Manifest position 421 · CrUX rank bucket 1000

https://tiktokio.com

Coverage complete

Atomic coverage complete: all 58 checks judged across five representative page archetypes plus the primary downloader flow and a missing-route failure state.

Attempts
1 / 3
Judged checks
58 / 58
Blocked
0
Not run
0
This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.

All 58 atomic check outcomes

Principle / checkStatusConfidenceEvidence or reason
respect-user-preferences
respects-color-scheme
issueshighThe light and dark screenshots are byte-identical (49,292 bytes), and the preference probe reports computed color-scheme: normal.
F01 medium: The site ignores the user’s dark-theme preference
respect-user-preferences
respects-reduced-motion
passhighReduced-motion emulation reported zero active animations.
respect-user-preferences
respects-contrast
issueshighaxe found 131 color-contrast failures, including 2.93:1 text on #df6d1e, plus four links distinguished only by low-contrast colour.
F02 high: Text and essential links fail contrast requirements
implement-natural-interactions
view-transitions
issueshighThe app injects result HTML into an open shadow root; the probe found no View Transition support or usage and no running transition for the download state change.
F03 low: Primary result state changes abruptly
implement-natural-interactions
scroll-driven-animations
passhighCSS inspection found no scroll timelines and the page uses no scroll-linked visual motion.
implement-natural-interactions
physical-gestures
passhighNo custom pointer gesture surface is present; native page scrolling remains available.
provide-guided-navigation
scroll-state-aware-chrome
passhighThe long document keeps browser scrolling unobstructed and does not add JS-driven sticky chrome.
provide-guided-navigation
anchored-positioning
passhighNo tooltip or edge-positioned menu requiring anchored positioning appears in the representative paths.
provide-guided-navigation
directs-attention
passhighReal anchor hrefs, a skip link, descriptive navigation, and clear post-download result links preserve direction.
maximize-content-reduce-noise
no-intrusive-interruptions
issueshighDesktop and mobile screenshots show the content dimmed behind a full-screen consent dialog before the downloader can be used.
F04 high: A consent interstitial blocks the entire primary task on first load
maximize-content-reduce-noise
semantic-dismissible-primitives
issueshighDOM probes found zero dialog, popover, and details elements while the custom .fc-consent-root implements a blocking modal.
F05 medium: The consent modal is custom div-based UI rather than a native dialog
maximize-content-reduce-noise
reduced-chrome
passhighAfter the consent layer, the downloader and content occupy the page without persistent app framing.
adapt-to-the-form-factor
responsive-no-horizontal-scroll
passhighAt 360x800 the layout primitive reported scrollWidth 360, clientWidth 360, and zero overflow on all sampled templates.
adapt-to-the-form-factor
component-level-responsiveness
issueshighThe CSS probe found zero container rules across the long multi-card page; adaptation is viewport-only.
F06 low: Reusable UI has no component-level responsiveness
adapt-to-the-form-factor
input-modality-aware
issueshighProgrammatic focus on the shadow-DOM URL input and the skip link produced outline-style none; the primary input has no alternative visible focus indicator.
F07 high: Keyboard focus is not visibly indicated on primary controls
support-core-task-success
clear-purpose-and-primary-action
passhighEach sampled page has a descriptive H1 and the homepage immediately identifies TikTok download as its purpose.
support-core-task-success
primary-flow-completion
passhighA known public TikTok URL returned four usable result links: no-watermark, HD, watermark, and MP3.
support-core-task-success
clear-system-state-and-recovery
passhighEmpty and invalid submissions produce immediate error text, and successful submission restores the Download button with result links.
be-fast-and-stable
good-core-web-vitals
issueshighMobile Lighthouse measured LCP 8.6 s and CLS 0.144; the layout primitive independently measured CLS 0.155.
F08 high: Largest Contentful Paint is very slow and layout stability misses the good range
be-fast-and-stable
visual-stability
issueshighThe layout observer recorded shifts of 0.144 at 2.33 s and 0.010 at 4.61 s, totalling CLS 0.155.
F09 medium: Late consent content causes measurable layout shift
be-fast-and-stable
efficient-main-thread
passhighTrace found zero long tasks and 0 ms total blocking time; Lighthouse TBT was 85.5 ms.
be-fast-and-stable
efficient-resource-delivery
issueshighHAR confirms parser-inserted jQuery and jquery-migrate without async/defer, while Lighthouse reports an 8.6 s LCP and a 2.48 s LCP element render delay.
F10 high: Blocking scripts and dependency work delay useful content
be-fast-and-stable
trim-unused-and-duplicate-code
issueshighLighthouse estimates 262 KiB unused JavaScript and 42 KiB unused CSS; 92.9% of the Flatsome stylesheet was unused.
F11 high: The page ships substantial unused ad and theme code
be-inclusive
names-roles-labels
issueshighaxe found an unnamed focusable image link; the images primitive found 8 images without alt text, and the downloader text input has no label or aria-label.
F12 high: Some controls and images lack accessible names
be-inclusive
sufficient-contrast
issueshighaxe reports 131 serious colour-contrast nodes and four links that rely on colour without a 3:1 difference from body text.
F13 high: Foreground/background contrast is insufficient across the page
be-inclusive
structure-and-focus
issueshighaxe found duplicate/nested main landmarks, invalid heading order, and non-unique landmarks; focus probes found no visible outline.
F14 high: Landmarks, heading order, and focus treatment are not robust
be-inclusive
legible-text
passhighMobile screenshots and zero horizontal overflow show readable reflow without clipping on sampled templates.
be-inclusive
zoom-reflow-targets-and-media
passhighViewport permits normal scaling, mobile reflow has no overflow, and Lighthouse target-size passed.
follow-best-practices
no-console-errors
passhighLighthouse did not report runtime/console errors, and the exercised successful flow completed.
follow-best-practices
sound-document-and-assets
issueshighThe images primitive found 1 image without dimensions, 3 oversized images, 3 below-fold images not lazy-loaded, and 8 missing alt values.
F15 medium: Image asset hygiene is inconsistent
follow-best-practices
browser-platform-hygiene
issueshighLighthouse recorded three deprecated API warnings from the Cloudflare challenge script, including deprecated Shared Storage and persistent storage usage.
F16 medium: Deprecated APIs execute during page load
be-discoverable
title-and-description
passhighHomepage, MP3, photo, article, and Arabic probes each expose descriptive titles and meta descriptions.
be-discoverable
crawlable-and-mobile-friendly
passhighRaw HTML contains real href links, viewport metadata is present, and robots allows public content.
be-discoverable
canonical-and-indexing-signals
passhighSampled pages expose matching canonicals and extensive hreflang; robots permits indexing and points to a sitemap.
be-discoverable
structured-and-shareable-metadata
passhighHomepage exposes Organization/WebSite/WebPage JSON-LD and matching Open Graph title, description, URL, and site name.
be-private-and-secure
secure-transport-and-headers
issueshighHTTPS is used, but CSP, HSTS, nosniff, frame protection, Referrer-Policy, and Permissions-Policy are absent; 3 analytics/consent cookies are not Secure.
F17 high: Security headers and cookie attributes are weak
be-private-and-secure
data-minimisation-and-third-parties
issueshighThe tracker probe found 11 third-party origins and three known trackers; HAR shows 642,413 third-party bytes, 74% of all transferred bytes.
F18 high: Advertising and analytics dominate the network footprint
be-private-and-secure
in-context-permissions-and-modern-auth
passhighSource probe found no geolocation or notification request on load; the site has no authentication surface.
be-private-and-secure
defensive-browser-policies
issueshighThe headers primitive found no HSTS, clickjacking protection, Referrer-Policy, Permissions-Policy, CSP, or nosniff protection.
F19 high: Browser-enforced defensive policies are absent
be-resilient
progressive-enhancement
issueshighRaw HTML exposes 94% of content copy, but the downloader is created by attachShadow() and event listeners in inline JavaScript; the no-JS crawler cannot operate the core tool.
F20 high: The core downloader disappears without JavaScript
be-resilient
resilient-runtime-behaviour
passhighThe AJAX downloader completed successfully and reset its disabled/loading state with result links.
be-resilient
offline-and-installable
not-applicablehighThe downloader inherently requires a live source URL and server conversion; installability/offline conversion is not a meaningful core capability.
be-resilient
network-and-http-failure-states
issueshighA request for /web-uplift-missing-404 returned a 301 and rendered the homepage title and downloader instead of a 404 with recovery guidance.
F21 medium: Missing URLs silently redirect to the homepage
be-internationalised
lang-dir-and-logical-properties
passhighEnglish uses lang=en-US; Arabic uses lang=ar and dir=rtl with zero mobile overflow.
be-internationalised
locale-aware-data
not-applicablehighRepresentative pages contain no user-facing dates, currencies, durations, or locale-sensitive numeric data.
be-internationalised
time-zone-correctness
not-applicablehighThe site does not schedule or display events or times.
be-trustworthy
no-dark-patterns
issueshighThe first-layer dialog offers Consent and Manage options but no Reject all; rejection requires another layer while accepting is one click.
F22 high: Consent is easier to accept than refuse
be-trustworthy
humane-error-handling
issueshighInvalid input yields “Paste correct link and try again 0x03” by replacing innerHTML, with no aria-live/status semantics exposed by the shadow host.
F23 medium: Downloader errors are visual-only and use an opaque error code
be-trustworthy
trustworthy-input-assistance
issueshighThe field is type=text with no label, autocomplete token, inputmode, or URL-specific validation despite requiring a TikTok URL.
F24 low: The primary URL field does not expose URL input semantics
be-trustworthy
safe-commercial-and-account-flows
passhighNo checkout, subscription, authentication, or account-management flow exists on this free downloader.
be-sustainable
optimised-assets
issueshighThe images primitive reports 54 legacy-format images, 3 oversized images, 1 missing srcset, and 3 below-fold images not lazy-loaded.
F25 medium: Most image elements use legacy formats or lack responsive delivery
be-sustainable
no-wasteful-work
issueshighHAR recorded 629,868 script bytes and Lighthouse estimated 262 KiB unused JS, mostly ad, analytics, and consent scripts.
F26 high: Non-core advertising work outweighs the product code
be-sustainable
third-party-and-media-budget
issueshighThird parties transfer 642,413 of 862,683 bytes; AdSense, Tag Manager, Funding Choices, and fonts are the largest origins.
F27 high: Third-party scripts consume most transferred bytes
be-agent-ready
structured-agent-capabilities
issueshighLighthouse agentic browsing scored 0.26 and found no well-formed agent accessibility tree or llms.txt; the actionable downloader lives inside shadow DOM with no WebMCP tool.
F28 low: The downloader has no structured agent-facing capability
be-agent-ready
on-device-inference
not-applicablehighOn-device language-model or summarisation features do not provide a proportionate benefit to this URL conversion task.
be-memory-efficient
no-leak-under-repeated-interaction
passhighAfter 10 consent manage/back cycles, heap grew only 235,884 bytes (1.08%) and 2,388 nodes, with no unbounded trend established.
be-memory-efficient
bounded-footprint
issueshighThe baseline heap contains 381,113 nodes and 21.84 MB self size, while the rendered consent DOM lists hundreds of vendor controls before interaction.
F29 medium: The initial footprint is large for a simple downloader
be-memory-efficient
no-detached-dom-or-unbounded-listeners
passhighBefore/after summaries show modest growth and no Detached constructor among top retained constructors.

Provenance

Canonical report: results/atomic/reports/0421-tiktokio_com.json
Report SHA-256: cd8374fd20da6e32101f978e39785822fa08b4d2c2be30e7723b8ad946f66333
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/tiktokio_com/2026-07-20T17-17-24-035Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/tiktokio_com/2026-07-20T17-17-24-035Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7

Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.