Hospitality security reports

Aura kohvik is a small local café and catering service based in Tartu, Estonia, operating since 2010. The business offers daily meals, snacks, and catering for events such as birthdays and corporate gatherings. The website is built on WordPress using common plugins like Revolution Slider and Contact Form 7, hosted by Radicenter OÜ. The site is well structured with good SEO metadata and clear contact information, targeting local customers and event organizers. Security posture is moderate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms. No privacy or cookie policies are present, which is a compliance gap. Overall, the website is functional and professional but could improve in privacy and security best practices.

K

Kino Hvězda Přerov

kinohvezdaprerov.cz

53

Kino Hvězda Přerov is a local cinema in the Czech Republic offering advanced movie screening technology including 4K laser projection and a large panoramic screen. The business targets general audiences including families and children, providing ticket sales, event hosting, and related services such as gift cards and podcasts. The website is built on modern web technologies such as React and Next.js, with a good level of mobile optimization and user experience. Security posture is solid with HTTPS and security headers, though some compliance gaps exist such as the absence of a cookie consent mechanism. WHOIS data is unavailable, likely due to privacy protection, which is common for small businesses. Overall, the site is professional, trustworthy, and safe for general audiences.

S

Sportoviště Přerov s.r.o.

sportoviste-prerov.cz

42

Sportoviště Přerov s.r.o. operates as the management entity for multiple sports and recreational facilities in the city of Přerov, Czech Republic. Their portfolio includes a swimming pool complex, winter stadium, sports hall, hotel, and wellness center, targeting local residents and visitors interested in sports and leisure activities. The company also runs an e-shop for related products and services. The website is professionally designed using WordPress with Elementor and optimized for SEO and multilingual support via Weglot. The technical infrastructure is modern and hosted by a reputable Czech provider, Wedos. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks published security policies and cookie consent mechanisms, which are important for GDPR compliance. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

P

Plovárna Hranice

plovarna-hranice.cz

51

Plovárna Hranice is a local hospitality and recreational business operating swimming pools, wellness facilities, and outdoor summer pools in the Czech Republic. The website presents a well-structured and professionally designed digital presence, targeting families, sports enthusiasts, and general visitors seeking active relaxation. The business is positioned as a community-focused facility with a variety of services including indoor pools, wellness sauna, beach volleyball, and swimming school. Technically, the site is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and partner affiliations.

The website aquaparkplovarnahranice.cz serves as an informational and promotional platform for Plovárna Hranice and highlights eight notable water parks in the Czech Republic. Operated by EKOLTES Hranice, a.s., the site targets families and leisure seekers interested in aquatic recreational facilities. The business operates in the hospitality sector with a focus on swimming and water park services. The website is built on WordPress using the Astra theme and incorporates SEO best practices via the Yoast plugin. Visitor analytics are managed through Matomo, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies, which are compliance gaps. The absence of WHOIS data reduces transparency and trustworthiness, though the site content and contact information appear legitimate. Overall, the site is functional, user-friendly, and content-rich but would benefit from enhanced privacy compliance and security practices.

W

www.thepadlock.cz

thepadlock.cz

58

The Padlock is a small hospitality business operating escape room entertainment games in Prague, Czech Republic. The website presents a professional and visually appealing interface built on the Wix platform, targeting general audiences interested in immersive puzzle and escape experiences. The business offers themed escape games such as 'Mise #53', 'Hřbitov', and 'Jack Daniel's mystery'. The market position is that of a local niche entertainment provider with a clear focus on quality and customer engagement. Technically, the website leverages Wix's Thunderbolt framework and standard web technologies including JavaScript, JSON-LD structured data, and CSS3. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. Hosting and content delivery are managed by Wix, ensuring reliable uptime and scalability. From a security perspective, the site uses HTTPS and includes some client-side cookie handling scripts with security considerations. However, explicit security headers such as Content Security Policy or HSTS are not detected, and no privacy or cookie policies are visibly presented. There is no evidence of vulnerability disclosures or incident response contacts. The absence of WHOIS data limits domain registration trust assessment, but the website content and business information appear legitimate and consistent. Overall, the website is suitable for its business purpose but would benefit from enhanced privacy compliance, improved security headers, and clearer policies to strengthen trust and regulatory adherence.

B

Únikové hry Brno | Brain Teaser

brainteaser.cz

49

Brain Teaser is a small entertainment service provider specializing in escape room games located in Brno, Czech Republic. The website presents a professional design built on WordPress with popular plugins such as Yoast SEO and Elementor, indicating a moderate level of digital maturity. However, the absence of WHOIS registration data and lack of visible privacy and cookie policies suggest gaps in compliance and transparency. Security posture is basic with no detected security headers or incident response information, which could expose the business to risks. Overall, the site is functional and content-rich but requires improvements in security and compliance to enhance trust and reduce risk.

M

Mazemania – Minigolf praha

mazemania.cz

41

Mazemania is a small hospitality business operating a minigolf venue in Prague, offering recreational minigolf activities and event hosting services for companies, schools, and celebrations. The website is professionally designed using WordPress and Elementor, with a focus on user experience and clear presentation of services. The technical infrastructure includes modern web technologies and standard analytics tools such as Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enabled, but lacks some security headers and visible privacy compliance mechanisms. The absence of WHOIS data limits domain trust assessment, but the website content and contact information suggest a legitimate local business. Overall, the site is safe, family-friendly, and well-positioned for its target audience.

D

DVOŘÁK PAINTBALL

dvorakpaintball.cz

40

DVOŘÁK PAINTBALL is a small local entertainment business based in the Czech Republic specializing in paintball and Nerf activities. The company offers a variety of event packages including birthday parties, team building, and special celebrations, supported by equipment rental and an indoor bar. The website is professionally designed using WordPress with Elementor and WooCommerce, providing a functional online reservation system and clear contact information. Technically, the site uses modern web technologies and is hosted likely by WEDOS, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks important security headers and privacy compliance documentation. Overall, the business appears legitimate and well-positioned in its local market niche.

B

Booqito

booqito.com

10

Booqito is a Czech Republic-based SaaS company offering a modern online reservation system tailored for sports and leisure businesses such as bowling, escape rooms, wellness centers, and more. The platform provides comprehensive tools including booking management, payment processing, gift vouchers, marketing automation, shift planning, multilingual support, and integrations with popular services. The website is professionally designed using modern technologies like the Astro framework and integrates Google Analytics and Google Ads for marketing and analytics purposes. Cookie consent is implemented with detailed categories, reflecting a commitment to privacy compliance, although explicit privacy and terms of service pages are not found. Security posture is generally good with HTTPS enabled and no exposed sensitive data, but improvements are recommended in DNSSEC deployment and security headers. WHOIS data shows the domain is relatively new but consistent with the business profile, registered by COREhub, S.R.L. Overall, Booqito presents a trustworthy and professional digital presence with strong business credibility and user experience.

H

Hackni Trezor

hacknitrezor.cz

51

Hackni Trezor is a small hospitality business operating an escape room game in Hradec Králové, Czech Republic. The company offers both standard and personalized escape room experiences targeting groups of friends, families, and colleagues. The website is professionally designed with clear navigation, mobile responsiveness, and rich content describing the game, pricing, and booking options. The business maintains active social media profiles and provides comprehensive contact information including physical address, phone, and email. Technically, the site uses modern frontend libraries and frameworks such as Bootstrap and jQuery, with a third-party booking widget integrated for reservations. Security posture is moderate with HTTPS enabled but lacking advanced security headers. Privacy and terms policies are present as downloadable PDFs, indicating compliance with GDPR. However, WHOIS data is unavailable, which reduces domain transparency and trustworthiness. Overall, the website presents a credible and professional business with room for security improvements.

S

SkvěléČesko.cz s.r.o.

skvelecesko.cz

54

SkvěléČesko.cz s.r.o. operates an online platform dedicated to booking leisure and recreational activities across the Czech Republic. The website offers a wide range of services including sports, wellness, family activities, and unique experiences, targeting both local residents and tourists. The business model focuses on providing a seamless online reservation system with instant ticket delivery and customer support, positioning itself as a trusted intermediary between customers and service providers. Technically, the website employs modern JavaScript libraries and integrates multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, Bing UET, and Facebook Pixel. The site is well-structured with comprehensive metadata, JSON-LD structured data, and good SEO practices. Mobile optimization and user experience are strong, though some accessibility features could be enhanced. The site uses HTTPS with excellent SSL configuration but lacks explicit security headers, which is a recommended improvement. From a security perspective, the platform demonstrates good privacy compliance with clear cookie consent mechanisms and detailed privacy policies aligned with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership, which slightly impacts trustworthiness. No incident response or security policy pages were found. Overall, SkvěléČesko.cz presents a professional, user-friendly, and secure online service for leisure activity bookings in the Czech market. Strategic recommendations include enhancing security headers, verifying domain registration details, and improving accessibility compliance to further strengthen trust and security posture.

F

Foire de Metz

foiredemetz.com

61

Foire de Metz is a regional event organizer hosting a prominent fair in Metz, France, providing exhibition spaces and entertainment to a broad public audience. The website is professionally designed using Drupal 10, integrating modern analytics and marketing tools such as Matomo and Google Tag Manager. The site demonstrates good mobile optimization, accessibility, and SEO practices, supporting a positive user experience. Security posture is solid with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not published. The WHOIS data is notably absent or unregistered in the queried database, which raises concerns about domain legitimacy despite the professional appearance and content of the website. Overall, the site is safe, trustworthy, and compliant with GDPR, but the domain registration inconsistency warrants further verification.

C

Caen Événements

caen-evenements.com

55

Caen Événements operates as the manager of the Centre de Congrès and Parc des Expositions in Caen, Normandy, producing both professional and public events such as congresses, gala evenings, and festivals. The website positions the company as a regional leader in event management within Normandy, targeting event organizers and attendees. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses various JavaScript libraries to enhance user experience. SEO and mobile optimization are well implemented, though accessibility could be improved. Security posture is solid with HTTPS and security headers in place, but lacks explicit privacy and terms of service documentation. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration status, which impacts overall trustworthiness. Strategic recommendations include adding comprehensive privacy and terms policies, improving contact transparency, and verifying domain registration details to enhance credibility and compliance.

F

Foire aux Vins d'Alsace : Festival et foire gastronomique internationale

foire-colmar.com

50

The website www.foire-colmar.com represents the Foire aux Vins d’Alsace, a well-established regional event combining a gastronomic wine fair, commercial exhibition, and music festival. It targets a broad audience including families, wine enthusiasts, and visitors to the Alsace region. The event is notable for its long history (77 editions) and diverse offerings including over 1500 wines, 350 exhibitors, and international artists. Technically, the site is built on Joomla CMS, uses modern web technologies, and implements GDPR-compliant privacy and cookie policies with consent mechanisms. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and rich multimedia content. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though security headers are not evident and no explicit security or incident response policies are published. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, though the professional presentation and external ticketing partnership support trust. Overall, the site is a credible and professional digital presence for a major cultural event in France.

M

Mégacité Amiens

megacite.fr

57

Mégacité Amiens is a regional event venue in France specializing in exhibitions, congresses, and various events. The website presents a professional image with clear branding and relevant content targeting event organizers and attendees. The business model revolves around venue rental and event hosting services, positioning itself as an important player in the hospitality sector within the Amiens region. The site is built on Drupal 10 and incorporates modern web technologies and analytics tools such as Google Tag Manager and Matomo, indicating a moderate level of digital maturity. Privacy compliance is addressed through cookie consent mechanisms and a privacy policy, reflecting awareness of GDPR requirements. Security posture is generally good with HTTPS enforced and some security best practices observed, though explicit security headers and incident response information are lacking. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the website content and technical setup suggest a legitimate and trustworthy business. Overall, the site scores well in content quality, technical implementation, and privacy compliance, with room for improvement in security transparency and contact information availability.

F

Foire de Lyon 2026 - du 20 au 30 mars - Lyon Eurexpo

foiredelyon.com

61

Foire de Lyon is a regional event organizer hosting a major fair in Lyon, France, scheduled for March 20-30, 2026. The website provides comprehensive information about the event, including exhibitor details, visitor guides, and partner information. The digital infrastructure is built on Drupal 10 with integrations for video content, analytics, and cookie consent management, reflecting a modern and mature web presence. Security posture is generally good with HTTPS enforced and privacy compliance mechanisms in place, though some improvements in security headers and incident response transparency are recommended. The absence of WHOIS data introduces some uncertainty about domain legitimacy, but the professional content and strong social media presence support trustworthiness. Overall, the site is well-positioned to serve its audience effectively with moderate risk factors to monitor.

F

Foire de Nice

foiredenice.com

58

Foire de Nice is a well-established event organizer hosting the International Fair of Nice, featuring over 350 brands and 300 exhibitors in a large venue in Nice, France. The website is professionally designed using WordPress with a focus on user experience and clear navigation. It provides detailed information about the event's universes and services, targeting a broad audience interested in lifestyle, home, and automotive products. The technical infrastructure leverages common WordPress plugins and libraries, including cookie consent management and advertising tools. Security posture is adequate with HTTPS and consent mechanisms, but lacks explicit security headers and detailed security policies. The absence of WHOIS registration data is a notable concern, potentially impacting domain trustworthiness. Overall, the website is functional, compliant with privacy regulations, and trustworthy from a content perspective, but domain legitimacy should be further verified.

F

Foire de Grenoble

foiredegrenoble.com

44

Foire de Grenoble is a well-established event organizer hosting a major regional fair in Grenoble, France, with a focus on vintage themes for the 2025 edition. The website serves as an information and engagement platform for visitors and exhibitors, offering event details, exhibitor listings, and ticketing links. The business holds a strong regional market position as a key cultural and commercial event. Technically, the site is built on WordPress with Elementor and Yoast SEO, integrating Google Analytics and Matomo for visitor tracking, and implements a comprehensive cookie consent mechanism. Security posture is good with HTTPS and cookie compliance, though some security headers could be improved. No privacy policy or terms of service pages were detected, which is a compliance gap. Overall, the site is professional, user-friendly, and trustworthy, with active social media presence and consistent branding.

D

Dijon Bourgogne Events

dijonbourgogne-events.com

55

Dijon Bourgogne Events operates the Parc des Expositions et Congrès de Dijon, providing venue services for fairs, congresses, and exhibitions in the Dijon and Bourgogne region of France. The company appears to be a regional event venue operator founded recently in 2023, with a medium-sized business profile. The website is built on WordPress using the Divi theme and incorporates SEO and user experience best practices such as Yoast SEO and Google Fonts. The site is mobile optimized and includes social media integration with LinkedIn, Facebook, and Instagram. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Contact information such as emails and phone numbers are not explicitly found in the provided content, which may impact user trust and compliance. Overall, the website is professional and relevant to its business domain but could benefit from enhanced security and compliance documentation.

F

Foire Internationale de Montpellier

foire-montpellier.com

45

The Foire Internationale de Montpellier website represents a regional event organizer hosting an annual international fair in Montpellier, France. The site provides comprehensive information about the event, including exhibitor services, visitor information, ticketing, and event programming. The business is positioned as a key regional player with partnerships from local government and commercial entities. Technically, the website is built on WordPress using Elementor and several modern plugins for SEO, performance, and GDPR compliance. The site is well-structured, mobile-optimized, and includes cookie consent mechanisms aligned with GDPR. Security posture is good with HTTPS enforced and anti-spam measures, though some security headers and explicit policies are missing. The absence of WHOIS data for the domain is a concern for domain legitimacy, but the professional content and consistent branding mitigate this risk. Overall, the site is trustworthy and serves its audience effectively.

P

Peppa Pig Live Česko

peppapiglive.cz

57

Peppa Pig Live Česko is a localized entertainment website promoting live theatrical performances of the popular children's character Peppa Pig in the Czech Republic. The site targets families and children, offering ticket sales and multimedia content related to the live shows. The business operates on a small scale, focusing on event promotion and audience engagement through social media and online presence. Technically, the website is built on WordPress with modern front-end frameworks like Bootstrap and jQuery, and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is mobile optimized and SEO friendly, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. The domain registration is recent but consistent with the business localization and branding, indicating legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, suitable for its family-friendly entertainment purpose.

M

Moje Kino

mojekino.cz

41

Moje Kino is a Czech Republic based cinema club and network promoting three local cinemas: Kino Aero, Bio Oko, and Kino Světozor. The business model focuses on building a community of cinema enthusiasts through membership benefits such as premiere invitations and prepaid ticket cards. The website content is basic but relevant to the hospitality sector, targeting local moviegoers and cinema fans. The domain has been registered since 2008, consistent with the business history, indicating a stable presence in the market. Technically, the website uses legacy jQuery 1.10.1, Google Analytics, and Modernizr scripts. The site is moderately optimized for mobile and accessibility but lacks advanced SEO and modern frameworks. Performance is moderate with asynchronous loading of analytics scripts. However, the site lacks HTTPS and security headers, which weakens its security posture. No privacy or cookie policies are published, and no contact information is provided, which impacts compliance and trust. From a security perspective, the absence of HTTPS and security headers, combined with no visible privacy or cookie policies, indicates a low security maturity level. The use of Google Analytics suggests moderate user tracking without clear privacy compliance. No forms or sensitive data collection points were found, reducing immediate risk but also limiting user engagement features. Overall, the website is functional but basic, with significant room for improvement in security, privacy compliance, and user trust. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding contact information, and enhancing security headers to improve the site's credibility and compliance posture.

T

Hledej Chorvatsko | pokoje a apartmány v Chorvatsku

travelplan.cz

48

The website www.ubytovanivchorvatsku.cz is a specialized online platform offering accommodation listings primarily focused on Croatia. It provides users with a comprehensive search interface to find private apartments and rooms across various Croatian regions, targeting tourists seeking affordable and direct bookings without intermediary commissions. The site features detailed listings with images, pricing, and location data, supporting a user-friendly experience with mobile responsiveness and clear navigation. Technically, the site employs common web technologies such as jQuery, Google Fonts, FontAwesome, Google Adsense, Facebook Pixel, and Google Analytics, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data reduces transparency and trustworthiness from a domain registration perspective. Overall, the site is functional and relevant for its niche but would benefit from enhanced privacy compliance and security practices.

B

Belehrad Srbsko - história, ubytovanie, doprava

belehrad.sk

42

The website belehrad.sk is a Slovak language tourism portal focused on providing information about Belgrade, Serbia, including history, accommodation, transportation, and travel services. It targets tourists and travelers interested in visiting Belgrade and offers hotel bookings, bus tickets, flight information, and visa guidance. The site operates on a basic technical infrastructure using standard web technologies and is hosted by HostMonster. It integrates Google services such as Adsense and Analytics and implements a GDPR-compliant consent management platform. However, it lacks explicit privacy policy and terms of service pages, and no direct company contact or security incident response information is provided. The presence of an adult content link in the footer reduces the overall content safety rating. Security posture is moderate with no advanced security headers detected. Overall, the site is functional but would benefit from improvements in security, privacy transparency, and content professionalism.

CzechWinter.com is a niche online portal dedicated to providing accommodation listings and skiing information for tourists interested in the Czech mountain regions. The website offers direct contact to houseowners for cottages, apartments, and hotels, focusing on winter lodging and skiing activities. The business appears to be a small, regionally focused hospitality service provider established around 2008, with a modest online presence and monetization through Google AdSense advertising. From a technical perspective, the website uses basic HTML, CSS, and JavaScript with no modern frameworks or CMS detected. Hosting is provided by a Czech hosting provider as indicated by the nameservers. The site lacks HTTPS enforcement and modern security headers, which lowers its security posture. Mobile optimization and accessibility are minimal, and SEO practices are basic. There is no evidence of privacy or cookie policies, nor GDPR compliance mechanisms. Security-wise, the absence of HTTPS and security headers, combined with no visible privacy or cookie policies, indicates a low maturity level in security and compliance. No contact information or incident response channels are provided, which could hinder user trust and regulatory compliance. However, no malicious or adult content is detected, and the domain registration data is consistent and legitimate. Overall, the website serves its niche purpose but requires significant improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user experience.

infomax websolutions GmbH is a small German company specializing in digital solutions for the tourism sector. The website primarily serves as a minimal landing page with a prominent link redirecting users to another domain (infomax-online.de), indicating limited direct content or engagement on this site. The business model appears focused on providing B2B digital services tailored to tourism industry clients. Technical infrastructure is basic, hosted on Hetzner servers, with no detected CMS or advanced technologies. The site lacks critical security and privacy features such as HTTPS, security headers, privacy policies, and contact information, which significantly impacts its security posture and trustworthiness. Overall, the website is minimalistic with poor content quality and limited user engagement features.

B

bookingkit

bookingkit.net

69

bookingkit is a mature, medium-sized SaaS company specializing in booking, marketing, and administration software for the European tours, activities, and attractions industry. The company positions itself as a market leader in Europe, offering a comprehensive platform that integrates booking generation, channel management, and centralized administration to simplify operations and increase sales for its customers. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a high level of digital maturity. The technical infrastructure leverages WordPress CMS with modern marketing and analytics tools such as Facebook Pixel, Hotjar, and HubSpot, ensuring robust data collection and user engagement capabilities. Security posture is strong with HTTPS, domain locking, and no visible vulnerabilities, although DNSSEC is not enabled. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligned with GDPR requirements. Overall, bookingkit demonstrates a high level of business credibility and operational professionalism, making it a trustworthy platform in its niche.

I

IQM Destination

iqmdestination.com

64

IQM Destination is a medium-sized project focused on integrated quality management systems for tourism destinations. It aims to enhance service quality, provide education for tourism workers, and strengthen destination branding through a comprehensive, data-driven approach involving stakeholders and guests. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though additional security headers and policies could improve resilience. The domain registration is consistent with the business history, supporting legitimacy. Overall, the site presents a trustworthy and professional image in the hospitality sector.

Y

Yesme s chutí FOOD TRUCK

yesme.cz

45

Yesme s chutí FOOD TRUCK is a small Czech hospitality business specializing in food truck and catering services, targeting both public events and corporate clients primarily in Prague. The website provides basic information about upcoming events and catering offerings, with clear contact details and a cookie consent mechanism. Technically, the site uses older but functional technologies such as Bootstrap 3.4 and jQuery, with a CMS platform identified as inPage. Security posture is moderate with no detected blocking or WAF, but lacks advanced security headers and a privacy policy, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate for a small local business.

M

mica BUFFET & CATERING

mica-catering.at

42

mica BUFFET & CATERING is a small hospitality business specializing in buffet and catering services primarily for schools and educational institutions in the Linz region of Austria. The company emphasizes fresh, regionally sourced ingredients and seasonal menus, operating at multiple school locations. The website is built on TYPO3 CMS with a moderate technical stack including jQuery and Unslider, indicating a stable but somewhat dated infrastructure. The site is accessible, uses HTTPS, and employs Piwik analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced but lacks advanced security headers and modern JavaScript libraries. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the business presents a professional and trustworthy online presence with room for technical and security improvements.

P

Prandia Augustinum

prandia.at

42

Prandia Augustinum is a specialized food service provider focused on delivering fresh, regional, and biologically sourced meals primarily for the Campus Augustinum community in Graz, Austria. Their offerings include cafeteria and mensa services, school and kindergarten catering, event catering, and menu planning. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content in German. Technically, the site uses modern web technologies including UKit and Piwik PRO for analytics, with secure HTTPS and cookie consent mechanisms in place. Security posture is solid with secure forms and CSRF protection, though explicit security policies and incident response contacts are absent. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. The site is free from adult or questionable content, targeting a general audience including students, staff, and event organizers.

S

Star Casino Group

cecpraha.cz

64

Star Casino Group is a prominent operator of casino and gaming venues in the Czech Republic, boasting over 50 physical locations and an online casino platform. The company emphasizes fair play and has a long operational history exceeding 25 years. Their target audience is adults interested in gambling and casino entertainment. The website is professionally designed with good navigation and mobile optimization, leveraging modern JavaScript libraries and Google Maps integration for location services. Security-wise, the site enforces HTTPS, includes age verification, and manages cookie consent in compliance with GDPR. However, the absence of explicit privacy policy and terms of service pages, as well as missing WHOIS registration data, slightly detracts from overall trustworthiness. The company provides clear contact information and an ethical whistleblower program, indicating a commitment to compliance and corporate governance.

Ö

Österreichischer ReiseVerband

oerv.at

39

The Österreichischer ReiseVerband (ÖRV) is a well-established Austrian travel industry association representing major travel agencies, tour operators, and tourism companies. It serves as a neutral platform for industry networking, lobbying, and the development of future-oriented solutions. The website reflects a professional and consistent brand presence, targeting tourism professionals and stakeholders in Austria. Technically, the site is built on WordPress with modern plugins like Elementor and Rank Math SEO, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and GDPR-aligned cookie consent. Overall, the site is trustworthy and professionally maintained, supporting the association's mission effectively.

S

SACKA

sacka.eu

41

SACKA (Slovenská Asociácia Cestovných Kancelárií a Cestovných Agentúr) is a Slovak non-profit association representing travel agencies and tour operators. The organization focuses on supporting its members by providing industry news, legal guidance, consumer information, and advocacy to promote tourism development in Slovakia. The website serves as a portal for members and travelers, offering verification services, event calendars, and a free infoline. Technically, the website uses modern JavaScript libraries such as FullCalendar, Popper.js, and integrates Google Tag Manager and Smartsupp Live Chat for analytics and customer support. The site is hosted by WebSupport s.r.o., a known Slovak registrar and hosting provider. Security posture is good with HTTPS enforced, cookie consent implemented, and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit privacy policy and terms of service pages, as well as a security policy or vulnerability disclosure mechanism. Overall, the website is professional, trustworthy, and well-structured, serving its target audience effectively.

I

Italieonline s.r.o

ita.travel

36

Ita.travel is an established online travel agency specializing in holidays in Italy, offering a wide range of accommodations including apartments, hotels, and campsites. The company has been operating since 1997 and is a member of several reputable European travel associations, which enhances its market credibility. The website targets travelers interested in Italian destinations, providing services such as booking, travel insurance, and group trips. The business model focuses on direct online bookings with a strong emphasis on Italian holiday experiences. Technically, the website employs modern web standards including responsive design, WebP images, and JavaScript frameworks. It integrates Google Tag Manager and Google Analytics for marketing and analytics purposes, with a clear cookie consent mechanism indicating GDPR compliance. The site is well-structured with good SEO and accessibility features, providing a positive user experience across devices. From a security perspective, the site uses HTTPS and has a cookie consent banner, but lacks explicit security headers and incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is limited due to TLD restrictions, but the domain appears consistent with the business claims. Overall, the security posture is solid but could be improved with additional headers and published security policies. The overall risk assessment is low, with the website demonstrating professionalism, compliance, and trustworthiness. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and maintaining transparency in privacy practices to further strengthen user trust and security posture.

C

CEC Praha a.s.

starcasinoteplice.cz

9

Star Casino Teplice operates as a modern casino located in Teplice, Czech Republic, offering a variety of live casino games including American Roulette, Black Jack, and Poker, alongside Video Lottery Terminals (VLT) from multiple providers. The business targets adult customers seeking gambling entertainment with additional food and beverage services enhancing the experience. The website is professionally designed with clear navigation and mobile optimization, reflecting a medium-sized hospitality business with a local/regional market focus. Technically, the site uses modern JavaScript libraries and Google services, with HTTPS enforced and a GDPR-compliant cookie consent mechanism. However, the absence of a privacy policy page and security headers indicates room for improvement in compliance and security posture. The WHOIS data is missing, which raises concerns about domain registration transparency but does not necessarily indicate illegitimacy given the consistent business information and active social media presence. Overall, the site is functional, trustworthy, and suitable for its target audience but would benefit from enhanced security and compliance documentation.

C

CEC Praha a.s.

casinopalace.cz

9

Palace Casino, operated by CEC Praha a.s., is a regional casino located in Svatý Kříž, Czech Republic, offering a variety of live casino games including roulette, blackjack, and Texas Hold'em, alongside modern VLT slot machines and a bar serving drinks. The casino targets adult customers seeking entertainment and gambling experiences near the border crossing. The website is professionally designed with multimedia content, responsive layout, and clear navigation, reflecting a medium-sized hospitality business with a solid market position within a group of related casinos. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Slick carousel, and GSAP, with Google Fonts integration and cookie consent mechanisms. Security posture is good with HTTPS enforced and CSRF tokens present, but lacks explicit security headers and a dedicated privacy policy page. The WHOIS data is missing, which slightly reduces transparency and trustworthiness, but the presence of a valid Czech Ministry of Finance license and clear company information supports legitimacy. Overall, the site is compliant with GDPR cookie consent requirements and includes age verification to restrict access to adults only.

C

CEC Praha a.s.

starcasinogroup.cz

10

Star Casino Group is a well-established casino operator in the Czech Republic, managing over 50 physical casino locations and an online casino platform. The company emphasizes fair play and responsible gambling, supported by age verification and ethical whistleblowing channels. Their market position is strong regionally with a broad footprint across multiple cities. Technically, the website uses modern JavaScript libraries and Google services, providing a responsive and user-friendly experience. Security posture is generally good with HTTPS and cookie consent mechanisms, though explicit security headers are not detected and WHOIS transparency is lacking. Overall, the business appears legitimate and compliant with GDPR, but domain registration details should be verified for full trust.

C

CEC Praha a.s.

starcasinoplzen.cz

10

Star Casino Plzeň operates as a local casino in Plzeň, Czech Republic, offering live casino games and a variety of VLT machines with jackpots and bonuses. The business is part of the larger Star Casino Group managed by CEC Praha a.s., a registered company in Prague. The website targets adult customers with clear age verification and legal disclaimers about gambling risks. Technically, the site uses modern JavaScript libraries and fonts, with a responsive design and good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly documented. WHOIS data is unavailable, likely due to privacy protection, which is common in the gambling industry. Overall, the site presents a professional and trustworthy front for its business operations.

C

CEC Praha a.s.

starcasinopetrovice.cz

9

Star Casino Petrovice is a regional casino operator in the Czech Republic, offering live table games such as poker, blackjack, and roulette, alongside a wide selection of modern VLT slot machines. The casino operates 24/7 with free entry and is located conveniently next to a shopping center with parking. The business is operated by CEC Praha a.s., a registered company with licensing from the Czech Ministry of Finance. The website demonstrates a moderate level of digital maturity, using modern JavaScript libraries and multimedia content to engage visitors. Security measures include HTTPS, CSRF tokens, and age verification, but lack some advanced security headers and explicit privacy policy pages. Overall, the site is professional and trustworthy but would benefit from enhanced security and compliance documentation.

The website 'restauracevkapse.cz' represents Kukátko, a smart application designed to provide hospitality businesses with real-time insights into their operations including sales, costs, inventory, shifts, and reservations. The platform targets restaurant and hospitality operators in the Czech Republic, offering a SaaS model that facilitates mobile and desktop access to operational data. The site demonstrates a professional design with consistent branding and good content relevance, aimed at a niche market within the hospitality sector. Technically, the website employs modern technologies such as Google Tag Manager, Hotjar, Cookiebot for cookie consent, and is protected by Cloudflare. The site is mobile optimized and uses HTTPS with appropriate security headers, reflecting a good security posture. Analytics and tracking are implemented with user consent, indicating compliance with privacy regulations such as GDPR. Security-wise, the site shows strengths in HTTPS enforcement, cookie consent mechanisms, and use of reputable third-party services. However, there is a lack of explicit security policy and incident response contact information, which could be improved. The WHOIS data presents a significant anomaly with a domain creation date set in the future, which undermines trust and credibility despite the legitimate appearance of the website content. Overall, the website is functional, secure, and privacy compliant, but the suspicious WHOIS data and absence of direct contact information pose risks to business credibility. Strategic recommendations include clarifying domain registration details, adding comprehensive security and incident response policies, and publishing clear contact information to enhance trust and compliance.

Q

Qerko

gastropodnikroku.cz

55

Gastropodnikroku.cz is a Czech Republic-based online platform that hosts the largest public gastro survey in the country, allowing users to nominate and vote for their favorite gastronomy businesses such as restaurants, cafes, and bistros. The platform is operated by Qerko, a company specializing in payment solutions, which also acts as the parent company. The website is well-branded, mobile-optimized, and integrates modern web technologies including Webflow CMS, Google Tag Manager, Facebook Pixel, and Cookiebot for consent management. It features interactive forms protected by Cloudflare Turnstile captcha to prevent spam. However, the absence of a publicly accessible privacy policy and terms of service pages limits its compliance transparency. The WHOIS data for the domain is unavailable, which reduces trustworthiness from a domain registration perspective. The site includes multiple official partners and media collaborators, enhancing its credibility and market position in the hospitality sector.

S

Septim

septim.cz

67

Septim operates as a specialized provider of point-of-sale (POS) and management systems tailored for the restaurant and hospitality industry. The company emphasizes its comprehensive software capabilities that extend beyond simple cash registers to include financial, warehouse, and human resource management. Their clientele includes Michelin-starred restaurants, prominent restaurant chains, and renowned chefs, positioning Septim as a niche leader in the hospitality technology sector within the Czech Republic. The website content reflects a professional and focused business model targeting restaurant operators seeking integrated management solutions. Technically, the website is built on the solidpixels CMS platform and leverages modern web technologies including Google Tag Manager, Cookiebot for cookie consent management, and Cloudflare services for security and performance. The site is well-optimized for mobile devices and incorporates standard SEO and accessibility features, although some advanced security headers are not explicitly detected. The presence of multiple tracking and analytics tools indicates a moderate level of user data collection, balanced with GDPR-compliant cookie consent mechanisms. From a security perspective, the site enforces HTTPS and uses Cloudflare protections, but lacks visible security.txt files, vulnerability disclosures, or explicit security policies. The absence of WHOIS data due to privacy protection reduces transparency but is not uncommon for commercial entities. No critical vulnerabilities or security issues were detected in the accessible content. Overall, the security posture is solid but could be enhanced with additional headers and published policies. The overall risk assessment is moderate with a good balance of professionalism and technical maturity. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact information to improve trust and compliance. These steps will strengthen the company's digital presence and security culture while maintaining its strong market position in hospitality technology.

P

protel systems s.r.o.

protelsystems.cz

60

Protel Systems s.r.o. operates a professional hotel management software platform targeting Czech and Slovak hospitality businesses. The website presents a comprehensive suite of hotel management tools including PMS, online check-in/out, payment solutions, and housekeeping management, positioning itself as a trusted and established player in the regional market. The site is well-designed, mobile-optimized, and includes multiple customer testimonials and certifications, enhancing its credibility. Technically, the website leverages modern technologies such as Google Tag Manager, reCAPTCHA v3, and Cookiebot for privacy compliance, built on the Solidpixels CMS platform. The site demonstrates good SEO and accessibility practices, with fast loading and responsive design. Security measures include HTTPS enforcement, security headers, and spam protection on forms, though explicit security policies and incident response contacts are absent. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong with clear cookie consent and a detailed privacy policy. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency, which impacts overall trust. Overall, the website is professional and trustworthy from a business and technical perspective but would benefit from improved transparency in domain registration and explicit security governance documentation.

Messe Husum & Congress GmbH & Co. KG operates a professional event venue located in Husum, Germany, specializing in hosting trade fairs, conferences, private celebrations, and stage programs. The company holds a strong regional market position in Schleswig-Holstein, offering versatile spaces and modern facilities for events ranging from small meetings to large-scale exhibitions. Their website reflects a well-established business with clear branding and comprehensive service offerings targeting event organizers and private clients. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and DNSSEC are recommended. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website and business demonstrate professionalism and trustworthiness, with room for technical and security enhancements.

C

CEC Praha a.s.

starcasinopruhonice.cz

65

Star Casino Průhonice is a well-established casino located near Prague, Czech Republic, operated by CEC Praha a.s. The casino offers a wide range of gaming options including over 120 modern slot machines, live card games, and American roulette with low minimum bets. Additional amenities include a fully stocked bar, private parking, and a VIP shuttle service. The business targets adult customers interested in gambling and entertainment, positioning itself as a regional leader with multiple sister casinos. Technically, the website uses modern JavaScript libraries and CSS frameworks, providing a responsive and visually appealing user experience. Security posture is solid with HTTPS and GDPR-compliant cookie consent, though it lacks some advanced security headers and explicit privacy and terms of service pages. Overall, the site is professional and trustworthy, but the absence of WHOIS data reduces transparency. The content is adult-oriented due to gambling services and includes appropriate age verification and warnings.

A

Atlaseek

atlaseek.com

9

Atlaseek hub is a specialized online marketplace platform designed to connect travel destinations with travel creators and influencers to facilitate marketing collaborations. The platform targets travel brands and tourism marketing teams seeking to leverage influencer marketing to reach Gen Z and millennial travelers. It offers verified metrics, campaign management, and a travel calendar to streamline collaboration scheduling. Technically, the website uses modern JavaScript modules, Vue.js framework, Google Fonts, Stripe for pricing, and Google Tag Manager for analytics. The site is mobile optimized and presents a professional design with good user experience. Security posture is moderate with HTTPS likely enabled but lacks visible security headers and explicit privacy or cookie policies. No WHOIS data is available for the subdomain hub.atlaseek.com, which is typical for subdomains, but limits domain registration trust signals. Overall, the site is safe, professional, and credible within its niche but would benefit from improved privacy compliance and security best practices.

T

Travego Tour

travegotour.sk

43

Travego Tour is a Slovak-based travel company specializing in guided sightseeing tours primarily to Asia, Eastern Europe, and the Middle East. The company emphasizes a slow travel philosophy, offering authentic cultural experiences and group tours. The website reflects a niche market positioning with a focus on experiential travel, supported by clear contact information and comprehensive legal documentation. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Tag Manager, and tracking pixels, hosted likely by WebHouse with DNSSEC enabled, indicating good infrastructure maturity. Security posture is solid with HTTPS and DNSSEC, though some advanced HTTP security headers and a security.txt file are missing. Privacy compliance is well addressed with GDPR and cookie policies including consent mechanisms. Overall, the site is professional, trustworthy, and well-structured, with no signs of malicious activity or content safety concerns.

C

Congrex Switzerland

congrex.com

50

Congrex Switzerland is a well-established Professional Conference Organiser specializing in medical and scientific association conferences across Europe and internationally. The company offers a comprehensive suite of services including conference organisation, registration, hotel accommodation, association management, and strategic marketing and communication. Their website reflects a mature business with a medium-sized team and a strong market position in the hospitality sector. Technically, the website is built on WordPress using the Divi theme and several professional plugins, supporting multilingual content and modern web standards. Performance and mobile optimization are good, though accessibility could be improved. Security posture is adequate with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and security headers. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy but could enhance transparency and security practices.