Intentional for dynamic content, but increases server load for every page view.
Got: no-cache, no-store, must-revalidate
Info::
i
No ETag or Last-Modified header
Conditional requests (304 Not Modified) are not possible without validators.
Cache-Control
no-cache, no-store, must-revalidate
Directive
Value
Meaning
no-cache
—
Cache but always revalidate first
no-store
—
Never cache this response
must-revalidate
—
Must recheck with server after expiry
B
Page Weight Budget
1.3 MB transferred, 87 requests
REVIEW
1.3 MB transferred, 87 requests
Info::
✓
Page weighs 4.4 MB (1.3 MB transferred)
Warning::
!
JavaScript is 933 KB — consider code splitting or lazy loading
Large JavaScript bundles delay interactivity. Split code by route or defer non-critical scripts.
Got: 933 KB
Info::
i
87 HTTP requests
Info::
i
Estimated 0.27 g CO2 per page load
1.3 MBtransferred
87 requests
0.27 g CO2 per page load
JavaScript932.5 KiB70%
Images230.5 KiB17%
CSS52.2 KiB4%
HTML50.4 KiB4%
Fonts36.4 KiB3%
Other14.8 KiB1%
Other5.5 KiB0%
Other4.4 KiB0%
Other821 B0%
Other289 B0%
Other0 B0%
02.4 MB4.9 MB
Under budget
Large JavaScript bundles delay interactivity. Split code by route or defer non-critical scripts.
Why this matters
JavaScript bundle is large — code-split routes and lazy-load off-screen components to defer.
Source: web.dev
B
Image Optimization
26 images, 0 KB saveable
REVIEW
26 images, 0 KB saveable
Warning::
!
https://image.gala.de/24597776/t/Bc/v11/w480/r1/-/... is missing width/height — may cause layout shift
Set explicit width and height to prevent CLS.
26images231 KB
0oversized-0 KB
19legacy format
1missing dimensionsCLS risk
Set explicit width and height to prevent CLS.
Why this matters
Image without explicit width/height — browser can't reserve space; CLS jumps when image loads.
Source: web.dev / Core Web Vitals
B
HTTP/3 (QUIC)
HTTP/3 not advertised
REVIEW
HTTP/3 not advertised
Info::
i
HTTP/3 (QUIC) is not advertised
HTTP/3 isn't advertised via Alt-Svc and the worker didn't negotiate h3. HTTP/3 reduces handshake latency (1-RTT instead of 2-3 RTTs) and is more resilient on lossy connections. Most modern CDNs (Cloudflare, Fastly, AWS CloudFront, Google Cloud CDN) support HTTP/3 with a single config switch -- consider enabling for mobile-heavy workloads.
C
Compression Algorithm
Action
Main response served uncompressed
REVIEW
Main response served uncompressed
Info::
i
Main HTML response has no Content-Encoding (uncompressed)
The main HTML document is served without compression. The Text Compression section above lists the broader picture; for the main response specifically, even gzip would shave ~70-80% off most text payloads.
B
Server-Timing Observability
No Server-Timing header found
REVIEW
No Server-Timing header found
Info::
i
No Server-Timing header found
Server-Timing exposes backend timing breakdowns to browser DevTools (e.g., `db: 45ms; render: 120ms; cache: 2ms`). Useful for diagnosing slow pages without backend log access. Most modern frameworks (Next.js, Cloudflare Workers, Fastly) emit it automatically; absence on a managed platform usually means telemetry headers are stripped at the edge.
C
Green Hosting
Action
Whether the site is served from green-energy infrastructure
REVIEW
Green Hosting
No green hosting detected
A+
Text Compression
All text resources are compressed
PASS
All text resources are compressed
Info::
✓
All text resources are compressed
All text resources are properly compressed.
A+
Font Loading
4 fonts (36 KB)
PASS
4 fonts (36 KB)
Info::
i
4 font(s) use font-display: swap (FOUT risk but functional)
Web fonts
4
36 KB total
Render-blocking
0
of 4
Dominant font-display
swap
Most common across fonts
Font loading timeline
TransferFOIT (block)FOUT (swap)
TT-Chocolates-Regular.3...woff2swap
Size18 KB
Load time48 ms
Start261 ms
RiskFOUT — text flashes from fallback to web font
TT-Chocolates-Bold.fc61...woff2swap
Size19 KB
Load time50 ms
Start261 ms
RiskFOUT — text flashes from fallback to web font
TT-Chocolates-Bold.fc61...woff2swap
Size0 KB
Load time5 ms
Start919 ms
RiskFOUT — text flashes from fallback to web font
TT-Chocolates-Regular.3...woff2swap
Size0 KB
Load time5 ms
Start919 ms
RiskFOUT — text flashes from fallback to web font
Optimization checklist
Preload critical fonts (priority=high)
Use woff2 format for all fonts
Set font-display to swap, optional, or fallback
Subset large fonts (≤100 KB each)
A+
Resource Caching
All resources properly cached
PASS
All resources properly cached
Info::
✓
No caching issues found
All static resources have appropriate caching headers.
A+
Critical Rendering Path
No render-blocking resources
PASS
No render-blocking resources
Info::
✓
No render-blocking resources detected
A
Resource Hints
5 hints, 0 missing preconnects
PASS
5 hints, 0 missing preconnects
Warning::
!
2 font preload(s) missing `crossorigin` -- font will be downloaded twice
Fonts are always fetched as crossorigin=anonymous; a preload without the attribute creates a different cache key, so the browser refetches when the actual font request happens. Sample: https://www.gala.de/__assets/TT-Chocolates-Regular.37110986bb775fc6cfb0b3fa32736928.woff2, https://www.gala.de/__assets/TT-Chocolates-Bold.fc61128599302e8b8fdc409b0b555343.woff2. Add `crossorigin` (or `crossorigin="anonymous"`) to each preload.
Info::
✓
Page uses 5 resource hint(s)
Current Resource Hints
preconnect
3
preload
2
dns-prefetch—
prefetch—
5 resource hints configured
Fonts are always fetched as crossorigin=anonymous; a preload without the attribute creates a different cache key, so the browser refetches when the actual font request happens. Sample: https://www.gala.de/__assets/TT-Chocolates-Regular.37110986bb775fc6cfb0b3fa32736928.woff2, https://www.gala.de/__assets/TT-Chocolates-Bold.fc61128599302e8b8fdc409b0b555343.woff2. Add `crossorigin` (or `crossorigin="anonymous"`) to each preload.
Why this matters
Performance issues directly impact user engagement and conversion rates.
A+
LCP Image Preload
LCP preload audit not available
PASS
LCP preload audit not available
Info::
✓
LCP image preload audit not available for this scan
A+
Main HTML Cache-Control
Main HTML uses no-store -- correct for sensitive/dynamic content
PASS
Main HTML uses no-store -- correct for sensitive/dynamic content
Info::
✓
Main HTML uses no-store -- correct for sensitive/dynamic content
Got: no-cache, no-store, must-revalidate
A+
Server Response Intelligence
1 server-response signal(s) detected
PASS
1 server-response signal(s) detected
Info::
i
No `ETag` or `Last-Modified` -- conditional GET not supported
Without either header, browsers can't issue conditional GETs and refresh always re-downloads the full response body even when nothing changed. Add `ETag: "<hash>"` (or `Last-Modified: <date>`) on cacheable responses; the server returns 304 Not Modified when the client's cached copy is still valid, saving bandwidth.
A+
Render-Blocking Resources
No render-blocking resources detected
PASS
No render-blocking resources detected
Info::
✓
No render-blocking resources detected in <head>
A+
Third-Party Resources
No third-party resources detected
PASS
No third-party resources detected
A
JavaScript Blocking
1 JS blocking issue(s) detected
PASS
1 JS blocking issue(s) detected
Warning::
!
3 render-blocking <script src> tag(s) without async/defer
Each `<script src=...>` without `async`, `defer`, or `type="module"` blocks HTML parsing while the browser fetches and executes it. The block lasts the entire round-trip + execution time -- on slow networks this translates directly into LCP delay. Add `defer` (executes after parse, in source order) for scripts that interact with the DOM, or `async` (executes whenever ready) for analytics / independent scripts. Module scripts (`type="module"`) are deferred by default.
Each `<link rel="stylesheet">` without a non-blocking `media` attribute holds up the first paint. Browsers download all of them before painting any content. Consolidate into 1-2 critical-path stylesheets; defer non-critical CSS via `<link rel="stylesheet" media="print" onload="this.media='all'">` or via the loadCSS pattern; inline above-the-fold CSS in `<style>` to short-circuit the request entirely.
Network Waterfall
87 requests over 2784ms
INFO
HTML JavaScript CSS Images Fonts XHR/Fetch Other
Third-Party Script Cost
Per-script blocking time, transfer cost, and cache headers
INFO
100%of JavaScript execution is third-party
First-party Third-party2419ms · 762KB · €26/mo
Script
Category
Execution
Transfer
Unused
Monthly Cost
Verdict
www.gala.de
www.gala.de
Other
557ms
44 KB
—
€6/mo
Costly
Unattributable
Unattributable
Other
373ms
0 KB
—
€4/mo
Costly
baseendpoint.gala.de
baseendpoint.gala.de
Other
367ms
93 KB
69%
€4/mo
Costly
runforrest.gala.de
runforrest.gala.de
Other
303ms
172 KB
44%
€3/mo
Costly
www.gala.de
www.gala.de
Other
207ms
81 KB
66%
€2/mo
Costly
baseendpoint.gala.de
baseendpoint.gala.de
Other
201ms
42 KB
—
€2/mo
Costly
www.gala.de
www.gala.de
Other
178ms
155 KB
50%
€2/mo
Optional
www.gala.de
www.gala.de
Other
150ms
118 KB
78%
€2/mo
Optional
cdn-gl.nmrodam.com
cdn-gl.nmrodam.com
Other
83ms
57 KB
42%
€1/mo
Optional
www.gala.de
Other
Costly
Execution557ms
Transfer44 KB
Monthly Cost€6/mo
Unattributable
Other
Costly
Execution373ms
Transfer0 KB
Monthly Cost€4/mo
baseendpoint.gala.de
Other
Costly
Execution367ms
Transfer93 KB
Unused69%
Monthly Cost€4/mo
runforrest.gala.de
Other
Costly
Execution303ms
Transfer172 KB
Unused44%
Monthly Cost€3/mo
www.gala.de
Other
Costly
Execution207ms
Transfer81 KB
Unused66%
Monthly Cost€2/mo
baseendpoint.gala.de
Other
Costly
Execution201ms
Transfer42 KB
Monthly Cost€2/mo
www.gala.de
Other
Optional
Execution178ms
Transfer155 KB
Unused50%
Monthly Cost€2/mo
www.gala.de
Other
Optional
Execution150ms
Transfer118 KB
Unused78%
Monthly Cost€2/mo
cdn-gl.nmrodam.com
Other
Optional
Execution83ms
Transfer57 KB
Unused42%
Monthly Cost€1/mo
These scripts may cost more than they're worth
www.gala.de adds 557ms and costs ~€6/month
Unattributable adds 373ms and costs ~€4/month
baseendpoint.gala.de adds 367ms and costs ~€4/month
runforrest.gala.de adds 303ms and costs ~€3/month
www.gala.de adds 207ms and costs ~€2/month
baseendpoint.gala.de adds 201ms and costs ~€2/month
100% of JavaScript execution time is spent on third-party scripts. Consider auditing which scripts are essential.
Why this matters
When third-party JS execution time exceeds your own, performance gains from frontend work are capped by code you don't own.
Learn more ▾▴
Every millisecond of third-party JS competes with your own for main-thread time. If their share is bigger than yours, optimization on your code base barely moves the needle. Audit, defer, or remove third-parties before further frontend optimization. Use Lighthouse's third-party audit to identify the worst offenders.
Source: web.dev
www.gala.de takes 557ms of CPU time. Consider loading it asynchronously or replacing it with a lighter alternative.
Why this matters
This script has high main-thread execution time — optimize hot paths or defer.
Source: web.dev
Unattributable takes 373ms of CPU time. Consider loading it asynchronously or replacing it with a lighter alternative.
Why this matters
This script has high main-thread execution time — optimize hot paths or defer.
Source: web.dev
baseendpoint.gala.de takes 367ms of CPU time. Consider loading it asynchronously or replacing it with a lighter alternative.
Why this matters
This script has high main-thread execution time — optimize hot paths or defer.
Source: web.dev
69% of baseendpoint.gala.de's code is unused. The script may be loading features you don't use.
Why this matters
Bundle has high unused-code ratio — tree-shaking and route-splitting recover the wasted bytes.
Source: web.dev
runforrest.gala.de takes 303ms of CPU time. Consider loading it asynchronously or replacing it with a lighter alternative.
Why this matters
This script has high main-thread execution time — optimize hot paths or defer.
Source: web.dev
www.gala.de takes 207ms of CPU time. Consider loading it asynchronously or replacing it with a lighter alternative.
Why this matters
This script has high main-thread execution time — optimize hot paths or defer.
Source: web.dev
66% of www.gala.de's code is unused. The script may be loading features you don't use.
Why this matters
Bundle has high unused-code ratio — tree-shaking and route-splitting recover the wasted bytes.
Source: web.dev
baseendpoint.gala.de takes 201ms of CPU time. Consider loading it asynchronously or replacing it with a lighter alternative.
Why this matters
This script has high main-thread execution time — optimize hot paths or defer.
Source: web.dev
50% of www.gala.de's code is unused. The script may be loading features you don't use.
Why this matters
Bundle has high unused-code ratio — tree-shaking and route-splitting recover the wasted bytes.
Source: web.dev
78% of www.gala.de's code is unused. The script may be loading features you don't use.
Why this matters
Bundle has high unused-code ratio — tree-shaking and route-splitting recover the wasted bytes.