Manifest position 975 · CrUX rank bucket 1000

https://arabxn.sex

Coverage complete

Atomic coverage complete. Six representative paths/templates were inspected; account, signup, payment, support modal and exhaustive pagination were not covered because they were absent from primary public navigation or outside the anonymous core journey.

Attempts

1 / 3

Judged checks

58 / 58

Blocked

Not run

This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.

All 58 atomic check outcomes

Principle / check	Status	Confidence	Evidence or reason
respect-user-preferences `respects-color-scheme`	issues	high	The dark-mode screenshot is identical to the default mobile screenshot; the CSS probe reports colorScheme="normal" and no prefers-color-scheme, light-dark(), or color-scheme signal. F01 medium: The dark palette is hard-coded rather than tied to the user’s color-scheme preference.
respect-user-preferences `respects-reduced-motion`	pass	high	No active animations were returned under prefers-reduced-motion: reduce; the interface is effectively motion-free.
respect-user-preferences `respects-contrast`	pass	high	The forced-colors/high-contrast screenshot preserves all visible controls, images and text with strong system colors.
implement-natural-interactions `view-transitions`	issues	high	CSS inspection across the homepage styles found no view-transition rules; navigation is a conventional MPA with no transition treatment. F02 low: Navigation swaps pages abruptly and does not use cross-document View Transitions.
implement-natural-interactions `scroll-driven-animations`	pass	high	The static catalogue has no scroll-linked parallax/reveal interaction, and CSS inspection found no scroll timelines to misuse.
implement-natural-interactions `physical-gestures`	pass	high	No custom swipe, drag, pull-to-refresh, or other gesture-driven UI is present; standard browser scrolling is retained.
provide-guided-navigation `scroll-state-aware-chrome`	pass	high	Header chrome scrolls away normally rather than remaining affixed or using JavaScript scroll toggles; no state-aware sticky chrome is needed on this short-control header.
provide-guided-navigation `anchored-positioning`	pass	high	No tooltip, popover, or edge-positioned menu was present on load across sampled templates, so no manually drifting overlay was observed.
provide-guided-navigation `directs-attention`	pass	high	Each sampled template presents a page heading and visually distinct cards; search and 404 states keep users oriented with clear state text.
maximize-content-reduce-noise `no-intrusive-interruptions`	pass	high	Desktop and mobile load screenshots show content immediately with no load-time modal, banner, or content-obscuring interstitial.
maximize-content-reduce-noise `semantic-dismissible-primitives`	pass	high	No overlay or disclosure was present in the sampled states; search and category controls use native form/button elements.
maximize-content-reduce-noise `reduced-chrome`	pass	high	The mobile viewport is dominated by the video cards or directory content; the header occupies about 140 px and contains only identity, search, and navigation.
adapt-to-the-form-factor `responsive-no-horizontal-scroll`	pass	high	At 360×800 the layout reports scrollWidth=clientWidth=360, horizontalOverflowPx=0, with a viewport meta present; screenshots show cards reflowing to one column.
adapt-to-the-form-factor `component-level-responsiveness`	issues	high	The CSS probe found no @container or container-type declarations although the same card/list components appear in main and sidebar contexts. F03 low: Reusable cards adapt only through global responsive CSS, not their containing space.
adapt-to-the-form-factor `input-modality-aware`	issues	high	A scripted focus walk over the first 20 controls reported outline styles such as “none 3px” and boxShadow="none" for every sampled link, input, and button. F04 high: Keyboard focus is not visibly indicated across primary navigation and search controls.
support-core-task-success `clear-purpose-and-primary-action`	pass	high	The Arabic title/headings and first-view video grid make the catalogue purpose and selectable video actions immediately apparent.
support-core-task-success `primary-flow-completion`	issues	medium	The CDP playback attempt clicked .fp-play and then failed with “Inspected target navigated or closed”; the network evidence includes a.pemsrv.com/popunder1000.js and s.pemsrv.com/venor.php. F05 high: Activating the primary Play control causes an unsolicited navigation/target replacement before playback can be verified.
support-core-task-success `clear-system-state-and-recovery`	pass	high	A zero-result search explicitly says no data is available, and the 404 page clearly labels the error while offering related videos.
be-fast-and-stable `good-core-web-vitals`	pass	high	Lighthouse measured LCP 2.1 s, CLS 0 and TBT 0 ms; trace measured LCP 1.92 s and TBT 8.65 ms, all in good lab ranges.
be-fast-and-stable `visual-stability`	pass	high	The mobile layout observer recorded CLS 0 with no shifts; all 24 images have explicit dimensions.
be-fast-and-stable `efficient-main-thread`	pass	high	Trace recorded one 58.65 ms task and only 8.65 ms total blocking time; Lighthouse TBT was 0 ms.
be-fast-and-stable `efficient-resource-delivery`	issues	high	Lighthouse estimates 370 ms render-blocking savings and 79 KiB cache-lifetime savings; the HAR confirms parser-inserted high-priority CSS and a classic main.min.js without async/defer/module. F06 medium: Render-blocking resources and short cache lifetimes add avoidable work to an otherwise fast page.
be-fast-and-stable `trim-unused-and-duplicate-code`	issues	high	Lighthouse reports about 41 KiB unused JavaScript, 16 KiB unused CSS, 4 KiB unminified CSS, and 9 KiB legacy JavaScript. F07 low: The page ships avoidable unused and legacy code.
be-inclusive `names-roles-labels`	issues	high	Lighthouse reports an unnamed navigation button and no main landmark; the DOM probe independently found one unnamed button, seven empty links, and zero main/[role=main] elements. F08 high: Primary navigation semantics are incomplete.
be-inclusive `sufficient-contrast`	issues	high	Lighthouse measured a 1.99:1 ratio for #3f3f3f text on #000000, below the required 4.5:1 for the 12–14 px metadata. F09 high: Muted counts and video metadata do not meet minimum text contrast.
be-inclusive `structure-and-focus`	issues	high	A scripted focus walk over the first 20 controls reported outline styles such as “none 3px” and boxShadow="none" for every sampled link, input, and button. Lighthouse reports an unnamed navigation button and no main landmark; the DOM probe independently found one unnamed button, seven empty links, and zero main/[role=main] elements. F04 high: Keyboard focus is not visibly indicated across primary navigation and search controls. F08 high: Primary navigation semantics are incomplete.
be-inclusive `legible-text`	pass	high	Primary titles and card labels remain readable without clipping on 360 px layouts; the specific low-contrast metadata is separately recorded under sufficient-contrast.
be-inclusive `zoom-reflow-targets-and-media`	issues	high	The live viewport meta is width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0; Lighthouse fails the user-scaling audit. F10 high: The viewport declaration prevents mobile users from zooming.
follow-best-practices `no-console-errors`	pass	high	Lighthouse’s errors-in-console audit passed with no logged browser errors.
follow-best-practices `sound-document-and-assets`	issues	high	All 24 audited images lack srcset; nine loaded images are JPEG, and Lighthouse flags 336×189 thumbnails rendered at 392×221 with a 588×332 density-adjusted target. F11 medium: Listing thumbnails are neither responsive nor consistently sharp at their rendered size.
follow-best-practices `browser-platform-hygiene`	issues	high	Lighthouse reports CacheControlNoStoreHTTPOnlyCookieModified as the actionable BFCache blocker. F12 low: The document cannot use the back/forward cache.
be-discoverable `title-and-description`	pass	high	Homepage, listing, category, search, video and error templates all expose descriptive titles and meta descriptions.
be-discoverable `crawlable-and-mobile-friendly`	issues	high	Lighthouse identifies the Support control as <a data-href="…/feedback/" data-fancybox="ajax"> without href; the DOM probe also found seven empty links. F13 low: At least one footer destination is JavaScript-only rather than a crawlable link.
be-discoverable `canonical-and-indexing-signals`	pass	high	Public templates return successfully with self-referencing canonicals; robots.txt allows public content and a sitemap index is present. The tested missing route returns HTTP 404.
be-discoverable `structured-and-shareable-metadata`	pass	high	The video detail includes VideoObject JSON-LD and matching Open Graph title/image/type; listing pages expose matching Open Graph metadata.
be-private-and-secure `secure-transport-and-headers`	issues	high	Headers evidence shows no CSP, HSTS, X-Content-Type-Options, Referrer-Policy, or Permissions-Policy. Cookies evidence shows PHPSESSID and kt_tcookie without Secure, and PHPSESSID without HttpOnly. F14 high: Transport and browser defenses are incomplete, and session-related cookies are not hardened.
be-private-and-secure `data-minimisation-and-third-parties`	issues	high	The HAR records 39,515 third-party bytes, including a.pemsrv.com/popunder1000.js; the runtime also loads Cloudflare Zaraz and s.pemsrv.com/venor.php, while no consent surface was observed. F15 high: Advertising/analytics code runs by default and includes a popunder vendor.
be-private-and-secure `in-context-permissions-and-modern-auth`	pass	high	Lighthouse confirms no geolocation or notification request on load; no authentication UI is exposed on the representative public routes.
be-private-and-secure `defensive-browser-policies`	issues	high	Headers evidence shows no CSP, HSTS, X-Content-Type-Options, Referrer-Policy, or Permissions-Policy. Cookies evidence shows PHPSESSID and kt_tcookie without Secure, and PHPSESSID without HttpOnly. F14 high: Transport and browser defenses are incomplete, and session-related cookies are not hardened.
be-resilient `progressive-enhancement`	pass	high	Discoverability found 100% raw/rendered content coverage, title/H1/description in server HTML, and no JavaScript shell.
be-resilient `resilient-runtime-behaviour`	issues	medium	The CDP playback attempt clicked .fp-play and then failed with “Inspected target navigated or closed”; the network evidence includes a.pemsrv.com/popunder1000.js and s.pemsrv.com/venor.php. F05 high: Activating the primary Play control causes an unsolicited navigation/target replacement before playback can be verified.
be-resilient `offline-and-installable`	not-applicable	high	This public video catalogue is a content MPA rather than an installable app; playback is intrinsically network-dependent, so PWA install/offline media support is not required.
be-resilient `network-and-http-failure-states`	pass	high	The custom 404 page clearly states the page is unavailable and offers related content; search has an explicit zero-results state rather than a blank shell.
be-internationalised `lang-dir-and-logical-properties`	issues	high	Every sampled route has <html lang="en"> with no dir despite Arabic content. The stylesheet probe found only 3 logical-property matches versus 178 physical left/right properties. F16 high: Arabic pages declare English and omit RTL direction, while CSS is dominated by physical properties.
be-internationalised `locale-aware-data`	pass	medium	Visible relative dates and counts are rendered in Arabic presentation on all listing templates; no currency or user-entered locale-sensitive data is present.
be-internationalised `time-zone-correctness`	not-applicable	high	The representative pages expose no events, appointments, user-entered times, or time-zone-sensitive scheduling concepts.
be-trustworthy `no-dark-patterns`	issues	medium	The CDP playback attempt clicked .fp-play and then failed with “Inspected target navigated or closed”; the network evidence includes a.pemsrv.com/popunder1000.js and s.pemsrv.com/venor.php. F05 high: Activating the primary Play control causes an unsolicited navigation/target replacement before playback can be verified.
be-trustworthy `humane-error-handling`	pass	high	The only public form is search; a valid zero-result query preserves the entered term and provides a clear empty-state message without blaming the user.
be-trustworthy `trustworthy-input-assistance`	not-applicable	high	The audited public routes contain only a search field, not address, payment, sign-in, or sign-up inputs where autocomplete tokens are relevant.
be-trustworthy `safe-commercial-and-account-flows`	not-applicable	high	No checkout, subscription, consent, authentication, or account-management flow was exposed on the representative public routes.
be-sustainable `optimised-assets`	issues	high	All 24 audited images lack srcset; nine loaded images are JPEG, and Lighthouse flags 336×189 thumbnails rendered at 392×221 with a 588×332 density-adjusted target. F11 medium: Listing thumbnails are neither responsive nor consistently sharp at their rendered size.
be-sustainable `no-wasteful-work`	issues	high	The HAR records 39,515 third-party bytes, including a.pemsrv.com/popunder1000.js; the runtime also loads Cloudflare Zaraz and s.pemsrv.com/venor.php, while no consent surface was observed. F15 high: Advertising/analytics code runs by default and includes a popunder vendor.
be-sustainable `third-party-and-media-budget`	issues	high	The HAR records 39,515 third-party bytes, including a.pemsrv.com/popunder1000.js; the runtime also loads Cloudflare Zaraz and s.pemsrv.com/venor.php, while no consent surface was observed. F15 high: Advertising/analytics code runs by default and includes a popunder vendor.
be-agent-ready `structured-agent-capabilities`	not-applicable	high	No declared agent-facing intent or transactional capability was observed; this emerging capability is optional for this media catalogue.
be-agent-ready `on-device-inference`	not-applicable	high	No user task on the representative routes requires on-device language-model or summarisation inference.
be-memory-efficient `no-leak-under-repeated-interaction`	pass	low	After 20 menu toggles, the post heap summary was smaller than baseline (35,418 vs 87,494 nodes; 1.22 MB vs 5.72 MB self size), so no retained-growth signal appeared, though third-party timing makes confidence low.
be-memory-efficient `bounded-footprint`	pass	low	Baseline heap totals were 87,494 nodes and 5.72 MB self size, proportionate for the rendered catalogue and third-party scripts.
be-memory-efficient `no-detached-dom-or-unbounded-listeners`	pass	low	Neither baseline nor post top-constructor summaries contain Detached* populations, and repeated menu toggling did not increase total nodes or heap size.

Provenance

Canonical report: results/atomic/reports/0975-arabxn_sex.json
Report SHA-256: caa89f76403a94274b441222bce12698a04e7f8846c5c9e06a92d0c2558c1914
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/arabxn_sex/2026-07-24T05-56-00-529Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/arabxn_sex/2026-07-24T05-56-00-529Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7

Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.