CO
colombia.travel

Site Audit Overview

Full SEO & technical audit of colombia.travel

Technical 62
On-Page 71
Speed 38
Security 45
Build 35
Content 68
AI Ready 15
Overall 48

Site Information

URL https://colombia.travel/es
CMS Drupal 8 EOL Nov 2021
Server nginx + Cloudflare CDN
SSL GoDaddy Wildcard (*.colombia.travel) CHAIN INCOMPLETE
Languages 9 (ES, EN, DE, FR, ZH, RU, PT, JA, KO)
Sitemap URLs 4,871 (ES: 1,071 | EN: 1,013 | FR: 699 | PT: 675 | DE: 636 | JA: 301 | ZH: 241 | KO: 140 | RU: 86)
HTML Size 155 KB (bloated)
TTFB 673 ms (target: <200ms)
Analytics UA-6650897-1 NO GA4 — UA sunset Jul 2024
CSS Frameworks Foundation + Bootstrap 3.3.7 (redundant)

Technical SEO

Score: 62/100

CRITICAL

Drupal 8 End-of-Life Since November 2021

The site runs on Drupal 8 which reached end-of-life in November 2021. This means no security patches, bug fixes, or updates are being released. The site is exposed to known vulnerabilities. Upgrade to Drupal 10 or 11 is urgently needed.

CRITICAL

Universal Analytics Only — No GA4

The site still uses Universal Analytics (UA-6650897-1) which stopped processing data in July 2024. There is no GA4 property detected. The site has been losing analytics data for nearly 2 years.

CRITICAL

SSL Certificate Chain Incomplete

The GoDaddy wildcard SSL certificate is missing intermediate certificates in the chain. This causes validation failures in some browsers and API tools, and may affect SEO crawlers.

WARNING

robots.txt Blocks HTML Pages and PDFs

The robots.txt disallows all *.html files and PDFs in /sites/default/files/. This may prevent indexing of legitimate content pages and downloadable travel guides.

WARNING

No Structured Data (JSON-LD / Schema.org)

Zero schema.org markup blocks found. A tourism site of this scale should have Organization, WebSite, TouristDestination, BreadcrumbList, and FAQPage schemas.

WARNING

Google Translate Widget Loaded

A Google Translate JS widget is loaded despite the site having native multilingual support. This adds unnecessary JavaScript, can confuse search engines, and produces lower-quality translations than native content.

PASS

Hreflang Implementation — Excellent

27 hreflang tags covering 9 languages with regional variants (en-US, en-GB, en-CA, en-AU, es-AR, es-MX, es-PE, es-ES, es-CL, es-PA, etc.). Also present in XML sitemap.

PASS

Redirects & Canonical Correct

HTTP to HTTPS (308), www to non-www (301), canonical tag correct, 404 pages return proper status code. Sitemap with 4,871 URLs includes hreflang and image extensions.

On-Page SEO

Score: 71/100

Meta Tags Analysis

Title (ES)
Guía oficial de turismo para conocer Colombia | Colombia Travel 66 chars
Title (EN)
Official tourism guide to explore Colombia | Colombia Travel 60 chars
Meta Desc
Viaje a Colombia, un destino único lleno de cultura, diversidad y gente amable... 161 chars
H1
Viajar a Colombia: cultura, diversidad y experiencias inolvidables 1 H1
H2s
16 total (some navigational, not semantic)
OG Tags
7 tags (title, site_name, type, url, image, image:url, determiner)
Twitter
summary_large_image (different image than OG)
CRITICAL

Zero Schema.org Markup

No JSON-LD structured data found. For Colombia's official tourism site, this is a significant missed opportunity. Required schemas: Organization, WebSite with SearchAction, TouristDestination for each city, BreadcrumbList, FAQPage for travel guides, Event for festivals.

WARNING

OG and Twitter Use Different Images

OG image: cartagena-colonial.jpg. Twitter image: meta-image.jpg. These should be consistent for unified social sharing appearance.

PASS

Image Alt Text Coverage: 99.4%

162 of 163 images have descriptive alt text. Only 1 image missing. WebP format used via Drupal image styles.

Performance

Score: 38/100 — Estimated Mobile PageSpeed: 25-35

DNS

2ms

TCP

91ms

TLS

187ms

TTFB

673ms

Total

1.05s

HTML only

CRITICAL

TTFB 673ms — Server Response Too Slow

Time to First Byte is 673ms. Google recommends under 200ms. This suggests Drupal's uncached page generation is slow, likely compounded by database queries and module overhead.

CRITICAL

155KB HTML — Extremely Bloated Homepage

The HTML document alone is 155KB (before images, CSS, JS). A well-optimized homepage should be under 50KB. The bloat comes from inline content for multiple carousels and sections all rendered server-side.

CRITICAL

163 Images — Only 42 Lazy-Loaded

The homepage loads 163 images but only 42 (26%) use lazy loading via lazysizes. The remaining 121 images load immediately, dramatically increasing initial page weight and LCP.

WARNING

Zero Resource Hints (preload / preconnect)

No preload or preconnect directives found. Critical resources like fonts, hero images, and key stylesheets should be preloaded to reduce render time.

WARNING

Mixed Frameworks: Foundation + Bootstrap 3 + jQuery UI

Three CSS/JS frameworks are loaded simultaneously: Zurb Foundation, Bootstrap 3.3.7 (EOL), and jQuery UI 1.13.2 from CDN. This adds massive redundant code and increases page weight significantly.

Security

Score: 45/100

Security Headers

Strict-Transport-Security MISSING Only on Cloudflare www redirect
Content-Security-Policy PARTIAL frame-ancestors 'self' only
X-Frame-Options OK SAMEORIGIN (duplicated)
X-Content-Type-Options OK nosniff (duplicated)
Referrer-Policy MISSING
Permissions-Policy MISSING
X-XSS-Protection DEPRECATED 1; mode=block
CRITICAL

Drupal 8 EOL — Known Unpatched Vulnerabilities

Running an end-of-life CMS on a government tourism website is a significant security risk. Multiple CVEs exist for Drupal 8 that will never be patched.

CRITICAL

SSL Chain Incomplete — Validation Failures

The GoDaddy intermediate certificate is missing from the chain. While modern browsers may fill in the gap via AIA, older browsers, API clients, and some crawlers will fail to validate.

WARNING

Missing HSTS, Referrer-Policy, Permissions-Policy

Three important security headers are missing on the origin server. HSTS only appears on the Cloudflare www redirect, not on the canonical domain.

Build Quality

Score: 35/100

Technology Stack

Drupal 8.x EOL 2021
Bootstrap 3.3.7 (CDN) EOL 2019
Foundation Zurb (primary grid) REDUNDANT
jQuery UI 1.13.2 (CDN) UNNECESSARY
Carousels Slick + Owl Carousel 2 LIBS
Lazy Loading lazysizes (42/163 images) 26% COVERAGE
Image Format WebP (Drupal image styles) GOOD
Accessibility Widget SkyNet All-in-One INFO
CRITICAL

Two Deprecated Frameworks Loaded

Bootstrap 3.3.7 (EOL January 2019) and Foundation are loaded simultaneously. This creates massive CSS/JS redundancy. Choose one modern framework or migrate to utility-first CSS.

WARNING

93 Inline Styles, 5 Inline Scripts

Heavy use of inline styles (93 instances) indicates poor CSS architecture. Combined with 5 inline scripts, this hinders caching and maintainability.

WARNING

Minimal Accessibility: 14 ARIA, 13 Roles

For a page with 163 images, 6 nav elements, and multiple interactive carousels, only 14 ARIA attributes and 13 role attributes is very low. An external accessibility widget (SkyNet) is loaded but doesn't replace proper semantic HTML.

Content & UX

Score: 68/100

PASS

Rich Content Sections

The homepage covers: Regional Discovery Map, Destinations with Traditions, Secrets of Colombia, Experiences, Top Destinations (Bogota, San Andres, Medellin, Cali), Activities (15+ items in carousel), Travel Guides/Manuals, TripAdvisor Reviews, Blog Articles, and Events Calendar.

PASS

Dynamic Event Content

Events section shows current festival dates (April-May 2026): Feria del Libro, Festival Vallenato, MANIFEST. This indicates active content management and keeps the page fresh for search engines.

PASS

Social Proof via TripAdvisor

TripAdvisor testimonials are embedded in a rotating carousel, showing real visitor reviews about Colombian destinations. Adds E-E-A-T trust signals.

WARNING

Extremely Long Homepage — Scroll Fatigue Risk

The homepage contains 8+ major sections with multiple carousels. 163 images suggests the page is very long. Users on mobile may experience scroll fatigue, leading to high bounce rates on lower sections.

WARNING

Some H2 Alt Text in Wrong Language

On the Spanish /es page, some image alt text appears in Russian on the Tayrona image. Alt text should always match the page language for SEO and accessibility.

AI Readiness

Score: 15/100 — Not ready for AI search era

CRITICAL

No llms.txt File

The site returns 404 for /llms.txt. This file helps AI models understand and correctly cite your content. For Colombia's official tourism site, this means AI assistants cannot reliably reference travel information.

CRITICAL

No AI Crawler Rules in robots.txt

The robots.txt has no rules for GPTBot, CCBot, Google-Extended, ClaudeBot, Bytespider, or other AI crawlers. The site should explicitly Allow these crawlers to ensure content appears in AI-generated travel recommendations.

CRITICAL

No Structured Data for AI Extraction

Without JSON-LD schema, AI models cannot reliably extract structured information about destinations, events, activities, or travel logistics. This means AI answers about Colombia will cite competitors with better structured data.

INFO

Good Content Foundation for AI

The site has rich descriptive content about destinations, activities, and culture that could be well-cited by AI models if properly structured. The multilingual content (9 languages) is a strong asset once AI-readiness is implemented.

Top 10 Recommendations

Prioritized actions to improve the site

1

Upgrade Drupal 8 to Drupal 10/11

URGENT

Security patches stopped in November 2021. Every day on Drupal 8 is an active security risk for a government website. This is the single most important action.

2

Migrate Universal Analytics to GA4

URGENT

UA stopped processing data in July 2024. The site has been blind to analytics for nearly 2 years. Implement GA4 immediately to start collecting visitor and behavior data again.

3

Fix SSL Certificate Chain

Add the GoDaddy intermediate certificate to the nginx configuration. This is a quick fix that resolves validation failures for some browsers and all API/crawler tools.

4

Add JSON-LD Schema Markup

Implement Organization, WebSite (with SearchAction), TouristDestination for each city page, BreadcrumbList for navigation, FAQPage for travel guides, and Event for festivals.

5

Remove Bootstrap 3.3.7 — Consolidate to One Framework

Eliminate the Bootstrap/Foundation redundancy. Keep Foundation (the primary grid) or migrate both to a modern utility-first framework. Remove jQuery UI dependency.

6

Add Preconnect and Preload for Critical Resources

Add preconnect hints for Google Fonts, CDNs, and analytics domains. Preload the hero image and critical CSS to improve FCP and LCP.

7

Lazy-Load ALL Below-Fold Images

121 images (74%) are not lazy-loaded. Apply native loading='lazy' or lazysizes to all images below the initial viewport. This alone could dramatically improve mobile performance scores.

8

Create llms.txt + Add AI Crawler Rules

Create a /llms.txt file describing Colombia's tourism offerings. Add explicit Allow rules in robots.txt for GPTBot, ClaudeBot, CCBot, Google-Extended, and Bytespider.

9

Add Missing Security Headers

Add Strict-Transport-Security (HSTS), Referrer-Policy: strict-origin-when-cross-origin, and Permissions-Policy to the nginx configuration.

10

Remove Google Translate Widget

The site already has professional translations in 9 languages via Drupal's native multilingual system. The Google Translate widget adds unnecessary JavaScript, can create duplicate content issues, and produces lower-quality translations.