{ "url": "https://id.xhamster.com", "auditedAt": "2026-07-22T21:39:25.383Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete audit across six representative paths. The legal age-verification step was inspected but not completed with personal identity.", "page": { "appType": "mpa", "framework": "server-rendered MPA with client hydration", "notes": "id.xhamster.com localized Indonesian media site; location-sensitive UI presented UK age-verification messaging. Home/category/detail/account/404 templates covered. Not covered: authenticated account area, actual identity verification, payment/subscription completion, creator upload, live chat, or media playback beyond the age gate." }, "evidenceUsed": [ "screenshot", "dom", "layout-metrics", "evaluate-probe", "trace", "har", "discoverability", "headers", "cookies", "trackers", "secrets", "images", "heap-summary", "lighthouse", "Modern Web Guidance 0.0.172" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "custom-button-actions", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "screenshot", "path": "evidence/category-mobile.png", "caption": "category mobile", "condition": "viewport: 360x800" }, { "type": "other", "path": "evidence/category-probe.json", "caption": "category probe" }, { "type": "screenshot", "path": "evidence/contrast-more.png", "caption": "contrast more", "condition": "prefers-contrast: more" }, { "type": "other", "path": "evidence/cookies.json", "caption": "cookies" }, { "type": "other", "path": "evidence/crawl-probe.json", "caption": "crawl probe" }, { "type": "screenshot", "path": "evidence/dark.png", "caption": "dark", "condition": "prefers-color-scheme: dark" }, { "type": "screenshot", "path": "evidence/desktop.png", "caption": "desktop" }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "discoverability crawler" }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "discoverability rendered" }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "discoverability" }, { "type": "dom", "path": "evidence/dom.json", "caption": "dom" }, { "type": "other", "path": "evidence/focus-targets.json", "caption": "focus targets" }, { "type": "other", "path": "evidence/guidance-accessibility.md", "caption": "guidance accessibility" }, { "type": "other", "path": "evidence/guidance-all-mapped.md", "caption": "guidance all mapped" }, { "type": "other", "path": "evidence/guidance-catalog.json", "caption": "guidance catalog" }, { "type": "other", "path": "evidence/guidance-dark-mode.md", "caption": "guidance dark mode" }, { "type": "other", "path": "evidence/guidance-fluid-scaling.md", "caption": "guidance fluid scaling" }, { "type": "other", "path": "evidence/guidance-forms.md", "caption": "guidance forms" }, { "type": "other", "path": "evidence/guidance-manage-recurring-intervals.md", "caption": "guidance manage recurring intervals" }, { "type": "other", "path": "evidence/guidance-optimize-image-priority.md", "caption": "guidance optimize image priority" }, { "type": "other", "path": "evidence/guidance-passkeys.md", "caption": "guidance passkeys" }, { "type": "other", "path": "evidence/guidance-performance.md", "caption": "guidance performance" }, { "type": "other", "path": "evidence/guidance-privacy.md", "caption": "guidance privacy" }, { "type": "other", "path": "evidence/guidance-security.md", "caption": "guidance security" }, { "type": "other", "path": "evidence/guidance-webmcp.md", "caption": "guidance webmcp" }, { "type": "other", "path": "evidence/headers.json", "caption": "headers" }, { "type": "heap", "path": "evidence/heap-baseline.heapsnapshot", "caption": "heap baseline" }, { "type": "heap", "path": "evidence/heap-post-scroll.heapsnapshot", "caption": "heap post scroll" }, { "type": "other", "path": "evidence/image-links.json", "caption": "image links" }, { "type": "other", "path": "evidence/images.json", "caption": "images" }, { "type": "layout", "path": "evidence/layout-desktop.json", "caption": "layout desktop" }, { "type": "layout", "path": "evidence/layout-mobile.json", "caption": "layout mobile", "condition": "viewport: 360x800" }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "lighthouse" }, { "type": "trace-summary", "path": "evidence/load-trace-summary.json", "caption": "load trace summary" }, { "type": "trace", "path": "evidence/load-trace.json", "caption": "load trace" }, { "type": "other", "path": "evidence/memory-metrics.json", "caption": "memory metrics" }, { "type": "screenshot", "path": "evidence/mobile.png", "caption": "mobile", "condition": "viewport: 360x800" }, { "type": "har-summary", "path": "evidence/network-summary.json", "caption": "network summary" }, { "type": "har", "path": "evidence/network.har", "caption": "network" }, { "type": "screenshot", "path": "evidence/not-found-mobile.png", "caption": "not found mobile", "condition": "viewport: 360x800" }, { "type": "other", "path": "evidence/not-found-probe.json", "caption": "not found probe" }, { "type": "other", "path": "evidence/page-probe.json", "caption": "page probe" }, { "type": "other", "path": "evidence/platform-probe.json", "caption": "platform probe" }, { "type": "other", "path": "evidence/pwa-probe.json", "caption": "pwa probe" }, { "type": "other", "path": "evidence/reduced-motion.json", "caption": "reduced motion", "condition": "prefers-reduced-motion: reduce" }, { "type": "other", "path": "evidence/route-links.json", "caption": "route links" }, { "type": "other", "path": "evidence/secrets.json", "caption": "secrets" }, { "type": "other", "path": "evidence/signup-email-probe.json", "caption": "signup email probe" }, { "type": "screenshot", "path": "evidence/signup-email-step.png", "caption": "signup email step" }, { "type": "screenshot", "path": "evidence/signup-mobile.png", "caption": "signup mobile", "condition": "viewport: 360x800" }, { "type": "other", "path": "evidence/signup-probe.json", "caption": "signup probe" }, { "type": "other", "path": "evidence/trackers.json", "caption": "trackers" }, { "type": "screenshot", "path": "evidence/video-detail-mobile.png", "caption": "video detail mobile", "condition": "viewport: 360x800" }, { "type": "other", "path": "evidence/video-detail-probe.json", "caption": "video detail probe" } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Agent judgement using dark.png and representative-path inspection", "evidence": "The page is permanently dark but declares computed color-scheme: normal and contains no authored preference-driven theme; dark emulation produces the same fixed palette rather than honoring the system choice.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/dark.png" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "issues", "confidence": "high", "method": "Agent judgement using reduced-motion.json and representative-path inspection", "evidence": "With prefers-reduced-motion: reduce active, the probe still found eight running animations of 2000 ms and no matching reduced-motion CSS rule.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/reduced-motion.json" ], "findingIds": [ "F02" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "issues", "confidence": "high", "method": "Agent judgement using lighthouse.json and representative-path inspection", "evidence": "Lighthouse reports failed color-contrast and link-in-text-block audits; high-contrast emulation does not expose an authored forced-colors/prefers-contrast treatment.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F03" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Agent judgement using page-probe.json and representative-path inspection", "evidence": "Rendered CSS inspection found no authored view-transition rules; navigation among the MPA home, category, signup and detail routes uses abrupt document swaps.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/page-probe.json" ], "findingIds": [ "F04" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Agent judgement using page-probe.json and representative-path inspection", "evidence": "No parallax, scrollytelling, reveal-on-scroll, or other scroll-linked effect was observed on the representative routes.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/page-probe.json" ], "reason": "The audited routes do not use a scroll-linked motion effect, so there is no scroll handler or animation timeline to assess." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "high", "method": "Agent judgement using page-probe.json and representative-path inspection", "evidence": "Browsing uses native document scrolling and real anchors; no custom pointermove gesture layer that fights scrolling was found.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/page-probe.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Agent judgement using mobile.png and representative-path inspection", "evidence": "The long home and category pages retain a large static header/sidebar; CSS inspection found no scroll-state container query or scroll progress treatment.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/mobile.png" ], "findingIds": [ "F05" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "Agent judgement using page-probe.json and representative-path inspection", "evidence": "No tooltip, contextual popover, or edge-positioned menu was opened or present on the representative paths.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/page-probe.json" ], "reason": "No anchored overlay use case was present in the tested states." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "Agent judgement using category-mobile.png and representative-path inspection", "evidence": "Descriptive headings, real links, the persistent category navigation, and clear detail-page title preserve location and direct attention across tested routes.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/category-mobile.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Agent judgement using desktop.png and representative-path inspection", "evidence": "The initial desktop screenshot is dominated by a cookie overlay that obscures the content grid before interaction.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/desktop.png" ], "findingIds": [ "F06" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Agent judgement using signup-email-probe.json and representative-path inspection", "evidence": "The signup modal is an ad-hoc div with role=dialog rather than a native dialog, and the cookie overlay appears without dialog/popover semantics in the captured DOM state.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/signup-email-probe.json" ], "findingIds": [ "F07" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "issues", "confidence": "high", "method": "Agent judgement using mobile.png and representative-path inspection", "evidence": "At 360 px, the fixed 180 px sidebar, desktop header, and age-verification banner consume most of the visible viewport while content is clipped to the right.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/mobile.png" ], "findingIds": [ "F08" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Agent judgement using layout-mobile.json and representative-path inspection", "evidence": "The mobile layout primitive measured scrollWidth 1036 px against a 360 px visual viewport, 676 px overflow; screenshots show content and signup dialog clipped off-screen.", "pathIds": [ "home-mobile", "signup" ], "artifacts": [ "evidence/layout-mobile.json" ], "findingIds": [ "F09" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Agent judgement using signup-mobile.png and representative-path inspection", "evidence": "CSS inspection found no @container rules, and the same sidebar, grid, and modal retain desktop dimensions in the 360 px captures.", "pathIds": [ "home-mobile", "signup" ], "artifacts": [ "evidence/signup-mobile.png" ], "findingIds": [ "F10" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Agent judgement using focus-targets.json and representative-path inspection", "evidence": "The focus probe found focused inputs/buttons with outline-style none; Lighthouse also failed target-size, and many navigation targets are only 30–32 px tall.", "pathIds": [ "home-mobile", "signup" ], "artifacts": [ "evidence/focus-targets.json" ], "findingIds": [ "F11" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Agent judgement using video-detail-mobile.png and representative-path inspection", "evidence": "Home, category, signup and video-detail pages have descriptive titles and prominent primary content/actions; the first content grid and video title make purpose clear despite layout defects.", "pathIds": [ "home-desktop", "category", "video-detail", "signup", "not-found" ], "artifacts": [ "evidence/video-detail-mobile.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "pass", "confidence": "high", "method": "Agent judgement using video-detail-mobile.png and representative-path inspection", "evidence": "The tested browse flow reached home, category listing, a video detail page, and the clearly explained age-verification start state without a dead end; account creation exposed Google, X, and email routes.", "pathIds": [ "home-desktop", "category", "video-detail", "signup", "not-found" ], "artifacts": [ "evidence/video-detail-mobile.png" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "Agent judgement using not-found-probe.json and representative-path inspection", "evidence": "A deliberately invalid route rendered a localized “Halaman tidak ditemukan” state with a home recovery link and popular-content alternatives instead of a blank shell.", "pathIds": [ "home-desktop", "category", "video-detail", "signup", "not-found" ], "artifacts": [ "evidence/not-found-probe.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Agent judgement using lighthouse.json and representative-path inspection", "evidence": "Desktop trace LCP was 1.10 s and CLS 0.0049, but Lighthouse mobile LCP was 3.9 s, outside the good <=2.5 s threshold; TBT was 95 ms.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Agent judgement using layout-desktop.json and representative-path inspection", "evidence": "The layout observer measured CLS 0.0049 on desktop and 0 on mobile during the observation windows, both comfortably in the good range.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/layout-desktop.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "Agent judgement using load-trace-summary.json and representative-path inspection", "evidence": "The trace recorded two long tasks, 133.83 ms longest and 95.23 ms total blocking time; this is bounded and below the 200 ms Lighthouse good TBT range.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/load-trace-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Agent judgement using network-summary.json and representative-path inspection", "evidence": "HAR captured 144 requests and 1.70 MB transferred, including 11 stylesheets, parser-blocking stylesheet candidates and one uncompressed 9.8 KB text response.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/network-summary.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Agent judgement using network-summary.json and representative-path inspection", "evidence": "The initial page shipped 62 scripts totaling about 1.00 MB; the largest index bundle alone transferred 400 KB and Google sign-in loaded 98 KB before signup intent.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/network-summary.json" ], "findingIds": [ "F14" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Agent judgement using lighthouse.json and representative-path inspection", "evidence": "Lighthouse failed button-name, label-content-name-mismatch, list semantics, and accessibility-tree audits; the email step also exposes duplicate email inputs without programmatic labels.", "pathIds": [ "home-mobile", "signup" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F15" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Agent judgement using lighthouse.json and representative-path inspection", "evidence": "Lighthouse failed color-contrast and link-in-text-block checks on the audited home page.", "pathIds": [ "home-mobile", "signup" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F16" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Agent judgement using focus-targets.json and representative-path inspection", "evidence": "The focus walk shows focused search, login, and other buttons with no outline; signup starts at h3 without a page h1 and Lighthouse reports malformed accessibility structure.", "pathIds": [ "home-mobile", "signup" ], "artifacts": [ "evidence/focus-targets.json" ], "findingIds": [ "F17" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "issues", "confidence": "high", "method": "Agent judgement using signup-mobile.png and representative-path inspection", "evidence": "At 360 px, headings, dialog copy and media controls are clipped beyond the viewport, preventing complete reading even though font sizes themselves are reasonable.", "pathIds": [ "home-mobile", "signup" ], "artifacts": [ "evidence/signup-mobile.png" ], "findingIds": [ "F18" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Agent judgement using layout-mobile.json and representative-path inspection", "evidence": "Lighthouse failed meta-viewport and target-size audits; the 360 px screenshots demonstrate failed reflow with 676 px horizontal overflow.", "pathIds": [ "home-mobile", "signup" ], "artifacts": [ "evidence/layout-mobile.json" ], "findingIds": [ "F19" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Agent judgement using lighthouse.json and representative-path inspection", "evidence": "Lighthouse best-practices scored 1.0 and reported no console-error failure; the platform probe captured no window errors.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/lighthouse.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Agent judgement using images.json and representative-path inspection", "evidence": "The document has HTML doctype and UTF-8, but image inspection found 29 of 36 images without explicit dimensions, 12 oversized, and one missing alt.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F20" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "pass", "confidence": "high", "method": "Agent judgement using platform-probe.json and representative-path inspection", "evidence": "Lighthouse best-practices scored 1.0; scripts are mostly deferred, no paste prevention was found, and no permission prompt appeared on load.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/platform-probe.json" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "Agent judgement using page-probe.json and representative-path inspection", "evidence": "Home, category, signup, detail and 404 routes expose localized descriptive titles; public content routes include meta descriptions.", "pathIds": [ "home-desktop", "category", "video-detail" ], "artifacts": [ "evidence/page-probe.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "Agent judgement using layout-mobile.json and representative-path inspection", "evidence": "Links use real hrefs and robots permits public content, but the page is not mobile-friendly: 676 px overflow at a 360 px viewport and Lighthouse flags viewport configuration.", "pathIds": [ "home-desktop", "category", "video-detail" ], "artifacts": [ "evidence/layout-mobile.json" ], "findingIds": [ "F21" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Agent judgement using crawl-probe.json and representative-path inspection", "evidence": "Canonical URLs are present, but /sitemap.xml returned 404 and localized routes expose zero hreflang links despite a large language selector.", "pathIds": [ "home-desktop", "category", "video-detail" ], "artifacts": [ "evidence/crawl-probe.json" ], "findingIds": [ "F22" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Agent judgement using video-detail-probe.json and representative-path inspection", "evidence": "The video detail provides Open Graph tags but no JSON-LD VideoObject; home and category provide neither Open Graph metadata nor structured entity data.", "pathIds": [ "home-desktop", "category", "video-detail" ], "artifacts": [ "evidence/video-detail-probe.json" ], "findingIds": [ "F23" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Agent judgement using cookies.json and representative-path inspection", "evidence": "HTTPS and HSTS are present, but CSP is limited to frame-ancestors; x_csrf_token and settings cookies lack Secure, and settings uses SameSite=None.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/cookies.json" ], "findingIds": [ "F24" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Agent judgement using network-summary.json and representative-path inspection", "evidence": "The load contacted 13 third-party origins; 117 requests and 1.59 MB were classified third-party, including collector and advertising/recommendation endpoints before explicit intent.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/network-summary.json" ], "findingIds": [ "F25" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Agent judgement using signup-email-probe.json and representative-path inspection", "evidence": "No permission prompt fired on load, but signup offers Google, X, email and password only; no WebAuthn/passkey capability was exposed on the tested account flow.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/signup-email-probe.json" ], "findingIds": [ "F26" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Agent judgement using headers.json and representative-path inspection", "evidence": "HSTS and clickjacking controls are present, but X-Content-Type-Options and Referrer-Policy are absent; Permissions-Policy only covers two client-hint features and CSP lacks script restrictions.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F27" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Agent judgement using discoverability.json and representative-path inspection", "evidence": "Discoverability comparison found 86% rendered-word coverage in raw HTML, with title, h1 and description present and no empty JS shell.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/discoverability.json" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "issues", "confidence": "high", "method": "Agent judgement using signup-mobile.png and representative-path inspection", "evidence": "The signup dialog and content grid are positioned on a 1036 px desktop canvas and are visibly cut off at the 360 px viewport edge.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/signup-mobile.png" ], "findingIds": [ "F28" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "pass", "confidence": "high", "method": "Agent judgement using pwa-probe.json and representative-path inspection", "evidence": "The page links a manifest with icons/start_url, has an active service worker, and exposes an xh-offline-cache cache.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/pwa-probe.json" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "Agent judgement using not-found-probe.json and representative-path inspection", "evidence": "A missing route renders a localized recovery explanation, a home link, and useful alternative content rather than a blank or infinite loading state.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/not-found-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "pass", "confidence": "high", "method": "Agent judgement using page-probe.json and representative-path inspection", "evidence": "The Indonesian experience declares html lang=id and presents a broad localized-language selector; tested text direction is correctly LTR for Indonesian.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/page-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Agent judgement using page-probe.json and representative-path inspection", "evidence": "No date, currency, duration formatting, or locale-sensitive numeric input was present in the representative public states.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/page-probe.json" ], "reason": "The tested states did not expose locale-sensitive data that could be meaningfully checked." }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Agent judgement using page-probe.json and representative-path inspection", "evidence": "No scheduled event, stored timestamp, recurring interval, or cross-time-zone workflow was present.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/page-probe.json" ], "reason": "The representative routes contain no time-zone-sensitive task." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "issues", "confidence": "high", "method": "Agent judgement using desktop.png and representative-path inspection", "evidence": "The initial consent overlay blocks content, while the persistent banner asks Indonesian users to verify age “according to UK law”; this jurisdiction/context mismatch can mislead users about why verification is required.", "pathIds": [ "signup" ], "artifacts": [ "evidence/desktop.png" ], "findingIds": [ "F29" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "issues", "confidence": "high", "method": "Agent judgement using signup-email-probe.json and representative-path inspection", "evidence": "The signup email state contains duplicate email inputs, no associated email label, required=false, and a placeholder-only required cue; errors cannot be announced reliably from this markup.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-email-probe.json" ], "findingIds": [ "F30" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Agent judgement using signup-email-probe.json and representative-path inspection", "evidence": "The signup email input explicitly uses autocomplete=off; the password uses new-password correctly, but the email field suppresses standard autofill assistance.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-email-probe.json" ], "findingIds": [ "F31" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "issues", "confidence": "high", "method": "Agent judgement using signup-mobile.png and representative-path inspection", "evidence": "The signup disclosure states personal data will be public and shared for partner services, yet the flow offers password/social login without a passkey and the mobile dialog is clipped, making commitments hard to review.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-mobile.png" ], "findingIds": [ "F32" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Agent judgement using images.json and representative-path inspection", "evidence": "Image audit found 12 oversized images, 16 legacy-format results, 29 missing dimensions and three without responsive srcset.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F33" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Agent judgement using network-summary.json and representative-path inspection", "evidence": "The home load performs 144 requests and starts recommendation, advertising, identity and analytics work before related user intent; eight animations remain running.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/network-summary.json" ], "findingIds": [ "F34" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Agent judgement using network-summary.json and representative-path inspection", "evidence": "Third parties account for 117 requests and 1.59 MB of the 1.70 MB transfer, while Google identity is loaded on the browsing homepage before signup.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/network-summary.json" ], "findingIds": [ "F35" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Agent judgement using page-probe.json and representative-path inspection", "evidence": "No WebMCP or agent-facing tool registration is exposed.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/page-probe.json" ], "reason": "This public media-browsing surface does not declare an agent-facing capability, and the emerging principle allows absence without penalty." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Agent judgement using page-probe.json and representative-path inspection", "evidence": "No on-device language-model or summarizer use case is present in the tested browsing and account states.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/page-probe.json" ], "reason": "No user task on the representative routes requires on-device inference." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "issues", "confidence": "medium", "method": "Agent judgement using memory-metrics.json and representative-path inspection", "evidence": "After ten bottom/top scroll cycles, same-session metrics grew from 23.29 MB to 25.00 MB, DOM nodes from 1811 to 1936 and active animations from 8 to 12; separate heap summaries also grew by 1.05 MB and 19,427 nodes.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/memory-metrics.json" ], "findingIds": [ "F36" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "issues", "confidence": "medium", "method": "Agent judgement using heap-baseline.heapsnapshot and representative-path inspection", "evidence": "The baseline V8 heap summary contains 683,189 heap nodes, 3.20 million edges and 36.6 MB self size for a listing page before media playback.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot" ], "findingIds": [ "F37" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "Agent judgement using heap-post-scroll.heapsnapshot and representative-path inspection", "evidence": "Neither heap summary listed Detached* constructors among the largest retained groups; the observed growth is reported separately, but direct detached-DOM evidence was not found.", "pathIds": [ "home-desktop" ], "artifacts": [ "evidence/heap-post-scroll.heapsnapshot" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01", "F02", "F03" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F04" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F05" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F06", "F07", "F08" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F09", "F10", "F11" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "pass", "findingIds": [] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F12", "F13", "F14" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F15", "F16", "F17", "F18", "F19" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F20" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F21", "F22", "F23" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F24", "F25", "F26", "F27" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F28" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "pass", "findingIds": [] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F29", "F30", "F31", "F32" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F33", "F34", "F35" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "findingIds": [], "reason": "Derived from all check outcomes." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "issues", "findingIds": [ "F36", "F37" ] } ], "paths": [ { "id": "home-desktop", "description": "Localized home/listing template and initial consent state.", "url": "https://id.xhamster.com/", "conditions": [ "desktop", "dark preference", "high contrast", "reduced motion" ], "result": "issues" }, { "id": "home-mobile", "description": "Home/listing template at a 360x800 visual viewport.", "url": "https://id.xhamster.com/", "conditions": [ "viewport 360x800", "keyboard focus" ], "result": "issues" }, { "id": "category", "description": "Category/listing archetype, representing taxonomy pages.", "url": "https://id.xhamster.com/categories/amateur", "conditions": [ "viewport 360x800" ], "result": "issues" }, { "id": "signup", "description": "Primary account creation modal and email step.", "url": "https://id.xhamster.com/signup?source=audit", "conditions": [ "viewport 360x800", "email signup step" ], "result": "issues" }, { "id": "video-detail", "description": "Representative media detail and legal age-verification state.", "url": "https://id.xhamster.com/videos/hana-himesaki-union-collection-xhWi4Fu", "conditions": [ "viewport 360x800" ], "result": "issues" }, { "id": "not-found", "description": "Representative HTTP/navigation recovery state.", "url": "https://id.xhamster.com/this-page-should-not-exist-web-uplift-audit", "conditions": [ "viewport 360x800" ], "result": "pass" } ], "findings": [ { "id": "F09", "pathId": "home-mobile", "url": "https://id.xhamster.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "fluid-scaling", "guidanceCategory": "modern-web-guidance", "severity": "critical", "confidence": "high", "summary": "The site renders a desktop canvas on mobile", "evidence": "The mobile layout primitive measured scrollWidth 1036 px against a 360 px visual viewport, 676 px overflow; screenshots show content and signup dialog clipped off-screen.", "artifacts": [ "evidence/layout-mobile.json" ], "suggestedFix": "Use width=device-width without forced desktop layout, fluid intrinsic sizing, and responsive navigation so scrollWidth never exceeds the viewport.", "effort": "large" }, { "id": "F19", "pathId": "home-mobile", "url": "https://id.xhamster.com/", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "fluid-scaling", "guidanceCategory": "modern-web-guidance", "severity": "critical", "confidence": "high", "summary": "Zoom/reflow and target sizing fail the mobile accessibility bar", "evidence": "Lighthouse failed meta-viewport and target-size audits; the 360 px screenshots demonstrate failed reflow with 676 px horizontal overflow.", "artifacts": [ "evidence/layout-mobile.json" ], "suggestedFix": "Allow user scaling, eliminate fixed-width overflow, and enlarge undersized controls.", "effort": "large" }, { "id": "F03", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "respect-user-preferences", "principleCheckId": "respects-contrast", "guidanceId": "adapt-scrollbar-to-contrast-preferences", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Contrast and high-contrast support are incomplete", "evidence": "Lighthouse reports failed color-contrast and link-in-text-block audits; high-contrast emulation does not expose an authored forced-colors/prefers-contrast treatment.", "artifacts": [ "evidence/lighthouse.json" ], "suggestedFix": "Meet WCAG contrast ratios and add forced-colors/prefers-contrast treatments for essential controls and links.", "effort": "medium" }, { "id": "F06", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "light-dismiss-a-dialog", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Cookie consent obscures core content on load", "evidence": "The initial desktop screenshot is dominated by a cookie overlay that obscures the content grid before interaction.", "artifacts": [ "evidence/desktop.png" ], "suggestedFix": "Use a compact, non-blocking consent surface where legally possible, preserve equal accept/reject controls, and keep content visible.", "effort": "medium" }, { "id": "F08", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "reduced-chrome", "guidanceId": "overflow-clipping-control", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Desktop chrome overwhelms mobile content", "evidence": "At 360 px, the fixed 180 px sidebar, desktop header, and age-verification banner consume most of the visible viewport while content is clipped to the right.", "artifacts": [ "evidence/mobile.png" ], "suggestedFix": "Collapse navigation into mobile-appropriate controls and prioritize the content column at narrow widths.", "effort": "medium" }, { "id": "F10", "pathId": "home-mobile", "url": "https://id.xhamster.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Components do not adapt to their available space", "evidence": "CSS inspection found no @container rules, and the same sidebar, grid, and modal retain desktop dimensions in the 360 px captures.", "artifacts": [ "evidence/signup-mobile.png" ], "suggestedFix": "Introduce container-query breakpoints for the grid, sidebar, header, and modal, with intrinsic fallback sizing.", "effort": "medium" }, { "id": "F11", "pathId": "home-mobile", "url": "https://id.xhamster.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Keyboard focus and touch targets are inadequate", "evidence": "The focus probe found focused inputs/buttons with outline-style none; Lighthouse also failed target-size, and many navigation targets are only 30–32 px tall.", "artifacts": [ "evidence/focus-targets.json" ], "suggestedFix": "Provide a visible :focus-visible indicator and increase interactive target size/spacing toward 44 CSS px.", "effort": "medium" }, { "id": "F12", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Mobile LCP misses the good threshold", "evidence": "Desktop trace LCP was 1.10 s and CLS 0.0049, but Lighthouse mobile LCP was 3.9 s, outside the good <=2.5 s threshold; TBT was 95 ms.", "artifacts": [ "evidence/lighthouse.json" ], "suggestedFix": "Prioritize the mobile LCP resource and reduce startup script/style contention; verify LCP <=2.5 s on representative mobile hardware.", "effort": "medium" }, { "id": "F14", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Startup JavaScript is disproportionately heavy", "evidence": "The initial page shipped 62 scripts totaling about 1.00 MB; the largest index bundle alone transferred 400 KB and Google sign-in loaded 98 KB before signup intent.", "artifacts": [ "evidence/network-summary.json" ], "suggestedFix": "Code-split page features and defer Google identity, player, and modal code until the corresponding user intent.", "effort": "medium" }, { "id": "F15", "pathId": "home-mobile", "url": "https://id.xhamster.com/", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Controls and structure have accessibility naming failures", "evidence": "Lighthouse failed button-name, label-content-name-mismatch, list semantics, and accessibility-tree audits; the email step also exposes duplicate email inputs without programmatic labels.", "artifacts": [ "evidence/lighthouse.json" ], "suggestedFix": "Give every control a matching accessible name, associate visible labels, remove duplicate hidden inputs from the accessibility tree, and repair list semantics.", "effort": "medium" }, { "id": "F16", "pathId": "home-mobile", "url": "https://id.xhamster.com/", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Text and links fail contrast requirements", "evidence": "Lighthouse failed color-contrast and link-in-text-block checks on the audited home page.", "artifacts": [ "evidence/lighthouse.json" ], "suggestedFix": "Adjust foreground/background tokens to WCAG AA and do not rely on color alone to distinguish links.", "effort": "medium" }, { "id": "F17", "pathId": "home-mobile", "url": "https://id.xhamster.com/", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "move-dom-element-without-losing-state", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Focus visibility and heading structure are unreliable", "evidence": "The focus walk shows focused search, login, and other buttons with no outline; signup starts at h3 without a page h1 and Lighthouse reports malformed accessibility structure.", "artifacts": [ "evidence/focus-targets.json" ], "suggestedFix": "Restore strong :focus-visible styles, make heading levels logical, and manage focus into and out of the modal.", "effort": "medium" }, { "id": "F18", "pathId": "home-mobile", "url": "https://id.xhamster.com/", "principleId": "be-inclusive", "principleCheckId": "legible-text", "guidanceId": "improve-text-layout-and-legibility", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Clipping makes text unreadable on mobile", "evidence": "At 360 px, headings, dialog copy and media controls are clipped beyond the viewport, preventing complete reading even though font sizes themselves are reasonable.", "artifacts": [ "evidence/signup-mobile.png" ], "suggestedFix": "Reflow text and dialog content inside the visual viewport with fluid widths and wrapping.", "effort": "medium" }, { "id": "F21", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "be-discoverable", "principleCheckId": "crawlable-and-mobile-friendly", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Mobile indexing receives a non-mobile layout", "evidence": "Links use real hrefs and robots permits public content, but the page is not mobile-friendly: 676 px overflow at a 360 px viewport and Lighthouse flags viewport configuration.", "artifacts": [ "evidence/layout-mobile.json" ], "suggestedFix": "Correct viewport/reflow behavior and retain crawlable anchors so mobile crawlers and users receive the same usable layout.", "effort": "medium" }, { "id": "F24", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Cookie and CSP defenses are incomplete", "evidence": "HTTPS and HSTS are present, but CSP is limited to frame-ancestors; x_csrf_token and settings cookies lack Secure, and settings uses SameSite=None.", "artifacts": [ "evidence/cookies.json" ], "suggestedFix": "Set Secure on all HTTPS cookies, avoid SameSite=None unless necessary, and deploy a nonce/hash-based CSP beyond frame-ancestors.", "effort": "medium" }, { "id": "F25", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Third-party collection dominates initial load", "evidence": "The load contacted 13 third-party origins; 117 requests and 1.59 MB were classified third-party, including collector and advertising/recommendation endpoints before explicit intent.", "artifacts": [ "evidence/network-summary.json" ], "suggestedFix": "Gate optional identity, advertising, recommendation, and analytics calls on context/consent; batch and minimize telemetry.", "effort": "medium" }, { "id": "F27", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Several browser-enforced defenses are missing", "evidence": "HSTS and clickjacking controls are present, but X-Content-Type-Options and Referrer-Policy are absent; Permissions-Policy only covers two client-hint features and CSP lacks script restrictions.", "artifacts": [ "evidence/headers.json" ], "suggestedFix": "Add nosniff, a strict Referrer-Policy, a deny-by-default Permissions-Policy, and a substantive CSP with Trusted Types where feasible.", "effort": "medium" }, { "id": "F28", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "be-resilient", "principleCheckId": "resilient-runtime-behaviour", "guidanceId": "resilient-context-menus-and-nested-dropdowns", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Critical modal UI is cut off at narrow widths", "evidence": "The signup dialog and content grid are positioned on a 1036 px desktop canvas and are visibly cut off at the 360 px viewport edge.", "artifacts": [ "evidence/signup-mobile.png" ], "suggestedFix": "Constrain top-layer UI to the visual viewport and provide responsive fallback positions/sizing.", "effort": "medium" }, { "id": "F30", "pathId": "signup", "url": "https://id.xhamster.com/signup?source=audit", "principleId": "be-trustworthy", "principleCheckId": "humane-error-handling", "guidanceId": "accessible-error-announcement", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Signup field semantics undermine humane validation", "evidence": "The signup email state contains duplicate email inputs, no associated email label, required=false, and a placeholder-only required cue; errors cannot be announced reliably from this markup.", "artifacts": [ "evidence/signup-email-probe.json" ], "suggestedFix": "Use one labeled required email control, validate after interaction, set aria-invalid when needed, and announce a specific recovery message.", "effort": "medium" }, { "id": "F32", "pathId": "signup", "url": "https://id.xhamster.com/signup?source=audit", "principleId": "be-trustworthy", "principleCheckId": "safe-commercial-and-account-flows", "guidanceId": "passkey-management", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Account commitments are difficult to review safely on mobile", "evidence": "The signup disclosure states personal data will be public and shared for partner services, yet the flow offers password/social login without a passkey and the mobile dialog is clipped, making commitments hard to review.", "artifacts": [ "evidence/signup-mobile.png" ], "suggestedFix": "Make all account/data commitments fully readable before signup, provide passkeys, and keep cancellation/account controls easy to find.", "effort": "medium" }, { "id": "F34", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "guidanceId": "deprioritize-background-fetches", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Non-core work starts eagerly", "evidence": "The home load performs 144 requests and starts recommendation, advertising, identity and analytics work before related user intent; eight animations remain running.", "artifacts": [ "evidence/network-summary.json" ], "suggestedFix": "Defer identity, ad, recommendation and analytics work until consent/intent, batch events, and stop non-visible animation.", "effort": "medium" }, { "id": "F35", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "efficient-background-processing", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Third-party cost is disproportionate to first-view value", "evidence": "Third parties account for 117 requests and 1.59 MB of the 1.70 MB transfer, while Google identity is loaded on the browsing homepage before signup.", "artifacts": [ "evidence/network-summary.json" ], "suggestedFix": "Set a third-party budget, lazy-load identity/ads/media widgets, and cache/defer assets outside the initial viewport.", "effort": "medium" }, { "id": "F01", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "Theme is hard-coded instead of preference-driven", "evidence": "The page is permanently dark but declares computed color-scheme: normal and contains no authored preference-driven theme; dark emulation produces the same fixed palette rather than honoring the system choice.", "artifacts": [ "evidence/dark.png" ], "suggestedFix": "Declare color-scheme and use prefers-color-scheme or light-dark() so browser UI and page surfaces follow the user preference.", "effort": "small" }, { "id": "F02", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "respect-user-preferences", "principleCheckId": "respects-reduced-motion", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "Animations continue under reduced-motion", "evidence": "With prefers-reduced-motion: reduce active, the probe still found eight running animations of 2000 ms and no matching reduced-motion CSS rule.", "artifacts": [ "evidence/reduced-motion.json" ], "suggestedFix": "Add a prefers-reduced-motion: reduce branch that removes non-essential animation and auto-advance.", "effort": "small" }, { "id": "F07", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "Overlays rely on custom dialog construction", "evidence": "The signup modal is an ad-hoc div with role=dialog rather than a native dialog, and the cookie overlay appears without dialog/popover semantics in the captured DOM state.", "artifacts": [ "evidence/signup-email-probe.json" ], "suggestedFix": "Use for the modal flow and a suitable native popover/dialog primitive with reliable focus and dismiss behavior.", "effort": "small" }, { "id": "F13", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-preload-priority", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "The critical delivery path is request-heavy", "evidence": "HAR captured 144 requests and 1.70 MB transferred, including 11 stylesheets, parser-blocking stylesheet candidates and one uncompressed 9.8 KB text response.", "artifacts": [ "evidence/network-summary.json" ], "suggestedFix": "Consolidate critical CSS, compress all text responses, preserve deferred scripts, and shorten the dependency chain for first content.", "effort": "small" }, { "id": "F20", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "Image markup is incompletely sized and optimized", "evidence": "The document has HTML doctype and UTF-8, but image inspection found 29 of 36 images without explicit dimensions, 12 oversized, and one missing alt.", "artifacts": [ "evidence/images.json" ], "suggestedFix": "Emit width/height or aspect-ratio for thumbnails, request correctly sized variants, and add meaningful alt where needed.", "effort": "small" }, { "id": "F22", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "Sitemap and localization indexing signals are incomplete", "evidence": "Canonical URLs are present, but /sitemap.xml returned 404 and localized routes expose zero hreflang links despite a large language selector.", "artifacts": [ "evidence/crawl-probe.json" ], "suggestedFix": "Publish a sitemap index and reciprocal hreflang alternates for localized equivalents.", "effort": "small" }, { "id": "F23", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "Rich entity and share metadata are incomplete", "evidence": "The video detail provides Open Graph tags but no JSON-LD VideoObject; home and category provide neither Open Graph metadata nor structured entity data.", "artifacts": [ "evidence/video-detail-probe.json" ], "suggestedFix": "Add accurate VideoObject/BreadcrumbList JSON-LD and complete Open Graph/Twitter metadata that matches visible content.", "effort": "small" }, { "id": "F26", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkeys", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "Authentication lacks a phishing-resistant passkey option", "evidence": "No permission prompt fired on load, but signup offers Google, X, email and password only; no WebAuthn/passkey capability was exposed on the tested account flow.", "artifacts": [ "evidence/signup-email-probe.json" ], "suggestedFix": "Offer passkey registration and sign-in alongside account recovery, requesting capabilities only after user intent.", "effort": "small" }, { "id": "F29", "pathId": "signup", "url": "https://id.xhamster.com/signup?source=audit", "principleId": "be-trustworthy", "principleCheckId": "no-dark-patterns", "guidanceId": "custom-button-actions", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "Consent and age-verification context is confusing", "evidence": "The initial consent overlay blocks content, while the persistent banner asks Indonesian users to verify age “according to UK law”; this jurisdiction/context mismatch can mislead users about why verification is required.", "artifacts": [ "evidence/desktop.png" ], "suggestedFix": "Use the user’s actual jurisdiction and explain the legal basis plainly; keep consent choices equally prominent without blocking unrelated browsing.", "effort": "small" }, { "id": "F31", "pathId": "signup", "url": "https://id.xhamster.com/signup?source=audit", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-sign-up-form", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "Signup disables email autofill", "evidence": "The signup email input explicitly uses autocomplete=off; the password uses new-password correctly, but the email field suppresses standard autofill assistance.", "artifacts": [ "evidence/signup-email-probe.json" ], "suggestedFix": "Use autocomplete=email and keep autocomplete=new-password so password managers and assistive input can help.", "effort": "small" }, { "id": "F33", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "optimize-image-priority", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "Image delivery wastes bytes and layout metadata", "evidence": "Image audit found 12 oversized images, 16 legacy-format results, 29 missing dimensions and three without responsive srcset.", "artifacts": [ "evidence/images.json" ], "suggestedFix": "Serve responsive AVIF/WebP variants sized near display dimensions and include dimensions/srcset.", "effort": "small" }, { "id": "F36", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "be-memory-efficient", "principleCheckId": "no-leak-under-repeated-interaction", "guidanceId": "manage-recurring-intervals", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "medium", "summary": "Repeated scrolling retains additional page state", "evidence": "After ten bottom/top scroll cycles, same-session metrics grew from 23.29 MB to 25.00 MB, DOM nodes from 1811 to 1936 and active animations from 8 to 12; separate heap summaries also grew by 1.05 MB and 19,427 nodes.", "artifacts": [ "evidence/memory-metrics.json" ], "suggestedFix": "Profile the scroll/feed lifecycle, release thumbnail animation/listener state when items leave view, and verify a plateau across repeated cycles.", "effort": "small" }, { "id": "F37", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "be-memory-efficient", "principleCheckId": "bounded-footprint", "guidanceId": "defer-rendering-heavy-content", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "medium", "summary": "Baseline heap footprint is heavy for the initial listing", "evidence": "The baseline V8 heap summary contains 683,189 heap nodes, 3.20 million edges and 36.6 MB self size for a listing page before media playback.", "artifacts": [ "evidence/heap-baseline.heapsnapshot" ], "suggestedFix": "Virtualize/defer below-fold cards and lazy-initialize recommendation/player code to reduce the retained startup graph.", "effort": "small" }, { "id": "F04", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "cross-document-transitions", "guidanceCategory": "modern-web-guidance", "severity": "low", "confidence": "high", "summary": "Route changes are abrupt", "evidence": "Rendered CSS inspection found no authored view-transition rules; navigation among the MPA home, category, signup and detail routes uses abrupt document swaps.", "artifacts": [ "evidence/page-probe.json" ], "suggestedFix": "Use same-origin cross-document View Transitions with a reduced-motion fallback for stable shared elements.", "effort": "small" }, { "id": "F05", "pathId": "home-desktop", "url": "https://id.xhamster.com/", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "shrinking-header-on-scroll", "guidanceCategory": "modern-web-guidance", "severity": "low", "confidence": "high", "summary": "Long pages provide no scroll-aware navigation feedback", "evidence": "The long home and category pages retain a large static header/sidebar; CSS inspection found no scroll-state container query or scroll progress treatment.", "artifacts": [ "evidence/mobile.png" ], "suggestedFix": "Reduce persistent chrome on scroll and add a lightweight scroll-state/progress affordance where it aids orientation.", "effort": "small" } ], "taskList": [ { "id": "T01", "title": "The site renders a desktop canvas on mobile", "priority": 1, "findingIds": [ "F09" ], "guidanceId": "fluid-scaling", "status": "open" }, { "id": "T02", "title": "Zoom/reflow and target sizing fail the mobile accessibility bar", "priority": 2, "findingIds": [ "F19" ], "guidanceId": "fluid-scaling", "status": "open" }, { "id": "T03", "title": "Contrast and high-contrast support are incomplete", "priority": 3, "findingIds": [ "F03" ], "guidanceId": "adapt-scrollbar-to-contrast-preferences", "status": "open" }, { "id": "T04", "title": "Cookie consent obscures core content on load", "priority": 4, "findingIds": [ "F06" ], "guidanceId": "light-dismiss-a-dialog", "status": "open" }, { "id": "T05", "title": "Desktop chrome overwhelms mobile content", "priority": 5, "findingIds": [ "F08" ], "guidanceId": "overflow-clipping-control", "status": "open" }, { "id": "T06", "title": "Components do not adapt to their available space", "priority": 6, "findingIds": [ "F10" ], "guidanceId": "size-aware-styling", "status": "open" }, { "id": "T07", "title": "Keyboard focus and touch targets are inadequate", "priority": 7, "findingIds": [ "F11" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T08", "title": "Mobile LCP misses the good threshold", "priority": 8, "findingIds": [ "F12" ], "guidanceId": "performance", "status": "open" }, { "id": "T09", "title": "Startup JavaScript is disproportionately heavy", "priority": 9, "findingIds": [ "F14" ], "guidanceId": "identify-heavy-scripts", "status": "open" }, { "id": "T10", "title": "Controls and structure have accessibility naming failures", "priority": 10, "findingIds": [ "F15" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T11", "title": "Text and links fail contrast requirements", "priority": 11, "findingIds": [ "F16" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T12", "title": "Focus visibility and heading structure are unreliable", "priority": 12, "findingIds": [ "F17" ], "guidanceId": "move-dom-element-without-losing-state", "status": "open" }, { "id": "T13", "title": "Clipping makes text unreadable on mobile", "priority": 13, "findingIds": [ "F18" ], "guidanceId": "improve-text-layout-and-legibility", "status": "open" }, { "id": "T14", "title": "Mobile indexing receives a non-mobile layout", "priority": 14, "findingIds": [ "F21" ], "guidanceId": "html", "status": "open" }, { "id": "T15", "title": "Cookie and CSP defenses are incomplete", "priority": 15, "findingIds": [ "F24" ], "guidanceId": "security", "status": "open" }, { "id": "T16", "title": "Third-party collection dominates initial load", "priority": 16, "findingIds": [ "F25" ], "guidanceId": "privacy", "status": "open" }, { "id": "T17", "title": "Several browser-enforced defenses are missing", "priority": 17, "findingIds": [ "F27" ], "guidanceId": "security", "status": "open" }, { "id": "T18", "title": "Critical modal UI is cut off at narrow widths", "priority": 18, "findingIds": [ "F28" ], "guidanceId": "resilient-context-menus-and-nested-dropdowns", "status": "open" }, { "id": "T19", "title": "Signup field semantics undermine humane validation", "priority": 19, "findingIds": [ "F30" ], "guidanceId": "accessible-error-announcement", "status": "open" }, { "id": "T20", "title": "Account commitments are difficult to review safely on mobile", "priority": 20, "findingIds": [ "F32" ], "guidanceId": "passkey-management", "status": "open" }, { "id": "T21", "title": "Non-core work starts eagerly", "priority": 21, "findingIds": [ "F34" ], "guidanceId": "deprioritize-background-fetches", "status": "open" }, { "id": "T22", "title": "Third-party cost is disproportionate to first-view value", "priority": 22, "findingIds": [ "F35" ], "guidanceId": "efficient-background-processing", "status": "open" }, { "id": "T23", "title": "Theme is hard-coded instead of preference-driven", "priority": 23, "findingIds": [ "F01" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T24", "title": "Animations continue under reduced-motion", "priority": 24, "findingIds": [ "F02" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T25", "title": "Overlays rely on custom dialog construction", "priority": 25, "findingIds": [ "F07" ], "guidanceId": "declarative-dialog-popover-control", "status": "open" }, { "id": "T26", "title": "The critical delivery path is request-heavy", "priority": 26, "findingIds": [ "F13" ], "guidanceId": "optimize-preload-priority", "status": "open" }, { "id": "T27", "title": "Image markup is incompletely sized and optimized", "priority": 27, "findingIds": [ "F20" ], "guidanceId": "html", "status": "open" }, { "id": "T28", "title": "Sitemap and localization indexing signals are incomplete", "priority": 28, "findingIds": [ "F22" ], "guidanceId": "html", "status": "open" }, { "id": "T29", "title": "Rich entity and share metadata are incomplete", "priority": 29, "findingIds": [ "F23" ], "guidanceId": "html", "status": "open" }, { "id": "T30", "title": "Authentication lacks a phishing-resistant passkey option", "priority": 30, "findingIds": [ "F26" ], "guidanceId": "passkeys", "status": "open" }, { "id": "T31", "title": "Consent and age-verification context is confusing", "priority": 31, "findingIds": [ "F29" ], "guidanceId": "custom-button-actions", "status": "open" }, { "id": "T32", "title": "Signup disables email autofill", "priority": 32, "findingIds": [ "F31" ], "guidanceId": "autofill-sign-up-form", "status": "open" }, { "id": "T33", "title": "Image delivery wastes bytes and layout metadata", "priority": 33, "findingIds": [ "F33" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T34", "title": "Repeated scrolling retains additional page state", "priority": 34, "findingIds": [ "F36" ], "guidanceId": "manage-recurring-intervals", "status": "open" }, { "id": "T35", "title": "Baseline heap footprint is heavy for the initial listing", "priority": 35, "findingIds": [ "F37" ], "guidanceId": "defer-rendering-heavy-content", "status": "open" }, { "id": "T36", "title": "Route changes are abrupt", "priority": 36, "findingIds": [ "F04" ], "guidanceId": "cross-document-transitions", "status": "open" }, { "id": "T37", "title": "Long pages provide no scroll-aware navigation feedback", "priority": 37, "findingIds": [ "F05" ], "guidanceId": "shrinking-header-on-scroll", "status": "open" } ], "budget": { "wallClockSeconds": 2100, "pathCount": 6, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-22T21-39-25-383Z" }