Hospitality security reports

C

Chachar catering s.r.o.

koprivnice-chachar.cz

45

Chachar catering s.r.o. operates a regional online food delivery service specializing in pizza, chicken wings, burgers, and other fast food items in the Czech Republic. The website serves as a digital storefront for the Kopřivnice branch, offering online ordering and customer account management. The business targets general consumers seeking quick and quality food delivery with a focus on fresh ingredients and local service. Technically, the website is built on WordPress 4.9.8 with a suite of plugins for ordering, user management, and marketing integrations such as Google Tag Manager and reCAPTCHA. While the site is mobile optimized and provides a good user experience, the use of an outdated WordPress version presents security risks. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency. Strategic improvements in security patching and policy transparency would enhance trust and compliance.

C

Chachar catering s.r.o.

karvina-chachar.cz

45

Karvina-chachar.cz is a regional online food delivery website specializing in pizza, chicken wings, burgers, and other fast food items, operated by Chachar catering s.r.o. The business targets local customers in Karviná and surrounding areas in the Czech Republic, offering quick and fresh food delivery services. The website is built on WordPress CMS with a suite of custom plugins to support ordering, user accounts, and promotions. The technical infrastructure includes modern JavaScript libraries and Google services for analytics and tag management, indicating a moderate level of digital maturity. Security measures include HTTPS enforcement, Google reCAPTCHA on login forms, and a cookie consent mechanism compliant with GDPR. However, the WordPress version is outdated, and no explicit security headers are present, which may expose the site to known vulnerabilities. Overall, the website is professional, trustworthy, and well-structured, but could benefit from technical and security updates to enhance its posture and compliance.

C

Chachar catering s.r.o.

havirov-chachar.cz

45

Chachar catering s.r.o. operates a regional online food delivery service specializing in pizza, burgers, chicken wings, and other fast food items in the Czech Republic. The website offers online and phone ordering options, targeting a general audience seeking quick and quality food delivery. The business is medium-sized, founded in 2019, and maintains a consistent brand presence with clear contact information and user account management features. Technically, the website is built on WordPress 4.9.8 with a modern frontend stack including jQuery, Bootstrap, Google Tag Manager, and reCAPTCHA for security. The site is mobile optimized and includes cookie consent mechanisms compliant with GDPR. Hosting appears to be with a Czech provider, and the domain registration data aligns well with the business profile. From a security perspective, the site uses HTTPS and integrates Google reCAPTCHA to protect login forms. However, the WordPress version is outdated, and no explicit security headers were detected, which could expose the site to known vulnerabilities. There is no publicly available security policy or incident response information, which limits transparency in security governance. Overall, the website is functional, professional, and compliant with privacy regulations but would benefit from technical updates and enhanced security practices to reduce risk. Strategic improvements in security headers, CMS updates, and incident response documentation are recommended to strengthen the security posture and trustworthiness.

C

Chachar catering s.r.o.

ceskytesin-chachar.cz

45

Chachar catering s.r.o. operates a regional online food delivery service specializing in pizza, chicken wings, burgers, and lunch menus primarily serving the Český Těšín area in the Czech Republic. The website provides a user-friendly platform for ordering food online or by phone, targeting general consumers seeking quick and quality food delivery. The business is medium-sized, founded in 2019, and maintains consistent branding and clear contact information, supporting its market presence in the hospitality sector. Technically, the website is built on WordPress 4.9.8 with common libraries such as jQuery, Bootstrap, and FontAwesome. It integrates Google Tag Manager for analytics and Google reCAPTCHA for bot protection. The site is mobile-optimized with good navigation and basic SEO practices. Hosting appears to be Czech-based, consistent with the business location. From a security perspective, the site enforces HTTPS and uses reCAPTCHA, but lacks modern security headers and runs an outdated WordPress version, which may expose it to vulnerabilities. Privacy compliance is addressed with a cookie consent mechanism and linked privacy and terms pages, indicating GDPR awareness. However, no explicit security or incident response policies are published. Overall, the website is functional, professional, and trustworthy for its business purpose but would benefit from technical updates and enhanced security measures to reduce risk and improve compliance.

C

Chachar catering s.r.o.

budisovice-chachar.cz

40

The website budisovice-chachar.cz represents a local branch of Chachar catering s.r.o., specializing in fast food delivery including pizza, chicken wings, and burgers. The business targets customers in Budišovice and nearby areas, offering online and phone ordering options. The site is built on WordPress with a variety of plugins supporting ordering, user accounts, and promotions. The technical infrastructure includes modern JavaScript libraries and Google Tag Manager for analytics. Security measures include HTTPS and Google reCAPTCHA for form protection, alongside a cookie consent mechanism compliant with GDPR. However, the WordPress version is outdated, and no explicit security headers are present, indicating room for security improvements. Overall, the site is functional, user-friendly, and compliant with privacy regulations, but could benefit from enhanced security practices and platform updates.

C

Chachar catering s.r.o.

brusperk-chachar.cz

42

The website brusperk-chachar.cz represents a regional food delivery business specializing in pizza, chicken wings, burgers, and other related food items. Operated by Chachar catering s.r.o., the company targets customers in the Czech Republic, offering online and telephone ordering services. The site is well-branded and provides clear contact information, including a dedicated phone number and login functionality for customers. The business model focuses on quick delivery and catering services, positioning itself as a local player in the hospitality sector. From a technical perspective, the website is built on WordPress 4.9.8 with a range of plugins supporting ordering, user management, and UI components. It uses common libraries such as jQuery, Bootstrap, FontAwesome, and Google Tag Manager for analytics and marketing. The site is mobile-optimized and includes cookie consent mechanisms compliant with GDPR. However, the WordPress version is outdated, which may expose the site to known vulnerabilities. Security posture is moderate; HTTPS is enforced, and Google reCAPTCHA is implemented on login forms to prevent automated abuse. Cookie consent is present, and privacy policies are comprehensive. However, the absence of modern security headers and the outdated CMS version are notable weaknesses. No explicit security or incident response policies are published, which could be improved to enhance trust. Overall, the site is functional, professional, and compliant with privacy regulations but would benefit from technical updates and enhanced security practices. The domain registration data aligns well with the business profile, indicating legitimacy and consistent operation since 2019.

C

Chachar catering s.r.o.

bilovec-chachar.cz

46

Chachar catering s.r.o. operates a regional online food delivery service specializing in pizza, chicken wings, burgers, and other fast food items primarily serving the Bílovec area in the Czech Republic. The website supports online ordering and customer account management, positioning itself as a convenient local catering and delivery provider. The business is medium-sized, founded in 2020, and maintains consistent branding and clear contact channels. Technically, the website is built on WordPress 4.9.8 with common libraries such as jQuery, Bootstrap, and Google Tag Manager integrated for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced and Google reCAPTCHA is used on login forms, but the WordPress version is outdated and lacks explicit security headers, which poses some risk. Privacy compliance is strong with a visible cookie consent mechanism and comprehensive privacy and terms policies. Overall, the website is trustworthy and professionally maintained but would benefit from technical updates and enhanced security hardening.

S

Station des rousses

lesrousses.com

57

Station des Rousses operates as a regional tourism information portal focused on promoting the Les Rousses mountain resort in the Jura region of France. The website targets families and tourists interested in nature, outdoor activities, and mountain vacations. It provides comprehensive information on accommodations, activities, events, and practical travel details, positioning itself as a key resource for visitors to the area. The business model centers on tourism promotion and visitor engagement rather than direct sales. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and uses popular libraries like Bootstrap and Font Awesome. It integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Cookie consent is managed via Tarteaucitron, indicating attention to privacy compliance, though no explicit privacy policy page was found. From a security perspective, the site uses HTTPS with good SSL configuration and asynchronous loading of tracking scripts. However, no explicit security headers were detected, and there is a lack of published security policies or incident response contacts. The absence of WHOIS registrant data reduces domain trustworthiness, though the professional site content and social media presence support legitimacy. Overall, the website is a well-constructed tourism portal with moderate security and privacy compliance maturity. Strategic improvements include publishing clear privacy and security policies, enhancing security headers, and improving domain registration transparency to strengthen trust and compliance.

L

Les Arcs Office de Tourisme

lesarcs.com

63

Les Arcs Office de Tourisme operates a comprehensive and professionally designed website promoting the Les Arcs ski resort and mountain destination in the French Alps. The site targets families and tourists interested in skiing, mountain activities, and year-round vacation options. It offers services such as accommodation booking, activity reservations, and detailed tourism information. The website is built on TYPO3 CMS and integrates modern web technologies including jQuery, Swiper.js, and Matomo analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though some security headers and explicit security policies are absent. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. WHOIS data is unavailable or protected, which slightly reduces transparency but does not detract from the site's professional appearance and trustworthiness. Overall, the website is a high-quality, trustworthy digital presence for a medium-sized tourism entity in France.

O

Office de Tourisme Lens Lievin Henin Carvin

tourisme-lens.fr

55

The website tourisme-lens.fr serves as the official tourism portal for the Lens-Liévin and Hénin-Carvin region in France. It provides comprehensive visitor information, event promotion, interactive maps, and booking services, targeting tourists interested in cultural, historical, and leisure activities. The site is well-branded, professionally designed, and offers multilingual support, enhancing accessibility for international visitors. Technically, it is built on WordPress with modern frameworks and plugins, hosted by OVH, and integrates analytics and marketing tools with GDPR-compliant consent mechanisms. Security posture is solid with HTTPS and cookie consent, though improvements in security headers and explicit security policies are recommended. Overall, the site is trustworthy, user-friendly, and aligned with its business objectives.

O

Office de Tourisme Métropolitain Nice Côte d'Azur

explorenicecotedazur.com

62

The website www.explorenicecotedazur.com serves as the official metropolitan tourism office for the Nice Côte d'Azur region in France. It provides comprehensive tourism information, event listings, itinerary suggestions, and booking services aimed at tourists and visitors. The site is well-branded, professionally designed, and offers multilingual support (French, English, Italian). The presence of structured data and SEO optimizations indicates a mature digital presence. Technically, the site is built on WordPress with modern plugins and integrates multimedia content such as videos and social media feeds. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. The WHOIS data is unavailable or indicates the domain may not be registered, which is inconsistent with the active and professional website, suggesting possible privacy protection or WHOIS server issues. Overall, the site is trustworthy and serves as a key information hub for tourism in the region.

N

NÁPOJOVÁ AMBULANCE s.r.o.

n-a.cz

51

NÁPOJOVÁ AMBULANCE s.r.o. is a Czech company specializing in beverage services, including coffee solutions, water filtration, and equipment sales and servicing for businesses, restaurants, and private homes. Established since 1991, the company collaborates with well-known brands and offers a comprehensive range of products and services, including an e-commerce platform. The website is built on Joomla CMS with modern technologies and provides clear navigation, contact information, and GDPR-compliant privacy and cookie policies. Security posture is good with HTTPS and secure forms, though some security headers could be improved. The absence of WHOIS data reduces domain trustworthiness but the website content and contact details appear legitimate.

T

Tourisme Bretagne

tourismebretagne.bzh

63

Tourisme Bretagne operates as a regional tourism professional portal focused on the Brittany region of France. The website provides news, resources, and subscription-based services tailored to tourism professionals. It is positioned as an important regional authority or resource hub, likely supported by government or regional tourism bodies. The site is built on WordPress with WooCommerce and integrates modern tracking and consent management tools, reflecting a moderate level of digital maturity. Security posture is good with HTTPS and cookie consent mechanisms in place, though explicit security policies and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

D

DESTINATION NANCY

destination-nancy.com

39

DESTINATION NANCY is a public local company primarily focused on promoting tourism and organizing events in the Grand Nancy metropolitan area. It operates key event venues such as Centre Prouvé and Parc Expo, provides free advisory services through its Convention Bureau, and collaborates closely with the local government and tourism office. The website is professionally designed, multilingual (French and English), and regularly updated with event and news content. Technically, it is built on WordPress with modern plugins and analytics tools, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and cookie consent, though there is room for improvement in security headers and explicit security policies. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

L

La Rochelle Congrès

larochelle-evenements.fr

53

La Rochelle Congrès operates as a regional event space manager and event organizer based in La Rochelle, France. The company offers rental of iconic venues such as the Espace Encan and the Centre de Congrès Georges-Pernoud, providing tailored event planning services for corporate and professional clients. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding targeting event organizers and businesses. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and consent management tools, indicating a good level of digital maturity. Security posture is solid with HTTPS enforcement and use of CAPTCHA, though some security headers are missing and no explicit security policies are published. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness despite the professional appearance and content quality. Overall, the site is well-positioned in its market niche but would benefit from improved transparency and security documentation.

W

Wakacje.pl

wakacje.pl

61

Wakacje.pl is a leading Polish online travel portal specializing in vacation packages, last minute deals, and holiday bookings. It serves a broad Polish-speaking audience seeking comprehensive travel solutions including flights, hotels, and tours. The website is professionally designed with consistent branding and offers extensive travel options from multiple tour operators, positioning itself strongly in the Polish travel market. Technically, the site employs modern JavaScript frameworks and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Hotjar, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses standard security headers, and implements GDPR-compliant cookie consent mechanisms, though it lacks a publicly available security policy or incident response contacts. The absence of WHOIS data for the domain reduces transparency but does not detract from the site's apparent legitimacy given its association with Wirtualna Polska Media S.A. Overall, Wakacje.pl demonstrates a solid security posture and good privacy compliance, with room for improvement in publishing security policies and incident response information.

P

Pivovarna Laško Union d.o.o.

union-experience.si

41

Pivovarna Laško Union d.o.o. operates a well-established brewery business in Slovenia with a rich history spanning over 160 years. The website serves as a comprehensive platform promoting their brewery tours, events, product offerings, and brand experiences, targeting adult consumers interested in beer and related hospitality services. The company maintains a strong market position with consistent branding and a professional online presence. Technically, the website employs modern web technologies including Google Tag Manager and Google Fonts, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and GDPR-compliant cookie consent mechanisms, although explicit security policies and headers could be improved. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

I

Informační centrum Trutnov

ictrutnov.cz

46

The website www.ictrutnov.cz serves as the official Tourist Information Center for the city of Trutnov, Czech Republic. It provides comprehensive visitor information including local attractions, events, and practical visitor services. The site targets tourists and visitors interested in exploring the region, offering multilingual support and a well-organized content structure. The business operates primarily in the hospitality and government/non-profit sectors, focusing on tourism promotion and visitor assistance. Technically, the website is built on Drupal 8 CMS and integrates modern web technologies such as Google Analytics, Google Tag Manager, FontAwesome icons, and AddToAny sharing tools. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Cookie consent and GDPR compliance mechanisms are implemented, reflecting awareness of privacy regulations. From a security perspective, the site uses HTTPS and cookie consent banners but lacks explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain trust verification, although the website's official branding and contact information support its legitimacy. Overall, the site is professional, user-friendly, and trustworthy for its intended audience. Strategic improvements include enhancing security headers, publishing security policies, and improving domain registration transparency to strengthen trust and compliance.

D

Děčínská sportovní, příspěvková organizace

aquahoteldecin.cz

59

The website booking.previo.app hosts a direct online booking platform for Aqua Hotel, operated by Děčínská sportovní, a Czech hospitality organization. The platform facilitates hotel reservations with clear business and contact information, supporting multiple languages and currencies. The site includes comprehensive privacy and cookie policies with consent mechanisms, and detailed terms of service including cancellation policies. The business targets general audiences seeking accommodation in Děčín, Czech Republic, positioning itself as a small local hospitality provider with direct booking capabilities. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and analytics tools such as Smartlook and Contentsquare. The design is responsive and user-friendly, with good navigation and content relevance. However, some security best practices like security headers are missing, representing an area for improvement. The SSL configuration is good, and no critical vulnerabilities or exposed sensitive data were detected. From a security and compliance perspective, the site demonstrates good GDPR compliance with clear privacy disclosures and cookie consent. Incident response and security policy details are not explicitly provided, which could be enhanced. No suspicious or adult content is present, making the site safe for general users. The domain registration aligns well with the business entity, supporting legitimacy. Overall, the website is a professionally maintained hospitality booking platform with solid privacy and compliance posture, moderate technical sophistication, and room for security enhancements. Strategic recommendations include implementing security headers, enhancing incident response transparency, and continuous monitoring of third-party scripts to maintain security and trust.

V

VITÆ - Arts Martiaux / Fitness Centre privé Arts Martiaux - Fitness - Remise en forme

vitaeartsmartiaux.fr

45

VITÆ - Arts Martiaux / Fitness is a newly established private martial arts and fitness center located in the Yvelines region of France, specifically serving Le Vésinet and Le Pecq. The business offers a range of martial arts disciplines including Brazilian Jiu Jitsu, MMA, boxing, cross training, and self-defense courses for adults and children. Positioned as a local specialist in martial arts and fitness, the center targets individuals seeking both beginner and advanced training in these disciplines. The website reflects a professional and consistent brand image with good content quality and clear service offerings.

W

Wine & Food Festival

wineandfoodfest.com

55

Wine & Food Festival is a niche event organizer based in Mexico, specializing in high-end gastronomic festivals and culinary experiences that showcase Mexican and international cuisine. The website presents a professional and visually appealing platform built on WordPress with Elementor and WooCommerce, supporting event promotion and ticket sales. The technical infrastructure is modern and includes analytics and marketing tools, though hosting details are not explicit. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and well-positioned in its market segment but should improve compliance and security transparency.

I

inwink

foodhoteltech.com

78

Food Hotel Tech is a specialized event platform focused on showcasing technological and sustainable innovations for the hospitality and restaurant sectors. The event is well-established with a strong market presence in France, targeting professionals seeking digital transformation and eco-responsible solutions. The website demonstrates a high level of digital maturity with modern technologies, responsive design, and rich content including videos, speaker profiles, and partner endorsements. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and transparency. Security posture is moderate with no visible security headers or privacy policies, indicating room for improvement in compliance and protection. Overall, the platform is professional and trustworthy from a business perspective but should enhance its security and privacy disclosures to strengthen user trust and regulatory compliance.

E

EquipHotel - Home of Hospitality

equiphotel.com

66

EquipHotel is an international trade show and event organizer specializing in the hospitality sector, targeting professionals in hotel, restaurant, and collective services. The website positions itself as a key reference event in Paris, France, with a strong brand presence and professional content tailored to industry stakeholders. The technical infrastructure leverages modern web technologies including Adobe Experience Manager CMS, React frameworks, and integrates Google Tag Manager and Adobe Helix for analytics and performance monitoring. Privacy compliance is partially addressed through a cookie consent mechanism, although explicit privacy and terms of service pages were not detected. Security posture is moderate with HTTPS usage and OAuth2 PKCE authentication, but lacks visible security headers and published security policies. WHOIS data is missing, which raises concerns about domain registration transparency and trustworthiness. Overall, the website is professionally designed and functional but would benefit from enhanced transparency and security documentation.

Zátiší Catering Group a.s. operates a professionally designed blog focused on healthy lifestyle, recipes, nutrition advice, and gastronomy trends under the brand 'Blog ze Zátiší'. The website serves as a content marketing platform supporting the hospitality group’s brands and services. The technical infrastructure leverages Kentico CMS, Google Tag Manager, and CookieYes for cookie consent management, indicating a moderate level of digital maturity. The site is mobile-optimized with good SEO and accessibility basics. Security posture is adequate with HTTPS and CSRF protection cookies, but lacks advanced security headers and explicit privacy policy documentation. The absence of WHOIS data for the domain raises concerns about domain registration transparency, though the website content and branding strongly suggest legitimacy. Overall, the site is a trustworthy and professional digital asset for the hospitality group but would benefit from enhanced security and compliance documentation.

T

TIC BRNO, příspěvková organizace

gotobrno.cz

65

Go To Brno is the official tourism portal for the city of Brno, operated by TIC BRNO, a public organization. The website serves as a comprehensive guide offering information on cultural events, gastronomy, sightseeing, and practical visitor information. It targets tourists, residents, and visitors interested in exploring Brno's authentic atmosphere and attractions. The portal is well-positioned as the authoritative source for Brno tourism, providing key services such as event calendars, interactive maps, and tourist cards. Technically, the website is built on WordPress and leverages modern JavaScript libraries including jQuery, Leaflet for maps, and Algolia for search functionality. It integrates multiple analytics and tracking tools such as Google Analytics, Facebook Pixel, and TikTok Pixel, all managed with user consent via the Complianz GDPR plugin. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain registration insights, but the official nature of the site and consistent branding support its legitimacy. Overall, Go To Brno presents a professional, secure, and privacy-compliant tourism portal with strong business credibility. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and security posture.

D

Destinace Brněnsko

destinace-brnensko.cz

53

Destinace Brněnsko is a destination management organization focused on promoting tourism and managing the Brno region and its surroundings. The website presents a professional image consistent with a small hospitality sector business, offering services related to regional tourism development and promotion. The technical infrastructure is based on the Wix platform, leveraging standard web technologies such as JavaScript, CSS, and HTML5, providing a moderate level of performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit privacy or cookie policies. The absence of WHOIS data and contact information reduces overall trust and business credibility. Strategic improvements in privacy compliance, security best practices, and transparency are recommended to enhance trust and compliance.

Aquapark Děčín is a regional aquatic and wellness center located in the Czech Republic, offering a broad range of water-based recreational and sports activities including indoor aquapark attractions, summer swimming pools, wellness services such as saunas and massages, swimming schools, and sports facility rentals. The website targets families, sports enthusiasts, and local visitors seeking aquatic entertainment and wellness. The business operates as a public organization, indicated by its legal name, and maintains a consistent brand presence with active social media channels. Technically, the website employs common JavaScript libraries and tracking tools such as jQuery, Google Analytics, Facebook Pixel, and Cookiebot for cookie consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of security headers and explicit security policies suggests room for improvement. The lack of WHOIS data reduces domain trustworthiness, though the website content and social presence support legitimacy. Overall, the site is functional, professional, and compliant with basic privacy regulations.

Z

Zátiší Catering Group a.s.

freshandtasty.cz

46

Fresh and Tasty is a catering service company operating primarily in Prague, offering corporate canteens, school cafeterias, and office catering. It is part of the larger Zátiší Group, a recognized hospitality entity. The website is professionally designed with clear navigation, multimedia content, and detailed service descriptions targeting corporate and educational clients. Technically, the site uses ASP.NET WebForms and Kentico CMS, integrates Google Maps and analytics, and provides cookie consent mechanisms compliant with GDPR. Security posture is moderate with CSRF protections and cookie consent but lacks explicit security headers and incident response information. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not significantly impact legitimacy. Overall, the site is trustworthy and well-positioned in its market segment.

Z

Zátiší Catering

zatisicatering.cz

49

Zátiší Catering is a professional catering service provider operating primarily in Prague and other major European cities such as Berlin, Munich, Budapest, and Austria. The company specializes in catering for corporate events, gala dinners, conferences, cocktail parties, and thematic events. Their market position is strong within the hospitality sector, supported by a medium-sized business model and affiliation with the Zátiší Group. The website demonstrates a good level of digital maturity with modern technologies such as Kentico CMS, Google Tag Manager, and CookieYes for consent management. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. However, the absence of WHOIS data limits domain legitimacy verification, which is a potential risk factor. Security posture is solid with HTTPS, security headers, and CSRF protections in place, but lacks publicly disclosed incident response or vulnerability disclosure policies. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

Z

Zátiší Catering Group a.s.

vzatisi.cz

49

V Zatisi is a fine dining restaurant located in Prague, Czech Republic, specializing in modern interpretations of Slavic flavors using seasonal and traditional ingredients. It operates under the umbrella of Zátiší Catering Group a.s., a recognized hospitality group. The website presents a professional and well-structured digital presence with clear business information, reservation capabilities, and rich content showcasing menus and philosophy. Technically, the site uses modern web technologies including Vue.js, jQuery, and Google Tag Manager, with a Kentico CMS backend inferred from cookies. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though some security headers are not explicitly detected. Privacy compliance is well addressed with a comprehensive privacy and cookie policy linked and a consent banner in place. The lack of WHOIS data limits domain registration trust analysis, but the business legitimacy is supported by consistent branding and external affiliations. Overall, the site is trustworthy, user-friendly, and compliant with relevant privacy regulations.

C

Czech Restaurant Mgt. Co. spol.s.r.o.

mlynec.cz

51

Restaurant Mlýnec is a well-established fine dining restaurant located in the center of Prague, offering modern Czech and international cuisine with a scenic view of the Charles Bridge. It operates under the Zátiší Group umbrella, a recognized hospitality group. The website reflects a professional and polished digital presence with clear business information, customer ratings, and event hosting services. The business targets tourists, locals, and business clients seeking premium dining experiences. Technically, the site is built on ASP.NET with Kentico CMS, integrating modern tools like Google Tag Manager and CookieYes for analytics and privacy compliance. Security practices include HTTPS enforcement and CSRF protection, though some security headers could be improved. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. The absence of WHOIS data reduces domain trustworthiness but does not detract from the professional business presentation. Overall, the site demonstrates a mature digital infrastructure suitable for its hospitality market position.

G

Groupement des Hôtelleries & Restaurations de France

ghr.fr

48

The Groupement des Hôtelleries & Restaurations de France (GHR) is a French national association dedicated to supporting independent hospitality and restaurant businesses. The website serves as a comprehensive resource offering member services, training, insurance partnerships, regulatory guidance, and digital initiatives. It targets hospitality professionals across France, positioning itself as a key industry advocate with regional presence and recognized partnerships. Technically, the site is built on the SPIP CMS platform, utilizing modern libraries such as jQuery and Bootstrap, and integrates Google Analytics for visitor tracking. The site is mobile-optimized with good navigation and content quality. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers are not detected and no public security or incident response policies are found. WHOIS data is unavailable, which slightly impacts domain trust but the professional site content and social presence support legitimacy. Overall, the site is well-maintained and trustworthy for its audience.

P

Premiere Cinemas Praha Hostivař

premierecinemas.cz

46

Premiere Cinemas Praha Hostivař operates as a regional multiplex cinema chain in the Czech Republic, offering movie screenings with advanced audio-visual technology such as Dolby Atmos and 4K projection. The website provides detailed programming schedules, online ticket booking, and loyalty programs, targeting general moviegoers and families. The presence of multiple regional subdomains indicates a medium-sized business with a local market focus. Technically, the website uses modern JavaScript libraries and tracking tools, with a custom CMS platform. Security posture is adequate with HTTPS and consent management but lacks advanced security headers and published policies. The absence of WHOIS data limits domain trust assessment but the website content and branding appear legitimate and professional.

M

MYJO s.r.o.

apartmanvtichu.cz

46

Apartmanvtichu.cz is a hospitality website offering accommodation services in the Broumovsko region of the Czech Republic. The business provides a small apartment suitable for four guests, featuring amenities such as a fully equipped kitchen, washing machine, a unique tent sauna, and a garden terrace. The website targets tourists and cyclists seeking a tranquil and active rest in a protected landscape area. The business appears to be a small, local operator founded recently in 2024, with clear contact details and an online reservation system powered by a partner platform, REZEO. The website is professionally designed with good navigation and mobile optimization, although some technical aspects could be modernized.

R

Host Your Event At WBUR's CitySpace

rentcityspace.com

57

The website www.rentcityspace.com represents a venue rental service branded as WBUR's CitySpace, a state-of-the-art event venue located in Boston. The site is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as HTML5, CSS3, and JavaScript. The business model focuses on providing event space rental services targeting general audiences seeking venue solutions in the hospitality sector. The website content is minimal but relevant to the business purpose, with a clear title and description emphasizing the venue's location and quality. From a technical perspective, the site is hosted on Wix infrastructure, which provides a moderate level of performance and good mobile optimization. However, the site lacks advanced SEO and accessibility features, and no advanced analytics or marketing tools are detected. The absence of privacy, cookie, and terms of service policies indicates a gap in compliance and user transparency. Security posture is basic with HTTPS enabled but no additional security headers detected. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy and trustworthiness. No contact information or social media links are provided, limiting user engagement and business credibility. Overall, the site is functional but requires improvements in security, compliance, and business transparency to enhance trust and professionalism. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, providing clear contact information, and verifying domain registration details to improve legitimacy and user confidence.

A

Ace Hotel Palm Springs

acehotelpalmsprings.com

61

Ace Hotel Palm Springs operates as a boutique hospitality provider offering accommodation and related services near downtown Palm Springs. The website presents a professional and visually appealing interface targeting travelers and tourists seeking stylish lodging. The technical infrastructure includes modern web technologies such as Google Tag Manager and Font Awesome, with content managed via Vizergy CMS. HTTPS is enforced, ensuring secure communications, but the absence of security headers and privacy policies indicates room for improvement in security and compliance. The lack of WHOIS registration data raises questions about domain registration transparency, although the website content and branding suggest a legitimate business presence. Overall, the site demonstrates moderate digital maturity with opportunities to enhance security posture and privacy compliance.

T

The Salt And Pepper Shaker Museum

thesaltandpeppershakermuseum.com

51

The Salt and Pepper Shaker Museum is a niche hospitality business located in Gatlinburg, Tennessee, offering a unique museum experience focused on salt and pepper shakers and pepper mills. It targets tourists and collectors, leveraging its unique collection and location near the Great Smoky Mountain National Park. The business operates a physical museum with admission fees and a gift shop, complemented by an online presence including a virtual museum and online store. The website reflects a small but established business with consistent branding and trust indicators such as TripAdvisor recognition and active social media channels. Technically, the website is built on an older ASP.NET WebForms platform with DNN CMS, using common libraries like jQuery and Bootstrap. While the site is functional and moderately optimized for mobile, it lacks advanced modern features and some security best practices. Security posture is adequate with HTTPS and domain protections but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic with a privacy policy and cookie consent banner but no explicit GDPR compliance statements. Overall, the website is trustworthy and professional but would benefit from technical and security enhancements to improve resilience and compliance.

White House General Store is a small hospitality business specializing in authentic country dining with a strong local presence since 1995. The website reflects a well-branded, family-friendly restaurant offering traditional home-cooked meals and a warm atmosphere. The business targets local customers and visitors seeking a nostalgic dining experience. Technically, the website uses modern CSS frameworks like Tailwind and icon libraries such as Lucide, hosted with Cloudflare DNS services, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks advanced security headers and DNSSEC. Privacy compliance is limited, with no cookie consent or detailed privacy policy. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

K

K2N way s.r.o.

kometapub.cz

51

KOMETA PUB operates as a hospitality business with multiple physical locations in Brno and Pasohlávky, Czech Republic, offering pub and restaurant services including food and beverage menus. The business is locally focused, targeting residents and visitors seeking dining and pub experiences. The company behind the website is K2N way s.r.o., established in 2009, indicating a stable presence in the hospitality sector. Technically, the website uses standard web technologies such as HTML5, Bootstrap, jQuery, and web font services. The site is moderately optimized for mobile devices and SEO but lacks advanced accessibility and performance optimizations. No CMS or complex backend platform is detected. Hosting and domain registration are consistent with a legitimate small business. From a security perspective, the website lacks visible security headers and privacy compliance features such as privacy or cookie policies. No forms collect user data, reducing immediate risk, but the absence of GDPR compliance documentation and security best practices is a concern. No WAF or blocking mechanisms are detected, and the domain registration data supports legitimacy. Overall, the website presents a basic but functional online presence for a small hospitality business. Strategic improvements in privacy compliance, security headers, and user trust indicators would enhance the site's professionalism and security posture.

B

Bílí Tygři Liberec, s.r.o.

hcbilitygri.cz

44

Bílí Tygři Liberec is a well-established Czech ice hockey team with a professional online presence focused on fan engagement, ticket sales, and merchandise. The website provides comprehensive content including news, match schedules, and multimedia, targeting hockey fans primarily in the Czech Republic. Technically, the site uses modern JavaScript libraries and frameworks such as Bootstrap and Swiper.js, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers are missing. Privacy compliance is addressed with GDPR notices and cookie management. Overall, the site reflects a medium-sized sports organization with consistent branding and trustworthy partner relationships.

H

HC Sparta Praha a.s.

hcsparta.cz

46

HC Sparta Praha a.s. operates as a professional ice hockey club based in Prague, Czech Republic, providing official club information, ticket sales, merchandise, and multimedia content to fans and the local community. The website serves as a central hub for fans to engage with the club, purchase tickets, and stay updated on team news and events. The business model revolves around sports entertainment, sponsorships, and fan engagement through digital channels. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site is mobile-optimized with a responsive design and includes cookie consent mechanisms to comply with privacy regulations. Performance is moderate with good SEO and accessibility basics, though some improvements in security headers and accessibility could be made. From a security perspective, the site uses HTTPS and implements cookie consent with granular controls, but lacks visible security headers in the provided data. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern for trust and legitimacy, though the website content and branding appear professional and consistent with a legitimate sports organization. Overall, the website presents a solid digital presence for HC Sparta Praha with good content quality and user experience. However, the missing WHOIS information and lack of explicit contact details slightly reduce trustworthiness. Strategic recommendations include enhancing security headers, verifying domain registration, and improving contact transparency to strengthen credibility and compliance.

Z

Zátiší Catering Group a.s.

karieravgastru.cz

50

Zátiší Catering Group a.s. is a medium-sized hospitality company based in the Czech Republic, operating premium restaurants, catering services, and corporate/school dining through its Fresh&Tasty brand. The company targets professionals and job seekers interested in the hospitality sector, offering both full-time and part-time positions. The website serves as a career portal showcasing job opportunities and company benefits, reflecting a professional and consistent brand image. Technically, the website is built on ASP.NET WebForms with Kentico CMS, utilizing modern web technologies such as jQuery and Bootstrap icons. It integrates Google Tag Manager and CookieYes for analytics and cookie consent management. The site is mobile-optimized with basic accessibility features and moderate performance. However, some security headers are missing, and WHOIS data for the domain is unavailable, which slightly impacts trustworthiness. Security posture is generally good with HTTPS enforced, CSRF protection cookies, and a comprehensive cookie consent mechanism. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is safe, professional, and trustworthy, though domain registration transparency should be verified. Recommendations include adding security headers, improving accessibility, verifying domain WHOIS data, and enhancing SEO metadata to further strengthen the website's security and credibility.

Black Rock Brewery is a small craft brewery established in 2012, offering a variety of brews with a focus on quality bottling and packaging. The website is built on WordPress and hosted by NameCheap, featuring moderate performance and good mobile optimization. The business has some trust indicators such as national brewing awards and testimonials but lacks visible privacy and security policies. The domain WHOIS data shows inconsistencies with a future creation date, which raises questions about registration legitimacy. Security posture is basic with HTTPS enabled but missing security headers and DNSSEC. Overall, the site is functional and professional but requires improvements in privacy compliance and security hardening.

M

MojaKarta

mojakarta.cz

60

MojaKarta is a regional tourism initiative under the patronage of the South Moravia Tourism Authority, offering a virtual discount card that provides access to various attractions, gastronomy, and accommodation options across the South Moravia region. The website is designed to promote tourism by bundling benefits and discounts into a single card, targeting tourists and visitors interested in exploring the region's cultural and recreational offerings. The business model focuses on collaboration with local partners and attractions to enhance visitor experiences. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Tag Manager for analytics and marketing, and Cookie Script for consent management. The site is mobile-optimized and features a clean, professional design with clear navigation. However, some security best practices such as implementing security headers are not evident, and the WHOIS data for the domain is missing, which raises questions about domain registration transparency. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies. Privacy and cookie policies are present and indicate GDPR compliance, which is important given the site's European audience. Contact information is clearly provided, enhancing business credibility. No critical vulnerabilities or adult content were detected, and the site is fully accessible without WAF or blocking mechanisms. Overall, MojaKarta presents a trustworthy and professional tourism service with good content quality and technical implementation. The main risk lies in the absence of WHOIS data, which should be investigated further to confirm domain legitimacy. Enhancing security headers and publishing terms of service and security policies would improve the site's security posture and compliance standing.

C

CasinoReal

casino-real.pt

53

CasinoReal is a Portuguese online platform specializing in comprehensive reviews and rankings of online casinos available to players in Portugal. The website provides detailed information on casino legality, game variety, bonuses, payment methods, and responsible gambling practices, targeting Portuguese-speaking adult gamblers. It holds a strong market position as a trusted source for casino recommendations and affiliate marketing in the Portuguese gambling sector. Technically, the site employs modern web technologies including Google Analytics and Tag Manager for tracking, lazy loading for images, and responsive design for mobile optimization. The site is well-structured with rich content and uses JSON-LD structured data for SEO enhancement. Security-wise, the site uses HTTPS and SSL certificates but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. No forms collecting personal data were detected on the main page, and no direct contact emails or phone numbers were found, though social media profiles are linked. Overall, the site is professional, content-rich, and trustworthy but would benefit from enhanced privacy compliance and security disclosures.

C

Online Kasina pro Česke Hrace ᑕ❤️ᑐ Nejlepší Online Casino CZ

casinopointcz.com

56

The website casinopointcz.com is a Czech language online casino review and affiliate platform targeting Czech players interested in online gambling. It provides detailed casino reviews, bonus offers, game guides, and payment method information. The site is professionally designed with good mobile optimization and uses modern analytics tools such as Google Analytics and Microsoft Clarity. However, it lacks visible privacy, cookie, and terms of service policies, as well as direct contact information, which impacts its privacy compliance and business credibility scores. The WHOIS data for the domain is unavailable or the domain is unregistered, which raises concerns about domain legitimacy despite the active and professional website presence. Security posture is generally good with HTTPS enabled but could be improved by adding security headers and formal security policies. Overall, the site serves its niche well but should improve transparency and compliance to enhance trust and security.

Apartmány Pod Mravencovkou is a small hospitality business offering apartment rentals in the Jeseníky region of the Czech Republic. The website provides detailed information about the apartments, local activities, and contact details, targeting tourists and visitors seeking accommodation near Karlov pod Pradědem. The business appears locally focused with a straightforward hospitality rental model. Technically, the website uses a traditional tech stack including Bootstrap 3, jQuery 1.11.1, and Google reCAPTCHA for form protection, although no visible forms are present on the main page. The site is served over HTTPS with a valid SSL certificate, but lacks modern security headers and uses an outdated jQuery version, which could pose security risks. The site is mobile responsive and has a good user experience but could improve accessibility and SEO. Security posture is moderate with HTTPS and reCAPTCHA usage, but missing privacy and cookie policies reduce compliance with GDPR and other regulations. No incident response or vulnerability disclosure information is provided. WHOIS data is missing, which reduces trust in domain legitimacy, though the website content and contact information appear genuine. Overall, the site is functional and professional for a small hospitality business but should improve security headers, update libraries, and add privacy and cookie policies to enhance compliance and trustworthiness.

O

ORSYS s.r.o.

tepfactor.cz

56

TEPfactor.cz is a Czech adventure park offering team adventures, school trips, and family outings. The website is professionally designed with good SEO and mobile optimization, targeting families, schools, and corporate clients. The business is operated by ORSYS s.r.o., a Czech company, and positions itself as the largest adventure park in the Czech Republic. The site integrates multiple marketing and tracking technologies including Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and Exponea, indicating a mature digital marketing infrastructure. However, the absence of WHOIS data and explicit privacy and terms of service documents presents some trust and compliance concerns. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks visible security headers and formal security policies. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

Z

Zátiší Catering Group a.s.

zatisigroup.cz

53

Zátiší Catering Group a.s. is a reputable hospitality company based in Prague, Czech Republic, operating multiple restaurant brands and catering services. Their market position is strong within the local and European hospitality sector, offering high-quality dining experiences and event catering. The website reflects a professional digital presence with good content quality and consistent branding. Technically, the site uses a Kentico CMS on an ASP.NET platform, integrates modern analytics and cookie consent tools, and demonstrates moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear GDPR policies and cookie management. Overall, the domain appears legitimate despite the absence of WHOIS data, likely due to privacy protection. The site is safe for general audiences and does not contain adult or explicit content.