Hospitality security reports

C

Champagne L. Albert Guichon

champagne-albertguichon.fr

58

Champagne L. Albert Guichon is a small family-owned vineyard and champagne producer located in Mardeuil, France, with a heritage dating back to 1929. The company specializes in cultivating traditional champagne grape varieties and producing a range of champagne cuvées. Their market position is that of a boutique producer emphasizing quality and environmental responsibility, as evidenced by their HVE certification. The website reflects a professional and consistent brand image, targeting wine enthusiasts and hospitality clients. Technically, the website employs a modern technology stack including Bootstrap, jQuery, FontAwesome, and integrates Google Analytics and a robust cookie consent mechanism via Consentmanager.net. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though some security headers could be improved. The security evaluation shows good practices in data protection and privacy compliance, including GDPR adherence and cookie consent. However, the absence of WHOIS data limits domain trust assessment. Overall, the site is trustworthy and professionally maintained, with clear contact information and social media presence. Strategically, the company should consider enhancing security headers, publishing a vulnerability disclosure policy, and improving WHOIS transparency to strengthen trust and compliance further.

L

Le BOCAL

restaurantlebocal.fr

50

Le Bocal is a specialized seafood restaurant located in Reims, France, offering a variety of fish, shellfish, and crustaceans with a focus on fresh, regional products. The business operates primarily as a dining establishment with additional services such as table reservations and gift vouchers. The website reflects a professional and consistent brand image, targeting a general audience interested in quality seafood dining experiences. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Google Analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could enhance protection. The absence of WHOIS data limits domain trust assessment, but the website's professional presentation and clear contact information support its legitimacy. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations, making it a trustworthy digital presence for the restaurant.

J

Rozvoz jídel v Praze

jidlo.eu

44

The website jidlo.eu serves as a simple landing page for a food delivery service based in Prague, Czech Republic. It offers home-cooked meals prepared with fresh ingredients using the SOUS VIDE method. However, the site redirects users to the partner restaurant The PUB Praha 6 for placing orders, indicating a business model reliant on partnership rather than direct sales. The site content is minimal but relevant to the hospitality industry, targeting general consumers seeking food delivery services. The business appears small and localized with no explicit corporate information disclosed on the site. Technically, the website uses a moderate technology stack including jQuery, Foundation framework, Font Awesome, and Google Analytics for tracking. The site is mobile optimized and uses HTTPS, but lacks advanced SEO and accessibility features. Security posture is basic with no visible security headers and no forms collecting user data on the landing page, reducing attack surface but also limiting user engagement. Privacy and cookie policies are absent, which is a compliance gap. WHOIS data is unavailable due to EURid privacy restrictions, but the domain appears legitimate with no suspicious indicators. Overall, the site is functional but basic, with room for improvement in transparency, security, and compliance.

P

Panský dvůr Dolní Počernice

pddp.cz

42

Panský dvůr Dolní Počernice is a small hospitality business based in the Czech Republic offering a range of services including a restaurant, pizzeria, brewery, spa, pension, and event hosting. The website presents a professional and consistent brand image targeting local and regional visitors interested in leisure and dining experiences. The business model focuses on integrated hospitality services under one brand, positioning itself as a local provider with multiple offerings. Technically, the website is built on WordPress using the Foundation framework, jQuery, and Font Awesome, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and a cookie consent mechanism in place, but lacks advanced security headers and a visible privacy policy, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, though the website content and social media presence support legitimacy. Overall, the site is safe for general audiences and provides a good user experience with clear navigation and relevant content.

T

The PUB

thepub.cz

60

The PUB is a hospitality business operating a chain of pubs primarily in Prague, Czech Republic, with additional locations in Berlin and Bucharest. The business focuses on providing a unique beer experience including self-service beer taps, master bartenders, and beer pouring schools, complemented by food offerings. The website reflects a medium-sized, established hospitality brand with a consistent and professional digital presence. Technically, the site uses common JavaScript libraries such as jQuery and GSAP, and integrates multiple Google Analytics and Tag Manager instances for tracking. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which are important for compliance and trust. The domain is long-standing and registered with a Czech registrar, consistent with the business claims. Overall, the website is well designed and functional but requires improvements in privacy compliance and security posture to enhance trust and regulatory adherence.

I

il capitano ristorante

ilcapitano.cz

58

il capitano ristorante is a well-established Mediterranean restaurant located in Prague, Czech Republic, known for its quality ingredients, fresh seafood, and excellent steaks. The website reflects a professional and consistent brand image, supported by multiple industry recognitions such as Tripadvisor Certificates of Excellence and Restaurant Guru recommendations. The business targets a general audience seeking authentic Italian dining experiences near the city center. Technically, the website is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. The absence of WHOIS data is a notable gap, slightly reducing domain trustworthiness but not impacting the visible business legitimacy. Overall, the site presents a trustworthy and user-friendly digital presence for the restaurant.

A

Ace Hotel

acehotel.com

72

Ace Hotel is an established boutique hotel chain operating in North America, Japan, Australia, and Greece, providing hospitality and lodging services. The website reflects a professional and consistent brand presence targeting travelers and tourists seeking unique hotel experiences. Technically, the site is built on WordPress, hosted on AWS infrastructure, and employs modern tracking and marketing technologies such as Google Tag Manager, Facebook Pixel, and Hotjar. The site is mobile-optimized and accessible with good SEO practices. Security posture is generally good with HTTPS enforced and bot protection via reCAPTCHA; however, DNSSEC is not enabled, and security headers are not explicitly detected, representing areas for improvement. Privacy compliance is weak due to the absence of explicit privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the domain registration data supports the legitimacy and maturity of the business, with no suspicious patterns detected.

M

MYJO, s.r.o. - REZEO

rezeo.cz

44

REZEO is a Czech Republic based SaaS company specializing in an online reservation system tailored for small accommodation providers. The platform aims to simplify online booking processes, enhance guest comfort, and improve rental efficiency. The company operates under MYJO, s.r.o., founded in 2021, positioning itself as a niche player in the hospitality sector. The website reflects a professional and consistent brand image with a clear focus on its target audience. Technically, the site employs modern web technologies including Google Tag Manager, Facebook Pixel, and consent management tools, hosted by Active24. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, security headers and formal policies like privacy and terms of service are missing, representing areas for improvement. Overall, the website is trustworthy and functional, with moderate user tracking and marketing integration.

J

Jezdecké centrum Královický dvůr

kralovickydvur.cz

46

Jezdecké centrum Královický dvůr is a hospitality and equestrian service provider located near Prague, Czech Republic. The business offers a restaurant, accommodation in a historic building, corporate event hosting, and a comprehensive equestrian center. Their target audience includes horse enthusiasts, tourists, families, and corporate clients seeking unique event venues. The website reflects a well-structured and professionally designed platform with clear navigation and relevant content. Technically, the site uses modern JavaScript libraries, Google Analytics, Facebook Pixel, and Typekit fonts, with a CMS likely based on Nette framework. Security posture is moderate with HTTPS usage but lacks explicit security headers and privacy compliance documentation. Contact information is clearly presented with phone numbers and a contact form, but no privacy or cookie policies were found, indicating compliance gaps. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

E

ESC Olomouc

escolomouc.cz

46

ESC Olomouc operates as a modern equestrian center in the Czech Republic, specializing in hosting show jumping and dressage competitions. The website positions the center as the most exclusive equestrian venue in the country, targeting equestrian sports enthusiasts and competitors. Key services include event hosting, live streaming, and hospitality offerings such as a restaurant. The business is small-sized, founded in 2012, and maintains partnerships with local financial institutions and sports organizations. Technically, the website uses modern frontend technologies like Alpine.js and Swiper.js, with a responsive design and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. No forms or direct contact details are visible, which may impact user engagement and trust. Overall, the site is professional and content-rich but could enhance privacy compliance and security transparency.

Dostihový spolek a.s. operates as a prominent horse racing organization based in Pardubice, Czech Republic, managing events such as the renowned Velká pardubická race. The company targets horse racing enthusiasts and visitors, providing event calendars, ticketing, and visitor information. The website reflects a medium-sized regional business with a focus on hospitality and transportation services related to horse racing events. Technically, the website is built on WordPress using modern plugins and themes, ensuring good mobile optimization and SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response details are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Chuchle Arena Praha, s.r.o. operates a historic and prominent horse racing and equestrian sports venue located in Prague, Czech Republic. The company offers a multifaceted business model including horse racing events, show jumping competitions, event space rental, accommodation services, and a riding academy. The website reflects a well-established business with a strong market position in the Czech equestrian and sports hospitality sector. The target audience includes horse sports enthusiasts, families, tourists, and event organizers. Technically, the website uses a combination of legacy and modern web technologies including jQuery, Google Tag Manager, Google Analytics, Matomo, and Google reCAPTCHA. The site is built on the IPO CMS platform and demonstrates good mobile optimization and SEO practices. However, some technical debt is noted with the use of older JavaScript libraries and missing security headers. From a security perspective, the site enforces HTTPS and implements user consent mechanisms for cookies and tracking, aligning with GDPR requirements. The absence of WHOIS data reduces domain trustworthiness, and the lack of security headers and outdated libraries present moderate security risks. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, content-rich, and compliant with privacy regulations, but improvements in security headers, updated libraries, and domain registration transparency are recommended to enhance trust and security posture.

B

Bureau des Congrès de l'Eurométropole de Metz

congres-metz.com

58

The website congres-metz.com serves as the official online presence for the Bureau des Congrès de l'Eurométropole de Metz, promoting Metz as a prime destination for business events, conferences, and seminars. It targets business professionals and event planners, offering comprehensive information on venues, accommodations, catering, and sustainable event practices. The site is well-positioned regionally, emphasizing accessibility and eco-responsibility. Technically, the site is built on WordPress with modern plugins for SEO, multilingual support, and cookie consent, ensuring a robust digital infrastructure. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and includes integrity checks on scripts, reflecting a good security posture. However, the absence of WHOIS registration data and explicit contact information slightly detracts from its trustworthiness. Overall, the site is professional, user-friendly, and compliant with privacy regulations, making it a reliable resource for its audience.

P

Panství Bechyně s.r.o.

panstvi-bechyne.cz

56

Panství Bechyně s.r.o. is a well-established hospitality and cultural tourism company based in the Czech Republic, offering accommodation, cultural experiences, golf, and art exhibitions primarily in the South Bohemian region. The company operates multiple related domains representing different facets of its business, including forest management, castle tourism, resort services, golf, and art. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. It targets tourists and visitors interested in cultural heritage and leisure activities in the region. Technically, the website employs modern frontend technologies such as StimulusJS and Tailwind CSS, with Google Tag Manager for analytics and tracking. The site is mobile-optimized and performs moderately well. Hosting is provided by Webglobe, consistent with the domain's nameservers. Privacy compliance is well addressed with accessible privacy and cookie policies and a consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security headers and public security policies or incident response contacts. The WHOIS data confirms the domain's legitimacy and long-standing registration since 1999, matching the business's claimed history. Overall, the website presents a trustworthy, professional, and user-friendly digital presence for Panství Bechyně s.r.o., with minor recommendations to enhance security transparency and incident response readiness.

D

DVORCE TŘEBOŇ s.r.o.

dvorce.cz

58

Penzion Dvorce is a small hospitality business located in the South Bohemian region of the Czech Republic, offering accommodation and dining services with a focus on biofarm products and family-friendly experiences. The website presents a professional and consistent brand image, targeting families, couples, and tourists interested in nature and regional cuisine. The business model integrates accommodation, restaurant services, and gift voucher sales, positioning itself as a regional eco-friendly hospitality provider. Technically, the website uses a modern tech stack including jQuery, Google Tag Manager, and Facebook SDK, with good mobile optimization and SEO practices. The site is served over HTTPS with valid SSL, but lacks some security headers and formal privacy and terms of service pages, which are areas for improvement. Cookie consent is implemented, indicating some level of privacy compliance. Security posture is moderate with no visible vulnerabilities or exposed sensitive data, but the absence of WHOIS data limits domain trust assessment. The site uses tracking pixels from Facebook and Google Analytics, with moderate user tracking levels. Overall, the website is safe, family-friendly, and professionally maintained, but could enhance compliance and security transparency. Recommendations include publishing privacy and terms policies, adding security headers, implementing a security.txt file, and verifying domain registration details to improve trust and compliance.

PA Sports is a collaborative sports tourism organization representing 13 member destinations across Pennsylvania, aiming to attract and service quality sports events. The website is professionally designed, mobile-optimized, and uses modern web technologies including RequireJS, jQuery, and Google Tag Manager. The site employs HTTPS and a consent management platform to manage user privacy preferences. However, no explicit privacy policy or terms of service were found on the analyzed page, and no contact information is readily available. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency but does not necessarily indicate illegitimacy given the professional nature of the site. Overall, the website presents a good security posture with room for improvement in privacy compliance and domain registration transparency.

V

Visit Philadelphia

visitphilly.com

59

Visit Philadelphia operates as the official tourism and visitor information website for the city of Philadelphia, providing comprehensive resources including hotels, events, dining, and local attractions. The site targets tourists, families, and culture enthusiasts, positioning itself as the authoritative source for planning visits to Philadelphia. The business model centers on destination marketing and travel facilitation, leveraging partnerships with local hotels and event organizers. Technically, the website is built on WordPress with a modern tech stack including Google Analytics, Klaviyo, and various advertising and tracking integrations, ensuring good SEO, mobile optimization, and user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though it lacks a public security policy or incident response information. The absence of WHOIS registration data is unusual but does not detract significantly from the site's legitimacy given its professional presentation and official branding. Overall, the website is a well-maintained, trustworthy resource for Philadelphia tourism.

A

Absolutum Group

absolutumgroup.com

64

Absolutum Group is a hospitality business operating a portfolio of wellness hotels, resorts, restaurants, and villas primarily in the Czech Republic, Slovakia, and Seychelles. The company positions itself as a provider of original and unique locations with high-quality services and stylish facilities. The website reflects a medium-sized hospitality group with multiple subsidiaries, targeting general consumers seeking wellness and leisure experiences. Technically, the website uses modern web technologies such as lazy loading for images and Google Fonts, hosted likely on a Czech hosting provider. However, it lacks advanced SEO and accessibility features and does not use structured data or Open Graph tags. Security posture is minimal with no visible security headers or privacy policies, and no cookie consent mechanisms are present. The domain registration is consistent with the business profile, registered since 2021 without privacy protection, indicating transparency. Overall, the website is functional and professional but lacks critical compliance and security features.

F

FairCasinos

fair-casinos.com

65

FairCasinos is a specialized online platform dedicated to providing comprehensive reviews and ratings of online casinos targeting Canadian players. Established in 2024, the site offers detailed insights into casino bonuses, game variety, licensing, and payment methods, positioning itself as a trusted affiliate and review resource in the Canadian gambling market. The platform leverages WordPress with modern SEO and user experience optimizations to deliver content effectively across devices. Security posture is solid with HTTPS and domain transfer protections, though improvements in DNS security and published policies are recommended. Overall, the site presents a professional and trustworthy front for users seeking reliable casino information.

P

Pivovar Podlesí

pivovarpodlesi.cz

60

Pivovar Podlesí is a small local microbrewery and hospitality business located in the Czech Republic, specializing in brewing beer, hosting events such as weddings, and providing restaurant and pension services. The website is professionally designed using the Wix platform, presenting clear business information and contact details. The technical infrastructure relies on Wix's proprietary frameworks and hosting, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms. The absence of WHOIS data limits domain trust assessment, but the website content and presentation support legitimacy. Overall, the business appears credible with room for improvement in privacy and security practices.

R

Royal Dobříš

spadobris.cz

47

Royal Dobříš operates a luxury wellness and apartment accommodation business located in Dobříš, Czech Republic, targeting tourists and visitors seeking premium wellness experiences near Prague. The website showcases private wellness facilities, premium apartments with private whirlpools and saunas, and a bistro offering European cuisine. The business positions itself as a premium local hospitality provider with a focus on privacy, quality, and customer experience. Technically, the website is built on WordPress with WooCommerce and Elementor, integrating modern marketing and tracking tools such as Google Analytics, Facebook Pixel, and Ecomail. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS enforced but lacks some security headers and formal privacy and terms policies, indicating room for compliance improvement. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence.

S

Sport-Eli

sporteli.cz

39

Sporteli is a small family-owned business specializing in sailboat rentals and teambuilding events on the Orlík reservoir in the Czech Republic. Established in 1990, the company offers a fleet of 19 fully equipped vessels and professional crew support, targeting corporate clients and recreational sailors. The website is built on WordPress with modern technologies such as Bootstrap and jQuery, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enabled, but lacks advanced security headers and privacy policies, indicating room for compliance improvements. The absence of WHOIS data raises some concerns about domain legitimacy, though the website content and contact information appear professional and trustworthy. Overall, the site scores well on business credibility and technical implementation but should address privacy and security policy gaps to enhance trust and compliance.

S

Sportovní zařízení města Příbram

juniorklubpribram.cz

39

Junior Klub Příbram is a local multi-genre cultural club located in Příbram, Czech Republic, offering a variety of events including concerts, lectures, theatre, and children's activities. The club also provides venue rental services for corporate and private events. The website reflects a community-focused business model targeting a broad audience including families and local residents. The site is professionally designed with good content quality and clear navigation, supporting mobile responsiveness and basic accessibility. Technically, the site uses jQuery and custom JavaScript with CSS styling, served over HTTPS with a valid SSL certificate, but lacks advanced security headers and detailed security policies. Privacy compliance is addressed with a cookie consent mechanism and a basic privacy policy page, indicating awareness of GDPR requirements. However, the absence of WHOIS data and explicit company contact emails or phone numbers slightly reduces business credibility. Overall, the site is trustworthy and functional but could improve in security posture and transparency.

C

Cestovní kancelář CAPRO

capro.cz

55

Cestovní kancelář CAPRO is a Czech travel agency specializing in active holidays and various travel packages including last minute and first minute offers. The company targets Czech-speaking travelers seeking both domestic and international active vacations. The website is professionally designed, mobile-optimized, and provides clear contact information, supporting a medium-sized business profile in the hospitality sector. Technically, the site employs modern JavaScript libraries, tracking tools like Google Analytics and Facebook Pixel, and enforces HTTPS with appropriate security headers, indicating a mature digital infrastructure. However, the absence of WHOIS data and explicit privacy and cookie policies suggests areas for improvement in transparency and compliance. Overall, the security posture is strong with no evident vulnerabilities, but the lack of formal security and incident response disclosures limits full security maturity assessment. Strategic recommendations include publishing comprehensive privacy and cookie policies, establishing a vulnerability disclosure process, and enhancing accessibility features to improve compliance and user trust.

W

Wellness resort Jánošíkov dvor

janosikovdvor.sk

56

Wellness resort Jánošíkov dvor is a hospitality business located in Slovakia, offering accommodation in traditional wooden cottages, wellness services, and a restaurant with traditional Slovak cuisine. The website positions the resort as a regional wellness destination in the Malá Fatra National Park, targeting families, couples, and corporate clients for events and teambuilding. The business is part of the Absolutum Group, indicating a structured corporate backing. Technically, the website uses modern web technologies including JavaScript libraries, lazy loading, and Google reCAPTCHA for form security. It is mobile optimized and provides multilingual support. Security posture is good with HTTPS and consent mechanisms, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

S

Salut Restaurant

salutrestaurant.cz

65

Salut Restaurant is a modern hospitality business located in Prague 7, Holešovice, offering seasonal, fresh, and modern cuisine with a focus on quality dining experiences. The website showcases a professional and well-structured digital presence, including event hosting, daily and evening menus, and an e-shop. The business is part of the Absolutum Group, indicating a stable parent company relationship. Technically, the website employs modern JavaScript libraries and tracking tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA usage, though some security headers could be improved. Privacy compliance is well addressed with clear GDPR and cookie policies. Overall, the website is trustworthy and professionally maintained, though the lack of WHOIS data slightly reduces domain trustworthiness.

F

FestivalyVina

festivalyvina.cz

41

FestivalyVina operates the largest wine festival tour in the Czech Republic, organizing and promoting multiple wine-related events across various cities. The website serves as an official portal providing event calendars, galleries, and information about wine producers, targeting wine enthusiasts and the general Czech public interested in wine culture. Technically, the site uses established JavaScript libraries such as jQuery and Swiper.js, integrates Google Analytics for visitor tracking, and loads resources over HTTPS, indicating a modern but moderately optimized infrastructure. Security posture is adequate but could be improved by implementing security headers and publishing privacy and cookie policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and partner affiliations suggest a legitimate business. Overall, the site is professional, content-rich, and well-branded but requires enhancements in privacy compliance and security transparency.

K

Koně Hradištko

kone-hradistko.cz

52

Koně Hradištko is a specialized equestrian business based in the Czech Republic focusing on horse breeding, riding training, event hosting, and hospitality services including accommodation. The website presents a well-structured and content-rich platform targeting horse enthusiasts, riders, and tourists interested in the Kinsky horse breed and related cultural events. The business operates in a niche hospitality and equestrian sector with a small-scale footprint and regional market presence. Technically, the website is built on WordPress using common JavaScript libraries such as jQuery, Slick Carousel, and Fancybox, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and secure form handling, but lacks advanced security headers and visible privacy or cookie policies, which are compliance gaps. The absence of WHOIS data limits domain legitimacy verification, though the website content and partner ecosystem suggest a legitimate operation. Strategic improvements in privacy compliance and security hardening are recommended to enhance trust and regulatory adherence.

R

Ringhotels

ringhotels.de

58

Ringhotels is a German hospitality business specializing in hotel bookings, wellness weekends, and conference hosting across Germany. The website targets travelers seeking authentic HeimatGenuss experiences and offers a professional platform for vacation planning. Technically, the site employs modern JavaScript frameworks, integrates Google Tag Manager and Facebook Pixel for analytics and marketing, and uses Cookiebot for cookie consent management. The site is mobile-optimized and has good SEO practices but lacks explicit privacy and terms of service pages in the provided content. Security posture is adequate with HTTPS and cookie consent but could be improved by adding security headers and incident response information. Overall, the domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.

B

BWH Hotels

bwh.de

55

BWH Hotels operates as a hotel brand offering individual freedom and a strong worldwide network, targeting hotel owners and operators. The website is professionally designed using TYPO3 CMS and Bootstrap, with moderate performance and good mobile optimization. Consent management scripts indicate GDPR awareness, though explicit privacy and terms of service pages are not found. Security posture is adequate with HTTPS enabled but lacks explicit security headers and visible incident response contacts. Overall, the site is trustworthy and safe with no adult or questionable content detected.

V

Vinofil Vinkurs

vinforedrag.no

52

Vinofil Vinkurs is a Norwegian small business specializing in wine education through in-person and digital courses, targeting both corporate and private clients. The website presents a professional and consistent brand image with clear offerings such as wine courses at workplaces, private homes, and gift cards. The business is newly established in 2023, and the domain registration aligns with this timeline. The site leverages modern web technologies and analytics tools but lacks critical privacy and security disclosures, which impacts compliance and trustworthiness. No blocking or WAF mechanisms hinder content access, allowing full analysis.

U

Uhelný mlýn

uhelnymlyn.cz

40

Uhelný mlýn is a Czech Republic-based small business operating a multifunctional event space, contemporary art gallery, and design loft. The website presents the business as a local cultural venue with a focus on events and art exhibitions. The digital infrastructure is built on WordPress with integration of popular marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and a Content-Security-Policy header, though additional security headers and policies could enhance protection. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. Overall, the website is professional and functional, but could improve transparency and security documentation.

ParisHotelsfr.com operates as an online hospitality platform focusing on hotel listings and tourism information primarily for Paris and the Bourgogne region, including the Communauté d’agglomération de l’Auxerrois. The website provides rich cultural and economic insights about the Auxerrois area alongside extensive hotel listings with direct links, targeting tourists and business travelers. Technically, the site uses modern web technologies such as Leaflet.js for mapping and is served over HTTPS, ensuring secure connections. However, the absence of WHOIS data and security headers indicates areas for improvement in transparency and security hardening. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is functional and professional but would benefit from enhanced security and compliance features.

F

Folie'Flore

folieflore.fr

46

Folie'Flore is a well-established cultural event organizer specializing in an annual floral show held in Mulhouse, France. The event is unique in Europe and has a 25-year history, attracting a large audience with its ephemeral gardens and light shows. The website effectively communicates the event details, history, and partnerships, targeting visitors and cultural enthusiasts. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel, ensuring good SEO and user experience with mobile optimization. Security posture is adequate with HTTPS and basic security practices, though improvements in security headers are recommended. Privacy compliance is addressed with a cookie consent banner and a privacy policy, but no explicit GDPR or data protection officer information is found. Overall, the site is professional, trustworthy, and serves its business purpose well.

J

Journées d'Octobre

journees-octobre.fr

46

Journées d'Octobre is a regional event organizer based in Mulhouse, France, specializing in hosting an annual artisan and creator fair alongside the Folie'Flore floral show. The event attracts a large audience and features numerous exhibitors, restaurants, and entertainment stages, positioning itself as a key cultural and commercial event in the Alsace region. The website effectively promotes the event with detailed information, imagery, and structured data for enhanced search engine visibility. Technically, the site uses modern JavaScript libraries like jQuery, integrates Google Analytics and Facebook Pixel for marketing, and employs HTTPS with a valid SSL certificate, ensuring secure user connections. However, the absence of explicit security headers and limited contact information slightly reduce the security posture. The WHOIS data is unavailable, which is common for .fr domains but reduces transparency. Overall, the site is professional, accessible, and trustworthy, with room for improvement in security policies and contact transparency.

M

Mulhouse Expo S.A.E.M.L

foiredemulhouse.fr

40

Foire de Mulhouse is a well-established regional event organizer in France, hosting an annual fair with cultural themes and exhibitions. The website presents the 79th edition scheduled for May 2026, highlighting Italy as the thematic focus. The business operates primarily in the hospitality and event sector, targeting general public visitors interested in fairs and cultural events. The company behind the event is Mulhouse Expo S.A.E.M.L, a medium-sized entity with a long history since 2011. The website content is professionally presented in French, with clear navigation and relevant event information. Social media integration and partner links enhance its market presence. Technically, the website uses a traditional tech stack including jQuery 1.11.2, Bootstrap, and Google Analytics. Hosting is provided by OCI CLOUD as per WHOIS data. The site is mobile-optimized with good design quality, though some technical improvements are possible, such as updating libraries and enhancing accessibility. SEO is basic but functional. From a security perspective, the site uses HTTPS (assumed from domain and modern standards), but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. The contact form collects user data but lacks visible anti-spam protections. No incident response or security policy information is provided. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website is trustworthy and professional but would benefit from improved privacy compliance and security hardening to reduce risk and enhance user trust.

F

Salon FestiVitas (Mulhouse, 68) | FestiVitas, le salon de toutes vos passions

festivitas.fr

45

The website www.festivitas.fr represents a regional event organizer for the FestiVitas salon held in Mulhouse, France, focusing on gastronomy, wines, and travel. The site provides event information, thematic sections, and visual content targeting epicureans and travelers seeking new experiences. The business model centers on event management and exhibition services, positioning itself as a unique concept in the hospitality sector. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and Facebook Pixel, ensuring good mobile optimization and SEO practices. However, the absence of a CMS indication and limited hosting details suggest a custom or static site approach. Security-wise, the site uses HTTPS and standard analytics tools but lacks critical security headers and published security policies, which could be improved to enhance trust and compliance. The WHOIS data is missing, which reduces domain trustworthiness, but the website content and structure appear legitimate and professional. Overall, the site is functional and well-designed but would benefit from enhanced privacy, security, and transparency measures.

C

Culligan Storkök AB

3s.nu

55

Culligan Storkök AB operates as a leading Swedish provider of commercial kitchen solutions, offering comprehensive services from planning and design to installation and maintenance. With over 30 years of industry experience and a nationwide service network, the company targets professional kitchens including restaurants, cafes, and schools. The website reflects a mature digital presence with professional branding, clear service offerings, and strong customer engagement channels. Technically, the site is built on WordPress with modern frameworks and integrates advanced analytics and marketing tools while maintaining GDPR compliance. Security posture is solid with HTTPS and CAPTCHA protections, though there is room for improvement in HTTP security headers and formal security policies. Overall, the site demonstrates high professionalism and trustworthiness, supporting Culligan Storkök's market position as a reliable B2B partner in the hospitality sector.

S

S-Markt & Mehrwert GmbH & Co. KG

s-reisewelt.de

68

S-Reisewelt is a German travel portal operated by S-Markt & Mehrwert GmbH & Co. KG, affiliated with the Sparkasse banking group. The website offers a wide range of travel services including package holidays, cruises, hotels, flights, car rentals, and travel insurance. It targets German-speaking travelers seeking quality and affordable travel options with a focus on customer service and personalized recommendations. The platform integrates multiple partners such as Booking.com, GetYourGuide, and PAYBACK to enhance user experience and loyalty benefits. Technically, the website is built using modern web technologies like React and Apollo GraphQL, hosted likely on T-Systems infrastructure, and optimized for mobile devices with good SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although no dedicated security policy or incident response contacts are published. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is professional, trustworthy, and well-positioned in the German travel market.

V

Verband Christlicher Hotels (VCH)

vch.ch

10

The website www.vch.ch represents the Verband Christlicher Hotels (VCH), a Swiss association of Christian hotels offering accommodations primarily in Switzerland and neighboring European countries. The site provides detailed listings of over 30 Christian hotels, targeting travelers seeking faith-based hospitality experiences. The business model centers on promoting member hotels and facilitating bookings, brochures, and job offers within the hospitality sector. The website is professionally designed with consistent branding and multilingual support, positioning VCH as a niche leader in Christian hospitality in Switzerland. Technically, the site is built on TYPO3 CMS with modern front-end technologies including Bootstrap, jQuery, Swiper.js, and Leaflet.js for interactive maps. It uses Matomo analytics, reflecting a privacy-conscious approach to user tracking. The site is mobile optimized and SEO friendly, though performance is moderate. Security posture is adequate with HTTPS enforced but lacks visible security headers and explicit privacy and cookie policies, indicating areas for improvement. Security-wise, no critical vulnerabilities or WAF blocking were detected. However, the absence of privacy and cookie policies and security headers represents compliance and security gaps. No incident response or vulnerability disclosure information is present. The WHOIS data aligns well with the website's claims, supporting legitimacy and trustworthiness. Overall, the website is a credible, well-structured platform for Christian hospitality services in Switzerland, with good business credibility and technical implementation. Strategic enhancements in privacy compliance and security headers would strengthen its security posture and regulatory adherence.

D

Dorint Hotels & Resorts

dorint.com

59

Dorint Hotels & Resorts is a well-established hospitality company operating approximately 65 hotels across Germany, Austria, and Switzerland. The website serves as a comprehensive platform for hotel bookings, event hosting, and culinary experiences targeting both leisure and business travelers. The company demonstrates a strong market position with a large footprint in the DACH region. Technically, the website is built on TYPO3 CMS, integrates modern analytics and marketing tools, and provides a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and domain registration consistent with business claims, though improvements such as enabling DNSSEC and adding security headers are recommended. Overall, the site is professional, trustworthy, and user-friendly, supporting the company's business objectives effectively.

L

Liechtensteiner Hotel- und Gastronomieverband

lhgv.li

64

The Liechtensteiner Hotel- und Gastronomieverband (LHGV) is a small but important hospitality industry association in Liechtenstein, providing services such as hotel and bike hotel classification, professional training courses, gift card sales, and industry news. The website is well-structured, professionally designed, and targets hospitality businesses and professionals in Liechtenstein. Technically, the site uses Concrete5 CMS, jQuery, Font Awesome, and Matomo analytics, indicating moderate digital maturity. The site is mobile optimized and SEO friendly but lacks some advanced accessibility features. Security posture is adequate with HTTPS enforced and email obfuscation, but lacks security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, with a strong alignment between WHOIS data and business claims.

L

Liechtenstein Marketing GmbH

tourismus.li

57

The website tourismus.li serves as the official tourism portal for the Principality of Liechtenstein, providing comprehensive information on accommodations, cultural events, outdoor activities, and gastronomy. It targets tourists and visitors seeking travel and vacation experiences in Liechtenstein, positioning itself as the authoritative source for tourism-related content in the country. The site is professionally designed with consistent branding and offers multilingual support via Weglot, enhancing accessibility for international visitors. Technically, the site is built on the Contao Open Source CMS and leverages modern web technologies including Bootstrap for responsive design, Matomo for analytics, and Usercentrics for GDPR-compliant cookie consent management. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Performance is moderate, with asynchronous loading of scripts to optimize user experience. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data confirms the domain's legitimacy and consistency with the official tourism entity of Liechtenstein, supporting a high trust level. Overall, the website is a reliable and professional tourism platform with good content quality and technical implementation. However, it would benefit from publishing explicit privacy policies, terms of service, and security incident response information to enhance compliance and user trust.

I

Visit Iceland | Official travel info for Iceland

iceland.is

65

The website www.visiticeland.com serves as an official travel information portal for Iceland, showcasing the country's natural wonders such as glaciers, northern lights, hot springs, and cultural heritage. The site targets tourists and travelers interested in exploring Iceland, providing rich content about attractions and travel tips. The business model focuses on tourism promotion and information dissemination, positioning itself within the hospitality industry. Technically, the site is built using modern web technologies including Gatsby and React, with good mobile optimization and SEO practices. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is weak due to lack of security headers, privacy policies, and contact information for incident response. Overall, the site is functional and content-rich but requires improvements in security and compliance to enhance trustworthiness.

A

A&A KG

ox-linz.at

56

OX Steaks & Grill Linz is a well-established hospitality business located in Pasching, Austria, offering a premium dining experience focused on steaks, grill dishes, sushi, brunch, and breakfast buffet. The website reflects a medium-sized restaurant with a strong local market position and a clear business model centered on dine-in services, online reservations, and gift voucher sales. The company is legally registered as A&A KG with transparent contact and legal information provided. Technically, the website is built on TYPO3 CMS with modern web technologies including jQuery, Google Analytics, and Google Tag Manager, ensuring a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some HTTP security headers could be improved. Privacy compliance is comprehensive with detailed GDPR-aligned policies and cookie management. Overall, the website is professional, trustworthy, and well-maintained, supporting the business's credibility and customer engagement.

S

Ski amadé

skiamade.com

64

Ski amadé is a prominent winter tourism website promoting skiing and snowboarding holidays in Austria, specifically in the Salzburg and Styria regions. The site offers extensive information about winter activities, slopes, and related services, targeting winter sports enthusiasts and tourists. The website is professionally designed with excellent content quality and mobile optimization, providing a positive user experience. Technically, it uses modern web technologies including Bootstrap and JavaScript, with good SEO and accessibility practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are not evident in the provided data. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness despite the professional appearance of the website. Overall, the site is reliable for its business purpose but would benefit from improved transparency in domain registration and enhanced security headers.

G

Gastein

gastein.com

62

Gastein.com is a regional tourism website promoting vacation and wellness activities in the Gasteinertal region of Austria. The site offers information on hiking, biking, yoga, and thermal spa experiences, targeting tourists and wellness seekers. The business model centers on tourism promotion and booking facilitation, positioning itself as a key regional destination platform. Technically, the website is built on TYPO3 CMS and leverages modern web technologies including Cookiebot for consent management and Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements cookie consent, but lacks visible security headers and published privacy or terms policies. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy. Overall, the site is professional and trustworthy from a content perspective but would benefit from improved transparency and security practices.

5

5HALLS HOMMAGE HOTELS GmbH

hommage-hotels.com

53

Hommage Luxury Hotels Collection operates a portfolio of premium luxury hotels across Germany and Austria, targeting affluent travelers seeking exclusive hospitality experiences. The company emphasizes tradition, high-quality service, and unique luxury moments, positioning itself strongly in the luxury hospitality market. The website reflects a professional and consistent brand image with comprehensive content about their hotels, services, and offers. Technically, the site is built on TYPO3 CMS and integrates modern analytics and marketing tools with GDPR-compliant consent management. Security posture is good with HTTPS and consent mechanisms, though some security headers could be improved. The absence of WHOIS data reduces domain trust slightly but does not detract from the overall legitimacy. Strategic recommendations include enhancing security headers and publishing incident response policies to further strengthen trust and compliance.

M

Mandarin Oriental Hotel Group

mandarinoriental.com

72

Mandarin Oriental Hotel Group is a globally recognized luxury hospitality brand offering premium hotel stays, fine dining, spa, wellness, and event services. The website reflects a high level of professionalism, targeting affluent travelers and business clients seeking luxury experiences worldwide. The company maintains a strong market position in the hospitality sector with a consistent and elegant brand presentation. Technically, the website employs modern technologies including Adobe Experience Platform, Google Tag Manager, and OneTrust for privacy compliance. Hosting and performance are optimized via Akamai CDN services, ensuring fast load times and excellent mobile responsiveness. The site includes comprehensive cookie consent mechanisms and privacy policies aligned with GDPR requirements. From a security perspective, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data. However, the absence of a public security policy or incident response information and the lack of WHOIS domain registration transparency are notable gaps. No vulnerabilities or malicious content were detected, indicating a mature security posture overall. The overall risk is moderate with recommendations to improve domain registration transparency and publish explicit security policies. The website is safe for general audiences and demonstrates strong trustworthiness and business credibility.