Manifest position 780 · CrUX rank bucket 1000
https://www.hdtube.porn
Coverage complete
Coverage-complete audit of six representative public templates/journeys. Video playback, registration, age-provider completion, payment and authenticated account areas were not exercised to avoid external commitments or account creation.
All 58 atomic check outcomes
| Principle / check | Status | Confidence | Evidence or reason |
|---|---|---|---|
respect-user-preferencesrespects-color-scheme | issues | high | Light and dark screenshots are pixel-identical; the platform probe reports colorScheme "normal", and static CSS contains no color-scheme or prefers-color-scheme rule. F-01 medium: The site imposes one dark palette instead of following the user’s theme preference. |
respect-user-preferencesrespects-reduced-motion | issues | high | Under prefers-reduced-motion: reduce, computed transitions of 0.25s to 0.5s remain on menus, buttons and navigation; static CSS has no reduced-motion media query. F-02 low: Motion is not adapted for reduced-motion users. |
respect-user-preferencesrespects-contrast | issues | high | The increased-contrast screenshot is unchanged, static CSS has no prefers-contrast/forced-colors rule, and axe reports 3.74:1 and 3.95:1 text contrast failures. F-03 medium: The UI does not adapt to increased contrast and already contains low-contrast text. |
implement-natural-interactionsview-transitions | issues | high | The site is an MPA and production CSS contains no view-transition-name or @view-transition rule. F-04 low: Cross-document navigation changes abruptly. |
implement-natural-interactionsscroll-driven-animations | pass | high | No scroll-linked animation is implemented, so no main-thread scroll-handler animation anti-pattern was observed; trace recorded zero long tasks. |
implement-natural-interactionsphysical-gestures | not-applicable | high | No swipe, pull-to-reveal, carousel or other gesture-driven control appears on the representative surfaces; normal browser scrolling is the only physical interaction. |
provide-guided-navigationscroll-state-aware-chrome | issues | high | Homepage and category pages are over 4,000 CSS pixels tall, while the probe finds no fixed/sticky chrome and CSS contains no scroll-state or scroll-timeline rules. F-05 low: Long listings provide no scroll-state-aware navigation or progress affordance. |
provide-guided-navigationanchored-positioning | issues | high | The DOM exposes custom .dropdown__content/.cat-drop menus; static CSS has no anchor-name or position-anchor usage. F-06 low: Dropdown navigation is custom-positioned without anchor positioning. |
provide-guided-navigationdirects-attention | pass | high | Active HOME navigation is highlighted, search results retain query context, and detail pages use a clear H1 and prominent player. |
maximize-content-reduce-noiseno-intrusive-interruptions | pass | high | Age verification is an inline banner that does not obscure content; no full-viewport popup appears on load. |
maximize-content-reduce-noisesemantic-dismissible-primitives | issues | high | The platform probe finds zero dialog, popover or details elements while custom dropdown containers are present. F-07 low: Rich navigation uses ad-hoc dropdown containers rather than semantic platform primitives. |
maximize-content-reduce-noisereduced-chrome | pass | high | The main viewport is dominated by content cards/player; surrounding chrome is compact on desktop. |
adapt-to-the-form-factorresponsive-no-horizontal-scroll | issues | high | Layout metrics report scrollWidth 769px against a 360px visual viewport, a 409px overflow, on home, categories and detail pages; the mobile screenshot clips navigation, banner text and cards. F-08 critical: The desktop-width layout is forced into a 360px viewport. |
adapt-to-the-form-factorcomponent-level-responsiveness | issues | high | The production CSS and live computed-style probe find no container query containers or @container rules; reused cards remain in a clipped desktop grid on mobile. F-09 medium: Repeated card and navigation components do not adapt to their available container. |
adapt-to-the-form-factorinput-modality-aware | issues | high | The focus probe reports outline none on the language button, search input and search button, plus repeated visible focusable anchors sized 0x0. F-10 high: Keyboard focus is suppressed on key controls and several focusable links have zero-size hit areas. |
support-core-task-successclear-purpose-and-primary-action | pass | high | Home clearly exposes browsable videos/search and the detail page exposes a large play action under a descriptive H1. |
support-core-task-successprimary-flow-completion | pass | high | Homepage, category index, search results and a sitemap-selected detail page all load with direct links and the detail player affordance. |
support-core-task-successclear-system-state-and-recovery | issues | high | Blank login submission leaves the page visually unchanged, and an unknown route returns a bare nginx 404 with no home, search or retry link. F-11 high: Error and recovery states are missing or unhelpful. |
be-fast-and-stablegood-core-web-vitals | issues | high | Lighthouse reports LCP 2.9s (performance 0.93), although the unthrottled trace reports 1.13s and CLS 0; the slower representative condition does not meet the 2.5s good threshold. F-12 medium: Lab LCP is outside the good threshold under Lighthouse mobile conditions. |
be-fast-and-stablevisual-stability | pass | high | Layout observer and Lighthouse both report CLS 0; all 85 audited images have width and height attributes. |
be-fast-and-stableefficient-main-thread | pass | high | Trace reports zero long tasks and 0ms TBT; Lighthouse reports 10ms TBT. |
be-fast-and-stableefficient-resource-delivery | issues | high | HAR identifies two parser-inserted classic scripts without async/defer; GTM is the slowest request at 1.3s and the network includes six redirects. F-13 medium: Synchronous first-party scripts and tracking chains add avoidable delivery cost. |
be-fast-and-stabletrim-unused-and-duplicate-code | issues | high | Lighthouse estimates 240KiB unused JavaScript and 21KiB unused CSS; HAR attributes about 296KB to two GTM bundles alone. F-14 medium: The homepage ships substantial unused JavaScript and CSS. |
be-inclusivenames-roles-labels | issues | high | axe reports the search icon button has no discernible name; the login probe finds username/password controls without labels, and the image audit finds two missing alt attributes. F-15 high: Important controls and form fields lack accessible names or explicit labels. |
be-inclusivesufficient-contrast | issues | high | axe measures 3.74:1 for the age-verification subtext and 3.95:1 for “Top searches”, below 4.5:1. F-16 medium: Some secondary text fails WCAG AA contrast. |
be-inclusivestructure-and-focus | issues | high | The focus probe finds key controls with outline none and 75 visible links without text, including multiple zero-size focus targets. F-17 high: Focus visibility and focusable-element structure are unreliable. |
be-inclusivelegible-text | pass | high | Primary headings and card labels are readable and unclipped on desktop; the specific contrast exceptions are recorded separately. |
be-inclusivezoom-reflow-targets-and-media | issues | high | All three tested templates overflow by 409px at 360px. The detail probe finds no video/track element despite a visible player, so no caption equivalent is discoverable in the page DOM. F-18 critical: The experience fails narrow reflow and the custom media player exposes no caption track in the document. |
follow-best-practicesno-console-errors | pass | high | Lighthouse reports no browser errors logged to the console. |
follow-best-practicessound-document-and-assets | issues | high | The image audit finds 85/85 images in legacy formats, 64 without srcset and 30 rendered at less than half natural width; Lighthouse also reports 21KiB unused CSS. F-19 medium: Image delivery is dated and wasteful despite stable dimensions. |
follow-best-practicesbrowser-platform-hygiene | pass | high | Lighthouse reports no deprecated API use; geolocation and notifications remain in prompt state with no prompt observed on load. |
be-discoverabletitle-and-description | issues | high | The login probe returns an empty document.title and the page is visually an unstyled isolated form, while home/detail metadata is descriptive. F-20 high: The login archetype has no document title or meta description. |
be-discoverablecrawlable-and-mobile-friendly | pass | high | Homepage has viewport metadata, descriptive href links and valid robots.txt; Lighthouse SEO is 1.0. |
be-discoverablecanonical-and-indexing-signals | pass | high | Home and detail return usable content with canonical URLs; robots points to a current sitemap and Lighthouse validates canonical/hreflang. |
be-discoverablestructured-and-shareable-metadata | issues | high | The detail probe finds useful Open Graph video fields but zero JSON-LD blocks, so duration, thumbnail and content metadata are not exposed as schema.org VideoObject. F-21 medium: Video detail pages omit structured VideoObject metadata. |
be-private-and-securesecure-transport-and-headers | issues | high | Header inspection finds no CSP, HSTS or nosniff. Cookie inspection finds 11 cookies lacking Secure and PHPSESSID lacks HttpOnly while using SameSite=None. F-22 critical: Transport is HTTPS, but baseline security headers and cookie protections are missing. |
be-private-and-securedata-minimisation-and-third-parties | issues | high | Tracker evidence identifies Google Tag Manager, Google Analytics and Yandex across six non-page origins; HAR records 54 cross-origin requests and 990KB cross-origin transfer. F-23 high: Multiple analytics systems track users immediately, before age verification interaction. |
be-private-and-securein-context-permissions-and-modern-auth | issues | high | The login form exposes username/password controls with no autocomplete tokens; no WebAuthn/passkey surface is present. Permission states remain prompt, so no on-load browser permission prompt was observed. F-24 high: Authentication is password-only and lacks modern browser assistance. |
be-private-and-securedefensive-browser-policies | issues | high | Headers include X-Frame-Options SAMEORIGIN, but omit CSP/frame-ancestors, HSTS, Referrer-Policy and Permissions-Policy. F-25 high: Most browser-enforced defensive policies are absent. |
be-resilientprogressive-enhancement | pass | high | Discoverability reports HTTP 200, 100% content coverage, non-shell HTML and title/H1/description present without JavaScript. |
be-resilientresilient-runtime-behaviour | issues | high | At 360px, the custom desktop navigation extends beyond the viewport and the age banner text and card grid are clipped; the dropdown implementation has no anchor fallback. F-26 medium: Navigation and content are cut off under a common viewport condition. |
be-resilientoffline-and-installable | issues | high | The manifest has name/icons/display standalone but no start_url, and the service-worker probe finds zero registrations. F-27 low: The site declares standalone app display but is not installable/offline-capable as configured. |
be-resilientnetwork-and-http-failure-states | issues | high | A missing route renders only “404 Not Found nginx” and exposes no links, search, retry or route back. F-28 high: HTTP failure handling drops users into a server default with no recovery. |
be-internationalisedlang-dir-and-logical-properties | issues | high | The home document correctly declares lang=en and Lighthouse validates hreflang, but static CSS contains 209 physical left/right declarations and zero logical-property declarations. F-29 medium: Multilingual navigation exists, but the stylesheet is built entirely with physical direction properties. |
be-internationalisedlocale-aware-data | not-applicable | high | The representative public surfaces show no user-facing dates, currencies, durations or locale-sensitive numeric values requiring Intl formatting. |
be-internationalisedtime-zone-correctness | not-applicable | high | No events, schedules, stored times or cross-time-zone coordination appear in the audited public surfaces. |
be-trustworthyno-dark-patterns | issues | high | The prominent age banner says “we don’t store personal data”, while before any age action the page sets 11 cookies, including 400-day analytics cookies, and loads Google/Yandex tracking. F-30 high: Privacy messaging is not matched by the page’s immediate tracking behaviour. |
be-trustworthyhumane-error-handling | issues | high | Username/password inputs have no associated labels or required semantics; submitting both blank leaves the screenshot unchanged with no visible or announced error. F-31 high: The login form neither labels inputs nor explains invalid submission. |
be-trustworthytrustworthy-input-assistance | issues | high | The login probe reports empty autocomplete values for both username and password. F-32 medium: Sign-in fields opt out of browser autofill assistance by omission. |
be-trustworthysafe-commercial-and-account-flows | issues | high | The login screenshot shows failed/absent site styling, extreme gaps and no surrounding navigation; the form lacks autocomplete and any passkey option. F-33 medium: The account entry surface is visually broken and offers only password authentication. |
be-sustainableoptimised-assets | issues | high | Image evidence finds 85 legacy-format images, 64 missing srcset and 30 oversized relative to display. F-34 medium: Image assets are not delivered in efficient responsive formats. |
be-sustainableno-wasteful-work | issues | high | GTM and Yandex account for roughly 386KB of script transfer; six tracking origins run during initial load before interaction. F-35 medium: Background analytics work dominates script transfer without advancing the browsing task. |
be-sustainablethird-party-and-media-budget | issues | high | HAR records 990KB of 1.07MB as cross-origin and 54 of 57 requests cross-origin; tracker evidence finds Google and Yandex systems active. F-36 high: Third-party transfer is disproportionate on the media listing shell. |
be-agent-readystructured-agent-capabilities | not-applicable | high | The publisher explicitly blocks major AI crawlers in robots.txt and exposes no agent-facing workflow; structured WebMCP capability is therefore not an intended surface. |
be-agent-readyon-device-inference | not-applicable | high | No summarisation, language-model or other inference task is part of the core browse/watch journey, so on-device inference would add no demonstrated value. |
be-memory-efficientno-leak-under-repeated-interaction | pass | medium | Heap self size rises only 231,317 bytes (1.8%) and nodes 2,318 (1.0%) after ten real listing scroll cycles; no unbounded growth signal is visible. |
be-memory-efficientbounded-footprint | pass | medium | Baseline heap is 12.9MB across 229,922 nodes, proportionate for an image-heavy listing with analytics. |
be-memory-efficientno-detached-dom-or-unbounded-listeners | pass | medium | No Detached* constructor appears among dominant populations, and closure count changes only 11,183 to 11,205 after repeated scrolling. |
Provenance
Canonical report: results/atomic/reports/0780-www_hdtube_porn.json
Report SHA-256: 32ef4f345517a01ad00687d06c278c1ab01812778b43d8afca89900add7f637b
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/www_hdtube_porn/2026-07-23T00-05-32-445Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/www_hdtube_porn/2026-07-23T00-05-32-445Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7
Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.