Government security reports

Ú

Úřad městské části Praha 13

praha13.cz

61

The website www.praha13.cz serves as the official online presence of the municipal district Prague 13, providing residents and visitors with comprehensive information about local government services, news, events, and contact details. It positions itself as a trusted source for public administration and community engagement within the Prague 13 district. The site offers a variety of services including document downloads, appointment scheduling, legal assistance, and access to municipal departments. The target audience primarily consists of local citizens and stakeholders interested in municipal affairs. Technically, the website is built on WordPress CMS, enhanced with SEO plugins like Yoast and integrated with Google Tag Manager for analytics. It employs modern web technologies and demonstrates good mobile responsiveness and accessibility. The presence of a virtual assistant chatbot and cookie consent mechanisms indicates a focus on user experience and privacy compliance. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers in the provided data. No vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie consent are implemented, supporting GDPR compliance. However, the absence of WHOIS registration data limits domain trust verification, although the official nature and consistent branding of the site mitigate concerns. Overall, the website reflects a mature digital infrastructure suitable for a government entity, with room for improvement in security header implementation and domain registration transparency. The risk profile is low, with no critical security issues identified.

M

MGP

mgp.fr

61

MGP is a French mutual insurance organization specializing in providing health and social protection services to agents of the Ministry of the Interior and various security forces including police, administration, penitentiary, customs, and private security. The website demonstrates a strong market position as an official partner for the Ministry of the Interior's complementary health insurance starting in 2026. The business model is based on mutual aid principles without profit motives, focusing on tailored insurance offers and prevention actions. Technically, the site uses modern CMS (Jahia), integrates advanced analytics (Piwik PRO), and live chat support (LivePerson), ensuring a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS, security headers, and consent management for cookies, although explicit security policy and incident response contacts are not found. The domain WHOIS data is not publicly available, likely due to privacy protection, but the website's professionalism and certifications support its legitimacy. Overall, MGP's digital presence is professional, secure, and compliant with privacy regulations, serving a specialized government-related audience effectively.

M

Město Kravaře

kravare.cz

47

Město Kravaře operates an official municipal website serving the residents and visitors of the town Kravaře in the Czech Republic. The site provides comprehensive information including news, event calendars, municipal services, and contact details. It targets local citizens, tourists, and public officials, positioning itself as a trusted source for local government communication and services. The business model is public service with a focus on community engagement and information dissemination. Technically, the website uses a combination of jQuery, Bootstrap, Swiper.js, and other JavaScript libraries, likely running on a custom or specialized CMS platform (GCM CMS). The site is mobile-optimized with good navigation and content structure, though performance is moderate. Accessibility is basic and SEO practices are adequately implemented. From a security perspective, HTTPS is enforced and a cookie consent mechanism is present, indicating awareness of privacy regulations. However, no explicit security headers or incident response policies are publicly visible, and WHOIS data is missing, which raises some concerns about domain registration transparency. No vulnerabilities or malicious content were detected. Overall, the website is professional, trustworthy, and serves its purpose well. The main risks relate to the lack of WHOIS transparency and potential improvements in security headers and policies. Strategic recommendations include enhancing security posture, publishing incident response information, and verifying domain registration details to increase trust.

E

E-marchespublics : Appel d'offre public et dématérialisation des marchés publics

e-marchespublics.com

50

The website www.e-marchespublics.com is a French-language platform specializing in public tenders and the digital dematerialization of public procurement processes. It targets enterprises and public sector buyers in France, offering services such as access to over 600,000 public tenders annually, secure electronic submission of offers, alerts, and automatic form filling. The platform is positioned as a key player in the French public procurement market, providing comprehensive access to tender documents and related services. Technically, the site employs modern web technologies including Google Tag Manager, Didomi Consent Management Platform, Bootstrap, and jQuery UI, ensuring a responsive and user-friendly experience. Security-wise, the site enforces HTTPS and integrates consent management for GDPR compliance, although explicit privacy and security policy pages are not detected. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the website content and service offerings appear professional and legitimate. Overall, the site demonstrates a moderate to good security posture with room for improvement in publishing security policies and enhancing security headers.

Den Nationale Whistleblowerordning is a Danish government-operated whistleblower reporting platform managed by Datatilsynet. It provides a secure channel for employees and partners to report serious legal violations and other critical issues encountered in their work environment. The service is positioned as a national authority resource, offering guidance, protection, and multiple reporting methods including anonymous submissions. The website is primarily in Danish with some English support, targeting whistleblowers within Denmark's jurisdiction. Technically, the website is built on ASP.NET Web Forms with jQuery and standard web technologies. It demonstrates good mobile optimization, accessibility, and SEO practices. The site uses HTTPS but lacks advanced security headers and DNSSEC, indicating room for security enhancements. No advertising or tracking technologies are present, aligning with its government service nature. From a security perspective, the site enforces HTTPS and uses secure form handling but does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is supported by a privacy and cookie policy, though no explicit cookie consent mechanism is implemented. Contact information is clearly provided, enhancing trust and credibility. Overall, the website is a trustworthy, professional government platform with a solid technical foundation and good content quality. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen its security posture and compliance.

O

Obec Pasohlávky

pasohlavky.cz

62

Obec Pasohlávky is the official municipal website for the village of Pasohlávky in the Czech Republic, serving both residents and tourists. The site provides essential local government information, event calendars, news updates, and tourist services. It positions itself as a trusted source for community engagement and local tourism promotion. The website is professionally designed with consistent branding and clear navigation, targeting a general audience interested in municipal services and regional tourism. Technically, the site is built on ASP.NET Web Forms with modern JavaScript libraries such as jQuery and Swiper.js for UI components. It uses HTTPS and integrates Google Analytics for visitor tracking. The site is moderately optimized for performance and mobile devices, though accessibility features are basic. There is no detected CMS, and hosting details are not explicit. From a security perspective, the site employs HTTPS and secure form handling but lacks advanced security headers and a cookie consent mechanism, which are recommended for GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces domain trustworthiness, but the website content and official nature suggest legitimacy. Overall, the website is a functional and professional municipal portal with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing a security policy, and verifying domain registration details to strengthen trust and compliance.

M

Mikulovská rozvojová s.r.o.

mikulovskarozvojova.cz

45

Mikulovská rozvojová s.r.o. is a municipally owned company founded in 2006, serving as a key organizer and promoter of cultural, wine, and social events in Mikulov, Czech Republic. The company also manages municipal assets such as the city cinema, pension, and amphitheater, providing venue rentals and advertising services. Their market position is primarily local and regional, focusing on cultural and hospitality sectors. The website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the site is built on Joomla CMS with UIkit and jQuery frameworks, and uses Google Analytics and Tag Manager for tracking. The site is mobile optimized and performs moderately well.

D

Datatilsynet

datatilsynet.dk

71

Datatilsynet is the central independent Danish authority responsible for supervising compliance with data protection regulations, including GDPR. The organization provides guidance, handles complaints, and conducts oversight of public authorities and businesses. Positioned as a government regulatory body, Datatilsynet serves a broad audience including companies, citizens, and youth, emphasizing responsible data use in a digital society. The website reflects a professional and authoritative presence with comprehensive content tailored to various stakeholders. Technically, the site is built on a custom ASP.NET platform with jQuery and modern web standards, delivering good performance and accessibility. Security posture is solid with HTTPS usage and no visible vulnerabilities, though security headers and explicit incident response policies could be improved. Overall, the site demonstrates strong business credibility and compliance focus, with minor gaps in cookie consent mechanisms and vulnerability disclosure. The WHOIS data is unavailable, likely due to privacy protection common in .dk domains, but the domain and content strongly indicate legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and implementing cookie consent to further strengthen compliance and trust.

A

Archiv der Hansestadt Wismar

zeitreise-wismar.de

65

Zeitreise Wismar is a specialized historical archive portal affiliated with the Hansestadt Wismar city archive. It provides extensive access to historical documents, city views, newspapers, and cultural heritage information primarily targeting local residents, historians, and visitors interested in Wismar's history. The website is built on a modern WordPress infrastructure using Astra theme and Elementor page builder, hosted by Raidboxes, indicating a stable and professional technical foundation. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security policies and vulnerability disclosure information. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the site is trustworthy and professionally presented, serving a niche educational and governmental function.

Z

Zentrale Stelle Rettungsdienst AöR

zsr-sh.de

58

The Zentrale Stelle Rettungsdienst AöR (ZSR AöR) is a government entity established in 2023 to centralize and ensure quality assurance in emergency medical services across Schleswig-Holstein, Germany. The organization focuses on collecting and analyzing standardized data from rescue services to improve structural, process, and outcome quality. The website reflects this mission with professional content, clear navigation, and relevant information targeted at rescue service providers and government stakeholders. Technically, the site is built on WordPress with modern plugins for cookie consent and basicBlocks for layout, hosted under a reputable registrar with DNS hosted on cloudpit domains. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and DNSSEC are missing. Privacy compliance is well addressed with a comprehensive privacy policy and cookie banner. No incident response or security policy information is published, which could be improved. Overall, the site is trustworthy, professional, and serves its governmental function effectively.

K

Kooperative Regionalleitstelle Nord

leitstelle-nord.de

55

Kooperative Regionalleitstelle Nord is a regional emergency coordination center serving the districts of Nordfriesland, Schleswig-Flensburg, and the city of Flensburg in Germany. Founded in 2009, it provides critical emergency dispatch and coordination services to local residents and emergency responders. The website reflects a government-oriented public service entity with a clear focus on regional emergency management. The organization maintains a consistent brand presence and provides clear contact information, including email, phone, and physical address, supporting its credibility and trustworthiness. Technically, the website is built on WordPress using modern plugins such as Elementor and accessibility tools, with integration of Google Fonts and FontAwesome. It employs HTTPS for secure communication and uses Google Analytics for visitor tracking, although it lacks visible cookie consent mechanisms and privacy policy disclosures. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured data markup. From a security perspective, the site has a good SSL configuration but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the organization's claims, showing domain registration since 2009, aligning with the founding date. Overall, the website presents a professional and trustworthy digital presence for a government emergency coordination entity, with recommendations to improve privacy compliance and security header implementation to enhance user trust and regulatory adherence.

N

NordAllianz Metropolregion München Nord

nordallianz.de

45

NordAllianz Metropolregion München Nord is an inter-municipal alliance focused on strategic regional development in the Munich North metropolitan area. The organization promotes economic growth, scientific advancement, housing, environmental sustainability, and mobility projects collaboratively among member municipalities. The website is built on WordPress using the Avada theme and several plugins, indicating a moderate level of technical maturity. The site is accessible, mobile-optimized, and uses HTTPS, but lacks comprehensive privacy and cookie policies, as well as explicit contact information. Security posture is adequate with HTTPS but could be improved by adding security headers and incident response details. Overall, the site reflects a legitimate regional government entity with room for improvement in privacy compliance and security transparency.

S

Stadtarchiv Garching

stadtarchiv-garching.de

47

Stadtarchiv Garching operates as a municipal archive providing historical sources, publications, and projects related to the city of Garching. The website serves as an informational portal targeting historians, local citizens, and researchers interested in local history. Technically, the site is built on WordPress with a modern theme and plugins, hosted on a reputable provider, and shows good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced but lacks advanced security headers and cookie consent mechanisms. Overall, the site is trustworthy and professionally maintained, though improvements in privacy compliance and security policies are recommended.

B

Bürgerhaus Garching / Kultur Garching

kultur-garching.de

51

The website www.kultur-garching.de serves as the official cultural portal for the town of Garching, Germany, providing comprehensive information about local cultural events, ticket sales, and related services. It targets local residents and visitors interested in cultural activities, positioning itself as a key local cultural institution with a focus on event promotion and community engagement. The business model is primarily public service oriented, supported by partnerships with established ticketing platforms such as Münchenticket. Technically, the site is built on the EGOTEC CMS platform, leveraging modern JavaScript frameworks like Angular and libraries such as jQuery and Slick Carousel for interactive features. Hosting is provided by SchlundTech, a reputable German hosting provider, ensuring stable and localized infrastructure. Security posture is adequate with HTTPS enforced and email obfuscation implemented, but lacks advanced security headers and explicit vulnerability disclosure mechanisms. Privacy compliance is supported by a comprehensive GDPR-compliant privacy policy, though cookie consent mechanisms are absent. Overall, the site demonstrates good content quality, usability, and trustworthiness appropriate for a government cultural service portal.

U

Universitätsstadt Garching b. München

karriere-garching.de

57

The website karriere-garching.de serves as the official career portal for the city of Garching b. München, Germany. It provides comprehensive information about job opportunities, benefits, training, and working conditions within the municipal government. The portal targets job seekers interested in public sector employment and offers a secure and stable work environment with various employee benefits. The site is well-branded with official city logos and links to the main city homepage, reinforcing its legitimacy and trustworthiness. From a technical perspective, the website employs modern web technologies including JavaScript, CSS, and Google Fonts, and is hosted on infrastructure linked to resellerinterface.de. It uses HTTPS with an excellent SSL configuration and implements a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and features good SEO practices, although some security headers could be improved. Security posture is solid with no visible vulnerabilities or exposed sensitive data. The site uses Matomo analytics for user tracking with moderate tracking levels and respects user privacy through consent banners. However, explicit security policies and incident response contacts are not published, which could be enhanced to improve transparency and trust. Overall, the website presents a professional and trustworthy digital presence for the city’s employment services. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and providing clearer contact information for security and privacy concerns.

G

Girona Softwareentwicklung GmbH

konsentas.de

49

Konsentas.de is a professional website operated by Girona Softwareentwicklung GmbH offering a modular online appointment scheduling system tailored for German government authorities. The platform supports various public sector applications including resident registration, health offices, vehicle registration, and COVID-19 related tools. The website demonstrates a solid market position with multiple municipal clients and a clear focus on e-government digital transformation. Technically, the site uses modern front-end technologies such as Bootstrap, jQuery, and Google Fonts, and integrates Google Analytics and LinkedIn tracking for marketing insights. The site is mobile-optimized and well-structured, providing a good user experience. Security posture is moderate with cookie consent implemented but lacking explicit security headers and published security policies. WHOIS data aligns with the business identity, indicating legitimacy. Overall, the website is trustworthy and professionally maintained, suitable for its target audience.

A

Advantic Systemhaus GmbH

husum.org

45

The website www.husum.org serves as the official municipal portal for the city of Husum, Germany. It provides information on tourism, local economy, municipal services, and community resources. The site is primarily targeted at residents, tourists, and local businesses, offering essential public information and links to city services. The business model is that of a government entity providing public service information, with Advantic Systemhaus GmbH credited as the author and publisher of the site content. From a technical perspective, the site employs a modest technology stack including jQuery 1.10.2, Flexslider, and Slicknav for UI components, with a likely proprietary CMS (IKISS). The site shows basic mobile optimization and SEO practices but uses somewhat outdated libraries and lacks advanced accessibility features. Performance is moderate, with no evident advanced hosting or platform details. Security posture is limited based on the provided data. There is no explicit evidence of HTTPS enforcement or security headers, and no visible cookie consent mechanism despite GDPR applicability. The WHOIS data is unavailable due to a malformed query response, which reduces trust in domain registration transparency. No contact emails or phone numbers are listed on the homepage, and no incident response or security policies are published. Overall, the site is functional and trustworthy as a government information portal but would benefit from improved security practices, updated technical components, and enhanced privacy compliance measures. The lack of WHOIS data and security headers are notable gaps that should be addressed to improve trust and security posture.

S

schweitzer media gmbh

wir-lieben-recycling.de

48

Wir lieben Recycling is a German regional environmental campaign website focused on educating the public about proper waste separation and recycling processes. It provides educational materials, news updates, and organizes events such as a video contest to engage the community. The website is professionally designed, mobile-optimized, and uses WordPress CMS with modern front-end technologies including jQuery and slick sliders. It integrates Usercentrics for GDPR-compliant consent management and uses Google Analytics with IP anonymization to track user engagement minimally. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not published. The domain is hosted by Timme Hosting and WHOIS data shows no suspicious patterns, indicating legitimacy. Overall, the site is a trustworthy, well-maintained resource for environmental education in Schleswig-Holstein, Germany.

M

Ministarstvo unutarnjih poslova Republike Hrvatske

mup.hr

10

The Ministry of the Interior of the Republic of Croatia operates the official government website mup.gov.hr, providing authoritative information and services related to internal affairs, police operations, and citizen support. The website serves a broad audience including Croatian citizens, residents, media, and international visitors seeking official updates and resources. It maintains a strong market position as the primary government entity responsible for internal security and public safety in Croatia. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, Facebook Pixel, and JavaScript libraries such as Galleria and Fancybox for enhanced user experience. The site is mobile-optimized and accessible, with a clear navigation structure and professional design. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. From a security perspective, the site enforces HTTPS and uses tracking consent banners, but lacks visible security headers in the HTML source. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is due to GDPR privacy protections, which is typical for government domains. Overall, the domain and website exhibit high legitimacy and trustworthiness. The overall risk assessment is low, with recommendations to enhance security headers, publish a formal security policy, and consider a vulnerability disclosure mechanism to further strengthen security posture and transparency.

Z

Zagrebačka županija

zagrebacka-zupanija.hr

10

Zagrebačka županija is the official regional government entity for the Zagreb County in Croatia, providing a comprehensive digital platform for public information, news, tenders, and administrative transparency. The website serves residents, businesses, students, and stakeholders with timely updates and access to official documents and services. The site maintains a consistent brand identity and includes social media integration to enhance public engagement. Technically, the website employs modern JavaScript libraries such as jQuery and PhotoSwipe, uses Google Fonts, and implements a cookie consent mechanism with anonymized Google Analytics tracking. Accessibility features are thoughtfully integrated, improving usability for diverse users. Security posture is moderate with HTTPS implied and cookie consent in place, but lacks explicit security headers and incident response information. The domain is well-established since 2001, registered with the Croatian academic network registrar CARNET, reinforcing legitimacy. Overall, the site is professional, trustworthy, and serves its government function effectively.

A

Interreg ADRION Programme – Interreg ADRION Transnational Adriatic-Ionian Cooperation Programme EU

adrioninterreg.eu

8

The website represents the Interreg ADRION Programme, an EU-funded transnational cooperation initiative focused on the Adriatic-Ionian region. It serves as an informational portal providing resources, news, and project documentation to stakeholders and public sector entities involved in regional cooperation. The site is built on WordPress using the Enfold theme and includes standard web technologies such as jQuery and Google Fonts. The technical infrastructure is moderate in performance and mobile optimized, but lacks advanced security headers and privacy compliance features. No WHOIS registrant data is publicly available due to EURid's privacy policies for .eu domains, which limits domain trust analysis. Overall, the site appears legitimate and safe but would benefit from enhanced security and privacy practices.

M

Ministarstvo gospodarstva

szp.hr

52

The website szp.hr is the official Croatian government consumer protection portal managed by the Ministry of Economy (Ministarstvo gospodarstva). It provides comprehensive information and guidance on consumer rights, dispute resolution, public service complaints, and relevant legislation. The portal targets Croatian consumers and serves as a central resource for consumer protection issues. Technically, the site is built on ASP.NET Web Forms, uses Bootstrap icons, and is hosted by CARNET, a reputable Croatian academic network. The site is mobile-optimized and accessible, with clear navigation and professional design. Security posture is good with HTTPS enforced and no exposed sensitive data, though security headers are not explicitly visible. Privacy and cookie policies are not found, indicating a compliance gap. Contact information is clearly provided with official emails and phone numbers. Overall, the domain registration and website content align well, indicating high legitimacy and trustworthiness.

H

Hrvatski zavod za mirovinsko osiguranje

mirovinsko.hr

64

Hrvatski zavod za mirovinsko osiguranje (HZMO) is a Croatian government public institution responsible for managing the pension insurance system. Established by law in 2001, it serves employees, agricultural workers, craftsmen, and other insured persons by administering pension rights and benefits based on generational solidarity. The website provides comprehensive information about pensions, child allowances, insurance registrations, and electronic services, targeting Croatian residents and pensioners. It holds a strong market position as the official national pension authority with a large organizational size and a well-established digital presence. The site is professionally designed with consistent branding and clear navigation, supporting multiple languages and accessibility features.

B

Meine Onlineanträge - Behörden-Serviceportal

behoerden-serviceportal.de

48

The website www.behoerden-serviceportal.de is a German government service portal designed to provide citizens and businesses with digital access to administrative services and online applications. The portal aims to facilitate 24/7 access to government services, enhancing convenience and efficiency for its target audience. The site is hosted on Deutsche Telekom infrastructure, indicating a reliable hosting environment appropriate for government operations. The technical infrastructure employs modern web technologies including Duet Web Components, ensuring mobile optimization and a good user experience. However, SEO is limited due to the robots meta tag set to noindex, nofollow, which restricts search engine indexing. Security posture is weak as no security headers or explicit security policies are detected, and privacy compliance is minimal with no visible privacy or cookie policies. The domain registration data aligns with the expected hosting and business profile, supporting legitimacy. Overall, the site is functional and professional but requires improvements in security, privacy compliance, and SEO to enhance trust and visibility.

O

OWL-IT

owl-it.de

65

OWL-IT is a regional IT service provider specializing in digital transformation solutions for public sector organizations in Germany. The company offers a range of IT services including data center operations, document management, financial and personnel management solutions, and citizen service digitalization. Their website reflects a professional and user-friendly design, targeting government entities and municipalities with tailored IT solutions to enhance administrative efficiency and security. Technically, the site employs modern JavaScript libraries such as jQuery and Splide.js, and is hosted on infrastructure likely provided by Deutsche Telekom, indicating a stable and professional hosting environment. Security-wise, the website implements GDPR-compliant cookie consent mechanisms and maintains privacy policies, but lacks explicit security policies or incident response contacts. No WAF or blocking mechanisms were detected, and no vulnerabilities or exposed sensitive data were found in the content. Overall, the site demonstrates a good security posture with room for improvement in publishing security policies and enhancing HTTP security headers.

B

Bundesagentur für Arbeit

mein-beruf.de

62

The website 'meinBERUF' is an official portal operated by the Bundesagentur für Arbeit, Germany's Federal Employment Agency. It provides comprehensive career guidance, educational resources, and application support for users seeking information on training, study, and job applications. The portal is well-positioned as a national government service with a clear focus on assisting citizens in their professional development. Technically, the site leverages modern web technologies including React and Next.js, ensuring a fast, mobile-optimized, and accessible user experience. The use of Matomo analytics reflects a commitment to privacy-conscious data collection. The site is hosted on reliable infrastructure with secure DNS and HTTPS configurations. From a security perspective, the website demonstrates strong practices such as HTTPS enforcement, security headers, and cookie consent mechanisms. However, explicit security policies and incident response contacts are not prominently published, representing an area for improvement. No vulnerabilities or suspicious activities were detected. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR and other privacy standards. It serves its target audience effectively with high-quality content and clear navigation. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure mechanisms, and enhancing transparency around data retention.

C

Cambra de Comerç de Terrassa

cambraterrassa.org

10

Cambra de Comerç de Terrassa is a regional chamber of commerce focused on supporting economic development and business growth in the Terrassa region of Spain. The website presents a professional and consistent brand image, offering business support services and entrepreneurial development initiatives. The target audience primarily includes local businesses and entrepreneurs seeking economic development assistance. The business model revolves around providing services and support to foster regional economic growth. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, supplemented by WooCommerce for e-commerce capabilities. It integrates several analytics and marketing tools including Matomo, Google Tag Manager, Hotjar, and LinkedIn Insight. The site is hosted by Entorno Digital, S.A., with a domain registered since 2005, indicating a mature and stable online presence. Performance and mobile optimization are good, with basic accessibility and SEO optimizations in place. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, alongside a GDPR-compliant cookie consent mechanism. However, explicit security headers and a published security policy or incident response contact are absent, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with no explicit privacy policy or terms of service found in the analyzed content. Overall, the website is trustworthy and professional, with a solid business credibility score. The main risks relate to the absence of explicit security policies and limited contact information. Strategic recommendations include enhancing security headers, publishing a security and privacy policy, and providing clear contact channels for security incidents to improve trust and compliance.

C

Cambra de Comerç de Barcelona

cambrabcn.org

10

Cambra de Comerç de Barcelona is a well-established chamber of commerce serving the business community in Barcelona and Catalonia. Founded in 2001, it operates as a non-profit organization providing business support, training, networking, and advocacy services. The website reflects a professional and consistent brand image targeting local businesses and entrepreneurs. The organization maintains a strong market position as a key regional business entity. Technically, the website is built on WordPress with modern plugins such as Gravity Forms, WooCommerce, and Yoast SEO, indicating a mature digital infrastructure. The site is moderately performant, mobile-optimized, and includes standard SEO and accessibility features. Hosting is provided by Nominalia Internet SL, a reputable registrar and hosting provider. From a security perspective, the site enforces HTTPS, uses security headers, and integrates Google reCAPTCHA to protect forms. However, DNSSEC is not enabled, and there is no publicly available security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy, professional, and secure with minor areas for improvement in security transparency and DNS security. The domain registration data supports the legitimacy and long-standing presence of the organization.

B

Bundesagentur für Arbeit

berufe.tv

64

The website 'BERUFE.TV' is an official career and education video portal operated by the Bundesagentur für Arbeit, the German Federal Employment Agency. It serves as a government platform providing multimedia content to assist individuals interested in professions, training, and studies. The site offers categorized video content, links to related career services, and personal counseling options, positioning itself as a trusted resource in the German employment and education sector. The target audience includes students, job seekers, and those exploring career options in Germany. Technically, the website is built using modern web technologies including Angular framework, custom web components, and Piwik analytics for user tracking. The site is mobile-optimized, accessible, and employs HTTPS for secure communications. While performance is moderate, the site demonstrates good SEO and accessibility practices. However, explicit privacy and terms of service policies are not directly linked on the main page, which could be improved. From a security perspective, the site uses HTTPS and OAuth components for authentication, and includes a cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. Security headers are not explicitly visible in the provided data, and no vulnerability disclosure or security policy pages were found. The WHOIS data aligns with the official government entity, indicating high legitimacy and trustworthiness. Overall, the website is a professionally maintained government resource with good content quality and technical implementation. Strategic improvements include publishing clear privacy and security policies, enhancing security headers, and providing vulnerability disclosure information to strengthen compliance and user trust.

The Major Cities Public Finance Project website serves as an academic and governmental platform focused on the comparative study of financing major cities internationally. It is affiliated with reputable institutions such as Fundació Carles Pi i Sunyer, the Barcelona City Council, and Universitat Pompeu Fabra, indicating a non-profit research orientation. The site provides informational content and an interactive map (using deprecated Flash technology) to support its mission of fostering information exchange among participating cities. Technically, the website is basic and outdated, relying on legacy Flash content and lacking modern web development practices such as mobile responsiveness and accessibility features. There is no evidence of HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating low digital maturity and compliance with current web standards. From a security perspective, the site shows weaknesses including the use of deprecated technologies and absence of visible security best practices. The malformed WHOIS data limits the ability to verify domain legitimacy fully, although the external links to credible institutions lend some trust. No contact information or incident response channels are provided, which reduces transparency and user trust. Overall, the website is functional for informational purposes but requires significant modernization and security improvements to meet current standards and enhance trustworthiness.

M

MAS Radbuza

mas-radbuza.cz

41

MAS Radbuza is a Czech local action group focused on community-led local development across 52 municipalities in the Plzeň region. The organization manages EU grant distribution through multiple operational programs and supports local education projects, GDPR compliance services, and cultural initiatives. The website is built on WordPress with a moderate technical stack including Bootstrap and jQuery, and uses Google reCAPTCHA for form security. While the site is accessible and well-structured, it lacks some modern security headers and cookie consent mechanisms. WHOIS data is unavailable, which slightly reduces trustworthiness, but the presence of partner logos and EU funding references supports legitimacy. Overall, the site demonstrates a good balance of content quality and technical implementation with room for security and privacy improvements.

F

Fundació Carles Pi i Sunyer d'estudis autonòmics i locals

pisunyer.org

57

Fundació Carles Pi i Sunyer d'estudis autonòmics i locals is a well-established non-profit academic foundation focused on research and promotion of knowledge in local government and autonomous communities in Spain. Founded in 1986, it serves an audience of academics, researchers, and local government professionals through research projects, publications, and archival resources. The website reflects a consistent and professional brand with clear navigation and relevant content primarily in Catalan. Technically, the site uses legacy technologies such as jQuery 1.10.2 and Google reCAPTCHA for form security. Hosting and DNS are managed through reputable providers, but the absence of DNSSEC and outdated libraries present moderate technical risks. The site is moderately optimized for mobile and accessibility, with good SEO practices. Security posture is moderate with HTTPS enforced and clientTransferProhibited domain status, but lacks modern security headers and uses an outdated JavaScript library with known vulnerabilities. No formal security or incident response policies are published. Privacy compliance is basic with a privacy/legal notice present but no cookie consent mechanism detected. Overall, the website is trustworthy and professional but would benefit from technical and security updates to improve resilience and compliance. Strategic improvements in security headers, library updates, and privacy mechanisms are recommended to enhance the security posture and user trust.

F

Federació de Municipis de Catalunya

fmc.cat

59

Federació de Municipis de Catalunya is a well-established non-profit association founded in 2006, representing municipalities and local entities in Catalonia, Spain. The organization focuses on defending and promoting local autonomy, providing training, information, and various services to its members. The website reflects a professional and consistent brand image with clear contact information and active social media presence, positioning it as a trusted regional federation in the government sector. Technically, the website is built on ASP.NET with modern front-end technologies including Bootstrap 5 and jQuery. It uses Google Analytics for visitor tracking and implements a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and demonstrates good SEO and accessibility basics, although some improvements in security headers and accessibility could be made. From a security perspective, the site uses HTTPS with a good SSL configuration and avoids exposing sensitive data. However, it lacks explicit security policies and incident response contact information. The WHOIS data confirms the domain's legitimacy and consistency with the organization's claims, enhancing trustworthiness. Overall, the website is secure, compliant, and professionally maintained, suitable for its target audience of local government entities. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen its security posture and user experience.

Č

Český hokej

ceskyhokej.cz

48

Český hokej is the official national ice hockey federation of the Czech Republic, providing comprehensive information, news, and services related to Czech ice hockey. The website serves a broad audience including fans, players, coaches, referees, and other stakeholders, offering news updates, team details, ticket sales, fan engagement zones, and an official merchandise shop. The domain is well-established since 2001, reflecting a mature and authoritative presence in the sports sector. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and integrates analytics tools like Google Tag Manager and Facebook Pixel, ensuring good performance and user experience across devices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit privacy and security policies are not found in the provided content. Overall, the site demonstrates high professionalism, consistent branding, and trustworthy digital presence, with room for improvement in explicit privacy disclosures and contact information visibility.

T

Technické služby Velké Popovice, příspěvková organizace

tsvp.cz

57

Technické služby Velké Popovice is a municipal service organization providing essential technical and environmental services to the local community of Velké Popovice, Czech Republic. Their offerings include sewer cleaning, waste collection, water supply, and sewage management. The website serves as an information portal for residents, providing updates, service announcements, and contact details. The organization operates as a public entity, likely funded by local government and service fees, positioning itself as a key local utility provider. Technically, the website is built on the Webnode CMS platform, utilizing Cloudfront CDN for content delivery and Google Analytics for visitor tracking with IP anonymization enabled. The site is accessible, with a moderate performance profile and basic mobile optimization. However, it lacks advanced SEO and accessibility features. No blocking or WAF mechanisms were detected, indicating open access. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information suggest legitimacy. Overall, the security posture is moderate but could be improved with better compliance and security controls. The overall risk is moderate with recommendations to implement privacy and cookie policies, add security headers, and verify domain registration details. Enhancing compliance and security transparency will improve trust and reduce potential risks.

O

Obecní úřad Velké Popovice

velkepopovice.cz

47

Velké Popovice's official municipal website serves as a comprehensive portal for local residents and visitors, providing essential information such as public notices, contact details, event calendars, and citizen services. The site is positioned as a trusted local government resource with a clear focus on community engagement and transparency. Technically, the website employs a modern CMS (vismo), uses HTTPS, integrates Google Analytics with consent management, and includes accessibility and mobile optimization features. Security measures include the use of Google reCAPTCHA on forms and cookie consent banners, though explicit security policies and headers could be improved. The absence of WHOIS data limits domain trust assessment, but the website's content and contact information strongly indicate legitimacy. Overall, the site is well-maintained, user-friendly, and compliant with privacy regulations, making it a reliable digital presence for the municipality.

S

Statutární město Děčín

mmdecin.cz

51

The website www.mmdecin.cz serves as the official web portal for the statutory city of Děčín in the Czech Republic. It provides municipal information, public service announcements, and downloadable documents for residents and visitors. The site is positioned as a government entity portal with a focus on local governance and community services. The target audience primarily includes city residents and stakeholders interested in municipal affairs. Technically, the website is built on the Joomla CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and Font Awesome. It incorporates Google reCAPTCHA for form security and implements a cookie consent mechanism, indicating awareness of privacy regulations such as GDPR. The site demonstrates moderate performance and good mobile optimization, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks visible security headers and does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data is likely due to privacy protection, which is common and justifiable for government domains. Overall, the website presents a professional and trustworthy front for the city government, with room for improvement in privacy policy transparency, security header implementation, and accessibility compliance. The risk level is low, but strategic enhancements in security posture and compliance documentation are recommended.

Č

České priority, z. ú.

ceskepriority.cz

67

České priority is a Czech non-profit think tank dedicated to supporting informed decision-making in public policy by integrating scientific knowledge and quality analysis. The organization collaborates with public administration, academic, non-profit, and research sectors to conduct research, provide support, and propose systemic changes. Their portfolio includes projects such as foresight, forecasting for policy (FORPOL), and strengthening analytical capacities in government. The website reflects a professional and consistent brand image with clear navigation and relevant content targeted at stakeholders in public policy and governance. Technically, the website is built on the Solidpixels CMS platform, utilizing modern JavaScript libraries and frameworks such as Swiper, Fancybox, and AOS for enhanced user experience. The site is mobile-optimized and employs HTTPS with good SSL configuration, though it lacks some security headers that could further harden its security posture. Cookie consent mechanisms are implemented, indicating awareness of privacy compliance, although explicit privacy and terms of service pages are not found. From a security perspective, the site demonstrates good practices with HTTPS and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and vulnerability disclosure information suggests room for improvement. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is understandable for a non-profit entity. Overall, the site is trustworthy, professional, and serves its informational purpose effectively.

T

Technická správa komunikací hlavního města Prahy, a.s.

zpspraha.cz

56

The website parking.praha.eu serves as the official portal for parking options in Prague, managed by Technická správa komunikací hlavního města Prahy, a.s., a government-affiliated entity. It provides comprehensive information on short-term, long-term, and special parking options, including online payment services and permit management. The site targets residents, visitors, and business owners in Prague, positioning itself as the authoritative source for parking-related services in the city. Technically, the website is built on WordPress 6.8.2 with modern JavaScript libraries such as jQuery and ApexCharts for interactive content. SEO is well implemented using Yoast SEO, and the site is mobile-optimized with responsive design. Cookie consent mechanisms and privacy policies are in place, reflecting good digital maturity and GDPR compliance. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks explicit security headers like Content-Security-Policy or X-Frame-Options. No visible vulnerabilities or exposed sensitive data were detected. The absence of explicit incident response or vulnerability disclosure pages suggests room for improvement in security transparency. Overall, the website presents a professional, trustworthy, and user-friendly interface with strong business credibility. The domain is privacy-protected under EURid, which is justified given the government affiliation. The site is safe for general audiences and free from adult or questionable content.

R

Regionalpark Rosengarten e.V.

regionalpark-rosengarten.de

48

Regionalpark Rosengarten e.V. is a small non-profit organization focused on promoting regional development and tourism in the northern part of the Lüneburger Heide near Hamburg, Germany. The website serves as an information hub for leisure activities, regional projects, and barrier-free tourism, targeting tourists, local visitors, and project stakeholders. The organization benefits from EU and regional funding, as indicated by logos and content references. Technically, the website is built on WordPress using modern plugins such as UberMenu, Maps Marker Pro, and Complianz GDPR for cookie management. The site is well-structured, mobile-optimized, and accessible, with good SEO practices and moderate performance. Hosting is provided by kasserver.com, as inferred from the nameservers. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, it lacks explicit security headers and does not provide a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is minimal but consistent with the organization's profile, with no privacy protection or suspicious patterns. Overall, the website presents a professional, trustworthy, and compliant digital presence for a regional non-profit entity. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining plugin updates to ensure ongoing security and compliance.

N

Naturpark Lüneburger Heide

naturpark-lueneburger-heide.de

63

Naturpark Lüneburger Heide operates as a regional non-profit organization dedicated to the preservation and promotion of the unique cultural and natural landscape of the Lüneburger Heide in Germany. The website serves as a comprehensive portal offering detailed information about the nature park, its conservation efforts, regional products, events, and educational programs targeting tourists, local residents, and nature enthusiasts. The organization holds a recognized quality nature park certification and collaborates with regional partners, supported by EU funding initiatives.

S

Sbor dobrovolných hasičů Psáry

hasicipsary.cz

51

Sbor dobrovolných hasičů Psáry is a local volunteer fire brigade organization based in Psáry, Czech Republic, founded in 2013. The organization focuses on firefighting response, youth engagement, and community cultural events. Their website serves as a communication platform for local residents and volunteers, providing updates, event information, and contact details. The site is built on WordPress using Elementor, indicating a moderate level of digital maturity with standard web technologies. Hosting is provided by a Czech hosting provider, ensuring local infrastructure alignment. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, which are recommended for compliance and trust. The site does not employ tracking or advertising technologies, reflecting a community-focused, non-commercial approach. Overall, the website is professional, trustworthy, and safe for general audiences, but could improve privacy compliance and security hardening.

P

Palmovka TEĎ

palmovkated.cz

58

Palmovka TEĎ is a community-focused web platform initiated by the Prague 8 municipal district to connect stakeholders and inform residents and visitors about local development, leisure activities, work opportunities, and quality living in the Palmovka area of Prague. The site features extensive listings of local businesses, services, and events, supported by social media channels and Google Analytics for user tracking. The domain is registered with a Czech registrar consistent with the website's local focus and language. Technically, the site uses modern web technologies including JavaScript, SVG graphics, and Google Tag Manager, with good mobile optimization and SEO practices. However, it lacks explicit privacy and cookie policies, and security headers are not detected, representing compliance and security gaps. Overall, the site is a legitimate, well-structured local community resource with moderate security posture and room for improvement in privacy compliance and security best practices.

V

Vladimíra Ludková

vladimiraludkova.cz

56

The website represents Vladimíra Ludková, a political candidate for the Senate in district 23, Prague 8. It highlights her extensive experience in social work and community engagement, targeting local voters with a professional and content-rich platform. The site is built on WordPress using the Avada theme, incorporating modern JavaScript libraries and responsive design elements, ensuring good user experience across devices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS data limits domain trust assessment but the professional presentation and contact information support legitimacy. Overall, the site is a credible political campaign platform with moderate technical maturity and compliance gaps.

C

Civilstyrelsen

retsinformation.dk

59

Retsinformation.dk serves as the official Danish government portal providing comprehensive access to all current laws, regulations, parliamentary documents, and Ombudsman reports. It is operated under the auspices of Civilstyrelsen, a Danish government agency, and targets legal professionals, government officials, and the general public seeking authoritative legal information. The portal is positioned as a critical public service with a large scope and high trustworthiness within Denmark's government ecosystem. Technically, the website employs modern web technologies including React for a single-page application experience, SVG icons via FontAwesome, and structured data in JSON-LD format to enhance semantic understanding. The site demonstrates good mobile optimization, accessibility, and SEO practices, although explicit CMS or hosting details are not disclosed. Performance is moderate with chunked JavaScript and CSS assets. From a security perspective, the site enforces HTTPS and avoids cookie usage, enhancing privacy. However, it lacks explicit security headers, privacy and cookie policies, and vulnerability disclosure mechanisms. WHOIS data is unavailable, likely due to registry privacy policies, but the domain and content strongly indicate legitimacy. No security vulnerabilities or tracking technologies were detected, resulting in a solid security posture with room for improvement. Overall, Retsinformation.dk is a professionally maintained government portal with high content quality and trustworthiness. Strategic recommendations include publishing explicit privacy and cookie policies, adding security headers, implementing vulnerability disclosure information, and improving WHOIS transparency to further enhance trust and compliance.

S

SMV:Digital

smvdigital.dk

72

SMV:Digital is a Danish government-affiliated digital platform dedicated to supporting small and medium-sized enterprises (SMEs) with business guidance, funding opportunities, and digital tools. The platform offers a variety of services including advisory searches, project tools, and inspiration content tailored to the needs of Danish SMEs. The website is well-positioned as an official government resource, leveraging trusted authentication via MitID and providing clear, GDPR-compliant privacy and cookie policies. Technically, the site employs modern frontend technologies such as Vue.js and integrates Piwik PRO for analytics, ensuring a contemporary and responsive user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit security policies could be improved or published. Overall, the domain registration data aligns well with the website's government affiliation, enhancing trust and legitimacy.

E

Erhvervsstyrelsen

brugdata.dk

70

Virksomhedsguiden.dk is an official Danish government website operated by Erhvervsstyrelsen (the Danish Business Authority). It provides business guidance, particularly focusing on data usage and sharing agreements, supported by comprehensive privacy and cookie policies. The site targets businesses and public sector entities in Denmark, offering templates and regulatory information to facilitate compliant data sharing. The platform is well-positioned as a trusted government resource with a clear focus on compliance and user consent management. Technically, the website employs modern frontend technologies such as Vue.js and integrates privacy-focused analytics via Piwik PRO. It features a detailed cookie consent mechanism that categorizes cookies by purpose and allows granular user control, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and demonstrates good SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS, uses security headers, and avoids exposing sensitive data. However, DNSSEC is not enabled, and there is no visible security.txt or explicit incident response contact information, which could be improved. The privacy compliance is strong, with GDPR-aligned policies and transparent cookie management. No critical vulnerabilities or suspicious activities were detected. Overall, Virksomhedsguiden.dk presents a secure, professional, and trustworthy government service platform. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and providing clearer security and incident response policies to enhance transparency and trust further.

D

Digitaliseringsstyrelsen

borger.dk

70

Borger.dk is the official Danish government portal providing digital access to public services, including digital post, personal overviews, and guides for citizens on various life situations. It serves as a centralized platform for Danish residents to interact with government services efficiently. The website demonstrates a high level of content quality, professional design, and clear navigation tailored to its target audience of Danish citizens. Technically, the site uses modern web technologies with good mobile optimization and accessibility features, although some security headers and explicit security policies are not evident in the provided data. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but could be improved by publishing incident response and vulnerability disclosure information. Overall, the site is trustworthy and well-maintained, reflecting its role as a key government digital service portal.

The website www.blovice-mesto.cz serves as the official municipal portal for the city of Blovice in the Czech Republic. It provides comprehensive information about the city administration, public services, cultural events, social services, and municipal projects. The site targets residents and visitors seeking official information and services related to the city. The business model is that of a government entity providing transparency and public access to municipal data and services. Technically, the website employs common web technologies including jQuery, Bootstrap, and various JavaScript libraries for UI enhancements and interactivity. The site is mobile-optimized with a responsive design and includes a cookie consent mechanism, indicating some level of privacy compliance. However, there is no explicit privacy policy or terms of service found, and no advanced security headers are detected, which suggests room for improvement in security posture. From a security perspective, the site uses HTTPS, but lacks visible security headers and detailed privacy or incident response policies. The WHOIS data is unavailable, which reduces trust slightly but may be due to privacy protection or registry issues. No vulnerabilities or malicious content were detected. Overall, the site appears legitimate and safe but could benefit from enhanced transparency and security practices. The overall risk is moderate with recommendations to implement explicit privacy and security policies, improve security headers, and provide clear contact information to enhance trust and compliance.

E

Erhvervsstyrelsen

boligejer.dk

10

Boligejer.dk is an official Danish government website operated by Erhvervsstyrelsen, providing comprehensive guides, tools, and data services for individuals involved in buying or selling property in Denmark. The platform offers property search capabilities, access to property data reports, and expert consultation services, positioning itself as a trusted and authoritative resource in the real estate sector. The website is well-branded with consistent government identity and targets a general audience interested in property transactions.