ripcurl.com

Missing. Controls how much of your URL is leaked to other sites.

Send Referrer-Policy: strict-origin-when-cross-origin

Secure connection working.

Plain HTTP requests are redirected to the secure version.

All resources load securely.

Cookies set Secure and HttpOnly.

Certificate valid for another 32 days (expires 2026-10-09).

Negotiated TLSv1.3.

HSTS is set.

Content Security Policy is set.

MIME sniffing protection is set.

Clickjacking protection is set.

No MTA-STS policy, so mail to you can be delivered unencrypted if an attacker strips TLS.

Publish an MTA-STS policy and the _mta-sts TXT record.

No TLS-RPT record, so delivery-encryption failures go unreported.

Publish a _smtp._tls TXT record with a reporting address.

No BIMI record. With DMARC at enforcement you could display your logo next to your messages in Gmail and Apple Mail.

Once DMARC is at quarantine or reject, publish a BIMI record with an SVG logo.

DKIM keys published on selector(s): selector1, s1, s2, mail.

1 mail server(s) configured.

Ends in ~all (soft fail) — the usual safe setting.

The record forces about 2 DNS lookups. Comfortably within the limit of 10.

Aggregate reports are being sent to a reporting address.

One SPF record, as required.

DMARC policy is p=reject.

Median response across 10 page(s) was 1119 ms. Over 800 ms is felt by every visitor and counts against you on mobile.

median 1119 ms over 10 pages

Enable full-page caching and serve through a CDN.

21 of 50 images use lazy loading.

Add loading="lazy" to images below the fold.

Served with gzip compression.

Homepage HTML is 559 KB.

46 of 50 images declare dimensions.

13 external script file(s) on the homepage.

Pages may be cached by browsers and CDNs.

1 image(s) are served as WebP or AVIF.

420 of 477 image(s) provide a srcset.

Description is 170 characters.

Explore Our Quality Wetsuits, Surf Clothing, Bikinis And Tide Watches. Free Shipping On Men’s, Women’s And Kids Gear including Bikinis, Boardshorts, Wetsuits And Watches.

Write 120-160 characters that give someone a reason to click.

No /llms.txt. It is a short, plain-text map of what a site is and which pages matter — a convention some assistants read to decide what to quote, and cheap to publish. It is not yet a standard anyone is obliged to honour, so treat it as a low-cost bet rather than a requirement.

Publish /llms.txt: a heading, one paragraph describing the business, and a linked list of your most important pages.

Homepage is open to indexing.

Mobile viewport is declared.

Title is 56 characters.

Sitemap found listing 2174 URLs.

Canonical points at this page.

Structured data found: ContactPoint, Organization, Person, SearchAction, WebSite.

robots.txt present and open to search engines. 1 named crawler(s) are blocked, which is a deliberate choice rather than a fault.

Every canonical points at a page that is allowed to be indexed.

Every hreflang reference is reciprocated by the page it names.

Canonical targets all return 200.

No page is both listed in the sitemap and marked noindex.

All structured data blocks are valid JSON.

No page relies on a directive Google is blocked from reading.

Every hreflang value is a valid language or language-region code.

10 of 10 crawled page(s) (100%) can actually be indexed.

Every page with hreflang annotations includes itself.

Every hreflang target is a live, indexable page.

Identified as Organization, Person.

Organization or Person markup names the business to assistants.

No canonical points at a page that then canonicals somewhere else.

Every sitemap URL is its own canonical.

All structured data is present in the HTML the server sends.

Every major assistant is allowed to read and cite these pages.

BreadcrumbList markup is present.

Every crawled page sits within four levels of the homepage (deepest: 3).

sameAs links the entity to its real profiles across the web.

9 Open Graph tags found.

An x-default version is declared for visitors whose language matches none of your versions.

URLs use lowercase, hyphenated, extension-free paths.

0 of 10 crawled URLs carry query parameters other than tracking tags.

Language attribute present.

WebSite markup is present.

3 twitter: tag(s) found.

87 structured data object(s) across 10 page(s): BlogPosting, Brand, BreadcrumbList, ContactPoint, ItemPage, ListItem, MerchantReturnPolicy, Offer, Organization, Person, and others.

No model-training crawler is blocked, so this content may be used to train future models. This is a business decision rather than an SEO one, and it is separate from being cited in answers: refusing training does not remove you from AI results, and allowing it does not put you in them.

5 pair(s) of pages appear to cover the same subject, judged from their titles and headings. Two pages competing for one query split the links and relevance that should accumulate on one, and Google alternates between them — so neither settles into a stable position. Confirm against Search Console, which shows exactly which page it chooses. Every page of this type that was checked has this fault, and your sitemap lists 73 pages built from the same template (/pages/{slug}) — so this is most likely one template fix affecting up to 73 pages, not 1.

Mason Ho | Rip Curl Team | Rip Curl Australia
   https://www.ripcurl.com/pages/mason-ho
   https://www.ripcurl.com/pages/careers
About Rip Curl | Ultimate Surfing Company | Rip Curl Austral
   https://www.ripcurl.com/pages/about
   https://www.ripcurl.com/pages/careers
Careers At Rip Curl | Rip Curl Australia
   https://www.ripcurl.com/pages/careers
   https://www.ripcurl.com/pages/faq
Careers At Rip Curl | Rip Curl Australia
   https://www.ripcurl.com/pages/careers
   https://www.ripcurl.com/pages/mens

Decide which page owns the subject. Merge the weaker one into it and redirect, or narrow each to a genuinely different question.

1 page(s) have a title and heading whose subject barely appears in the body. Either the title is written for a query the page does not answer — which loses the visitor on arrival and is measurable as a bounce — or the page is about something its title does not say. Every page of this type that was checked has this fault, and your sitemap lists 73 pages built from the same template (/pages/{slug}) — so this is most likely one template fix affecting up to 73 pages, not 1.

20% of the title's subject in the body
   Mason Ho | Rip Curl Team | Rip Curl Australia
   https://www.ripcurl.com/pages/mason-ho

Make the opening paragraph answer the title directly, or change the title to what the page is really about.

Every crawled page carries at least three internal links, so navigation is consistently rendered.

Make sure header and footer navigation render server-side on every template, including error and landing pages.

4 of 10 pages do not have exactly one H1 heading.

Use a single H1 per page stating what the page is about.

All 10 crawled pages have distinct titles.

All 10 crawled pages are reachable by internal links.

All 10 crawled pages carry substantial content.

0 of 10 crawled pages have no meta description.

7 of 477 images across the crawl have no alt attribute. Alt text is how search engines read images and how screen readers describe them.

No two crawled pages share substantially the same text.

No page answers 200 while telling the visitor nothing was found.

180 link(s) appear on nearly every page — the site-wide navigation, which is where most internal authority is allocated.

All 10 descriptions found are distinct.

Authorship is declared.

18 of 4246 internal link(s) use text like 'click here' or no text at all.

Every crawled page is linked from at least one other page.

No phrase dominates a page's text.

An about or contact page is linked.

1 of 10 crawled pages declare a date; the most recent is 2026-08-17.

Median reading ease is 59.2 — fairly hard.

No multi-step redirects found.

Sitemap lists 2174 URLs; we reached 10 by crawling. 2166 sitemap URLs were not linked from the pages we visited.

Every crawled page links onward.

Pages receive 7.2 internal links on average across the crawl, with no single page absorbing most of them.

Publisher is declared in structured data.

Internal links concentrate authority on the pages below, in order. This is the site's own ranking of itself, derived from how it links — read it against what the business actually sells, because search engines read it the same way. Only the crawled sample is modelled, so this describes the navigation rather than every page.

The terms that distinguish each page from the others on this site — not the most frequent words, but the ones this page uses and the others do not. Read them as what a search engine would take the page to be about, and check that it matches what it is for.

DNSSEC is not enabled, so DNS answers for your domain can't be cryptographically verified.

Enable DNSSEC at your DNS provider.

No CAA record, so any certificate authority may issue certificates for your domain.

Publish a CAA record naming the certificate authority you use.

68 hostname(s) appear in this domain's public certificate history, issued by Let's Encrypt, Google Trust Services. A large certified surface is a large attack surface, and every one of those names is public — certificate transparency is a permanent, searchable log.

Retire certificates for hosts you no longer run, and prefer wildcard certificates where you genuinely need many subdomains.

2 nameserver(s) configured.

Checked 25 subdomain(s); none point at a cloud service that has released them.

Certificate transparency lists 68 hostname(s) for this domain and none of the development-style hosts are both live and open to indexing.

No filter, session or calendar URLs that would generate an unbounded space were found.

Every page was reached directly or in a single hop.

2 of 12 URL(s) followed during this crawl returned a redirect or an error (17%).

Your certificate covers only your own domain.

Every sitemap file is within the 50,000 URL and 50 MB limits.

2172 of 2174 sitemap URL(s) carry a lastmod date across 19 distinct value(s).

0 internal link(s) are marked nofollow.

No version numbers advertised in response headers.

1 development-style host(s) are reachable but none is serving indexable content: 1 are closed to indexing. That is the correct arrangement.

Served from AS13335 (CLOUDFLARENET - Cloudflare, Inc.), announced in 23.227.38.0/23 — a block of 512 addresses.

10 page(s) were examined, chosen to cover 11 of the 37 distinct page templates found across 2174 known URLs. Pages are sampled by template rather than in sitemap order, because the first pages of a sitemap are usually all the same kind — a sample of one template would describe that template rather than the site. Findings below therefore apply to the templates listed, and a fault in a template is normally a fault on every page built from it.

5 JavaScript error(s) fire when the page loads. Broken scripts commonly break booking forms, menus and tracking without anything looking wrong.

Error while loading Customer Privacy API
[JavaScript Error: "Cookie “_shopify_test” has been rejected for invalid domain." {file: "https://www.ripcurl.com/" line: 0}]
[JavaScript Error: "Cookie “_shopify_test” has been rejected for invalid domain." {file: "https://www.ripcurl.com/" line: 0}]
[JavaScript Error: "Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://otlp-http-production.shopifysvc.com/v1/metrics. (Reason: CORS request did not succeed). Status cod
Error while loading Customer Privacy API

Open your browser's console on the live site and fix what it reports.

17 of 21 tappable element(s) are smaller than 48x48 pixels, and 9 sit closer than 8 pixels to a neighbour. On a phone that means links and buttons that are hard to hit without zooming, and mis-taps on a checkout or contact button cost conversions directly.

Skip to content (1x1)
Toggle navigation menu (44x44)
Login to my Account (44x44)
Rip Curl Homepage (390x17)
View wishlist (44x44)

Give tappable elements at least 48x48 CSS pixels and 8 pixels of spacing — usually padding on the link rather than a bigger font.

JavaScript rewrites the page title after load. Google usually indexes the served title, so the one you see in the browser may not be the one shown in search results.

served:   Shop Surf Apparel, Wetsuits and Watches – Rip Curl
rendered: Shop Surf Apparel, Wetsuits and Watches – Rip Curl

Set the final title server-side rather than changing it in script.

The title tag changes after JavaScript runs. Google usually indexes the rendered title, but rendering is queued separately and can lag the first crawl, so for a while the served title is what appears in results.

served:   Shop Surf Apparel, Wetsuits and Watches – Rip Curl
rendered: Shop Surf Apparel, Wetsuits and Watches
 – Rip Curl

Render the final title server-side.

The page made 155 network requests to load. Each is a round trip, and on mobile data they add up quickly.

Remove unused third-party tags, and combine or lazy-load the rest.

The served HTML contains 2203 words and the rendered page 3349 — the content is present before JavaScript runs.

What the server sends a phone matches what it sends a desktop browser.

The canonical and robots directives are the same before and after JavaScript runs.

Measured 1.4s on a simulated phone viewport. Google's threshold for 'good' is 2.5s.

34 links in the served HTML, 697 after rendering — navigation is discoverable.

Cumulative Layout Shift measured at 0.000 (good is 0.1 or less).

The page fits the mobile viewport with no sideways scrolling.

0 long JavaScript task(s) blocked the main thread while loading.

1 of 433 text block(s) render below 12px on a mobile viewport.