CoPath DigitalAmari Boutique Hotel Sayulita.
Amari is a boutique hotel in Sayulita, Mexico, taking direct bookings through Cloudbeds. We cleaned up a spam injection, fixed the homepage layout shift at its root, consolidated duplicate pages, and connected the booking engine to GA4 ahead of a bilingual SEO push.
The homepage jumped as it loaded: layout shift measured 0.347 on desktop and 0.219 on mobile, with about 85% of the desktop shift coming from a hero background video that painted late with nothing behind it. Our first fix was correct on disk but never reached visitors, because QUIC.cloud's unused-CSS optimisation stripped it from the stylesheet the browser actually received. At the same time, an automated plugin exploit had injected hidden casino spam pages (content only, with no guest, booking or payment data accessed), duplicate "-old" pages were still published alongside the live ones, and bookings lost their source when guests crossed over to the Cloudbeds engine.
- Profiled layout shift per element, traced it to the late-painting hero video, and delivered a poster-frame fix as inline CSS the cache optimiser cannot strip.
- Reserved space for the above-the-fold logo image and verified every result on cold page loads, not a warm cache.
- Removed the injected spam pages, confirmed core files and database were clean, rotated all passwords, and submitted the spam URLs to Google for removal.
- Added 301 redirects from five duplicate "-old" pages to their live counterparts and repointed the internal links.
- Switched Cloudbeds to a native GA4 connection with cross-domain measurement, and built a 60-day plan for new English pages with Spanish twins.