Your position
15th percentile of 40 sites audited. The average site scores 73, the median 73.
Website audit report
46 issues found across 117 checks. Nothing critical.
Scanned 2026-10-09T11:15:32+00:00 · 1 host IP · cert expires in 84 days
This report is not offered to search engines. It is reachable by link only. If you own needguide.net you can publish or delete it.
Measured against every site SEOking has audited: a corpus that grows with each scan and cannot be reconstructed after the fact.
15th percentile of 40 sites audited. The average site scores 73, the median 73.
68 is the average for the 9 sites we have audited on custom / origin / other-dns, and you are below it.
Sitemap matches the real site
100% of the sites we have audited get this right and yours does not. Of everything on this report, it is the fault that most sets you apart from your competition, which makes it the first thing worth fixing.
Our own measure of whether your domain is trusted by the systems that decide if mail reaches an inbox. No other website audit reports this. It is built from BounceZero's deliverability platform.
Multiple authentication faults. Expect filtering and spoofing risk.
What is pulling it down: DMARC enforcement · DKIM signing. See the email deliverability section below.
We have measured deliverability across 532,475 domains. Yours is not among them, which simply means no one has needed to verify an address at it. The score above is from live measurements of your own DNS.
For context, 6.7% of the domains we have measured accept mail to any address, which makes their bounce behaviour unpredictable.
The 46 faults on this report come from 16 underlying causes. Fixing a cause fixes everything under it, so this is ordered by score returned per unit of work, not by severity alone.
The 9 quickest steps here take you from 65 to about 81. That is 16 points for changes measured in minutes and hours, not weeks.
These are all records in your DNS. One editing session fixes every one of them, and it is the change most likely to stop your mail being filtered.
Fixes 6 findings: SPF ends with a fail qualifier · DMARC policy is enforced · DKIM signing is configured · MTA-STS policy published · TLS reporting enabled · BIMI logo published
All set in the same place — your web server or CDN. Half of them are single lines.
Fixes 7 findings: HTTP redirects to HTTPS · HSTS header · Content Security Policy header · Cookies are protected · MIME sniffing protection header · Clickjacking protection header · Referrer policy header
Rich results — ratings, prices, FAQs, breadcrumbs — are what turn a listing into an advert, and they are decided by whether a few required properties are present. Markup that is invalid or incomplete is work already done that currently earns nothing.
Fixes 6 findings: The business is a describable entity · Content is marked up to be answered · The business is identified in structured data · Breadcrumbs are marked up · Site-wide search is declared · The entity links out to its profiles
A subdomain pointing at a service that released it can be claimed by anyone, who then publishes on your domain. Deleting the record costs nothing and closes it immediately.
Fixes 1 finding: No lookalike domain can send mail as your brand
Internal links decide which of your pages search engines treat as important, and the decision is usually an accident of navigation design. It costs nothing to change and it changes what ranks.
Fixes 4 findings: Every page is linked from another · Every page is linked from somewhere · No dead-end pages · Internal authority is spread, not pooled
These do not share a root cause with anything else on the report.
Fixes 3 findings: Pages carry more than their template · Navigation is present on every page · The writing is readable
Your title and description are the advert Google runs for you, free, every time someone searches.
Fixes 4 findings: Page titles are unique · Structured data present · Social preview configured · Link previews are configured for X/Twitter
Depth decides how much authority reaches a page and how often it is recrawled; parameters and capitals manufacture duplicate URLs that compete with the originals.
Fixes 2 findings: URLs are readable · Content is not served behind query parameters
One misconfigured cache header suppresses browser caching, CDN caching and compression at once. Fixing it speeds up every page for every visitor, including the ones your ads paid for.
Fixes 1 finding: Browser caching is allowed
These decide whether your pages can appear at all. Nothing else on this report matters until they are right.
Fixes 1 finding: Homepage canonical is correct
Resilience and reputation work — lower urgency, but cheap while you are already in these systems.
Fixes 3 findings: DNSSEC enabled · CAA record restricts certificate issuance · Software versions are not disclosed
Google's guidance asks who produced a page and why they should be trusted. For advice, health, legal or financial topics an anonymous, undated page competes badly against a named one.
Fixes 2 findings: There is a route to who you are · A publisher is declared in structured data
Image and script weight drive every speed metric you are failing. This is the slowest fix here and the one with the longest tail.
Fixes 2 findings: Images declare width and height · Images load lazily
Images are what Largest Contentful Paint usually measures, and WebP is typically a third smaller than the same JPEG. On image-led pages this is the largest saving available.
Fixes 2 findings: Images have alt text · Images are sized for the device
lastmod is how Google decides what to recrawl first. A timestamp that is identical on every URL is a build date, and Google learns to ignore lastmod for the whole site once it notices.
Fixes 1 finding: Sitemap matches the real site
A growing share of questions are answered without a results page. Being quotable is a distribution channel, and it is usually blocked by a plugin default rather than a decision.
Fixes 1 finding: A curated summary is published for assistants
Ranked by severity, then by how much score each returns.
No DMARC record. You have neither protection against domain spoofing nor any visibility into it.
How to fix: Publish v=DMARC1; p=none; rua=mailto:dmarc@yourdomain to start, then tighten to quarantine.
No DKIM keys found on any common selector. Without DKIM your mail cannot prove it was not altered in transit, and DMARC cannot pass on forwarded messages.
How to fix: Enable DKIM in your mail provider and publish the key it gives you.
We generated and checked 60 plausible misspellings and variants of your domain. 1 of the 2 registered variants has mail servers configured, so it is technically able to send email that reads as yours to anyone skimming a sender address. Many such domains are entirely unrelated businesses that happen to have a similar name — this is a risk to be aware of and to defend against, not evidence that anyone is doing anything.
needguide.org [mail configured] needguide.com
How to fix: Publish DMARC at enforcement so mail claiming to be your domain is rejected outright — that is the defence that works regardless of who owns a lookalike. Then register the closest unregistered variants; they cost a few pounds a year and are the cheapest brand protection available.
Across 6 page(s), the median page is 100% its own content and the rest navigation, footer and legal text. 6 page(s) carry under 120 words of their own, or less than a third. A word count that includes the template hides this — those pages look substantial and read as empty, which is what a search engine comparing them to a competitor sees. This affects every checked page of 2 templates (/gallery.php, /view_guide_tours.php), covering up to 73 pages in your sitemap. Fixing the templates fixes all of them at once.
19 own / 37 total (51%) https://needguide.net/gallery.php?user_id=935 103 own / 105 total (98%) https://needguide.net/about_us.php 105 own / 107 total (98%) https://needguide.net/view_city.php?city=%D0%A0%D0%B8%D0%BC 22 own / 22 total (100%) https://needguide.net/view_guide_tours.php?user_id=23119 35 own / 35 total (100%) https://needguide.net/Asia/China/tours/ 56 own / 56 total (100%) https://needguide.net/Asia/South_Korea/tours/
How to fix: Add substance to the page body rather than the template — for product pages, specifics nobody else has; for category pages, an explanation of what the category is for.
This site tells browsers never to store anything. Every returning visitor re-downloads the entire page. This belongs on cart and checkout pages only.
cache-control: no-store, no-cache, must-revalidate
How to fix: Restrict no-store to authenticated pages and let everything else cache.
Whether the connection, certificate and headers hold up.
http:// does not redirect to https://, so the insecure version of every page stays reachable and can be indexed as duplicate content.
Add a permanent 301 redirect from http:// to https://.
Missing. Tells browsers to only ever connect over HTTPS.
Send Strict-Transport-Security: max-age=31536000; includeSubDomains
Missing. Limits where scripts may load from, which is the main defence against injected code and card skimmers.
Add a Content-Security-Policy header, starting in report-only mode.
Cookies are set without the Secure and/or HttpOnly flags, so they can be read by scripts or sent over insecure connections.
PHPSESSID=47bc0572cdb5205af8fb7aa7a4dad354; path=/
Add Secure, HttpOnly and SameSite to every cookie you set.
Missing. Stops browsers guessing file types.
Send X-Content-Type-Options: nosniff
Missing. Stops your site being framed inside someone else's.
Send X-Frame-Options: SAMEORIGIN, or use CSP frame-ancestors.
Missing. Controls how much of your URL is leaked to other sites.
Send Referrer-Policy: strict-origin-when-cross-origin
Secure connection working.
All resources load securely.
Certificate valid for another 84 days (expires 2027-01-02).
Negotiated TLSv1.3.
Whether your mail reaches inboxes or spam folders.
No DMARC record. You have neither protection against domain spoofing nor any visibility into it.
Publish v=DMARC1; p=none; rua=mailto:dmarc@yourdomain to start, then tighten to quarantine.
No DKIM keys found on any common selector. Without DKIM your mail cannot prove it was not altered in transit, and DMARC cannot pass on forwarded messages.
Enable DKIM in your mail provider and publish the key it gives you.
Ends in ?all (neutral), which asserts nothing.
v=spf1 include:spf.mailjet.com redirect=beget.com ?all
End the record with ~all, or -all once you are confident every sender is listed.
No MTA-STS policy, so mail to you can be delivered unencrypted if an attacker strips TLS.
Publish an MTA-STS policy and the _mta-sts TXT record.
No TLS-RPT record, so delivery-encryption failures go unreported.
Publish a _smtp._tls TXT record with a reporting address.
No BIMI record. With DMARC at enforcement you could display your logo next to your messages in Gmail and Apple Mail.
Once DMARC is at quarantine or reject, publish a BIMI record with an SVG logo.
2 mail server(s) configured.
The record forces about 2 DNS lookups. Comfortably within the limit of 10.
One SPF record, as required.
How fast real visitors experience the site.
This site tells browsers never to store anything. Every returning visitor re-downloads the entire page. This belongs on cart and checkout pages only.
cache-control: no-store, no-cache, must-revalidate
Restrict no-store to authenticated pages and let everything else cache.
0 of 15 images declare dimensions. Images without dimensions cause the page to jump as they load, which is what Cumulative Layout Shift measures.
Set width and height attributes on every image.
0 of 15 images use lazy loading.
Add loading="lazy" to images below the fold.
0 of 654 image(s) provide a srcset. Without one, a phone downloads the full desktop image and then scales it down — paying for pixels it never shows.
Add srcset and sizes so each device downloads an appropriate image.
Not available: PageSpeed is rate-limiting or unavailable; not measured (retrying in 299s). This usually means the site does not yet have enough Chrome traffic for Google to report field data. Lab measurements below still apply.
Served with gzip compression.
Median response across 12 page(s) was 305 ms.
Homepage HTML is 47 KB.
1 external script file(s) on the homepage.
528 image(s) are served as WebP or AVIF.
The tags, files and signals search engines read first.
No Organization or Person markup. An assistant that cannot name the entity behind the site will describe the business from fragments, or not at all, which is how a competitor becomes the answer.
Add Organization JSON-LD with name, url, logo and sameAs links, so the description an assistant gives of the business is the one you wrote.
No FAQPage, HowTo or QAPage markup. When an assistant answers a question about this service, the page has nothing structured to be cited from, so the citation goes to whoever wrote the answer block.
Add FAQPage schema for the questions the page answers (the answer must appear as visible text, not only in the markup) and HowTo for process content.
No Organization markup. This is what Google assembles a knowledge panel from — the box with your logo, name and links that appears beside branded searches — and what connects your site to your social profiles. Without it Google infers your identity from third parties instead of from you.
Add Organization JSON-LD with name, url, logo and sameAs links to your social profiles.
No canonical tag, so duplicate URLs of the same page can compete.
Set a self-referencing canonical on every page.
No structured data. Google is reading your page as plain text and cannot qualify you for any rich result.
Add JSON-LD for Organization and your primary content type.
No BreadcrumbList markup. Google replaces the raw URL in your listing with a readable breadcrumb trail when this is present, which is more legible and measurably more clickable — and it is one of the cheapest rich results to earn.
Add BreadcrumbList JSON-LD to every page below the homepage.
No entity markup to attach profiles to.
Add sameAs URLs to the Google Business Profile, LinkedIn, X and any other profiles the business owns.
No Open Graph tags, so links shared on social or WhatsApp show no image, title or description.
Add og:title, og:description and og:image.
11 URL(s) contain capitals, spaces, underscores or a file extension. Google treats /Page and /page as different URLs, so capitals invite duplicates, and underscores are not read as word separators the way hyphens are. This affects every checked page of 3 templates (/view_tour.php, /gallery.php, /view_guide_tours.php), covering up to 318 pages in your sitemap. Fixing the templates fixes all of them at once.
https://needguide.net/view_tour.php?tour_id=44624 https://needguide.net/gallery.php?user_id=935 https://needguide.net/view_guide_tours.php?user_id=23119 https://needguide.net/about_us.php https://needguide.net/view_guide.php?user_id=1033
Use lowercase words separated by hyphens, with no file extension. Redirect the old URLs to the new ones.
5 of 12 crawled URLs carry query parameters other than tracking tags. Parameters generate near-identical URLs that compete with each other and consume crawl budget, which is how faceted navigation quietly produces thousands of duplicate pages.
https://needguide.net/view_tour.php?tour_id=44624 https://needguide.net/gallery.php?user_id=935 https://needguide.net/view_guide_tours.php?user_id=23119 https://needguide.net/view_guide.php?user_id=1033 https://needguide.net/view_city.php?city=%D0%A0%D0%B8%D0%BC
Serve content on clean paths and canonicalise parameterised variants back to them.
No WebSite markup. With a SearchAction it can give you a search box directly inside your Google listing for branded queries.
Add WebSite JSON-LD, with potentialAction/SearchAction if the site has its own search.
No twitter:card tags. Open Graph covers most platforms, but X falls back to a bare link without them, and a link with no image or title is measurably less likely to be opened.
Add twitter:card ("summary_large_image"), twitter:title and twitter:description.
No /llms.txt. It is a short, plain-text map of what a site is and which pages matter — a convention some assistants read to decide what to quote, and cheap to publish. It is not yet a standard anyone is obliged to honour, so treat it as a low-cost bet rather than a requirement.
Publish /llms.txt: a heading, one paragraph describing the business, and a linked list of your most important pages.
Not applicable — this site publishes in a single language and declares no regional or translated versions, so hreflang annotations are not needed. Adding them to a single-language site does nothing.
Not measured — not configured on this instance. Connecting Search Console adds what no crawl can see: the queries this site already appears for, where it ranks, and how many people click. It is read-only and can be disconnected at any time.
Not measured — ranking data is not configured on this instance.
Homepage is open to indexing.
Mobile viewport is declared.
Title is 28 characters.
Sitemap found listing 319 URLs.
Description is 142 characters.
robots.txt present and open to search engines.
Every canonical points at a page that is allowed to be indexed.
Canonical targets all return 200.
No page is both listed in the sitemap and marked noindex.
All structured data blocks are valid JSON.
No page relies on a directive Google is blocked from reading.
Every marked-up entity carries the properties Google requires.
12 of 12 crawled page(s) (100%) can actually be indexed.
No canonical points at a page that then canonicals somewhere else.
Every sitemap URL is its own canonical.
Every major assistant is allowed to read and cite these pages.
Every crawled page sits within four levels of the homepage (deepest: 3).
Language attribute present.
No model-training crawler is blocked, so this content may be used to train future models. This is a business decision rather than an SEO one, and it is separate from being cited in answers: refusing training does not remove you from AI results, and allowing it does not put you in them.
Whether pages are unique, linked and crawlable.
Across 6 page(s), the median page is 100% its own content and the rest navigation, footer and legal text. 6 page(s) carry under 120 words of their own, or less than a third. A word count that includes the template hides this — those pages look substantial and read as empty, which is what a search engine comparing them to a competitor sees. This affects every checked page of 2 templates (/gallery.php, /view_guide_tours.php), covering up to 73 pages in your sitemap. Fixing the templates fixes all of them at once.
19 own / 37 total (51%) https://needguide.net/gallery.php?user_id=935 103 own / 105 total (98%) https://needguide.net/about_us.php 105 own / 107 total (98%) https://needguide.net/view_city.php?city=%D0%A0%D0%B8%D0%BC 22 own / 22 total (100%) https://needguide.net/view_guide_tours.php?user_id=23119 35 own / 35 total (100%) https://needguide.net/Asia/China/tours/ 56 own / 56 total (100%) https://needguide.net/Asia/South_Korea/tours/
Add substance to the page body rather than the template — for product pages, specifics nobody else has; for category pages, an explanation of what the category is for.
2 pages share 1 duplicated title(s). Google treats near-identical pages as competing with each other, and usually indexes only one.
2× Экскурсии | Гиды | Нужен Гид
Give every page a title describing that page specifically.
2 of 12 crawled pages had no internal link pointing at them. Search engines discover pages by following links, so an unlinked page is found late or not at all — and passes on none of its authority.
Link these from a relevant parent page, your navigation, or a hub page.
2 crawled page(s) are not linked from any other page we fetched. A page reachable only from a sitemap receives no internal authority at all, and is crawled rarely — it can rank, but it starts from nothing and stays there.
needguide.net/gallery.php needguide.net/view_guide_tours.php
Link them from a relevant hub page or from navigation, using the subject as the link text.
629 of 654 images across the crawl have no alt attribute. Alt text is how search engines read images and how screen readers describe them.
Describe each meaningful image in its alt attribute.
No link to an about, team or contact page was found in the pages crawled. These are the pages both people and search engines use to decide whether a site belongs to a real business, and their absence is one of the strongest signals of a site that is not worth trusting.
Link an About and a Contact page from your main navigation or footer.
Median reading ease is 21.6 — very difficult. 2 page(s) score below 40, which is the range of academic and legal writing. That is correct for a terms page and costly on anything meant to sell, because the reader who bounces was the one who arrived.
10.6 (very difficult) https://needguide.net/view_city.php?city=%D0%A0%D0%B8%D0%BC 21.6 (very difficult) https://needguide.net/about_us.php
Shorter sentences and plainer words in the pages that convert. Legal pages can stay as they are.
At least one page carries fewer than three internal links, which usually means the navigation failed to render there.
Make sure header and footer navigation render server-side on every template, including error and landing pages.
Sitemap lists 4 URLs; we reached 12 by crawling. 0 sitemap URLs were not linked from the pages we visited.
Make sure important pages are reachable by internal links, not only listed in the sitemap.
1 page(s) contain no internal links at all. Authority arrives and stops there, and a visitor who lands on one has nowhere to go.
Add contextual links, or at minimum a navigation and footer, to every page.
One page receives more than half of all internal links found. That concentrates authority in one place while the rest of the site is starved of it.
Link deliberately to the pages you want to rank, not only to the same one from every template.
No publisher in your structured data. It ties each page back to the organisation that stands behind it, which is what carries trust from your brand to an individual article.
Add a publisher property naming your Organization, with its logo.
Not measured — no page declares a publication or modification date, so how recently the site was maintained cannot be determined. That is normal for a brochure site and worth fixing for anything article-based.
All 12 crawled pages carry substantial content.
0 of 12 crawled pages have no meta description.
No two crawled pages share substantially the same text.
All 12 crawled pages returned successfully.
No page answers 200 while telling the visitor nothing was found.
1 link(s) appear on nearly every page — the site-wide navigation, which is where most internal authority is allocated.
No two crawled pages appear to target the same subject.
Every page's body covers the subject its title and heading announce.
All 12 descriptions found are distinct.
Authorship is declared.
1 of 499 internal link(s) use text like 'click here' or no text at all.
No phrase dominates a page's text.
0 of 12 pages do not have exactly one H1 heading.
No multi-step redirects found.
Internal links concentrate authority on the pages below, in order. This is the site's own ranking of itself, derived from how it links — read it against what the business actually sells, because search engines read it the same way. Only the crawled sample is modelled, so this describes the navigation rather than every page.
The terms that distinguish each page from the others on this site — not the most frequent words, but the ones this page uses and the others do not. Read them as what a search engine would take the page to be about, and check that it matches what it is for.
What Google needs to place you in map results.
Not applicable — nothing on this site indicates a physical location customers visit: no address, phone link, opening hours, map or local business markup. Local search checks are skipped and do not affect the score. If you do serve customers from premises, publishing an address and phone number is the place to start.
DNS, hosting and delivery configuration.
We generated and checked 60 plausible misspellings and variants of your domain. 1 of the 2 registered variants has mail servers configured, so it is technically able to send email that reads as yours to anyone skimming a sender address. Many such domains are entirely unrelated businesses that happen to have a similar name — this is a risk to be aware of and to defend against, not evidence that anyone is doing anything.
needguide.org [mail configured] needguide.com
Publish DMARC at enforcement so mail claiming to be your domain is rejected outright — that is the defence that works regardless of who owns a lookalike. Then register the closest unregistered variants; they cost a few pounds a year and are the cheapest brand protection available.
DNSSEC is not enabled, so DNS answers for your domain can't be cryptographically verified.
Enable DNSSEC at your DNS provider.
No CAA record, so any certificate authority may issue certificates for your domain.
Publish a CAA record naming the certificate authority you use.
Response headers advertise exact software versions, which tells an attacker precisely which exploits to try.
PHP/8.2.33
Suppress Server and X-Powered-By version details.
Not checked: the blocklists declined queries from this resolver, so reputation could not be confirmed either way. This is excluded from your score rather than guessed at.
Not measured — the certificate transparency log did not answer in time.
Not measured — no log file supplied. Server logs are the only source that shows what Googlebot actually fetched rather than what it could fetch: which pages it spends its crawl on, which it has never asked for, and what it receives when it does.
Not measured — no whole-site crawl has been run for this domain. The audit above reasons from a sample of pages chosen to cover each template, which describes how the site is built. It cannot say how many of the site's pages are indexable, which templates are thin across every instance, or what sits too deep to be crawled — those are counts, and a sample cannot produce one.
4 nameserver(s) configured.
Checked 0 subdomain(s); none point at a cloud service that has released them.
No filter, session or calendar URLs that would generate an unbounded space were found.
Every page was reached directly or in a single hop.
0 of 12 URL(s) followed during this crawl returned a redirect or an error (0%).
Your certificate covers only your own domain.
Every sitemap file is within the 50,000 URL and 50 MB limits.
319 of 319 sitemap URL(s) carry a lastmod date across 291 distinct value(s).
1 internal link(s) are marked nofollow.
Served from AS198610 (BEGET-AS Beget LLC), announced in 45.130.41.0/24 — a block of 256 addresses.
12 page(s) were examined, chosen to cover 11 of the 31 distinct page templates found across 319 known URLs. Pages are sampled by template rather than in sitemap order, because the first pages of a sitemap are usually all the same kind — a sample of one template would describe that template rather than the site. Findings below therefore apply to the templates listed, and a fault in a template is normally a fault on every page built from it.
Who links to this site, with what text, and how that compares.
Not measured — off-page data is not configured on this instance.
The site loaded in a real browser, the way a visitor and a crawler get it.
Not measured: the browser could not load this site (TimeoutError). Everything else in this report is unaffected — these checks are excluded from your score rather than guessed at.
What the server sends a phone matches what it sends a desktop browser.
| Final URL | https://needguide.net/ |
|---|---|
| Host IPs | 45.130.41.123 |
| Pages crawled | 12 of 12 attempted |
| Sitemap URLs | 319 |
| Nameservers | ns1.beget.com, ns1.beget.pro, ns2.beget.com, ns2.beget.pro |
| Mail servers | mx1.beget.com, mx2.beget.com |
| DKIM selectors | none found |
| Mail server IPs | 5.101.158.68, 185.78.30.95, 185.78.30.126 |
| TLS | TLSv1.3 · TLS_AES_256_GCM_SHA384 · issued by Let's Encrypt |
| Detected stack | custom / origin / other-dns · Google Analytics 4 |
| Browser render | Not run: the browser could not load this site (TimeoutError) |
BounceZero Ltd does this work: technical remediation, local SEO and email deliverability. Tell us what you want fixed and we'll reply with what it takes. No call required, no obligation.
We re-audit on a schedule and email you only when a check that was passing starts failing. That is usually a recent change to the site or its DNS, and it is findable while still fresh. No digest, no newsletter.
Monitoring means repeatedly fetching your site and emailing about it, so we ask you to prove you own needguide.net first.