Manifest position 613 · CrUX rank bucket 1000
https://www.croxyproxy.com
Coverage complete
Atomic coverage complete. Representative public templates and the primary entry journey were exercised; authenticated post-login and live proxied third-party browsing were not covered because they require account/external-session scope.
Attempts
1 / 3
Judged checks
58 / 58
Blocked
0
Not run
0
This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.
All 58 atomic check outcomes
| Principle / check | Status | Confidence | Evidence or reason |
|---|---|---|---|
respect-user-preferencesrespects-color-scheme | issues | high | The dark and default screenshots are pixel-identical, the CSS probe found no prefers-color-scheme rule, and Lighthouse found 3.02:1 quick-link contrast. F001 medium: The site does not adapt to dark or higher-contrast preferences. |
respect-user-preferencesrespects-reduced-motion | pass | high | The media query matched and getAnimations() returned no active animations; no non-essential motion remained. |
respect-user-preferencesrespects-contrast | issues | high | The dark and default screenshots are pixel-identical, the CSS probe found no prefers-color-scheme rule, and Lighthouse found 3.02:1 quick-link contrast. F001 medium: The site does not adapt to dark or higher-contrast preferences. |
implement-natural-interactionsview-transitions | issues | high | CSS inspection found no view-transition, animation-timeline, scroll-snap, or related modern interaction declarations across the homepage DOM. F002 low: Page and route changes use abrupt legacy navigation with no modern transition support. |
implement-natural-interactionsscroll-driven-animations | not-applicable | high | No scroll-linked/parallax/scrollytelling motion exists on the representative templates, so there is no implementation to move off main thread. |
implement-natural-interactionsphysical-gestures | not-applicable | high | No swipe, pull, carousel, drag, or other gesture-driven component exists on the audited public templates. |
provide-guided-navigationscroll-state-aware-chrome | issues | high | The long article and terms captures show static chrome; CSS inspection found no scroll-state, anchor positioning, transition, or attention-highlight support. F003 low: Long pages and the language menu provide little state-aware navigation guidance. |
provide-guided-navigationanchored-positioning | issues | high | The long article and terms captures show static chrome; CSS inspection found no scroll-state, anchor positioning, transition, or attention-highlight support. F003 low: Long pages and the language menu provide little state-aware navigation guidance. |
provide-guided-navigationdirects-attention | issues | high | The long article and terms captures show static chrome; CSS inspection found no scroll-state, anchor positioning, transition, or attention-highlight support. F003 low: Long pages and the language menu provide little state-aware navigation guidance. |
maximize-content-reduce-noiseno-intrusive-interruptions | issues | high | Fresh-load desktop and mobile screenshots show the primary proxy form dimmed behind a consent dialog describing processing by 210 partners; only Consent and Manage options are offered. F004 high: A full-screen consent interstitial obscures the page and offers no equal first-layer reject action. |
maximize-content-reduce-noisesemantic-dismissible-primitives | issues | high | Fresh-load desktop and mobile screenshots show the primary proxy form dimmed behind a consent dialog describing processing by 210 partners; only Consent and Manage options are offered. F004 high: A full-screen consent interstitial obscures the page and offers no equal first-layer reject action. |
maximize-content-reduce-noisereduced-chrome | pass | high | Blog, feedback, and terms screenshots use sparse content-first layouts with little application frame. |
adapt-to-the-form-factorresponsive-no-horizontal-scroll | pass | high | Terms and Arabic templates reflow at 360px; Arabic reports zero overflow. Homepage layout scrollWidth equals its CSS inner width, with no clipped core content in the screenshot. |
adapt-to-the-form-factorcomponent-level-responsiveness | issues | high | CSS inspection found no view-transition, animation-timeline, scroll-snap, or related modern interaction declarations across the homepage DOM. F002 low: Page and route changes use abrupt legacy navigation with no modern transition support. |
adapt-to-the-form-factorinput-modality-aware | issues | high | The focus probe reports outline-style none for links, the URL input, and buttons; social controls measure 36x32px and many text links are only 17px high. F005 medium: Keyboard focus is not visibly indicated and several targets are undersized. |
support-core-task-successclear-purpose-and-primary-action | pass | high | The page identifies itself as a secure web proxy and places a URL/search field with Go action prominently behind the consent layer. |
support-core-task-successprimary-flow-completion | issues | high | The proxy journey screenshot remains at the full-page consent state with the URL field obscured; the initial task cannot begin without accepting or navigating a complex vendor-management flow. F006 high: The mandatory consent wall interrupts the core proxy task before the user can enter a destination. |
support-core-task-successclear-system-state-and-recovery | pass | high | Native required-field messages appear after submit; the 404 page explains the error and offers Homepage and support recovery links. |
be-fast-and-stablegood-core-web-vitals | issues | high | Lighthouse reports Performance 0.87, Speed Index 5.4s, TTI 12.4s, TBT 210ms, and CLS 0.135; the first-party trace still shows LCP 1.71s with no long tasks in that separate run. F007 high: Mobile lab performance is slow and visually unstable. |
be-fast-and-stablevisual-stability | issues | high | Lighthouse reports Performance 0.87, Speed Index 5.4s, TTI 12.4s, TBT 210ms, and CLS 0.135; the first-party trace still shows LCP 1.71s with no long tasks in that separate run.; Both image audits report missing width/height and srcset; the 700px PNG logo is displayed at 340px and Lighthouse flags the logo as unsized. F007 high: Mobile lab performance is slow and visually unstable. F012 medium: Images lack intrinsic dimensions and responsive delivery. |
be-fast-and-stableefficient-main-thread | issues | high | Lighthouse reports Performance 0.87, Speed Index 5.4s, TTI 12.4s, TBT 210ms, and CLS 0.135; the first-party trace still shows LCP 1.71s with no long tasks in that separate run. F007 high: Mobile lab performance is slow and visually unstable. |
be-fast-and-stableefficient-resource-delivery | issues | high | HAR captured 47 requests and 1.88MB transferred, including 42 third-party requests and 1.80MB third-party bytes. Lighthouse estimates 546KiB unused JavaScript and 44KiB unused CSS.; Both image audits report missing width/height and srcset; the 700px PNG logo is displayed at 340px and Lighthouse flags the logo as unsized. F008 high: Third-party and unused JavaScript dominate delivery. F012 medium: Images lack intrinsic dimensions and responsive delivery. |
be-fast-and-stabletrim-unused-and-duplicate-code | issues | high | HAR captured 47 requests and 1.88MB transferred, including 42 third-party requests and 1.80MB third-party bytes. Lighthouse estimates 546KiB unused JavaScript and 44KiB unused CSS. F008 high: Third-party and unused JavaScript dominate delivery. |
be-inclusivenames-roles-labels | pass | high | Lighthouse accessibility scored 0.96; inspected feedback fields have explicit labels and both images have non-empty alt text. |
be-inclusivesufficient-contrast | issues | high | Lighthouse identifies repeated quick-link failures at 3.02:1 (#6a9452 on #e9f0e5), below the expected 4.5:1 for normal text. F009 high: Quick-link text fails WCAG contrast. |
be-inclusivestructure-and-focus | issues | high | The focus probe found no visible outline on focusable controls; the DOM probe found no main/nav/header/footer landmarks and multiple 36x32 or 17px-high targets. F010 medium: Focus visibility, landmark structure, and compact targets weaken keyboard and assistive use. |
be-inclusivelegible-text | pass | high | Body and heading text reflow without clipping on article, feedback, and legal templates and uses readable spacing. |
be-inclusivezoom-reflow-targets-and-media | issues | high | The focus probe found no visible outline on focusable controls; the DOM probe found no main/nav/header/footer landmarks and multiple 36x32 or 17px-high targets. F010 medium: Focus visibility, landmark structure, and compact targets weaken keyboard and assistive use. |
follow-best-practicesno-console-errors | issues | high | Lighthouse records an uncaught adsbygoogle error, three deprecation warnings, and three BFCache failure reasons. F011 medium: The page logs an ad exception and uses deprecated browser APIs. |
follow-best-practicessound-document-and-assets | issues | high | Both image audits report missing width/height and srcset; the 700px PNG logo is displayed at 340px and Lighthouse flags the logo as unsized. F012 medium: Images lack intrinsic dimensions and responsive delivery. |
follow-best-practicesbrowser-platform-hygiene | issues | high | Lighthouse records an uncaught adsbygoogle error, three deprecation warnings, and three BFCache failure reasons. F011 medium: The page logs an ad exception and uses deprecated browser APIs. |
be-discoverabletitle-and-description | pass | high | Homepage, article, terms, and support pages expose descriptive titles; homepage/article/terms expose descriptions. |
be-discoverablecrawlable-and-mobile-friendly | issues | high | Lighthouse finds proxy quick links implemented with data-href rather than href. robots.txt exists, but /sitemap.xml returns the branded not-found page and inspected pages expose no canonical URL. F013 medium: Important quick links are not crawlable and indexing signals are incomplete. |
be-discoverablecanonical-and-indexing-signals | issues | high | Lighthouse finds proxy quick links implemented with data-href rather than href. robots.txt exists, but /sitemap.xml returns the branded not-found page and inspected pages expose no canonical URL. F013 medium: Important quick links are not crawlable and indexing signals are incomplete. |
be-discoverablestructured-and-shareable-metadata | issues | high | The representative article has a descriptive title and meta description but no JSON-LD and no Open Graph tags. F014 medium: Article pages omit structured data and social-preview metadata. |
be-private-and-securesecure-transport-and-headers | issues | high | CSP allows unsafe-inline and unsafe-eval; X-Frame-Options/frame-ancestors, Referrer-Policy, and Permissions-Policy are absent. Four analytics/consent cookies are not Secure and all seven cookies use SameSite=None. F015 high: Security policy and cookie defaults are weaker than the service promise warrants. |
be-private-and-securedata-minimisation-and-third-parties | issues | high | The tracker probe sees 13 third-party origins and known Google trackers; HAR attributes 1.80MB of 1.88MB to third parties, while the consent UI describes 210 partners and precise-geolocation use. F016 high: The privacy footprint is disproportionate to the simple proxy-entry page. |
be-private-and-securein-context-permissions-and-modern-auth | issues | high | The exercised sign-in modal contains email/password fields with empty autocomplete attributes and no WebAuthn/Passkey capability in the loaded document. F017 medium: Sign-in is password-only and lacks autofill tokens. |
be-private-and-securedefensive-browser-policies | issues | high | CSP allows unsafe-inline and unsafe-eval; X-Frame-Options/frame-ancestors, Referrer-Policy, and Permissions-Policy are absent. Four analytics/consent cookies are not Secure and all seven cookies use SameSite=None. F015 high: Security policy and cookie defaults are weaker than the service promise warrants. |
be-resilientprogressive-enhancement | pass | high | Discoverability captured 80% homepage and 86% article content in raw HTML, with title, H1, and description present and no JS shell. |
be-resilientresilient-runtime-behaviour | pass | high | Menus and forms remained inside viewports; ten language-menu toggles left the DOM count unchanged. |
be-resilientoffline-and-installable | not-applicable | high | The core product is an intrinsically online web proxy; offline proxying and installability are not meaningful requirements. |
be-resilientnetwork-and-http-failure-states | pass | high | The not-found route renders a clear error explanation plus links to homepage and support rather than a blank shell. |
be-internationalisedlang-dir-and-logical-properties | pass | high | English declares lang=en/dir=auto; Arabic declares lang=ar/dir=rtl, translates the main heading, reflows at 360px, and reports zero overflow. |
be-internationalisedlocale-aware-data | not-applicable | high | The public templates expose no dates, prices, currencies, measurements, or other locale-sensitive data beyond a copyright year. |
be-internationalisedtime-zone-correctness | not-applicable | high | No events, schedules, timestamps, or time-zone-sensitive concepts appear on the audited public templates. |
be-trustworthyno-dark-patterns | issues | high | The initial dialog offers a one-click Consent button but no equal Reject button, despite listing 210 partners, legitimate-interest processing, and precise geolocation. F018 high: Consent choice architecture favours acceptance over refusal. |
be-trustworthyhumane-error-handling | pass | high | Required feedback fields use native post-interaction validation and return clear “Please fill in this field” messages. |
be-trustworthytrustworthy-input-assistance | issues | high | Feedback email and sign-in email/password fields all report empty autocomplete values; sign-in is password-only. F019 medium: Account and support inputs omit useful autocomplete assistance. |
be-trustworthysafe-commercial-and-account-flows | issues | high | Feedback email and sign-in email/password fields all report empty autocomplete values; sign-in is password-only. F019 medium: Account and support inputs omit useful autocomplete assistance. |
be-sustainableoptimised-assets | issues | high | Both image audits report missing width/height and srcset; the 700px PNG logo is displayed at 340px and Lighthouse flags the logo as unsized. F012 medium: Images lack intrinsic dimensions and responsive delivery. |
be-sustainableno-wasteful-work | issues | high | HAR attributes 96% of transferred bytes to third parties; GTM, Font Awesome, ads, consent, feedback, sharing, and fonts dominate a simple URL-entry page. F020 high: Third-party scripts and media consume most of the page budget without serving the core form. |
be-sustainablethird-party-and-media-budget | issues | high | HAR attributes 96% of transferred bytes to third parties; GTM, Font Awesome, ads, consent, feedback, sharing, and fonts dominate a simple URL-entry page. F020 high: Third-party scripts and media consume most of the page budget without serving the core form. |
be-agent-readystructured-agent-capabilities | not-applicable | high | This emerging capability was judged out of scope: the public site does not declare an agent-facing product surface or intent. |
be-agent-readyon-device-inference | not-applicable | high | No summarisation or language-model task is part of the observed proxy-entry, content, or support journeys, so on-device inference is not applicable. |
be-memory-efficientno-leak-under-repeated-interaction | pass | medium | After ten language-menu open/close cycles, DOM nodes stayed 5,452; heap changed by about 0.42MB (1.4%) with stable major constructor counts, not evidence of unbounded growth. |
be-memory-efficientbounded-footprint | issues | medium | The baseline heap summary contains 461,255 V8 nodes and 29.5MB self size, including 132,916 native nodes and 27,666 closures. Repeating the language toggle did not grow DOM nodes, so this is footprint rather than a demonstrated leak. F021 medium: The idle memory footprint is heavy for a mostly static entry page. |
be-memory-efficientno-detached-dom-or-unbounded-listeners | pass | medium | No Detached* constructor appears among leading retained constructors and ten toggles add zero DOM nodes; this did not show accumulating detached DOM. |
Provenance
Canonical report: results/atomic/reports/0613-www_croxyproxy_com.json
Report SHA-256: bbddaa285c88470e1ab584eb0d50e945dd43d187b7ac26d721a7818a1acf11f6
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/www_croxyproxy_com/2026-07-21T22-53-40-646Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/www_croxyproxy_com/2026-07-21T22-53-40-646Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7
Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.