Manifest position 687 · CrUX rank bucket 1000
https://zbporn.tv
Coverage complete
Coverage-complete representative audit. External AgeVerif identity verification and post-verification playback were not completed; the public pre-verification flow and link contract were inspected.
Attempts
1 / 3
Judged checks
58 / 58
Blocked
0
Not run
0
This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.
All 58 atomic check outcomes
| Principle / check | Status | Confidence | Evidence or reason |
|---|---|---|---|
respect-user-preferencesrespects-color-scheme | issues | high | Under prefers-color-scheme: dark, computed body background remained rgb(255,255,255), color-scheme was normal, and the stylesheet capability probe found no prefers-color-scheme rule. F01 medium: System dark preference is ignored. |
respect-user-preferencesrespects-reduced-motion | pass | high | Reduced-motion emulation matched true; there were zero active animations and no autoplay motion to suppress. |
respect-user-preferencesrespects-contrast | pass | high | Forced-colors/high-contrast screenshot retained visible controls, headings, card links and age-verification action. |
implement-natural-interactionsview-transitions | issues | high | The stylesheet probe found no view-transition rules and the site is a server-rendered MPA whose navigation changes state abruptly. F02 low: Route changes have no transition treatment. |
implement-natural-interactionsscroll-driven-animations | pass | high | CSS and runtime probes found no scroll-linked effects or scroll-event animation that would need migration off the main thread. |
implement-natural-interactionsphysical-gestures | pass | high | No custom swipe, drag, pull-to-refresh or pointermove-driven gesture surface was present; normal scrolling remains platform-native. |
provide-guided-navigationscroll-state-aware-chrome | issues | high | Mobile evidence shows an 8,808px document, while CSS inspection found no scroll-state query, progress affordance, or scroll-position-aware styling. F03 low: Long listing pages provide no scroll-state-aware orientation. |
provide-guided-navigationanchored-positioning | issues | high | The navigation contains custom dropdown triggers and the CSS capability probe found no anchor positioning or top-layer semantic primitive use. F04 low: Dropdown and overlay positioning is hand-rolled rather than anchored. |
provide-guided-navigationdirects-attention | pass | high | Screenshots show a persistent global nav, descriptive H1 per archetype, and clear card titles that preserve location and next steps. |
maximize-content-reduce-noiseno-intrusive-interruptions | pass | high | Initial screenshots show the age requirement as an inline, non-obscuring banner; content remains visible and no full-viewport interstitial appears. |
maximize-content-reduce-noisesemantic-dismissible-primitives | issues | high | After activating Sign Up, the DOM contained a third injected form but zero dialog and zero popover elements. F05 medium: Sign-up is injected as a custom Fancybox-style overlay instead of a semantic dialog. |
maximize-content-reduce-noisereduced-chrome | pass | high | Desktop and mobile screenshots allocate most of the viewport to content cards; global chrome is compact and collapses on mobile. |
adapt-to-the-form-factorresponsive-no-horizontal-scroll | pass | high | Layout evidence at 360px found scrollWidth=clientWidth=360 and zero horizontal overflow on home and category templates. |
adapt-to-the-form-factorcomponent-level-responsiveness | issues | high | The responsive page works at 360px, but the live DOM had zero non-normal containers and the stylesheet had zero @container rules. F06 low: Reusable grids adapt only at viewport level. |
adapt-to-the-form-factorinput-modality-aware | issues | high | The first focused interactive element computed outline:none; Lighthouse found target-size failures, including 15-16px-high category/model links. F07 medium: Keyboard focus and small targets are not consistently usable. |
support-core-task-successclear-purpose-and-primary-action | pass | high | Home, listing, search and detail screenshots use descriptive headings, clear navigation and an obvious age-verification/player action. |
support-core-task-successprimary-flow-completion | pass | high | A search query produced relevant results; a detail page exposed the selected title and a clearly linked legal AgeVerif gate for the play action. |
support-core-task-successclear-system-state-and-recovery | issues | high | A nonexistent route returns a bare nginx 404 with no site navigation, search, home link, explanation, or recovery action. F08 medium: The 404 state is a dead end. |
be-fast-and-stablegood-core-web-vitals | issues | high | Lighthouse measured LCP at 5.0s (score 0.27), while the controlled desktop trace was faster at 1.08s, showing a material mobile-path regression. F09 high: Mobile LCP misses the good threshold. |
be-fast-and-stablevisual-stability | pass | high | Mobile layout observer and Lighthouse both measured CLS 0 with no recorded layout shifts. |
be-fast-and-stableefficient-main-thread | pass | high | Trace recorded zero long tasks and 0ms TBT; Lighthouse measured only 42ms total blocking time. |
be-fast-and-stableefficient-resource-delivery | issues | high | Lighthouse reported the LCP resource was discoverable and eager but lacked fetchpriority=high; HAR recorded 494KB of script transfer. F10 medium: The LCP image is not priority hinted and resource delivery is analytics-heavy. |
be-fast-and-stabletrim-unused-and-duplicate-code | issues | high | Lighthouse estimated 235KiB unused JavaScript across GTM, gtag, Yandex and the site bundle, plus 21KiB/83.7% unused stylesheet bytes. F11 medium: The page ships substantial unused JS and CSS. |
be-inclusivenames-roles-labels | issues | high | Search and sign-up probes found inputs with zero associated labels and no aria-label; the apparent player control is a span inside a link whose only image alt is “preview”. F12 high: Core form and player controls lack robust accessible names. |
be-inclusivesufficient-contrast | issues | high | Lighthouse measured date metadata at 1.94:1 and age-verification subtext at 3.74:1, below the 4.5:1 text requirement. F13 medium: Secondary text fails WCAG contrast. |
be-inclusivestructure-and-focus | issues | high | Lighthouse failed landmark-one-main, while the direct focus probe reported outline:none on the first focusable element. F14 medium: The page has no main landmark and focus indication is missing. |
be-inclusivelegible-text | issues | high | The mobile screenshot shows 12px low-contrast dates and tightly packed two-column card metadata; Lighthouse confirms repeated contrast failures in those labels. F15 low: Dense mobile metadata is too small and visually weak. |
be-inclusivezoom-reflow-targets-and-media | issues | high | Lighthouse found multiple category and model links only 15-16px high with insufficient safe spacing, despite successful 360px reflow. F16 medium: Touch targets fail the minimum target-size bar. |
follow-best-practicesno-console-errors | pass | high | Lighthouse errors-in-console audit scored 1 with no collected errors. |
follow-best-practicessound-document-and-assets | issues | high | The images primitive found 90/100 images without width/height, 60 without srcset, and 96 legacy-format images. F17 medium: Most images omit intrinsic dimensions and modern delivery hints. |
follow-best-practicesbrowser-platform-hygiene | issues | high | Lighthouse reported five BFCache blockers, including main-resource cache-control:no-store and WebSocket usage. F18 low: The page is not eligible for back/forward cache. |
be-discoverabletitle-and-description | pass | high | Home and video detail probes found unique descriptive titles and meta descriptions. |
be-discoverablecrawlable-and-mobile-friendly | issues | high | Lighthouse found five non-crawlable anchors, including Sign Up/Login with data-href only and an Our Network javascript:void(0) trigger. F19 medium: Several navigation/account actions are not crawlable links. |
be-discoverablecanonical-and-indexing-signals | issues | high | The live robots.txt declares https://zbporn.com/sitemap.xml while the audited host serves its sitemap index at https://zbporn.tv/sitemap.xml. F20 low: robots.txt points at the wrong sitemap host. |
be-discoverablestructured-and-shareable-metadata | issues | high | The detail page has useful Open Graph video metadata but zero JSON-LD blocks and no Twitter metadata. F21 medium: Video detail pages lack VideoObject structured data. |
be-private-and-securesecure-transport-and-headers | issues | high | HTTPS and HSTS are present, but CSP and nosniff are missing; 11 cookies were reported insecure and PHPSESSID was not HttpOnly. F22 high: Session/cookie and XSS defenses are incomplete. |
be-private-and-securedata-minimisation-and-third-parties | issues | high | The initial load contacted Google Analytics/GTM and Yandex; HAR attributed about 400KB of script to those services and the tracker probe found five third-party origins. F23 high: Tracking starts before any privacy choice. |
be-private-and-securein-context-permissions-and-modern-auth | issues | high | Lighthouse confirms no permission prompts on load, but the sign-up overlay exposes two password fields and no WebAuthn/passkey affordance. F24 low: Account creation is password-only with no modern authentication path. |
be-private-and-securedefensive-browser-policies | issues | high | Headers evidence shows no CSP/frame-ancestors policy, nosniff, Referrer-Policy, or Permissions-Policy; X-Frame-Options and HSTS are present. F25 medium: Several browser-enforced defensive policies are absent. |
be-resilientprogressive-enhancement | pass | high | Discoverability comparison found 98% raw-HTML coverage, title/H1/description present, and no JS shell. |
be-resilientresilient-runtime-behaviour | pass | high | Representative home, listing, search and detail templates rendered stable content; custom sign-up content loaded after activation without clipping in the DOM probe. |
be-resilientoffline-and-installable | not-applicable | high | This streaming/content service is intrinsically network-dependent; offline playback/installability was judged outside the representative public browsing task. |
be-resilientnetwork-and-http-failure-states | issues | high | The verified 404 response is a blank nginx template with no recovery options, preserving neither navigation nor user context. F33 medium: HTTP failure states are not integrated with the product experience. |
be-internationalisedlang-dir-and-logical-properties | issues | high | The page declares lang=en and 12 hreflang links, but stylesheet analysis counted 234 physical left/right properties versus 55 logical-property tokens. F26 low: The multilingual layout remains heavily dependent on physical CSS properties. |
be-internationalisedlocale-aware-data | pass | high | The page exposes 12 hreflang variants and uses relative age labels rather than ambiguous numeric date formats on content cards. |
be-internationalisedtime-zone-correctness | not-applicable | high | No scheduling, event coordination, calendar input, or absolute local-time workflow appears on the representative paths. |
be-trustworthyno-dark-patterns | issues | high | The prominent banner says “we don’t store personal data,” yet the initial page sets long-lived GA/Yandex identifiers and sends analytics requests before verification or consent. F27 high: The privacy reassurance conflicts with observed tracking. |
be-trustworthyhumane-error-handling | issues | high | Its visible username, email and two password controls have no required attributes, associated labels or aria descriptors in the injected DOM. F28 medium: The sign-up form provides no declarative validation or accessible error contract. |
be-trustworthytrustworthy-input-assistance | issues | high | Search uses autocomplete=off; sign-up username, email and password fields expose empty autocomplete values rather than username, email, new-password and current-password tokens. F29 medium: Account and search fields disable or omit autofill metadata. |
be-trustworthysafe-commercial-and-account-flows | pass | high | The observed sign-up state identifies Terms & Conditions and the legally required age-verification destination is clearly disclosed before activation. |
be-sustainableoptimised-assets | issues | high | The home image audit found 96 legacy-format images, 60 missing srcset, and 90 missing dimensions; detail pages show the same pattern. F30 medium: The image pipeline is dominated by legacy, non-responsive assets. |
be-sustainableno-wasteful-work | issues | high | The HAR loads gtag, GTM, Google Analytics and Yandex, while Lighthouse estimates 235KiB unused JavaScript across these stacks. F31 medium: Multiple analytics stacks perform redundant background work. |
be-sustainablethird-party-and-media-budget | issues | high | GTM/gtag/Yandex/Google Analytics scripts account for roughly 400KB, while the full initial transfer is 872KB. F32 medium: Third-party telemetry consumes a disproportionate share of the initial budget. |
be-agent-readystructured-agent-capabilities | not-applicable | high | No declared agent-facing transaction or tool surface exists; this emerging capability is optional for the public catalog. |
be-agent-readyon-device-inference | not-applicable | high | No summarisation, generation, or other inference task is offered where an on-device model would improve the current experience. |
be-memory-efficientno-leak-under-repeated-interaction | pass | medium | After ten full-page scroll cycles, heap self-size increased only 236KB (1.92%) and node count 1.04%, which does not establish unbounded retained growth. |
be-memory-efficientbounded-footprint | pass | medium | Baseline heap self-size was 12.28MB for a dense 100-image server-rendered listing, proportionate to the page. |
be-memory-efficientno-detached-dom-or-unbounded-listeners | pass | medium | The repeated-scroll comparison remained bounded with only small node/heap deltas; no accumulating interaction failure was observed. |
Provenance
Canonical report: results/atomic/reports/0687-zbporn_tv.json
Report SHA-256: 63572f52cd04778b21e1ccb9c503787a7a48cb2c52525c28730cf90734b0b125
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/zbporn_tv/2026-07-22T10-10-23-487Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/zbporn_tv/2026-07-22T10-10-23-487Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7
Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.