New scan
89overall score
BGood HTTP 200

Kafein — Digital loyalty for shops

https://kafein.my/

Kafein is the shared loyalty app for shops — stamps or points, rewards, marketing and insights across one network. No app to install.

scanned
duration
2.85 s
requests
≈6
page weight
643 KB
ttfb
103 ms
https://kafein.my/
Content Security Policy
Turn regulars intoloyal regulars.
Canonical tags across pag…
Kafein
Two ways to reward. One tap to earn.
XML sitemap
Everything a shop needs, nothing it doesn’t
DMARC enforcement
wireframe rebuilt from the page’s html // issues pinned by area

Need these fixes handled?

NY8 · technical consulting and web development — from a prioritised plan to implementation.

Failed
12
Warnings
21
Passed
102
Checks
136

// the plan // checklist

The plan, as a checklist

89

audited: 89

grade B → B

0 of 33 fixed

0%

Tick an issue once it is fixed. Each tick counts that check as passed, and the score moves with it.

The top 3 alone would reach 92 · grade A.

Start here

the biggest gains, largest first0 / 3 fixed
  1. Content Security PolicySecurity

    Start with a report-only policy, fix the violations, then enforce a script-src that avoids unsafe-inline.

    +1.3

  2. Security header coverage across site surfacesSecurity

    Apply security headers in the outermost server or CDN layer so every route, redirect and error page inherits them.

    +0.9

  3. DMARC enforcementSecurity

    Publish "v=DMARC1; p=none; rua=mailto:…" to start collecting reports, then move to quarantine and reject.

    +0.7

after that

0 / 5 fixed

  • Clickjacking protectionSecurity+0.6
  • XML sitemapSEO+0.6
  • X-Content-Type-OptionsSecurity+0.6
  • Next-gen image formatsPerformance+0.5
  • Structured data coverageSEO+0.4

Module scores

Select a module to see its checks

Grade band

B

89/100

band 80–89

1 point to reach A

F0–59
D60–69
C70–79
B80–89
A90–94
A+95–100

Scores are weighted across the eight categories shown in the report.

All checks

Every rule that ran, with its evidence and fix. Tick an issue as fixed and the checklist score moves with it.

136 checks

// deep dive

Measurements and evidence

Core Web Vitals

Thresholds follow Google’s published good / needs-improvement / poor bands.

Modelled from a live request trace

LCP

Largest Contentful Paint

606 ms

good ≤ 2.50 s · poor > 4.00 s

INP

Interaction to Next Paint

110 ms

good ≤ 200 ms · poor > 500 ms

CLS

Cumulative Layout Shift

0.000

good ≤ 0.100 · poor > 0.250

FCP

First Contentful Paint

496 ms

good ≤ 1.80 s · poor > 3.00 s

TTFB

Time to First Byte

103 ms

good ≤ 800 ms · poor > 1.80 s

TBT

Total Blocking Time

23 ms

good ≤ 200 ms · poor > 600 ms

generated // checks run against kafein.my