Intentional for dynamic content, but increases server load for every page view.
Got: private, no-cache, no-store, must-revalidate
Info::
i
No ETag or Last-Modified header
Conditional requests (304 Not Modified) are not possible without validators.
Cache-Control
private, no-cache, no-store, must-revalidate
Directive
Value
Meaning
private
—
Only browser cache, not CDN/proxy
no-cache
—
Cache but always revalidate first
no-store
—
Never cache this response
must-revalidate
—
Must recheck with server after expiry
B
Server-Timing Observability
No Server-Timing header found
REVIEW
No Server-Timing header found
Info::
i
No Server-Timing header found
Server-Timing exposes backend timing breakdowns to browser DevTools (e.g., `db: 45ms; render: 120ms; cache: 2ms`). Useful for diagnosing slow pages without backend log access. Most modern frameworks (Next.js, Cloudflare Workers, Fastly) emit it automatically; absence on a managed platform usually means telemetry headers are stripped at the edge.
C
Green Hosting
Action
Whether the site is served from green-energy infrastructure
REVIEW
Green Hosting
No green hosting detected
A+
Text Compression
All text resources are compressed
PASS
All text resources are compressed
Info::
✓
All text resources are compressed
All text resources are properly compressed.
A+
Image Optimization
1 images, 0 KB saveable
PASS
1 images, 0 KB saveable
Info::
✓
All images are well-optimized
1images0 KB
0oversized-0 KB
0legacy format
0missing dimensionsCLS risk
A+
Font Loading
1 fonts (205 KB)
PASS
1 fonts (205 KB)
Info::
i
1 font(s) use font-display: swap (FOUT risk but functional)
Web fonts
1
205 KB total
Render-blocking
0
of 1
Dominant font-display
swap
Most common across fonts
Font loading timeline
TransferFOIT (block)FOUT (swap)
s3KknyKHL5v.woff2woff2swap
Size205 KB
Load time23 ms
Start631 ms
RiskFOUT — text flashes from fallback to web font
Subset this font — over 100 KB suggests Latin Extended or full glyph coverage that most pages don't need
Optimization checklist
Preload critical fonts (priority=high)
Use woff2 format for all fonts
Set font-display to swap, optional, or fallback
Subset large fonts (≤100 KB each)
Fixing the unchecked items could save ~102 KB and ~204 ms
A+
Resource Caching
All resources properly cached
PASS
All resources properly cached
Info::
✓
No caching issues found
All static resources have appropriate caching headers.
A+
Critical Rendering Path
No render-blocking resources
PASS
No render-blocking resources
Info::
✓
No render-blocking resources detected
A+
Resource Hints
No optimization needed
PASS
No optimization needed
Info::
✓
No resource hint issues
A+
HTTP/3 (QUIC)
HTTP/3 advertised via Alt-Svc
PASS
HTTP/3 advertised via Alt-Svc
Info::
✓
HTTP/3 (QUIC) is supported
First-load mobile users on cellular networks see meaningful latency improvements with HTTP/3. The QUIC transport collapses TLS + TCP handshakes into one and recovers faster from packet loss.
A+
Document Compression
Document response uses brotli
PASS
Document response uses brotli
Info::
✓
Main HTML response uses brotli (Content-Encoding: br)
Brotli is the best text-compression algorithm for general use, ~20% smaller than gzip on average (40% on smaller files). Modern browsers all support it.
A+
Asset Compression
All 1 asset host use brotli
PASS
All 1 asset host use brotli
Info::
✓
static.whatsapp.net serves assets with brotli (assets: 13)
Got: static.whatsapp.net (text/css)
A+
LCP Image Preload
LCP preload audit not available
PASS
LCP preload audit not available
Info::
✓
LCP image preload audit not available for this scan
A+
Main HTML Cache-Control
Main HTML uses no-store -- correct for sensitive/dynamic content
PASS
Main HTML uses no-store -- correct for sensitive/dynamic content
Info::
✓
Main HTML uses no-store -- correct for sensitive/dynamic content
The page declares a `Vary` header, telling downstream caches which request headers the response varies on. Critical for content-negotiated responses (compression, language, cookies, device class).
Info::
i
No `ETag` or `Last-Modified` -- conditional GET not supported
Without either header, browsers can't issue conditional GETs and refresh always re-downloads the full response body even when nothing changed. Add `ETag: "<hash>"` (or `Last-Modified: <date>`) on cacheable responses; the server returns 304 Not Modified when the client's cached copy is still valid, saving bandwidth.
Network Waterfall
43 requests over 2280ms
INFO
HTML JavaScript CSS Images Fonts XHR/Fetch Other
Third-Party Script Cost
Per-script blocking time, transfer cost, and cache headers
INFO
80%of JavaScript execution is third-party
First-party Third-party1744ms · 3920KB · $23/mo
Script
Category
Execution
Transfer
Unused
Monthly Cost
Verdict
static.whatsapp.net
static.whatsapp.net
Other
799ms
77 KB
45%
$11/mo
Costly
static.whatsapp.net
static.whatsapp.net
Other
546ms
835 KB
70%
$7/mo
Costly
static.whatsapp.net
static.whatsapp.net
Other
155ms
1362 KB
90%
$2/mo
Optional
static.whatsapp.net
static.whatsapp.net
Other
131ms
731 KB
89%
$2/mo
Optional
static.whatsapp.net
static.whatsapp.net
Other
59ms
405 KB
89%
$1/mo
Optional
static.whatsapp.net
static.whatsapp.net
Other
54ms
510 KB
76%
$1/mo
Optional
static.whatsapp.net
Other
Costly
Execution799ms
Transfer77 KB
Unused45%
Monthly Cost$11/mo
static.whatsapp.net
Other
Costly
Execution546ms
Transfer835 KB
Unused70%
Monthly Cost$7/mo
static.whatsapp.net
Other
Optional
Execution155ms
Transfer1362 KB
Unused90%
Monthly Cost$2/mo
static.whatsapp.net
Other
Optional
Execution131ms
Transfer731 KB
Unused89%
Monthly Cost$2/mo
static.whatsapp.net
Other
Optional
Execution59ms
Transfer405 KB
Unused89%
Monthly Cost$1/mo
static.whatsapp.net
Other
Optional
Execution54ms
Transfer510 KB
Unused76%
Monthly Cost$1/mo
These scripts may cost more than they're worth
static.whatsapp.net adds 799ms and costs ~$11/month
static.whatsapp.net adds 546ms and costs ~$7/month
80% of JavaScript execution time is spent on third-party scripts. Consider auditing which scripts are essential.
Why this matters
When third-party JS execution time exceeds your own, performance gains from frontend work are capped by code you don't own.
Learn more ▾▴
Every millisecond of third-party JS competes with your own for main-thread time. If their share is bigger than yours, optimization on your code base barely moves the needle. Audit, defer, or remove third-parties before further frontend optimization. Use Lighthouse's third-party audit to identify the worst offenders.
Source: web.dev
static.whatsapp.net takes 799ms of CPU time. Consider loading it asynchronously or replacing it with a lighter alternative.
Why this matters
This script has high main-thread execution time — optimize hot paths or defer.
Source: web.dev
static.whatsapp.net takes 546ms of CPU time. Consider loading it asynchronously or replacing it with a lighter alternative.
Why this matters
This script has high main-thread execution time — optimize hot paths or defer.
Source: web.dev
70% of static.whatsapp.net's code is unused. The script may be loading features you don't use.
Why this matters
Bundle has high unused-code ratio — tree-shaking and route-splitting recover the wasted bytes.
Source: web.dev
90% of static.whatsapp.net's code is unused. The script may be loading features you don't use.
Why this matters
Bundle has high unused-code ratio — tree-shaking and route-splitting recover the wasted bytes.
Source: web.dev
89% of static.whatsapp.net's code is unused. The script may be loading features you don't use.
Why this matters
Bundle has high unused-code ratio — tree-shaking and route-splitting recover the wasted bytes.
Source: web.dev
89% of static.whatsapp.net's code is unused. The script may be loading features you don't use.
Why this matters
Bundle has high unused-code ratio — tree-shaking and route-splitting recover the wasted bytes.
Source: web.dev
76% of static.whatsapp.net's code is unused. The script may be loading features you don't use.
Why this matters
Bundle has high unused-code ratio — tree-shaking and route-splitting recover the wasted bytes.