foursigmatic.com website review

Not measured in this review.

• Fails Core Web Vitals for real visitors

  Real Chrome users on phones do not pass Google's Core Web Vitals on your site (28-day field data from the Chrome UX Report (opens in a new tab)). Google uses this in ranking.

• Real-user LCP: 2.7 s

  2.7 s

  Real visitors wait 2.7 s for the largest content to appear (75th percentile). Good is under 2.5 s.

• Real-user INP: 344 ms

  344 ms

  Real visitors wait 344 ms for the page to respond to a tap (75th percentile). Good is under 200 ms.

• Real-user FCP: 1.9 s

  1.9 s

  Real visitors see the first content after 1.9 s (75th percentile). Good is under 1.8 s.

• Real-user TTFB: 1.0 s

  1.0 s

  Real visitors wait 1.0 s for your server to start answering (75th percentile). Good is under 800 ms.

• Tap response (INP) got 13% slower for real visitors

  +13%

  Over the last 25 four-week periods to 2026-10-31, real Chrome visitors' tap response (inp) went from 321 ms to 359 ms at the 75th percentile (Chrome UX Report (opens in a new tab) history).

• Page weight: 5.3 MB

  5.3 MB

  Your homepage downloads 5.3 MB on a phone, 693 KiB of it images (13%). Under 2 MB keeps phones on slow connections fast.

• 7 images below the first screen load straight away

  7 images further down the page (411 KiB) download before anyone scrolls to them. Adding loading="lazy" lets the first screen load first.

  Elements (5)

• About 1.5 g of CO₂ per visit

  1.50 g

  By the Sustainable Web Design model, a visit to your homepage emits about 1.50 g of CO₂e: 180.4 kg a year at 10,000 visits a month. It scales with page weight, so every byte cut lowers it.

• 35 text elements with low contrast

  35 text elements don't have enough contrast against the background to read easily, especially outdoors on a phone.

  Elements (3)

• 3 tap targets too small

  3 tap targets are too small or too close together to hit reliably with a finger.

  Elements (3)

• Scrollable region must have keyboard access (1 element)

  Scrollable region must have keyboard access: 1 element on the page fails this check, rated serious by axe-core.

  Elements (1)

• 4 images without alt text

  4 images have no alt text, which hurts accessibility and image search.

  Elements (2)

• All page content should be contained by landmarks (2 elements)

  All page content should be contained by landmarks: 2 elements on the page fail this check, rated moderate by axe-core.

  Elements (2)

• 43 form fields without a label

  43 form fields have no label, so screen readers announce an empty box and autofill guesses.

• 31 links without text

  31 visible links have no text or label, so screen readers cannot say where they go.

  Elements (3)

• Headings skip levels

  Headings skip levels (h2 → h4), which makes the page harder to scan with a screen reader.

  View source

• Meta description is long (164 characters)

  Your meta description is 164 characters; Google truncates after about 160, so the end of your pitch is cut.

  View source

• 451 internal links, 0 external

  The homepage links to 451 pages on foursigmatic.com and 0 external pages.

• 15 pages without an H1

  /collections/coffee-and-creamers, /products/focus-ground-coffee-bag, /products/calm-decaf-ground-coffee-bag, /products/balance-half-caf-ground-coffee-bag, /products/gut-health-ground-coffee-bag and /products/boost-high-caf-ground-coffee-bag and 9 others have no <h1> headline, so visitors and search engines get no clear main topic.

• 15 internal pages checked

  We fetched 15 pages linked from your homepage (of 75 found) and read each the way a search engine does.

• 1 broken image

  1 image failed to load on a phone, for example https://files.alia-prod.com/foursigmaticlogoba4a2fa09ec2d8fa5dcd.svg-1757991547898.

• 5 JavaScript errors while loading

  5 errors were logged to the browser console while the page loaded, for example “Failed to load resource: net::ERR_FAILED”.

• Short HSTS lifetime

  HSTS is set, but max-age is 91 days; one year is the recommended minimum.

• No Referrer-Policy

  No Referrer-Policy header, so full URLs can leak to the sites you link to.

• No Permissions-Policy

  No Permissions-Policy header to switch off camera, microphone and location for embedded content.

• Deprecated X-XSS-Protection

  X-XSS-Protection is set to “1; mode=block”; the header is deprecated and can introduce bugs. Use 0 or remove it.

• No security.txt

  There is no /.well-known/security.txt telling researchers how to report a security problem to you.

• DNSSEC is off

  foursigmatic.com's DNS answers are not signed. DNSSEC stops attackers forging them to send visitors or email elsewhere; most registrars switch it on in a click, though most sites still run without it.

• Thin social proof

  Social proof on the homepage: 110 testimonial or review blocks. Pairing it with named testimonials or customer logos makes it far more convincing.

• No direct contact details

  No phone number or email link on the homepage, so ready-to-buy visitors have one fewer way to reach you.

• About 1,727 words of copy

  The homepage carries about 1,727 words of visible text.

• Urgency cues

  The page uses urgency cues (a countdown or limited-time wording).

• DMARC is monitor-only (p=none)

  DMARC is set to p=none, so mail pretending to be foursigmatic.com is still delivered. Reports are on, so moving to quarantine is the next step.

• SPF does not block other senders (no all)

  Your SPF record doesn't end in -all or ~all, so it doesn't stop other servers sending as you: “v=spf1 redirect=foursigmatic.com.hosted.spf-report.com”.

• Email authentication score: 60/100

  Email authentication: SPF record 25 points, plus 15 when it ends in -all (10 for ~all); DMARC record 25, plus 25 for a reject policy (15 for quarantine); a DKIM key on a common selector 10.

• 9 trackers load before any consent

  9

  Before a visitor clicks anything, the page loads Amazon Ads, Google Ads, Google Analytics, Google Tag Manager and Klaviyo and 4 mores (measured from a US location before any click). No consent tool was detected. Visitors from the EU, UK and several US states must be asked first.

• 22 cookies set on arrival

  22

  Opening the homepage sets 22 cookies (measured from a US location before any click).

• No consent tool detected

  No known cookie consent tool loads with the page. Some sites build their own banner, and some only show one to visitors from the EU.

• 69 other companies contacted

  Loading the homepage contacts 69 hosts run by other companies (fonts, scripts, analytics, ads), each of which sees the visitor's IP address.