Skip to main content

Is frantiskovylazne.cz a Scam? Security Check Results - Františkovy Lázně Reviews

frantiskovylazne.cz favicon

Is frantiskovylazne.cz Safe? Security Analysis for Františkovy Lázně

Check if frantiskovylazne.cz is a scam or legitimate. Free security scan and reviews.

HospitalityCzech Republicmedium
jQuery 1.9.1jQuery UIDivi Theme v3.19.15Google Tag ManagerAdform tracking+2 more
Analyzed 7/31/2025Completed 9:33:58 PM
51
Security Score
MEDIUM RISK

AI Summary

Františkovy Lázně is a historic spa and wellness destination in the Czech Republic, boasting a tradition since 1793 and recognized by UNESCO. The website presents a professional image with a focus on health tourism and spa services targeting a broad audience including all generations. Technically, the site is built on WordPress using the Divi theme and incorporates multiple third-party tracking and advertising technologies such as Google Analytics, Hotjar, Adform, and Facebook Pixel. The site is secured with HTTPS and implements a comprehensive cookie consent mechanism, reflecting good privacy compliance practices. However, the absence of a visible privacy policy and WHOIS data limits full trust verification. Security posture is generally good but could be improved by updating libraries and adding security headers and public security policies. Overall, the site is functional, professional, and trustworthy but would benefit from enhanced transparency and security documentation.

Detected Technologies

jQuery 1.9.1jQuery UIDivi Theme v3.19.15Google Tag ManagerAdform trackingHotjarCookiebot

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

The business operates in the hospitality sector, specifically in spa and wellness services, leveraging its historic and UNESCO status as a competitive advantage. The business model focuses on health tourism with offerings tailored to various customer segments. The website integrates with multiple partners and advertising networks to enhance marketing reach. Growth indicators include the use of modern digital marketing tools and a multilingual approach. The partnership ecosystem includes related spa and hotel sites, indicating a collaborative regional network. Strategic observations suggest opportunities to strengthen direct customer engagement by publishing clearer contact and compliance information.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

i*****@frantiskovylazne.cz

Security Posture Analysis

Comprehensive Security Assessment

The website demonstrates a moderate to good security maturity level with HTTPS enforced and cookie consent implemented. However, the use of an outdated jQuery version and lack of security headers present potential vulnerabilities. No evidence of exposed sensitive data or critical vulnerabilities was found. Compliance with GDPR is partially addressed through cookie consent but lacks a published privacy policy and incident response information. The absence of a security.txt file and vulnerability disclosure reduces transparency. Overall, the security posture is adequate for the business type but requires improvements to meet higher standards and regulatory expectations.

Strategic Recommendations

Priority Actions for Security Improvement

1

Publish a comprehensive privacy policy and terms of service accessible from the website footer or main navigation.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

Františkovy Lázně

Description:

Výjimečné lázně s tradicí již od roku 1793. Výhradně místní přírodní léčivé zdroje. Široká nabídka pobytů pro všechny generace.

Key Services:
Spa treatmentsWellness staysHealth tourism
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
jQuery 1.9.1jQuery UIDivi Theme v3.19.15Google Tag ManagerAdform trackingHotjarCookiebot
Frameworks:
Divi WordPress Theme
Platforms:
WordPress
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

good

Security Assessment

Security Score:
80/100
Best Practices:
  • HTTPS enforced
  • Cookie consent banner implemented

Analytics & Tracking

Services:
Google AnalyticsHotjarSmartlook
Tracking Level:extensive
Privacy Compliance:good

Advertising & Marketing

Ad Networks:
AdformFacebookAdition Technologies
Tracking Pixels:
HotjarSmartlook
Marketing Tools:
Cookiebot
Transparency Level:good

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:high

Key Observations

1

Website uses HTTPS with valid SSL

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

35/100
Score

Missing Strict-Transport-Security header

HIGH

Forces HTTPS connections

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

95/100
Score

No Data Protection Officer mentioned

LOW

Large organizations may need to designate a DPO under GDPR

GDPR Compliance Analysis

Privacy Policy85% confidence
Cookie Policy85% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: energy, transport, banking, health, digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

60/100
Score

DMARC not enforcing

MEDIUM

DMARC policy is set to "none"

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 ip4:82.99.175.35 mx include:mailgun.com include:_spf.previo.app include:smtpx.stable.cz ~all
DNS Lookups:4/10
Policy:~all
DMARC Details
Policy:none
Aggregate Reports:6bd0400c@inbox.ondmarc.com

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

42/100
Score

Weak Protocols Supported

HIGH

Server supports weak protocols: TLSv1.1

OCSP Stapling Not Enabled

LOW

OCSP stapling improves performance and privacy

Certificate Transparency Not Implemented

LOW

Certificate is not logged in Certificate Transparency logs

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 79 days

Weak SSL Key Length

HIGH

SSL certificate uses 256-bit key, which is considered weak

Mixed Content Detected

MEDIUM

5 resources loaded over insecure HTTP

Partial SSL/TLS Assessment

LOW

Completed 3 of 4 security checks due to time constraints

Protocol Support

TLSv1.3TLSv1.2TLSv1.1

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

80/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

DMARC Policy Set to None

LOW

DMARC is configured but not enforcing any policy

Domain Registration Details

Domain Age
22 years(mature)

DNS Records

A Records:81.95.96.179
Name Servers:
alfa.ns.active24.czDNS only
beta.ns.active24.czDNS only
gama.ns.active24.sk
MX Records:
10: mail.franzensbad.cz
SOA:Serial: 2025062001, TTL: 3600s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:122ms

SPF Analysis

SPF Record:
v=spf1 ip4:82.99.175.35 mx include:mailgun.com include:_spf.previo.app include:smtpx.stable.cz ~all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

20/100
Score

High-Risk Service Exposed: FTP

HIGH

Port 21 (FTP) is publicly accessible - FTP - Often unencrypted file transfer

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on WordPress with the Divi theme, utilizing jQuery and jQuery UI libraries. It integrates multiple third-party services for analytics, advertising, and cookie management, including Google Tag Manager, Adform, Hotjar, and Cookiebot. The site is mobile optimized with responsive CSS and uses Google Fonts for typography. Performance is moderate, with room for improvement in loading speed and accessibility features. The technical stack is modern but requires updates to libraries and enhanced security configurations. Hosting provider details are not explicitly identified from the content. SEO is supported by proper meta tags and Open Graph data, aiding social media sharing and search engine visibility.
Analyze Another Website