Manifest position 551 · CrUX rank bucket 1000

https://xhamster2.com

Coverage complete

Coverage-complete representative audit of six public paths. Excluded: authenticated watch-history/account management, actual age-verification submission, paid checkout, uploads, chat, and live-stream interaction because they require identity, payment, external services, or side effects.

Attempts
1 / 3
Judged checks
58 / 58
Blocked
0
Not run
0
This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.

All 58 atomic check outcomes

Principle / checkStatusConfidenceEvidence or reason
respect-user-preferences
respects-color-scheme
issueshighLight-scheme screenshot remains the same dark #202020/black interface as the default capture; the CSS probe found no adaptive theme evidence.
F01 medium: The site forces a dark palette instead of following the user’s light/dark preference.
respect-user-preferences
respects-reduced-motion
issueshighThe reduced-motion probe reports eight running shimmer-56cf2 animations, each 2000 ms, and found no prefers-reduced-motion rule.
F02 medium: Loading shimmer animations continue under reduced-motion.
respect-user-preferences
respects-contrast
issueshighLighthouse measured contrast ratios of 2.15:1 and 1.75:1 on the green age-verification banner and 3.29:1 for view counts; its color-contrast audit scored 0.
F03 high: Important text fails minimum contrast, including the age-verification banner.
implement-natural-interactions
view-transitions
issueshighThe CSS probe found no view-transition rules, and navigation/filter interfaces switch without a transition affordance.
F04 low: State and route changes have no View Transition treatment.
implement-natural-interactions
scroll-driven-animations
issueshighThe CSS probe found no animation-timeline or scroll-timeline usage across a long 4,446 px homepage.
F05 low: Long listings provide no scroll-linked orientation or efficient scroll-state feedback.
implement-natural-interactions
physical-gestures
passhighNative scrolling and form controls remained operable; no custom pointer-only drag surface was observed on representative public paths.
provide-guided-navigation
scroll-state-aware-chrome
issueshighDesktop captures show two header rows plus an age banner; the CSS probe found no scroll-state behavior.
F06 low: Persistent multi-row navigation does not adapt as users move through long listings.
provide-guided-navigation
anchored-positioning
passmediumObserved overlays were centered viewport modals rather than element-anchored tooltips/menus, and did not visibly drift at the tested desktop viewport.
provide-guided-navigation
directs-attention
passhighActive navigation uses a red underline, pages have clear H1 headings, and search/category tabs visibly identify current state.
maximize-content-reduce-noise
no-intrusive-interruptions
passhighThe only immediate interruption was necessary consent with equal Accept and Reject actions; age verification is a legally required gate in the detected UK context.
maximize-content-reduce-noise
semantic-dismissible-primitives
issueshighDesktop screenshots show a blocking modal; the DOM probe found zero dialog, role=dialog, or aria-modal elements before dismissal.
F07 high: The cookie consent overlay is visually modal but has no dialog semantics.
maximize-content-reduce-noise
reduced-chrome
issueshighHomepage and search captures devote large areas to two nav rows, a full-width age banner, a sidebar/filter rail, consent overlay, and promotions around the content.
F08 medium: Navigation, filters, monetisation, and verification chrome crowd the primary content.
adapt-to-the-form-factor
responsive-no-horizontal-scroll
issueshighMobile layout probes report scrollWidth 1024 vs visual viewport 360 and 664 px horizontal overflow on home, category, and signup; the mobile screenshot shows most content clipped off-screen.
F09 critical: The desktop layout is rendered at 1024 px inside a 360 px viewport.
adapt-to-the-form-factor
component-level-responsiveness
issueshighThe mobile screenshot shows the sidebar and card grid retaining desktop widths; the CSS probe found no container queries.
F10 high: Cards, sidebars, and header components do not adapt to their available inline size.
adapt-to-the-form-factor
input-modality-aware
issueshighA focused link computed to outline-style none and no box shadow; Lighthouse also found an unnamed button.
F11 high: Keyboard focus and control naming are unreliable.
support-core-task-success
clear-purpose-and-primary-action
passhighHome, category, search, video, and signup screenshots each present a clear heading and task-specific primary action.
support-core-task-success
primary-flow-completion
passhighBrowse, category navigation, search results, video-detail navigation, consent rejection, and signup option reveal all completed to their expected public state.
support-core-task-success
clear-system-state-and-recovery
passhighThe invalid signup reveals specific messages, and an unknown route presents “Page not found” plus a Return to Home Page action.
be-fast-and-stable
good-core-web-vitals
passhighLighthouse measured LCP 2.3 s, CLS 0, TBT 0 ms; trace measured LCP 1.08 s and TBT 123 ms in the desktop capture.
be-fast-and-stable
visual-stability
passhighBoth layout and Lighthouse observed CLS 0 during their measurement windows.
be-fast-and-stable
efficient-main-thread
passhighTrace found two long tasks, 163 ms longest and 123 ms TBT; Lighthouse measured 0 ms TBT, acceptable for tested loads.
be-fast-and-stable
efficient-resource-delivery
issueshighHAR: 143 requests and 1.78 MB transferred, including 62 scripts (997 KB), parser-blocking styles, uncompressed SVG assets, and one 503 response.
F12 high: The homepage ships a large, script-heavy dependency graph with avoidable delivery waste.
be-fast-and-stable
trim-unused-and-duplicate-code
issueshighLighthouse estimates 56 KiB unused CSS (89-95% waste in two files) and 26 KiB unused JavaScript (56% of assetsLoader.js).
F13 medium: Substantial CSS and JavaScript are unused on initial load.
be-inclusive
names-roles-labels
issueshighLighthouse found an unnamed button. The revealed email form contains duplicate email inputs without labels/aria-labels and a submit button without an accessible name.
F14 high: Several controls and signup fields lack programmatic names or labels.
be-inclusive
sufficient-contrast
issueshighLighthouse measured contrast ratios of 2.15:1 and 1.75:1 on the green age-verification banner and 3.29:1 for view counts; its color-contrast audit scored 0.
F03 high: Important text fails minimum contrast, including the age-verification banner.
be-inclusive
structure-and-focus
issueshighaxe reports no main landmark and content outside landmarks; the focus probe found outline-style none on the focused link.
F15 high: Landmark structure and visible focus are incomplete.
be-inclusive
legible-text
passhighDesktop screenshots show readable body text and headings with consistent sizing; the specific contrast failures are recorded separately.
be-inclusive
zoom-reflow-targets-and-media
issueshighAt 360 px, the layout remains 1024 px wide with 664 px overflow across multiple templates. The video page also exposed no caption tracks before verification.
F16 high: The page does not reflow for narrow or zoom-equivalent viewports.
follow-best-practices
no-console-errors
passhighLighthouse errors-in-console audit passed with no logged browser errors.
follow-best-practices
sound-document-and-assets
issueshighThe images primitive found 29 of 36 images without width/height, 8 below-fold images not lazy-loaded, and 12 oversized images.
F17 medium: Image elements omit intrinsic dimensions and some below-fold loading hints.
follow-best-practices
browser-platform-hygiene
passhighLighthouse best-practices score was 1.0, and permission states remained prompt without on-load requests.
be-discoverable
title-and-description
passhighHome and representative video pages contain descriptive, page-specific titles and meta descriptions.
be-discoverable
crawlable-and-mobile-friendly
issueshighDiscoverability shows 77-92% no-JS content coverage, but mobile layout evidence shows 664 px horizontal overflow at 360 px on main templates.
F18 high: Indexable pages are not mobile-friendly despite having crawlable server-rendered content.
be-discoverable
canonical-and-indexing-signals
passhighHTTP 200, canonical URL, indexable robots rules, and crawlable anchors were present; robots.txt returned 200.
be-discoverable
structured-and-shareable-metadata
issueshighThe home probe found zero Open Graph and JSON-LD entries; the representative video probe also found zero JSON-LD despite detailed visible video metadata.
F19 medium: Pages lack social and structured metadata, including VideoObject on video details.
be-private-and-secure
secure-transport-and-headers
issueshighHeaders: CSP is only frame-ancestors self, X-Content-Type-Options and Referrer-Policy are missing, and HSTS is only one day. Cookies: four are not Secure and several use SameSite=None.
F20 high: Security policy coverage and cookie attributes are incomplete.
be-private-and-secure
data-minimisation-and-third-parties
issueshighHAR records 115 third-party requests and 1.59 MB third-party transfer, including Google, tsyndicate, and multiple CDN origins; the consent screenshot is still blocking the page during this load.
F21 high: A large third-party footprint loads around the consent experience.
be-private-and-secure
in-context-permissions-and-modern-auth
passhighNo permission request fired on load; signup offers Google/X identity options in context alongside email.
be-private-and-secure
defensive-browser-policies
issueshighHeaders: CSP is only frame-ancestors self, X-Content-Type-Options and Referrer-Policy are missing, and HSTS is only one day. Cookies: four are not Secure and several use SameSite=None.
F20 high: Security policy coverage and cookie attributes are incomplete.
be-resilient
progressive-enhancement
passhighNo-JS discoverability retained 86% home, 92% category, and 77% video content with title/H1/description present.
be-resilient
resilient-runtime-behaviour
passhighRepresentative listing, detail, search, consent dismissal, and signup state changes completed without runtime breakage.
be-resilient
offline-and-installable
issueshighThe site-files probe retrieved a valid manifest with start_url and minimal-ui, while the runtime probe reports no service-worker controller.
F22 medium: The site advertises an installable manifest but has no active service worker or offline fallback.
be-resilient
network-and-http-failure-states
passhighThe unknown route gives a clear explanation, support direction, and a Return to Home Page recovery action.
be-internationalised
lang-dir-and-logical-properties
passhighThe page declares lang=en, exposes many localized subdomains, and CSS inspection found logical properties.
be-internationalised
locale-aware-data
passmediumThe locale selector provides dozens of localized regional/language sites and rendered copy changes by locale endpoints.
be-internationalised
time-zone-correctness
not-applicablehighNo tested public surface presents dates, deadlines, scheduling, or time-zone-sensitive events, so time-zone handling is genuinely not applicable to these templates.
be-trustworthy
no-dark-patterns
passhighConsent Accept and Reject actions have equal size/prominence, and signup clearly discloses terms, age verification, public data, and partner use.
be-trustworthy
humane-error-handling
issueshighAfter invalid email signup, visible required/password messages appear, but :invalid finds no controls and the only live/alert region is empty.
F23 medium: Signup validation feedback is not programmatically associated or announced.
be-trustworthy
trustworthy-input-assistance
issueshighThe email field has autocomplete=off, duplicate email controls have no labels, while only the password field correctly uses autocomplete=new-password.
F24 medium: The email signup flow disables or omits autofill metadata.
be-trustworthy
safe-commercial-and-account-flows
passhighSignup clearly states it is free, identifies login alternatives, warns about legal age verification, and links terms/privacy before commitment.
be-sustainable
optimised-assets
issueshighImages probe: 12 oversized images, 16 legacy-format results, 29 missing dimensions, and 8 below-fold images not lazy-loaded.
F25 high: Image delivery is not consistently sized or efficient.
be-sustainable
no-wasteful-work
issueshighHAR records 143 requests and 62 scripts on load while eight shimmer animations remain active under reduced motion; optional third-party work dominates transfer.
F26 high: Third-party and script transfer dominates the initial page budget.
be-sustainable
third-party-and-media-budget
issueshighThird parties account for 1.59 MB of 1.78 MB transferred and 115 of 143 requests; scripts alone transfer 997 KB.
F26 high: Third-party and script transfer dominates the initial page budget.
be-agent-ready
structured-agent-capabilities
issueshighThe page offers search, filters, signup, and content navigation, but the DOM/probe contains no WebMCP or agent-tool registration evidence.
F27 low: Rich search and signup tasks are not exposed as structured agent capabilities.
be-agent-ready
on-device-inference
not-applicablehighThe site does not offer an on-device AI feature or inference task; adding inference would not support the audited core browsing, search, video, or signup journeys.
be-memory-efficient
no-leak-under-repeated-interaction
passmediumBaseline and post-10-scroll heap summaries were 33.84 MB and 35.15 MB (3.9% delta) with no Detached* constructor among top retained classes; no strong leak signal in this bounded exercise.
be-memory-efficient
bounded-footprint
passhighHeap summary reports 33.84 MB self-size at baseline, proportionate to a media-heavy listing with 36 images and extensive navigation.
be-memory-efficient
no-detached-dom-or-unbounded-listeners
passmediumNeither heap summary surfaces Detached* constructors among top retained classes; the bounded scroll exercise did not show explosive node/closure growth.

Provenance

Canonical report: results/atomic/reports/0551-xhamster2_com.json
Report SHA-256: 1a6520d1078019ff6656286ed05b2063b1881d38fe7954a03a231dcd49da4605
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/xhamster2_com/2026-07-21T12-42-37-664Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/xhamster2_com/2026-07-21T12-42-37-664Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7

Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.