Performance

· 26 checks — Lighthouse + waterfall + sustainability rolled into one auditable list.

SCORE

GRADE

FIX

REVIEW

PASS

INFO

Performance-focused optimization plan with CWV assessment, top offenders, and time estimates

Mobile Desktop

Performance

100

Accessibility

Best Practices

100

SEO

First Contentful Paint First Contentful Paint — how long until the browser renders the first piece of content. Under 1.8s is good.

1.68 s

Largest Contentful Paint Largest Contentful Paint — how long until the largest visible element loads. Under 2.5s is good.

3.98 s

Total Blocking Time Total Blocking Time — total time the main thread was blocked, preventing user input. Under 200ms is good.

21 ms

Cumulative Layout Shift Cumulative Layout Shift — measures visual stability. How much the page layout shifts during loading. Under 0.1 is good.

0.142

Speed Index Speed Index — how quickly content is visually displayed during load. Under 3.4s is good.

22.51 s

Time to Interactive Time to Interactive — how long until the page is fully interactive and responds to user input. Under 3.8s is good.

3.99 s

Page Load Progression

5.3 s

10.5 s

15.8 s

21.1 s

26.4 s

31.6 s

36.9 s

42.2 s

Checks

22 PASS 1 FIX

JS Execution Cost

Action

3142ms total JS execution

FIX

3142ms total JS execution

https://nu11cyber.com/assets/index-D6pEq9F_.js: 1851ms CPU time

Unattributable: 533ms CPU time

https://nu11cyber.com/: 415ms CPU time

https://nu11cyber.com/assets/vendor-D3F3s8fL.js: 293ms CPU time

https://static.cloudflareinsights.com/beacon.min.j...: 51ms CPU time

Third-party scripts: 51ms (2% of total)

Main Thread Breakdown

Other 68% Script Evaluation 16% Style & Layout 11%

Script	Total	Scripting	Parse/Compile	Party
https://nu11cyber.com/assets/index-D6pEq9F_.js	1851ms	248ms	1ms	1st
Unattributable	533ms	66ms	0ms	1st
https://nu11cyber.com/	415ms	8ms	1ms	1st
https://nu11cyber.com/assets/vendor-D3F3s8fL.js	293ms	140ms	1ms	1st
https://static.cloudflareinsights.com/beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447	51ms	34ms	4ms	3rd

A+

Page Weight Budget

271 KB transferred, 26 requests

PASS

271 KB transferred, 26 requests

Page weighs 606 KB (271 KB transferred)

26 HTTP requests

Estimated 0.06 g CO2 per page load

271 KB transferred

26 requests

0.06 g CO2 per page load

JavaScript 86.8 KiB 32%

Images 56.0 KiB 21%

Other 52.3 KiB 19%

Fonts 48.4 KiB 18%

CSS 17.2 KiB 6%

HTML 5.4 KiB 2%

Other 2.2 KiB 1%

Other 1.6 KiB 1%

Other 784 B 0%

Other 636 B 0%

0 2.4 MB 4.9 MB

Under budget

A+

Third-Party Impact

7% third-party, 0 ms blocking

PASS

7% third-party, 0 ms blocking

Third-party code accounts for 7% of page weight (18.5 KiB of 271.2 KiB)

Third-party blocking time is low (0 ms)

93%

First-party Third-party

A+

Text Compression

All text resources are compressed

PASS

All text resources are compressed

All text resources are properly compressed.

Image Optimization

3 images, 0 KB saveable

PASS

3 images, 0 KB saveable

All images are well-optimized

3 images 7 KB

0 oversized -0 KB

2 legacy format

0 missing dimensions CLS risk

A+

Font Loading

1 fonts (48 KB)

PASS

1 fonts (48 KB)

1 font(s) use font-display: swap (FOUT risk but functional)

Web fonts

48 KB total

Render-blocking

of 1

Dominant font-display

swap

Most common across fonts

Font loading timeline

Transfer FOIT (block) FOUT (swap)

UcC73FwrK3iLTeHuS_nVMrM... woff2 swap

Size 48 KB

Load time 196 ms

Start 122 ms

Risk FOUT — text flashes from fallback to web font

Optimization checklist

Preload critical fonts (priority=high)
Use woff2 format for all fonts
Set font-display to swap, optional, or fallback
Subset large fonts (≤100 KB each)

A+

JS Bundles

6 scripts, 0 KB unused

PASS

6 scripts, 0 KB unused

0 KB unused JavaScript

Downloaded but never executed on this page.

Script	Size	Unused	Minified	Party
https://images.dmca.com/Badges/DMCABadgeHelper.min.js	0 KB	—	✓	3rd
https://nu11cyber.com/assets/index-D6pEq9F_.js	23 KB	—	✓	1st
https://nu11cyber.com/assets/vendor-D3F3s8fL.js	48 KB	—	✓	1st
https://nu11cyber.com/trusted-types.js	2 KB	—	✓	1st
https://static.cloudflareinsights.com/beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447	11 KB	—	✓	3rd
https://nu11cyber.com/assets/HomePage-Ko48XSAK.js	2 KB	—	✓	1st

A+

Resource Caching

All resources properly cached

PASS

All resources properly cached

No caching issues found

All static resources have appropriate caching headers.

A+

Critical Rendering Path

No render-blocking resources

PASS

No render-blocking resources

No render-blocking resources detected

Resource Hints

1 hints, 0 missing preconnects

PASS

1 hints, 0 missing preconnects

1 font preload(s) missing `crossorigin` -- font will be downloaded twice

Fonts are always fetched as crossorigin=anonymous; a preload without the attribute creates a different cache key, so the browser refetches when the actual font request happens. Sample: /fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2. Add `crossorigin` (or `crossorigin="anonymous"`) to each preload.

Page uses 1 resource hint(s)

Current Resource Hints

preconnect

—

preload

dns-prefetch

—

prefetch

—

1 resource hints configured

Why this matters

Performance issues directly impact user engagement and conversion rates.

A+

HTTP/3 (QUIC)

HTTP/3 advertised via Alt-Svc

PASS

HTTP/3 advertised via Alt-Svc

HTTP/3 (QUIC) is supported

First-load mobile users on cellular networks see meaningful latency improvements with HTTP/3. The QUIC transport collapses TLS + TCP handshakes into one and recovers faster from packet loss.

A+

Compression Algorithm

Main response uses brotli

PASS

Main response uses brotli

Main HTML response uses brotli (Content-Encoding: br)

Brotli is the best text-compression algorithm for general use, ~20% smaller than gzip on average (40% on smaller files). Modern browsers all support it.

A+

LCP Image Preload

LCP preload audit not available

PASS

LCP preload audit not available

LCP image preload audit not available for this scan

A+

Main HTML Cache-Control

Main HTML max-age=60 (≤ 5min) is appropriate

PASS

Main HTML max-age=60 (≤ 5min) is appropriate

Got: public, max-age=60, stale-while-revalidate=300

A+

Server-Timing Observability

3 Server-Timing entries advertised

PASS

3 Server-Timing entries advertised

Server-Timing header advertises 3 timing entries

A+

Server Response Intelligence

2 server-response signal(s) detected

PASS

2 server-response signal(s) detected

`Vary` header declared: Accept-Encoding

The page declares a `Vary` header, telling downstream caches which request headers the response varies on. Critical for content-negotiated responses (compression, language, cookies, device class).

`Last-Modified` present -- timestamp-based conditional GET supported

Consider also setting `ETag` for stronger revalidation -- ETags are content hashes that don't suffer from clock-skew or DST issues. Last-Modified alone is functional for conditional GETs and not a bug.

A+

Page Weight Inventory

26 resources · 271 KB · 0 KB savings available

PASS

26 resources · 271 KB · 0 KB savings available

Within 1MB page-weight target

Got: 271 KB

4 third-party resources (7% of weight)

26 resources · 271.2 KiB · 4 third-party Within 1MB page-weight target

Image 40% · 107.7 KiB

JavaScript 32% · 86.8 KiB

Font 18% · 48.4 KiB

CSS 6% · 17.2 KiB

Other 2% · 5.8 KiB

Document 2% · 5.4 KiB

#	Resource	Type	Size	Cache	Unused	3rd party	Issues

26 resources			271.2 KiB

A+

Render-Blocking Resources

No render-blocking resources detected

PASS

No render-blocking resources detected

No render-blocking resources detected in <head>

A+

Third-Party Resources

No third-party resources detected

PASS

No third-party resources detected

A+

JavaScript Blocking

No render-blocking JS or document.write usage detected

PASS

No render-blocking JS or document.write usage detected

No JavaScript blocking issues detected

A+

CSS Performance Depth

No CSS performance depth issues detected

PASS

No CSS performance depth issues detected

A+

Green Hosting

Whether the site is served from green-energy infrastructure

PASS

Green Hosting

This site is hosted on green energy infrastructure

Provider: Cloudflare

A+

HTTP Caching

max-age=60 (1 minute)

PASS

max-age=60 (1 minute)

Cache-Control header is set

Got: public, max-age=60, stale-while-revalidate=300

Effective TTL: 1 minute (max-age=60)

Last-Modified header present

Cache-Control

public, max-age=60, stale-while-revalidate=300

Directive	Value	Meaning
public	—	Any cache may store this response
max-age	60	Cache for 1 minute
stale-while-revalidate	300	Serve stale for 5 minutes while fetching fresh

Effective TTL: 60 seconds

Network Waterfall

26 requests over 39890ms

INFO

HTML JavaScript CSS Images Fonts XHR/Fetch Other

Third-Party Script Cost

Per-script blocking time, transfer cost, and cache headers

INFO

2% of JavaScript execution is third-party

First-party Third-party 51ms · 11KB · ¥6/mo

Script	Category	Execution	Transfer	Unused	Monthly Cost	Verdict
static.cloudflareinsights.com static.cloudflareinsights.com	Other	51ms	11 KB	—	¥6/mo	Optional

static.cloudflareinsights.com

Other

Optional

Execution 51ms

Transfer 11 KB

Monthly Cost ¥6/mo

How third-party costs are calculated

Image Optimization

4 images, 97 KB total, 0 KB wasted

INFO

Image Optimization Audit

Total Images

Total Size

97 KB

All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Browse & Analyze

Learn

Performance

Page Load Progression

Font loading timeline

Optimization checklist

Green Hosting

Image Optimization Audit