Regressed: was passing, now failing
- Noindex directives are readable
- Most crawled pages are indexable
- Homepage canonical is correct
- Every page is linked from somewhere
- Sitemap lists canonical pages only
- Every page is linked from another
Website audit report
26 issues found across 127 checks. Nothing critical.
Scanned 2026-10-12T23:50:59+00:00 · 4 host IPs · cert expires in 65 days
This report is not offered to search engines. It is reachable by link only. If you own novadose.com you can publish or delete it.
A few checks regressed since the last audit. None are critical, but they were passing before. Score -3.
Measured against every site SEOking has audited: a corpus that grows with each scan and cannot be reconstructed after the fact.
69th percentile of 42 sites audited. The average site scores 73, the median 73.
Sitemap lists canonical pages only
100% of the sites we have audited get this right and yours does not. Of everything on this report, it is the fault that most sets you apart from your competition, which makes it the first thing worth fixing.
Our own measure of whether your domain is trusted by the systems that decide if mail reaches an inbox. No other website audit reports this. It is built from BounceZero's deliverability platform.
Working, but with faults that measurably cost you inbox placement.
What is pulling it down: DMARC enforcement. See the email deliverability section below.
We have measured deliverability across 542,330 domains. Yours is not among them, which simply means no one has needed to verify an address at it. The score above is from live measurements of your own DNS.
For context, 6.7% of the domains we have measured accept mail to any address, which makes their bounce behaviour unpredictable.
Oldest on the left. Every re-run is kept.
The 26 faults on this report come from 13 underlying causes. Fixing a cause fixes everything under it, so this is ordered by score returned per unit of work, not by severity alone.
The 7 quickest steps here take you from 79 to about 90. That is 11 points for changes measured in minutes and hours, not weeks.
These are all records in your DNS. One editing session fixes every one of them, and it is the change most likely to stop your mail being filtered.
Fixes 5 findings: DMARC policy is enforced · DMARC reports are collected · MTA-STS policy published · TLS reporting enabled · BIMI logo published
Each of these pages passes every check on its own and still cannot be indexed, because two of its signals contradict each other. This is the usual answer to 'the page looks fine, why isn't it in Google' — and it is normally one template fix, not one per page.
Fixes 3 findings: Noindex directives are readable · Most crawled pages are indexable · Sitemap lists canonical pages only
Internal links decide which of your pages search engines treat as important, and the decision is usually an accident of navigation design. It costs nothing to change and it changes what ranks.
Fixes 4 findings: Navigation promotes pages that earn money · Every page is linked from another · Each page covers a distinct subject · Every page is linked from somewhere
A subdomain pointing at a service that released it can be claimed by anyone, who then publishes on your domain. Deleting the record costs nothing and closes it immediately.
Fixes 1 finding: No lookalike domain can send mail as your brand
These decide whether your pages can appear at all. Nothing else on this report matters until they are right.
Fixes 2 findings: No unexpected noindex pages · Homepage canonical is correct
These do not share a root cause with anything else on the report.
Fixes 4 findings: Pages carry more than their template · Every submitted page is reachable by a link · The writing is readable · The whole-site crawl is recent
Rich results — ratings, prices, FAQs, breadcrumbs — are what turn a listing into an advert, and they are decided by whether a few required properties are present. Markup that is invalid or incomplete is work already done that currently earns nothing.
Fixes 1 finding: Marked-up content qualifies for rich results
All set in the same place — your web server or CDN. Half of them are single lines.
Fixes 1 finding: Content Security Policy header
A growing share of questions are answered without a results page. Being quotable is a distribution channel, and it is usually blocked by a plugin default rather than a decision.
Fixes 1 finding: A curated summary is published for assistants
Your title and description are the advert Google runs for you, free, every time someone searches.
Fixes 1 finding: Every page has a meta description
Resilience and reputation work — lower urgency, but cheap while you are already in these systems.
Fixes 1 finding: DNSSEC enabled
Image and script weight drive every speed metric you are failing. This is the slowest fix here and the one with the longest tail.
Fixes 1 finding: Reasonable number of scripts
Images are what Largest Contentful Paint usually measures, and WebP is typically a third smaller than the same JPEG. On image-led pages this is the largest saving available.
Fixes 1 finding: Images are sized for the device
Ranked by severity, then by how much score each returns.
DMARC policy is p=none. p=none monitors only — it instructs receivers to do nothing, so nobody is actually prevented from spoofing your domain.
v=DMARC1; p=none;
How to fix: Move to p=quarantine, then p=reject, once your reports are clean.
We generated and checked 60 plausible misspellings and variants of your domain. 1 of the 3 registered variants has mail servers configured, so it is technically able to send email that reads as yours to anyone skimming a sender address. Many such domains are entirely unrelated businesses that happen to have a similar name — this is a risk to be aware of and to defend against, not evidence that anyone is doing anything.
novadise.com [mail configured] novadoes.com novados.com
How to fix: Publish DMARC at enforcement so mail claiming to be your domain is rejected outright — that is the defence that works regardless of who owns a lookalike. Then register the closest unregistered variants; they cost a few pounds a year and are the cheapest brand protection available.
1 page(s) carry noindex but are also disallowed in robots.txt. Google cannot fetch a blocked page, so it never sees the noindex — the URL can stay in search results indefinitely, listed with no description. Blocking and noindex are opposites: one hides the content, the other removes the listing. Every page of this type that was checked has this fault, and your sitemap lists 2 pages built from the same template (/{slug}) — so this is most likely one template fix affecting up to 2 pages, not 1.
https://novadose.com/my-account/
How to fix: Pick one. To remove a page from search, allow crawling and keep the noindex until it drops out. To hide content from crawling, block it in robots.txt and remove the noindex.
1 required propert(y/ies) are missing from your structured data. The markup exists but does not qualify for the rich result it is aiming at — which is the worst of both: the work has been done and earns nothing in the results page.
LocalBusiness is missing 'address'
How to fix: Add the missing properties. Google's Rich Results Test shows exactly which are required for each type.
Across 12 page(s), the median page is 27% its own content and the rest navigation, footer and legal text. 8 page(s) carry under 120 words of their own, or less than a third. A word count that includes the template hides this — those pages look substantial and read as empty, which is what a search engine comparing them to a competitor sees. This affects every checked page of 3 templates (/product-tag/{slug}, /{slug}, /shop), covering up to 7 pages in your sitemap. Fixing the templates fixes all of them at once.
89 own / 1046 total (9%) https://novadose.com/product-category/metabolic/ 89 own / 1046 total (9%) https://novadose.com/product-category/longevity/ 93 own / 1050 total (9%) https://novadose.com/shop/ 93 own / 1050 total (9%) https://novadose.com/product-tag/fat-loss/ 93 own / 1050 total (9%) https://novadose.com/product-category/cartridges/ 93 own / 1050 total (9%) https://novadose.com/product-category/pens/
How to fix: Add substance to the page body rather than the template — for product pages, specifics nobody else has; for category pages, an explanation of what the category is for.
Whether the connection, certificate and headers hold up.
Missing. Limits where scripts may load from, which is the main defence against injected code and card skimmers.
Add a Content-Security-Policy header, starting in report-only mode.
Secure connection working.
Plain HTTP requests are redirected to the secure version.
All resources load securely.
Cookies set Secure and HttpOnly.
Certificate valid for another 65 days (expires 2026-12-17).
Negotiated TLSv1.3.
HSTS is set.
MIME sniffing protection is set.
Clickjacking protection is set.
Referrer policy is set.
Whether your mail reaches inboxes or spam folders.
DMARC policy is p=none. p=none monitors only — it instructs receivers to do nothing, so nobody is actually prevented from spoofing your domain.
v=DMARC1; p=none;
Move to p=quarantine, then p=reject, once your reports are clean.
No rua= address, so DMARC failures are generated and then discarded. You have no visibility into who is sending as you.
v=DMARC1; p=none;
Add rua=mailto:dmarc@yourdomain to start collecting reports.
No MTA-STS policy, so mail to you can be delivered unencrypted if an attacker strips TLS.
Publish an MTA-STS policy and the _mta-sts TXT record.
No TLS-RPT record, so delivery-encryption failures go unreported.
Publish a _smtp._tls TXT record with a reporting address.
No BIMI record. With DMARC at enforcement you could display your logo next to your messages in Gmail and Apple Mail.
Once DMARC is at quarantine or reject, publish a BIMI record with an SVG logo.
DKIM keys published on selector(s): google, k2.
5 mail server(s) configured.
Ends in ~all (soft fail) — the usual safe setting.
The record forces about 1 DNS lookups. Comfortably within the limit of 10.
One SPF record, as required.
How fast real visitors experience the site.
17 external script file(s) on the homepage. Each one is a separate request that can block rendering.
Remove unused third-party tags and combine what remains.
0 of 311 image(s) provide a srcset. Without one, a phone downloads the full desktop image and then scales it down — paying for pixels it never shows.
Add srcset and sizes so each device downloads an appropriate image.
Not available: PageSpeed API returned 429. This usually means the site does not yet have enough Chrome traffic for Google to report field data. Lab measurements below still apply.
Served with gzip compression.
Median response across 12 page(s) was 632 ms.
Homepage HTML is 441 KB.
50 of 50 images declare dimensions.
Pages may be cached by browsers and CDNs.
298 image(s) are served as WebP or AVIF.
50 of 50 images use lazy loading.
The tags, files and signals search engines read first.
1 page(s) carry noindex but are also disallowed in robots.txt. Google cannot fetch a blocked page, so it never sees the noindex — the URL can stay in search results indefinitely, listed with no description. Blocking and noindex are opposites: one hides the content, the other removes the listing. Every page of this type that was checked has this fault, and your sitemap lists 2 pages built from the same template (/{slug}) — so this is most likely one template fix affecting up to 2 pages, not 1.
https://novadose.com/my-account/
Pick one. To remove a page from search, allow crawling and keep the noindex until it drops out. To hide content from crawling, block it in robots.txt and remove the noindex.
1 required propert(y/ies) are missing from your structured data. The markup exists but does not qualify for the rich result it is aiming at — which is the worst of both: the work has been done and earns nothing in the results page.
LocalBusiness is missing 'address'
Add the missing properties. Google's Rich Results Test shows exactly which are required for each type.
0 of 12 crawled page(s) (0%) can actually be indexed — the rest are noindexed, canonicalised elsewhere or blocked. Every page Google crawls but cannot index is crawl budget spent on nothing, and on a small site it is usually a misconfiguration rather than a decision.
https://novadose.com/ https://novadose.com/contact/ https://novadose.com/faq/ https://novadose.com/my-account/ https://novadose.com/privacy/ https://novadose.com/product-category/cartridges/
Review why these pages are excluded — most sites intend far fewer exclusions than they have.
Canonical points elsewhere (https://novadose.test/), which tells Google to index that page instead of this one.
https://novadose.test/
Set a self-referencing canonical on every page.
11 sitemap URL(s) name a different page as their canonical. You are submitting pages while telling Google the real version is somewhere else, so the submission achieves nothing. This affects every checked page of 2 templates (/product/{slug}, /product-tag/{slug}), covering up to 29 pages in your sitemap. Fixing the templates fixes all of them at once.
https://novadose.com/ → canonical: https://novadose.test/ https://novadose.com/contact/ → canonical: https://novadose.test/contact/ https://novadose.com/faq/ → canonical: https://novadose.test/faq/ https://novadose.com/privacy/ → canonical: https://novadose.test/privacy/
List only self-canonical URLs in the sitemap.
No /llms.txt. It is a short, plain-text map of what a site is and which pages matter — a convention some assistants read to decide what to quote, and cheap to publish. It is not yet a standard anyone is obliged to honour, so treat it as a low-cost bet rather than a requirement.
Publish /llms.txt: a heading, one paragraph describing the business, and a linked list of your most important pages.
Not applicable — this site publishes in a single language and declares no regional or translated versions, so hreflang annotations are not needed. Adding them to a single-language site does nothing.
Not measured — not configured on this instance. Connecting Search Console adds what no crawl can see: the queries this site already appears for, where it ranks, and how many people click. It is read-only and can be disconnected at any time.
Not measured — ranking data is not configured on this instance.
Homepage is open to indexing.
Mobile viewport is declared.
Title is 55 characters.
Sitemap found listing 56 URLs.
Description is 120 characters.
Structured data found: BreadcrumbList, CollectionPage, ImageObject, ListItem, Organization, WebPage, WebSite.
robots.txt present and open to search engines.
Every canonical points at a page that is allowed to be indexed.
Canonical targets all return 200.
No page is both listed in the sitemap and marked noindex.
All structured data blocks are valid JSON.
Identified as LocalBusiness, Organization.
Organization or Person markup names the business to assistants.
No canonical points at a page that then canonicals somewhere else.
Every major assistant is allowed to read and cite these pages.
FAQPage or HowTo markup gives assistants a structured answer to cite.
BreadcrumbList markup is present.
Every crawled page sits within four levels of the homepage (deepest: 2).
sameAs links the entity to its real profiles across the web.
10 Open Graph tags found.
URLs use lowercase, hyphenated, extension-free paths.
0 of 12 crawled URLs carry query parameters other than tracking tags.
Language attribute present.
WebSite markup is present.
4 twitter: tag(s) found.
133 structured data object(s) across 12 page(s): Answer, Brand, BreadcrumbList, CollectionPage, FAQPage, ImageObject, ListItem, LocalBusiness, Offer, Organization, and others.
No model-training crawler is blocked, so this content may be used to train future models. This is a business decision rather than an SEO one, and it is separate from being cited in answers: refusing training does not remove you from AI results, and allowing it does not put you in them.
Whether pages are unique, linked and crawlable.
Across 12 page(s), the median page is 27% its own content and the rest navigation, footer and legal text. 8 page(s) carry under 120 words of their own, or less than a third. A word count that includes the template hides this — those pages look substantial and read as empty, which is what a search engine comparing them to a competitor sees. This affects every checked page of 3 templates (/product-tag/{slug}, /{slug}, /shop), covering up to 7 pages in your sitemap. Fixing the templates fixes all of them at once.
89 own / 1046 total (9%) https://novadose.com/product-category/metabolic/ 89 own / 1046 total (9%) https://novadose.com/product-category/longevity/ 93 own / 1050 total (9%) https://novadose.com/shop/ 93 own / 1050 total (9%) https://novadose.com/product-tag/fat-loss/ 93 own / 1050 total (9%) https://novadose.com/product-category/cartridges/ 93 own / 1050 total (9%) https://novadose.com/product-category/pens/
Add substance to the page body rather than the template — for product pages, specifics nobody else has; for category pages, an explanation of what the category is for.
1 of 12 crawled pages are set to noindex. If any of these are meant to bring in traffic, they currently cannot. Every page of this type that was checked has this fault, and your sitemap lists 2 pages built from the same template (/{slug}) — so this is most likely one template fix affecting up to 2 pages, not 1.
Review each and remove noindex where the page should rank.
1 of 12 crawled pages had no internal link pointing at them. Search engines discover pages by following links, so an unlinked page is found late or not at all — and passes on none of its authority. Every page of this type that was checked has this fault, and your sitemap lists 3 pages built from the same template (/product-tag/{slug}) — so this is most likely one template fix affecting up to 3 pages, not 1.
Link these from a relevant parent page, your navigation, or a hub page.
21 link(s) appear on nearly every page — the site-wide navigation, which is where most internal authority is allocated. 2 of them point at legal, account or administrative pages, and 1 of those sits among the eight best-linked pages on the site — level with, or above, the pages you sell from. Nobody decides this: a crawler counts every footer link as an endorsement repeated on every page, while visitors ignore footers. Those pages must exist and should not be among the best-linked things you publish.
novadose.com/ 2.4% novadose.com/shop 2.4% novadose.com/product-category/cartridges 2.4% novadose.com/product-category/protocols 2.4% novadose.com/product/supernova-protocol 2.4% novadose.com/product/zenith-protocol 2.4% novadose.com/product/ignition-protocol 2.4% novadose.com/product/phoenix-protocol 2.4%
2 pair(s) of pages appear to cover the same subject, judged from their titles and headings. Two pages competing for one query split the links and relevance that should accumulate on one, and Google alternates between them — so neither settles into a stable position. Confirm against Search Console, which shows exactly which page it chooses. Every page of this type that was checked has this fault, and your sitemap lists 2 pages built from the same template (/shop) — so this is most likely one template fix affecting up to 2 pages, not 1.
Shop Peptide Pens | NovaDose https://novadose.com/shop/ https://novadose.com/product-category/pens/ Metabolic Archives - NovaDose https://novadose.com/product-category/metabolic/ https://novadose.com/product-category/longevity/
Decide which page owns the subject. Merge the weaker one into it and redirect, or narrow each to a genuinely different question.
1 crawled page(s) are not linked from any other page we fetched. A page reachable only from a sitemap receives no internal authority at all, and is crawled rarely — it can rank, but it starts from nothing and stays there. Every page of this type that was checked has this fault, and your sitemap lists 3 pages built from the same template (/product-tag/{slug}) — so this is most likely one template fix affecting up to 3 pages, not 1.
novadose.com/product-tag/fat-loss
Link them from a relevant hub page or from navigation, using the subject as the link text.
5 of 12 crawled pages have no meta description. This affects every checked page of 3 templates (/product/{slug}, /product-tag/{slug}, /{slug}), covering up to 31 pages in your sitemap. Fixing the templates fixes all of them at once.
Write a description for each page, or generate one from its opening text.
Median reading ease is 37.7 — difficult. 3 page(s) score below 40, which is the range of academic and legal writing. That is correct for a terms page and costly on anything meant to sell, because the reader who bounces was the one who arrived.
26.0 (very difficult) https://novadose.com/ 32.0 (difficult) https://novadose.com/product/halo-protocol/ 37.7 (difficult) https://novadose.com/privacy/ 43.3 (difficult) https://novadose.com/faq/
Shorter sentences and plainer words in the pages that convert. Legal pages can stay as they are.
All 12 crawled pages have distinct titles.
All 12 crawled pages carry substantial content.
12 of 311 images across the crawl have no alt attribute. Alt text is how search engines read images and how screen readers describe them.
Every crawled page carries at least three internal links, so navigation is consistently rendered.
No two crawled pages share substantially the same text.
All 12 crawled pages returned successfully.
No template produces thin pages across all of its instances.
No page answers 200 while telling the visitor nothing was found.
Every page's body covers the subject its title and heading announce.
All 7 descriptions found are distinct.
Authorship is declared.
0 of 950 internal link(s) use text like 'click here' or no text at all.
No phrase dominates a page's text.
An about or contact page is linked.
6 of 12 crawled pages declare a date; the most recent is 2026-10-08.
1 of 12 pages do not have exactly one H1 heading.
No multi-step redirects found.
Sitemap lists 55 URLs; we reached 12 by crawling. 44 sitemap URLs were not linked from the pages we visited.
Every crawled page links onward.
Pages receive 7.8 internal links on average across the crawl, with no single page absorbing most of them.
Publisher is declared in structured data.
Internal links concentrate authority on the pages below, in order. This is the site's own ranking of itself, derived from how it links — read it against what the business actually sells, because search engines read it the same way. Only the crawled sample is modelled, so this describes the navigation rather than every page.
The terms that distinguish each page from the others on this site — not the most frequent words, but the ones this page uses and the others do not. Read them as what a search engine would take the page to be about, and check that it matches what it is for.
What Google needs to place you in map results.
Not applicable — nothing on this site indicates a physical location customers visit: no address, phone link, opening hours, map or local business markup. Local search checks are skipped and do not affect the score. If you do serve customers from premises, publishing an address and phone number is the place to start.
DNS, hosting and delivery configuration.
We generated and checked 60 plausible misspellings and variants of your domain. 1 of the 3 registered variants has mail servers configured, so it is technically able to send email that reads as yours to anyone skimming a sender address. Many such domains are entirely unrelated businesses that happen to have a similar name — this is a risk to be aware of and to defend against, not evidence that anyone is doing anything.
novadise.com [mail configured] novadoes.com novados.com
Publish DMARC at enforcement so mail claiming to be your domain is rejected outright — that is the defence that works regardless of who owns a lookalike. Then register the closest unregistered variants; they cost a few pounds a year and are the cheapest brand protection available.
29 of 55 sitemap URL(s) were never reached by following links from the homepage. A sitemap makes a page known; links are what make it worth crawling and give it any authority at all. A page that exists only in the sitemap is one the site itself does not point at, which is the signal Google reads.
/product-category/longevity/ /product-category/metabolic/ /product-category/protocols/ /product-category/recovery/ /product-category/skin/ /product-category/wellness/ /product-tag/core/ /product-tag/fat-loss/
Link them from a relevant hub, or remove them from the sitemap if they are not meant to rank.
DNSSEC is not enabled, so DNS answers for your domain can't be cryptographically verified.
Enable DNSSEC at your DNS provider.
The crawl these figures come from is 56 days old, so they describe the site as it was then. Anything published, removed or restructured since is not reflected below.
Run a new crawl before acting on these numbers.
Not checked: the blocklists declined queries from this resolver, so reputation could not be confirmed either way. This is excluded from your score rather than guessed at.
Not measured — no log file supplied. Server logs are the only source that shows what Googlebot actually fetched rather than what it could fetch: which pages it spends its crawl on, which it has never asked for, and what it receives when it does.
2 nameserver(s) configured.
Checked 4 subdomain(s); none point at a cloud service that has released them.
Certificate transparency lists 4 hostname(s) for this domain and none of the development-style hosts are both live and open to indexing.
26 of 29 crawled page(s) can be indexed (90%).
No filter, session or calendar URLs that would generate an unbounded space were found.
Every template returns content for most of its URLs.
Every page was reached directly or in a single hop.
0 of 12 URL(s) followed during this crawl returned a redirect or an error (0%).
The deepest page reached sits 2 click(s) from the homepage.
Your certificate covers only your own domain.
Every sitemap file is within the 50,000 URL and 50 MB limits.
55 of 56 sitemap URL(s) carry a lastmod date across 32 distinct value(s).
0 internal link(s) are marked nofollow.
CAA record present.
No version numbers advertised in response headers.
4 hostname(s) appear in this domain's public certificate history, issued by Let's Encrypt, Google Trust Services.
Served from AS13335 (CLOUDFLARENET - Cloudflare, Inc.), announced in 104.21.16.0/20 — a block of 4,096 addresses.
12 page(s) were examined, chosen to cover 11 of the 26 distinct page templates found across 56 known URLs. Pages are sampled by template rather than in sitemap order, because the first pages of a sitemap are usually all the same kind — a sample of one template would describe that template rather than the site. Findings below therefore apply to the templates listed, and a fault in a template is normally a fault on every page built from it.
29 page(s) crawled across 15 template(s). Read the largest ones first — a fault in a template used four hundred times is a different size of problem from the same fault on one page, and the effort to fix it is the same.
Who links to this site, with what text, and how that compares.
Not measured — off-page data is not configured on this instance.
The site loaded in a real browser, the way a visitor and a crawler get it.
Not measured: the browser could not load this site (TimeoutError). Everything else in this report is unaffected — these checks are excluded from your score rather than guessed at.
What the server sends a phone matches what it sends a desktop browser.
| Final URL | https://novadose.com/ |
|---|---|
| Host IPs | 104.21.22.30, 172.67.202.49, 2606:4700:3030::6815:161e, 2606:4700:3030::ac43:ca31 |
| Pages crawled | 12 of 12 attempted |
| Sitemap URLs | 56 |
| Nameservers | daisy.ns.cloudflare.com, isaac.ns.cloudflare.com |
| Mail servers | alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, aspmx.l.google.com |
| DKIM selectors | google, k2 |
| Mail server IPs | 172.253.157.27, 142.250.102.27, 192.178.213.26 |
| TLS | TLSv1.3 · TLS_AES_256_GCM_SHA384 · issued by Google Trust Services |
| Detected stack | WooCommerce / Cloudflare / Cloudflare · mail on Google Workspace · Google Analytics 4 |
| Browser render | Not run: the browser could not load this site (TimeoutError) |
BounceZero Ltd does this work: technical remediation, local SEO and email deliverability. Tell us what you want fixed and we'll reply with what it takes. No call required, no obligation.
We re-audit on a schedule and email you only when a check that was passing starts failing. That is usually a recent change to the site or its DNS, and it is findable while still fresh. No digest, no newsletter.
Monitoring means repeatedly fetching your site and emailing about it, so we ask you to prove you own novadose.com first.