haveibeenpwned.com speed test — 20 Oct 2026
Measured from the wfix.shop server on 20 October 2026 at 15:00 UTC. Grade A (97/100), with the screenshots, the timings and the fixes that matter.
Where the first byte went
- DNS lookup 70 ms 25%
- TCP connect 52 ms 19%
- Server wait 154 ms 56%
Measured on the connection that fetched the HTML. Every other request on the page waits for the end of this bar before it can start.
How this page compares
Every report published here is in this comparison, so it is a reference population of pages tested from one server - not a benchmark of the whole web.
What these numbers mean
- The first byte arrived in 276 ms. That is workable, and the cheapest win left is caching or a warmer connection.
- The page transfers 349.2 KB over 21 request(s). Fonts files are 53% of it, so subset the fonts and stop preloading the weights you do not render.
- The HTML itself arrives zstd-compressed.
- It runs over HTTP/3, so the assets share a connection instead of opening one each.
- The largest element painted at 544 ms, inside the 2.5 s Google calls good.
- The main thread was blocked for 71 ms in total, which is not enough to feel.
Fix first: Cache static assets - Version filenames on change and serve them with a long max-age plus immutable. That is what makes a returning visitor fast.
Read on one shared server, not a visitor's phone: use it to compare pages against each other, not as a promise about every connection. We fix what these tests find.
Browser render
The same URL loaded in a real browser, so these are the readings curl cannot produce. The grade above is still built from the server measurements.
Page weight by type
What the page is made of
Transfer size, compressed as sent. 21 request(s) in total, 349.2 KB across all of them.
Top issues
Cache static assets
medium impact1 asset(s) answer without a Cache-Control max-age, so browsers revalidate them on every visit.
Fix: Version filenames on change and serve them with a long max-age plus immutable. That is what makes a returning visitor fast.
Waterfall
Slowest requests
Each bar is one request's own response time, scaled to the slowest. Assets were fetched in parallel, so the bars overlap in real time rather than stacking. first party third party
| Request | Type | Status | Time | Size |
|---|---|---|---|---|
| https://haveibeenpwned.com/Images/Icons/favicon.svg?v=mzTSTsC6_m5N9uSsecVq_mPaB8A4RngVgvtKWAsEaf0 | images | 200 | 1.38 s | 37.4 KB |
| https://haveibeenpwned.com/apple-touch-icon-57x57.png | images | 200 | 1.36 s | 307 B |
| https://haveibeenpwned.com/apple-touch-icon-152x152.png | images | 200 | 1.35 s | 507 B |
| https://haveibeenpwned.com/site.webmanifest?v=luhS2CarNDfOuu_d3qBkSvyT9iLLvojAlMx9SdCErWg | other | 200 | 1.34 s | 197 B |
| https://haveibeenpwned.com/css/assets/switzer-700-9JzFtTp4.woff2 | fonts | 200 | 1.33 s | 19.0 KB |
| https://haveibeenpwned.com/apple-touch-icon-120x120.png | images | 200 | 1.33 s | 437 B |
| https://haveibeenpwned.com/js/bundle/bundle.js?v=QS_q8gnR5d3MunNnj13Z6tjZ_-j6YsEAPu-fwmy9G08 | javascript | 200 | 1.32 s | 59.9 KB |
| https://haveibeenpwned.com/css/assets/switzer-400-BxEtgLLb.woff2 | fonts | 200 | 1.32 s | 16.3 KB |
| https://haveibeenpwned.com/css/main.css?v=FbBbAabRRv-G2WNLWDfafPQ8nqC2ZpE1NS6ZXJMhESo | css | 200 | 1.31 s | 44.7 KB |
| https://haveibeenpwned.com/css/assets/bootstrap-icons-DJdhg9lH.woff2?e34853135f9e39acf64315236852cd5a | fonts | 200 | 1.30 s | 130.9 KB |
| https://haveibeenpwned.com/apple-touch-icon.png | images | 200 | 1.30 s | 546 B |
| https://haveibeenpwned.com/Images/Icons/favicon-96x96.png?v=apCm6ljnsII-SykSCOQfdWddorqioqqM1yZUTxmEvt0 | images | 200 | 1.30 s | 1.8 KB |
| https://haveibeenpwned.com/apple-touch-icon-76x76.png | images | 200 | 1.29 s | 339 B |
| https://haveibeenpwned.com/css/assets/switzer-500-A29GCmfN.woff2 | fonts | 200 | 1.28 s | 19.1 KB |
| https://haveibeenpwned.com/Images/PartnerLogos/1Password.svg?v=B2A9lnUNM6j5CEC4-RHfj_v0fOf-q6bWq4ZcEqlja1A | images | 200 | 1.28 s | 2.9 KB |
| https://haveibeenpwned.com/Images/Hero.svg?v=KKNDanKXjfzfs2lt89LGS3QXqiQBTOnAgDHx3_RX2Yo | images | 200 | 1.28 s | 2.6 KB |
| https://haveibeenpwned.com/Images/HibpLogo.svg?v=w1UPiLz7TzzzyTflCj6n2lzgzKj-UhDA7827u2P4wb8 | images | 200 | 1.28 s | 2.3 KB |
| https://haveibeenpwned.com/apple-touch-icon-180x180.png | images | 200 | 1.28 s | 546 B |
| https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit 3rd party | javascript | 302 | 1.28 s | 0 B |
| https://haveibeenpwned.com/Images/Icons/favicon.ico?v=_wnMzFLrZ7c2GgHxz6JXJyGBXMo7jVg8jjKKCultiCk | images | 200 | 1.28 s | 2.1 KB |
Report this page
Run this test on your own site
The same engine, free, with the screenshots and the fixes. No account needed.