{ "url": "https://xhamster19.com", "auditedAt": "2026-07-21T12:28:42.363Z", "mode": "report", "status": "completed", "statusDetail": "All 58 catalog checks were judged across five representative paths. Search results, authenticated account areas, payment, upload/creator onboarding, and post-verification playback were not covered because they are separate templates or require account/identity state.", "page": { "appType": "mpa", "framework": "Server-rendered multi-page application with bundled client-side enhancement", "notes": "Public adult-media catalogue localized to GB. UK legal age verification gates playback. Cookie consent appeared on every fresh browser profile." }, "evidenceUsed": [ "screenshot", "dom", "layout-metrics", "evaluate-probe", "trace", "har", "images", "headers", "cookies", "trackers", "secrets", "discoverability", "lighthouse", "heap-summary", "curl robots/sitemap/manifest", "Modern Web Guidance 0.0.172" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "screenshot", "path": "evidence/404-desktop.png", "caption": "404 desktop.png" }, { "type": "screenshot", "path": "evidence/categories-desktop.png", "caption": "categories desktop.png" }, { "type": "other", "path": "evidence/cookies.json", "caption": "cookies.json" }, { "type": "other", "path": "evidence/dark-probe.json", "caption": "dark probe.json" }, { "type": "screenshot", "path": "evidence/discover-categories-crawler.png", "caption": "discover categories crawler.png" }, { "type": "screenshot", "path": "evidence/discover-categories-rendered.png", "caption": "discover categories rendered.png" }, { "type": "discoverability", "path": "evidence/discover-categories.json", "caption": "discover categories.json" }, { "type": "screenshot", "path": "evidence/discover-home-crawler.png", "caption": "discover home crawler.png" }, { "type": "screenshot", "path": "evidence/discover-home-rendered.png", "caption": "discover home rendered.png" }, { "type": "discoverability", "path": "evidence/discover-home.json", "caption": "discover home.json" }, { "type": "screenshot", "path": "evidence/discover-video-crawler.png", "caption": "discover video crawler.png" }, { "type": "screenshot", "path": "evidence/discover-video-rendered.png", "caption": "discover video rendered.png" }, { "type": "discoverability", "path": "evidence/discover-video.json", "caption": "discover video.json" }, { "type": "other", "path": "evidence/guidance/list.json", "caption": "guidance/list.json" }, { "type": "other", "path": "evidence/guidance/mapped-searches.json", "caption": "guidance/mapped searches.json" }, { "type": "other", "path": "evidence/guidance/retrieved-mapped-guides.md", "caption": "guidance/retrieved mapped guides.md" }, { "type": "other", "path": "evidence/headers.json", "caption": "headers.json" }, { "type": "heap", "path": "evidence/heap-baseline.json", "caption": "heap baseline.json" }, { "type": "heap", "path": "evidence/heap-post-interaction.json", "caption": "heap post interaction.json" }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "home dark.png" }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "home desktop.png" }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "home dom.json" }, { "type": "screenshot", "path": "evidence/home-forced-colors.png", "caption": "home forced colors.png" }, { "type": "other", "path": "evidence/home-images.json", "caption": "home images.json" }, { "type": "layout", "path": "evidence/home-layout.json", "caption": "home layout.json" }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "home mobile layout.json" }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile.png" }, { "type": "other", "path": "evidence/home-recon.json", "caption": "home recon.json" }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "home summary.json" }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "home trace summary.json" }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "home trace.json" }, { "type": "har", "path": "evidence/home.har", "caption": "home.har" }, { "type": "lighthouse", "path": "evidence/lighthouse-home-summary.json", "caption": "lighthouse home summary.json" }, { "type": "lighthouse", "path": "evidence/lighthouse-home.json", "caption": "lighthouse home.json" }, { "type": "lighthouse", "path": "evidence/lighthouse-signup-summary.json", "caption": "lighthouse signup summary.json" }, { "type": "lighthouse", "path": "evidence/lighthouse-signup.json", "caption": "lighthouse signup.json" }, { "type": "other", "path": "evidence/manifest.webmanifest", "caption": "manifest.webmanifest" }, { "type": "other", "path": "evidence/memory-metrics-baseline.json", "caption": "memory metrics baseline.json" }, { "type": "other", "path": "evidence/memory-metrics-post.json", "caption": "memory metrics post.json" }, { "type": "other", "path": "evidence/platform-probe.json", "caption": "platform probe.json" }, { "type": "other", "path": "evidence/pwa-probe.json", "caption": "pwa probe.json" }, { "type": "other", "path": "evidence/reduced-motion.json", "caption": "reduced motion.json" }, { "type": "other", "path": "evidence/robots-headers.txt", "caption": "robots headers.txt" }, { "type": "other", "path": "evidence/robots.txt", "caption": "robots.txt" }, { "type": "other", "path": "evidence/routes.json", "caption": "routes.json" }, { "type": "screenshot", "path": "evidence/search-desktop.png", "caption": "search desktop.png" }, { "type": "other", "path": "evidence/secrets.json", "caption": "secrets.json" }, { "type": "screenshot", "path": "evidence/signup-desktop.png", "caption": "signup desktop.png" }, { "type": "other", "path": "evidence/signup-detail.json", "caption": "signup detail.json" }, { "type": "screenshot", "path": "evidence/signup-email-form.png", "caption": "signup email form.png" }, { "type": "other", "path": "evidence/signup-email-probe.json", "caption": "signup email probe.json" }, { "type": "screenshot", "path": "evidence/signup-mobile.png", "caption": "signup mobile.png" }, { "type": "other", "path": "evidence/signup-probe.json", "caption": "signup probe.json" }, { "type": "other", "path": "evidence/sitemap-headers.txt", "caption": "sitemap headers.txt" }, { "type": "other", "path": "evidence/sitemap.xml", "caption": "sitemap.xml" }, { "type": "other", "path": "evidence/trackers.json", "caption": "trackers.json" }, { "type": "screenshot", "path": "evidence/video-desktop.png", "caption": "video desktop.png" }, { "type": "layout", "path": "evidence/video-mobile-layout.json", "caption": "video mobile layout.json" }, { "type": "other", "path": "evidence/video-probe.json", "caption": "video probe.json" }, { "type": "other", "path": "coverage-manifest.json", "caption": "Atomic 58-check coverage manifest and evidence plan." } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Emulated media screenshots and computed-style/getAnimations probes.", "evidence": "Default and prefers-color-scheme:dark screenshots are visually identical; under dark emulation computed colorScheme is normal and theme-color remains #ffffff.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dark.png", "evidence/dark-probe.json" ], "findingIds": [ "hardcoded-theme" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "issues", "confidence": "high", "method": "Emulated media screenshots and computed-style/getAnimations probes.", "evidence": "With prefers-reduced-motion:reduce active, getAnimations() still returned eight running animations, each with a 2000 ms duration.", "pathIds": [ "home" ], "artifacts": [ "evidence/reduced-motion.json" ], "findingIds": [ "reduced-motion" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Emulated media screenshots and computed-style/getAnimations probes.", "evidence": "Forced-colors/prefers-contrast screenshot keeps navigation, consent actions, titles and cards visibly separated with system colors.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png", "evidence/reduced-motion.json", "evidence/home-forced-colors.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "medium", "method": "CSS feature inspection plus representative route/state observation.", "evidence": "CSS inspection found zero view-transition rules on a multi-page experience with frequent route and modal state changes.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json" ], "findingIds": [ "no-view-transitions" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "pass", "confidence": "high", "method": "CSS feature inspection plus representative route/state observation.", "evidence": "CSS probe found no scroll-linked animation and the audited listing uses ordinary native scrolling, so there is no main-thread scroll animation to replace.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "high", "method": "CSS feature inspection plus representative route/state observation.", "evidence": "Audited discovery/watch/signup journeys use native links, buttons and scrolling; no custom pointermove/swipe surface was observed fighting browser gestures.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "medium", "method": "Long-page screenshots, layout metrics and navigation/CSS inspection.", "evidence": "The homepage is 4615 px tall, but CSS inspection found no scroll timeline/state query and the captured chrome remains static.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-layout.json", "evidence/platform-probe.json" ], "findingIds": [ "static-scroll-chrome" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "pass", "confidence": "high", "method": "Long-page screenshots, layout metrics and navigation/CSS inspection.", "evidence": "Representative header/category navigation remained attached and within the viewport; no tooltip or detachable edge overlay was part of the core paths.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-layout.json", "evidence/404-desktop.png" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "Long-page screenshots, layout metrics and navigation/CSS inspection.", "evidence": "Active navigation uses a red underline, pages have a single descriptive heading, cards expose clear titles, and the 404 provides a Return to Home Page action.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-layout.json", "evidence/404-desktop.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Load-state screenshots and semantic overlay DOM inspection.", "evidence": "Desktop screenshots show a large centered consent prompt covering cards, category navigation, video playback and signup before interaction.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/categories-desktop.png", "evidence/video-desktop.png", "evidence/signup-desktop.png" ], "findingIds": [ "load-interruption" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Load-state screenshots and semantic overlay DOM inspection.", "evidence": "The homepage probe found one full-viewport overlay but zero dialog, role=dialog or popover elements.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json", "evidence/home-desktop.png" ], "findingIds": [ "custom-consent-overlay" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "Load-state screenshots and semantic overlay DOM inspection.", "evidence": "Behind the consent prompt, desktop listing/category/detail templates devote the primary pane to content cards or the player with restrained borders.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/platform-probe.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "360x800 screenshots/layout metrics, CSS feature and focus/target probes.", "evidence": "The 360x800 layout primitive reports scrollWidth 1024, clientWidth 360 and 664 px horizontal overflow on both home and video detail; screenshots show navigation, content and signup controls clipped off-canvas.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png", "evidence/video-mobile-layout.json", "evidence/signup-mobile.png" ], "findingIds": [ "mobile-fixed-canvas" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "360x800 screenshots/layout metrics, CSS feature and focus/target probes.", "evidence": "CSS inspection found zero @container rules while the same navigation, card and account components overflow in narrow containers.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json", "evidence/home-mobile.png" ], "findingIds": [ "component-responsiveness" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "360x800 screenshots/layout metrics, CSS feature and focus/target probes.", "evidence": "Computed focus probes showed outline style none on search and Login; Lighthouse failed target-size, and the DOM probe found at least 30 interactive elements below 24 px.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json", "evidence/lighthouse-home-summary.json" ], "findingIds": [ "input-modality" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Representative home, watch, signup and 404 journey walkthroughs.", "evidence": "Homepage H1 is “Trending Free Porn Videos”; category and video detail have specific H1/title text and the age gate exposes a prominent Get started action.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/video-desktop.png", "evidence/signup-mobile.png", "evidence/404-desktop.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Representative home, watch, signup and 404 journey walkthroughs.", "evidence": "At 360x800, the fixed desktop canvas leaves the signup card mostly off-screen; users see only a narrow clipped strip of the primary flow.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-mobile.png", "evidence/home-mobile-layout.json" ], "findingIds": [ "signup-mobile-flow" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "Representative home, watch, signup and 404 journey walkthroughs.", "evidence": "The age gate explains why playback is blocked, blank signup submission gives field requirements, and the sampled 404 clearly says Page not found with a home recovery link.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/video-desktop.png", "evidence/signup-mobile.png", "evidence/404-desktop.png" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Lighthouse, trace summary, layout observers, HAR summary and image audit.", "evidence": "Lighthouse measured LCP 2.7 s and FCP 2.6 s on the homepage; the separate desktop trace measured LCP 1.62 s, so the mobile condition is the concern.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/home-trace-summary.json" ], "findingIds": [ "lcp-borderline" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Lighthouse, trace summary, layout observers, HAR summary and image audit.", "evidence": "Desktop layout observation measured CLS 0.00051 and Lighthouse measured CLS 0; no visible jump occurred in sampled screenshots.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/home-trace-summary.json", "evidence/home-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "issues", "confidence": "high", "method": "Lighthouse, trace summary, layout observers, HAR summary and image audit.", "evidence": "The trace recorded two long tasks, longest 160.84 ms, and 125.36 ms total blocking time; layout observation independently saw a 153 ms task.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-layout.json" ], "findingIds": [ "main-thread-bursts" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Lighthouse, trace summary, layout observers, HAR summary and image audit.", "evidence": "HAR recorded 147 requests and 1.78 MB transferred; three parser-inserted VeryHigh-priority stylesheets were confirmed as render-blocking candidates, alongside 66 scripts.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home.har" ], "findingIds": [ "resource-delivery" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Lighthouse, trace summary, layout observers, HAR summary and image audit.", "evidence": "HAR attributes 1,017,548 transferred bytes to 66 scripts; index.js alone is 400,257 bytes and third-party Google code adds 98,484 bytes.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home.har" ], "findingIds": [ "script-payload" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Lighthouse accessibility audits, computed focus/target probes and reflow screenshots.", "evidence": "Lighthouse failed button-name on a visible control; the image audit found one missing alt among 36 images.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/home-images.json" ], "findingIds": [ "accessible-names" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Lighthouse accessibility audits, computed focus/target probes and reflow screenshots.", "evidence": "Lighthouse measured 2.15:1 and 1.75:1 on the age-verification banner, 3.29:1 on view counts, and 3.29:1 on signup legal copy, below 4.5:1.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/lighthouse-signup-summary.json" ], "findingIds": [ "color-contrast" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Lighthouse accessibility audits, computed focus/target probes and reflow screenshots.", "evidence": "Computed focus probes show outline none and no box-shadow on search and Login; several top navigation links also have outline style none.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json" ], "findingIds": [ "focus-structure" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "issues", "confidence": "high", "method": "Lighthouse accessibility audits, computed focus/target probes and reflow screenshots.", "evidence": "The mobile screenshots cut off headings, banner copy, cards and the account panel because content remains 1024 px wide.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/signup-mobile.png" ], "findingIds": [ "legibility-clipping" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Lighthouse accessibility audits, computed focus/target probes and reflow screenshots.", "evidence": "At 360 CSS px, 664 px overflow remains and Lighthouse target-size fails; the viewport meta itself permits scaling, so layout is the blocker.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/lighthouse-home-summary.json" ], "findingIds": [ "zoom-reflow" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Lighthouse best-practices audits and document/platform probes.", "evidence": "Lighthouse errors-in-console audit passed on homepage and signup with no logged browser errors.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/platform-probe.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "pass", "confidence": "high", "method": "Lighthouse best-practices audits and document/platform probes.", "evidence": "Doctype, UTF-8 charset and main landmark are present; Lighthouse passed doctype, charset, image aspect-ratio and responsive-image rendering audits.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/platform-probe.json" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "pass", "confidence": "high", "method": "Lighthouse best-practices audits and document/platform probes.", "evidence": "Lighthouse passed BFCache, deprecations, permission-on-start and DevTools inspector-issues audits on homepage and signup.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/platform-probe.json" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "Metadata probes, robots/sitemap fetches and raw-vs-rendered discoverability captures.", "evidence": "Homepage, category, video and signup expose descriptive titles/meta descriptions; raw-HTML discoverability confirms title and description survive without JS.", "pathIds": [ "home" ], "artifacts": [ "evidence/discover-home.json", "evidence/video-probe.json", "evidence/robots.txt" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "high", "method": "Metadata probes, robots/sitemap fetches and raw-vs-rendered discoverability captures.", "evidence": "Viewport meta and real href links are present; robots.txt is valid, homepage is indexable, and raw HTML contains 77–100% of representative rendered content.", "pathIds": [ "home" ], "artifacts": [ "evidence/discover-home.json", "evidence/video-probe.json", "evidence/robots.txt" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Metadata probes, robots/sitemap fetches and raw-vs-rendered discoverability captures.", "evidence": "robots.txt is valid and pages are indexable, but GET /sitemap.xml returned HTTP/2 404 with an empty body.", "pathIds": [ "home" ], "artifacts": [ "evidence/sitemap-headers.txt", "evidence/robots.txt" ], "findingIds": [ "missing-sitemap" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Metadata probes, robots/sitemap fetches and raw-vs-rendered discoverability captures.", "evidence": "The representative detail page has accurate Open Graph tags but zero application/ld+json blocks, despite representing a VideoObject.", "pathIds": [ "home" ], "artifacts": [ "evidence/video-probe.json" ], "findingIds": [ "missing-video-structured-data" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Headers, cookies, secrets, trackers and HAR evidence plus auth probes.", "evidence": "HTTPS/HSTS are present, but CSP only declares frame-ancestors; four of five cookies were flagged insecure and several use SameSite=None, including settings and g_state.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "transport-cookies" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Headers, cookies, secrets, trackers and HAR evidence plus auth probes.", "evidence": "HAR recorded 118 third-party requests transferring 1.59 MB across 11 third-party origins, including identity, recommendation and ad endpoints while the consent prompt was still open.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json", "evidence/home-desktop.png" ], "findingIds": [ "third-party-collection" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Headers, cookies, secrets, trackers and HAR evidence plus auth probes.", "evidence": "No permission prompt fired on load, but signup offers Google, X and email/password; probes found no WebAuthn/passkey affordance or autocomplete=webauthn.", "pathIds": [ "home" ], "artifacts": [ "evidence/signup-detail.json", "evidence/signup-probe.json" ], "findingIds": [ "password-only-auth" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Headers, cookies, secrets, trackers and HAR evidence plus auth probes.", "evidence": "Headers omit X-Content-Type-Options and Referrer-Policy; HSTS max-age is only 86400 seconds; Permissions-Policy only configures client hints and CSP lacks broader XSS directives.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "defensive-policies" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "No-JS discoverability, PWA registration probe and deliberate 404 walkthrough.", "evidence": "Raw server HTML contains 84% of homepage, 100% of categories and 77% of video-detail rendered words; all retain title/H1/description without JavaScript.", "pathIds": [ "home" ], "artifacts": [ "evidence/discover-home.json", "evidence/pwa-probe.json", "evidence/404-desktop.png" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "high", "method": "No-JS discoverability, PWA registration probe and deliberate 404 walkthrough.", "evidence": "Consent, age-gate and 404 states render stable, offer explicit actions and do not produce console/Inspector errors in the sampled runtime.", "pathIds": [ "home" ], "artifacts": [ "evidence/discover-home.json", "evidence/pwa-probe.json", "evidence/404-desktop.png" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "No-JS discoverability, PWA registration probe and deliberate 404 walkthrough.", "evidence": "The core product is network-streamed media, so offline playback is not a reasonable requirement; a manifest and active service worker are nevertheless present.", "reason": "The core product is network-streamed media, so offline playback is not a reasonable requirement; a manifest and active service worker are nevertheless present." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "No-JS discoverability, PWA registration probe and deliberate 404 walkthrough.", "evidence": "The deliberate missing route renders a clear Page not found state, support guidance and Return to Home Page recovery instead of a blank shell.", "pathIds": [ "home" ], "artifacts": [ "evidence/discover-home.json", "evidence/pwa-probe.json", "evidence/404-desktop.png" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "lang/dir and CSS logical-property inspection across multilingual navigation.", "evidence": "The English page declares lang=en, but stylesheet inspection counted 684 physical left/right declarations versus 19 logical-property occurrences on a site linking dozens of languages including RTL locales.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json", "evidence/home-recon.json" ], "findingIds": [ "physical-i18n-css" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "lang/dir and CSS logical-property inspection across multilingual navigation.", "evidence": "No dates, currencies, numeric entry or locale-sensitive data were present in the representative public and signup surfaces.", "reason": "No dates, currencies, numeric entry or locale-sensitive data were present in the representative public and signup surfaces." }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "lang/dir and CSS logical-property inspection across multilingual navigation.", "evidence": "No event scheduling, time-zone display or recurring-time concept was present in the representative surfaces.", "reason": "No event scheduling, time-zone display or recurring-time concept was present in the representative surfaces." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "issues", "confidence": "high", "method": "Consent choice and email-signup interaction with blank submission and autocomplete inspection.", "evidence": "After choosing Reject and opening email signup, the page displays “Some features may not be available… For a better user experience, please accept all cookies” with an Accept all cookies action.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-email-probe.json", "evidence/home-desktop.png" ], "findingIds": [ "consent-nagging" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "issues", "confidence": "high", "method": "Consent choice and email-signup interaction with blank submission and autocomplete inspection.", "evidence": "Blank email submission shows “This field is required” and a password requirement, but the probe found no role=alert, aria-live or aria-invalid=true elements.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-email-probe.json" ], "findingIds": [ "form-errors-unannounced" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Consent choice and email-signup interaction with blank submission and autocomplete inspection.", "evidence": "The revealed signup form contains duplicate text inputs named email with autocomplete=off; password correctly uses new-password, but neither input has an associated label.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-email-probe.json" ], "findingIds": [ "email-autocomplete" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "issues", "confidence": "medium", "method": "Consent choice and email-signup interaction with blank submission and autocomplete inspection.", "evidence": "Signup clearly discloses public data use and offers reversible login navigation, but only federated and email/password enrollment are visible.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-detail.json" ], "findingIds": [ "account-auth-safety" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "HAR byte/request accounting, tracker origins, image audit and trace evidence.", "evidence": "The image audit found 13 oversized images, 29 missing width/height attributes, 15 legacy-format URLs, and 8 below-fold images without lazy loading.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-images.json" ], "findingIds": [ "oversized-assets" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "HAR byte/request accounting, tracker origins, image audit and trace evidence.", "evidence": "The initial HAR contains 147 requests, 66 scripts and long recommendation/ad requests around 2.4–2.8 s, before the user has selected content.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home-trace-summary.json" ], "findingIds": [ "wasteful-background-work" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "HAR byte/request accounting, tracker origins, image audit and trace evidence.", "evidence": "Third parties account for 1,588,914 of 1,781,408 transferred bytes (89%) and 118 of 147 requests.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "findingIds": [ "third-party-budget" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "DOM/source capability probe and core-journey applicability judgement.", "evidence": "This public media catalogue exposes no declared agent-facing transaction or productivity capability; emerging WebMCP support is therefore not required.", "reason": "This public media catalogue exposes no declared agent-facing transaction or productivity capability; emerging WebMCP support is therefore not required." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "DOM/source capability probe and core-journey applicability judgement.", "evidence": "No summarisation or language-model task was part of the audited core watch/discovery journey; on-device inference is not applicable.", "reason": "No summarisation or language-model task was part of the audited core watch/discovery journey; on-device inference is not applicable." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "high", "method": "Baseline/post-interaction heap summaries and performance.memory/DOM metrics.", "evidence": "After ten Login/Escape plus scroll-to-end/back cycles, heap grew from 36.27 MB to 40.70 MB with no Detached constructor in top summaries; growth is bounded and partly explained by lazy-loaded content.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post-interaction.json", "evidence/memory-metrics-post.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "high", "method": "Baseline/post-interaction heap summaries and performance.memory/DOM metrics.", "evidence": "Baseline heap self-size is 36.27 MB with 681,252 snapshot nodes and live performance.memory used heap about 23.3 MB, proportionate to a media listing.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post-interaction.json", "evidence/memory-metrics-post.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "high", "method": "Baseline/post-interaction heap summaries and performance.memory/DOM metrics.", "evidence": "Neither baseline nor post-interaction top constructor summaries contain Detached* populations; post state has no open dialogs after repeated Escape cycles.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post-interaction.json", "evidence/memory-metrics-post.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "hardcoded-theme", "reduced-motion" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "no-view-transitions" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "static-scroll-chrome" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "load-interruption", "custom-consent-overlay" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "mobile-fixed-canvas", "component-responsiveness", "input-modality" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "signup-mobile-flow" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "lcp-borderline", "main-thread-bursts", "resource-delivery", "script-payload" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "accessible-names", "color-contrast", "focus-structure", "legibility-clipping", "zoom-reflow" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "pass" }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "missing-sitemap", "missing-video-structured-data" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "transport-cookies", "third-party-collection", "password-only-auth", "defensive-policies" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "pass" }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "physical-i18n-css" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "consent-nagging", "form-errors-unannounced", "email-autocomplete", "account-auth-safety" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "oversized-assets", "wasteful-background-work", "third-party-budget" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "This public media catalogue exposes no declared agent-facing transaction or productivity capability; emerging WebMCP support is therefore not required. No summarisation or language-model task was part of the audited core watch/discovery journey; on-device inference is not applicable." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Public homepage and trending-video listing, representing the primary discovery surface.", "url": "https://xhamster19.com/", "conditions": [ "desktop 1440x900", "mobile 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "forced-colors: active", "keyboard focus" ], "result": "issues" }, { "id": "categories", "description": "Category index, representing taxonomy/listing navigation.", "url": "https://xhamster19.com/categories", "conditions": [ "desktop 1440x900", "no-JavaScript crawler comparison" ], "result": "issues" }, { "id": "video", "description": "Representative video-detail and watch journey, including the UK age-verification gate.", "url": "https://xhamster19.com/videos/belgian-curvy-milf-ladylyne-fucks-like-a-goddess-in-a-hotel-room-xhzTrND", "conditions": [ "desktop 1440x900", "mobile 360x800", "no-JavaScript crawler comparison" ], "result": "issues" }, { "id": "signup", "description": "Account creation journey, including social/email choices, blank submission, autocomplete, privacy disclosure and mobile layout.", "url": "https://xhamster19.com/signup?source=menuSignup", "conditions": [ "desktop 1440x900", "mobile 360x800", "blank email-form submission" ], "result": "issues" }, { "id": "error-404", "description": "Deliberately invalid route, representing HTTP error and recovery handling.", "url": "https://xhamster19.com/this-route-should-not-exist-web-uplift", "conditions": [ "desktop 1440x900" ], "result": "pass" } ], "findings": [ { "id": "mobile-fixed-canvas", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "css-layout", "severity": "critical", "confidence": "high", "summary": "The desktop canvas is forced into mobile viewports.", "evidence": "The 360x800 layout primitive reports scrollWidth 1024, clientWidth 360 and 664 px horizontal overflow on both home and video detail; screenshots show navigation, content and signup controls clipped off-canvas.", "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png", "evidence/video-mobile-layout.json", "evidence/signup-mobile.png" ], "suggestedFix": "Replace the 1024 px minimum layout with intrinsic Grid/Flex sizing, clamp fluid dimensions, and verify every template at 320–412 px.", "effort": "large" }, { "id": "component-responsiveness", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "severity": "medium", "confidence": "high", "summary": "Reusable surfaces do not adapt at component level.", "evidence": "CSS inspection found zero @container rules while the same navigation, card and account components overflow in narrow containers.", "artifacts": [ "evidence/platform-probe.json", "evidence/home-mobile.png" ], "suggestedFix": "Give reused components containment and apply size-aware container queries, with intrinsic fallback layout.", "effort": "medium" }, { "id": "input-modality", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "severity": "high", "confidence": "high", "summary": "Focus visibility and target sizing are unreliable.", "evidence": "Computed focus probes showed outline style none on search and Login; Lighthouse failed target-size, and the DOM probe found at least 30 interactive elements below 24 px.", "artifacts": [ "evidence/platform-probe.json", "evidence/lighthouse-home-summary.json" ], "suggestedFix": "Provide a strong :focus-visible treatment and enlarge or space targets to at least 24 CSS px, preferably 44 px for primary touch actions.", "effort": "medium" }, { "id": "hardcoded-theme", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "severity": "medium", "confidence": "high", "summary": "The dark presentation is hard-coded rather than preference-driven.", "evidence": "Default and prefers-color-scheme:dark screenshots are visually identical; under dark emulation computed colorScheme is normal and theme-color remains #ffffff.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-dark.png", "evidence/dark-probe.json" ], "suggestedFix": "Declare color-scheme: light dark, supply preference-driven tokens, and keep theme-color synchronized for both schemes.", "effort": "medium" }, { "id": "reduced-motion", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "respect-user-preferences", "principleCheckId": "respects-reduced-motion", "guidanceId": "accessibility", "severity": "medium", "confidence": "high", "summary": "Animations continue under reduced-motion preference.", "evidence": "With prefers-reduced-motion:reduce active, getAnimations() still returned eight running animations, each with a 2000 ms duration.", "artifacts": [ "evidence/reduced-motion.json" ], "suggestedFix": "Disable non-essential animation and transitions inside @media (prefers-reduced-motion: reduce), preserving only necessary state feedback.", "effort": "small" }, { "id": "no-view-transitions", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "cross-document-transitions", "severity": "low", "confidence": "medium", "summary": "Route and state changes do not use View Transitions.", "evidence": "CSS inspection found zero view-transition rules on a multi-page experience with frequent route and modal state changes.", "artifacts": [ "evidence/platform-probe.json" ], "suggestedFix": "Use cross-document View Transitions for same-origin navigation and same-document transitions for modal/state changes, with reduced-motion handling.", "effort": "medium" }, { "id": "static-scroll-chrome", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "scroll-progress-indicator", "severity": "low", "confidence": "medium", "summary": "Long listing pages provide no scroll-position feedback.", "evidence": "The homepage is 4615 px tall, but CSS inspection found no scroll timeline/state query and the captured chrome remains static.", "artifacts": [ "evidence/home-layout.json", "evidence/platform-probe.json" ], "suggestedFix": "Add a lightweight scroll progress or scroll-state-aware compact header without hiding core navigation.", "effort": "small" }, { "id": "load-interruption", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "light-dismiss-a-dialog", "severity": "high", "confidence": "high", "summary": "A consent modal obscures the primary content on every sampled public page.", "evidence": "Desktop screenshots show a large centered consent prompt covering cards, category navigation, video playback and signup before interaction.", "artifacts": [ "evidence/home-desktop.png", "evidence/categories-desktop.png", "evidence/video-desktop.png", "evidence/signup-desktop.png" ], "suggestedFix": "Use the least interruptive consent surface allowed, keep essential content operable, and avoid re-prompting after an explicit choice.", "effort": "medium" }, { "id": "custom-consent-overlay", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "severity": "medium", "confidence": "high", "summary": "The consent overlay is custom div chrome rather than a semantic modal primitive.", "evidence": "The homepage probe found one full-viewport overlay but zero dialog, role=dialog or popover elements.", "artifacts": [ "evidence/platform-probe.json", "evidence/home-desktop.png" ], "suggestedFix": "Implement the blocking consent surface with and correct focus/inert handling, or use a non-modal disclosure where blocking is unnecessary.", "effort": "medium" }, { "id": "signup-mobile-flow", "pathId": "signup", "url": "https://xhamster19.com/signup?source=menuSignup", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "forms", "severity": "critical", "confidence": "high", "summary": "The signup journey is not usable at the audited mobile viewport.", "evidence": "At 360x800, the fixed desktop canvas leaves the signup card mostly off-screen; users see only a narrow clipped strip of the primary flow.", "artifacts": [ "evidence/signup-mobile.png", "evidence/home-mobile-layout.json" ], "suggestedFix": "Apply the responsive canvas fix to account routes and test email signup end-to-end at 320–412 px before release.", "effort": "large" }, { "id": "lcp-borderline", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "optimize-image-priority", "severity": "medium", "confidence": "high", "summary": "Synthetic mobile LCP misses the good threshold.", "evidence": "Lighthouse measured LCP 2.7 s and FCP 2.6 s on the homepage; the separate desktop trace measured LCP 1.62 s, so the mobile condition is the concern.", "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/home-trace-summary.json" ], "suggestedFix": "Prioritize the first meaningful thumbnail/heading resources and reduce initial stylesheet/script contention; validate with field CWV after deployment.", "effort": "medium" }, { "id": "main-thread-bursts", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-main-thread", "guidanceId": "break-up-long-tasks", "severity": "medium", "confidence": "high", "summary": "Startup includes avoidable long main-thread tasks.", "evidence": "The trace recorded two long tasks, longest 160.84 ms, and 125.36 ms total blocking time; layout observation independently saw a 153 ms task.", "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-layout.json" ], "suggestedFix": "Break up startup work, schedule non-critical work by priority, and defer recommendation/ad initialization until needed.", "effort": "medium" }, { "id": "resource-delivery", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-script-priority", "severity": "medium", "confidence": "high", "summary": "The initial dependency set is broad and includes blocking CSS.", "evidence": "HAR recorded 147 requests and 1.78 MB transferred; three parser-inserted VeryHigh-priority stylesheets were confirmed as render-blocking candidates, alongside 66 scripts.", "artifacts": [ "evidence/home-summary.json", "evidence/home.har" ], "suggestedFix": "Inline only critical CSS, defer non-critical styles, and reduce the startup dependency tree while preserving cacheability.", "effort": "large" }, { "id": "script-payload", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "severity": "medium", "confidence": "high", "summary": "JavaScript dominates initial transfer.", "evidence": "HAR attributes 1,017,548 transferred bytes to 66 scripts; index.js alone is 400,257 bytes and third-party Google code adds 98,484 bytes.", "artifacts": [ "evidence/home-summary.json", "evidence/home.har" ], "suggestedFix": "Use coverage to remove unused code, split route-specific bundles, and load identity/recommendation dependencies only when their surface is invoked.", "effort": "large" }, { "id": "accessible-names", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "severity": "high", "confidence": "high", "summary": "Some controls lack accessible names and one image lacks alt text.", "evidence": "Lighthouse failed button-name on a visible control; the image audit found one missing alt among 36 images.", "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/home-images.json" ], "suggestedFix": "Give every control a stable accessible name and classify every image as meaningful alt text or decorative alt=\"\".", "effort": "small" }, { "id": "color-contrast", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "severity": "high", "confidence": "high", "summary": "Important text fails WCAG contrast.", "evidence": "Lighthouse measured 2.15:1 and 1.75:1 on the age-verification banner, 3.29:1 on view counts, and 3.29:1 on signup legal copy, below 4.5:1.", "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/lighthouse-signup-summary.json" ], "suggestedFix": "Adjust foreground/background tokens to meet WCAG AA in default and forced-color modes, then rerun contrast checks.", "effort": "small" }, { "id": "focus-structure", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "severity": "high", "confidence": "high", "summary": "Keyboard focus is not visibly indicated on core controls.", "evidence": "Computed focus probes show outline none and no box-shadow on search and Login; several top navigation links also have outline style none.", "artifacts": [ "evidence/platform-probe.json" ], "suggestedFix": "Add a high-contrast :focus-visible ring with adequate offset and verify a full keyboard walk in reading order.", "effort": "small" }, { "id": "legibility-clipping", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "be-inclusive", "principleCheckId": "legible-text", "guidanceId": "improve-text-layout-and-legibility", "severity": "high", "confidence": "high", "summary": "Text and controls are clipped at narrow widths.", "evidence": "The mobile screenshots cut off headings, banner copy, cards and the account panel because content remains 1024 px wide.", "artifacts": [ "evidence/home-mobile.png", "evidence/signup-mobile.png" ], "suggestedFix": "Allow text containers to shrink and wrap intrinsically; avoid fixed widths and verify no clipping at zoom/reflow widths.", "effort": "medium" }, { "id": "zoom-reflow", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "fluid-scaling", "severity": "high", "confidence": "high", "summary": "The experience fails reflow and includes undersized targets.", "evidence": "At 360 CSS px, 664 px overflow remains and Lighthouse target-size fails; the viewport meta itself permits scaling, so layout is the blocker.", "artifacts": [ "evidence/home-mobile-layout.json", "evidence/lighthouse-home-summary.json" ], "suggestedFix": "Meet WCAG reflow at 320 CSS px and increase target size/spacing without preventing zoom.", "effort": "large" }, { "id": "missing-sitemap", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "severity": "medium", "confidence": "high", "summary": "The conventional sitemap endpoint returns 404.", "evidence": "robots.txt is valid and pages are indexable, but GET /sitemap.xml returned HTTP/2 404 with an empty body.", "artifacts": [ "evidence/sitemap-headers.txt", "evidence/robots.txt" ], "suggestedFix": "Publish a sitemap index at the declared robots location (or clearly advertise the actual sitemap URLs) and keep canonical/robots signals consistent.", "effort": "small" }, { "id": "missing-video-structured-data", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "html", "severity": "medium", "confidence": "high", "summary": "Video detail pages omit structured data.", "evidence": "The representative detail page has accurate Open Graph tags but zero application/ld+json blocks, despite representing a VideoObject.", "artifacts": [ "evidence/video-probe.json" ], "suggestedFix": "Add schema.org VideoObject JSON-LD matching the visible title, thumbnail, duration, upload date and access restrictions.", "effort": "small" }, { "id": "transport-cookies", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "severity": "high", "confidence": "high", "summary": "Cookie and CSP transport protections are incomplete.", "evidence": "HTTPS/HSTS are present, but CSP only declares frame-ancestors; four of five cookies were flagged insecure and several use SameSite=None, including settings and g_state.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "suggestedFix": "Set Secure on all HTTPS cookies, use the strictest viable SameSite value, and deploy a nonce/hash-based script-src CSP in report-only mode before enforcement.", "effort": "medium" }, { "id": "third-party-collection", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "severity": "high", "confidence": "high", "summary": "The pre-consent page has a large third-party/network footprint.", "evidence": "HAR recorded 118 third-party requests transferring 1.59 MB across 11 third-party origins, including identity, recommendation and ad endpoints while the consent prompt was still open.", "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json", "evidence/home-desktop.png" ], "suggestedFix": "Block non-essential third parties until consent, minimize recommendation payloads, and batch telemetry with documented retention and purpose.", "effort": "large" }, { "id": "password-only-auth", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkey-registration", "severity": "medium", "confidence": "high", "summary": "Account creation exposes no phishing-resistant passkey path.", "evidence": "No permission prompt fired on load, but signup offers Google, X and email/password; probes found no WebAuthn/passkey affordance or autocomplete=webauthn.", "artifacts": [ "evidence/signup-detail.json", "evidence/signup-probe.json" ], "suggestedFix": "Add passkey registration/authentication and conditional UI alongside existing recovery options.", "effort": "large" }, { "id": "defensive-policies", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "severity": "high", "confidence": "high", "summary": "Several browser-enforced defenses are weak or absent.", "evidence": "Headers omit X-Content-Type-Options and Referrer-Policy; HSTS max-age is only 86400 seconds; Permissions-Policy only configures client hints and CSP lacks broader XSS directives.", "artifacts": [ "evidence/headers.json" ], "suggestedFix": "Add nosniff and a strict referrer policy, extend HSTS after readiness, restrict Permissions-Policy, and expand CSP with script/style/connect policies and Trusted Types where feasible.", "effort": "medium" }, { "id": "physical-i18n-css", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "translator", "severity": "medium", "confidence": "high", "summary": "CSS remains heavily dependent on physical left/right properties.", "evidence": "The English page declares lang=en, but stylesheet inspection counted 684 physical left/right declarations versus 19 logical-property occurrences on a site linking dozens of languages including RTL locales.", "artifacts": [ "evidence/platform-probe.json", "evidence/home-recon.json" ], "suggestedFix": "Migrate layout primitives to margin/padding/inset-inline and block/inline sizing; test Arabic, Persian and Hebrew routes with dir=rtl.", "effort": "large" }, { "id": "consent-nagging", "pathId": "signup", "url": "https://xhamster19.com/signup?source=menuSignup", "principleId": "be-trustworthy", "principleCheckId": "no-dark-patterns", "guidanceId": "privacy", "severity": "high", "confidence": "high", "summary": "Rejecting optional cookies triggers a new accept-all prompt.", "evidence": "After choosing Reject and opening email signup, the page displays “Some features may not be available… For a better user experience, please accept all cookies” with an Accept all cookies action.", "artifacts": [ "evidence/signup-email-probe.json", "evidence/home-desktop.png" ], "suggestedFix": "Honor rejection without nagging; expose neutral preference management and explain only concrete feature dependencies at the point of use.", "effort": "small" }, { "id": "form-errors-unannounced", "pathId": "signup", "url": "https://xhamster19.com/signup?source=menuSignup", "principleId": "be-trustworthy", "principleCheckId": "humane-error-handling", "guidanceId": "accessible-error-announcement", "severity": "medium", "confidence": "high", "summary": "Signup validation messages are not exposed as live errors.", "evidence": "Blank email submission shows “This field is required” and a password requirement, but the probe found no role=alert, aria-live or aria-invalid=true elements.", "artifacts": [ "evidence/signup-email-probe.json" ], "suggestedFix": "Associate errors with fields using aria-describedby/aria-invalid and announce the error summary in a polite live region after submission.", "effort": "small" }, { "id": "email-autocomplete", "pathId": "signup", "url": "https://xhamster19.com/signup?source=menuSignup", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-sign-up-form", "severity": "medium", "confidence": "high", "summary": "The email signup field disables autofill.", "evidence": "The revealed signup form contains duplicate text inputs named email with autocomplete=off; password correctly uses new-password, but neither input has an associated label.", "artifacts": [ "evidence/signup-email-probe.json" ], "suggestedFix": "Use type=email and autocomplete=email, keep autocomplete=new-password, remove duplicate controls, and provide visible labels.", "effort": "small" }, { "id": "account-auth-safety", "pathId": "signup", "url": "https://xhamster19.com/signup?source=menuSignup", "principleId": "be-trustworthy", "principleCheckId": "safe-commercial-and-account-flows", "guidanceId": "passkey-management", "severity": "medium", "confidence": "medium", "summary": "Account flow lacks a passkey option despite handling sensitive identity and age state.", "evidence": "Signup clearly discloses public data use and offers reversible login navigation, but only federated and email/password enrollment are visible.", "artifacts": [ "evidence/signup-detail.json" ], "suggestedFix": "Offer passkeys, make account deletion/cancellation discoverable after signup, and retain the clear data-use disclosure.", "effort": "large" }, { "id": "oversized-assets", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "optimize-image-priority", "severity": "medium", "confidence": "high", "summary": "Image delivery wastes bytes and dimensions.", "evidence": "The image audit found 13 oversized images, 29 missing width/height attributes, 15 legacy-format URLs, and 8 below-fold images without lazy loading.", "artifacts": [ "evidence/home-images.json" ], "suggestedFix": "Serve correctly sized AVIF/WebP variants with srcset/sizes, explicit dimensions and below-fold lazy loading.", "effort": "medium" }, { "id": "wasteful-background-work", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "guidanceId": "deprioritize-background-fetches", "severity": "medium", "confidence": "high", "summary": "Recommendation and advertising work starts broadly on initial load.", "evidence": "The initial HAR contains 147 requests, 66 scripts and long recommendation/ad requests around 2.4–2.8 s, before the user has selected content.", "artifacts": [ "evidence/home-summary.json", "evidence/home-trace-summary.json" ], "suggestedFix": "Deprioritize or defer recommendations, identity and ads until consent/intent, and cancel work when hidden or irrelevant.", "effort": "large" }, { "id": "third-party-budget", "pathId": "home", "url": "https://xhamster19.com/", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "efficient-background-processing", "severity": "medium", "confidence": "high", "summary": "Third-party code consumes most initial network bytes.", "evidence": "Third parties account for 1,588,914 of 1,781,408 transferred bytes (89%) and 118 of 147 requests.", "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "suggestedFix": "Set a third-party byte/request budget, gate optional integrations, and load media/ad code only near interaction.", "effort": "large" } ], "taskList": [ { "id": "responsive", "title": "Make every primary template reflow at mobile widths", "priority": 1, "findingIds": [ "mobile-fixed-canvas", "component-responsiveness", "signup-mobile-flow", "legibility-clipping", "zoom-reflow" ], "guidanceId": "css-layout", "status": "open" }, { "id": "accessibility", "title": "Fix contrast, focus, names and target size", "priority": 2, "findingIds": [ "input-modality", "accessible-names", "color-contrast", "focus-structure" ], "guidanceId": "accessibility", "status": "open" }, { "id": "privacy-consent", "title": "Honor consent and gate third parties", "priority": 3, "findingIds": [ "load-interruption", "third-party-collection", "consent-nagging" ], "guidanceId": "privacy", "status": "open" }, { "id": "security", "title": "Strengthen cookies, CSP and defensive headers", "priority": 4, "findingIds": [ "transport-cookies", "defensive-policies" ], "guidanceId": "security", "status": "open" }, { "id": "payload", "title": "Reduce startup JavaScript, requests and long tasks", "priority": 5, "findingIds": [ "main-thread-bursts", "resource-delivery", "script-payload", "wasteful-background-work", "third-party-budget" ], "guidanceId": "identify-heavy-scripts", "status": "open" }, { "id": "semantic-modal", "title": "Use semantic, less intrusive consent UI", "priority": 6, "findingIds": [ "custom-consent-overlay" ], "guidanceId": "declarative-dialog-popover-control", "status": "open" }, { "id": "preferences", "title": "Respect theme and reduced-motion preferences", "priority": 7, "findingIds": [ "hardcoded-theme", "reduced-motion" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "account", "title": "Modernize signup validation, autofill and authentication", "priority": 8, "findingIds": [ "password-only-auth", "form-errors-unannounced", "email-autocomplete", "account-auth-safety" ], "guidanceId": "autofill-sign-up-form", "status": "open" }, { "id": "assets", "title": "Right-size and defer images", "priority": 9, "findingIds": [ "oversized-assets" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "metadata", "title": "Publish sitemap and VideoObject metadata", "priority": 10, "findingIds": [ "missing-sitemap", "missing-video-structured-data" ], "guidanceId": "html", "status": "open" }, { "id": "i18n", "title": "Migrate layout CSS to logical properties", "priority": 11, "findingIds": [ "physical-i18n-css" ], "guidanceId": "translator", "status": "open" }, { "id": "navigation-motion", "title": "Add restrained transition and scroll orientation cues", "priority": 12, "findingIds": [ "no-view-transitions", "static-scroll-chrome" ], "guidanceId": "cross-document-transitions", "status": "open" } ], "budget": { "wallClockSeconds": 1200, "pathCount": 5, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-21T12-28-42-363Z" }