Your position
70th percentile of 43 sites audited. The average site scores 73, the median 73.
Website audit report
1 critical and 7 high-severity issues found across 134 checks.
Scanned 2026-10-22T14:56:33+00:00 · 1 host IP · cert expires in 47 days
This report is not offered to search engines. It is reachable by link only. If you own explore-bulgaria.com you can publish or delete it.
Measured against every site SEOking has audited: a corpus that grows with each scan and cannot be reconstructed after the fact.
70th percentile of 43 sites audited. The average site scores 73, the median 73.
Domain can receive email
95% of the sites we have audited get this right and yours does not. Of everything on this report, it is the fault that most sets you apart from your competition, which makes it the first thing worth fixing.
Our own measure of whether your domain is trusted by the systems that decide if mail reaches an inbox. No other website audit reports this. It is built from BounceZero's deliverability platform.
Your domain fails the basic checks receivers run before they trust a message.
What is pulling it down: SPF record · DMARC enforcement · DKIM signing. See the email deliverability section below.
We have measured deliverability across 675,823 domains. Yours is not among them, which simply means no one has needed to verify an address at it. The score above is from live measurements of your own DNS.
For context, 7.3% of the domains we have measured accept mail to any address, which makes their bounce behaviour unpredictable.
Loaded in a real browser at phone size. This is close to what a visitor and Google's renderer see.

The 28 faults on this report come from 13 underlying causes. Fixing a cause fixes everything under it, so this is ordered by score returned per unit of work, not by severity alone.
The 4 quickest steps here take you from 79 to about 87. That is 8 points for changes measured in minutes and hours, not weeks.
These are all records in your DNS. One editing session fixes every one of them, and it is the change most likely to stop your mail being filtered.
Fixes 4 findings: Exactly one SPF record · DMARC policy is enforced · DKIM signing is configured · BIMI logo published
Resilience and reputation work — lower urgency, but cheap while you are already in these systems.
Fixes 5 findings: Domain can receive email · All page resources load successfully · DNSSEC enabled · CAA record restricts certificate issuance · Software versions are not disclosed
Most local searches happen on a phone. A number that cannot be tapped loses the call at the exact moment someone decided to ring.
Fixes 3 findings: Phone number is tap-to-call · Contact route is obvious · Social profiles linked
One block of structured data in your site template carries all of these. It is what map and 'near me' results are assembled from.
Fixes 3 findings: Opening hours are published · Review rating marked up · Geo coordinates published
These do not share a root cause with anything else on the report.
Fixes 2 findings: Pages carry more than their template · Pages are meaningfully different from each other
Google indexes the mobile version of your site, and these are measured in a real phone-sized browser rather than inferred. A page that scrolls sideways or needs pinching to read loses the visitor before the content matters.
Fixes 2 findings: Tap targets are big enough to hit · Body text is legible on a phone
Rich results — ratings, prices, FAQs, breadcrumbs — are what turn a listing into an advert, and they are decided by whether a few required properties are present. Markup that is invalid or incomplete is work already done that currently earns nothing.
Fixes 2 findings: The entity links out to its profiles · Site-wide search is declared
Internal links decide which of your pages search engines treat as important, and the decision is usually an accident of navigation design. It costs nothing to change and it changes what ranks.
Fixes 1 finding: Each page covers a distinct subject
All set in the same place — your web server or CDN. Half of them are single lines.
Fixes 1 finding: Content Security Policy header
Image and script weight drive every speed metric you are failing. This is the slowest fix here and the one with the longest tail.
Fixes 2 findings: Images declare width and height · Images load lazily
A growing share of questions are answered without a results page. Being quotable is a distribution channel, and it is usually blocked by a plugin default rather than a decision.
Fixes 1 finding: A curated summary is published for assistants
Google's guidance asks who produced a page and why they should be trusted. For advice, health, legal or financial topics an anonymous, undated page competes badly against a named one.
Fixes 1 finding: There is a route to who you are
Images are what Largest Contentful Paint usually measures, and WebP is typically a third smaller than the same JPEG. On image-led pages this is the largest saving available.
Fixes 1 finding: Images are sized for the device
Ranked by severity, then by how much score each returns.
No SPF record at all. Anyone on the internet can send email that appears to come from your domain, and your own mail is far more likely to be filtered.
How to fix: Publish an SPF record listing every service that sends your email.
No DMARC record. You have neither protection against domain spoofing nor any visibility into it.
How to fix: Publish v=DMARC1; p=none; rua=mailto:dmarc@yourdomain to start, then tighten to quarantine.
No tel: link anywhere. The majority of local searches happen on a phone, and a number that cannot be tapped loses calls at exactly the moment someone decided to ring you.
How to fix: Link your number as <a href="tel:+44...">, in the header of every page.
No DKIM keys found on any common selector. Without DKIM your mail cannot prove it was not altered in transit, and DMARC cannot pass on forwarded messages.
How to fix: Enable DKIM in your mail provider and publish the key it gives you.
No opening hours in structured data. Google shows 'Open now' and 'Closes soon' directly in results — without this markup you never qualify for it, and customers can't tell whether to travel to you.
How to fix: Add openingHoursSpecification covering every day of the week.
Whether the connection, certificate and headers hold up.
Missing. Limits where scripts may load from, which is the main defence against injected code and card skimmers.
Add a Content-Security-Policy header, starting in report-only mode.
Secure connection working.
Plain HTTP requests are redirected to the secure version.
All resources load securely.
Certificate valid for another 47 days (expires 2026-12-09).
Negotiated TLSv1.3.
HSTS is set.
MIME sniffing protection is set.
Clickjacking protection is set.
Referrer policy is set.
Whether your mail reaches inboxes or spam folders.
No SPF record at all. Anyone on the internet can send email that appears to come from your domain, and your own mail is far more likely to be filtered.
Publish an SPF record listing every service that sends your email.
No DMARC record. You have neither protection against domain spoofing nor any visibility into it.
Publish v=DMARC1; p=none; rua=mailto:dmarc@yourdomain to start, then tighten to quarantine.
No DKIM keys found on any common selector. Without DKIM your mail cannot prove it was not altered in transit, and DMARC cannot pass on forwarded messages.
Enable DKIM in your mail provider and publish the key it gives you.
No MX records. This domain cannot receive email at all — messages to anyone @ this domain bounce.
Add MX records pointing at your mail provider.
No BIMI record. With DMARC at enforcement you could display your logo next to your messages in Gmail and Apple Mail.
Once DMARC is at quarantine or reject, publish a BIMI record with an SVG logo.
How fast real visitors experience the site.
6 of 14 images declare dimensions. Images without dimensions cause the page to jump as they load, which is what Cumulative Layout Shift measures.
Set width and height attributes on every image.
3 of 14 images use lazy loading.
Add loading="lazy" to images below the fold.
0 of 87 image(s) provide a srcset. Without one, a phone downloads the full desktop image and then scales it down — paying for pixels it never shows.
Add srcset and sizes so each device downloads an appropriate image.
Not available: PageSpeed API returned 429. This usually means the site does not yet have enough Chrome traffic for Google to report field data. Lab measurements below still apply.
Served with gzip compression.
Median response across 12 page(s) was 262 ms.
Homepage HTML is 51 KB.
3 external script file(s) on the homepage.
Pages may be cached by browsers and CDNs.
75 image(s) are served as WebP or AVIF.
The tags, files and signals search engines read first.
The Organization markup has no sameAs links; they are how an assistant confirms which business is yours.
Add sameAs URLs to the Google Business Profile, LinkedIn, X and any other profiles the business owns.
No WebSite markup. With a SearchAction it can give you a search box directly inside your Google listing for branded queries.
Add WebSite JSON-LD, with potentialAction/SearchAction if the site has its own search.
No /llms.txt. It is a short, plain-text map of what a site is and which pages matter — a convention some assistants read to decide what to quote, and cheap to publish. It is not yet a standard anyone is obliged to honour, so treat it as a low-cost bet rather than a requirement.
Publish /llms.txt: a heading, one paragraph describing the business, and a linked list of your most important pages.
Not applicable — this site publishes in a single language and declares no regional or translated versions, so hreflang annotations are not needed. Adding them to a single-language site does nothing.
Not measured — not configured on this instance. Connecting Search Console adds what no crawl can see: the queries this site already appears for, where it ranks, and how many people click. It is read-only and can be disconnected at any time.
Not measured — ranking data is not configured on this instance.
Homepage is open to indexing.
Mobile viewport is declared.
Title is 46 characters.
Sitemap found listing 30 URLs.
Description is 145 characters.
Canonical points at this page.
Structured data found: Answer, Audience, ContactPoint, FAQPage, LegalService, Organization, PostalAddress, Question.
robots.txt present and open to search engines.
Every canonical points at a page that is allowed to be indexed.
Canonical targets all return 200.
No page is both listed in the sitemap and marked noindex.
All structured data blocks are valid JSON.
No page relies on a directive Google is blocked from reading.
Every marked-up entity carries the properties Google requires.
12 of 12 crawled page(s) (100%) can actually be indexed.
Identified as Organization.
Organization or Person markup names the business to assistants.
No canonical points at a page that then canonicals somewhere else.
Every sitemap URL is its own canonical.
All structured data is present in the HTML the server sends.
Every major assistant is allowed to read and cite these pages.
FAQPage or HowTo markup gives assistants a structured answer to cite.
BreadcrumbList markup is present.
Every crawled page sits within four levels of the homepage (deepest: 2).
6 Open Graph tags found.
URLs use lowercase, hyphenated, extension-free paths.
0 of 12 crawled URLs carry query parameters other than tracking tags.
Language attribute present.
4 twitter: tag(s) found.
186 structured data object(s) across 12 page(s): Answer, Article, Audience, BreadcrumbList, ContactPoint, FAQPage, LegalService, ListItem, Organization, PostalAddress, and others.
No model-training crawler is blocked, so this content may be used to train future models. This is a business decision rather than an SEO one, and it is separate from being cited in answers: refusing training does not remove you from AI results, and allowing it does not put you in them.
Whether pages are unique, linked and crawlable.
Across 11 page(s), the median page is 29% its own content and the rest navigation, footer and legal text. 11 page(s) carry under 120 words of their own, or less than a third. A word count that includes the template hides this — those pages look substantial and read as empty, which is what a search engine comparing them to a competitor sees. Every page of this type that was checked has this fault, and your sitemap lists 11 pages built from the same template (/stati/{slug}) — so this is most likely one template fix affecting up to 11 pages, not 3.
1 own / 20 total (5%) https://explore-bulgaria.com/konsultaciya/
1 own / 20 total (5%) https://explore-bulgaria.com/dogovor-i-oplata/
2 own / 25 total (8%) https://explore-bulgaria.com/proverit-korni/
2 own / 21 total (10%) https://explore-bulgaria.com/stati/
3 own / 26 total (12%) https://explore-bulgaria.com/
8 own / 28 total (29%) https://explore-bulgaria.com/pmzh-bolgarii/Add substance to the page body rather than the template — for product pages, specifics nobody else has; for category pages, an explanation of what the category is for.
1 pair(s) of pages are 80% or more identical once the template is removed. Google indexes one and treats the rest as duplicates, so the work spent producing them earns nothing, and whichever it picks is not necessarily the one you would choose. 1 of the 3 page(s) checked from /stati/{slug} have this fault, so it is a page-level problem rather than a template one — the other pages of that type are fine.
100% identical https://explore-bulgaria.com/stati/mozhno-li-kupit-grazhdanstvo-bolgarii/ https://explore-bulgaria.com/stati/dvojnoe-grazhdanstvo-rossii-i-bolgarii/
Differentiate them or consolidate them. Where the pages exist for variants — sizes, colours, nearby towns — canonicalise the variants to one page rather than publishing near-copies.
10 pair(s) of pages appear to cover the same subject, judged from their titles and headings. Two pages competing for one query split the links and relevance that should accumulate on one, and Google alternates between them — so neither settles into a stable position. Confirm against Search Console, which shows exactly which page it chooses. 1 of the 4 page(s) checked from /{slug} have this fault, so it is a page-level problem rather than a template one — the other pages of that type are fine.
Гражданство Болгарии по корням | Legal Service https://explore-bulgaria.com/ https://explore-bulgaria.com/o-kompanii/ Гражданство Болгарии по корням | Legal Service https://explore-bulgaria.com/ https://explore-bulgaria.com/kontakty/ Гражданство Болгарии по корням | Legal Service https://explore-bulgaria.com/ https://explore-bulgaria.com/stati/ Гражданство Болгарии по корням | Legal Service https://explore-bulgaria.com/ https://explore-bulgaria.com/pmzh-bolgarii/
Decide which page owns the subject. Merge the weaker one into it and redirect, or narrow each to a genuinely different question.
No link to an about, team or contact page was found in the pages crawled. These are the pages both people and search engines use to decide whether a site belongs to a real business, and their absence is one of the strongest signals of a site that is not worth trusting.
Link an About and a Contact page from your main navigation or footer.
All 12 crawled pages have distinct titles.
All 12 crawled pages are reachable by internal links.
All 12 crawled pages carry substantial content.
0 of 12 crawled pages have no meta description.
0 of 87 images across the crawl have no alt attribute. Alt text is how search engines read images and how screen readers describe them.
Every crawled page carries at least three internal links, so navigation is consistently rendered.
All 12 crawled pages returned successfully.
No page answers 200 while telling the visitor nothing was found.
19 link(s) appear on nearly every page — the site-wide navigation, which is where most internal authority is allocated.
Every page's body covers the subject its title and heading announce.
All 12 descriptions found are distinct.
Authorship is declared.
0 of 505 internal link(s) use text like 'click here' or no text at all.
Every crawled page is linked from at least one other page.
No phrase dominates a page's text.
12 of 12 crawled pages declare a date; the most recent is 2026-09-24.
0 of 12 pages do not have exactly one H1 heading.
No multi-step redirects found.
Sitemap lists 30 URLs; we reached 12 by crawling. 18 sitemap URLs were not linked from the pages we visited.
Every crawled page links onward.
Pages receive 9.5 internal links on average across the crawl, with no single page absorbing most of them.
Publisher is declared in structured data.
Internal links concentrate authority on the pages below, in order. This is the site's own ranking of itself, derived from how it links — read it against what the business actually sells, because search engines read it the same way. Only the crawled sample is modelled, so this describes the navigation rather than every page.
The terms that distinguish each page from the others on this site — not the most frequent words, but the ones this page uses and the others do not. Read them as what a search engine would take the page to be about, and check that it matches what it is for.
What Google needs to place you in map results.
No tel: link anywhere. The majority of local searches happen on a phone, and a number that cannot be tapped loses calls at exactly the moment someone decided to ring you.
Link your number as <a href="tel:+44...">, in the header of every page.
No opening hours in structured data. Google shows 'Open now' and 'Closes soon' directly in results — without this markup you never qualify for it, and customers can't tell whether to travel to you.
Add openingHoursSpecification covering every day of the week.
We found no phone link, email link or contact page in the crawl. Every visit that would have become an enquiry is being lost.
Put a phone number and a contact link in the header and footer of every page.
No review markup. Genuine customer reviews marked up correctly can show star ratings in search results, which materially lifts clicks.
Mark up genuine reviews with AggregateRating. Only mark up reviews that are real and visible on the same page — fabricated ratings breach both Google's policies and UK consumer law.
No geo coordinates, so Google places you by address lookup alone.
Add a GeoCoordinates block with latitude and longitude.
No social profiles linked. These are entity signals Google uses to confirm you are a real, established business.
Link your profiles, and add them to sameAs in your Organization markup.
Structured data identifies this as: LegalService.
Address published as structured PostalAddress data.
Telephone published in structured data.
A map or directions link is present.
DNS, hosting and delivery configuration.
DNSSEC is not enabled, so DNS answers for your domain can't be cryptographically verified.
Enable DNSSEC at your DNS provider.
No CAA record, so any certificate authority may issue certificates for your domain.
Publish a CAA record naming the certificate authority you use.
Response headers advertise exact software versions, which tells an attacker precisely which exploits to try.
nginx/1.24.0 (Ubuntu)
Suppress Server and X-Powered-By version details.
Not checked: the blocklists declined queries from this resolver, so reputation could not be confirmed either way. This is excluded from your score rather than guessed at.
Not measured — no log file supplied. Server logs are the only source that shows what Googlebot actually fetched rather than what it could fetch: which pages it spends its crawl on, which it has never asked for, and what it receives when it does.
Not measured — no whole-site crawl has been run for this domain. The audit above reasons from a sample of pages chosen to cover each template, which describes how the site is built. It cannot say how many of the site's pages are indexable, which templates are thin across every instance, or what sits too deep to be crawled — those are counts, and a sample cannot produce one.
2 nameserver(s) configured.
Checked 2 subdomain(s); none point at a cloud service that has released them.
Certificate transparency lists 2 hostname(s) for this domain and none of the development-style hosts are both live and open to indexing.
We generated and checked 60 plausible misspellings and variants of your domain. None is registered.
No filter, session or calendar URLs that would generate an unbounded space were found.
Every page was reached directly or in a single hop.
0 of 12 URL(s) followed during this crawl returned a redirect or an error (0%).
Your certificate covers only your own domain.
Every sitemap file is within the 50,000 URL and 50 MB limits.
30 of 30 sitemap URL(s) carry a lastmod date across 2 distinct value(s).
0 internal link(s) are marked nofollow.
2 hostname(s) appear in this domain's public certificate history, issued by Let's Encrypt, cPanel.
Served from AS400992 (ZHOUYISAT-COMMUNICATIONS - ZhouyiSat Communications), announced in 185.219.7.0/24 — a block of 256 addresses.
12 page(s) were examined, chosen to cover 6 of the 6 distinct page templates found across 30 known URLs. Pages are sampled by template rather than in sitemap order, because the first pages of a sitemap are usually all the same kind — a sample of one template would describe that template rather than the site. Findings below therefore apply to the templates listed, and a fault in a template is normally a fault on every page built from it.
Who links to this site, with what text, and how that compares.
Not measured — off-page data is not configured on this instance.
The site loaded in a real browser, the way a visitor and a crawler get it.
1 resource(s) failed to load. Missing images and stylesheets are visible to customers; missing scripts break features.
https://mc.yandex.ru/metrika/tag.js?id=112959492 (failed)
Fix or remove these URLs.
39 of 55 tappable element(s) are smaller than 48x48 pixels, and 6 sit closer than 8 pixels to a neighbour. On a phone that means links and buttons that are hard to hit without zooming, and mis-taps on a checkout or contact button cost conversions directly.
LEGAL SERVICE Поиск болгарских корней и (212x42) Открыть меню (42x38) Написать в WhatsApp (42x42) Запросить предварительный разбор (231x40) Условия получения гражданства (209x40)
Give tappable elements at least 48x48 CSS pixels and 8 pixels of spacing — usually padding on the link rather than a bigger font.
32 of 155 text block(s) render below 12px on a mobile viewport. Text that small forces pinch-zooming, which is the single most common reason a visitor leaves a page on a phone before reading it.
Set body text to at least 16px, and never below 12px.
The served HTML contains 1225 words and the rendered page 1227 — the content is present before JavaScript runs.
What the server sends a phone matches what it sends a desktop browser.
The canonical and robots directives are the same before and after JavaScript runs.
Measured 1.8s on a simulated phone viewport. Google's threshold for 'good' is 2.5s.
52 links in the served HTML, 52 after rendering — navigation is discoverable.
Cumulative Layout Shift measured at 0.000 (good is 0.1 or less).
The page loaded without JavaScript errors.
The page fits the mobile viewport with no sideways scrolling.
0 long JavaScript task(s) blocked the main thread while loading.
The page made 29 network requests to load.
| Final URL | https://explore-bulgaria.com/ |
|---|---|
| Host IPs | 185.219.7.25 |
| Pages crawled | 12 of 12 attempted |
| Sitemap URLs | 30 |
| Nameservers | opal.ns.cloudflare.com, west.ns.cloudflare.com |
| Mail servers | none |
| DKIM selectors | none found |
| TLS | TLSv1.3 · TLS_AES_256_GCM_SHA384 · issued by Let's Encrypt |
| Detected stack | custom / origin / Cloudflare |
| Browser render | Camoufox (stealth Firefox) · 6.2s · 1227 words, 52 links after JavaScript |
BounceZero Ltd does this work: technical remediation, local SEO and email deliverability. Tell us what you want fixed and we'll reply with what it takes. No call required, no obligation.
We re-audit on a schedule and email you only when a check that was passing starts failing. That is usually a recent change to the site or its DNS, and it is findable while still fresh. No digest, no newsletter.
Monitoring means repeatedly fetching your site and emailing about it, so we ask you to prove you own explore-bulgaria.com first.