www.shodan.io speed test — 20 Oct 2026

Measured from the wfix.shop server on 20 October 2026 at 13:02 UTC. Grade A (96/100), with the screenshots, the timings and the fixes that matter.

https://www.shodan.io/

20 October 2026 at 13:02 UTC · Free test · report pt_954c5f4028d4
Grade
A
96/100
Performance100/100
Structure91/100

13 audit(s) passed, 3 need work

First byte (TTFB)169 msmeasured from this server
Fully loaded743 msfirst byte + slowest asset
Requests13document + assets
Page weight234.8 KBcompressed transfer
HTML document3.5 KBbr
ProtocolHTTP/3cloudflare
Third-party17.1 KBother hosts

Where the first byte went

  • DNS lookup 94 ms 56%
  • TCP connect 12 ms 7%
  • Server wait 63 ms 37%

Measured on the connection that fetched the HTML. Every other request on the page waits for the end of this bar before it can start.

How this page compares

First bytefaster than 96% of 4,999 pages tested here169 ms against a median of 449 ms
Page weightlighter than 77% of 4,999 pages tested here234.8 KB against a median of 650.5 KB
Fully loadedfaster than 95% of 4,999 pages tested here743 ms against a median of 1.84 s
Requestssends fewer requests than 85% of 4,999 pages tested here13 against a median of 26

Every report published here is in this comparison, so it is a reference population of pages tested from one server - not a benchmark of the whole web.

What these numbers mean

  • The server answered in 169 ms, which is fast: almost all of the wait is the page itself, not the host.
  • The page transfers 234.8 KB over 13 request(s), which is lean. Images files are 86% of it, so resize and recompress the largest images before anything else.
  • The HTML itself arrives br-compressed.
  • It runs over HTTP/3, so the assets share a connection instead of opening one each.
  • The largest element took 5.46 s to paint, past the 2.5 s threshold: usually a hero image that is too big or a render-blocking script in front of it.
  • Layout stayed still (CLS 0.001), so nothing jumps under the reader's cursor.
  • The main thread was blocked for 43 ms in total, which is not enough to feel.

Fix first: Image delivery and format - Serve WebP or AVIF with a JPEG fallback, size images to the space they occupy, and lazy-load anything below the fold. Images are usually more than half of a slow page.

Read on one shared server, not a visitor's phone: use it to compare pages against each other, not as a promise about every connection. We fix what these tests find.

Screenshot

What the page looks like

Loaded in headless Chromium on this server. Click an image to open it full size.

Mobile screenshot of www.shodan.io
Mobile 390 × 844 · 77.5 KB · page is 4080 px tall

Browser render

The same URL loaded in a real browser, so these are the readings curl cannot produce. The grade above is still built from the server measurements.

Largest contentful paint5.46 sgood is under 2.5 s
Cumulative layout shift0.001under 0.1 is stable
Total blocking time43 mslong tasks during load
First contentful paint5.46 sfirst content on screen
Browser page weight391.6 KB32 request(s), scripts included
Largest contentful paint5.46 s
Poorgood under 2.5 s, poor over 4 s
Cumulative layout shift0.001
Goodgood under 0.1, poor over 0.25
Total blocking time43 ms
Goodgood under 200 ms, poor over 600 ms

Page weight by type

What the page is made of

Images 8 requests
201.9 KB 86%
Css 2 requests
27.1 KB 12%
Javascript 2 requests
2.3 KB 1%

Transfer size, compressed as sent. 13 request(s) in total, 234.8 KB across all of them.

Top issues

Image delivery and format

medium impact

0 image(s) over 200 KB and 1 large image(s) still served as JPEG or PNG.

Fix: Serve WebP or AVIF with a JPEG fallback, size images to the space they occupy, and lazy-load anything below the fold. Images are usually more than half of a slow page.

Avoid extra redirects

medium impact

1 redirect hop(s) before the page load started, each one a full round trip before the first byte.

Fix: Link to the canonical URL (and make sure http, the apex domain and www all point at it) so no visitor pays a redirect first.

Strict-Transport-Security

low impact

HSTS is not set, so the first visit on a hostile network can still be downgraded to HTTP.

Fix: Send Strict-Transport-Security with a max-age of at least six months. Add includeSubDomains once every subdomain is HTTPS.

Waterfall

Slowest requests

JAVASCRIPTkit.fontawesome.com/b7e79643d9.js
574 ms
IMAGESwww.shodan.io/static/img/dashboard.png
565 ms
IMAGESwww.shodan.io/static/img/pingmap.png
552 ms
IMAGESwww.shodan.io/static/img/logo.png
551 ms
CSSwire.shodan.io/v3.0.5/wire-next.css
550 ms
IMAGESwww.shodan.io/static/img/apple-touch-icon-192.png
545 ms
IMAGESwww.shodan.io/static/img/favicon.png
542 ms
IMAGESwww.shodan.io/static/img/developer.png
541 ms
CSSwww.shodan.io/static/styles/styles.css
537 ms
IMAGESwww.shodan.io/static/img/developer-light.png
533 ms

Each bar is one request's own response time, scaled to the slowest. Assets were fetched in parallel, so the bars overlap in real time rather than stacking. first party third party

RequestTypeStatusTimeSize
https://kit.fontawesome.com/b7e79643d9.js 3rd partyjavascript403574 ms31 B
https://www.shodan.io/static/img/dashboard.pngimages200565 ms11.1 KB
https://www.shodan.io/static/img/pingmap.pngimages200552 ms27.0 KB
https://www.shodan.io/static/img/logo.pngimages200551 ms2.6 KB
https://wire.shodan.io/v3.0.5/wire-next.css 3rd partycss200550 ms17.0 KB
https://www.shodan.io/static/img/apple-touch-icon-192.pngimages200545 ms20.9 KB
https://www.shodan.io/static/img/favicon.pngimages200542 ms704 B
https://www.shodan.io/static/img/developer.pngimages200541 ms17.9 KB
https://www.shodan.io/static/styles/styles.csscss200537 ms10.1 KB
https://www.shodan.io/static/img/developer-light.pngimages200533 ms7.1 KB
https://www.shodan.io/static/img/ipinfo.pngimages200528 ms114.7 KB
https://www.shodan.io/static/scripts/main.jsjavascript200524 ms2.2 KB
Report this page

The page is removed when the owner agrees. Sending this removes nothing by itself.

Run this test on your own site

The same engine, free, with the screenshots and the fixes. No account needed.