, deprecated Cast-control CSS, two deprecation warnings, inspector cookie issues, and four BFCache failure reasons.", "artifacts": [ "evidence/lighthouse.json" ], "suggestedFix": "Replace unload with pagehide/visibilitychange, use disableRemotePlayback, and remove avoidable no-store/unload BFCache blockers.", "effort": "medium" }, { "id": "F-024", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-discoverable", "principleCheckId": "title-and-description", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Public templates expose generic metadata", "evidence": "Homepage, listing, detail, and login recon all rendered title Pornhub; no meta description was present.", "artifacts": [ "evidence/home-dom.json", "evidence/detail-dom.json" ], "suggestedFix": "Emit unique server-rendered titles and descriptions for each page archetype before the age gate runs.", "effort": "large" }, { "id": "F-025", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-discoverable", "principleCheckId": "crawlable-and-mobile-friendly", "guidanceId": "search-hidden-content", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "Crawler and mobile signals are broken", "evidence": "The homepage declares noindex,nofollow, 30 anchors have empty/javascript hrefs, Lighthouse found uncrawlable anchors, and /robots.txt returns the homepage HTML.", "artifacts": [ "evidence/robots.txt", "evidence/sitemap.txt" ], "suggestedFix": "Serve a valid robots.txt, use real href URLs, preserve the viewport without disabling zoom, and scope any necessary noindex narrowly.", "effort": "large" }, { "id": "F-026", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "language-model", "guidanceCategory": "built-in-ai", "severity": "high", "confidence": "high", "summary": "Canonical, sitemap, and indexing policy are inconsistent", "evidence": "The .org URL redirects to .com, the homepage canonical points to .com but also says noindex,nofollow, /robots.txt returns HTML, and /sitemap.xml returns 404.", "artifacts": [ "evidence/robots.txt", "evidence/sitemap.txt" ], "suggestedFix": "Choose the canonical public host, remove accidental noindex, serve valid robots.txt and sitemaps, and make redirects/canonicals consistent.", "effort": "large" }, { "id": "F-027", "pathId": "detail", "url": "https://www.pornhub.com/view_video.php?viewkey=ph5e653cd449d46", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "security", "guidanceCategory": "security", "severity": "medium", "confidence": "high", "summary": "Content/detail pages lack rich metadata", "evidence": "The inspected video detail rendered no JSON-LD, Open Graph, Twitter, or hreflang metadata and retained the generic Pornhub title.", "artifacts": [ "evidence/home-dom.json", "evidence/detail-dom.json" ], "suggestedFix": "Add accurate VideoObject JSON-LD and Open Graph/Twitter metadata that matches visible content, with safe preview policy.", "effort": "medium" }, { "id": "F-028", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "privacy", "guidanceCategory": "privacy", "severity": "high", "confidence": "high", "summary": "Transport is HTTPS but baseline defenses are incomplete", "evidence": "Headers evidence found no CSP or X-Content-Type-Options; cookies evidence found the rp cookie not Secure and SameSite=None. HSTS is present.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "suggestedFix": "Add a nonce/hash-based CSP and nosniff, and set Secure with an appropriate SameSite value on every HTTPS cookie.", "effort": "large" }, { "id": "F-029", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "passkeys", "guidanceCategory": "passkeys", "severity": "high", "confidence": "high", "summary": "Tracking and ad-tech load before the user enters", "evidence": "Tracker capture found 13 third-party origins including Google Tag Manager and DoubleClick; HAR recorded 171 cross-origin requests and 5.27MB before age confirmation.", "artifacts": [ "evidence/trackers.json" ], "suggestedFix": "Block non-essential analytics/ad requests until explicit consent and entry, reduce vendors, and batch essential telemetry.", "effort": "large" }, { "id": "F-030", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "flicker-free-client-side-ab-testing", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "Several browser-enforced policies are absent", "evidence": "Headers evidence found no CSP, nosniff, Referrer-Policy, or Permissions-Policy; X-Frame-Options and HSTS are present.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "suggestedFix": "Deploy CSP with frame-ancestors, nosniff, strict-origin-when-cross-origin or stricter Referrer-Policy, and a least-privilege Permissions-Policy.", "effort": "large" }, { "id": "F-031", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-resilient", "principleCheckId": "progressive-enhancement", "guidanceId": "resilient-context-menus-and-nested-dropdowns", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "Core content and route identity degrade without JavaScript", "evidence": "Discoverability measured only 30-35% rendered-word coverage in raw HTML; listing/login URLs collapse to the generic homepage/gate and core navigation depends on scripted controls.", "artifacts": [ "evidence/discoverability-home.json", "evidence/discoverability-home-rendered.png", "evidence/discoverability-home-crawler.png" ], "suggestedFix": "Server-render route-specific metadata and core links/content, and make legal entry/exit actions work as real form/link submissions.", "effort": "large" }, { "id": "F-032", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-resilient", "principleCheckId": "resilient-runtime-behaviour", "guidanceId": "passkey-management", "guidanceCategory": "passkeys", "severity": "high", "confidence": "high", "summary": "Runtime behavior is fragile at the entry boundary", "evidence": "The required modal clips content on mobile, /login collapses to the homepage gate before entry, and the homepage throws an uncaught listener exception.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ], "suggestedFix": "Make overlay sizing intrinsic, preserve requested return URLs through the gate, and guard optional runtime elements.", "effort": "large" }, { "id": "F-033", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "support-global-calendar-systems", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "Language support is not backed by bidi-resilient layout", "evidence": "The page offers many languages and sets lang=en, but has no dir attribute, no logical CSS properties, and at least 16 physical left/right declarations in the inspected CSS.", "artifacts": [ "evidence/comprehensive-probe.json" ], "suggestedFix": "Set dir explicitly per locale and replace physical spacing/positioning with inline/block logical properties.", "effort": "medium" }, { "id": "F-034", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-trustworthy", "principleCheckId": "no-dark-patterns", "guidanceId": "forms", "guidanceCategory": "forms", "severity": "medium", "confidence": "high", "summary": "Rejecting optional cookies triggers a nag to accept all", "evidence": "After Accept Only Essential Cookies, a persistent banner says features may be unavailable and recommends Accept All Cookies, weakening the user’s choice.", "artifacts": [ "evidence/age-gate-flow.mp4", "evidence/home-after-gate.png" ], "suggestedFix": "Honor essential-only consent without repeated persuasion; explain only genuinely unavailable features at the point of use.", "effort": "medium" }, { "id": "F-035", "pathId": "login", "url": "https://www.pornhub.org", "principleId": "be-trustworthy", "principleCheckId": "humane-error-handling", "guidanceId": "autofill-address-form", "guidanceCategory": "forms", "severity": "medium", "confidence": "high", "summary": "Empty sign-in submission gives no actionable feedback", "evidence": "The login modal has email/password autocomplete tokens, but submitting empty fields produced no :invalid elements, no aria-invalid state, no live-region message, and no visible error text.", "artifacts": [ "evidence/login-modal.json", "evidence/login-validation.json" ], "suggestedFix": "Use required constraints, validate after interaction, focus the first invalid field, and announce concise errors in an aria-live region.", "effort": "medium" }, { "id": "F-036", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "deprioritize-background-fetches", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Image formats and responsive delivery waste bytes", "evidence": "The image audit found 33 of 37 images without srcset and 17 legacy-format images; three images lack dimensions.", "artifacts": [ "evidence/images.json" ], "suggestedFix": "Generate responsive srcset/sizes and AVIF/WebP variants, preserving explicit dimensions and lazy loading.", "effort": "medium" }, { "id": "F-037", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "guidanceId": "deliver-optimized-decorative-images", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "The gate loads the full feed, ads, and analytics in the background", "evidence": "Before entry, HAR recorded 173 requests, 38 XHR/fetches, 78 images, and 5.27MB; underlying feed assets and analytics are loaded behind the blocking gate.", "artifacts": [ "evidence/home.har", "evidence/home-summary.json" ], "suggestedFix": "Render a minimal gate shell and defer feed, ad, preview, and analytics work until consent and successful entry.", "effort": "large" }, { "id": "F-038", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "webmcp", "guidanceCategory": "webmcp", "severity": "high", "confidence": "high", "summary": "Third-party cost dominates the initial budget", "evidence": "HAR attributes virtually all transfer from the .org start URL to cross-origin hosts after redirect, including about 1.0MB from TrafficJunky and 468KB from Google Tag Manager.", "artifacts": [ "evidence/home.har", "evidence/home-summary.json" ], "suggestedFix": "Set a strict third-party byte/request budget, lazy-load ads below the fold, and consolidate or remove redundant tag-manager payloads.", "effort": "large" }, { "id": "F-039", "pathId": "entry", "url": "https://www.pornhub.org", "principleId": "be-memory-efficient", "principleCheckId": "bounded-footprint", "guidanceId": "manage-recurring-intervals", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "The blocked entry state has a disproportionate heap footprint", "evidence": "A single age-gated load retained about 38.4MB self size across 587,659 heap nodes and 52,371 closures before the underlying feed was usable.", "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post.json" ], "suggestedFix": "Do not instantiate the full feed/ad application behind the gate; lazy-initialize page modules after entry and consent.", "effort": "medium" } ], "taskList": [ { "id": "T-01", "title": "Make the age gate and all legal actions reflow on mobile", "priority": 1, "findingIds": [ "F-009", "F-012", "F-019" ], "guidanceId": "fluid-scaling", "status": "open" }, { "id": "T-02", "title": "Ship a minimal gate shell and defer feed, ads, and analytics", "priority": 2, "findingIds": [ "F-013", "F-015", "F-016", "F-037", "F-039" ], "guidanceId": "optimize-script-priority", "status": "open" }, { "id": "T-03", "title": "Repair indexing: metadata, robots, sitemap, canonicals, and real links", "priority": 3, "findingIds": [ "F-024", "F-025", "F-026", "F-027" ], "guidanceId": "html", "status": "open" }, { "id": "T-04", "title": "Deploy CSP, nosniff, privacy policies, and secure cookies", "priority": 4, "findingIds": [ "F-028", "F-030" ], "guidanceId": "security", "status": "open" }, { "id": "T-05", "title": "Gate and minimise third-party tracking", "priority": 5, "findingIds": [ "F-029", "F-038" ], "guidanceId": "privacy", "status": "open" }, { "id": "T-06", "title": "Restore landmarks, names, iframe titles, focus, zoom, and targets", "priority": 6, "findingIds": [ "F-011", "F-017", "F-018", "F-020" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T-07", "title": "Replace custom modal/disclosure primitives with dialog/popover/details", "priority": 7, "findingIds": [ "F-007" ], "guidanceId": "declarative-dialog-popover-control", "status": "open" }, { "id": "T-08", "title": "Fix console errors, deprecated APIs, and BFCache blockers", "priority": 8, "findingIds": [ "F-021", "F-023" ], "guidanceId": "html", "status": "open" }, { "id": "T-09", "title": "Add preference-driven color and contrast support", "priority": 9, "findingIds": [ "F-001", "F-002" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T-10", "title": "Optimise responsive image formats and dimensions", "priority": 10, "findingIds": [ "F-014", "F-022", "F-036" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T-11", "title": "Make sign-in validation humane and accessible", "priority": 11, "findingIds": [ "F-035" ], "guidanceId": "accessible-error-announcement", "status": "open" }, { "id": "T-12", "title": "Honor essential-only consent without a persistent upsell", "priority": 12, "findingIds": [ "F-034" ], "guidanceId": "privacy", "status": "open" } ], "budget": { "pathCount": 5, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-18T16-29-32-298Z" }