Hospitality security reports

H

HZ Hotel s.r.o.

hranicnizamecek.cz

48

Chateau de Frontiere is a luxury hospitality business located in South Moravia, Czech Republic, offering a 4-star hotel resort, fine dining restaurants, wellness and spa services, and event hosting in a UNESCO heritage area. The website is professionally designed with rich multimedia content and integrates a third-party booking system. The technical infrastructure includes modern libraries and marketing tools, though some outdated components like jQuery 1.11.1 pose security risks. Security posture is generally good with HTTPS and cookie consent mechanisms, but lacks some security headers and uses older libraries. WHOIS data is unavailable, which reduces domain trust transparency. Overall, the site is suitable for its target audience of tourists seeking luxury experiences, with good privacy compliance and business credibility.

H

Hotel Roháč

hotelrohac.sk

56

Hotel Roháč is a small hospitality business based in Trstená, Slovakia, offering accommodation, restaurant, and pizzeria services along with event hosting and conference facilities. The website presents a professional and user-friendly interface with clear navigation and relevant content tailored to tourists and local customers. The business maintains a local market position with a focus on quality hospitality services. Technically, the website uses modern web technologies including Google Analytics for visitor tracking and TermsFeed for cookie consent management. The site is mobile optimized and SEO friendly, though no CMS or hosting provider details are explicitly found. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, security headers are not visibly configured, and no explicit security or incident response policies are published. Overall, the website is trustworthy and compliant with GDPR through its linked privacy policy. Recommendations include enhancing security headers and publishing a security policy to improve trust and compliance.

Cukrárna a kavárna U tří císařů s.r.o. operates a local confectionery and café business in Slavkov u Brna, Czech Republic, specializing in homemade cakes, pastries, and specialty coffee. The business emphasizes quality and local production, offering custom cakes and a pleasant café environment with daily opening hours. The website reflects a small hospitality business with clear contact details and company registration information, targeting local customers. Technically, the website uses standard HTML, CSS, and JavaScript technologies including jQuery 1.12.0 and a cookie consent library. The site is moderately optimized for performance and mobile use but lacks advanced frameworks or CMS. Security measures are basic, with no visible security headers and use of an outdated JavaScript library posing potential risks. The cookie consent mechanism and privacy policy link indicate awareness of privacy compliance. Security posture is moderate with no critical vulnerabilities detected in the visible content, but improvements are needed in updating libraries, adding security headers, and enhancing form protections. The site is fully accessible without WAF or blocking mechanisms, and no suspicious or malicious content was found. Overall, the website is professional and trustworthy for its business scope but would benefit from technical and security enhancements to improve resilience and compliance.

K

Kozlovna Alfa

kozlovnaalfa.cz

46

Kozlovna Alfa is a small hospitality business located in Třebíč, Czechia, specializing in traditional Czech cuisine, quality tank beer, and accommodation services. The website presents a professional image with clear descriptions of their offerings, including food, beverages, and lodging. The business targets local residents and tourists seeking authentic Czech pub experiences. Technically, the site is built on WordPress with modern web technologies and is mobile optimized, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy policies, which could be improved to enhance compliance and trust. The absence of WHOIS data is a notable gap in domain legitimacy verification. Overall, the site is functional and trustworthy but would benefit from enhanced privacy and security measures.

V

Visit Plzeň

visitpilsen.eu

67

Visit Plzeň operates as the official tourism guide for the Plzeň region in the Czech Republic, providing comprehensive information on local attractions, events, gastronomy, and visitor tips. The website serves tourists and visitors with a well-structured, content-rich platform supported by local government funding, positioning itself as a trusted regional tourism resource. The business model focuses on tourism promotion and engagement through digital content and an e-shop for branded merchandise. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Mailchimp integration, ensuring good SEO and marketing capabilities. The site is mobile-optimized, accessible, and uses HTTPS with a valid SSL certificate. Performance is moderate, with a clean and professional design that enhances user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating GDPR compliance. However, it lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to privacy protection, but the website's professional appearance and government association support its legitimacy. Overall, Visit Plzeň presents a secure, trustworthy, and user-friendly platform for regional tourism promotion. Strategic improvements in security headers, incident response documentation, and vulnerability disclosure could further enhance its security posture and compliance.

M

Mon séjour en montagne - Location vacances hiver et été, guides et conseils

mon-sejour-en-montagne.com

46

The website 'Mon séjour en montagne' is a French-language platform focused on mountain vacation rentals and travel advice for winter and summer holidays. It targets French-speaking vacationers interested in mountain tourism, providing rental listings, guides, and tips. The site is built on WordPress using Elementor and Yoast SEO, indicating a moderate level of digital maturity with good SEO practices. However, the absence of WHOIS data raises questions about domain registration transparency. Security posture is moderate with no visible security headers or policies, and privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional and professionally designed but lacks critical trust and compliance elements.

V

Visit Plzeň

visitplzen.eu

67

Visit Plzeň operates as the official tourism guide for the Plzeň region in the Czech Republic, providing comprehensive information on local attractions, events, gastronomy, and travel tips. The website serves tourists and visitors with multilingual content and an integrated e-shop for merchandise. Supported by local government and the Ministry for Regional Development, it holds a strong market position as a trusted regional tourism portal. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Mailchimp integration, ensuring good SEO and marketing capabilities. The site is mobile-optimized and offers a smooth user experience with clear navigation and rich content. Security-wise, the website enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and publicly available security policies. The domain WHOIS data is privacy protected, which is common for European domains, but the website's official nature and government backing support its legitimacy. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

I

ITALEST GROUP, s.r.o.

vergnanocaffe.cz

56

Vergnano caffe is a specialized distributor of premium Vergnano coffee products and Electra coffee machines in the Czech Republic. The company operates as an authorized distributor since 2001, offering a wide range of coffee beans, capsules, grinders, bar equipment, and accessories targeting both professional and home users. Their market position is supported by certified distributor status and a portfolio of partner clients. Technically, the website is built on WordPress with common libraries such as jQuery and Owl Carousel, providing a good user experience with mobile optimization and clear navigation. However, the site lacks explicit privacy and cookie policies, and no security headers are detected, indicating room for improvement in security and compliance. The WHOIS data is unavailable, which reduces trustworthiness from a domain registration perspective but does not detract from the professional presentation and contact transparency on the site. Overall, the website is safe, professional, and credible but would benefit from enhanced privacy compliance and security hardening.

G

Gîtes de France®

gites-de-france.com

61

Gîtes de France® is a well-established French vacation rental platform offering a variety of accommodations including gîtes, chambres d'hôtes, camping, and citybreaks. The website targets families, couples, and groups seeking quality vacation rentals across France, leveraging a recognized quality label to build trust. The platform provides booking services, thematic stay inspirations, and gift cards, positioning itself as a leader in the French hospitality sector. Technically, the site is built on Drupal 10, employs modern JavaScript libraries, and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, providing an excellent user experience. Security-wise, the site uses HTTPS and secure Drupal forms but lacks visible advanced security headers, suggesting room for improvement. The absence of WHOIS registration data is a concern but does not detract significantly from the site's legitimacy given the strong branding and content quality. Overall, the site presents a professional, trustworthy, and user-friendly platform for vacation rental bookings in France.

J

Joker Kazino

joker.lv

55

Joker Kazino is an established online casino platform operating primarily in Latvia, offering a variety of popular slot games, jackpots, and bonuses targeted at adult gamblers. The website demonstrates a moderate level of digital maturity, utilizing modern JavaScript libraries such as jQuery and Moment.js, Bootstrap for styling, and Google Tag Manager for analytics and marketing integration. Cookie consent is managed through Cookiebot, indicating awareness of privacy compliance requirements. However, the absence of a visible privacy policy and terms of service pages suggests gaps in full regulatory compliance. Security posture is adequate with HTTPS enforced and no WAF blocking detected, but could be improved by adding security headers and incident response information. Overall, the site is functional and professional but would benefit from enhanced transparency and compliance documentation.

S

Snídaňuj tour

snidanujtour.cz

45

Snídaňuj tour is a small Czech travel agency specializing in organized tours to destinations such as Slovenia, Poland, and other locations. Their offerings include thermal spa trips, skiing holidays, cycling tours, and hiking excursions. The website is professionally designed using WordPress and Elementor, featuring clear navigation and good mobile optimization. Contact details including phone and email are prominently displayed, alongside active social media profiles on Facebook, Instagram, and YouTube. Technically, the site uses modern web technologies and enforces HTTPS, but lacks security headers and privacy-related policies. No forms or tracking scripts were detected on the main page, indicating minimal data collection. The domain registration is recent but consistent with the business launch timeline, with transparent WHOIS data. Overall, the site presents a trustworthy and professional image but would benefit from enhanced privacy and security practices.

R

Regiontourist.cz

regiontourist.cz

50

Regiontourist.cz is a Czech Republic-based online tourism platform established in 2009, offering curated accommodation listings, travel experiences, and regional travel tips. The platform targets tourists and service providers in the hospitality sector, providing a marketplace and content hub for travel planning within the Czech Republic. The website demonstrates a good level of content quality, with clear navigation, structured data for SEO, and active social media integration. Technically, it uses a combination of legacy and modern web technologies including jQuery, Bootstrap, and Google Tag Manager, delivering moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit cookie consent mechanisms. WHOIS data is unavailable, which impacts trust and transparency. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

L

Le Relais des Fermes

relais-desfermes.com

59

Le Relais des Fermes is a specialized mountain restaurant located at 1300 meters altitude in Megève, France, offering authentic Alpine cuisine and a warm, family-friendly atmosphere. The business operates primarily during the winter season and offers event privatization services for groups up to 100 people. The website is professionally designed, multilingual, and integrates modern web technologies including Google Tag Manager and Weglot for translation. Security measures such as HTTPS and Google reCAPTCHA are implemented, and privacy compliance is evident through a comprehensive privacy policy and cookie consent mechanism. However, the absence of WHOIS registration data raises some concerns about domain transparency, although the website content and branding strongly indicate a legitimate hospitality business affiliated with Maison & Hotels Sibuet.

H

Hotel a Pension SEEBERG

seeberg.cz

56

Hotel a Pension SEEBERG is a family-run hospitality business located in Františkovy Lázně, Czech Republic, offering accommodation, wellness, dining, and leisure services. The website reflects a well-established small business with a focus on comfort, wellness, and eco-friendly experiences. The company targets tourists, families, and wellness seekers, positioning itself as a romantic and relaxing destination with a 30-year history. Technically, the website uses modern JavaScript libraries and frameworks such as jQuery, OwlCarousel, and Foundation, and integrates Google Analytics, Facebook Pixel, and Google Tag Manager for marketing and analytics. The site is mobile-optimized and provides a good user experience with clear navigation and rich multimedia content. Security-wise, the site enforces HTTPS and has cookie consent mechanisms, but lacks visible security headers and explicit security or incident response policies. WHOIS data is not publicly available, indicating privacy protection, which is common for small businesses but slightly reduces trust. Overall, the website is professional, trustworthy, and compliant with basic privacy regulations, but could improve security posture and transparency.

V

Visit Svalbard

visitsvalbard.com

59

Visit Svalbard operates as the official tourism portal for the Svalbard archipelago, providing comprehensive information and booking services for activities, accommodations, and events. The website targets tourists seeking authentic Arctic experiences and positions itself as a leading resource for travel planning in the region. Technically, the site employs a mature technology stack including jQuery, Google Tag Manager, and Cookiebot for consent management, running on the NewMind CMS platform. The site is well-optimized for SEO, accessibility, and mobile devices, with good performance and modern security practices such as HTTPS and security headers. However, the absence of WHOIS registration data raises concerns about domain transparency, although the website content and branding strongly indicate legitimacy. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Overall, the site demonstrates a strong digital presence and marketing maturity but would benefit from improved domain registration transparency and clearer contact information.

N

Nová spirála

novaspirala.cz

48

Nová Spirála is a multi-genre cultural venue located at Výstaviště Praha, offering a modern event space with a rotating circular stage and advanced technology. The website presents a professional and comprehensive digital presence, targeting a general audience interested in cultural events, ticketing, and venue rental. The business model focuses on event programming, ticket sales, venue rental, and gift vouchers, positioning itself as a significant cultural hub in the Czech Republic. Technically, the site is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, and CookieHub, ensuring good SEO, privacy compliance, and user experience. Security posture is strong with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, though some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and integrates well with partner ecosystems. Strategic recommendations include enhancing security headers, continuous monitoring of third-party scripts, and maintaining privacy compliance.

U

Ubytování Kytín

ubytovanikytin.cz

55

Ubytování Kytín is a small hospitality business offering four new rooms with private bathrooms located next to a local brewery in Kytín, Czech Republic. The website targets tourists, cyclists, and visitors interested in craft beer and local tourism. The business model focuses on accommodation rental with a local appeal. Technically, the website is built on the Wix platform using Wix Thunderbolt framework, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and some script-based hardening, but lacks explicit security headers and privacy policies. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust. Overall, the site is functional and professional but would benefit from improved privacy compliance and contact transparency.

H

Hotel Troyer

troyer.cz

47

Hotel Troyer is a wellness and hospitality business located in the Beskydy region of the Czech Republic, offering accommodation, wellness services, dining, and event hosting. The website is professionally designed using WordPress and Elementor, featuring multilingual support and a cookie consent mechanism. The business targets tourists and visitors seeking relaxation and adventure in a natural setting. Technically, the site uses modern tracking and marketing tools such as Google Analytics and Facebook Pixel, with HTTPS enabled and basic security practices in place. However, the absence of WHOIS registration data and explicit privacy and security policies limits the overall trustworthiness and compliance posture. The site is accessible without WAF or security challenges, providing a good user experience and clear contact information.

U

Home | Ubytování Vráž u Písku

ubytovanivraz.cz

43

The website ubytovanivraz.cz represents a small hospitality business offering recreational accommodation in the spa village of Vráž near Písek, Czech Republic. The business provides two main properties for rent: a family house and a recreational house. The site is modest in content and design, targeting tourists and visitors seeking lodging in southern Bohemia. The business appears to be local and small-scale, with no evident parent or subsidiary companies. The domain age of over a decade supports the legitimacy of the business. Technically, the website is built on the Mezzanine CMS platform running on Django, utilizing Bootstrap and jQuery for frontend styling and interactivity. The site shows basic mobile responsiveness and moderate performance but lacks advanced SEO and accessibility features. There are no visible analytics or advertising scripts, indicating minimal user tracking. From a security perspective, the site lacks critical elements such as HTTPS enforcement, security headers, and privacy or cookie policies, which are essential for GDPR compliance and user trust. No contact information or incident response channels are provided, limiting transparency and user support. The absence of forms reduces attack surface but also limits user engagement. Overall, the website is functional but basic, with significant room for improvement in security, privacy compliance, and user trust features. Strategic enhancements in these areas would improve the business's digital maturity and customer confidence.

H

Hôtel Lodge Park

lodgepark.com

63

Hôtel Lodge Park is a luxury 5-star boutique hotel located in Megève, French Alps, offering upscale accommodation, a steakhouse restaurant, and a large wellness spa. The website reflects a high level of professionalism with rich content, multilingual support, and strong branding consistent with a luxury hospitality business. Technically, the site uses modern web technologies including Webflow CMS, Google Analytics, and Weglot for translations, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS and reCAPTCHA implemented, though some security headers and policies could be enhanced. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. WHOIS data is unavailable or privacy protected, which slightly reduces transparency but does not detract significantly from the business credibility given the professional presentation and external references.

M

Maisons & Hôtels Sibuet

maisonsethotels-sibuet.com

62

Maisons & Hôtels Sibuet is a luxury hospitality brand offering a curated collection of hotels, private properties, spas, restaurants, a wine estate, and a cosmetic brand primarily focused on French and Caribbean destinations. The website presents a strong brand identity with professional design and comprehensive content targeting affluent travelers seeking exclusive experiences. Technically, the site is built on Webflow with modern integrations such as Weglot for multilingual support, Google Analytics for tracking, and secure contact forms with reCAPTCHA. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities, though explicit security headers are not detected. Privacy and cookie policies are present and GDPR compliant. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which slightly lowers the overall trust score. Overall, the site is professional, secure, and well-optimized for its business purpose.

S

Snídaňuj

snidanuj.cz

43

Snídaňuj is a Czech Republic based hospitality business specializing in breakfast delivery services across Ostrava, operating a network of cafés offering luxury coffee and daily menus, and marketing a brand of homemade pasta. Founded in 2020, the company has expanded its offerings to include catering and tourism-related services, positioning itself as a diversified local food and lifestyle brand. The website reflects a professional and consistent brand image with clear business focus and active customer engagement channels including social media and live chat support. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and SEO best practices, though there is room for improvement in privacy compliance and security headers. The security posture is solid with HTTPS and no visible vulnerabilities, but lacks explicit privacy and cookie policies. Overall, the business appears credible and well-positioned in its regional market with a good digital presence.

T

TIC Trojanovice

trojanovice.info

37

TIC Trojanovice operates as a local tourist information center in the Czech Republic, providing visitors with essential information, souvenirs, and postal services. The website serves as a digital portal for tourists seeking event calendars, accommodation, and local attractions in the Beskydy region. The business model is community and government-supported, focusing on hospitality and tourism services. The site is well-branded and consistent, targeting tourists and visitors to the region. Technically, the website is built on WordPress using the Divi theme and several plugins for event management and galleries. The infrastructure is modern but lacks some advanced security headers and privacy compliance features. Performance and mobile optimization are adequate, providing a good user experience. From a security perspective, the site uses HTTPS but lacks visible security headers and privacy/cookie policies, which are important for GDPR compliance. No forms or user data collection mechanisms were detected on the homepage, reducing immediate privacy risks. The WHOIS data is privacy-protected, which is typical for small organizations, and no suspicious patterns were found. Overall, the website is legitimate, professional, and serves its purpose well, but it should improve privacy compliance and security best practices to enhance trust and regulatory adherence.

G

Galileo Corporation s.r.o.

infocentrumostravice.cz

9

Infocentrum Ostravice operates as a local municipal information center serving the Beskydy recreational area in the Czech Republic. It provides comprehensive tourism-related services including accommodation listings, event calendars, weather forecasts, and local news. The website is professionally designed with consistent branding and targets tourists, families, seniors, and cyclists visiting the region. The business is supported by Galileo Corporation s.r.o., which operates the website infrastructure. Technically, the site uses modern JavaScript libraries such as jQuery, Bootstrap, and Swiper.js, ensuring good mobile responsiveness and accessibility. Security posture is moderate with HTTPS usage and cookie consent implemented, but lacks advanced security headers and published privacy policies. The absence of WHOIS data limits full domain legitimacy verification, though the site content and external links suggest a trustworthy municipal service. Overall, the website is functional, informative, and serves its local tourism audience effectively.

D

Destinační management turistické oblasti Beskydy-Valašsko o.p.s

beskydyportal.cz

54

The website www.beskydyportal.cz serves as a comprehensive tourism portal for the Beskydy and Valašsko regions in the Czech Republic. It offers extensive information on local attractions, accommodation options, events, cycling and hiking routes, and multimedia content to support tourism activities. The portal targets families, couples, and individual tourists seeking regional travel experiences. The business operates as a regional destination management organization, supported by Czech Ministry for Regional Development funding, and maintains partnerships with official tourism entities. Technically, the site employs a modern web stack including Bootstrap, jQuery, Google Maps API, Mapy.cz API, and Leaflet.js for interactive maps. It integrates social media SDKs and tracking pixels such as Facebook Pixel and uses Google reCAPTCHA for form security. The site is mobile-optimized with responsive design and includes cookie consent mechanisms, although it lacks explicit privacy and terms of service pages. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks visible security headers and does not publish a privacy policy or incident response contacts, which are important for GDPR compliance and user trust. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data limits domain legitimacy verification, but the presence of official logos and consistent branding supports trustworthiness. Overall, the site is a well-structured, content-rich tourism portal with good technical implementation and moderate security posture. To enhance trust and compliance, it should publish privacy and terms policies, implement security headers, and provide clearer contact information. Domain registration details should be verified to ensure legitimacy and reduce risk.

P

Pivovar Kytín, s.r.o.

pivovarkytin.cz

9

Pivovar Kytín, s.r.o. operates a brewery and restaurant in Kytín, Czech Republic, specializing in traditional Czech beers and cuisine. The business targets beer enthusiasts and local visitors, offering a combination of beer production, dining, events, and accommodation partnerships. The website reflects a small hospitality business with a focus on authentic Czech culinary experiences and craft beer. Technically, the site uses modern web technologies including Next.js, Bootstrap, Google Analytics, and Facebook Pixel, providing a responsive and visually appealing user experience. However, the site lacks explicit privacy and cookie policies, which may impact GDPR compliance. Security posture is moderate with HTTPS usage but missing security headers and vulnerability disclosures. WHOIS data is unavailable, limiting domain legitimacy verification, but the presence of clear contact information and social media integration supports business credibility. Overall, the website is functional and professional but would benefit from enhanced privacy, security, and compliance measures.

V

Výstaviště Praha

navystavisti.cz

63

Výstaviště Praha operates as the official website for the Prague Exhibition Grounds, providing comprehensive information about events, venue rental, sports, dining, and visitor services. The website targets a broad audience including families, sports enthusiasts, and event attendees, positioning itself as a key local venue with a recognized brand in Prague. The business model focuses on public venue management and event hosting, supported by services such as space rental and an e-shop. Technically, the website employs a modern infrastructure with Google Tag Manager, Google Analytics, Facebook Pixel, Hotjar, and CookieHub for analytics and marketing, hosted by a Czech hosting provider. The site is mobile-optimized with good SEO practices and a cookie consent mechanism ensuring GDPR compliance. Performance is moderate with room for improvement in accessibility. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of explicit security policies and incident response contacts suggests room for maturity. The site uses multiple third-party tracking scripts with user consent, reflecting a balance between analytics needs and privacy compliance. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with no signs of malicious activity or adult content. Strategic recommendations include publishing formal security and incident response policies, enhancing security headers, and considering a vulnerability disclosure policy to further strengthen trust and security posture.

T

Téčko, příspěvková organizace

vratnice.com

63

The website www.vratnice.com represents Téčko, příspěvková organizace, a cultural organization operating the Vrátnice Art & Music Club and Café & Bar in Rožnov pod Radhoštěm, Czech Republic. The business focuses on providing cultural events, music performances, café services, and venue rental, targeting a general audience interested in arts and culture. The website is professionally designed with clear navigation and good mobile optimization, supporting the organization's community engagement and event promotion efforts. Technically, the site uses common JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel, with a cookie consent mechanism ensuring GDPR compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and business information appear consistent and trustworthy. Security posture is moderate with HTTPS enabled but lacks advanced security headers and incident response information. Overall, the site is functional, compliant, and serves its business purpose well, but improvements in security and domain registration transparency are recommended.

F

Fermes de Marie

fermesdemarie.com

63

Les Fermes de Marie is a luxury 5-star hotel located in Megève, France, offering premium alpine hospitality services including accommodation, spa, wellness, and gourmet dining. The website presents a strong market position targeting affluent travelers, families, and wellness enthusiasts, supported by a consistent brand and rich content. The technical infrastructure leverages modern web technologies such as Webflow CMS, Google Analytics, Facebook Pixel, and reCAPTCHA, ensuring a performant and secure user experience. Security posture is robust with HTTPS, security headers, and consent mechanisms, though explicit security policies and incident response contacts are absent. The WHOIS data is missing, which raises some concerns about domain transparency but does not detract significantly from the overall trustworthiness given the professional presentation and business legitimacy. Strategic recommendations include enhancing security transparency and maintaining vigilance on third-party scripts.

O

Office de tourisme Nice Côte d'Azur

nicecotedazur-greeters.com

56

The website www.nicecotedazur-greeters.com represents the official platform for the Nice Côte d'Azur Greeters, a volunteer-based cultural tourism initiative affiliated with the local tourism office. It offers visitors the opportunity to meet local volunteers ('Greeters') who provide free guided walks sharing their passion and knowledge of Nice and the surrounding Côte d'Azur region. The site is well-branded, professionally designed, and targets tourists seeking authentic local experiences. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and WP Rocket, ensuring good SEO and performance. The presence of Google Tag Manager and Cookiebot indicates a moderate level of user tracking balanced with GDPR-compliant consent mechanisms. Security posture is generally good with HTTPS enforced, though explicit security headers are not detected in the provided data. The absence of WHOIS registration data is a notable anomaly, reducing transparency and trust in domain registration details. Overall, the site is safe, professional, and serves a niche non-profit hospitality sector effectively.

C

Centre des Congrès Océanice

oceanice-congres.com

65

The website www.oceanice-congres.com represents the Centre des Congrès Océanice, a modern congress and event center located in Nice, France. It offers modular event spaces, accessibility features, and an eco-responsible approach to hosting events. The site targets event organizers, businesses, associations, and public entities seeking professional venues in the region. The business model focuses on venue rental and associated event services, positioning itself as a new and environmentally conscious player in the hospitality sector of Nice. Technically, the website is built on WordPress 6.6.2 with a variety of plugins including Yoast SEO for optimization, Iris Map for mapping features, and Sentry for error tracking. It uses modern web technologies such as jQuery and MapLibre GL JS. The site is well-optimized for SEO and mobile devices, with good accessibility features. Performance is moderate, with room for improvement in loading speed and technical enhancements. From a security perspective, the site uses HTTPS with a good SSL configuration and employs Sentry for monitoring. However, it lacks explicit security headers and formal privacy and cookie policies, which are important for compliance and user trust. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, although the website content itself appears professional and legitimate. Overall, the website presents a solid business presence with good technical implementation and security posture but requires improvements in privacy compliance and domain registration transparency to enhance trust and regulatory adherence.

B

Bureau des Congrès de Nice Côte d’Azur

meet-in-nicecotedazur.com

59

The website 'Meet in Nice : bureau des congrès de Nice Côte d'Azur' serves as the official platform for the Bureau des Congrès de Nice Côte d’Azur, providing comprehensive support and information for organizing professional events in the Nice region. It targets event organizers, corporate clients, and tourism professionals, positioning itself as a regional leader in destination marketing and event facilitation. The site offers services including event planning assistance, venue and accommodation information, and local expertise, emphasizing sustainability and eco-responsibility. The business model focuses on promoting Nice Côte d'Azur as a premier MICE (Meetings, Incentives, Conferences, Exhibitions) destination.

F

French Riviera Pass

frenchrivierapass.com

53

French Riviera Pass operates a professional multilingual tourism website offering city passes for Nice and the Côte d'Azur region. The business targets tourists seeking convenient access to attractions and discounts. The website is built on WordPress with modern performance and SEO optimizations, including lazy loading and Google Tag Manager integration. Security posture is good with HTTPS enforced, but lacks explicit security headers and a visible incident response policy. The absence of WHOIS data for the domain is a notable anomaly that reduces trust, though the website content and design are professional and trustworthy. Overall, the site demonstrates a mature digital presence suitable for its hospitality sector niche.

L

Les Arcs Reservation

lesarcs-reservation.com

51

Les Arcs Reservation operates as the official online booking platform for accommodations and ski packages in the Les Arcs ski resort area in France. The website offers a variety of lodging options including apartments, hotels, chalets, and all-inclusive ski packages, targeting tourists and vacationers seeking a seamless reservation experience. The business positions itself as a trusted local expert with a focus on customer service and comprehensive offerings for winter and summer stays. Technically, the website is built on the Drupal CMS platform and leverages modern JavaScript libraries such as jQuery, Swiper.js, and Air Datepicker to provide an interactive and responsive user experience. The site is mobile-optimized and includes SEO best practices, although performance is moderate. Security is implemented with HTTPS and secure form handling, but lacks some advanced security headers and explicit privacy and cookie policies. From a security perspective, the site shows a good baseline with HTTPS and no visible vulnerabilities in the HTML content. However, the absence of WHOIS registration data and domain transparency is a concern, reducing overall trustworthiness. No incident response or vulnerability disclosure information is provided, and privacy compliance indicators are minimal. Overall, the website is professional and functional with strong business credibility but would benefit from improved transparency in domain registration, enhanced privacy compliance, and stronger security header implementation to increase trust and security posture.

L

Ski Pass, Pedestrian Pass, Funicular, Altitude Experience - Les Arcs Peisey Vallandry Mountain area - Paradiski - Official website - Buy Reload

lesarcs-peiseyvallandry.com

64

The website www.lesarcs-peiseyvallandry.com serves as the official platform for purchasing ski passes, pedestrian passes, funicular tickets, and altitude experiences in the Les Arcs Peisey Vallandry mountain area, part of the Paradiski ski region. It targets tourists and skiers visiting this region, offering e-commerce services for access to mountain facilities. The site uses modern frontend technologies such as React and integrates tracking and consent management tools like Google Tag Manager and Privacy Center SDK. The design is professional and mobile-optimized, providing a good user experience.

L

Lens Lievin Tourisme

groupes-lenslievin.fr

57

Lens Lievin Tourisme operates the website groupes-lenstourisme.fr as a local tourism office focused on organizing group visits and school outings in the Lens-Liévin area of France. The website provides information and resources to facilitate group tourism activities, positioning itself as a key local hospitality service provider. The business is relatively new, with domain registration in 2024, and targets groups such as schools and friends planning visits. Technically, the website is built on WordPress and uses common tools like Google Analytics and Rank Math SEO, indicating a moderate level of digital maturity. The site is hosted by OVH, a reputable provider, and employs HTTPS for secure communications. However, there is room for improvement in security posture, including the implementation of security headers and visible privacy and cookie policies. No forms or direct contact information were found in the analyzed content, which may impact user engagement and trust. Overall, the website is professional and relevant to its audience but would benefit from enhanced privacy compliance and security best practices.

Sky Gym Říčany is a recently established fitness center located in Říčany, Czech Republic, offering a modern gym experience with professional trainers, circuit training, solarium services, and personal locker rentals. The website positions itself as the largest and most modern fitness facility in the region, targeting a broad audience including students, professionals, and seniors. The business model revolves around membership access, personal training, and additional wellness services. Technically, the website is built on WordPress using Elementor and the Kadence theme, hosted by a Czech hosting provider, and demonstrates moderate performance with good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvements. Contact information is clearly presented, though no email or contact forms are found on the homepage. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

R

Restaurace NOR Jednička

restauracetrutnov.cz

51

Restaurace NOR Jednička is a small hospitality business located in Trutnov, Czech Republic, offering a blend of international and traditional Czech cuisine. The restaurant emphasizes a vintage style ambiance and hosts various events including weddings, celebrations, and corporate gatherings. Their business model focuses on local dining services and event hosting, supported by daily updated menus and drink offerings. The website reflects a consistent brand image with clear contact information and social media presence, targeting local customers and visitors. Technically, the website is built on an older but functional tech stack including jQuery and Bootstrap 3.4, with additional libraries for image galleries and layout management. The site is mobile optimized and provides a cookie consent mechanism, though it lacks modern security headers and visible SSL configuration details. Performance is moderate, and SEO practices are adequate with proper meta tags and Open Graph data. From a security perspective, the site shows basic best practices such as cookie consent but lacks critical security headers and privacy policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact details appear legitimate. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the security posture is moderate but could be improved with enhanced policies and technical controls. The overall risk assessment suggests a generally trustworthy local business website with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing security headers, publishing privacy and security policies, verifying domain registration details, and updating technical components to modern standards.

K

KRAKONOŠ spol. s r.o.

hotel-krakonos.cz

53

Hotel Krakonoš is a small hospitality business located in the center of Trutnov, Czech Republic, offering accommodation, restaurant services, and associated brewery products. The website provides detailed information about the hotel’s facilities, historical background, and local attractions, targeting tourists and visitors to the Krkonoše region. The business is well-positioned locally with a clear focus on hospitality and regional heritage. Technically, the website uses a moderate technology stack including jQuery and Bootstrap 3.4, with a CMS named inPage. The site is mobile-optimized and includes a cookie consent mechanism, but lacks explicit privacy and terms of service pages. Security posture is moderate with no detected WAF or blocking, but missing security headers and unknown SSL configuration reduce the security score. WHOIS data is missing, which impacts domain trustworthiness, but the website content and business information appear legitimate and consistent with a small hospitality company. Overall, the site is professional and trustworthy with room for improvement in security and compliance documentation.

N

NOR a.s.

grillnor.cz

50

Grill NOR is a small hospitality business based in the Czech Republic specializing in meal delivery services for individuals and companies in the Trutnov region. Their business model focuses on long-term cooperation with customers, offering diverse menus and regular meal plans similar to school canteen accounts. The website presents clear business information, contact details, and social media presence, supporting a moderate level of trust and professionalism. Technically, the website uses a legacy but stable technology stack including jQuery and Bootstrap 3.4, with additional libraries for image galleries and grid layouts. The site is mobile optimized and performs moderately well, though accessibility features are basic. SEO is adequately addressed through meta tags and Open Graph data. Cookie consent is implemented with a detailed user interface, reflecting awareness of privacy compliance requirements. Security posture is adequate with HTTPS enforced and some best practices like disabling right-click on images. However, the absence of security headers and a visible privacy policy or terms of service page limits the overall security maturity. No WHOIS data is available, which reduces domain trustworthiness, but the website content and business details appear consistent and legitimate. Overall, the site is functional and professional for its business scope but would benefit from enhanced security headers, explicit privacy and terms policies, and improved WHOIS transparency to strengthen trust and compliance.

K

Kongresové centrum Praha, a.s.

praguecc.cz

51

Kongresové centrum Praha, a.s. is a well-established event and congress center located in Prague, Czech Republic, offering a wide range of services including venue rental for congresses, conferences, exhibitions, and cultural events. The company targets event organizers, visitors, and hotel guests, positioning itself as a key player in the hospitality and event hosting sector in the region. The website reflects a professional and modern digital presence with comprehensive content and clear navigation. Technically, the site employs modern frameworks such as Bootstrap and integrates multiple analytics and tracking tools with user consent mechanisms, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and reCAPTCHA integration, though some security headers could be improved. Privacy compliance is strong, with clear cookie consent and a detailed GDPR policy. Overall, the site is trustworthy, professional, and aligned with the business's market positioning.

D

DISH Digital Solutions GmbH

eatbu.com

64

DISH Digital Solutions GmbH operates a specialized SaaS platform focused on enabling hospitality businesses such as restaurants, cafes, bars, bakeries, and delivery services to quickly build their own websites without coding knowledge. The platform is integrated with the broader dish.co digital club ecosystem, offering additional community and business improvement resources. The website is professionally designed with good content quality, multi-language support, and clear navigation. Technically, it employs modern web technologies including Google Tag Manager, Adobe DTM, and Usercentrics for cookie consent, ensuring a mature digital infrastructure. Security posture is strong with HTTPS enforced and privacy policies clearly linked, although explicit security policies and incident response contacts are absent. Overall, the site demonstrates high trustworthiness and business credibility with no signs of malicious content or vulnerabilities.

C

Chachar catering s.r.o.

zbyslavice-chachar.cz

41

Chachar catering s.r.o. operates a regional Czech food delivery website specializing in pizza, wings, burgers, and other fresh food items. The business targets local customers in Zbyslavice and surrounding areas, offering online and phone ordering options. The website is built on WordPress with a range of custom plugins and integrates Google Tag Manager and reCAPTCHA for analytics and security. The site includes GDPR-compliant privacy and cookie policies, reflecting a commitment to data protection. However, the WHOIS data shows a suspicious future domain creation date, which may indicate data inconsistency or placeholder information. Security posture is moderate with HTTPS and bot protection but lacks modern security headers and uses an outdated WordPress version, which could expose vulnerabilities. Overall, the website is functional, professional, and safe for general audiences, but improvements in security and domain registration transparency are recommended.

C

Chachar catering s.r.o.

slezska-chachar.cz

45

Chachar catering s.r.o. operates a regional online food delivery service specializing in pizza, chicken wings, burgers, and other fast food items in the Ostrava area of the Czech Republic. The website slezska-chachar.cz serves as a localized branch portal for ordering and customer interaction, featuring online ordering, account login, and contact options. The business targets general consumers seeking quick and quality food delivery with a focus on fresh ingredients and local service. Technically, the website is built on WordPress 4.9.8 with a modern front-end stack including Bootstrap, jQuery, and various tracking tools such as Google Tag Manager and Microsoft Clarity. The site is mobile optimized and provides a cookie consent mechanism compliant with GDPR. Security posture is moderate, with HTTPS enforced and reCAPTCHA implemented, but the WordPress version is outdated and lacks some security headers. No explicit security or incident response policies are published. Overall, the website is professional, trustworthy, and functional for its business purpose.

C

Chachar catering s.r.o.

porubasever-chachar.cz

45

Chachar catering s.r.o. operates a regional online food delivery service specializing in pizza, chicken wings, burgers, and other fast food items in Ostrava, Czech Republic. The website provides a user-friendly platform for ordering food online or by phone, targeting general consumers seeking quick and quality food delivery. The business is medium-sized, founded in 2019, and maintains a consistent brand presence across its digital assets. Technically, the website is built on WordPress 4.9.8 with common libraries such as jQuery, Bootstrap, and Google Tag Manager, indicating a moderate level of digital maturity. Mobile optimization and user experience are good, though some technical debt exists due to outdated CMS versions. Security posture is adequate with HTTPS and reCAPTCHA integration, but lacks modern security headers and uses an outdated WordPress version, which may expose it to vulnerabilities. Privacy compliance is strong with clear cookie consent and GDPR-aligned privacy policies. Overall, the website is professional, trustworthy, and well-suited for its business purpose.

C

Chachar catering s.r.o.

hrabova-chachar.cz

45

Chachar catering s.r.o. operates a regional online food delivery service specializing in pizza, chicken wings, burgers, and other fast food items in the Ostrava - Hrabová area of the Czech Republic. The website provides a user-friendly platform for customers to order food online or by phone, supported by a login and registration system. The business targets general consumers seeking quick and quality food delivery services. The company was founded in 2019, consistent with the domain registration date, indicating a relatively young but established local business. Technically, the website is built on WordPress 4.9.8 with common web technologies such as jQuery, Bootstrap, and Google Tag Manager, providing a moderate level of digital maturity with room for modernization and security improvements. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented on login forms, but the use of an outdated WordPress version and lack of security headers present potential vulnerabilities. Privacy compliance is strong, with clear cookie consent mechanisms and comprehensive privacy and terms of service pages, reflecting good adherence to GDPR requirements. Overall, the website is professional, trustworthy, and functional, though it would benefit from technical updates and enhanced security measures to reduce risk and improve resilience.

C

Chachar catering s.r.o.

dubina-chachar.cz

45

Chachar catering s.r.o. operates a regional online food delivery service specializing in pizza, chicken wings, burgers, and other fast food items primarily serving the Ostrava - Dubina area in the Czech Republic. The website provides a user-friendly platform for ordering food online or by phone, supported by a WordPress-based infrastructure with custom plugins for cart and order management. The business targets general consumers seeking quick and quality food delivery with a focus on fresh ingredients and local specialties. Technically, the website employs a mature technology stack including WordPress, Bootstrap, jQuery, and integrates analytics and tracking tools such as Google Tag Manager and Hotjar, with GDPR-compliant cookie consent mechanisms in place. Security posture is moderate; HTTPS is enforced and reCAPTCHA is used on login forms, but the WordPress version is outdated and lacks some modern security headers, which could expose the site to vulnerabilities. Overall, the site is professionally designed, mobile-optimized, and trustworthy, with clear contact information and legal disclosures. Strategic improvements in CMS updates and security hardening are recommended to enhance resilience and compliance.

C

Chachar catering s.r.o.

odry-chachar.cz

41

Chachar catering s.r.o. operates a regional online food delivery service specializing in pizza, chicken wings, burgers, and lunch menus in the Czech Republic. The website offers online ordering and telephone contact, targeting general consumers seeking quick and quality food delivery. The business model focuses on local catering and delivery with a consistent brand presence and clear contact channels. Technically, the website is built on WordPress 4.9.8 with common libraries such as jQuery, Bootstrap, and Google Tag Manager for analytics and reCAPTCHA for security. While the site is mobile-optimized and provides cookie consent mechanisms, it uses an outdated WordPress version which may expose it to vulnerabilities. Security best practices like HTTPS and CAPTCHA are implemented, but security headers are missing and no explicit security or incident response policies are published. Overall, the site is functional, professional, and compliant with GDPR, but could improve security posture and transparency. The domain registration data aligns well with the business, indicating legitimacy and trustworthiness.

C

Chachar catering s.r.o.

novyjicin-chachar.cz

40

Chachar catering s.r.o. operates a regional online food delivery service specializing in pizza, chicken wings, burgers, and related fast food items in Nový Jičín, Czech Republic. The website provides an online ordering platform with a focus on fresh, quality ingredients and quick delivery. The business targets general consumers seeking convenient food delivery options. Technically, the website is built on WordPress 4.9.8 with custom plugins and uses modern frontend technologies such as Bootstrap and jQuery. It integrates Google Tag Manager and Google reCAPTCHA for analytics and security. The site is mobile optimized and includes cookie consent mechanisms compliant with GDPR. Security posture is moderate; HTTPS is enforced and forms are protected by reCAPTCHA, but the WordPress version is outdated and lacks explicit security headers. No incident response or security policy information is publicly available. WHOIS data is consistent with the business claims, showing a recent domain registration in 2023 matching the company's founding year. Overall, the website is functional and professional but would benefit from security updates and enhanced compliance documentation.