Performance

· 25 checks — Lighthouse + waterfall + sustainability rolled into one auditable list.

SCORE

GRADE

FIX

REVIEW

PASS

INFO

Performance-focused optimization plan with CWV assessment, top offenders, and time estimates

Mobile Desktop

Performance

100

Accessibility

Best Practices

100

SEO

First Contentful Paint First Contentful Paint — how long until the browser renders the first piece of content. Under 1.8s is good.

1.44 s

Largest Contentful Paint Largest Contentful Paint — how long until the largest visible element loads. Under 2.5s is good.

3.01 s

Total Blocking Time Total Blocking Time — total time the main thread was blocked, preventing user input. Under 200ms is good.

31 ms

Cumulative Layout Shift Cumulative Layout Shift — measures visual stability. How much the page layout shifts during loading. Under 0.1 is good.

0.142

Speed Index Speed Index — how quickly content is visually displayed during load. Under 3.4s is good.

3.17 s

Time to Interactive Time to Interactive — how long until the page is fully interactive and responds to user input. Under 3.8s is good.

3.08 s

Page Load Progression

749 ms

1.5 s

2.2 s

3.0 s

3.7 s

4.5 s

5.2 s

6.0 s

Checks

21 PASS 1 REVIEW 1 FIX

JS Execution Cost

Action

4765ms total JS execution

FIX

4765ms total JS execution

https://nu11cyber.com/assets/index-C-6R4z5q.js: 3312ms CPU time

https://nu11cyber.com/: 566ms CPU time

Unattributable: 427ms CPU time

https://nu11cyber.com/assets/vendor-BdZgHC1P.js: 231ms CPU time

https://nu11cyber.com/cdn-cgi/challenge-platform/s...: 229ms CPU time

Main Thread Breakdown

Other 69% Script Evaluation 16% Style & Layout 11%

Script	Total	Scripting	Parse/Compile	Party
https://nu11cyber.com/assets/index-C-6R4z5q.js	3312ms	361ms	0ms	1st
https://nu11cyber.com/	566ms	38ms	2ms	1st
Unattributable	427ms	41ms	0ms	1st
https://nu11cyber.com/assets/vendor-BdZgHC1P.js	231ms	90ms	0ms	1st
https://nu11cyber.com/cdn-cgi/challenge-platform/scripts/jsd/main.js	229ms	215ms	2ms	1st

HTTP Caching

public, max-age=0, must-revalidate

REVIEW

public, max-age=0, must-revalidate

Cache-Control header is set

Got: public, max-age=0, must-revalidate

No ETag or Last-Modified header

Conditional requests (304 Not Modified) are not possible without validators.

Cache-Control

public, max-age=0, must-revalidate

Directive	Value	Meaning
public	—	Any cache may store this response
max-age	0	Cache for 0 seconds
must-revalidate	—	Must recheck with server after expiry

A+

Page Weight Budget

289 KB transferred, 27 requests

PASS

289 KB transferred, 27 requests

Page weighs 602 KB (289 KB transferred)

27 HTTP requests

Estimated 0.06 g CO2 per page load

289 KB transferred

27 requests

0.06 g CO2 per page load

JavaScript 100.5 KiB 35%

Images 56.7 KiB 20%

Other 54.3 KiB 19%

Fonts 47.5 KiB 16%

CSS 14.9 KiB 5%

Other 7.5 KiB 3%

HTML 5.1 KiB 2%

Other 1.4 KiB 0%

Other 1.1 KiB 0%

0 2.4 MB 4.9 MB

Under budget

A+

Third-Party Impact

6% third-party, 0 ms blocking

PASS

6% third-party, 0 ms blocking

Third-party code accounts for 6% of page weight (18.5 KiB of 289.1 KiB)

Third-party blocking time is low (0 ms)

94%

First-party Third-party

A+

Text Compression

All text resources are compressed

PASS

All text resources are compressed

All text resources are properly compressed.

Image Optimization

3 images, 0 KB saveable

PASS

3 images, 0 KB saveable

All images are well-optimized

3 images 57 KB

0 oversized -0 KB

3 legacy format

0 missing dimensions CLS risk

A+

Font Loading

1 fonts (47 KB)

PASS

1 fonts (47 KB)

1 font(s) use font-display: swap (FOUT risk but functional)

Web fonts

47 KB total

Render-blocking

of 1

Dominant font-display

swap

Most common across fonts

Font loading timeline

Transfer FOIT (block) FOUT (swap)

UcC73FwrK3iLTeHuS_nVMrM... woff2 swap

Size 47 KB

Load time 1.1 s

Start 315 ms

Risk FOUT — text flashes from fallback to web font

Optimization checklist

Preload critical fonts (priority=high)
Use woff2 format for all fonts
Set font-display to swap, optional, or fallback
Subset large fonts (≤100 KB each)

A+

JS Bundles

5 scripts, 20 KB unused

PASS

5 scripts, 20 KB unused

https://nu11cyber.com/assets/index-C-6R4z5q.js: 20 KB unused (70%)

Consider code splitting or tree shaking to reduce unused code.

Total unused JavaScript: 20 KB

20 KB unused JavaScript

Downloaded but never executed on this page.

Script	Size	Unused	Minified	Party
https://nu11cyber.com/assets/index-C-6R4z5q.js	31 KB	20 KB (70%)	✓	1st
https://images.dmca.com/Badges/DMCABadgeHelper.min.js	0 KB	—	✓	3rd
https://nu11cyber.com/assets/vendor-BdZgHC1P.js	47 KB	—	✓	1st
https://static.cloudflareinsights.com/beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447	11 KB	—	✓	3rd
https://nu11cyber.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/1eec422858ff/main.js?	11 KB	—	✓	1st

Consider code splitting or tree shaking to reduce unused code.

Why this matters

This bundle has high unused code — code-split or tree-shake to ship only what executes.

Source: web.dev / Lighthouse coverage

A+

Resource Caching

All resources properly cached

PASS

All resources properly cached

No caching issues found

All static resources have appropriate caching headers.

A+

Critical Rendering Path

No render-blocking resources

PASS

No render-blocking resources

No render-blocking resources detected

Resource Hints

1 hints, 0 missing preconnects

PASS

1 hints, 0 missing preconnects

1 font preload(s) missing `crossorigin` -- font will be downloaded twice

Fonts are always fetched as crossorigin=anonymous; a preload without the attribute creates a different cache key, so the browser refetches when the actual font request happens. Sample: /fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2. Add `crossorigin` (or `crossorigin="anonymous"`) to each preload.

Page uses 1 resource hint(s)

Current Resource Hints

preconnect

—

preload

dns-prefetch

—

prefetch

—

1 resource hints configured

Why this matters

Performance issues directly impact user engagement and conversion rates.

A+

HTTP/3 (QUIC)

HTTP/3 advertised via Alt-Svc

PASS

HTTP/3 advertised via Alt-Svc

HTTP/3 (QUIC) is supported

First-load mobile users on cellular networks see meaningful latency improvements with HTTP/3. The QUIC transport collapses TLS + TCP handshakes into one and recovers faster from packet loss.

A+

Compression Algorithm

Main response uses brotli

PASS

Main response uses brotli

Main HTML response uses brotli (Content-Encoding: br)

Brotli is the best text-compression algorithm for general use, ~20% smaller than gzip on average (40% on smaller files). Modern browsers all support it.

A+

LCP Image Preload

LCP preload audit not available

PASS

LCP preload audit not available

LCP image preload audit not available for this scan

A+

Main HTML Cache-Control

Main HTML max-age=0 (≤ 5min) is appropriate

PASS

Main HTML max-age=0 (≤ 5min) is appropriate

Got: public, max-age=0, must-revalidate

A+

Server-Timing Observability

3 Server-Timing entries advertised

PASS

3 Server-Timing entries advertised

Server-Timing header advertises 3 timing entries

A+

Server Response Intelligence

2 server-response signal(s) detected

PASS

2 server-response signal(s) detected

`Vary` header declared: Accept-Encoding

The page declares a `Vary` header, telling downstream caches which request headers the response varies on. Critical for content-negotiated responses (compression, language, cookies, device class).

No `ETag` or `Last-Modified` -- conditional GET not supported

Without either header, browsers can't issue conditional GETs and refresh always re-downloads the full response body even when nothing changed. Add `ETag: "<hash>"` (or `Last-Modified: <date>`) on cacheable responses; the server returns 304 Not Modified when the client's cached copy is still valid, saving bandwidth.

A+

Page Weight Inventory

27 resources · 289 KB · 20 KB savings available

PASS

27 resources · 289 KB · 20 KB savings available

Within 1MB page-weight target

Got: 289 KB

4 third-party resources (6% of weight)

27 resources · 289.1 KiB · 4 third-party Within 1MB page-weight target

Image 38% · 110.3 KiB

JavaScript 35% · 100.5 KiB

Font 16% · 47.5 KiB

CSS 5% · 14.9 KiB

Other 4% · 10.8 KiB

Document 2% · 5.1 KiB

~20.1 KiB of savings available

Remove unused JavaScript: 20.1 KiB

#	Resource	Type	Size	Cache	Unused	3rd party	Issues

27 resources			289.1 KiB

A+

Render-Blocking Resources

No render-blocking resources detected

PASS

No render-blocking resources detected

No render-blocking resources detected in <head>

A+

Third-Party Resources

No third-party resources detected

PASS

No third-party resources detected

JavaScript Blocking

1 JS blocking issue(s) detected

PASS

1 JS blocking issue(s) detected

Total JS execution time is 4.8 s -- over the 3.5s budget

Total JavaScript execution (parse + compile + run) across all scripts exceeds 3.5 seconds. On low-end devices that becomes 7-15+ seconds and shows up directly in TBT and INP. Reduce by: tree-shaking unused dependencies, code-splitting (dynamic `import()`), removing or deferring third-party tracking, and replacing heavy frameworks where they're not needed.

A+

CSS Performance Depth

No CSS performance depth issues detected

PASS

No CSS performance depth issues detected

A+

Green Hosting

Whether the site is served from green-energy infrastructure

PASS

Green Hosting

This site is hosted on green energy infrastructure

Provider: Cloudflare

Network Waterfall

27 requests over 3679ms

INFO

HTML JavaScript CSS Images Fonts XHR/Fetch Other

Image Optimization

4 images, 97 KB total, 0 KB wasted

INFO

Image Optimization Audit

Total Images

Total Size

97 KB

All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Browse & Analyze

Learn

Performance

Page Load Progression

Font loading timeline

Optimization checklist

Green Hosting

Image Optimization Audit