Consider code splitting or tree shaking to reduce unused code.
Why this matters
This bundle has high unused code — code-split or tree-shake to ship only what executes.
Source: web.dev / Lighthouse coverage
Consider code splitting or tree shaking to reduce unused code.
Why this matters
This bundle has high unused code — code-split or tree-shake to ship only what executes.
Source: web.dev / Lighthouse coverage
Consider code splitting or tree shaking to reduce unused code.
Why this matters
This bundle has high unused code — code-split or tree-shake to ship only what executes.
Source: web.dev / Lighthouse coverage
C
Asset Compression
Action
1 of 2 asset hosts serve text uncompressed
REVIEW
1 of 2 asset hosts serve text uncompressed
Info::
i
cdn.trustindex.io serves assets with gzip; brotli would be ~20% smaller (assets: 55)
Every current browser accepts brotli. On a CDN this is a per-pull-zone toggle (Cloudflare, Fastly, CloudFront, CDN77, Bunny all expose it); on an origin it needs the brotli module (nginx-brotli, Apache mod_brotli). The saving lands on the assets this host serves, not on the HTML document -- the document's own encoding is reported separately.
Got: cdn.trustindex.io (text/javascript)
Warning::
!
fonts.googleapis.com serves text assets uncompressed (assets: 4)
The sampled response carries a text content type but no Content-Encoding, so the bytes go over the wire raw. Text compression typically removes 70-80% of a JS or CSS payload -- this is the single cheapest transfer win available on this host.
Got: fonts.googleapis.com (text/css)
B
Main HTML Cache-Control
No Cache-Control header on main HTML response
REVIEW
No Cache-Control header on main HTML response
Info::
i
Main HTML response has no Cache-Control header
Without an explicit Cache-Control, browsers fall back to heuristic caching (~10% of Last-Modified age). Set `Cache-Control: no-cache` or `max-age=300` for HTML to control freshness explicitly -- prevents stale auth state and SPA shell drift.
B
Server-Timing Observability
No Server-Timing header found
REVIEW
No Server-Timing header found
Info::
i
No Server-Timing header found
Server-Timing exposes backend timing breakdowns to browser DevTools (e.g., `db: 45ms; render: 120ms; cache: 2ms`). Useful for diagnosing slow pages without backend log access. Most modern frameworks (Next.js, Cloudflare Workers, Fastly) emit it automatically; absence on a managed platform usually means telemetry headers are stripped at the edge.
3 render-blocking <script src> tag(s) without async/defer
Each `<script src=...>` without `async`, `defer`, or `type="module"` blocks HTML parsing while the browser fetches and executes it. The block lasts the entire round-trip + execution time -- on slow networks this translates directly into LCP delay. Add `defer` (executes after parse, in source order) for scripts that interact with the DOM, or `async` (executes whenever ready) for analytics / independent scripts. Module scripts (`type="module"`) are deferred by default.
Warning::
!
Total JS execution time is 5.8 s -- over the 3.5s budget
Total JavaScript execution (parse + compile + run) across all scripts exceeds 3.5 seconds. On low-end devices that becomes 7-15+ seconds and shows up directly in TBT and INP. Reduce by: tree-shaking unused dependencies, code-splitting (dynamic `import()`), removing or deferring third-party tracking, and replacing heavy frameworks where they're not needed.
A+
Text Compression
All text resources are compressed
PASS
All text resources are compressed
Info::
✓
All text resources are compressed
All text resources are properly compressed.
A+
Font Loading
11 fonts (327 KB)
PASS
11 fonts (327 KB)
Info::
i
11 font(s) use font-display: swap (FOUT risk but functional)
Web fonts
11
327 KB total
Render-blocking
0
of 11
Dominant font-display
swap
Most common across fonts
Font loading timeline
TransferFOIT (block)FOUT (swap)
modules.woffwoffswap
Size90 KB
Load time49 ms
Start19.0 s
RiskFOUT — text flashes from fallback to web font
Convert to woff2 for ~30% smaller file size
pxiByp8kv8JHgFVrLCz7Z1x...woff2swap
Size8 KB
Load time40 ms
Start19.0 s
RiskFOUT — text flashes from fallback to web font
k3kPo8UDI-1M0wlSV9XAw6l...woff2swap
Size34 KB
Load time111 ms
Start19.0 s
RiskFOUT — text flashes from fallback to web font
pxiByp8kv8JHgFVrLGT9Z1x...woff2swap
Size8 KB
Load time44 ms
Start19.0 s
RiskFOUT — text flashes from fallback to web font
memvYaGs126MiZpBA-UvWbX...woff2swap
Size42 KB
Load time113 ms
Start19.0 s
RiskFOUT — text flashes from fallback to web font
KFO7CnqEu92Fr1ME7kSn66a...woff2swap
Size37 KB
Load time118 ms
Start19.0 s
RiskFOUT — text flashes from fallback to web font
latin-600.woff2woff2swap
Size8 KB
Load time22 ms
Start19.0 s
RiskFOUT — text flashes from fallback to web font
latin.woff2woff2swap
Size8 KB
Load time23 ms
Start19.0 s
RiskFOUT — text flashes from fallback to web font
pxiByp8kv8JHgFVrLEj6Z1x...woff2swap
Size8 KB
Load time75 ms
Start19.0 s
RiskFOUT — text flashes from fallback to web font
fa-brands-400.woff2woff2swap
Size77 KB
Load time49 ms
Start19.2 s
RiskFOUT — text flashes from fallback to web font
pxiByp8kv8JHgFVrLDD4Z1x...woff2swap
Size8 KB
Load time36 ms
Start19.2 s
RiskFOUT — text flashes from fallback to web font
Optimization checklist
Preload critical fonts (priority=high)
Use woff2 format for all fonts
Set font-display to swap, optional, or fallback
Subset large fonts (≤100 KB each)
Fixing the unchecked items could save ~27 KB and ~54 ms
A+
Resource Caching
All resources properly cached
PASS
All resources properly cached
Info::
✓
No caching issues found
All static resources have appropriate caching headers.
A+
Critical Rendering Path
No render-blocking resources
PASS
No render-blocking resources
Info::
✓
No render-blocking resources detected
A+
Resource Hints
1 hints, 0 missing preconnects
PASS
1 hints, 0 missing preconnects
Info::
✓
Page uses 1 resource hint(s)
Current Resource Hints
preconnect—
preload—
dns-prefetch
1
prefetch—
1 resource hints configured
A+
HTTP/3 (QUIC)
HTTP/3 advertised via Alt-Svc
PASS
HTTP/3 advertised via Alt-Svc
Info::
✓
HTTP/3 (QUIC) is supported
First-load mobile users on cellular networks see meaningful latency improvements with HTTP/3. The QUIC transport collapses TLS + TCP handshakes into one and recovers faster from packet loss.
A+
Document Compression
Document response uses brotli
PASS
Document response uses brotli
Info::
✓
Main HTML response uses brotli (Content-Encoding: br)
Brotli is the best text-compression algorithm for general use, ~20% smaller than gzip on average (40% on smaller files). Modern browsers all support it.
A+
LCP Image Preload
LCP preload audit not available
PASS
LCP preload audit not available
Info::
✓
LCP image preload audit not available for this scan
The page declares a `Vary` header, telling downstream caches which request headers the response varies on. Critical for content-negotiated responses (compression, language, cookies, device class).
Info::
i
No `ETag` or `Last-Modified` -- conditional GET not supported
Without either header, browsers can't issue conditional GETs and refresh always re-downloads the full response body even when nothing changed. Add `ETag: "<hash>"` (or `Last-Modified: <date>`) on cacheable responses; the server returns 304 Not Modified when the client's cached copy is still valid, saving bandwidth.
Each `<link rel="stylesheet">` without a non-blocking `media` attribute holds up the first paint. Browsers download all of them before painting any content. Consolidate into 1-2 critical-path stylesheets; defer non-critical CSS via `<link rel="stylesheet" media="print" onload="this.media='all'">` or via the loadCSS pattern; inline above-the-fold CSS in `<style>` to short-circuit the request entirely.
A+
Green Hosting
Whether the site is served from green-energy infrastructure
PASS
Green Hosting
This site is hosted on green energy infrastructure
Provider: Netsons s.r.l.
Network Waterfall
57 requests over 20227ms
INFO
HTML JavaScript CSS Images Fonts XHR/Fetch Other
Third-Party Script Cost
Per-script blocking time, transfer cost, and cache headers
INFO
63%of JavaScript execution is third-party
First-party Third-party3607ms · 172KB · €19/mo
Script
Category
Execution
Transfer
Unused
Monthly Cost
Verdict
embeds.iubenda.com
embeds.iubenda.com
Other
3138ms
34 KB
—
€17/mo
Costly
Iubenda
cdn.iubenda.com
Consent
375ms
113 KB
49%
€2/mo
Essential
cdn.trustindex.io
cdn.trustindex.io
Other
93ms
25 KB
—
€0/mo
Optional
embeds.iubenda.com
Other
Costly
Execution3138ms
Transfer34 KB
Monthly Cost€17/mo
Iubenda
Consent
Essential
Execution375ms
Transfer113 KB
Unused49%
Monthly Cost€2/mo
cdn.trustindex.io
Other
Optional
Execution93ms
Transfer25 KB
Monthly Cost€0/mo
These scripts may cost more than they're worth
embeds.iubenda.com adds 3138ms and costs ~€17/month
63% of JavaScript execution time comes from third-party scripts.
Why this matters
Third-party scripts (analytics, ads, social, A/B testing) often dominate execution time — every one is a perf-and-privacy tax.
Learn more ▾▴
Each third-party script is a black box: you don't control when it loads, what it executes, or how much it grows. They often account for a major share of total blocking time on average sites (HTTP Archive's Web Almanac documents the trend). Audit which ones you actually need, defer the rest, and use facade patterns (lite-youtube, lite-vimeo) for embedded media.
Source: web.dev / HTTP Archive Web Almanac
embeds.iubenda.com takes 3138ms of CPU time. Consider loading it asynchronously or replacing it with a lighter alternative.
Why this matters
This script has high main-thread execution time — optimize hot paths or defer.