Manifest position 806 · CrUX rank bucket 1000

https://www.yahoo.co.jp

Coverage complete

Completed audit of the only surface available from this network location: Yahoo! JAPAN’s intentional EEA/UK HTTP 403 regional access notice. The Japanese homepage and its normal templates were not reachable, so conclusions apply to this notice, not the Japan-served portal.

Attempts

1 / 3

Judged checks

58 / 58

Blocked

Not run

This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.

All 58 atomic check outcomes

Principle / check	Status	Confidence	Evidence or reason
respect-user-preferences `respects-color-scheme`	issues	high	Under prefers-color-scheme: dark, the computed root background remained rgb(255,255,255), color-scheme remained normal, and the dark screenshot was pixel-equivalent in appearance to the light capture. F01 medium: The notice is hard-coded to a light theme and does not honor the user’s dark color-scheme preference.
respect-user-preferences `respects-reduced-motion`	pass	high	evaluate under prefers-reduced-motion: reduce found zero document animations.
respect-user-preferences `respects-contrast`	issues	high	The prefers-contrast: more probe matched the preference but returned the same #1a75ff/#1f78ff link colors; axe measured ratios of 4.17:1 and 4.04:1, below WCAG AA for normal text. F02 medium: The page does not adapt its controls or colors when the user requests more contrast.
implement-natural-interactions `view-transitions`	not-applicable	high	The served regional notice has no same-document state transition or multi-step route surface to animate.
implement-natural-interactions `scroll-driven-animations`	not-applicable	high	The notice has no parallax, reveal, scrollytelling, carousel, or other scroll-linked motion.
implement-natural-interactions `physical-gestures`	pass	high	The page relies on native document scrolling and ordinary links, with no custom pointer handlers that fight platform gestures.
provide-guided-navigation `scroll-state-aware-chrome`	not-applicable	high	There is no sticky or affixed application chrome whose state needs to react to scrolling.
provide-guided-navigation `anchored-positioning`	not-applicable	high	The page contains no tooltip, popover, menu, or anchored overlay.
provide-guided-navigation `directs-attention`	pass	high	Twenty descriptive links remain in DOM reading order and show native focus outlines when focused.
maximize-content-reduce-noise `no-intrusive-interruptions`	pass	high	Desktop and mobile first-load screenshots show the notice content directly with no overlay or interstitial.
maximize-content-reduce-noise `semantic-dismissible-primitives`	not-applicable	high	The page contains no overlays or rich controls requiring dialog, popover, details, or picker semantics.
maximize-content-reduce-noise `reduced-chrome`	pass	high	The screenshots show a compact header/footer and content-led cards with no obscuring application frame.
adapt-to-the-form-factor `responsive-no-horizontal-scroll`	pass	high	At 360x800 the layout reported scrollWidth 360, clientWidth 360, and zero horizontal overflow.
adapt-to-the-form-factor `component-level-responsiveness`	not-applicable	high	The static notice has no component reused in differently sized containers; mobile layout adaptation was judged at page level.
adapt-to-the-form-factor `input-modality-aware`	pass	high	All 20 links are keyboard-focusable in reading order and display a native auto outline; no hover-only controls exist.
support-core-task-success `clear-purpose-and-primary-action`	pass	high	The first viewport names the regional restriction and presents the notice immediately in Japanese and English.
support-core-task-success `primary-flow-completion`	pass	high	The static notice exposes direct, descriptive links to available services and help; all 20 anchors have real href values.
support-core-task-success `clear-system-state-and-recovery`	not-applicable	high	The served surface is a terminal availability notice rather than an asynchronous application state; its recovery guidance and links are directly visible.
be-fast-and-stable `good-core-web-vitals`	issues	high	The CDP trace measured FCP and LCP at 2768 ms. It found zero long tasks and zero TBT, indicating the delay is network/render-path rather than JavaScript execution. F03 medium: Largest Contentful Paint was slightly outside the good Core Web Vitals threshold.
be-fast-and-stable `visual-stability`	pass	high	The mobile layout observer measured CLS 0 with no recorded shifts.
be-fast-and-stable `efficient-main-thread`	pass	high	The trace found zero long tasks and 0 ms total blocking time; the page ships no scripts.
be-fast-and-stable `efficient-resource-delivery`	pass	high	HAR recorded only nine requests and 73,750 transferred bytes with no missing cache headers or redirects; five parser-inserted stylesheets are small but form the critical path.
be-fast-and-stable `trim-unused-and-duplicate-code`	pass	high	The page ships no JavaScript and only 26.6 KB of CSS across five stylesheets; no third-party executable code is present.
be-inclusive `names-roles-labels`	pass	high	axe reported no name/role/label or image-alt violation; the only image has meaningful alt text and there are no forms.
be-inclusive `sufficient-contrast`	issues	high	axe reported serious color-contrast violations across Japanese and English links: #1a75ff at 4.17:1 and #1f78ff at 4.04:1 versus the required 4.5:1 for normal text. F04 high: Primary and inline link colors do not meet WCAG AA contrast against white.
be-inclusive `structure-and-focus`	issues	high	The DOM probe found headings H3,H2,H2 and no H1; axe reported page-has-heading-one and landmark-contentinfo-is-top-level violations. Keyboard focus itself remained visible. F05 medium: The document has no H1, starts with H3 then H2, and nests the contentinfo footer inside main.
be-inclusive `legible-text`	pass	high	Desktop and mobile captures show unclipped, comfortably wrapped body text; mobile layout has no overflow.
be-inclusive `zoom-reflow-targets-and-media`	issues	high	The live meta viewport is width=device-width,user-scalable=no; axe classified this as a critical meta-viewport violation. Narrow viewport reflow itself had zero horizontal overflow. F06 high: The viewport configuration disables pinch zoom.
follow-best-practices `no-console-errors`	pass	high	The page contains zero script elements and no executable runtime; CDP probes completed without an uncaught page exception.
follow-best-practices `sound-document-and-assets`	issues	high	The images primitive found a 1933 px-wide PNG displayed at 170 px, with width but no height attribute and no srcset. Observed CLS was zero in this run, but the intrinsic-size and delivery hygiene remain weak. F07 low: The logo lacks an explicit height and is delivered vastly larger than its rendered size.
follow-best-practices `browser-platform-hygiene`	pass	high	The static, script-free page makes no permission requests, has no inputs that can block paste, and exposes no deprecated runtime API use.
be-discoverable `title-and-description`	issues	high	The rendered and raw HTML both preserve the title, while DOM and discoverability probes found no meta[name=description]. F08 medium: The notice has a descriptive title but no meta description.
be-discoverable `crawlable-and-mobile-friendly`	pass	high	All 20 links have real href values, viewport metadata exists, and raw HTML contains 100% of rendered content; the regional response is intentionally HTTP 403.
be-discoverable `canonical-and-indexing-signals`	pass	high	The served regional restriction consistently returns HTTP 403 for the document, robots, sitemap, and unknown paths; this is an intentional non-indexable access-denial surface rather than an accidental 200/noindex mismatch.
be-discoverable `structured-and-shareable-metadata`	not-applicable	high	This regional access notice is not an article, product, event, or other rich entity requiring schema.org structured data.
be-private-and-secure `secure-transport-and-headers`	issues	high	The headers primitive confirmed HTTPS and X-Frame-Options: SAMEORIGIN, but found no CSP, HSTS, X-Content-Type-Options, Referrer-Policy, or Permissions-Policy. F09 high: The 403 notice response omits several baseline browser security headers.
be-private-and-secure `data-minimisation-and-third-parties`	pass	high	No cookies, known trackers, scripts, analytics beacons, or exposed secrets were found; the sole asset origin is s.yimg.jp.
be-private-and-secure `in-context-permissions-and-modern-auth`	not-applicable	high	The notice requests no permissions and exposes no authentication flow.
be-private-and-secure `defensive-browser-policies`	issues	high	X-Frame-Options protects against framing, but the response has no frame-ancestors CSP, Referrer-Policy, Permissions-Policy, HSTS, or CSP-based XSS defense. F10 medium: Defense-in-depth policies are incomplete despite clickjacking protection being present.
be-resilient `progressive-enhancement`	pass	high	Raw HTML contains 100% of rendered content, is not a JS shell, and browser/crawler screenshots both contain the notice.
be-resilient `resilient-runtime-behaviour`	pass	high	The page is script-free with no overlays or async dependencies; its static runtime has no fragile state to sequence.
be-resilient `offline-and-installable`	not-applicable	high	This static regional notice is not an app-like experience and does not need installation or offline app behavior.
be-resilient `network-and-http-failure-states`	pass	high	The 403 state is an intentional, fully rendered bilingual explanation with help and alternative-service links rather than a blank shell or infinite spinner.
be-internationalised `lang-dir-and-logical-properties`	issues	high	The DOM returned an empty html.lang and axe reported a serious html-has-lang violation. The page contains both Japanese and English sections but does not mark the English section with lang="en". F11 high: The bilingual Japanese/English document has no document language declaration.
be-internationalised `locale-aware-data`	not-applicable	high	Dates occur as authored prose in separately written Japanese and English notices; there is no dynamic locale-sensitive data formatting.
be-internationalised `time-zone-correctness`	not-applicable	high	The notice contains no time-of-day, recurring event, scheduling, or time-zone-sensitive interaction.
be-trustworthy `no-dark-patterns`	pass	high	The notice states the restriction directly, presents available alternatives, and contains no ads, consent wall, upsell, forced continuity, or hidden cancellation.
be-trustworthy `humane-error-handling`	not-applicable	high	There are no forms or user-entered values to validate.
be-trustworthy `trustworthy-input-assistance`	not-applicable	high	There are no input fields requiring autocomplete or autofill assistance.
be-trustworthy `safe-commercial-and-account-flows`	not-applicable	high	There is no checkout, subscription, consent, authentication, or account-management flow on the notice.
be-sustainable `optimised-assets`	issues	high	The image is naturally 1933 px wide but displayed at 170 px, has no srcset, and transfers 13 KB as PNG; the entire page transfers 73.8 KB. F12 low: The only content image is oversized and uses a legacy PNG without responsive selection.
be-sustainable `no-wasteful-work`	pass	high	There is no JavaScript, media, background processing, analytics, or repeated fetch activity; only nine load requests were observed.
be-sustainable `third-party-and-media-budget`	pass	high	Total transfer was 73.8 KB, with no video/audio/autoplay, trackers, or executable third-party script; the sole asset host serves static Yahoo assets.
be-agent-ready `structured-agent-capabilities`	not-applicable	high	This static regional notice offers no transactional capability for an agent to invoke; its content is already present in raw HTML.
be-agent-ready `on-device-inference`	not-applicable	high	Summarisation or local inference would add no proportionate value to this short static availability notice.
be-memory-efficient `no-leak-under-repeated-interaction`	not-applicable	high	The static page has no representative repeatable interaction and ships no JavaScript, so a synthetic repetition test would not be meaningful.
be-memory-efficient `bounded-footprint`	pass	high	The baseline heap summary was proportionate for the static page: 1.92 MB self size, while Performance.memory reported about 0.96 MB used JS heap and the DOM had 99 elements.
be-memory-efficient `no-detached-dom-or-unbounded-listeners`	pass	high	The heap summary contained no Detached constructor population, and the page ships no scripts, timers, observers, or listener-producing application runtime.

Provenance

Canonical report: results/atomic/reports/0806-www_yahoo_co_jp.json
Report SHA-256: 78104a627aa30bf5ca879a034f35bfacc889d3b83a3b9260d85827e8a5a491dc
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/www_yahoo_co_jp/2026-07-23T03-44-22-798Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/www_yahoo_co_jp/2026-07-23T03-44-22-798Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7

Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.