Your position
94th percentile of 32 sites audited. The average site scores 72, the median 70.
Website audit report
18 issues found across 133 checks. Nothing critical.
Scanned 2026-09-05T19:50:07+00:00 · 4 host IPs · cert expires in 77 days
This report is not offered to search engines. It is reachable by link only. If you own icampmaroc.com you can publish or delete it.
Measured against every site SEOking has audited: a corpus that grows with each scan and cannot be reconstructed after the fact.
94th percentile of 32 sites audited. The average site scores 72, the median 70.
73 is the average for the 5 sites we have audited on custom / Cloudflare / Cloudflare, and you are above it.
Pages have enough content
89% of the sites we have audited get this right and yours does not. Of everything on this report, it is the fault that most sets you apart from your competition, which makes it the first thing worth fixing.
Our own measure of whether your domain is trusted by the systems that decide if mail reaches an inbox. No other website audit reports this. It is built from BounceZero's deliverability platform.
Solid foundations, with a few gaps worth closing.
What is pulling it down: DMARC enforcement. See the email deliverability section below.
We have measured deliverability across 238,046 domains. Yours is not among them, which simply means no one has needed to verify an address at it. The score above is from live measurements of your own DNS.
For context, 4.2% of the domains we have measured accept mail to any address, which makes their bounce behaviour unpredictable.
Loaded in a real browser at phone size. This is close to what a visitor and Google's renderer see.

Oldest on the left. Every re-run is kept.
The 18 faults on this report come from 12 underlying causes. Fixing a cause fixes everything under it, so this is ordered by score returned per unit of work, not by severity alone.
The 6 quickest steps here take you from 88 to about 93. That is 5 points for changes measured in minutes and hours, not weeks.
These are all records in your DNS. One editing session fixes every one of them, and it is the change most likely to stop your mail being filtered.
Fixes 3 findings: DMARC policy is enforced · MTA-STS policy published · TLS reporting enabled
A subdomain pointing at a service that released it can be claimed by anyone, who then publishes on your domain. Deleting the record costs nothing and closes it immediately.
Fixes 1 finding: No lookalike domain can send mail as your brand
A growing share of questions are answered without a results page. Being quotable is a distribution channel, and it is usually blocked by a plugin default rather than a decision.
Fixes 2 findings: AI assistants can cite this site · A curated summary is published for assistants
These do not share a root cause with anything else on the report.
Fixes 2 findings: Pages carry more than their template · The writing is readable
Rich results — ratings, prices, FAQs, breadcrumbs — are what turn a listing into an advert, and they are decided by whether a few required properties are present. Markup that is invalid or incomplete is work already done that currently earns nothing.
Fixes 2 findings: Rendering preserves the structured data · The entity links out to its profiles
Internal links decide which of your pages search engines treat as important, and the decision is usually an accident of navigation design. It costs nothing to change and it changes what ranks.
Fixes 1 finding: Each page covers a distinct subject
Google indexes the mobile version of your site, and these are measured in a real phone-sized browser rather than inferred. A page that scrolls sideways or needs pinching to read loses the visitor before the content matters.
Fixes 1 finding: Tap targets are big enough to hit
All set in the same place — your web server or CDN. Half of them are single lines.
Fixes 1 finding: Content Security Policy header
A canonical or noindex injected at runtime silently overrides what the server said, and the served HTML still looks correct to anyone reading the source.
Fixes 1 finding: Content is readable without running JavaScript
lastmod is how Google decides what to recrawl first. A timestamp that is identical on every URL is a build date, and Google learns to ignore lastmod for the whole site once it notices.
Fixes 1 finding: Sitemap lastmod dates are meaningful
Resilience and reputation work — lower urgency, but cheap while you are already in these systems.
Fixes 2 findings: DNSSEC enabled · CAA record restricts certificate issuance
Pages with little unique content rarely rank and can hold back how the whole site is judged.
Fixes 1 finding: Pages have enough content
Ranked by severity, then by how much score each returns.
DMARC policy is p=none. p=none monitors only — it instructs receivers to do nothing, so nobody is actually prevented from spoofing your domain.
v=DMARC1; p=none; rua=mailto:admin@icampmaroc.com
How to fix: Move to p=quarantine, then p=reject, once your reports are clean.
We generated and checked 60 plausible misspellings and variants of your domain. 1 of the 1 registered variants has mail servers configured, so it is technically able to send email that reads as yours to anyone skimming a sender address. Many such domains are entirely unrelated businesses that happen to have a similar name — this is a risk to be aware of and to defend against, not evidence that anyone is doing anything.
campmaroc.com [mail configured]
How to fix: Publish DMARC at enforcement so mail claiming to be your domain is rejected outright — that is the defence that works regardless of who owns a lookalike. Then register the closest unregistered variants; they cost a few pounds a year and are the cheapest brand protection available.
The served HTML carries 185 words against 598 after JavaScript runs. Search engines render pages eventually; assistant crawlers generally do not — they fetch the HTML and read what is there. A page whose content only appears after scripts run is close to empty to them, so it cannot be quoted or cited however good the content is.
served 185 words → rendered 598
How to fix: Render the main content server-side. This is the same fix as the js_content finding and it pays twice.
Whether the connection, certificate and headers hold up.
Missing. Limits where scripts may load from, which is the main defence against injected code and card skimmers.
Add a Content-Security-Policy header, starting in report-only mode.
Secure connection working.
Plain HTTP requests are redirected to the secure version.
All resources load securely.
Certificate valid for another 77 days (expires 2026-11-22).
Negotiated TLSv1.3.
HSTS is set.
MIME sniffing protection is set.
Clickjacking protection is set.
Referrer policy is set.
Whether your mail reaches inboxes or spam folders.
DMARC policy is p=none. p=none monitors only — it instructs receivers to do nothing, so nobody is actually prevented from spoofing your domain.
v=DMARC1; p=none; rua=mailto:admin@icampmaroc.com
Move to p=quarantine, then p=reject, once your reports are clean.
No MTA-STS policy, so mail to you can be delivered unencrypted if an attacker strips TLS.
Publish an MTA-STS policy and the _mta-sts TXT record.
No TLS-RPT record, so delivery-encryption failures go unreported.
Publish a _smtp._tls TXT record with a reporting address.
DKIM keys published on selector(s): default.
2 mail server(s) configured.
Ends in ~all (soft fail) — the usual safe setting.
The record forces about 2 DNS lookups. Comfortably within the limit of 10.
Aggregate reports are being sent to a reporting address.
One SPF record, as required.
BIMI record present — your logo can appear beside your emails.
How fast real visitors experience the site.
Not available: PageSpeed API returned 429. This usually means the site does not yet have enough Chrome traffic for Google to report field data. Lab measurements below still apply.
Served with gzip compression.
Median response across 12 page(s) was 71 ms.
Homepage HTML is 5 KB.
1 external script file(s) on the homepage.
Pages may be cached by browsers and CDNs.
No raster images found on the crawled pages.
No images found on the crawled pages.
The tags, files and signals search engines read first.
The served HTML carries 185 words against 598 after JavaScript runs. Search engines render pages eventually; assistant crawlers generally do not — they fetch the HTML and read what is there. A page whose content only appears after scripts run is close to empty to them, so it cannot be quoted or cited however good the content is.
served 185 words → rendered 598
Render the main content server-side. This is the same fix as the js_content finding and it pays twice.
2 assistant crawler(s) are blocked in robots.txt, so this site cannot be cited in the answers they write: Applebot-Extended, Google-Extended. These are the crawlers that fetch a page in order to reference it in a reply, which is a referral rather than a copy. Blocking them is a legitimate choice — but it is usually a plugin or CDN default rather than a decision anyone made.
Applebot-Extended — blocks Apple Intelligence Google-Extended — blocks Google AI Overviews and Gemini grounding
If you want to appear in AI answers, allow these agents in robots.txt. If the block is deliberate, no change is needed — but confirm it was deliberate.
3 structured data type(s) present in the served HTML are gone from the rendered page: Country, Organization, Service. Something on the page is removing or replacing the markup after load, and Google indexes the rendered result.
Country, Organization, Service
Find the script rewriting the head — usually a framework hydration step replacing server-rendered tags.
The Organization markup has no sameAs links; they are how an assistant confirms which business is yours.
Add sameAs URLs to the Google Business Profile, LinkedIn, X and any other profiles the business owns.
No /llms.txt. It is a short, plain-text map of what a site is and which pages matter — a convention some assistants read to decide what to quote, and cheap to publish. It is not yet a standard anyone is obliged to honour, so treat it as a low-cost bet rather than a requirement.
Publish /llms.txt: a heading, one paragraph describing the business, and a linked list of your most important pages.
Not measured — not configured on this instance. Connecting Search Console adds what no crawl can see: the queries this site already appears for, where it ranks, and how many people click. It is read-only and can be disconnected at any time.
Not measured — ranking data is not configured on this instance.
Homepage is open to indexing.
Mobile viewport is declared.
Title is 38 characters.
Sitemap found listing 23 URLs.
Description is 114 characters.
Canonical points at this page.
Structured data found: Country, Organization, Service, WebPage, WebSite.
robots.txt present and open to search engines. 9 named crawler(s) are blocked, which is a deliberate choice rather than a fault.
Every canonical points at a page that is allowed to be indexed.
Every hreflang reference is reciprocated by the page it names.
Canonical targets all return 200.
No page is both listed in the sitemap and marked noindex.
All structured data blocks are valid JSON.
No page relies on a directive Google is blocked from reading.
Every hreflang value is a valid language or language-region code.
Every marked-up entity carries the properties Google requires.
12 of 12 crawled page(s) (100%) can actually be indexed.
Every page with hreflang annotations includes itself.
Every hreflang target is a live, indexable page.
Identified as Organization.
Organization or Person markup names the business to assistants.
No canonical points at a page that then canonicals somewhere else.
Every sitemap URL is its own canonical.
All structured data is present in the HTML the server sends.
FAQPage or HowTo markup gives assistants a structured answer to cite.
BreadcrumbList markup is present.
Every crawled page sits within four levels of the homepage (deepest: 1).
7 Open Graph tags found.
An x-default version is declared for visitors whose language matches none of your versions.
URLs use lowercase, hyphenated, extension-free paths.
0 of 12 crawled URLs carry query parameters other than tracking tags.
Language attribute present.
WebSite markup is present.
4 twitter: tag(s) found.
98 structured data object(s) across 12 page(s): Answer, BreadcrumbList, Country, FAQPage, ListItem, Organization, Question, Service, WebPage, WebSite.
5 training crawler(s) blocked: Bytespider, CCBot, ClaudeBot, GPTBot, meta-externalagent. This is a business decision rather than an SEO one, and it is separate from being cited in answers: refusing training does not remove you from AI results, and allowing it does not put you in them.
Whether pages are unique, linked and crawlable.
Across 12 page(s), the median page is 92% its own content and the rest navigation, footer and legal text. 5 page(s) carry under 120 words of their own, or less than a third. A word count that includes the template hides this — those pages look substantial and read as empty, which is what a search engine comparing them to a competitor sees. 2 of the 8 page(s) checked from /{slug} have this fault, so it is a page-level problem rather than a template one — the other pages of that type are fine.
81 own / 105 total (77%) https://icampmaroc.com/contact 97 own / 121 total (80%) https://icampmaroc.com/about 98 own / 119 total (82%) https://icampmaroc.com/how-it-works 94 own / 114 total (82%) https://icampmaroc.com/become-host 103 own / 120 total (86%) https://icampmaroc.com/vehicles 169 own / 183 total (92%) https://icampmaroc.com/camper-rental-essaouira
Add substance to the page body rather than the template — for product pages, specifics nobody else has; for category pages, an explanation of what the category is for.
2 pair(s) of pages appear to cover the same subject, judged from their titles and headings. Two pages competing for one query split the links and relevance that should accumulate on one, and Google alternates between them — so neither settles into a stable position. Confirm against Search Console, which shows exactly which page it chooses. 1 of the 8 page(s) checked from /{slug} have this fault, so it is a page-level problem rather than a template one — the other pages of that type are fine.
iCampMaroc | Camper Rentals in Morocco https://icampmaroc.com/ https://icampmaroc.com/about Camper Rental Rabat | Morocco City and Coast Routes | iCampM https://icampmaroc.com/camper-rental-rabat https://icampmaroc.com/camper-rental-tangier
Decide which page owns the subject. Merge the weaker one into it and redirect, or narrow each to a genuinely different question.
5 of 12 crawled pages carry under 150 words. Thin pages rarely rank and can drag down how the whole site is assessed. 2 of the 8 page(s) checked from /{slug} have this fault, so it is a page-level problem rather than a template one — the other pages of that type are fine.
Expand or consolidate thin pages so each answers a real question.
Median reading ease is 38.4 — difficult. 6 page(s) score below 40, which is the range of academic and legal writing. That is correct for a terms page and costly on anything meant to sell, because the reader who bounces was the one who arrived.
11.6 (very difficult) https://icampmaroc.com/campervan-guides 20.0 (very difficult) https://icampmaroc.com/vehicles 35.5 (difficult) https://icampmaroc.com/camper-rental-essaouira 38.1 (difficult) https://icampmaroc.com/camper-rental-tangier 38.4 (difficult) https://icampmaroc.com/camper-rental-rabat
Shorter sentences and plainer words in the pages that convert. Legal pages can stay as they are.
Not measured — no page declares a publication or modification date, so how recently the site was maintained cannot be determined. That is normal for a brochure site and worth fixing for anything article-based.
All 12 crawled pages have distinct titles.
All 12 crawled pages are reachable by internal links.
0 of 12 crawled pages have no meta description.
Every crawled page carries at least three internal links, so navigation is consistently rendered.
No two crawled pages share substantially the same text.
All 12 crawled pages returned successfully.
No page answers 200 while telling the visitor nothing was found.
7 link(s) appear on nearly every page — the site-wide navigation, which is where most internal authority is allocated.
Every page's body covers the subject its title and heading announce.
All 12 descriptions found are distinct.
Authorship is declared.
0 of 177 internal link(s) use text like 'click here' or no text at all.
Every crawled page is linked from at least one other page.
No phrase dominates a page's text.
An about or contact page is linked.
0 of 12 pages do not have exactly one H1 heading.
No multi-step redirects found.
Sitemap lists 23 URLs; we reached 12 by crawling. 12 sitemap URLs were not linked from the pages we visited.
Every crawled page links onward.
Pages receive 7.1 internal links on average across the crawl, with no single page absorbing most of them.
Publisher is declared in structured data.
Internal links concentrate authority on the pages below, in order. This is the site's own ranking of itself, derived from how it links — read it against what the business actually sells, because search engines read it the same way. Only the crawled sample is modelled, so this describes the navigation rather than every page.
The terms that distinguish each page from the others on this site — not the most frequent words, but the ones this page uses and the others do not. Read them as what a search engine would take the page to be about, and check that it matches what it is for.
What Google needs to place you in map results.
Not applicable — nothing on this site indicates a physical location customers visit: no address, phone link, opening hours, map or local business markup. Local search checks are skipped and do not affect the score. If you do serve customers from premises, publishing an address and phone number is the place to start.
DNS, hosting and delivery configuration.
We generated and checked 60 plausible misspellings and variants of your domain. 1 of the 1 registered variants has mail servers configured, so it is technically able to send email that reads as yours to anyone skimming a sender address. Many such domains are entirely unrelated businesses that happen to have a similar name — this is a risk to be aware of and to defend against, not evidence that anyone is doing anything.
campmaroc.com [mail configured]
Publish DMARC at enforcement so mail claiming to be your domain is rejected outright — that is the defence that works regardless of who owns a lookalike. Then register the closest unregistered variants; they cost a few pounds a year and are the cheapest brand protection available.
Only 0 of 23 sitemap URL(s) declare a lastmod. It is the signal Google uses to decide what to recrawl first, so without it updates are found late.
[]
Emit lastmod from the date the page content actually changed, not from the time the sitemap was generated.
DNSSEC is not enabled, so DNS answers for your domain can't be cryptographically verified.
Enable DNSSEC at your DNS provider.
No CAA record, so any certificate authority may issue certificates for your domain.
Publish a CAA record naming the certificate authority you use.
Not checked: the blocklists declined queries from this resolver, so reputation could not be confirmed either way. This is excluded from your score rather than guessed at.
Not measured — the certificate transparency log did not answer in time.
Not measured — no log file supplied. Server logs are the only source that shows what Googlebot actually fetched rather than what it could fetch: which pages it spends its crawl on, which it has never asked for, and what it receives when it does.
Not measured — no whole-site crawl has been run for this domain. The audit above reasons from a sample of pages chosen to cover each template, which describes how the site is built. It cannot say how many of the site's pages are indexable, which templates are thin across every instance, or what sits too deep to be crawled — those are counts, and a sample cannot produce one.
2 nameserver(s) configured.
Checked 0 subdomain(s); none point at a cloud service that has released them.
No filter, session or calendar URLs that would generate an unbounded space were found.
Every page was reached directly or in a single hop.
0 of 12 URL(s) followed during this crawl returned a redirect or an error (0%).
Your certificate covers only your own domain.
Every sitemap file is within the 50,000 URL and 50 MB limits.
0 internal link(s) are marked nofollow.
No version numbers advertised in response headers.
Served from AS13335 (CLOUDFLARENET - Cloudflare, Inc.), announced in 104.21.80.0/20 — a block of 4,096 addresses.
12 page(s) were examined, chosen to cover 4 of the 4 distinct page templates found across 23 known URLs. Pages are sampled by template rather than in sitemap order, because the first pages of a sitemap are usually all the same kind — a sample of one template would describe that template rather than the site. Findings below therefore apply to the templates listed, and a fault in a template is normally a fault on every page built from it.
Who links to this site, with what text, and how that compares.
Not measured — off-page data is not configured on this instance.
The site loaded in a real browser, the way a visitor and a crawler get it.
46 of 61 tappable element(s) are smaller than 48x48 pixels, and 5 sit closer than 8 pixels to a neighbour. On a phone that means links and buttons that are hard to hit without zooming, and mis-taps on a checkout or contact button cost conversions directly.
EN (52x44) Login (59x44) Home (83x44) Search (83x44) Host (83x44)
Give tappable elements at least 48x48 CSS pixels and 8 pixels of spacing — usually padding on the link rather than a bigger font.
The served HTML contains 185 words and the rendered page 598 — the content is present before JavaScript runs.
What the server sends a phone matches what it sends a desktop browser.
The canonical and robots directives are the same before and after JavaScript runs.
Measured 0.9s on a simulated phone viewport. Google's threshold for 'good' is 2.5s.
10 links in the served HTML, 7 after rendering — navigation is discoverable.
Cumulative Layout Shift measured at 0.000 (good is 0.1 or less).
The page loaded without JavaScript errors.
Every image, script and stylesheet loaded.
The page fits the mobile viewport with no sideways scrolling.
0 long JavaScript task(s) blocked the main thread while loading.
4 of 96 text block(s) render below 12px on a mobile viewport.
The page made 16 network requests to load.
| Final URL | https://icampmaroc.com/ |
|---|---|
| Host IPs | 104.21.85.42, 172.67.202.70, 2606:4700:3034::6815:552a, 2606:4700:3034::ac43:ca46 |
| Pages crawled | 12 of 12 attempted |
| Sitemap URLs | 23 |
| Nameservers | luciana.ns.cloudflare.com, rohin.ns.cloudflare.com |
| Mail servers | mx1.privateemail.com, mx2.privateemail.com |
| DKIM selectors | default |
| Mail server IPs | 162.255.118.7, 162.255.118.8 |
| TLS | TLSv1.3 · TLS_AES_256_GCM_SHA384 · issued by Google Trust Services |
| Detected stack | custom / Cloudflare / Cloudflare |
| Browser render | Camoufox (stealth Firefox) · 4.6s · 598 words, 7 links after JavaScript |
BounceZero Ltd does this work: technical remediation, local SEO and email deliverability. Tell us what you want fixed and we'll reply with what it takes. No call required, no obligation.
We re-audit on a schedule and email you only when a check that was passing starts failing. That is usually a recent change to the site or its DNS, and it is findable while still fresh. No digest, no newsletter.
Monitoring means repeatedly fetching your site and emailing about it, so we ask you to prove you own icampmaroc.com first.