Manifest position 517 · CrUX rank bucket 1000

https://nustargame.com

Coverage complete

Coverage-complete audit of the regional 403 restriction response. The underlying Philippines-only product was not reachable from this audit location; all sitemap routes returned the same restriction template.

Attempts

2 / 3

Judged checks

58 / 58

Blocked

Not run

This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.

All 58 atomic check outcomes

Principle / check	Status	Confidence	Evidence or reason
respect-user-preferences `respects-color-scheme`	issues	high	Dark and default screenshots are byte-identical and retain the same white surface. F01 medium: The regional restriction page ignores the user’s dark color-scheme preference.
respect-user-preferences `respects-reduced-motion`	pass	high	prefers-reduced-motion: reduce matched and document.getAnimations() returned no active animations.
respect-user-preferences `respects-contrast`	issues	high	High-contrast rendering is unchanged and orange accent text measures 2.66:1. F02 medium: High-contrast preferences do not improve the low-contrast accent text.
implement-natural-interactions `view-transitions`	not-applicable	high	The audited regional response is a single static notice with no state or route-change controls to transition.
implement-natural-interactions `scroll-driven-animations`	not-applicable	high	The static one-viewport response has no scrolling effects or scroll-linked motion.
implement-natural-interactions `physical-gestures`	pass	high	The page uses ordinary document scrolling and contains no custom pointer handlers or gesture controls that fight platform behavior.
provide-guided-navigation `scroll-state-aware-chrome`	not-applicable	high	The response fits one viewport and has no navigation chrome or meaningful scroll journey.
provide-guided-navigation `anchored-positioning`	not-applicable	high	No tooltip, menu, popover, or anchored overlay exists.
provide-guided-navigation `directs-attention`	pass	medium	For this single-state response, the H1 and compact visual hierarchy direct attention immediately to the restriction reason without a competing navigation state.
maximize-content-reduce-noise `no-intrusive-interruptions`	pass	high	The page shows only the restriction message; no pop-up, banner overlay, or consent wall obscures it.
maximize-content-reduce-noise `semantic-dismissible-primitives`	pass	high	There are no overlays or rich controls implemented with ad-hoc elements.
maximize-content-reduce-noise `reduced-chrome`	pass	high	The sparse page focuses on the restriction message with minimal decorative chrome.
adapt-to-the-form-factor `responsive-no-horizontal-scroll`	issues	high	No scroll overflow is reported, but the 400px footer image extends from -25 to 375 and is visibly clipped. F03 medium: A fixed-width footer graphic is clipped on the 360px layout.
adapt-to-the-form-factor `component-level-responsiveness`	not-applicable	medium	This one-off static notice has no reused component rendered in materially different containers.
adapt-to-the-form-factor `input-modality-aware`	not-applicable	high	The response contains no links, buttons, inputs, or other controls needing touch, hover, or focus treatment.
support-core-task-success `clear-purpose-and-primary-action`	pass	high	The H1 and first paragraphs immediately explain that access is restricted to the Philippines.
support-core-task-success `primary-flow-completion`	not-applicable	high	This regional response intentionally exposes no game flow; the underlying product cannot legally be exercised from the audited location.
support-core-task-success `clear-system-state-and-recovery`	issues	high	The state is clear, but there is no support, retry, verification, or policy link. F05 medium: The restriction state explains the problem but offers no recovery or support path.
be-fast-and-stable `good-core-web-vitals`	pass	medium	Trace LCP/FCP is 1,970 ms with 0 ms TBT; layout records CLS 0. No interactive flow exists to sample INP.
be-fast-and-stable `visual-stability`	pass	high	CLS is 0 with no observed shifts, despite missing image dimensions in this cached test.
be-fast-and-stable `efficient-main-thread`	pass	high	Trace and layout observer report zero long tasks and 0 ms total blocking time.
be-fast-and-stable `efficient-resource-delivery`	issues	high	A parser-inserted classic script has no async/defer, CSS blocks rendering, and two cross-origin fonts fail; LCP is 1.97 s. F06 medium: Blocking resources and failed cross-origin fonts delay an otherwise tiny page.
be-fast-and-stable `trim-unused-and-duplicate-code`	pass	medium	The entire transfer is 53,953 bytes with only three small scripts; no duplicated or dominant third-party bundle is evident.
be-inclusive `names-roles-labels`	issues	high	Images have alt attributes, but the composite compliance image is named only “Philippines”, omitting its 21+ and regulator meaning. F07 medium: The composite footer image has an inaccurate accessible alternative.
be-inclusive `sufficient-contrast`	issues	high	Two orange text spans on white have a measured contrast ratio of 2.66:1, below 4.5:1. F19 high: Orange accent text fails WCAG AA contrast.
be-inclusive `structure-and-focus`	issues	high	Heading order passes, but axe finds no main landmark and page content outside landmarks; there are no focusable controls. F08 low: The restriction content has no main landmark.
be-inclusive `legible-text`	pass	high	Body text is 14px with 30px line-height and remains readable without overlap on both viewports, apart from the separately reported contrast accents.
be-inclusive `zoom-reflow-targets-and-media`	issues	high	user-scalable=no and maximum-scale=1 disable zoom; the footer image also clips at 360px. F04 high: The viewport configuration prevents user zoom.
follow-best-practices `no-console-errors`	issues	high	No uncaught exception occurred, but six error log entries include font CORS failures and 403 resources. F09 medium: The page logs resource and CORS errors on every load.
follow-best-practices `sound-document-and-assets`	issues	high	Doctype and UTF-8 are valid, but both images omit dimensions and malformed cross-origin font requests fail. F10 low: Images lack intrinsic dimensions and the font asset URLs are malformed.
follow-best-practices `browser-platform-hygiene`	pass	medium	No permissions prompt, input paste handler, deprecated API use, or uncaught exception was observed on this minimal page.
be-discoverable `title-and-description`	issues	high	Every tested route uses title “Nustar” and no meta description. F11 medium: The page has a generic title and no meta description.
be-discoverable `crawlable-and-mobile-friendly`	issues	high	Robots allows crawlers and viewport exists, but zoom is disabled, a footer asset clips, and no descriptive help link exists. F18 medium: The public response is not fully mobile-friendly.
be-discoverable `canonical-and-indexing-signals`	issues	high	All advertised routes return 403 in this region, no canonical exists, and robots/sitemap simultaneously advertise crawling. F12 high: Sitemap URLs return an index-hostile 403 response in the audited region with no canonical signal.
be-discoverable `structured-and-shareable-metadata`	issues	high	No Open Graph tags or JSON-LD are present for the NUSTAR brand/service page. F13 medium: The public brand page provides no share-preview or structured metadata.
be-private-and-secure `secure-transport-and-headers`	issues	high	HTTPS, HSTS, nosniff and secure HttpOnly cookies are present, but CSP is missing. F14 high: The response has no Content-Security-Policy.
be-private-and-secure `data-minimisation-and-third-parties`	pass	medium	No known trackers or exposed secrets were found; the only third-party host serves brand/font assets, and transfer is 54 KB.
be-private-and-secure `in-context-permissions-and-modern-auth`	not-applicable	high	The restriction response requests no permissions and exposes no authentication flow.
be-private-and-secure `defensive-browser-policies`	issues	high	HSTS, X-Frame-Options, nosniff and Referrer-Policy are present; Permissions-Policy and CSP frame-ancestors are absent. F15 medium: The response omits Permissions-Policy.
be-resilient `progressive-enhancement`	pass	high	Raw HTML contains 100% of rendered content tokens and the JS-disabled crawler view shows the full notice.
be-resilient `resilient-runtime-behaviour`	pass	medium	The static response has no menus, overlays, async app state, or state moves that can become fragile.
be-resilient `offline-and-installable`	not-applicable	high	This legal restriction notice is not an app surface; it has no manifest or service-worker controller and does not need installation.
be-resilient `network-and-http-failure-states`	pass	medium	The server intentionally renders a clear restriction explanation for home, sitemap routes, and an unknown route instead of a blank shell.
be-internationalised `lang-dir-and-logical-properties`	issues	high	html lang is zh-CN while all visible prose is English. F16 high: The document language is wrong for the rendered content.
be-internationalised `locale-aware-data`	not-applicable	high	The response contains no dates, numbers, currencies, durations, or calendars to localise.
be-internationalised `time-zone-correctness`	not-applicable	high	The response contains no time or event data.
be-trustworthy `no-dark-patterns`	pass	high	The restriction notice has no upsell, consent wall, disguised advertising, forced continuity, or manipulative choice.
be-trustworthy `humane-error-handling`	not-applicable	high	No form or user-entered validation state exists.
be-trustworthy `trustworthy-input-assistance`	not-applicable	high	No input fields exist.
be-trustworthy `safe-commercial-and-account-flows`	not-applicable	high	No checkout, subscription, consent, authentication, or account-management flow is exposed in this regional response.
be-sustainable `optimised-assets`	issues	high	Both PNGs are oversized, legacy-format, dimensionless, and lack srcset; images are 69% of transferred bytes. F17 medium: Both PNGs are oversized and lack responsive sources.
be-sustainable `no-wasteful-work`	pass	high	Only 11 requests and 54 KB transfer were observed, with no long tasks or ongoing background work.
be-sustainable `third-party-and-media-budget`	pass	high	No audio/video/autoplay exists; third-party asset traffic is modest and total transfer is 54 KB.
be-agent-ready `structured-agent-capabilities`	not-applicable	high	This regional legal notice exposes no actionable capability for an agent; structured WebMCP tools would add no useful operation.
be-agent-ready `on-device-inference`	not-applicable	high	No summarisation or generative task exists on this short static notice.
be-memory-efficient `no-leak-under-repeated-interaction`	not-applicable	high	The static response has no real interaction to repeat; fabricating one would not test a user journey.
be-memory-efficient `bounded-footprint`	pass	high	Heap snapshot totals 2,555,353 self-size bytes; runtime used heap is 4.64 MB with only 26 live DOM elements, proportionate to the page.
be-memory-efficient `no-detached-dom-or-unbounded-listeners`	pass	medium	No Detached* constructor appears in top heap constructors, the live DOM has 26 elements, and the page has no recurring interaction or timers.

Provenance

Canonical report: results/atomic/reports/0517-nustargame_com.json
Report SHA-256: 7d72b2e112c361d9e44d0749e4258528ca32301317271b6e00beff3c614ae0eb
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/nustargame_com/2026-07-26T13-08-38-950Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/nustargame_com/2026-07-26T13-08-38-950Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7

Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.