{ "url": "https://ge.xhamster.desi", "auditedAt": "2026-07-20T07:09:37Z", "mode": "report", "status": "completed", "statusDetail": "Atomic coverage complete across 58 checks and five representative paths.", "page": { "appType": "mpa", "framework": "Server-rendered application with client-side enhancement", "notes": "Public German-language adult media platform with consent and UK age-verification gates." }, "evidenceUsed": [ "screenshot", "dom", "layout-metrics", "evaluate-probe", "trace", "har", "discoverability", "headers", "cookies", "trackers", "secrets", "images", "heap-summary", "lighthouse" ], "guidanceConsulted": [ "dark-mode", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "scrollytelling", "physics-based-easing", "shrinking-header-on-scroll", "anchor-positioning-tab-underline", "directional-navigation-transitions", "light-dismiss-a-dialog", "declarative-dialog-popover-control", "complex-shapes", "fluid-scaling", "size-aware-styling", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "identify-inp-causes", "visually-stable-font-fallbacks", "break-up-long-tasks", "optimize-image-priority", "identify-heavy-scripts", "move-dom-element-without-losing-state", "css", "html", "security", "privacy", "passkeys", "flicker-free-client-side-ab-testing", "resilient-context-menus-and-nested-dropdowns", "persistent-toast-notifications", "translator", "support-global-calendar-systems", "coordinate-global-events", "search-hidden-content", "autofill-address-form", "autofill-payment-form", "deliver-optimized-decorative-images", "deprioritize-background-fetches", "webmcp", "language-model", "manage-recurring-intervals" ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "Home at desktop width" }, { "type": "other", "path": "evidence/theme-light.json", "caption": "Computed theme under light preference", "condition": "prefers-color-scheme: light" }, { "type": "other", "path": "evidence/theme-dark.json", "caption": "Computed theme under dark preference", "condition": "prefers-color-scheme: dark" }, { "type": "other", "path": "evidence/recon.json", "caption": "Route, metadata, and link recon" }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "Home at 360x800; clipped desktop canvas", "condition": "viewport: 360x800" }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "Home narrow layout metrics", "condition": "viewport: 360x800" }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "Home under dark preference", "condition": "prefers-color-scheme: dark" }, { "type": "screenshot", "path": "evidence/home-forced-colors.png", "caption": "Home under forced colors/high contrast", "condition": "forced-colors: active, prefers-contrast: more" }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "Rendered home DOM" }, { "type": "other", "path": "evidence/home-probe.json", "caption": "Semantics, focus, CSS, metadata, forms probe" }, { "type": "other", "path": "evidence/reduced-motion.json", "caption": "Animation inventory under reduced motion", "condition": "prefers-reduced-motion: reduce" }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "DevTools performance trace" }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "Trace timings and blocking summary" }, { "type": "har", "path": "evidence/home.har", "caption": "Initial-load HAR" }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "Network summary" }, { "type": "discoverability", "path": "evidence/home-discoverability.json", "caption": "Raw HTML versus rendered content" }, { "type": "screenshot", "path": "evidence/home-discoverability-rendered.png", "caption": "Rendered browser view" }, { "type": "screenshot", "path": "evidence/home-discoverability-crawler.png", "caption": "Crawler/no-JS view" }, { "type": "other", "path": "evidence/headers.json", "caption": "Security headers" }, { "type": "other", "path": "evidence/cookies.json", "caption": "Cookie attributes" }, { "type": "other", "path": "evidence/trackers.json", "caption": "Third-party origins" }, { "type": "other", "path": "evidence/secrets.json", "caption": "Client secret scan" }, { "type": "other", "path": "evidence/images.json", "caption": "Image delivery audit" }, { "type": "heap", "path": "evidence/heap-baseline.json", "caption": "Baseline heap summary" }, { "type": "heap", "path": "evidence/heap-post-scroll.json", "caption": "Heap after ten scroll cycles" }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "Lighthouse report" }, { "type": "screenshot", "path": "evidence/categories.png", "caption": "Categories archetype" }, { "type": "layout", "path": "evidence/categories-mobile-layout.json", "caption": "Categories narrow layout", "condition": "viewport: 360x800" }, { "type": "screenshot", "path": "evidence/video-detail.png", "caption": "Watch/detail archetype with gates" }, { "type": "dom", "path": "evidence/video-detail-dom.json", "caption": "Video-detail DOM" }, { "type": "screenshot", "path": "evidence/signup.png", "caption": "Signup archetype" }, { "type": "dom", "path": "evidence/signup-dom.json", "caption": "Signup DOM" }, { "type": "other", "path": "evidence/signup-probe.json", "caption": "Signup choices and disclosure after rejecting optional cookies" }, { "type": "other", "path": "evidence/signup-email-flow.json", "caption": "Email signup invalid-submit flow" }, { "type": "other", "path": "evidence/pwa.json", "caption": "Manifest, service worker, cache probe" }, { "type": "other", "path": "evidence/robots.json", "caption": "robots.txt" }, { "type": "other", "path": "evidence/sitemap.json", "caption": "sitemap.xml 404 response" }, { "type": "screenshot", "path": "evidence/not-found.png", "caption": "Localized 404 recovery state" }, { "type": "other", "path": "evidence/not-found.json", "caption": "404 text and recovery links" } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "pass", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Light and dark emulation changed body text from rgb(48,48,48) to rgb(245,245,245); the dark capture remains usable.", "pathIds": [ "home" ], "artifacts": [ "evidence/theme-light.json", "evidence/theme-dark.json", "evidence/home-dark.png" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Under prefers-reduced-motion: reduce, eight animations continued running with 2000 ms duration and infinite iterations; no reduced-motion CSS rule was found.", "pathIds": [ "home" ], "artifacts": [ "evidence/reduced-motion.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Forced-colors plus prefers-contrast produced visible text, borders, search, controls, and links throughout the first viewport.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-forced-colors.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "CSS inspection found no View Transition rules; navigation between the home, categories, signup, and detail pages is an abrupt document swap.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json", "evidence/categories.png", "evidence/video-detail.png" ], "findingIds": [ "F02" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Recon found no applicable surface on the representative paths.", "pathIds": [ "home" ], "reason": "No scrollytelling, parallax, entry/exit reveal, or other scroll-linked animation was present on the representative paths." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "medium", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "The inspected listing uses native document scrolling; no gesture-only custom surface or pointer-driven interaction was observed.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "The multi-row header and promotional chrome remain static and consume the same vertical space; no @container scroll-state or scroll timeline rule was found.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-probe.json" ], "findingIds": [ "F03" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Recon found no applicable surface on the representative paths.", "pathIds": [ "home" ], "reason": "No tooltip, transient popover, or edge-positioned menu was open or required on the audited states." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Current top-level sections are visibly underlined and page headings identify the destination on home and categories.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/categories.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "A large cookie interstitial obscures the central content on load while separate age-verification and sale banners stack above it.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/categories.png" ], "findingIds": [ "F04" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "The visually modal cookie layer on the home page has no dialog element or role=dialog; the probe found zero dialog/popover/details primitives.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ], "findingIds": [ "F05" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Header rows, age-verification, a sale strip, sidebar navigation, upsells, and the cookie modal dominate the first viewport before the core listing.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ], "findingIds": [ "F06" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "At a 360x800 emulated viewport, layout reported scrollWidth 1024 and horizontalOverflowPx 664 on both home and categories; the screenshot shows a clipped desktop layout.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png", "evidence/categories-mobile-layout.json" ], "findingIds": [ "F07" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "CSS inspection found no @container rules while the reusable navigation and video cards remain laid out for a 1024 px canvas under the narrow primitive condition.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json", "evidence/home-mobile.png" ], "findingIds": [ "F08" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Programmatically focused search, login, navigation, and age-verification controls computed outline-style none and no focus box-shadow.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ], "findingIds": [ "F09" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "The home page has a descriptive title/H1, search field, video grid, and clearly labelled category navigation.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-probe.json" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "The representative watch path opens with cookie and age-verification layers over the player, preventing playback until multiple interruptions are handled.", "pathIds": [ "video-detail" ], "artifacts": [ "evidence/video-detail.png" ], "findingIds": [ "F10" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Empty signup submission produced specific German email/password messages, and the 404 page explains the failure and links back to the homepage.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-email-flow.json", "evidence/not-found.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Mobile Lighthouse measured LCP 4.3 s and FCP 3.4 s, outside the good LCP range, despite CLS 0.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Raw-CDP layout recorded CLS 0 with no shifts on home and categories; Lighthouse also reported CLS 0.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/categories-mobile-layout.json", "evidence/lighthouse.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "medium", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Trace measured two long tasks, 128 ms total blocking time, and a 161.6 ms longest task; Lighthouse measured 0 ms TBT.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/lighthouse.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "HAR recorded 143 requests and 1.70 MB transferred, including 11 stylesheets, 61 scripts, and parser-inserted VeryHigh-priority stylesheets.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home.har" ], "findingIds": [ "F12" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Scripts accounted for 1.02 MB across 61 requests; the 402 KB index bundle and multiple locale/start bundles dominate the load.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Signup email fields have no labels, the home modal has no dialog semantics, and the image audit found one missing alt attribute.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-email-flow.json", "evidence/home-probe.json", "evidence/images.json" ], "findingIds": [ "F14" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Lighthouse found repeated WCAG contrast failures, including 2.15:1 and 1.75:1 text on the age banner and 3.29:1 view counts.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F15" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "The H1/H2 order is simple, but focused buttons and key controls computed outline-style none, leaving keyboard location invisible.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ], "findingIds": [ "F16" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "medium", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Desktop screenshots show readable headings/body copy with consistent alignment and no observed clipping at the desktop condition.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/categories.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "The 360 px condition does not reflow and overflows by 664 px, so narrow/zoomed use requires horizontal panning.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png" ], "findingIds": [ "F17" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Lighthouse reported no console-error items or uncaught exceptions.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Although doctype/UTF-8 are valid, 29 of 36 images lack dimensions and 12 are more than twice their display size.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F18" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "pass", "confidence": "medium", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Lighthouse best-practices scored 1.0 and reported no deprecated API items or console errors; no permission prompt appeared on load.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Home, signup, and detail pages expose descriptive titles; home has a substantive meta description.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json", "evidence/video-detail-dom.json", "evidence/signup-dom.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Links are real hrefs and robots allows the entry page, but the 360 px raw-CDP condition retains a 1024 px layout with 664 px overflow.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/robots.json" ], "findingIds": [ "F19" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "The home has a canonical and returns 200, but /sitemap.xml returns 404 and no hreflang links advertise the many visible localized variants.", "pathIds": [ "home" ], "artifacts": [ "evidence/recon.json", "evidence/sitemap.json", "evidence/robots.json" ], "findingIds": [ "F20" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "pass", "confidence": "medium", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "The entity detail page contains Open Graph metadata and a canonical; the home listing is not itself a single article/product entity.", "pathIds": [ "video-detail" ], "artifacts": [ "evidence/video-detail-dom.json" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "HTTPS/HSTS/frame protection are present, but CSP is only frame-ancestors, nosniff and Referrer-Policy are missing, and two cookies are not Secure.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F21" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "The load contacted 14 third-party origins; 116 third-party requests transferred 1.58 MB, including collector and ad/affiliate endpoints.", "pathIds": [ "home" ], "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json" ], "findingIds": [ "F22" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "No permission prompt appeared on load, but signup offers social identity or email/password and no passkey/WebAuthn registration path was exposed.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-probe.json", "evidence/signup-email-flow.json" ], "findingIds": [ "F23" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "CSP lacks script-src/Trusted Types protections, Referrer-Policy and nosniff are missing, and the settings cookie is SameSite=None without Secure.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F24" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Discoverability fetched 405 KB of raw HTML with 79% rendered-word coverage; title, H1, description, and core content survive without JavaScript.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-discoverability.json", "evidence/home-discoverability-crawler.png" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "medium", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Cookie rejection reveals signup choices, invalid submission settles into a clear error state, and no clipped overlay was observed at desktop.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-email-flow.json", "evidence/signup.png" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "pass", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "The page exposes an install manifest, active service worker, and xh-offline-cache-1.6.5 cache.", "pathIds": [ "home" ], "artifacts": [ "evidence/pwa.json" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "A nonexistent route renders a localized not-found explanation and a homepage recovery link rather than a blank shell.", "pathIds": [ "not-found" ], "artifacts": [ "evidence/not-found.json", "evidence/not-found.png" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "pass", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "The German page declares lang=de and CSS inspection found 16 logical-property rules; LTR default is appropriate for German.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Visible view counts use English-style abbreviations such as 971.4K and 1.6M in a German interface instead of locale-aware formatting.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ], "findingIds": [ "F25" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Recon found no applicable surface on the representative paths.", "pathIds": [ "home" ], "reason": "No dates, appointments, recurring intervals, or time-zone-sensitive event data appear on the representative public paths." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "medium", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Cookie accept/reject controls have equal visual weight, signup discloses public data use and terms, and no confirmshaming was observed.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/signup-probe.json" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "pass", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Submitting the empty email form yields concise field-specific German errors without blame or page loss.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-email-flow.json" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Signup email inputs have autocomplete=off, no associated label, and are not marked required; only the password has new-password autocomplete.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-email-flow.json" ], "findingIds": [ "F26" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "pass", "confidence": "medium", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Signup states that age verification may be required and clearly discloses terms, privacy, and public profile data before registration.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-probe.json" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Image evidence found 12 oversized assets, 16 legacy-format assets, 29 missing dimensions, and 8 below-fold images without lazy loading.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F27" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "The entry load performs 143 requests, including 61 scripts and 116 third-party requests, before the user engages with the content.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "findingIds": [ "F28" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Third parties account for 1.58 MB of 1.70 MB transferred, including a 1.08 MB static CDN origin and Google identity on initial load.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json" ], "findingIds": [ "F29" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Recon found no applicable surface on the representative paths.", "pathIds": [ "home" ], "reason": "No declared agent-facing intent or WebMCP/agentic tool surface was found; this emerging capability is not required for this public media listing." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "Recon found no applicable surface on the representative paths.", "pathIds": [ "home" ], "reason": "No user task on the inspected paths calls for an on-device language-model or summarizer surface, so this emerging check is out of scope." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "After ten down/up scroll cycles, retained heap was 39.9 MB versus 36.4 MB baseline; the bounded 9.7% increase is consistent with lazy-loaded content rather than runaway growth.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post-scroll.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "medium", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "The content-heavy listing retained 36.4 MB at baseline and 39.9 MB after exercise, proportionate to its hundreds of links and media cards.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post-scroll.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "Active browser evidence gathered with raw-CDP primitives and corroborating probes", "evidence": "No Detached* constructor appeared among the heap summaries top retained constructors; repeated scrolling did not show unbounded growth.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post-scroll.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F02" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F04", "F05", "F06" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F07", "F08", "F09" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F10" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F11", "F12", "F13" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F14", "F15", "F16", "F17" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F18" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F19", "F20" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F21", "F22", "F23", "F24" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "pass" }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F25" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F26" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F27", "F28", "F29" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "No declared agent-facing intent or WebMCP/agentic tool surface was found; this emerging capability is not required for this public media listing. No user task on the inspected paths calls for an on-device language-model or summarizer surface, so this emerging check is out of scope." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Entry/listing template and primary discovery surface; tested desktop, narrow, preference, performance, security, network, discoverability, and memory conditions.", "url": "https://ge.xhamster.desi/", "conditions": [ "desktop", "viewport: 360x800", "prefers-color-scheme: dark/light", "prefers-reduced-motion: reduce", "forced-colors: active" ], "result": "issues" }, { "id": "categories", "description": "Representative category/index archetype; selected to cover dense taxonomy and card layout.", "url": "https://ge.xhamster.desi/categories", "conditions": [ "desktop", "viewport: 360x800" ], "result": "issues" }, { "id": "video-detail", "description": "Representative content detail and primary watch journey; selected to test player gating, metadata, and upsells.", "url": "https://ge.xhamster.desi/videos/finger-licking-good-first-time-lesbian-seduction-xhgpO6p", "conditions": [ "desktop", "fresh session" ], "result": "issues" }, { "id": "signup", "description": "Primary account form flow; cookie rejection, email option, and invalid submission were exercised.", "url": "https://ge.xhamster.desi/signup?source=menuSignup", "conditions": [ "desktop", "invalid form submission" ], "result": "issues" }, { "id": "not-found", "description": "Representative HTTP failure/recovery state.", "url": "https://ge.xhamster.desi/this-route-does-not-exist-web-uplift", "conditions": [ "desktop" ], "result": "pass" } ], "findings": [ { "id": "F01", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "respect-user-preferences", "principleCheckId": "respects-reduced-motion", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "medium", "confidence": "high", "summary": "Motion continues when reduction is requested", "evidence": "Under prefers-reduced-motion: reduce, eight animations continued running with 2000 ms duration and infinite iterations; no reduced-motion CSS rule was found.", "artifacts": [ "evidence/reduced-motion.json" ], "suggestedFix": "Add a prefers-reduced-motion: reduce branch that disables infinite/non-essential animations and auto-advance.", "effort": "small" }, { "id": "F02", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "same-document-transitions", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "Page changes are abrupt", "evidence": "CSS inspection found no View Transition rules; navigation between the home, categories, signup, and detail pages is an abrupt document swap.", "artifacts": [ "evidence/home-probe.json", "evidence/categories.png", "evidence/video-detail.png" ], "suggestedFix": "Use cross-document View Transitions for same-origin navigation, with reduced-motion fallback.", "effort": "medium" }, { "id": "F03", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "shrinking-header-on-scroll", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "Persistent chrome does not react to scroll", "evidence": "The multi-row header and promotional chrome remain static and consume the same vertical space; no @container scroll-state or scroll timeline rule was found.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-probe.json" ], "suggestedFix": "Collapse or soften nonessential header/promotion chrome with scroll-state-aware CSS.", "effort": "medium" }, { "id": "F04", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "light-dismiss-a-dialog", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "Load-time interruptions obscure the core content", "evidence": "A large cookie interstitial obscures the central content on load while separate age-verification and sale banners stack above it.", "artifacts": [ "evidence/home-desktop.png", "evidence/categories.png" ], "suggestedFix": "Defer nonessential promotion, consolidate consent/age steps, and keep a clear, immediately usable dismiss/reject path.", "effort": "medium" }, { "id": "F05", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "The cookie modal is not exposed as a dialog", "evidence": "The visually modal cookie layer on the home page has no dialog element or role=dialog; the probe found zero dialog/popover/details primitives.", "artifacts": [ "evidence/home-probe.json" ], "suggestedFix": "Implement it with or role=dialog, aria-modal, labelled title, focus containment, Escape policy, and focus restoration.", "effort": "medium" }, { "id": "F06", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "reduced-chrome", "guidanceId": "improve-text-layout-and-legibility", "guidanceCategory": "css", "severity": "medium", "confidence": "high", "summary": "First-viewport chrome overwhelms content", "evidence": "Header rows, age-verification, a sale strip, sidebar navigation, upsells, and the cookie modal dominate the first viewport before the core listing.", "artifacts": [ "evidence/home-desktop.png" ], "suggestedFix": "Remove or collapse redundant nav, sale, sidebar, and upsell surfaces so the primary listing leads.", "effort": "medium" }, { "id": "F07", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "fluid-scaling", "guidanceCategory": "css", "severity": "critical", "confidence": "high", "summary": "Narrow viewports render a clipped 1024 px layout", "evidence": "At a 360x800 emulated viewport, layout reported scrollWidth 1024 and horizontalOverflowPx 664 on both home and categories; the screenshot shows a clipped desktop layout.", "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png", "evidence/categories-mobile-layout.json" ], "suggestedFix": "Fix viewport/device adaptation, replace fixed widths with intrinsic fluid layout, and verify scrollWidth equals innerWidth at 360 px.", "effort": "large" }, { "id": "F08", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "guidanceCategory": "css", "severity": "low", "confidence": "high", "summary": "Reusable components do not adapt to their container", "evidence": "CSS inspection found no @container rules while the reusable navigation and video cards remain laid out for a 1024 px canvas under the narrow primitive condition.", "artifacts": [ "evidence/home-probe.json", "evidence/home-mobile.png" ], "suggestedFix": "Add container-type and @container rules for cards/navigation reused in narrow regions.", "effort": "medium" }, { "id": "F09", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Keyboard focus is invisible on key controls", "evidence": "Programmatically focused search, login, navigation, and age-verification controls computed outline-style none and no focus box-shadow.", "artifacts": [ "evidence/home-probe.json" ], "suggestedFix": "Add a high-contrast :focus-visible outline for links, buttons, and form fields; do not remove it without a replacement.", "effort": "small" }, { "id": "F10", "pathId": "video-detail", "url": "https://ge.xhamster.desi/videos/finger-licking-good-first-time-lesbian-seduction-xhgpO6p", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "forms", "guidanceCategory": "forms", "severity": "high", "confidence": "high", "summary": "The watch journey is blocked by stacked modal gates", "evidence": "The representative watch path opens with cookie and age-verification layers over the player, preventing playback until multiple interruptions are handled.", "artifacts": [ "evidence/video-detail.png" ], "suggestedFix": "Sequence consent and legally required age verification as one clear, semantic flow before revealing the player.", "effort": "large" }, { "id": "F11", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "optimize-image-priority", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "Mobile LCP is slow", "evidence": "Mobile Lighthouse measured LCP 4.3 s and FCP 3.4 s, outside the good LCP range, despite CLS 0.", "artifacts": [ "evidence/lighthouse.json" ], "suggestedFix": "Prioritize the LCP asset/content, reduce render-blocking work, and defer noncritical scripts to bring LCP below 2.5 s.", "effort": "large" }, { "id": "F12", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-preload-priority", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "Critical delivery is request-heavy", "evidence": "HAR recorded 143 requests and 1.70 MB transferred, including 11 stylesheets, 61 scripts, and parser-inserted VeryHigh-priority stylesheets.", "artifacts": [ "evidence/home-summary.json", "evidence/home.har" ], "suggestedFix": "Inline/minimize critical CSS, defer noncritical styles/scripts, and shorten parser-blocking dependency chains.", "effort": "large" }, { "id": "F13", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "JavaScript dominates the initial payload", "evidence": "Scripts accounted for 1.02 MB across 61 requests; the 402 KB index bundle and multiple locale/start bundles dominate the load.", "artifacts": [ "evidence/home-summary.json" ], "suggestedFix": "Code-split page-specific and locale bundles and load identity/affiliate code only on demand.", "effort": "large" }, { "id": "F14", "pathId": "signup", "url": "https://ge.xhamster.desi/signup?source=menuSignup", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Forms, modal, and imagery lack accessible semantics", "evidence": "Signup email fields have no labels, the home modal has no dialog semantics, and the image audit found one missing alt attribute.", "artifacts": [ "evidence/signup-email-flow.json", "evidence/home-probe.json", "evidence/images.json" ], "suggestedFix": "Add persistent labels, semantic dialog markup, and meaningful/empty alt as appropriate.", "effort": "medium" }, { "id": "F15", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Important text fails contrast", "evidence": "Lighthouse found repeated WCAG contrast failures, including 2.15:1 and 1.75:1 text on the age banner and 3.29:1 view counts.", "artifacts": [ "evidence/lighthouse.json" ], "suggestedFix": "Raise age-banner, metadata, badge, and subscribe-button contrast to WCAG AA ratios.", "effort": "small" }, { "id": "F16", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Keyboard users cannot track focus", "evidence": "The H1/H2 order is simple, but focused buttons and key controls computed outline-style none, leaving keyboard location invisible.", "artifacts": [ "evidence/home-probe.json" ], "suggestedFix": "Define consistent :focus-visible styling and test a full Tab walk in visual order.", "effort": "small" }, { "id": "F17", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "fluid-scaling", "guidanceCategory": "css", "severity": "high", "confidence": "high", "summary": "Zoom and narrow reflow require horizontal panning", "evidence": "The 360 px condition does not reflow and overflows by 664 px, so narrow/zoomed use requires horizontal panning.", "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png" ], "suggestedFix": "Remove the 1024 px layout floor and verify WCAG reflow at 320 CSS px and 200% zoom.", "effort": "large" }, { "id": "F18", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "optimize-image-priority", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Image sizing and delivery are unsound", "evidence": "Although doctype/UTF-8 are valid, 29 of 36 images lack dimensions and 12 are more than twice their display size.", "artifacts": [ "evidence/images.json" ], "suggestedFix": "Reserve intrinsic image space and request responsive assets close to rendered dimensions.", "effort": "medium" }, { "id": "F19", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "be-discoverable", "principleCheckId": "crawlable-and-mobile-friendly", "guidanceId": "fluid-scaling", "guidanceCategory": "css", "severity": "high", "confidence": "high", "summary": "The page is not mobile-friendly under the audit condition", "evidence": "Links are real hrefs and robots allows the entry page, but the 360 px raw-CDP condition retains a 1024 px layout with 664 px overflow.", "artifacts": [ "evidence/home-mobile-layout.json", "evidence/robots.json" ], "suggestedFix": "Correct responsive delivery so crawler/mobile rendering sees a reflowed layout rather than clipped desktop content.", "effort": "large" }, { "id": "F20", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "Localized indexing signals are incomplete", "evidence": "The home has a canonical and returns 200, but /sitemap.xml returns 404 and no hreflang links advertise the many visible localized variants.", "artifacts": [ "evidence/recon.json", "evidence/sitemap.json", "evidence/robots.json" ], "suggestedFix": "Publish a sitemap and reciprocal hreflang links for localized hosts while preserving canonicals and robots consistency.", "effort": "medium" }, { "id": "F21", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "security", "severity": "high", "confidence": "high", "summary": "Transport protections and cookie flags are incomplete", "evidence": "HTTPS/HSTS/frame protection are present, but CSP is only frame-ancestors, nosniff and Referrer-Policy are missing, and two cookies are not Secure.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "suggestedFix": "Set a full nonce/hash CSP, nosniff, strict Referrer-Policy, and Secure on every HTTPS cookie.", "effort": "medium" }, { "id": "F22", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "privacy", "severity": "high", "confidence": "high", "summary": "Initial third-party data exposure is excessive", "evidence": "The load contacted 14 third-party origins; 116 third-party requests transferred 1.58 MB, including collector and ad/affiliate endpoints.", "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json" ], "suggestedFix": "Gate optional identity, collector, affiliate, and ad calls behind consent/context and minimize transmitted identifiers.", "effort": "large" }, { "id": "F23", "pathId": "signup", "url": "https://ge.xhamster.desi/signup?source=menuSignup", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkeys", "guidanceCategory": "passkeys", "severity": "medium", "confidence": "high", "summary": "Signup exposes password authentication without a passkey path", "evidence": "No permission prompt appeared on load, but signup offers social identity or email/password and no passkey/WebAuthn registration path was exposed.", "artifacts": [ "evidence/signup-probe.json", "evidence/signup-email-flow.json" ], "suggestedFix": "Add passkey registration/authentication alongside recovery-capable alternatives.", "effort": "large" }, { "id": "F24", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "guidanceCategory": "security", "severity": "high", "confidence": "high", "summary": "Browser-enforced defensive policies are weak", "evidence": "CSP lacks script-src/Trusted Types protections, Referrer-Policy and nosniff are missing, and the settings cookie is SameSite=None without Secure.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "suggestedFix": "Expand CSP/Trusted Types where applicable and tighten Referrer, Permissions, cookie, and MIME policies.", "effort": "medium" }, { "id": "F25", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "be-internationalised", "principleCheckId": "locale-aware-data", "guidanceId": "support-global-calendar-systems", "guidanceCategory": "internationalization", "severity": "medium", "confidence": "high", "summary": "German content uses non-localized number abbreviations", "evidence": "Visible view counts use English-style abbreviations such as 971.4K and 1.6M in a German interface instead of locale-aware formatting.", "artifacts": [ "evidence/home-desktop.png" ], "suggestedFix": "Format counts with Intl.NumberFormat for the active locale and use localized compact notation.", "effort": "small" }, { "id": "F26", "pathId": "signup", "url": "https://ge.xhamster.desi/signup?source=menuSignup", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "forms", "guidanceCategory": "forms", "severity": "high", "confidence": "high", "summary": "Signup disables autofill and omits labels", "evidence": "Signup email inputs have autocomplete=off, no associated label, and are not marked required; only the password has new-password autocomplete.", "artifacts": [ "evidence/signup-email-flow.json" ], "suggestedFix": "Use type=email, autocomplete=email/new-password, persistent labels, required, and accessible error associations.", "effort": "small" }, { "id": "F27", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "deliver-optimized-decorative-images", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Images waste bytes and omit loading safeguards", "evidence": "Image evidence found 12 oversized assets, 16 legacy-format assets, 29 missing dimensions, and 8 below-fold images without lazy loading.", "artifacts": [ "evidence/images.json" ], "suggestedFix": "Serve responsive modern formats, reserve dimensions, and lazy-load genuinely below-fold images.", "effort": "medium" }, { "id": "F28", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "guidanceId": "deprioritize-background-fetches", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Initial loading performs avoidable work", "evidence": "The entry load performs 143 requests, including 61 scripts and 116 third-party requests, before the user engages with the content.", "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "suggestedFix": "Defer page-irrelevant bundles and background/affiliate fetches until user intent or idle budget.", "effort": "large" }, { "id": "F29", "pathId": "home", "url": "https://ge.xhamster.desi/", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "deprioritize-background-fetches", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "Third-party bytes dominate the page budget", "evidence": "Third parties account for 1.58 MB of 1.70 MB transferred, including a 1.08 MB static CDN origin and Google identity on initial load.", "artifacts": [ "evidence/home-summary.json" ], "suggestedFix": "Set a third-party budget, self-host/trim essential assets, and delay optional Google/affiliate resources.", "effort": "large" } ], "taskList": [ { "id": "T1", "title": "Repair narrow-screen reflow and zoom", "priority": 1, "findingIds": [ "F07", "F17", "F19" ], "guidanceId": "fluid-scaling", "status": "open" }, { "id": "T2", "title": "Make consent and age gates one accessible flow", "priority": 2, "findingIds": [ "F04", "F05", "F10", "F14" ], "guidanceId": "declarative-dialog-popover-control", "status": "open" }, { "id": "T3", "title": "Restore keyboard focus, labels, and contrast", "priority": 3, "findingIds": [ "F09", "F15", "F16", "F26" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T4", "title": "Reduce LCP, scripts, and render-blocking delivery", "priority": 4, "findingIds": [ "F11", "F12", "F13" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T5", "title": "Tighten headers, cookies, and third-party privacy", "priority": 5, "findingIds": [ "F21", "F22", "F24" ], "guidanceId": "security", "status": "open" }, { "id": "T6", "title": "Set image and third-party resource budgets", "priority": 6, "findingIds": [ "F18", "F27", "F28", "F29" ], "guidanceId": "deliver-optimized-decorative-images", "status": "open" }, { "id": "T7", "title": "Respect reduced motion", "priority": 7, "findingIds": [ "F01" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T8", "title": "Complete localized SEO and number formatting", "priority": 8, "findingIds": [ "F20", "F25" ], "guidanceId": "html", "status": "open" }, { "id": "T9", "title": "Add modern responsive and transition polish", "priority": 9, "findingIds": [ "F02", "F03", "F08" ], "guidanceId": "size-aware-styling", "status": "open" }, { "id": "T10", "title": "Offer passkeys", "priority": 10, "findingIds": [ "F23" ], "guidanceId": "passkeys", "status": "open" }, { "id": "T11", "title": "Reduce non-content chrome", "priority": 11, "findingIds": [ "F06" ], "guidanceId": "improve-text-layout-and-legibility", "status": "open" } ], "budget": { "wallClockSeconds": 720, "pathCount": 5, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-20T06-59-13-269Z" }