Hospitality security reports

R

Restaurace Selská Krčma

selskakrcma.cz

67

Restaurace Selská Krčma is a small hospitality business operating a traditional Czech restaurant located in Otrokovice, Czech Republic. Established in 2006, it offers dine-in, takeaway, catering, and event hosting services, targeting local residents and visitors seeking authentic Czech cuisine. The website is professionally designed with clear navigation, multi-language support, and integrated reservation and food ordering systems via the Dish.co platform. Contact information and legal imprint details are clearly provided, enhancing business credibility. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and Adobe DTM for analytics and marketing. The Dish.co CMS platform is used for content management and hosting. The site is mobile-optimized with good SEO and basic accessibility features. Performance is moderate, with room for optimization. From a security perspective, HTTPS is implied and cookie consent mechanisms are implemented, supporting GDPR compliance. However, no explicit security headers or published security policies were found, and incident response contacts are absent. The site does not expose sensitive data and uses secure iframes for third-party widgets. Overall, the security posture is adequate but could be improved with additional measures. The website content is safe for general audiences, with no adult or questionable material. The domain registration data is consistent with the business claims, showing a long-established presence. No suspicious patterns or privacy protection concerns were detected. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility and performance.

Legenda Steak House is a small hospitality business located in Zlín, Czech Republic, specializing in high-quality steak dishes and traditional beers. The website reflects a local steakhouse with a focus on quality meats and a longstanding tradition linked to a previous Irish restaurant. The digital presence is built on WordPress with integration of Google Maps and analytics tools, providing a functional and user-friendly experience for visitors seeking dining options. However, the absence of privacy and cookie policies indicates compliance gaps with data protection regulations. Security posture is basic with HTTPS enabled but lacking advanced security headers and configurations. The lack of WHOIS data limits domain legitimacy verification, but the website content and contact information appear professional and trustworthy. Overall, the site serves its business purpose well but would benefit from enhanced security and privacy compliance measures.

Lesní hotel Zlín is a small hospitality business located in Zlín, Czech Republic, offering hotel accommodation, restaurant services, wellness, and event hosting. The website presents a professional design with clear business information and integrates an external reservation system. However, the hotel is currently temporarily closed as stated on the site. The technical infrastructure includes legacy jQuery, Google Fonts, Vimeo video embedding, and an external reservation platform. SEO is limited due to meta robots noindex directives. Security posture is weak with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are published, which is a compliance risk under GDPR. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional but requires improvements in security and privacy compliance to meet modern standards.

Potrefená Husa Zlín is a local restaurant in Zlín, Czech Republic, specializing in traditional Czech beer culture and quality dining experiences. The website presents a professional and user-friendly interface with clear contact details and online reservation options, targeting local customers including families and couples. The business operates primarily in the hospitality sector with a focus on food and beverage services. Technically, the website is built on WordPress with common plugins and libraries, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance features. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective. Overall, the site is functional and professional but would benefit from enhanced privacy policies and security practices.

Hotel Lázně Kostelec is a well-established hospitality and wellness resort located near Zlín, Czech Republic, offering a broad range of services including hotel accommodation, spa treatments, dining, golf, and event hosting. The website presents a professional and user-friendly interface with clear navigation and relevant content targeting families, spa guests, and event attendees. The business leverages digital marketing tools such as Google Analytics and Tag Manager, and maintains GDPR compliance with a cookie consent mechanism and privacy policy. However, the WHOIS data is unavailable, which limits domain trust verification. The technical infrastructure uses legacy jQuery and lacks some modern security headers, suggesting room for improvement in security posture. Overall, the site is secure with HTTPS and good privacy practices but could enhance security policies and update technical components.

A

Asociace kuchařů a cukrářů České republiky

akc.cz

58

Asociace kuchařů a cukrářů České republiky (AKC) is a Czech national association dedicated to representing and supporting chefs and confectioners. The organization focuses on education, competitions, networking, and partnership programs within the gastronomy sector. The website serves as a portal for members and interested parties to access information about events, workshops, certifications, and membership benefits. The site is professionally designed with a clear navigation structure and mobile responsiveness, targeting culinary professionals and enthusiasts in the Czech Republic.

G

Grandhotel Tatra

grandhoteltatra.cz

57

Grandhotel Tatra is a luxury hospitality business located in the Beskydy region of the Czech Republic, offering premium accommodation services with an integrated online booking engine. The website is professionally designed, mobile-optimized, and uses modern web technologies including Vue.js and the Hotelwize platform. It integrates multiple analytics and marketing tools such as Google Analytics v4, Facebook Pixel, and Matomo Analytics to monitor user behavior and optimize marketing efforts. The site enforces HTTPS and registers a service worker, indicating a good security baseline. However, the absence of WHOIS data and explicit privacy policy documents reduces the overall trust and compliance posture. The site includes a cookie consent mechanism, but lacks visible terms of service and security incident response information.

Canada PUB is a small hospitality business operating as a gastropub located in Zlín, Czech Republic. The business offers a variety of draft beers including tank beer, an air-conditioned restaurant, and outdoor seating. Their digital presence is hosted on Facebook, leveraging the platform's infrastructure and social media tools to engage with customers. The Facebook page includes essential contact information such as phone number, email, physical address, and links to their official website and Instagram profile, indicating a well-rounded local business presence. Technically, the page is built on Facebook's React-based platform, ensuring fast performance, mobile optimization, and good accessibility. The site uses HTTPS and likely benefits from Facebook's robust security infrastructure. However, the page lacks explicit privacy and cookie policies, which is a gap in privacy compliance. No WHOIS data is available for the Facebook domain due to privacy and registrar restrictions, which is expected for a major platform. Security posture is strong due to platform controls and HTTPS enforcement, with no visible vulnerabilities or exposed sensitive data. The business does not provide direct security or incident response contact information on the page. Overall, the site is suitable for mature audiences given its alcohol-related content but contains no explicit adult material. The digital maturity is moderate, with room for improvement in privacy compliance and SEO. The overall risk is low, with recommendations focusing on adding privacy and cookie policies, enhancing SEO metadata, and providing security contact details to improve trust and compliance.

The website www.hotelgarnizlin.cz appears to represent a hospitality business named Hotel Garni Zlín, offering accommodation services in the Czech Republic. However, the website content is minimal, primarily serving as a redirect to another URL, with no detailed business description, contact information, or user engagement features. The lack of WHOIS data and absence of privacy or cookie policies indicate limited digital maturity and potential privacy compliance gaps. Technically, the site uses Google Fonts but lacks modern CMS or frameworks, and no security headers or HTTPS status could be confirmed from the data provided. The security posture is weak due to missing security best practices and policies. Overall, the website presents a low-risk profile with no adult or explicit content but requires significant improvements in content, security, and compliance to establish trust and professionalism.

L

LA VILLA Restaurant

lavilla.cz

51

LA VILLA Restaurant is a hospitality business based in Zlín, Czech Republic, specializing in international cuisine with a focus on French gastronomy. The website presents a professional and well-structured digital presence, featuring a modern tech stack including Bootstrap, jQuery, and Google Tag Manager for analytics and marketing. The site is mobile optimized and includes GDPR-compliant cookie consent mechanisms, reflecting awareness of privacy regulations. However, the absence of WHOIS data and registrant information introduces some uncertainty regarding domain legitimacy. The website lacks explicit contact details and security policy disclosures, which could impact user trust and compliance transparency. Overall, the business appears legitimate and focused on local restaurant services, but improvements in transparency and security documentation are recommended.

P

Pilsner Urquell Restaurant Zlín

puorzlin.cz

57

Pilsner Urquell Restaurant Zlín is a hospitality business operating a restaurant in Zlín, Czech Republic, specializing in traditional Czech cuisine complemented by Pilsner Urquell beer. The restaurant targets local and visiting customers seeking authentic Czech dining experiences with a capacity of 112 indoor seats and 48 outdoor seats. The website reflects a well-branded and consistent digital presence with clear business information and social media integration. However, the absence of WHOIS data limits verification of domain legitimacy. Technically, the website employs a modern frontend stack including jQuery, Bootstrap, and various UI libraries, built on the Smarty CMS platform. It is mobile optimized and provides a good user experience with clear navigation and relevant content. The site uses HTTPS and includes a cookie consent mechanism, but lacks visible security headers and formal privacy or terms of service pages. From a security perspective, the site demonstrates basic good practices such as HTTPS enforcement and cookie consent but lacks advanced security headers and documented policies. The missing WHOIS data is a notable risk factor, reducing overall trustworthiness. No critical vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is partial due to missing privacy policy documentation. Overall, the website is functional, professional, and suitable for its business purpose but would benefit from improved transparency in domain registration, enhanced security headers, and formal privacy and terms policies to strengthen trust and compliance.

A

Agentura Žijeme Gastrem s.r.o

gastrozlin.cz

43

Gastro Zlín is an online regional gastronomy guide focused on the Zlínský kraj region in the Czech Republic. It provides comprehensive listings of restaurants, bars, cafes, events, festivals, job offers, and e-shops related to the food and beverage industry. The platform targets local consumers and visitors seeking dining and gastronomic experiences, positioning itself as a trusted regional resource. The business operates as a small-sized entity under Agentura Žijeme Gastrem s.r.o, with a clear focus on hospitality services and community engagement. Technically, the website employs a modern technology stack including jQuery, Google Analytics, Google Tag Manager, Facebook SDK, and reCAPTCHA v3 for security. The site is mobile-optimized with good SEO practices and uses HTTPS for secure communications. The presence of cookie consent and privacy policies indicates GDPR compliance. However, the lack of WHOIS data transparency is a notable gap in domain trust. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and CAPTCHA protection on forms. There is room for improvement by adding advanced security headers and continuous monitoring of third-party scripts. No critical vulnerabilities or exposed sensitive data were detected. Overall, Gastro Zlín presents a professional and trustworthy online presence with rich content and user engagement features. The main risk lies in the absence of WHOIS registration data, which should be addressed to enhance domain legitimacy and trustworthiness.

C

Chalupa Amálka

chalupa-amalka.cz

42

Chalupa Amálka operates a holiday cottage rental business located in the Jizerské hory region of the Czech Republic. The website targets families and tourists seeking accommodation for active vacations including hiking, cycling, and winter sports. The business model is direct rental of a fully equipped cottage with a capacity of 16 guests, emphasizing comfort and family-friendly amenities. The website presents a professional and consistent brand image with clear contact information and social media presence, positioning itself as a niche hospitality provider in a popular tourist area. Technically, the website employs a modern technology stack including jQuery, Materialize CSS, FontAwesome, and Google Fonts, delivered via reputable CDNs. The site is mobile responsive and offers good SEO optimization. However, it lacks some security best practices such as security headers and visible privacy and terms of service pages. The contact form uses AJAX for submission, enhancing user experience and security. From a security perspective, the site uses HTTPS with a presumably good SSL configuration but lacks explicit security headers and incident response information. No WHOIS data is available, which limits domain trust assessment and slightly reduces overall credibility. The cookie consent mechanism is implemented with detailed information, indicating some level of privacy compliance. No adult or questionable content is present, making the site safe for general audiences. Overall, the website is functional, professional, and suitable for its business purpose but would benefit from improved transparency in privacy policies, security headers, and domain registration data to enhance trust and compliance.

Z

ZLIN.CZ s.r.o.

luhacovice.cz

49

Luhačovice.cz is a well-established local tourism portal focused on the spa town of Luhačovice in the Czech Republic. The website provides comprehensive information about local attractions, accommodation, dining, events, and practical tips for visitors. It serves as an independent tourist guide and features partnerships with local businesses and tourism entities. The site is professionally designed with good content quality and consistent branding, targeting tourists and visitors interested in the region. The business is small-sized, founded in 1997, and operated by ZLIN.CZ s.r.o., reflecting a stable market presence.

P

PRO Hospitality Consulting

pro-hospitality.com

55

PRO Hospitality Consulting is a small Canadian consulting firm specializing in improving operational and financial efficiency for hotels and restaurants. With over 30 years of hospitality management experience, they offer a range of services including contract negotiation, booking reconciliation, property assessment, hardware upgrades, branding, marketing, procurement, and operational streamlining. The website is professionally designed on the Squarespace platform, featuring clear service descriptions and contact information. Technically, the site uses modern web technologies and enforces HTTPS with HSTS, reflecting a good security posture. However, the absence of privacy and cookie policies, terms of service, and WHOIS registration data introduces trust and compliance concerns. Overall, the site is functional and trustworthy from a content perspective but would benefit from enhanced privacy compliance and domain registration transparency.

E

Eco friendly Hotel Dália

hoteldalia.sk

47

Eco friendly Hotel Dália is a small hospitality business located in Košice, Slovakia, specializing in eco-friendly and sustainable tourism. The hotel offers accommodation, restaurant services, conference and wedding facilities, and innovative features such as 24/7 contactless check-in and electric vehicle charging stations. It holds certifications like Ecolabel and is recognized on platforms such as TripAdvisor and HolidayCheck. The website is professionally designed with good content quality and clear navigation, targeting eco-conscious travelers and business clients. Technically, the site uses modern JavaScript libraries and tracking tools, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though security headers and incident response policies are absent. Privacy compliance is basic with a privacy policy and cookie consent mechanism present but no explicit GDPR statements. Overall, the domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.

H

Hotel CUBO

hotelcubo.com

50

Hotel CUBO is a boutique hotel located in Ljubljana, Slovenia, offering personalized accommodation, restaurant services, and event hosting. The website reflects a well-established business with a domain age of over a decade, consistent branding, and a focus on customer experience. The technical infrastructure is based on WordPress with the Divi theme and includes modern web technologies and SEO optimizations. Security posture is adequate with HTTPS and domain transfer protections, though DNSSEC is not enabled and no explicit security policy is published. Privacy policies exist but lack a clear consent mechanism. Overall, the site is professional, trustworthy, and targets general audiences seeking boutique hospitality services.

H

Hotel Danubia Gate

danubiagate.sk

63

Hotel Danubia Gate is a well-established hospitality business located in Bratislava, Slovakia, offering a range of accommodation options including modern, air-conditioned rooms and additional services such as restaurant discounts, conference facilities, and online check-in. The hotel targets tourists and business travelers seeking convenient city center lodging with quality amenities. The website reflects a mature digital presence with a Joomla CMS platform, Bootstrap framework, and integration of booking and analytics services. Security posture is generally good with HTTPS and GDPR-compliant cookie consent, though some outdated JavaScript libraries present moderate risk. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting the hotel's market position as a reputable accommodation provider.

B

BELIDEA SERVICES s.r.o.

hotelmnich.sk

57

Horský hotel Mních, operated by BELIDEA SERVICES s.r.o., is a well-established hospitality business located in the Western Tatras region of Slovakia. The hotel offers a range of accommodation options, event hosting services, and recreational activities targeting families, corporate clients, and tourists seeking relaxation and nature experiences. The website reflects a professional and consistent brand image with comprehensive service descriptions and active social media engagement. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for performance, SEO, and mobile responsiveness. Security posture is strong with HTTPS, DNSSEC, and consent management implemented, though explicit security policies and incident response contacts are absent. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trust.

R

Restpoint s.r.o

prague-catering.cz

41

Prague Catering, operated by Restpoint s.r.o, is a well-established catering service provider in the Czech Republic, specializing in a wide range of catering and event services including cocktails, galas, weddings, and office catering. The company has a strong market presence and has served prestigious events, indicating a reputable position in the hospitality sector. The website is professionally designed with clear navigation and relevant content tailored to event organizers and corporate clients. Technically, the site uses common libraries such as jQuery and Magnific Popup, but lacks advanced frameworks or CMS indications. Security posture is moderate with HTTPS implied but no visible security headers or privacy policy, which are areas for improvement. The cookie consent mechanism is well implemented, supporting GDPR compliance to some extent. Overall, the site is safe, trustworthy, and suitable for general audiences.

H

Hotel Maximus Resort

maximus-resort.cz

39

Hotel Maximus Resort is a medium-sized hospitality business located in Brno, Czech Republic, offering accommodation, wellness, dining, and event services. The website reflects a well-established regional player with a focus on quality and customer experience. The technical infrastructure is based on WordPress with modern plugins and tracking tools, supporting multilingual content and online booking capabilities. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a general audience interested in hospitality services.

H

Hotelový resort SEN****

hotelsen.cz

49

Hotelový resort SEN**** is a medium-sized hospitality business located in Senohraby, Czech Republic, offering hotel accommodation, wellness services, restaurant dining, and event hosting. The website presents a professional and well-structured digital presence with multilingual support and integrated booking capabilities. The technical infrastructure is based on WordPress CMS with common plugins for e-commerce, forms, and analytics, indicating a mature digital setup. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The absence of WHOIS data reduces transparency and trustworthiness from a domain registration perspective. Overall, the website is functional, user-friendly, and compliant with basic privacy standards, serving its target audience effectively.

M

Moje Kroměříž

mojekromeriz.cz

55

Moje Kroměříž is a local event aggregation platform focused on providing comprehensive information about cultural, sports, and leisure activities in the Kroměříž region of the Czech Republic. The website serves residents and visitors by offering event calendars, local offers, and magazine articles, positioning itself as the largest event overview portal for the area. The business model appears to rely on advertising and partnerships with local entities. Technically, the website uses a combination of legacy and modern web technologies including jQuery, Bootstrap, and the Nette Framework, with integrations for analytics and user behavior tracking via Google Analytics, Hotjar, and Smartlook. The site is mobile-optimized and SEO-friendly but uses an outdated jQuery version that could pose security risks. Security posture is moderate with HTTPS enforced but lacks important security headers and explicit privacy and cookie policies. No WHOIS registrant data is publicly available, indicating privacy protection, which is common and justified for this type of local portal. Overall, the website is professional and trustworthy but could improve in privacy compliance and security best practices.

R

Roubenka Štěpánka s.r.o.

roubenkastepanka.cz

50

Roubenka Štěpánka s.r.o. operates a niche hospitality business offering exclusive rental of a traditional wooden cottage located in Svratka, Vysočina, Czech Republic. The website presents the business professionally with clear descriptions of accommodation features, local attractions, and booking options. The target audience includes tourists and vacationers seeking private, family-friendly lodging in a natural setting. The company is small-sized, founded in 2019, and maintains an active online presence including social media channels and customer engagement tools.

M

Madeta Gastro

madeta-gastro.cz

46

Madeta Gastro is a Czech Republic-based food service company specializing in catering, corporate dining, retail bistros, and specialty cheese cellar experiences. It operates as part of the larger MADETA a.s. group, offering quality meals prepared by experienced professionals with a focus on healthy and tasty food at competitive prices. The website reflects a well-established regional player with a consistent brand and a clear target audience of businesses and consumers seeking quality food services. Technically, the site uses a modern JavaScript stack including jQuery, Google Analytics, Tag Manager, and Facebook Pixel, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks visible HTTP security headers and explicit public security policies. The absence of WHOIS data reduces domain trust slightly, but the strong linkage to the parent company and related domains supports legitimacy. Overall, the site is professional, GDPR compliant, and trustworthy, with room for security enhancements.

A

Arcibiskupský zámek v Kroměříži

zamek-kromeriz.cz

57

Arcibiskupský zámek v Kroměříži is a prominent cultural heritage site in the Czech Republic, recognized as a UNESCO World Heritage Site. The website serves as an official portal providing information about the castle, gardens, events, exhibitions, and visitor services. It targets tourists and cultural enthusiasts, offering detailed content, event calendars, and booking options. Technically, the site is built on WordPress with modern plugins for SEO, event management, and GDPR compliance, delivering a good user experience with mobile optimization and multimedia content. Security measures include HTTPS, reCAPTCHA, and cookie consent management, though additional security headers could enhance protection. The absence of WHOIS data limits domain legitimacy verification, but the professional presentation and external trust signals support its credibility. Overall, the site is well-positioned to serve its audience effectively while maintaining compliance and security standards.

I

IS-EXPERT s.r.o.

objednamjidlo.cz

48

The website objednamjidlo.cz is operated by IS-EXPERT s.r.o. and offers an online ordering system tailored for restaurants specializing in regular meal deliveries. The platform automates order processing, invoicing, payments, and delivery logistics, targeting restaurants and food delivery businesses primarily in the Czech Republic. The business model is SaaS-based, focusing on improving operational efficiency and customer acquisition for its clients. The site positions itself as a leading solution in its niche, supported by customer testimonials and detailed service descriptions. Technically, the website is built on ASP.NET WebForms with common JavaScript libraries such as jQuery and Bootstrap. It integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. The hosting provider is Active24, as indicated by WHOIS data. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features and comprehensive SEO optimization. From a security perspective, the site uses HTTPS for external resources but does not explicitly show security headers or privacy policies, indicating room for improvement in security posture and GDPR compliance. No vulnerability disclosure or incident response information is provided. The WHOIS data is consistent with the business claims, supporting the legitimacy of the domain and company. Overall, the website is professional and functional but would benefit from enhanced security measures, published privacy and cookie policies, and improved transparency regarding data protection and incident response.

R

Red Lodge Mountain

redlodgemountain.com

64

Red Lodge Mountain is a regional ski resort located in Montana, offering skiing, snowboarding, and mountain-related recreational services. The website presents a professional and well-structured digital presence built on WordPress, utilizing modern web technologies and third-party services for fonts, analytics, and advertising. The site includes a cookie consent mechanism indicating awareness of privacy regulations, although no explicit privacy policy or terms of service were found in the provided content. Security posture is generally strong with HTTPS enabled and no obvious vulnerabilities detected, but the absence of security headers and incomplete analytics configuration suggest room for improvement. The domain WHOIS data is missing or unavailable, which raises concerns about registration transparency despite the legitimate appearance of the website. Overall, the site is functional, user-friendly, and targets a general audience interested in winter sports and mountain tourism.

S

Sviby

sviby.com

48

Sviby is an Estonian-based event ticketing platform that focuses on providing tickets and gift cards for cultural and entertainment events such as music, theater, festivals, and family activities. The platform targets event attendees and organizers, offering a streamlined online experience for purchasing and managing event tickets. The website demonstrates a consistent brand presence and clear communication channels, including phone and email support, as well as active social media engagement. Technically, the site leverages modern JavaScript frameworks like Vue.js and jQuery, ensuring a responsive and user-friendly interface. Advertising and analytics integrations are standard, with Google Analytics and Facebook Pixel employed for user tracking and marketing purposes. Security posture is adequate with HTTPS enforced and domain transfer protection enabled, though DNSSEC is not implemented and security headers are missing, representing areas for improvement. Privacy compliance is basic but present, with accessible privacy and cookie policies. Overall, the site is professional, trustworthy, and well-positioned within its niche market.

H

Hotel Arcadie Český Krumlov

hotelarcadie.cz

41

Hotel Arcadie Český Krumlov is a hospitality business located in the historic center of Český Krumlov, Czech Republic, a UNESCO World Heritage site. The hotel offers accommodation along with dining options including the Gotika restaurant and Cosa Vostra pizzeria. It targets tourists visiting this popular cultural and historical destination. The website presents a professional and consistent brand image with good content quality and clear navigation. Social media presence on Facebook and Instagram supports customer engagement. Technically, the website uses a modern but somewhat dated technology stack including Bootstrap 3 and jQuery 1.11.1, along with Google Analytics and Google Maps API. The site is mobile responsive and SEO optimized to a good degree. However, there is room for improvement in accessibility and performance optimization. From a security perspective, the site lacks visible security headers and explicit privacy or cookie policies, which impacts its compliance posture. WHOIS data is unavailable, which reduces domain trustworthiness. No blocking or WAF mechanisms were detected, and no vulnerabilities were apparent in the provided content. Overall, the security posture is moderate but could be enhanced by implementing best practices and compliance documentation. The overall risk is moderate with recommendations to improve security headers, privacy compliance, and domain transparency. Enhancing these areas will strengthen trust and reduce potential compliance risks.

H

HOTEL GLOBUS

hotel-globus.cz

46

Aureli hotel Globus is a mid-sized hospitality business located near the center of Prague, offering accommodation, dining, conference facilities, and family-friendly services. The hotel targets travelers seeking a quiet environment with easy access to city amenities and nature. The website is professionally designed, multilingual, and integrates a secure external booking platform. Technically, it uses modern web technologies including Bootstrap, Google Analytics, and Google Maps API. Security posture is adequate with HTTPS enabled and consent mechanisms for cookies, but lacks visible security headers and privacy policy documentation. WHOIS data is unavailable, limiting domain trust assessment. Overall, the site presents a credible and professional business presence with room for security and privacy improvements.

D

DUDU ligzdas, lielisku sajūtu firma, SIA

duduligzdas.lv

51

DUDU ligzdas is a small Latvian hospitality business specializing in unique rural tourism experiences such as tree house accommodations, bicycle rentals, blacksmith forge workshops, coin minting, and bird watching. The business targets tourists and nature enthusiasts seeking active and artisanal leisure activities in northern Vidzeme near the sea. The website is well-structured, visually appealing, and provides clear contact information and social media links, supporting a moderate level of business credibility. Technically, the website uses a Bootstrap framework with jQuery and integrates third-party services like Google Analytics and Facebook SDK for tracking and social engagement. The site is mobile responsive and SEO optimized but lacks advanced accessibility features and security headers. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. Security posture is moderate with HTTPS usage implied but no explicit security headers or vulnerability disclosures. No forms collecting sensitive data are present, reducing immediate risk exposure. The absence of WHOIS data limits domain legitimacy assessment, but the website content and contact details align with a legitimate small business. Strategic improvements in privacy compliance and security hardening are recommended to enhance trust and regulatory adherence.

B

Bad Franzensbad AG

spaportal.cz

52

The website spaportal.cz is a login portal for Bad Franzensbad AG, a spa and wellness company based in the Czech Republic. The portal is designed to authenticate users, likely customers or employees, to access spa-related services. The business operates in the hospitality sector with a regional focus. The website is professionally branded with consistent logos and basic but functional design. The domain is well-established since 2010 and hosted on AWS infrastructure, indicating a stable technical foundation. Technically, the site uses older JavaScript libraries such as jQuery 1.4.2 and the Spring Security framework for authentication. While the site is functional and uses HTTPS, it lacks modern security headers and uses outdated libraries that may expose it to vulnerabilities. The site does not display privacy or cookie policies, which is a compliance gap. Contact information is clearly provided, enhancing business credibility. From a security perspective, the site demonstrates basic best practices such as HTTPS and secure login forms but lacks advanced protections like CSP headers and CSRF tokens visible in the form. The outdated jQuery version is a notable risk. No WAF or blocking mechanisms are detected, and no analytics or advertising scripts are present, reducing privacy concerns but also indicating limited tracking or marketing sophistication. Overall, the site is moderately secure and credible but requires updates to its technical stack and compliance documentation to improve security posture and regulatory adherence. Strategic improvements in security headers, library updates, and privacy policies are recommended to enhance trust and protect user data.

F

Františkovy Lázně AQUAFORUM a.s.

hotel-metropol.cz

45

Lázeňský hotel Metropol is a medium-sized hospitality business located in Františkovy Lázně, Czech Republic, specializing in spa and therapeutic services leveraging local natural healing resources. The hotel offers accommodation, medical spa treatments, and flexible reservation options, targeting wellness tourists and spa guests. The website is built on WordPress using the Divi theme, integrating modern web technologies including Google Tag Manager, Facebook Pixel, and Cookiebot for consent management. The site is well-structured, mobile-optimized, and provides clear navigation and contact information. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers and formal policies are missing. WHOIS data is unavailable, which slightly impacts trust but the professional presentation and detailed contact info support legitimacy. Overall, the site is a reliable digital presence for the spa hotel business.

H

Hotel Tři lilie

trililie.cz

50

The website represents Hotel Tři lilie, a historic hotel located in the center of Františkovy Lázně, Czech Republic. It targets tourists and visitors seeking accommodation with a traditional French charm. The business operates in the hospitality sector, offering hotel accommodation and related services. The website is built on WordPress using the Divi theme and incorporates various third-party analytics and advertising technologies such as Google Analytics, Hotjar, Adform, and Facebook Pixel. A cookie consent mechanism is implemented, reflecting some level of privacy compliance. However, the absence of a visible privacy policy and terms of service pages limits full compliance assessment. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency and trustworthiness. Technically, the site uses older jQuery versions and lacks security headers, which could expose it to vulnerabilities. Overall, the site is functional and professionally presented but would benefit from enhanced security and compliance documentation.

M

Maledivy Letenky – Hledáte nejlevnější akční letenky na Maledivy? Potřebujete dovolenou? Nebo jen nechcete být přes víkend doma? Vyberte si z široké nabídky pobytů na Maledivách.

maledivy-letenky.cz

39

Maledivy-letenky.cz is a Czech-language travel affiliate website specializing in offering flight deals, hotel information, and all-inclusive vacation packages for the Maldives. The site targets leisure travelers seeking affordable and luxury vacation options in this popular tropical destination. The business model relies primarily on affiliate marketing partnerships, notably with Pelikan.sk for flight bookings. Technically, the website is built on WordPress with modern front-end technologies such as Bootstrap and jQuery, providing a responsive and user-friendly experience. However, the site lacks critical compliance documents such as privacy and cookie policies, which poses regulatory risks. Security posture is moderate with HTTPS enabled but missing important security headers. No contact emails or phone numbers are explicitly provided, which may affect user trust and business credibility. Overall, the site is functional and well-branded but requires improvements in compliance and security to enhance trustworthiness and regulatory adherence.

L

Levné Letenky – Rezervujte si nejlevnější akční honzovy letenky z Prahy.

letenkydo.cz

42

The website www.letenkydo.cz operates as a small-scale travel affiliate platform focused on providing users with cheap flight tickets, weekend stays, and holiday packages primarily from Prague. The site targets Czech-speaking travelers seeking affordable travel options across Europe and beyond. It leverages affiliate partnerships with multiple travel deal providers to monetize traffic. Technically, the site is built on WordPress with a modern tech stack including Bootstrap and jQuery, and integrates third-party affiliate widgets. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled but lacks important security headers and privacy compliance documentation. No contact information or privacy policies were found, indicating compliance gaps. WHOIS data is unavailable, likely due to privacy protection, which is common for such affiliate sites. Overall, the site appears legitimate but would benefit from improved security and compliance measures.

B

Barcelona Letenky Levné Lety

letenky-barcelona.cz

42

The website 'Barcelona Letenky Levné Lety' operates as a small-scale travel affiliate platform targeting Czech-speaking customers interested in affordable flights and holiday packages to Barcelona and other popular destinations. The business model relies on affiliate partnerships with travel deal providers, offering curated flight deals, weekend stays, and vacation packages. The site is relatively new, established in 2022, and maintains a consistent brand presence with good content relevance and user experience. Technically, the site is built on WordPress 6.8.2 using Bootstrap for responsive design and includes common web technologies such as jQuery and Font Awesome. While the site is mobile-optimized and SEO-friendly with proper meta tags and structured data, it lacks some advanced accessibility features and has moderate performance. The Google Analytics plugin is installed but not configured, indicating incomplete analytics implementation. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks important security headers and does not provide privacy or terms of service pages, which are critical for compliance and user trust. No direct contact information or incident response contacts are available, which limits transparency and responsiveness. The cookie consent banner is present and functional, supporting GDPR compliance to some extent. Overall, the website is functional and trustworthy for its niche but requires improvements in security best practices, privacy compliance, and contact transparency to enhance its credibility and reduce risk. Strategic recommendations include implementing security headers, publishing privacy and terms policies, configuring analytics properly, and providing clear contact channels for users and security incidents.

H

HOSTINGER operations, UAB

atwedding.lt

44

AT Wedding is a Lithuanian small business specializing in wedding planning, coordination, consultation, event organization, and training services. The company aims to provide personalized and unique wedding experiences, handling organizational details to allow clients to enjoy their special day. The website reflects a niche local market position with clear service offerings and a professional presentation. Technically, the website uses modern web technologies including Bootstrap 5, FontAwesome, Swiper Carousel, and integrates Google services such as reCAPTCHA v3 and Google Tag Manager for analytics and security. The site is hosted by HOSTINGER operations, UAB, a reputable hosting provider. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and integrates Google reCAPTCHA to prevent spam. However, it lacks important security headers and does not provide visible security or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the website is safe, professional, and trustworthy with no adult or explicit content. The domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in privacy compliance and security headers would enhance the security posture and regulatory adherence.

F

Františkovy Lázně

frantiskovylazne.cz

51

Františkovy Lázně is a historic spa and wellness destination in the Czech Republic, boasting a tradition since 1793 and recognized by UNESCO. The website presents a professional image with a focus on health tourism and spa services targeting a broad audience including all generations. Technically, the site is built on WordPress using the Divi theme and incorporates multiple third-party tracking and advertising technologies such as Google Analytics, Hotjar, Adform, and Facebook Pixel. The site is secured with HTTPS and implements a comprehensive cookie consent mechanism, reflecting good privacy compliance practices. However, the absence of a visible privacy policy and WHOIS data limits full trust verification. Security posture is generally good but could be improved by updating libraries and adding security headers and public security policies. Overall, the site is functional, professional, and trustworthy but would benefit from enhanced transparency and security documentation.

A

Alcedo Media, s.r.o.

sumava.info

41

Šumava.info is a Czech regional tourism information portal operated by Alcedo Media, s.r.o., providing comprehensive information about accommodation, leisure activities, cultural events, and gastronomy in the Šumava region. The website targets tourists and visitors interested in exploring this natural area, offering affiliate booking links and partner advertisements to monetize the platform. Technically, the site uses legacy JavaScript libraries such as jQuery and Modernizr, integrates Google Analytics for visitor tracking, and embeds affiliate widgets from Booking.com. While the site is accessible and functional, it lacks modern security headers, explicit privacy and cookie policies, and mobile optimization is basic. The WHOIS data is unavailable due to privacy protection or query failure, but the domain appears legitimate and consistent with the business purpose. Security posture is moderate with room for improvement in headers and compliance documentation. Overall, the site is a useful regional resource but would benefit from enhanced security and privacy compliance measures.

A

Apartmán Ivona

apartman-ivona.cz

43

Apartmán Ivona is a small family-run hospitality business offering holiday apartment rentals in Trpanj, Pelješac peninsula, Croatia. The website provides detailed information about accommodation options, amenities such as a heated freshwater pool, free Wi-Fi, and private parking, and highlights local attractions and travel tips. The business targets tourists seeking a peaceful seaside vacation with easy access to notable Croatian destinations like Dubrovnik and Korčula. Technically, the website uses PHP, jQuery, and some legacy JavaScript libraries, with a moderate performance and basic mobile optimization. Security posture is moderate with HTTPS implied but lacking advanced security headers and policies. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is comprehensive and transparent, enhancing business credibility. WHOIS data is unavailable, which reduces domain trustworthiness but does not negate the legitimacy of the business based on website content. Overall, the site is functional, informative, and trustworthy for its niche.

C

Chef Nauris Hauka

chefnaurishauka.lv

55

Chef Nauris Hauka is a small hospitality business operating a dinner restaurant in Liepāja, Latvia, focused on delivering a creative and memorable culinary experience led by chef Nauris Hauka. The website presents a professional and visually appealing digital presence with good content quality and clear navigation. The technical infrastructure leverages modern JavaScript libraries, Google Analytics, and a CDN for content delivery, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit privacy policies, which are areas for improvement. Overall, the website is safe, trustworthy, and suitable for its target audience, but would benefit from enhanced compliance and security transparency.

T

TGI Fridays

tgifridays.com

67

TGI Fridays operates a well-established hospitality business specializing in casual dining and bar services, targeting a general audience with a focus on bold flavors and social experiences. The website reflects a mature digital presence with a professional design, consistent branding, and integration of multiple analytics and marketing tools. Technically, the site is built on WordPress with the Divi theme and uses modern tracking and analytics services, though performance is moderate and DNSSEC is not enabled. Security posture is adequate with HTTPS and domain lock statuses, but lacks visible security headers and formal security policies. Privacy compliance is partial, with cookie consent implemented but no explicit privacy or terms of service pages detected. Overall, the website is credible and trustworthy but could improve transparency and security practices.

Multifunkční centrum Hlinsko is a local cultural and community center in the Czech Republic providing a variety of event programming including theater, cinema, concerts, dance, and exhibitions. It also offers café services and venue rentals, serving primarily local residents and visitors interested in cultural activities. The website is professionally designed with good navigation and mobile optimization, supporting user engagement through event listings and ticket reservations. Technically, the site uses standard web technologies including JavaScript, CSS, and integrates Facebook SDK and Google Analytics for social media and visitor tracking. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. The absence of WHOIS data for the domain reduces trust from a registration perspective, though the website content and contact information appear legitimate and consistent with a public cultural institution. Overall, the site is safe, GDPR compliant, and provides a positive user experience with room for security and transparency improvements.

L

limango Travel

limango-travel.de

57

limango Travel is an online travel booking platform specializing in family-friendly and wellness vacation accommodations primarily in Germany and selected European destinations. The website offers a structured and detailed catalog of travel options including family hotels, wellness resorts, summer holidays, vacation apartments, all-inclusive packages, and discount deals. The target audience is families and couples seeking curated travel experiences. The platform is moderately mature technically, leveraging modern JavaScript frameworks such as Vue.js and PrimeVue, hosted on Amazon AWS infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS implied but lacks visible advanced security headers and formal security policies. Privacy compliance is basic with a cookie consent banner present but no visible privacy policy or terms of service in the provided content. Contact information is clearly provided with dedicated phone lines for Germany and Austria and a company email address. Overall, the site is professional and trustworthy but could improve transparency and security practices.

L

Lage Ko

darte.lv

40

The website represents Lage Ko, a medium-sized Latvian hospitality business specializing in food delivery, restaurant services, and catering. Their platform offers a variety of cuisines including sushi, bakery items, and banquet services, targeting consumers in Latvia seeking convenient food ordering and delivery. The site is built on the ECOM 2.0 CMS platform and integrates common web technologies such as jQuery, Google Analytics, and Facebook Pixel for analytics and marketing. Cookie consent mechanisms are implemented with granular user options, reflecting a basic level of GDPR compliance. Security posture is moderate with no visible security headers and no explicit incident response policies published. WHOIS data is unavailable due to query limits, but the domain appears legitimate based on website content and business information. Overall, the site provides a professional user experience with clear contact information and social media presence, but could improve in security hardening and transparency.

D

D-EDGE

d-edge.com

63

D-EDGE is a leading hospitality technology company formed in 2019 through the merger of Availpro and Fastbooking. It offers a comprehensive suite of hotel marketing and distribution solutions including a Central Reservation System, Booking Engine, Channel Manager, and digital marketing services. Serving over 17,000 hoteliers, D-EDGE positions itself as a key player in the hospitality technology sector, focusing on maximizing revenue for hotels through innovative technology and marketing expertise. The company is headquartered in Paris, France, and maintains a strong online presence with multilingual support and active social media channels. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and integrates various third-party services including Google Analytics, Facebook Pixel, and Didomi for consent management. The site demonstrates good mobile optimization, SEO practices, and performance. Security measures include HTTPS enforcement, reCAPTCHA on forms, and cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with appropriate headers and no visible vulnerabilities, though the absence of a public security policy or incident response contact is noted. The missing WHOIS data is a concern for domain transparency but does not detract significantly from the overall trustworthiness given the professional presentation and business scale. Overall, D-EDGE presents a credible, professional, and secure online presence suitable for its B2B hospitality market. Strategic recommendations include publishing detailed security and incident response policies and enhancing accessibility features to further strengthen compliance and user experience.

V

visitaizkraukle.lv

visitaizkraukle.lv

36

The website visitaizkraukle.lv serves as an official regional tourism portal for the Aizkraukle municipality in Latvia. It provides comprehensive information about local attractions, events, accommodations, dining options, and cultural heritage, targeting tourists and visitors interested in exploring the region. The site features galleries, video content, and interactive maps to enhance visitor engagement. Technically, the site uses JavaScript, Google Analytics, Google Tag Manager, and the Kube CSS framework, delivering a moderately performant and mobile-optimized experience. Security-wise, HTTPS is enforced, but the absence of security headers and privacy/cookie policies indicates room for improvement in compliance and protection. The lack of WHOIS data due to query limits restricts full domain trust evaluation, but the presence of official contact information and social media channels supports legitimacy. Overall, the site is a good resource for regional tourism but should enhance privacy compliance and security practices.

S

Semarah Hotels

semarahhotels.com

53

Semarah Hotels operates a network of hotels primarily in Riga and Jurmala, Latvia, offering accommodation, conference facilities, dining, and wellness services. The website presents a professional and consistent brand image with clear navigation and multi-language support. The business targets tourists and corporate clients seeking hospitality and event services. Technically, the site is built on WordPress with the Divi theme, leveraging modern libraries such as jQuery and Google Tag Manager for analytics and marketing. Security posture is adequate with HTTPS and reCAPTCHA implemented, though improvements like DNSSEC and security headers are recommended. Privacy compliance is addressed with accessible privacy and cookie policies and a consent mechanism. Overall, the website reflects a credible and established hospitality business with moderate technical sophistication and good user experience.