Hospitality security reports

C

CK ATIS a.s.

atis.cz

63

CK ATIS a.s. is a well-established travel agency based in the Czech Republic, specializing in recreational vacation packages across Central European countries including Czech Republic, Slovakia, Poland, Hungary, Austria, Germany, Slovenia, Italy, and Croatia. With over 35 years of experience, the company offers a wide range of themed holiday catalogues and destination-specific offers targeting families and leisure travelers. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization. Technically, the site employs modern web technologies such as AMP, jQuery, Bootstrap, and mapping libraries to enhance user experience. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though additional security headers and policies could improve resilience. Privacy compliance is well addressed with accessible privacy and cookie policies. The absence of public WHOIS data limits domain trust analysis, but the website's content and contact information support its legitimacy. Overall, CK ATIS a.s. presents a credible and user-friendly platform for travel services in its region.

T

TravelClick Web Solutions

travelclick-websolutions.com

64

TravelClick Web Solutions operates as a technology provider specializing in hospitality industry solutions, primarily offering hotel management and online booking platforms. The analyzed page is a login portal designed for user authentication, indicating a B2B service model targeting hospitality professionals and hotel staff. The company appears to maintain a consistent brand presence with a professional logo and a clean, functional interface. Technically, the website employs modern JavaScript frameworks such as Vue.js and utilizes Google Fonts for typography. The page is moderately optimized for mobile devices and presents a basic but clear user interface. However, the absence of visible security headers and privacy policies suggests room for improvement in compliance and security best practices. From a security perspective, the site uses HTTPS as indicated by the URL, and the login form is designed to accept email addresses securely. No WAF or blocking mechanisms were detected, and no vulnerabilities or exposed sensitive data were found in the provided content. The lack of WHOIS data for the subdomain is typical and does not raise immediate concerns. Overall, the security posture is moderate but could benefit from enhanced policies and headers. The overall risk assessment is low to moderate, with recommendations focusing on improving privacy compliance, adding security headers, and providing clear contact and incident response information. These steps would enhance trust and align the site with industry best practices.

The website globusandcosmos.com represents the Globus family of brands, a well-established travel service provider offering escorted tours, independent travel, and river cruises globally. The business targets travelers seeking guided and independent travel experiences across multiple continents, leveraging sub-brands such as Globus, Cosmos, and Avalon Waterways. The domain age and registration details support the legitimacy and longstanding presence of the company in the travel industry. Technically, the website employs a moderate technology stack including Bootstrap 3.3.7, jQuery 1.12.4, Google Fonts, Font Awesome, and Google Tag Manager/Analytics for tracking. The site is mobile optimized with a professional design and clear navigation, though accessibility features are basic. Performance is moderate with room for improvement in SEO and accessibility. From a security perspective, the site uses HTTPS resources and has domain transfer protection enabled. However, DNSSEC is not enabled, and no security headers were detected in the provided content. Privacy and cookie policies are absent, indicating compliance gaps. No contact information or incident response channels are visible, limiting transparency. The site uses advertising and tracking services such as DoubleClick and Google Analytics, but lacks visible consent mechanisms. Overall, the website is a legitimate, professional travel service site with good content quality and business credibility. Security posture and privacy compliance require improvement to meet modern standards. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies, and providing clear contact and incident response information to enhance trust and compliance.

G

Grilování Olomouc

grilovaniolomouc.cz

10

Grilování Olomouc is a small hospitality business specializing in turnkey grilling events, corporate catering, and grill equipment rental primarily serving the Olomouc region in the Czech Republic. Founded in 2018, the company offers marinated meats and comprehensive event services, targeting both individual and corporate clients. The website reflects a professional local service with positive customer testimonials and clear contact information. Technically, the site is built on WordPress with common plugins such as Yoast SEO and MonsterInsights for analytics. While the site uses HTTPS and includes some privacy opt-out mechanisms, it lacks explicit privacy and cookie policies, which is a compliance gap. The WordPress version is outdated, posing potential security risks, and no advanced security headers are detected. Overall, the site is accessible without WAF or blocking mechanisms and contains no adult or questionable content, making it safe for general audiences.

E

Estreházy Galanta s.r.o.

2family.eu

45

The website 2family.eu is a professionally designed platform promoting cultural and historical tourism centered on the Esterházy and Forgách noble families' heritage in Slovakia and Hungary. It targets tourists and history enthusiasts by offering an interactive mobile application, information about unique historical sites, and accommodation recommendations. The business operates in the hospitality and real estate sectors with a niche focus on regional cultural tourism. The company behind the site is Estreházy Galanta s.r.o., a small Slovak entity. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Swiper, and other UI libraries, hosted by WebSupport s.r.o., a Slovak hosting provider. The site is mobile-optimized with good navigation and content quality, though SEO and accessibility features are basic. No CMS is explicitly detected. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; a GDPR page exists but no cookie consent mechanism is implemented. Contact information is clearly provided, enhancing business credibility. Overall, the site is safe, trustworthy, and well-suited for its target audience. Recommendations include implementing cookie consent, adding security headers, and publishing security and incident response policies to improve compliance and security posture.

C

CK SBV s.r.o.

sbv.cz

47

CK SBV s.r.o. is a specialized Czech travel agency focusing on Croatian holiday destinations such as Igrane, Tučepi, and Makarská. The company offers accommodation bookings, group tours, bus transportation, and gift vouchers, targeting travelers interested in Croatian vacations. The website presents a professional and consistent brand image with clear contact information and partner affiliations, positioning itself as a niche player in the hospitality sector. Technically, the site uses a stable but somewhat dated technology stack including jQuery, Bootstrap 3.4, and the inPage CMS, hosted likely by CZECHIA.COM. The site is mobile-optimized with good navigation and content relevance but lacks advanced accessibility features. Security posture is moderate with cookie consent implemented but missing key HTTP security headers and no visible privacy or terms of service pages. WHOIS data is unavailable, which reduces trustworthiness but the site content and contact details appear legitimate. Overall, the site scores moderately well in content quality and business credibility but should improve privacy and security compliance.

T

TwoFifty

twofifty.co

60

TwoFifty is a specialized coworking consultancy and education provider with a strong global presence and a decade of experience. The company offers consulting, workshops, community building, and content creation services aimed at transforming workspaces into thriving coworking communities. Their digital infrastructure is modern and performant, leveraging Next.js and Vercel hosting, with a mobile-optimized and SEO-friendly website. Security posture is strong with HTTPS and security headers, though privacy and cookie policies are missing, representing a compliance gap. Contact information is available primarily via email and contact forms, with social media presence on LinkedIn. Overall, the website is professional, trustworthy, and content-rich, positioning TwoFifty as a credible leader in coworking consultancy.

K

KyTICe - Kulturní zařízení Světlá nad Sázavou

kyticesvetla.cz

47

KyTICe - Kulturní zařízení Světlá nad Sázavou operates a cultural venue offering theater, cinema, music, and exhibitions with an integrated online ticketing system powered by Ticketware. The website serves the local community and visitors with a comprehensive event calendar and ticket purchasing options. The business is positioned as a small non-profit cultural institution with a focus on community engagement and cultural enrichment. Technically, the website uses a mix of legacy and modern web technologies including jQuery, Facebook SDK, and Google Analytics, with a custom CMS likely integrated with Ticketware. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS and secure payment gateways, though improvements can be made by adding security headers and updating legacy libraries. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. The absence of WHOIS data is a minor concern but does not detract significantly from the overall trustworthiness given the professional presentation and clear business information. Overall, the website is well-maintained, secure, and serves its purpose effectively.

M

Město Žirovnice

panistavkazirovnice.cz

50

The website 'Kemp Žirovnice' represents a small hospitality business operated by the municipal entity Město Žirovnice, offering camping and accommodation services in a natural setting. The business targets families, nature lovers, and organized groups such as schools and sports teams, providing modern amenities including cottages with kitchens and bathrooms. The site is well-branded and consistent with its local tourism focus. Technically, the website uses a modern CMS platform (Vismo) with frontend technologies including Vue.js and Google reCAPTCHA v3 for spam protection. The site is mobile-optimized, accessible, and SEO-friendly, though some security best practices like explicit security headers are missing. The domain is newly registered in early 2024, consistent with the business launch timeline. Security posture is good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and a formal security or incident response policy reduces the overall security maturity. Privacy compliance is basic, with cookie and privacy policies present but lacking active consent mechanisms. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in security headers, privacy consent, and published security policies would enhance compliance and trustworthiness.

V

Vysočina Tourism, příspěvková organizace

vysocinatourism.cz

58

Vysočina Tourism is a regional public organization dedicated to coordinating and promoting tourism activities in the Vysočina region of the Czech Republic. The organization manages a tourism portal, publishes promotional materials, supports conference tourism, and operates a film office. The website reflects a well-structured and content-rich platform targeting tourists, schools, businesses in tourism, and media professionals. The business model focuses on regional tourism development and partnership coordination, positioning Vysočina Tourism as a key regional player in hospitality and cultural promotion. Technically, the website is built on the xartCMS platform and utilizes modern web technologies including JavaScript, jQuery, and Google Tag Manager for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The presence of a cookie consent mechanism and a comprehensive privacy policy indicates attention to GDPR compliance and user privacy. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks visible security headers and does not provide explicit incident response or vulnerability disclosure information. No WHOIS data was retrievable, which raises concerns about domain registration transparency but does not necessarily indicate illegitimacy given the official nature of the content and branding. Overall, Vysočina Tourism's website is professional, trustworthy, and compliant with privacy regulations, serving as an effective digital platform for regional tourism promotion. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and security posture.

M

MĚSTSKÉ DIVADLO A KINO OSTROV spol. s r.o.

mdko.cz

47

MĚSTSKÉ DIVADLO A KINO OSTROV spol. s r.o. operates a cultural venue in Havlíčkův Brod, Czech Republic, providing theater performances, cinema screenings, and event rental services. The website mdko.cz serves as a portal for event information, ticket sales, and community engagement, targeting local residents and visitors interested in cultural activities. The business model is centered on ticket revenue and venue services, positioning itself as a regional cultural hub since its domain registration in 2018. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Analytics, and reCAPTCHA, hosted likely via Czech providers consistent with the domain registration data. The site is mobile-optimized, SEO-friendly, and includes a GDPR-compliant cookie consent mechanism. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site uses HTTPS with excellent SSL configuration and employs Google reCAPTCHA to protect forms. However, no explicit security headers were detected, and no published security or incident response policies were found. The site demonstrates good privacy compliance with clear privacy and cookie policies. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Recommendations include enhancing security posture by adding security headers and publishing a security policy to improve transparency and incident readiness.

P

Pelhřimovská sportovní s.r.o.

sportpe.cz

46

Pelhřimovská sportovní s.r.o. operates a website dedicated to sports facilities in Pelhřimov, Czech Republic, including a swimming pool, sports hall, winter stadium, outdoor fields, and minigolf. The site serves local residents and visitors by providing information, news, and booking options for these facilities. The business is positioned as a local community sports operator with a focus on accessibility and user engagement. Technically, the website employs modern JavaScript libraries, Google reCAPTCHA for spam protection, and Google Tag Manager for analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and features a cookie consent mechanism and privacy policy, supporting GDPR compliance. Security posture is good with HTTPS enforced and secure form handling, though security headers and explicit security policies are absent. The lack of WHOIS data is a concern for domain legitimacy, but the website content and contact information appear professional and trustworthy. Overall, the site is functional, user-friendly, and secure for its purpose, with room for improvement in security transparency and domain registration clarity.

K

Kultura Pelhřimov

kulturape.cz

52

Kultura Pelhřimov operates as a local cultural event promoter and ticketing platform serving the Pelhřimov region in the Czech Republic. The website provides detailed event listings, ticket purchase options, and information about cultural programs, targeting local residents and visitors interested in arts and entertainment. The business model focuses on event promotion and facilitating ticket sales through a partner ecommerce platform. Technically, the site is built on modern web technologies including React and Next.js with Material UI for styling, offering a responsive and user-friendly experience. Security posture is solid with HTTPS and standard security headers implemented, though privacy compliance could be improved by adding cookie consent and more comprehensive privacy policies. The absence of WHOIS data reduces domain trust but the website content and contact information appear legitimate and professional. Overall, the site is functional and well-designed for its purpose but could benefit from enhanced privacy and security transparency.

M

Memory Computers s.r.o.

pelhrimovsko.cz

36

The website pelhrimovsko.cz serves as the official tourism portal for the city of Pelhřimov in the Czech Republic. It provides comprehensive information about local attractions, cultural events, accommodation, gastronomy, and other tourist services. The site targets tourists, families, seniors, and local visitors, positioning itself as a trusted source for travel planning in the region. The business behind the site is Memory Computers s.r.o., a small company specializing in digital services for tourism promotion. Technically, the website employs a traditional web stack with jQuery, jQuery UI, Swiper.js for sliders, and integrates Google Analytics and YouTube APIs for media content. The site is served over HTTPS, ensuring encrypted communication, and includes a cookie consent mechanism compliant with basic privacy standards. However, some JavaScript libraries are outdated, and security headers are missing, indicating room for improvement in security hardening. From a security perspective, the site demonstrates moderate maturity with HTTPS and cookie consent but lacks advanced security headers and explicit privacy policies. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, though the website content and contact information appear consistent and professional. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, pelhrimovsko.cz is a well-structured and content-rich tourism portal with good user experience and trustworthiness. Strategic improvements in privacy documentation, security headers, and domain registration transparency would enhance its security posture and compliance standing.

Labe Aréna Ústeckého kraje is a national water sports center in the Czech Republic focused on rowing and related aquatic sports. The website serves as an information portal for events, projects like Česko vesluje, and partner engagement. The business operates in the hospitality and government-supported sports sector, targeting sports enthusiasts, schools, and the general public. Technically, the site uses an older version of jQuery and the Fonio CMS platform, with moderate performance and basic mobile optimization. Security posture is moderate but weakened by outdated libraries and lack of visible security headers or privacy policies. The absence of WHOIS data limits domain trust assessment. Overall, the site is functional and informative but requires improvements in security, privacy compliance, and technical modernization.

M

Marthy’s Kitchen

marthyskitchen.cz

57

Marthy’s Kitchen is a small hospitality business based in Prague, Czech Republic, specializing in high-quality breakfasts and brunches served in a cozy French-style interior. The website reflects a local restaurant with a focus on quality ingredients, home-style preparation, and friendly service. The business targets general audiences seeking elegant dining experiences. Technically, the website is built on the Wix platform, leveraging modern web technologies and providing a mobile-optimized experience. However, the site lacks comprehensive privacy and cookie policies, which are important for GDPR compliance. Security-wise, HTTPS is enabled, but security headers are missing, and no incident response or vulnerability disclosure information is provided. The use of Facebook Pixel indicates moderate user tracking for marketing purposes. Overall, the website is professional and trustworthy but could improve in privacy compliance and security best practices.

A

AV MEDIA EVENTS

avmedia-hotels.cz

51

AV MEDIA EVENTS is a Czech-based company specializing in audiovisual and IT solutions for events, with over 25 years of market presence and a strong partnership with Hilton Prague. Their services include videomapping, LED walls, live streaming, and on-site support, targeting event organizers and hospitality clients. The website is built on WordPress using Elementor, featuring modern web technologies and tracking tools such as Google Analytics and Leady. While HTTPS is properly configured, the site lacks security headers and privacy/cookie policies, which are important for compliance and security. WHOIS data is unavailable, which raises concerns about domain registration transparency. Overall, the site presents a professional image with good content quality but requires improvements in privacy compliance and security practices.

G

gofreshleads

casinoonline24.cz

58

gofreshleads.com is a Czech-language online platform specializing in providing detailed information, reviews, and affiliate links for online casinos licensed for Czech players. The website offers comprehensive content about casino bonuses, payment methods, legal considerations, and game types, targeting adult Czech gambling enthusiasts. The business operates primarily as an affiliate marketing site, leveraging detailed reviews and bonus offers to attract and convert visitors. Technically, the site is built on WordPress with a modern tech stack including Bootstrap and jQuery, hosted behind Cloudflare for DNS and CDN services. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements like DNSSEC and CSP headers are recommended. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. No direct company contact emails or phone numbers are publicly listed, relying on contact forms instead. Overall, the site presents a professional, trustworthy, and content-rich experience for its niche audience.

N

National Association of Travel Agents Singapore

natas.travel

52

The National Association of Travel Agents Singapore (NATAS) operates as a professional non-profit organization representing travel agents and related stakeholders in Singapore. The website serves as a portal for membership services, trade events, tour leader registry, and travel fairs, positioning NATAS as a key industry association with regional affiliations to ASEAN and other travel bodies. The business model focuses on membership engagement, event organization, and industry support, targeting travel professionals and consumers interested in travel fairs. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Matomo analytics, and Google Maps API, delivering a moderately performant and mobile-optimized experience. The site uses custom or unknown CMS technology and integrates several tracking and analytics tools. While the site is well-structured and professionally designed, it lacks some advanced SEO and accessibility features. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible security headers such as CSP or HSTS. No critical vulnerabilities were detected, but improvements in security headers and cookie consent mechanisms are recommended to enhance compliance and protection. Overall, the domain is privacy protected in WHOIS, which is common and justified for this business type. The website content and affiliations indicate legitimacy and moderate trustworthiness. The site scores well in business credibility and content quality but has room for improvement in security posture and privacy compliance.

R

Resorts World at Sentosa Pte. Ltd.

rwsentosa.com

68

Resorts World Sentosa is a premier integrated resort destination in Singapore offering world-class attractions such as Universal Studios Singapore, S.E.A. Aquarium, and Adventure Cove Waterpark, alongside luxury hotels, dining, shopping, and event venues. The website reflects a mature digital presence with a modern React-based tech stack, comprehensive content, and strong branding consistency. Extensive use of analytics and marketing tools indicates a data-driven approach to customer engagement. Security posture is robust with HTTPS and security headers, though the absence of public vulnerability disclosure and incident response contacts suggests room for improvement. The lack of WHOIS data is a notable anomaly but does not detract from the overall legitimacy given the professional site and known social media presence.

M

Momentus Hotels & Resorts

momentushotels.com

66

Momentus Hotels & Resorts operates an upscale hospitality business focused on premier accommodations in Singapore. The website presents a professional and well-structured digital presence with integrated booking capabilities via TravelClick. Marketing and analytics tools such as Google Tag Manager and Facebook Pixel are actively used, indicating a mature digital marketing strategy. However, the absence of WHOIS registration data and lack of visible privacy policy or contact information present gaps in transparency and compliance. The security posture is strong with HTTPS and Content Security Policy implemented, but additional security headers and clearer privacy compliance documentation are recommended. Overall, the website is functional and trustworthy from a user perspective but would benefit from enhanced transparency and compliance documentation to improve business credibility and regulatory adherence.

U

Uniworld

uniworld.com

64

Uniworld is a luxury river cruise company offering curated travel experiences across Europe, India, Vietnam, Cambodia, Peru, and Egypt. The website positions itself as the world's most renowned river cruise line, targeting travelers seeking intimate cultural and historical experiences. The business model focuses on high-end hospitality services with a global reach. Technically, the website employs modern marketing and analytics tools such as Google Tag Manager and Cookiebot for cookie consent management, indicating a mature digital marketing infrastructure. However, there is no visible privacy policy or terms of service in the provided content, which is a compliance gap. Security posture is moderate with cookie consent implemented but lacking visible security headers or detailed security policies. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for commercial entities. Overall, the website is professional and trustworthy but could improve transparency and security documentation.

T

Trafalgar

trafalgar.com

74

Trafalgar is a well-established travel company specializing in guided tours and travel packages primarily across Europe and other global destinations. The website presents a professional and user-friendly interface, targeting travelers seeking organized vacation experiences with flexible travel plan options. The company leverages modern web technologies including React and integrates multiple third-party analytics and marketing tools to optimize user engagement and advertising effectiveness. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response contacts are not evident in the provided data. The absence of WHOIS registrant information reduces transparency but is common for commercial entities protecting privacy. Overall, the website is credible, secure, and compliant with privacy regulations, serving a large audience in the hospitality sector.

Zámek Poláky is a cultural heritage site and tourist attraction located in the Czech Republic, offering guided tours, special events, and seasonal programs. The website provides detailed visitor information including opening hours, ticket prices, and upcoming events, targeting tourists and local visitors interested in history and culture. The business operates primarily as a small-scale hospitality and tourism entity with a focus on cultural experiences. Technically, the website is built on Joomla CMS with modern frontend technologies such as Bootstrap 5 and jQuery, ensuring a responsive and user-friendly experience. The site is well-structured with appropriate meta tags and JSON-LD structured data for SEO. However, there is room for improvement in accessibility and performance optimization. From a security perspective, the website uses HTTPS and includes CSRF tokens, but lacks important security headers and privacy-related policies. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and social media presence suggest a legitimate operation. No forms or tracking scripts were detected, indicating minimal data collection. Overall, the site is functional and informative but would benefit from enhanced security practices, privacy compliance, and domain registration transparency to improve trust and compliance posture.

N

Northstar Travel Media Singapore Pte Ltd

cruiseworld-asia.com

46

CruiseWorld Asia is a professional event website representing a flagship cruise conference organized by Travel Weekly Asia, targeting travel agents and cruise industry professionals in the Asia Pacific region. The website provides detailed event information, speaker profiles, partner logos, and multimedia content, reflecting a well-established presence since 2017. Technically, the site is built on WordPress with common plugins and integrates Google services for analytics and security (reCAPTCHA). The hosting is via Namecheap, and the domain registration is consistent and stable with no privacy protection, indicating transparency. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy measures.

B

Business Travel Awards Europe

businesstravelawardseurope.com

65

Business Travel Awards Europe is a specialized event organizer focused on recognizing excellence in the European business travel sector. The organization operates under the BTN Group umbrella and targets corporate travel professionals and industry stakeholders. Their business model revolves around hosting annual awards, securing sponsorships, and providing industry recognition. Technically, the website is built on Squarespace, leveraging modern web technologies and third-party analytics tools such as Google Tag Manager and Crazy Egg. The site is well-designed, mobile-optimized, and provides clear navigation and contact information. Security-wise, the site enforces HTTPS with HSTS but lacks some advanced security headers and formal vulnerability disclosure mechanisms. The absence of WHOIS registration data is a notable concern, although the website content and branding suggest legitimacy. Overall, the site presents a professional image but would benefit from enhanced privacy and security disclosures.

P

Petram Resort & Residences

petramresort.com

52

Petram Resort & Residences is a hospitality business offering resort accommodations located in Croatian Istria. The website presents a professional and visually appealing interface targeting tourists and holidaymakers seeking authentic enjoyment in a quiet European location. The business appears to be small-sized and was founded around 2020, consistent with the domain registration data. Technically, the site is built on WordPress with Elementor and integrates modern marketing and analytics tools such as HubSpot, Google Tag Manager, and Facebook Pixel. Cookie consent is managed via Cookiebot, indicating attention to privacy compliance, although no explicit privacy policy or terms of service pages were found in the provided content. Security posture is good with HTTPS enforced and no visible vulnerabilities, but DNSSEC is not enabled and security headers are not explicitly confirmed. Overall, the site is accessible without WAF or blocking mechanisms, and the domain registration is consistent with the business claims, supporting legitimacy. Strategic improvements include publishing privacy and terms policies, enabling DNSSEC, and enhancing security headers.

M

Marina Portorož

marinap.si

50

Marina Portorož is a well-established marina and hospitality service provider located in Slovenia, with a domain age dating back to 1996, supporting its long-standing market presence. The website offers comprehensive information about mooring services, boat maintenance, accommodation, and maritime experiences, targeting boating enthusiasts and tourists. Technically, the site is built on WordPress with Elementor, employing modern web technologies and plugins, and demonstrates good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though it lacks a dedicated security policy or incident response contacts. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the business.

G

Gostisce-Dolinsek.com

gostisce-dolinsek.com

43

Gostišče Dolinšek is a hospitality business located in Slovenia offering a range of services including restaurant dining, event hosting such as weddings, catering, and accommodation in luxury rooms. The website positions the business as a local gourmet destination with a focus on quality food, excellent wine selection, and memorable experiences. The target audience includes local and regional visitors seeking fine dining and event venues. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and Google Analytics for visitor insights. The site is mobile optimized and provides clear navigation and contact options. Security posture is good with HTTPS and GDPR compliance, though there is room for improvement in security headers and incident response transparency. The domain WHOIS data is missing, which raises some concerns about domain legitimacy, but the website content and presentation are professional and trustworthy. Overall, the site represents a credible small hospitality business with a solid digital presence.

R

Roudnické městské služby

bazenroudnice.cz

40

The website www.bazenroudnice.cz serves as the official online presence for the indoor swimming pool facility in Roudnice nad Labem, operated by Roudnické městské služby. It provides visitors with comprehensive information about the pool's facilities, operating hours, ticketing options, and current news updates. The target audience primarily includes local residents and visitors interested in swimming and wellness services. The business operates as a public municipal service, focusing on community wellness and recreational activities. Technically, the website is built on the WordPress CMS platform, utilizing common plugins such as WPBakery Page Builder, jQuery, Bootstrap, and various sliders for enhanced user experience. The site is mobile-optimized and presents a professional design with clear navigation. Performance is moderate, with room for improvement in SEO and accessibility features. From a security perspective, the site benefits from HTTPS encryption but lacks important security headers and publicly available security policies. There is no evidence of tracking or analytics scripts, indicating minimal user data collection. The absence of privacy and cookie policies suggests compliance gaps with GDPR and related regulations. No vulnerabilities or malicious content were detected. Overall, the website is legitimate and trustworthy, representing a municipal service with clear contact information and consistent branding. However, improvements in privacy compliance, security headers, and accessibility would enhance its security posture and regulatory adherence.

Ř

Říp, o.p.s.

kulturaroudnice.cz

47

Říp, o.p.s. operates the KulturaRoudnice.cz portal, a local cultural platform focused on promoting and managing cultural and leisure activities in Roudnice nad Labem and the surrounding Podřipsko region. The portal provides event listings, ticket pre-sales, and additional services such as venue rentals and poster placements. The organization positions itself as a key local cultural facilitator serving residents and visitors with a user-friendly, content-rich website. Technically, the site leverages modern web technologies including Bootstrap, jQuery, and Google Analytics, ensuring responsive design and moderate performance. Security measures include HTTPS enforcement, CSRF tokens, and a cookie consent mechanism, though explicit security headers and incident response policies are absent. The lack of WHOIS data limits domain trust verification but is likely due to privacy protection, which is reasonable for a small non-profit. Overall, the site demonstrates good business credibility and privacy compliance, with room for security enhancements.

Ř

Říp, o.p.s.

vyletnarip.cz

42

Výlet na Říp is a regional tourism and cultural information website focused on the Podřipsko area in the Czech Republic. It provides visitors with detailed guides on local attractions, cycling routes, cultural events, and historical sites. The site targets tourists, cyclists, and families seeking leisure and educational activities in the region. The business operates as a small-scale informational platform supported by the regional organization Říp, o.p.s., with a clear focus on promoting local tourism and culture. Technically, the website employs modern web technologies including Google Fonts, Google Analytics, and Google Tag Manager, hosted by Wedos. The site is mobile-optimized with good SEO practices and a clear navigation structure. However, it lacks some advanced security headers and explicit privacy or terms of service pages, which are areas for improvement. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR principles, though no formal privacy policy was found. No critical vulnerabilities or suspicious activities were detected. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website presents a trustworthy and professional platform for regional tourism promotion, with moderate technical maturity and a solid security baseline. Strategic enhancements in privacy documentation and security headers would further strengthen its compliance and trustworthiness.

T

Travel Weekly

travelweekly.com

67

Travel Weekly is a recognized media organization serving the travel and hospitality industry with news, reports, and resources. The website presents professional content targeting travel professionals and hospitality stakeholders, positioning itself as an established industry publication. Technically, the site employs modern web technologies including Google Fonts, Google Tag Manager, Facebook SDK, and RudderLabs for analytics and tracking, indicating a moderate level of digital maturity. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Security posture is moderate with no evident security headers or explicit privacy and cookie policies, suggesting room for improvement in compliance and security best practices. Overall, the site is functional and professional but would benefit from enhanced transparency and security measures.

W

Wellness Vision s.r.o.

wellness-vision.cz

46

Wellness Vision s.r.o. is a Czech company specializing in the custom design and construction of wellness facilities for both private households and public venues such as hotels and wellness centers. With over 15 years of experience, the company positions itself as a trusted provider of modern, durable, and energy-efficient wellness solutions including saunas, whirlpools, steam cabins, and related products. Their website reflects a professional and well-structured digital presence, showcasing their services, references, and a showroom to engage potential clients. Technically, the website is built on WordPress and leverages common web technologies such as jQuery, Google Tag Manager, and Google Analytics for tracking and marketing purposes. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR requirements. However, there is room for improvement in security headers and incident response transparency. From a security standpoint, the site uses HTTPS and implements cookie consent with consent mode, indicating a good privacy posture. The absence of WHOIS data due to privacy protection slightly reduces trust but is common for commercial entities. No critical vulnerabilities or exposed sensitive data were detected in the website content. Overall, Wellness Vision presents a credible and professional business with a solid online presence. Strategic enhancements in security policies and transparency could further strengthen their trustworthiness and compliance posture.

K

Kavárna Pohoda

kavarna-pohoda.cz

43

Kavárna Pohoda operates a niche cat café in Pardubice, Czech Republic, offering a unique hospitality experience combining quality coffee, tea, desserts, and the company of cats. The business targets local residents and visitors who appreciate a calm and joyful environment. The website is professionally designed using WordPress with Elementor and Astra theme, reflecting a moderate level of digital maturity. The technical infrastructure is solid with HTTPS enabled and a modern tech stack, though performance is moderate and some security best practices like security headers are missing. The security posture is generally good with no visible vulnerabilities or exposed sensitive data, but the absence of privacy and cookie policies indicates compliance gaps. Overall, the website is trustworthy and safe for general audiences, but improvements in privacy compliance and security hardening are recommended.

P

Phocuswright

phocuswright.com

69

Phocuswright is a specialized market research company focused on the global travel, tourism, and hospitality industries. It provides comprehensive research reports, trend forecasting, and industry events to travel professionals and businesses. The company positions itself as a leading provider of travel market intelligence, serving a professional audience with detailed insights and analysis. The website reflects a mature digital presence with modern technologies and analytics integrations, supporting effective user engagement and data-driven marketing. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although public security policies and incident response contacts are not published. The absence of WHOIS registration data is a notable anomaly that slightly impacts trust but does not detract from the professional presentation and content quality. Overall, the website is a credible and authoritative source for travel market research with good privacy compliance and user experience.

G

GTM by Northstar

gtmbynorthstar.com

60

GTM by Northstar is a medium-sized B2B event organizer specializing in the travel industry, providing structured networking events for travel suppliers and advisors. The company is part of Northstar Travel Group and has been operating since 2013. The website is professionally designed using Squarespace, featuring video backgrounds and clear navigation to promote their events and partner brands. Technically, the site uses modern web technologies and is hosted on Squarespace's CDN with HTTPS and HSTS enabled, ensuring good baseline security. However, the absence of privacy and cookie policies, lack of contact information, and missing WHOIS data raise concerns about compliance and domain legitimacy. Google Tag Manager is used for analytics, indicating moderate user tracking. Overall, the site is safe and business-focused but would benefit from improved transparency and compliance documentation.

S

SAUNASYSTEM s.r.o.

saunasystem.cz

10

SAUNASYSTEM s.r.o. is a Czech manufacturer specializing in the design, production, and sale of Finnish saunas and infrasaunas. The company offers a broad range of sauna products including custom and typified models, serving both residential and commercial clients. Their market position is supported by a showroom, extended warranties, and a strong online presence. Technically, the website is built on WordPress with modern JavaScript libraries and tracking tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA integration, though improvements in HTTP security headers and WHOIS transparency are recommended. Overall, the business demonstrates professionalism and trustworthiness with clear contact channels and privacy compliance.

S

Sport areál Klíny

zimlet.cz

60

Sport areál Klíny is a well-established mountain resort and recreational facility located in the Czech Republic, offering year-round outdoor activities including skiing, biking, zipline, and accommodation services. The website reflects a regional hospitality business targeting tourists and sports enthusiasts with a focus on family-friendly and seasonal sports activities. The business has been operational since 2000, indicating a stable market presence. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, leveraging modern web technologies and providing a responsive and user-friendly experience. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with a comprehensive cookie policy and GDPR consent banner. No critical vulnerabilities or suspicious indicators were found. Overall, the website demonstrates a moderate to good level of digital maturity and business credibility.

C

Cestovná kancelária TATRATOUR Slovakia s.r.o.

tatratour.sk

49

Cestovná kancelária TATRATOUR Slovakia s.r.o. is an established Slovak travel agency specializing in summer holiday packages, including seaside vacations, last minute deals, educational and pilgrimage tours. The website is well-structured, targeting Slovak and Czech speaking customers, with a focus on family and leisure travel. The company has a long domain history since 2003, indicating market presence and stability. Technically, the site uses a mix of ASP.NET WebForms backend with modern frontend technologies like Vue.js and jQuery, integrating third-party services such as Google Analytics and Facebook Pixel for marketing and analytics. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit privacy policy, terms of service, and security headers. No blocking or WAF challenges were detected, allowing full content access. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

N

Nutrend World

nutrendworld.cz

42

Nutrend World operates a multifaceted hospitality and wellness complex in the Czech Republic, offering services including hotel accommodation, restaurant dining, fitness, wellness, massages, and congress facilities. The website is professionally designed with multilingual support and targets a general audience interested in health, fitness, and leisure. The business appears established since 2017 with consistent domain registration data. Technically, the website is built on WordPress with modern analytics and marketing tools integrated, including Google Analytics, Matomo, Hotjar, and Facebook Pixel. The site is mobile optimized and SEO friendly but lacks explicit privacy and terms of service pages in the provided content. Security posture is adequate with HTTPS enabled and cookie consent implemented, though security headers are not evident. Overall, the site is trustworthy and professionally maintained.

C

Coworkies Ltd.

coworkies.com

66

Coworkies Ltd. operates a specialized online platform serving the coworking industry by providing a job board, directory, and networking services tailored to freelancers, startups, and coworking space operators. The company has positioned itself as a niche leader in coworking-related employment and community engagement, offering additional services such as recruitment, training, and salary surveys. The website is professionally designed with consistent branding and a clear focus on its target audience. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with integrations such as Google Tag Manager and Cloudflare Insights for analytics and performance monitoring. The site is hosted behind Cloudflare, ensuring good performance and security. Mobile optimization and SEO practices are well implemented, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS domain registration data is a notable concern, impacting trustworthiness despite the professional web presence. Overall, Coworkies presents a credible and functional platform with moderate risk due to domain registration opacity. Strategic improvements in security transparency and domain legitimacy verification are recommended to enhance trust and compliance.

M

Memory Computers s.r.o.

vysocinawest.cz

54

Vysočina West is a regional tourism promotion website focused on the Vysočina West area in the Czech Republic. It provides comprehensive information about tourist attractions, activities, accommodation, gastronomy, and cultural events, targeting tourists and visitors interested in exploring this region. The website is supported by local municipalities and government programs, indicating a strong regional partnership and official backing. The business model centers on destination marketing and tourism promotion, with a small company size and recent domain registration in 2021. Technically, the website uses a modern JavaScript stack including jQuery, Swiper, Google Tag Manager, and Google Translate for multilingual support. The hosting is provided by Wedos, a Czech hosting provider consistent with the domain registrar. The site demonstrates good mobile optimization and basic accessibility, with moderate performance. SEO optimization is basic but present. From a security perspective, the site uses HTTPS and integrates Google services securely. However, it lacks visible security headers and does not provide privacy or cookie policies, which are important for GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. Incident response and vulnerability disclosure mechanisms are absent. Overall, the website is professional, trustworthy, and safe for general audiences. It effectively serves its purpose as a regional tourism portal but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

S

Schaubühne Lindenfels Leipzig

schaubuehne.com

47

Schaubühne Lindenfels Leipzig is a cultural venue in Germany offering theater, cinema, concerts, and festival hosting services. The website is professionally designed using TYPO3 CMS and modern frontend technologies, providing a good user experience with clear navigation and mobile optimization. The site integrates Matomo analytics and a cookie consent mechanism, indicating some privacy awareness. However, no explicit privacy policy or terms of service pages were found, which is a compliance gap. The domain WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website content. Overall, the site is safe and trustworthy for general audiences but would benefit from improved transparency and security disclosures.

P

PT Jakarta International Expo

jiexpo.com

51

Jakarta International Expo (JIEXPO) is a large-scale event venue provider based in Indonesia, offering convention, exhibition, and theatre facilities. The website presents a professional and consistent brand image targeting event organizers and exhibitors in the hospitality sector. The technical infrastructure is built on WordPress with modern plugins and tracking tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies. WHOIS data is incomplete, which slightly impacts trustworthiness but the website content and branding support legitimacy. Overall, the site is functional and well-structured but could improve privacy compliance and security transparency.

T

TIP Travel a.s.

tiptravel.sk

49

TIP Travel a.s. is a well-established Slovak travel agency specializing in holiday packages, last minute deals, and exotic trips. The company has a strong market presence in Slovakia with over 20 years of operation, offering a wide range of travel services including insurance, loyalty programs, and airport parking partnerships. The website reflects a professional and user-friendly platform targeting general consumers seeking vacation options. Technically, the site uses a modern tech stack including ASP.NET, Vue.js, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar. Privacy compliance is robust with a clear cookie consent mechanism and GDPR-aligned privacy policy. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though improvements in security headers and vulnerability disclosure could enhance trust. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

K

Kartago SK

kartagotours.sk

54

Kartago SK operates as a Slovak online travel agency specializing in holiday packages, last minute deals, euro weekend trips, and flight tickets. The website targets general consumers in Slovakia seeking travel services. The platform demonstrates a moderate level of digital maturity, utilizing modern technologies such as Vue.js, Google Tag Manager, Usercentrics for consent management, and Google reCAPTCHA for bot protection. Structured data and SEO meta tags are implemented to enhance search visibility. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and formal security policies are absent. Contact information is limited to a phone number, with no email or physical address found in the analyzed content. The domain uses privacy protection for WHOIS data, which is justified for this business type. Overall, the website is professional, trustworthy, and safe for general audiences.

H

Hydrotour

hydrotour.sk

63

Hydrotour is a Slovak travel agency specializing in holiday packages for 2026, including last minute and first moment offers for summer and exotic destinations. The website targets Slovak-speaking travelers seeking vacation options and presents a professional and consistent brand image. The technical infrastructure leverages modern JavaScript modules, Vue.js framework, and WordPress CMS, with integrations for Google Tag Manager and Cookiebot for privacy compliance. The site demonstrates good SEO practices and mobile optimization, providing a positive user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though lacks explicit security policy and incident response information. Overall, the site is trustworthy and compliant with GDPR, with extensive use of analytics and marketing tools.

S

Sport areál Klíny

kliny.cz

60

Sport areál Klíny is a well-established hospitality and recreational business operating a ski resort and summer activity park in the Czech Republic. Founded in 2000, it offers a variety of services including skiing, bike parks, zipline, accommodation, and event hosting. The website reflects a regional market position targeting families, tourists, and groups seeking outdoor sports and leisure activities. The business model focuses on direct service provision and online booking partnerships. Technically, the website is built on WordPress with Elementor and Astra theme, showing moderate performance and good mobile optimization. SEO and metadata are properly implemented, enhancing discoverability. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive cookie policy and GDPR consent banner. Contact information is limited but includes a verified phone number and active social media channels. Overall, the website is professional, trustworthy, and safe for general audiences.