Gitnux/Report 2026

Webpage Statistics

Mobile responsiveness is mostly there, yet performance, typography, and interaction choices still split websites into clear winners and laggards, with 57% of mobile pages passing Core Web Vitals audits in 2023 and a mobile page speed average of 49 out of 100 on Lighthouse. You will also see how design and security collide, from 94% of first impressions tied to color schemes to 8% of top 1M sites exposing XSS vulnerabilities, plus what these gaps mean for conversions and user trust.
138Statistics
5Sections
10mRead
June 18, 2026Updated
Webpage Statistics
Samuel NorbergWritten by Samuel Norberg·Edited by Abigail Foster·Fact-checked by Astrid Bergmann
Published ·Updated
How this report is researched
01Editorial Scope

An editor sets the topic, the inclusion criteria, and the evaluation framework before research starts.

02Source Research

AI search agents locate sources and extract each figure together with the document it came from.

Read our full methodology →

Search agents attach provenance to every extracted figure.

Next review: within 27 days
Webpages are judged almost instantly, with 94% of first impressions tied to their color scheme. Yet many sites struggle with basic performance, as the median desktop page grew 15% to over two megabytes last year.

Key Takeaways

  • Dark mode preference reached 82% on mobile webpages in 2023 polls.
  • 94% of first impressions based on webpage color scheme per 2023 UX studies.
  • Minimalist design adopted by 68% of top 100 sites in 2023.
  • 57% of mobile webpages passed Core Web Vitals audits in 2023.
  • Touch target sizes below 48px on 23% mobile buttons 2023.
  • Viewport meta tags missing on 4% responsive sites 2023.
  • In 2023, the median desktop webpage size reached 2,084 KB, a 15% increase from 2022, primarily driven by image and JavaScript bloat.
  • Mobile webpages averaged 1,947 KB in size during 2023, with images accounting for 47% of total payload.
  • The average number of third-party requests per desktop page hit 47 in 2023, up from 44 in 2022.
  • 92% of HTTPS webpages had valid SSL certificates in 2023.
  • XSS vulnerabilities found in 8% of top 1M sites scanned 2023.
  • Average time to patch critical web vulns was 45 days in 2023.
  • Global internet users reached 5.3 billion in 2023, with 66% accessing via mobile webpages.
  • Average time spent on webpages per visit was 52 seconds across all devices in 2023.
  • 59% of web traffic originated from mobile devices in 2023 global reports.

In 2023, users favored fast, accessible, design driven webpages, with mobile performance and usability shaping engagement.

Related reading

02 · Category

Mobile Optimization21 stats

01
57% of mobile webpages passed Core Web Vitals audits in 2023.
02
Touch target sizes below 48px on 23% mobile buttons 2023.
03
Viewport meta tags missing on 4% responsive sites 2023.
04
Mobile page speed scores averaged 49/100 on Lighthouse 2023.
05
68% of mobile pages had oversized images post-optimization 2023.
06
Swipe gestures supported on 31% gallery carousels mobile 2023.
07
79% top sites passed mobile-friendly test in 2023 Google index.
08
AMP adoption dropped to 12% news sites by end-2023.
09
Mobile viewport zoom disabled on 9% intrusive popups 2023.
10
Lazy loading images implemented on 67% mobile feeds 2023.
11
45% mobile pages exceeded 300ms tap delay without fastclick 2023.
12
PWA install prompts shown on 18% eligible mobile sites 2023.
13
Mobile font sizes under 16px on 28% body text 2023 audits.
14
62% e-com sites had thumb-friendly CTAs over 44px 2023.
15
Service workers registered on 25% cache-enabled mobile pages 2023.
16
Mobile navigation depth averaged 2.1 levels in 2023 UX reviews.
17
71% sites hid elements on small screens via CSS media queries 2023.
18
App-like offline support on 14% news mobile webpages 2023.
19
Mobile LCP optimized under 2.5s on 58% top 1M sites 2023.
20
Pinch-to-zoom enabled on 93% form-heavy mobile pages 2023.
21
52% mobile carousels auto-advanced, hurting engagement 2023.
Interpretation

Mobile Optimization Interpretation

The web is a confusing cocktail of mobile progress, where 79% of sites have passed Google’s mobile-friendly test, yet they’re hobbled by an average speed score of 49/100, ham-fisted touch targets, and excessive image weight, making it a miracle any of us get anything done on our phones.

03 · Category

Performance Metrics30 stats

01
In 2023, the median desktop webpage size reached 2,084 KB, a 15% increase from 2022, primarily driven by image and JavaScript bloat.
02
Mobile webpages averaged 1,947 KB in size during 2023, with images accounting for 47% of total payload.
03
The average number of third-party requests per desktop page hit 47 in 2023, up from 44 in 2022.
04
JavaScript bytes per desktop page averaged 511 KB in 2023, representing 28% of total page weight.
05
Largest Contentful Paint (LCP) metric showed 25% of desktop pages exceeding 2.5 seconds in 2023.
06
Cumulative Layout Shift (CLS) scores above 0.1 affected 18% of mobile pages in the 2023 HTTP Archive dataset.
07
First Input Delay (FID) averaged 12ms on desktop but spiked to 45ms on mobile in 2023 analyses.
08
62% of desktop pages used HTTP/2 protocol in 2023, while HTTP/3 adoption reached only 28%.
09
Average Time to First Byte (TTFB) for desktop pages was 1.2 seconds in Q4 2023.
10
Webpage render-blocking resources delayed First Contentful Paint by an average of 1.8 seconds on mobile.
11
72% of pages in 2023 had Core Web Vitals passing all three metrics on desktop.
12
CSS bytes per page grew to 102 KB on average for desktop in 2023, up 12% YoY.
13
Font files contributed 5.3% to total page weight, averaging 89 KB per desktop page in 2023.
14
Video content made up 3.2% of page weight but was present on only 8% of pages in 2023.
15
Average desktop page contained 1,684 resources in 2023, a record high.
16
Mobile First Contentful Paint (FCP) exceeded 1.8 seconds for 40% of pages in 2023 CrUX data.
17
Compression ratios for JavaScript averaged 72% gzip savings across top 1M sites in 2023.
18
Idle callback usage was implemented on only 4% of analyzed webpages in 2023.
19
Average main-thread work time was 42 seconds per page load on desktop in 2023.
20
55% of mobile pages had LCP elements dominated by images in 2023.
21
HTTP Archive data shows 35% of desktop pages caching headers properly set in 2023.
22
Average redirects per page chain numbered 1.2 on desktop sites in 2023.
23
Preconnect hints were used on 12% of pages, reducing TTFB by up to 200ms where applied.
24
Resource prioritization flags were set correctly on 22% of desktop requests in 2023.
25
Average bytes downloaded before FCP was 190 KB on mobile in 2023.
26
Long tasks exceeding 50ms occurred 1,200 times per 10-second video on average pages.
27
DNS lookup times averaged 45ms for desktop pages in 2023 benchmarks.
28
TCP connection establishment took 120ms on average for HTTPS pages in 2023.
29
TLS handshake durations averaged 150ms across top sites in Q4 2023.
30
Server CPU time per request averaged 250ms for dynamic pages in 2023.
Interpretation

Performance Metrics Interpretation

The web in 2023 is like a digital grocery cart where we keep mindlessly adding images and JavaScript until the wheels buckle, then wonder why our pages move slower than a checkout line on a Sunday.

More related reading

04 · Category

Security Issues30 stats

01
92% of HTTPS webpages had valid SSL certificates in 2023.
02
XSS vulnerabilities found in 8% of top 1M sites scanned 2023.
03
Average time to patch critical web vulns was 45 days in 2023.
04
33% of breaches involved stolen web app credentials in 2023.
05
SQL injection attempts blocked 1.2 million times daily average 2023.
06
CSP headers implemented on 42% of OWASP top 10 risky sites 2023.
07
DDoS attacks on webpages averaged 15,000 per day globally 2023.
08
67% of sites vulnerable to open redirects in 2023 scans.
09
HSTS preload list included 4,500 domains protecting 2023 traffic.
10
Malware hosted on compromised webpages hit 1.7M unique URLs 2023.
11
CSRF protections missing on 29% of forms in top sites 2023.
12
Phishing webpages detected rose 61% to 1.2M in 2023.
13
76% of web apps used weak password policies in 2023 audits.
14
Bot traffic constituted 49.6% of all web traffic in 2023.
15
Zero-day exploits in web browsers patched within 24hrs 92% cases 2023.
16
Cookie security flags (Secure, HttpOnly) set on 55% sensitive cookies 2023.
17
14% of sites exposed sensitive data via misconfigs in 2023.
18
OWASP API Top 10 affected 94% tested APIs in 2023.
19
RCE vulns in CMS plugins exploited 23% WordPress sites 2023.
20
Privacy policy pages present on 88% commercial sites 2023.
21
Mixed content warnings triggered on 7% HTTPS pages 2023.
22
Subdomain takeovers risked 11% unused cloud buckets 2023.
23
WAF adoption reached 68% enterprise webpages in 2023.
24
CORS misconfigurations exposed 41% APIs to unauthorized access 2023.
25
Session fixation attacks possible on 19% auth flows 2023.
26
52% of breaches traced to web app attacks in 2023 Verizon DBIR.
27
Certificate transparency logs monitored for 99% EV certs 2023.
28
Clickjacking protections (X-Frame-Options) on 73% frames 2023.
29
25% increase in Magecart skimmer attacks on e-com pages 2023.
30
Mobile app-to-web hybrid vulns affected 36% PWAs 2023.
Interpretation

Security Issues Interpretation

The web is a contradictory fortress: while we've impressively bolted the front door with near-universal HTTPS, we're still leaving countless side windows wide open to a dizzying array of threats from stolen keys and marauding bots to unpatched flaws and clever traps.

05 · Category

Usage Statistics30 stats

01
Global internet users reached 5.3 billion in 2023, with 66% accessing via mobile webpages.
02
Average time spent on webpages per visit was 52 seconds across all devices in 2023.
03
59% of web traffic originated from mobile devices in 2023 global reports.
04
Bounce rate on average webpages stood at 45% in 2023 analytics data.
05
Pages per session averaged 2.1 for e-commerce sites in 2023.
06
47% of users expect webpages to load within 2 seconds or less in 2023 surveys.
07
Daily global webpage views exceeded 100 billion in 2023 estimates.
08
38% of users abandon sites taking over 3 seconds to load, per 2023 studies.
09
Average session duration on news webpages was 3:12 minutes in 2023.
10
72% of internet users accessed social media webpages daily in 2023.
11
E-commerce conversion rates from webpages averaged 2.5% globally in 2023.
12
28% of webpage visits resulted in a single page view in 2023 benchmarks.
13
Mobile users spent 4.8 hours daily on webpages and apps in 2023.
14
65% of consumers use search engines to find webpages before purchase.
15
Average exit rate from landing pages was 70% in 2023 marketing data.
16
54% of traffic to top sites came from organic search in 2023.
17
Users viewed 6.5 pages per session on content-heavy sites in 2023.
18
41% of users dislike animated ads on webpages per 2023 polls.
19
Global average pages per visit across industries was 4.2 in 2023.
20
76% of consumers check reviews on webpages before buying in 2023.
21
Time to interactive on average pages was 5.7 seconds mobile in 2023.
22
32% of users return to sites multiple times weekly in 2023 loyalty data.
23
Direct traffic accounted for 22% of webpage visits in 2023 top sites.
24
Social media drove 9% of traffic to average webpages in 2023.
25
Email referrals made up 6% of webpage traffic sources in 2023.
26
Referral traffic percentage was 18% for non-brand sites in 2023.
27
51% of users share webpage content socially weekly in 2023.
28
Average scroll depth on long-form webpages was 60% in 2023 heatmaps.
29
67% of mobile users tap phone screens over 2,600 times daily on webpages.
30
Desktop users spent 2.4 hours daily on webpages in 2023 reports.
Interpretation

Usage Statistics Interpretation

In a digital world where 5.3 billion people spend 52 seconds deciding your fate, 47% of whom will abandon you in two heartbeats, your webpage's job is to be a captivating, lightning-fast host at a party nobody wants to stand around waiting for.
Reference

Cite This Report

This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.

APA
Samuel Norberg. (2026, February 13). Webpage Statistics. Gitnux. https://gitnux.org/webpage-statistics
MLA
Samuel Norberg. "Webpage Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/webpage-statistics.
Chicago
Samuel Norberg. 2026. "Webpage Statistics." Gitnux. https://gitnux.org/webpage-statistics.

Sources & references

70 sources cited across this report

  1. almanac.httparchive.org
  2. httparchive.org
  3. debugbear.com
  4. web.dev
  5. datareportal.com
  6. similarweb.com
  7. statista.com
  8. sparkandtinder.com
  9. smartinsights.com
  10. akamai.com
  11. internetlivestats.com
  12. portent.com
  13. pressgazette.co.uk
  14. agencyanalytics.com
  15. thinkwithgoogle.com
  16. wordstream.com
  17. ahrefs.com
  18. piwik.pro
  19. marketingdive.com
  20. databox.com
  21. sparktoro.com
  22. hotjar.com
  23. dscout.com
  24. forbes.com
  25. wistia.com
  26. bluecorona.com
  27. vwo.com
  28. nngroup.com
  29. knowyoursource.com
  30. awwwards.com
  31. smashingmagazine.com
  32. stateofjs.com
  33. uxdesign.cc
  34. vistaprint.com
  35. w3techs.com
  36. httpygallery.com
  37. css-tricks.com
  38. imagekit.io
  39. designbombs.com
  40. typewolf.com
  41. veed.io
  42. material.io
  43. designmodo.com
  44. webaim.org
  45. fonts.com
  46. lottiefiles.com
  47. veracode.com
  48. flexera.com
  49. verizon.com
  50. imperva.com
  51. cloudflare.com
  52. portswigger.net
  53. hstspreload.org
  54. zdnet.com
  55. owasp.org
  56. apwg.org
  57. spiceworks.com
  58. googleprojectzero.org
  59. detectify.com
  60. wpvulndb.com
  61. edgedefender.com
  62. radware.com
  63. certificate-transparency.org
  64. riskiq.com
  65. nowsecure.com
  66. pubnub.com
  67. search.google.com
  68. searchenginejournal.com
  69. developer.mozilla.org
  70. baymard.com