Manifest position 553 · CrUX rank bucket 1000
https://xhsocial.com
Coverage complete
Complete atomic audit across 58 registered checks and five representative paths.
Attempts
1 / 3
Judged checks
58 / 58
Blocked
0
Not run
0
This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.
All 58 atomic check outcomes
| Principle / check | Status | Confidence | Evidence or reason |
|---|---|---|---|
respect-user-preferencesrespects-color-scheme | issues | high | The dark-emulated screenshot is visually identical to the default dark UI, but the document probe reports computed color-scheme: normal rather than declaring supported schemes. F01 medium: Fixed dark theme ignores the user’s colour-scheme preference |
respect-user-preferencesrespects-reduced-motion | issues | high | The reduced-motion probe found eight running shimmer animations with 2,000 ms duration and infinite iterations, and found zero prefers-reduced-motion rules. F02 medium: Infinite shimmer continues under reduced-motion |
respect-user-preferencesrespects-contrast | issues | high | Lighthouse measured the age-verification banner at 2.15:1 and 1.75:1, video-view text at 3.29:1, and also found a link distinguishable only by near-identical colour. F11 high: Important text fails minimum contrast |
implement-natural-interactionsview-transitions | issues | high | The modern CSS probe found zero view-transition rules on a multi-route interactive site, while the browser API is available. Navigation and consent state swap abruptly. F03 low: Route and state changes have no transition treatment |
implement-natural-interactionsscroll-driven-animations | not-applicable | high | No scroll-linked animation/parallax surface was present, so there is no implementation choice to assess. |
implement-natural-interactionsphysical-gestures | pass | high | Modern CSS probe found no custom scroll handlers; page uses native anchor navigation and scrolling. |
provide-guided-navigationscroll-state-aware-chrome | issues | high | The modern CSS probe found zero view-transition rules on a multi-route interactive site, while the browser API is available. Navigation and consent state swap abruptly. F03 low: Route and state changes have no transition treatment |
provide-guided-navigationanchored-positioning | not-applicable | high | No tooltip, transient popover or anchored menu was exposed on the representative paths. |
provide-guided-navigationdirects-attention | issues | high | The modern CSS probe found zero view-transition rules on a multi-route interactive site, while the browser API is available. Navigation and consent state swap abruptly. F03 low: Route and state changes have no transition treatment |
maximize-content-reduce-noiseno-intrusive-interruptions | issues | high | First-load screenshots on home, categories and 404 show a large centered consent layer obscuring the page. DOM probes found no dialog, popover, or role=dialog despite modal presentation. F04 high: Cookie consent obscures the primary content and lacks dialog semantics |
maximize-content-reduce-noisesemantic-dismissible-primitives | issues | high | First-load screenshots on home, categories and 404 show a large centered consent layer obscuring the page. DOM probes found no dialog, popover, or role=dialog despite modal presentation. F04 high: Cookie consent obscures the primary content and lacks dialog semantics |
maximize-content-reduce-noisereduced-chrome | issues | high | First-load screenshots on home, categories and 404 show a large centered consent layer obscuring the page. DOM probes found no dialog, popover, or role=dialog despite modal presentation. F04 high: Cookie consent obscures the primary content and lacks dialog semantics |
adapt-to-the-form-factorresponsive-no-horizontal-scroll | issues | high | The 360x800 layout capture measured scrollWidth 1024 px against a 360 px visual viewport, 664 px horizontal overflow; the screenshot clips the desktop sidebar and content. F05 high: Desktop-width layout overflows a 360 px viewport |
adapt-to-the-form-factorcomponent-level-responsiveness | issues | high | The modern CSS probe found zero container-query rules, while the listing/sidebar composition is reused across widths and visibly clips at 360 px. F06 low: Components do not adapt at container level |
adapt-to-the-form-factorinput-modality-aware | issues | high | Lighthouse found user-scalable=no in the effective mobile viewport and 20 px-high/overlapping targets, failing its meta-viewport and target-size audits. F12 high: Zoom is disabled and some touch targets are undersized |
support-core-task-successclear-purpose-and-primary-action | pass | high | Home and category screenshots have a clear H1 and prominent video/category paths; detail metadata has a descriptive H1/title. |
support-core-task-successprimary-flow-completion | issues | high | Following a current home-page video URL produced an unstyled nginx “503 Service Temporarily Unavailable” screenshot. A later metadata probe succeeded, showing an intermittent backend/runtime failure rather than a dead link. F07 high: Primary watch journey intermittently fails with a raw 503 |
support-core-task-successclear-system-state-and-recovery | issues | high | Following a current home-page video URL produced an unstyled nginx “503 Service Temporarily Unavailable” screenshot. A later metadata probe succeeded, showing an intermittent backend/runtime failure rather than a dead link. F07 high: Primary watch journey intermittently fails with a raw 503 |
be-fast-and-stablegood-core-web-vitals | issues | high | Lighthouse measured LCP 3.2 s on mobile (performance 0.89), while the direct trace measured 1.52 s in a separate desktop-like run; the slower representative condition exceeds the 2.5 s good threshold. F08 medium: Mobile lab LCP misses the good threshold |
be-fast-and-stablevisual-stability | pass | high | Layout observer recorded CLS 0 with no shifts; Lighthouse also measured CLS 0. |
be-fast-and-stableefficient-main-thread | pass | high | Trace found two long tasks, 136.5 ms TBT, while Lighthouse measured 0 ms TBT; no sustained blocking was observed. |
be-fast-and-stableefficient-resource-delivery | issues | high | HAR recorded 141 requests and 1.79 MB transferred; 61 scripts account for 988 KB, the largest bundle is 400 KB, and 113 requests/1.60 MB are cross-origin. The image audit found 29/36 images without width and height, 13 oversized images, 8 below-fold images not lazy-loaded, and 15 legacy-format detections. F09 medium: The homepage ships a heavy script and third-party dependency graph F13 medium: Image delivery wastes bytes and risks instability |
be-fast-and-stabletrim-unused-and-duplicate-code | issues | high | HAR recorded 141 requests and 1.79 MB transferred; 61 scripts account for 988 KB, the largest bundle is 400 KB, and 113 requests/1.60 MB are cross-origin. F09 medium: The homepage ships a heavy script and third-party dependency graph |
be-inclusivenames-roles-labels | issues | high | Lighthouse found an unnamed button, label/content name mismatches on video links, an li with role=button, and non-li direct children inside a ul; accessibility score was 0.75. F10 high: Interactive names, roles and list semantics are broken |
be-inclusivesufficient-contrast | issues | high | Lighthouse measured the age-verification banner at 2.15:1 and 1.75:1, video-view text at 3.29:1, and also found a link distinguishable only by near-identical colour. F11 high: Important text fails minimum contrast |
be-inclusivestructure-and-focus | issues | high | Lighthouse found an unnamed button, label/content name mismatches on video links, an li with role=button, and non-li direct children inside a ul; accessibility score was 0.75. F10 high: Interactive names, roles and list semantics are broken |
be-inclusivelegible-text | pass | high | Screenshots show readable body/headline sizing without clipping at the tested desktop condition; contrast exceptions are recorded separately. |
be-inclusivezoom-reflow-targets-and-media | issues | high | Lighthouse found user-scalable=no in the effective mobile viewport and 20 px-high/overlapping targets, failing its meta-viewport and target-size audits. F12 high: Zoom is disabled and some touch targets are undersized |
follow-best-practicesno-console-errors | pass | high | Lighthouse best-practices scored 1.0 and navigation/evaluate probes completed without an uncaught page exception. |
follow-best-practicessound-document-and-assets | issues | high | The image audit found 29/36 images without width and height, 13 oversized images, 8 below-fold images not lazy-loaded, and 15 legacy-format detections. F13 medium: Image delivery wastes bytes and risks instability |
follow-best-practicesbrowser-platform-hygiene | pass | high | Lighthouse best-practices scored 1.0; no permission prompt appeared on load and scripts are predominantly deferred. |
be-discoverabletitle-and-description | pass | high | DOM/recon found a descriptive title and meta description; valid detail also has a unique descriptive title. |
be-discoverablecrawlable-and-mobile-friendly | pass | high | Discoverability measured 86% raw-content coverage, isJsShell=false, viewport is present, and navigation uses real href links. |
be-discoverablecanonical-and-indexing-signals | issues | high | The public site exposes many locale subdomains, but the probe found zero hreflang links; /sitemap.xml returned an empty body. The canonical points to the xhamster.com alias, so crawlers lack a complete localized URL map on this host. F14 medium: Localized indexing signals are incomplete |
be-discoverablestructured-and-shareable-metadata | issues | high | The valid video-detail probe found comprehensive Open Graph/Twitter metadata but zero JSON-LD blocks for a rich video entity. F15 medium: Video detail lacks structured VideoObject data |
be-private-and-securesecure-transport-and-headers | issues | high | Headers show CSP limited to frame-ancestors, missing X-Content-Type-Options and Referrer-Policy, while four of five cookies lack Secure and several use SameSite=None. F16 high: Browser security policy and cookie flags are weak |
be-private-and-securedata-minimisation-and-third-parties | issues | high | The initial HAR, captured while the cookie prompt was still present, includes Google Tag Manager and Google Identity; 113/141 requests and 1.60/1.79 MB were cross-origin. F17 high: Third-party activity starts before a consent choice |
be-private-and-securein-context-permissions-and-modern-auth | issues | high | The signup path offers Google, X and email/password. Probes found no WebAuthn/passkey affordance or navigator.credentials flow on the representative auth surface. F18 medium: Signup exposes federated/password options but no phishing-resistant path |
be-private-and-securedefensive-browser-policies | issues | high | Headers show CSP limited to frame-ancestors, missing X-Content-Type-Options and Referrer-Policy, while four of five cookies lack Secure and several use SameSite=None. F16 high: Browser security policy and cookie flags are weak |
be-resilientprogressive-enhancement | pass | high | Raw HTML returned 200 with title, H1 and description and retained 86% of rendered content words without JavaScript. |
be-resilientresilient-runtime-behaviour | issues | high | Following a current home-page video URL produced an unstyled nginx “503 Service Temporarily Unavailable” screenshot. A later metadata probe succeeded, showing an intermittent backend/runtime failure rather than a dead link. F07 high: Primary watch journey intermittently fails with a raw 503 |
be-resilientoffline-and-installable | issues | high | A manifest is linked, but the loaded page had no controlling service worker. The video platform is app-like and its primary detail request also demonstrated a transient 503. F19 medium: App-like service has a manifest but no active offline support |
be-resilientnetwork-and-http-failure-states | issues | high | Following a current home-page video URL produced an unstyled nginx “503 Service Temporarily Unavailable” screenshot. A later metadata probe succeeded, showing an intermittent backend/runtime failure rather than a dead link. F07 high: Primary watch journey intermittently fails with a raw 503 |
be-internationalisedlang-dir-and-logical-properties | issues | high | The page links dozens of language subdomains, but exposes no hreflang links and the CSS probe counted 371 physical left/right declarations versus 19 logical-property occurrences. F20 medium: Localized variants are not backed by robust bidi/layout signals |
be-internationalisedlocale-aware-data | not-applicable | high | Representative paths did not present dates, currencies or locale-sensitive numeric data. |
be-internationalisedtime-zone-correctness | not-applicable | high | Representative paths exposed no scheduling or time-zone-sensitive concepts. |
be-trustworthyno-dark-patterns | pass | high | Consent presents equal-size Accept and Reject controls and signup clearly discloses terms, privacy and public-data implications. |
be-trustworthyhumane-error-handling | issues | high | After opening email signup and triggering submit with empty fields, the probe found no invalid elements, no role=alert messages and no visible actionable validation state. F21 high: Empty signup submission provides no actionable error state |
be-trustworthytrustworthy-input-assistance | issues | high | The email signup probe reports autocomplete=off on both email controls; only the password field uses new-password. F22 medium: Signup disables email autofill |
be-trustworthysafe-commercial-and-account-flows | pass | high | Signup offers federated and email choices and visibly discloses age-verification, terms and data-use commitments before account creation. |
be-sustainableoptimised-assets | issues | high | The image audit found 29/36 images without width and height, 13 oversized images, 8 below-fold images not lazy-loaded, and 15 legacy-format detections. F13 medium: Image delivery wastes bytes and risks instability |
be-sustainableno-wasteful-work | issues | high | HAR recorded 141 requests and 1.79 MB transferred; 61 scripts account for 988 KB, the largest bundle is 400 KB, and 113 requests/1.60 MB are cross-origin. The initial HAR, captured while the cookie prompt was still present, includes Google Tag Manager and Google Identity; 113/141 requests and 1.60/1.79 MB were cross-origin. F09 medium: The homepage ships a heavy script and third-party dependency graph F17 high: Third-party activity starts before a consent choice |
be-sustainablethird-party-and-media-budget | issues | high | HAR recorded 141 requests and 1.79 MB transferred; 61 scripts account for 988 KB, the largest bundle is 400 KB, and 113 requests/1.60 MB are cross-origin. The initial HAR, captured while the cookie prompt was still present, includes Google Tag Manager and Google Identity; 113/141 requests and 1.60/1.79 MB were cross-origin. F09 medium: The homepage ships a heavy script and third-party dependency graph F17 high: Third-party activity starts before a consent choice |
be-agent-readystructured-agent-capabilities | not-applicable | high | This consumer media site exposes no transaction/productivity capability that agents need to invoke; emerging WebMCP tooling is not applicable to the audited scope. |
be-agent-readyon-device-inference | not-applicable | high | No summarisation, generation or language workflow was present where on-device inference would improve the core task. |
be-memory-efficientno-leak-under-repeated-interaction | pass | medium | After ten repeated top/bottom scroll cycles the post-interaction heap summary did not show retained growth over baseline; totals decreased after cleanup. |
be-memory-efficientbounded-footprint | pass | medium | Performance.memory reported 23.3 MB used JS heap with 1,808 DOM nodes, proportionate to the media listing. |
be-memory-efficientno-detached-dom-or-unbounded-listeners | pass | medium | Neither heap summary exposed Detached* among top constructors; DOM probe found no inline onclick population. No accumulation signal was observed. |
Provenance
Canonical report: results/atomic/reports/0553-xhsocial_com.json
Report SHA-256: f6c34cebba3425d19ab2611e81cb8825bd01b3d5d4d720bca8df4b98eb00653d
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/xhsocial_com/2026-07-21T13-06-48-472Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/xhsocial_com/2026-07-21T13-06-48-472Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7
Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.