Performance

· 27 checks — Lighthouse + waterfall + sustainability rolled into one auditable list.

SCORE

GRADE

FIX

REVIEW

PASS

INFO

Performance-focused optimization plan with CWV assessment, top offenders, and time estimates

Mobile Desktop

Performance

100

Accessibility

Best Practices

100

SEO

First Contentful Paint First Contentful Paint — how long until the browser renders the first piece of content. Under 1.8s is good.

2.18 s

Largest Contentful Paint Largest Contentful Paint — how long until the largest visible element loads. Under 2.5s is good.

4.25 s

Total Blocking Time Total Blocking Time — total time the main thread was blocked, preventing user input. Under 200ms is good.

94 ms

Cumulative Layout Shift Cumulative Layout Shift — measures visual stability. How much the page layout shifts during loading. Under 0.1 is good.

0.142

Speed Index Speed Index — how quickly content is visually displayed during load. Under 3.4s is good.

2.87 s

Time to Interactive Time to Interactive — how long until the page is fully interactive and responds to user input. Under 3.8s is good.

4.26 s

Page Load Progression

562 ms

1.1 s

1.7 s

2.2 s

2.8 s

3.4 s

3.9 s

4.5 s

Checks

21 PASS 1 REVIEW 1 FIX

JS Execution Cost

Action

4891ms total JS execution

FIX

4891ms total JS execution

https://nu11cyber.com/assets/index-CPmHY95N.js: 2845ms CPU time

Unattributable: 745ms CPU time

https://nu11cyber.com/: 685ms CPU time

https://nu11cyber.com/assets/vendor-BhyxaAfg.js: 538ms CPU time

https://static.cloudflareinsights.com/beacon.min.j...: 77ms CPU time

Third-party scripts: 77ms (2% of total)

Main Thread Breakdown

Other 66% Script Evaluation 16% Style & Layout 12% Garbage Collection 3%

Script	Total	Scripting	Parse/Compile	Party
https://nu11cyber.com/assets/index-CPmHY95N.js	2845ms	354ms	1ms	1st
Unattributable	745ms	72ms	0ms	1st
https://nu11cyber.com/	685ms	13ms	1ms	1st
https://nu11cyber.com/assets/vendor-BhyxaAfg.js	538ms	263ms	1ms	1st
https://static.cloudflareinsights.com/beacon.min.js/v4bc70e2c01a94c73b74392e4234840661791215815920	77ms	55ms	0ms	3rd

Main HTML Cache-Control

Main HTML max-age=3600 (~60min)

REVIEW

Main HTML max-age=3600 (~60min)

Main HTML cached for 60 minutes -- mild staleness risk

Got: public, max-age=3600

A+

Page Weight Budget

272 KB transferred, 25 requests

PASS

272 KB transferred, 25 requests

Page weighs 606 KB (272 KB transferred)

25 HTTP requests

Estimated 0.06 g CO2 per page load

272 KB transferred

25 requests

0.06 g CO2 per page load

JavaScript 84.2 KiB 31%

Images 56.8 KiB 21%

Other 53.1 KiB 19%

Fonts 48.3 KiB 18%

CSS 17.0 KiB 6%

Other 5.4 KiB 2%

HTML 4.8 KiB 2%

Other 1.5 KiB 1%

Other 930 B 0%

Other 449 B 0%

0 2.4 MB 4.9 MB

Under budget

A+

Third-Party Impact

6% third-party, 0 ms blocking

PASS

6% third-party, 0 ms blocking

Third-party code accounts for 6% of page weight (17.3 KiB of 272.5 KiB)

Third-party blocking time is low (0 ms)

94%

First-party Third-party

A+

Text Compression

All text resources are compressed

PASS

All text resources are compressed

All text resources are properly compressed.

Image Optimization

3 images, 0 KB saveable

PASS

3 images, 0 KB saveable

All images are well-optimized

3 images 7 KB

0 oversized -0 KB

2 legacy format

0 missing dimensions CLS risk

A+

Font Loading

1 fonts (48 KB)

PASS

1 fonts (48 KB)

1 font(s) use font-display: swap (FOUT risk but functional)

Web fonts

48 KB total

Render-blocking

of 1

Dominant font-display

swap

Most common across fonts

Font loading timeline

Transfer FOIT (block) FOUT (swap)

UcC73FwrK3iLTeHuS_nVMrM... woff2 swap

Size 48 KB

Load time 582 ms

Start 259 ms

Risk FOUT — text flashes from fallback to web font

Optimization checklist

Preload critical fonts (priority=high)
Use woff2 format for all fonts
Set font-display to swap, optional, or fallback
Subset large fonts (≤100 KB each)

A+

JS Bundles

6 scripts, 0 KB unused

PASS

6 scripts, 0 KB unused

0 KB unused JavaScript

Downloaded but never executed on this page.

Script	Size	Unused	Minified	Party
https://images.dmca.com/Badges/DMCABadgeHelper.min.js	0 KB	—	✓	3rd
https://nu11cyber.com/assets/index-CPmHY95N.js	23 KB	—	✓	1st
https://nu11cyber.com/assets/vendor-BhyxaAfg.js	47 KB	—	✓	1st
https://nu11cyber.com/trusted-types.js	1 KB	—	✓	1st
https://static.cloudflareinsights.com/beacon.min.js/v4bc70e2c01a94c73b74392e4234840661791215815920	10 KB	—	✓	3rd
https://nu11cyber.com/assets/HomePage-CaSiqje5.js	2 KB	—	✓	1st

A+

Resource Caching

All resources properly cached

PASS

All resources properly cached

No caching issues found

All static resources have appropriate caching headers.

A+

Critical Rendering Path

No render-blocking resources

PASS

No render-blocking resources

No render-blocking resources detected

A+

Resource Hints

1 hints, 0 missing preconnects

PASS

1 hints, 0 missing preconnects

Page uses 1 resource hint(s)

Current Resource Hints

preconnect

—

preload

dns-prefetch

—

prefetch

—

1 resource hints configured

A+

HTTP/3 (QUIC)

HTTP/3 advertised via Alt-Svc

PASS

HTTP/3 advertised via Alt-Svc

HTTP/3 (QUIC) is supported

First-load mobile users on cellular networks see meaningful latency improvements with HTTP/3. The QUIC transport collapses TLS + TCP handshakes into one and recovers faster from packet loss.

A+

Document Compression

Document response uses brotli

PASS

Document response uses brotli

Main HTML response uses brotli (Content-Encoding: br)

Brotli is the best text-compression algorithm for general use, ~20% smaller than gzip on average (40% on smaller files). Modern browsers all support it.

A+

LCP Image Preload

LCP preload audit not available

PASS

LCP preload audit not available

LCP image preload audit not available for this scan

A+

Server-Timing Observability

3 Server-Timing entries advertised

PASS

3 Server-Timing entries advertised

Server-Timing header advertises 3 timing entries

A+

Server Response Intelligence

2 server-response signal(s) detected

PASS

2 server-response signal(s) detected

`Vary` header declared: Accept-Encoding

The page declares a `Vary` header, telling downstream caches which request headers the response varies on. Critical for content-negotiated responses (compression, language, cookies, device class).

`Last-Modified` present -- timestamp-based conditional GET supported

Consider also setting `ETag` for stronger revalidation -- ETags are content hashes that don't suffer from clock-skew or DST issues. Last-Modified alone is functional for conditional GETs and not a bug.

A+

Page Weight Inventory

25 resources · 272 KB · 0 KB savings available

PASS

25 resources · 272 KB · 0 KB savings available

Within 1MB page-weight target

Got: 272 KB

4 third-party resources (6% of weight)

25 resources · 272.5 KiB · 4 third-party Within 1MB page-weight target

Image 40% · 109.9 KiB

JavaScript 31% · 84.2 KiB

Font 18% · 48.3 KiB

CSS 6% · 17.0 KiB

Other 3% · 8.3 KiB

Document 2% · 4.8 KiB

#	Resource	Type	Size	Cache	Unused	3rd party	Issues

25 resources			272.5 KiB

A+

Render-Blocking Resources

No render-blocking resources detected

PASS

No render-blocking resources detected

No render-blocking resources detected in <head>

A+

Third-Party Resources

No third-party resources detected

PASS

No third-party resources detected

JavaScript Blocking

1 JS blocking issue(s) detected

PASS

1 JS blocking issue(s) detected

Total JS execution time is 4.9 s -- over the 3.5s budget

Total JavaScript execution (parse + compile + run) across all scripts exceeds 3.5 seconds. On low-end devices that becomes 7-15+ seconds and shows up directly in TBT and INP. Reduce by: tree-shaking unused dependencies, code-splitting (dynamic `import()`), removing or deferring third-party tracking, and replacing heavy frameworks where they're not needed.

A+

CSS Performance Depth

No CSS performance depth issues detected

PASS

No CSS performance depth issues detected

A+

Green Hosting

Whether the site is served from green-energy infrastructure

PASS

Green Hosting

This site is hosted on green energy infrastructure

Provider: Cloudflare

A+

HTTP Caching

max-age=3600 (1 hour)

PASS

max-age=3600 (1 hour)

Cache-Control header is set

Got: public, max-age=3600

Effective TTL: 1 hour (max-age=3600)

Last-Modified header present

Cache-Control

public, max-age=3600

Directive	Value	Meaning
public	—	Any cache may store this response
max-age	3600	Cache for 1 hour

Effective TTL: 3600 seconds

Asset Compression

No text asset hosts to measure

INFO

No text asset hosts to measure

No third-party or subdomain host served enough text assets to measure

Asset compression is measured per host, from one HEAD request against a sampled resource. Pages that serve all their JS and CSS from the document's own origin are covered by the document compression check instead.

Network Waterfall

25 requests over 2176ms

INFO

HTML JavaScript CSS Images Fonts XHR/Fetch Other

Third-Party Script Cost

Per-script blocking time, transfer cost, and cache headers

INFO

2% of JavaScript execution is third-party

First-party Third-party 77ms · 10KB · ¥9/mo

Script	Category	Execution	Transfer	Unused	Monthly Cost	Verdict
static.cloudflareinsights.com static.cloudflareinsights.com	Other	77ms	10 KB	—	¥9/mo	Optional

static.cloudflareinsights.com

Other

Optional

Execution 77ms

Transfer 10 KB

Monthly Cost ¥9/mo

How third-party costs are calculated

Image Optimization

4 images, 97 KB total, 0 KB wasted

INFO

Image Optimization Audit

Total Images

Total Size

97 KB

All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.