@dannyboy - yes it is, and I'm afraid it won't be for long. The past year it has performed (conversion wise) poorly even though I've run even diagnostic imaginable on it. Runs fast, no canonical issues, etc. Think I'll simplify the site back down to hand coded html5. Everyone tells me it looks great. pff
@samwest I'm going to throw a couple of ideas out there.
1) Have you tested your site performance at [
webpagetest.org...]
If so, do you consistently score well on your time to first byte. If not, do you know where the bottleneck is, such as DNS response time. Also, don't just test your homepage. Test the page where you conversions happen, such as your cart/checkout/registration page.
2) Does your hosting provider provide your DNS, or do you have a third-party DNS provider, such as [
easydns.com...] ? If you're not hosting your DNS third-party, you may want to consider it.
3) Do you have a WordPress caching plugin installed and active, such as W3 Total Cache, Super Cache, or ZenCache? I've used all, and would recommend ZenCache over the alternatives.
4) Do you have XML-RPC disabled and/or blocked? If so, consider disabling it as it can drain you server resources. Read more here: [
blog.sucuri.net...]
I've recently discovered bots pummeling my WordPress 'xmlrpc.php' file. I had no idea this was going on. I had thousands of hits to this file, many times in a single day.
You can enable logging to see if this is really happening to you:
[
saotn.org...]
If you don't need XML-RPC, you can disable it the following ways:
Plugins:
[
wordpress.org...]
[
wordpress.org...]
But if you know you really have no use for XML-RPC, I would disable at the Apache .htaccess level above the WordPress rewrite section:
# Block XML-RPC
<Files "xmlrpc.php">
Order allow,deny
Deny from all
</Files>
This may be anecdotal, but ever since I blocked xmlrpc.php using .htaccess (after previously trying both plugins above) I've experienced traffic and conversion improvements.
BTW, be sure to also disable the useless XML-RPC header WordPress sends with each response. Just search for "hide xmlrpc.php in HTTP response headers" in the following page:
[
deluxeblogtips.com...]
5) Is your site all SLL/HTTPS? If so, do you have the SPDY protocol enabled and activated on your server? You can test your server here: [
spdycheck.org...]
6) Is your site susceptible to the Heartbleed bug (unlikely at this point, but worth throwing out there). You can test here: [
filippo.io...]
7) Is your SSL certificate chain complete? Meaning, do you have the Intermediate CA properly installed. You can test here: [
geocerts.com...]
It may also be worth testing your site's overall SSL configuration: [
ssllabs.com...]
8) Have you tested your site against the Poodle vulnerability? You can test here: [
poodlescan.com...]
9) When you test your own site using Chrome or Firefox, do you use private/incognito mode, so as not to pollute the environment with your own cookies and localStorage browser settings?
10) You mentioned using GA and how it seems your traffic is being shaped or artificially manipulated. If you're suspicious of such activity, then you may want to consider replacing them with another third-party analytics script. If your open to switching, I recommend [
clicky.com...]
You can compare them here:
[
clicky.com...]
They're free up to 3000 daily page views, then shift to $9.99 monthly for 30,000 monthly page views. You can have multiple sites per account. If you're unsure, you can run both simultaneously to see how they stack up. It wont' slow down your site as they're JavaScript code is loaded async.
11) This probably won't tell you much, but you may want to install the Theme Check plugin to see if there's anything dysfunctional going on with your site: [
wordpress.org...]
12) Are you monitoring your site's uptime? Uptime monitoring is part of Clicky, but there are also free resources that provide this. Not just notifying you of ping failures, but actually downloading your page to test for text that should appear for a successfully rendered page, such as the copyright text in your page footer.
13) Is your site mobile responsive? If so, are you hiding your menu behind a toggle hamburger/menu icon? Do you have the word "Menu" as part of your icon? Here's a site discussing testing of the navigation icon:
[
exisweb.net...]
By the way, I've tried multiple variations of the mobile icon and found that page views increased and bounce rates decreased when I opted to not use any toggle mobile menu and just showed the full site menu as a stacked menu below the logo. If you need to squeeze as much interactivity out of your visitors, then you may just want to show the entire menu, screen real estate waste be damned.
14) Are you sure you have no canonical issues? For example, if you use the Yoast SEO plugin, have you confirmed that the following tags have the correct protocol on http and https pages: canonical, prev_rel_link, next_rel_link, json_ld_output? For instance, if your page is on http, but someone is visiting https, your canonical may point to the https URL instead of the http URL. This can be especially problematic if you have a caching plugin generating these pages.
15) Are you sure you have no mixed content errors on your https pages?
16) Do you have visible ways for visitors to contact you? Email, phone, at the top of your pages? You may even want to consider getting an 800/888 number through a service such as [
virtualpbx.com...] that can forward calls to another number, such as your cell or a pre-paid phone. This may instill trust from a user perspective.
17) Is your registration/cart/checkout page on SSL? If not, can you change it? If I were to register on a site, the following must absolutely be in place:
1) SSL-enabled page
2) No mixed content warnings/errors
3) Prefer a blurb of text reassuring me I won't be spammed
18) Do you have a mechanism in place to make sure your sign up form is actually functioning properly? For instance, if your form is on a HTTPS page, are you sure you're also posting to a HTTPS page? You may want to consider logging errors or form submissions via AJAX.
19) Have you ever considered changing hosts or moving to a VPS/dedicated server?