Government security reports

M

Městská knihovna a informační centrum Hradec nad Moravicí

ichradec.cz

44

The website www.ichradec.cz serves as the official portal for the Municipal Library and Information Center of Hradec nad Moravicí, Czech Republic. It provides comprehensive information about local cultural events, tourism, library services, and municipal news, targeting residents and visitors alike. The site is multilingual, supporting Czech, English, German, Polish, and Russian, enhancing accessibility for diverse audiences. The business model is public service-oriented, focusing on community engagement and information dissemination. Technically, the website employs a mix of established JavaScript libraries such as jQuery, Bootstrap, Swiper.js, and jQuery Mmenu, indicating a moderately modern front-end infrastructure. The CMS appears to be custom or proprietary, tailored to municipal needs. The site is mobile-optimized with good navigation clarity and content relevance, though accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, HTTPS is used, and a cookie consent mechanism is implemented, reflecting some privacy compliance efforts. However, no explicit privacy policy or terms of service pages were found, and security headers are absent, which could expose the site to certain risks. The WHOIS data is unavailable, which is unusual for a government-related domain and reduces trustworthiness. No vulnerabilities or incident response information is publicly disclosed. Overall, the website is a trustworthy and professional municipal information portal with good content quality and user experience. Strategic improvements in security headers, privacy documentation, and WHOIS transparency would enhance its security posture and compliance standing.

M

Město Hradec nad Moravicí

muhradec.cz

47

The website www.muhradec.cz serves as the official online presence for the town of Hradec nad Moravicí, Czech Republic. It provides comprehensive information about municipal services, local government, cultural events, and public notices. The site targets residents, visitors, and local stakeholders, offering services such as e-podatelna (electronic filing), official announcements, and social services like SENIOR TAXI. The site maintains a consistent brand identity with the town's crest and official colors, and integrates social media channels to enhance community engagement. Technically, the website employs a modern tech stack including jQuery, Bootstrap 4, Swiper, and other JavaScript libraries to deliver a responsive and accessible user experience. The site is mobile-optimized and includes accessibility features, with a clear navigation structure and search functionality. Cookie consent is implemented, indicating attention to privacy compliance. However, no advanced analytics or tracking scripts were detected, suggesting a privacy-conscious approach. From a security perspective, the site uses HTTPS and has a cookie consent mechanism, but lacks visible security headers in the provided HTML content. There is no explicit security policy or incident response information published. The WHOIS data for the domain is unavailable, which reduces trust from a domain registration standpoint, but the official nature of the content and municipal branding strongly support legitimacy. Overall, the site is a well-structured, informative municipal portal with good content quality and user experience. Security posture could be improved by adding security headers and publishing security policies. Domain registration transparency should be verified to enhance trustworthiness.

O

Obec Česká Ves

cves.cz

45

Obec Česká Ves operates an official municipal website serving the local community of Česká Ves in the Czech Republic. The site provides essential information about the municipal office, community news, events, and contact details. It targets residents and visitors seeking local government services and updates. The website is well-branded and consistent with its governmental purpose, featuring a professional design and clear navigation. The domain has been registered since 1999, indicating a stable and established online presence. Technically, the website uses a custom CMS (Noteo Engine) with standard web technologies including HTML5, CSS, JavaScript, jQuery, and FontAwesome icons. It is hosted under the registrar Gransy, with multiple name servers indicating a reliable hosting environment. The site is served over HTTPS, ensuring secure communications. Mobile optimization and accessibility are basic but functional, with room for improvement in SEO and accessibility features. From a security perspective, the site enforces HTTPS and uses secure login forms. However, it lacks explicit security headers such as Content-Security-Policy and X-Frame-Options, which could enhance protection against common web attacks. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is limited, with no explicit privacy or cookie policies found, although cookie consent is denied by default for analytics and advertising storage. Overall, the website presents a low-risk profile with a good trustworthiness level appropriate for a municipal government site. Strategic recommendations include adding comprehensive privacy and cookie policies, implementing security headers, and enhancing accessibility and SEO to improve compliance and user experience.

M

město Zlaté Hory

zlatehory.cz

47

The website https://zlatehory.cz/ serves as the official online presence for the town of Zlaté Hory in the Czech Republic. It provides comprehensive municipal information, including public notices, event calendars, citizen services, and contact details. The site targets residents and visitors, offering essential local government services and information. The business model is that of a government entity focused on public service delivery. Technically, the site is built on the vismo CMS platform, uses modern web standards including HTML5, CSS3, and JavaScript, and integrates Google services such as reCAPTCHA and Translate for security and accessibility. The website is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and anti-bot measures on forms, though explicit security headers could be improved. Privacy compliance is basic but present, with a privacy policy and cookie information available. Overall, the site is trustworthy, professional, and well-maintained, reflecting the legitimacy of the municipal authority.

M

Město Žulová

zulova.cz

45

Město Žulová operates an official municipal website serving the local community of Žulová, Czech Republic. The site provides comprehensive information about local government, public administration, cultural events, sports, and community services. It targets residents, local organizations, and visitors seeking official information and updates. The business model is public service, with no commercial activities evident. The website is well-established, reflecting a domain age since 2003, and maintains consistent branding aligned with municipal identity. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies including HTML5, CSS, JavaScript, Google reCAPTCHA for form security, and Google Translate for accessibility. Hosting is consistent with Czech providers, and HTTPS is enforced, ensuring secure communications. The site demonstrates moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO. From a security perspective, the site employs HTTPS and reCAPTCHA to protect user input forms, but lacks explicit security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie usage statements are present, though no active consent mechanism is implemented. Overall, the security posture is adequate for a municipal informational site but could benefit from enhancements. The website content is safe for general audiences, with no adult or questionable material. The domain registration and hosting details align with the official nature of the site, supporting high legitimacy and trustworthiness. Strategic recommendations include improving security headers, enhancing mobile and accessibility features, and providing clearer privacy and incident response information to strengthen compliance and user trust.

O

Obec Červená Voda

cervenavoda.cz

44

Obec Červená Voda operates as the official municipal government website for the town of Červená Voda in the Czech Republic. It provides residents and visitors with essential information about local government services, community news, tourism, and events. The website serves as a central hub for municipal communication and public service announcements, positioning itself as a trusted local government resource. The business model is focused on public service rather than commercial activity, targeting local citizens and tourists. Technically, the website employs a custom CMS with a modern JavaScript stack including jQuery, Swiper.js, and various UI libraries. It integrates Google Analytics and Facebook SDK for analytics and social media engagement. The site is mobile optimized and uses HTTPS with a valid SSL certificate, ensuring secure data transmission. However, there is room for improvement in security headers and privacy compliance features. From a security perspective, the site demonstrates a moderate security posture with HTTPS enabled and no visible sensitive data exposure. The absence of security headers and explicit privacy and cookie policies are notable gaps. No vulnerabilities or suspicious activities were detected in the content. The WHOIS data is unavailable due to privacy protection, which is common for Czech domains and does not detract from the site's legitimacy. Overall, the website is a well-maintained municipal portal with good content quality and user experience. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and publishing incident response contacts to improve trust and compliance. These steps will strengthen the site's security posture and align it better with GDPR and other regulatory requirements.

S

Sustainable Development Solutions Network (SDSN)

sdgtransformationcenter.org

57

The SDG Transformation Center website represents a flagship program of the UN Sustainable Development Solutions Network (SDSN), providing science-based tools and analytics to support Sustainable Development Goals (SDGs) pathways, policies, and financing. The site offers comprehensive resources including the SDG Index, financing analysis, commitment tracking, and geospatial tools, targeting governments, policymakers, and international organizations. Technically, the website is built on a modern Next.js and React stack, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

M

Město Vyšší Brod

mestovyssibrod.cz

46

Město Vyšší Brod operates an official municipal website serving the local community and visitors with comprehensive information about the town, its governance, public services, and local organizations. The site targets residents and stakeholders interested in municipal affairs and community projects. Technically, the website uses a custom CMS platform with modern JavaScript libraries such as jQuery, Bootstrap 5, and Swiper for UI components, ensuring a responsive and user-friendly experience. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, but lacks visible security headers and explicit privacy or terms of service pages, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and official contact details support its authenticity. Overall, the site presents a professional and trustworthy front for the local government but would benefit from enhanced transparency and security practices.

P

Plzeňský kraj

turisturaj.cz

52

The website www.turisturaj.cz serves as an official regional tourism portal for the Plzeňský kraj area in the Czech Republic. It provides comprehensive information on local attractions, cultural events, nature spots, gastronomy, and family activities, targeting tourists and visitors interested in exploring the region. The site is supported by regional government entities and tourism agencies, as evidenced by official logos and partnerships. The business model focuses on promoting regional tourism through curated content and event promotion. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies including Google Fonts, Google Analytics, and Facebook Pixel for tracking and marketing. The site is mobile-optimized with good design quality and clear navigation, though accessibility features are basic. Performance is moderate, with no major issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent banner with opt-in capabilities, indicating some attention to privacy compliance. However, no explicit privacy policy or terms of service pages were found, and security headers are absent, which could be improved. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency and trustworthiness. No vulnerabilities or incident response information are provided. Overall, the website is a well-designed and content-rich tourism portal with moderate technical maturity and some gaps in security and privacy compliance. The lack of WHOIS data and explicit privacy documentation are notable weaknesses that should be addressed to enhance trust and compliance.

H

HRADECKÁ KULTURNÍ A VZDĚLÁVACÍ SPOLEČNOST s.r.o.

adalbertinum.cz

53

HRADECKÁ KULTURNÍ A VZDĚLÁVACÍ SPOLEČNOST s.r.o. operates as a regional cultural and educational organization in Hradec Králové, Czech Republic. The website serves as a comprehensive platform for cultural events, educational courses, venue rentals, and ticket sales, targeting the general public including families and youth. Supported by local government entities, it holds a stable market position as a trusted regional service provider. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Analytics, ensuring a good user experience with mobile responsiveness and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data is a concern for domain transparency but does not detract from the professional presentation and trust signals on the site. Overall, the site is well-maintained, GDPR compliant, and provides valuable cultural services to its community.

C

redirector

colnasprava.sk

5

The domain colnasprava.sk is a government-related website serving as a redirector to the official Slovak financial administration site www.financnasprava.sk. The business focus is on providing access to financial administration services for the general public in Slovakia. The domain is well-established since 2003, indicating a stable presence in the government sector. Technically, the website is minimalistic with only a redirect link and lacks modern web features or content richness. Security posture is weak due to absence of visible HTTPS confirmation, security headers, and privacy policies. No contact or incident response information is provided, limiting transparency and user trust. Overall, the site is legitimate but underdeveloped in terms of content and security best practices.

S

Slovak Business Agency

sbagency.sk

10

Slovak Business Agency is a Slovak governmental and non-profit organization dedicated to supporting entrepreneurs and business development within Slovakia. The agency offers advisory services, training workshops, and networking opportunities primarily targeting startups and SMEs. It maintains a strong partnership ecosystem with governmental bodies and business networks, positioning itself as a key player in the Slovak business support landscape. The website is bilingual (Slovak and English) and provides relevant content and updates for its audience. Technically, the website is built on Drupal 7 CMS with jQuery and integrates common analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is hosted on websupport.sk infrastructure with DNSSEC and HTTPS enabled, indicating a secure domain setup. The website performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS and DNSSEC but lacks visible security headers and explicit security or incident response policies. Cookie policy is present but lacks an active consent mechanism, which is a GDPR compliance gap. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent and supports the legitimacy of the domain and organization. Overall, the website is professional, trustworthy, and serves its business purpose well, though improvements in privacy compliance and security best practices are recommended to enhance its security posture and regulatory adherence.

M

Medienanstalt Rheinland-Pfalz

wmk-rlp.de

51

The website 'Woche der Medienkompetenz Rheinland-Pfalz' is a government-backed initiative focused on promoting media literacy across the Rheinland-Pfalz region in Germany. It serves a broad audience including schools, families, sports clubs, and seniors, providing educational resources and campaigns to combat misinformation and enhance trustworthy information dissemination. The site is well-positioned within its regional market, supported by numerous reputable partners and government entities. Technically, the website is built on TYPO3 CMS, hosted by Schlund Technologies, and employs privacy-conscious analytics via Matomo with cookie-less tracking by default. The site demonstrates good mobile optimization, clear navigation, and professional design, reflecting a mature digital infrastructure suitable for its public service mission. From a security perspective, the website enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security policies or incident response contacts, and security headers are not visibly implemented. No vulnerabilities or sensitive data exposures were detected, indicating a solid security posture but with room for improvement in transparency and header security. Overall, the website is trustworthy, compliant with privacy regulations, and serves its educational purpose effectively. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security culture.

N

Národní knihovna ČR

caslin.cz

49

The website www.caslin.cz serves as the portal for the Union Catalogue of the Czech Republic, a project managed by the National Library of the Czech Republic. It aggregates bibliographic data from cooperating Czech libraries and institutions, offering approximately 7.6 million records including monographs, serials, and articles. The site targets library users, researchers, and public institutions seeking bibliographic information. The business model is a public service initiative, positioning itself as a key national resource in the Czech government and non-profit sector. Technically, the site employs legacy technologies such as jQuery 1.11.3 and integrates Google Analytics and FontAwesome for UI and tracking. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. The lack of modern frameworks or CMS indicates a relatively simple technical infrastructure. From a security perspective, the site uses HTTPS for external resources but lacks visible security headers and uses an outdated jQuery version, which could expose it to vulnerabilities. No sensitive data exposure or critical security flaws were detected, but improvements are recommended in updating libraries and implementing security headers. Privacy compliance is minimal, with a privacy statement present but no cookie consent mechanism. Overall, the site is trustworthy and serves a legitimate government function, but the absence of WHOIS data and some technical shortcomings reduce its security and compliance posture. Strategic improvements in security practices and privacy compliance would enhance its risk profile and user trust.

The website www.historickemestoroku.cz represents the Sdružení historických sídel Čech, Moravy a Slezska, a non-profit association dedicated to promoting historic towns in the Czech Republic through competitions and cultural heritage programs. The site serves as an information hub for the 'Historic Town of the Year' competition, providing news, event details, and partner information. The target audience includes municipalities, cultural heritage professionals, and the general public interested in historic preservation. Technically, the website is built on the Public4u CMS platform and uses legacy but stable technologies such as jQuery and Mapy.cz API for mapping. The site is mobile-optimized with a moderate performance profile and basic accessibility features. SEO is basic but functional, with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces transparency and trustworthiness somewhat, but the presence of official registration details and partner logos supports legitimacy. Overall, the website is a well-maintained cultural heritage portal with good content quality and business credibility but could improve in privacy compliance and security best practices. The domain WHOIS data absence is a notable concern that should be addressed to enhance trust.

The website www.soutezpamatkaroku.cz represents a non-profit organization, Sdružení historických sídel Čech, Moravy a Slezska, z.s., focused on promoting cultural heritage preservation through the 'Památka roku' competition. It serves a niche audience including historians, municipalities, and cultural heritage professionals in the Czech Republic. The site provides competition information, news updates, and resources for journalists, positioning itself as a reputable entity in the cultural heritage sector. Technically, the website uses a proprietary CMS called Public4u, along with jQuery and Mapy.cz APIs for interactive maps. The site is mobile optimized with good navigation and content structure, though it relies on somewhat dated JavaScript libraries. Performance is moderate, and SEO practices are adequately implemented. However, there is room for improvement in accessibility and modern security headers. From a security perspective, the site enforces HTTPS and does not expose sensitive data in its HTML. However, it lacks visible security headers and privacy/cookie policies, which are important for GDPR compliance and user trust. The absence of WHOIS data for the domain is a notable concern, reducing the ability to verify domain legitimacy fully. No signs of WAF or blocking mechanisms were detected, and the site appears safe with no adult or questionable content. Overall, the website is a credible and professional platform for its intended purpose but would benefit from enhanced privacy compliance, improved security headers, and verification of domain registration details to strengthen trust and security posture.

The website www.ehd.cz serves as the official platform for the European Heritage Days (Dny evropského dědictví) in the Czech Republic. It provides event listings, heritage site registrations, and promotes a mobile application to facilitate user engagement. The site targets a general audience interested in cultural heritage and related events, positioning itself as a niche cultural event promoter within the government or non-profit sector. The business appears to be operated by as4u.cz, s.r.o., a small Czech company specializing in digital solutions. Technically, the website employs a CMS named Public4u and uses common JavaScript libraries such as jQuery and Leaflet.js for interactive maps. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and relevant content. However, there is room for improvement in accessibility and SEO optimization. From a security perspective, the site lacks visible security headers and privacy compliance mechanisms such as cookie consent banners or detailed privacy policies. The absence of WHOIS data for the domain reduces trustworthiness, although the website content and branding appear professional and legitimate. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, the website is functional and serves its cultural informational purpose well but should enhance its security posture and privacy compliance to improve trust and meet regulatory requirements.

N

National Heritage Institute

vltava2025.cz

45

The website vltava2025.cz is an official cultural project site managed by the Czech National Heritage Institute, commemorating the 150th anniversary of Bedřich Smetana’s symphonic poem Vltava. It serves as a platform to promote exhibitions, events, and educational content related to the Vltava River as a national symbol. The site is well-positioned within the government and cultural heritage sector, supported by reputable partners and media sponsors. The target audience includes the general public interested in Czech culture and heritage. Technically, the website employs modern web technologies including Google Tag Manager, jQuery, Leaflet.js for mapping, and integrates external APIs such as Mapy.cz. The site is hosted by Webglobe, with a clean and professional design optimized for mobile and accessibility. SEO and content quality are excellent, with clear navigation and rich multimedia content. From a security perspective, the site uses HTTPS and cookie consent mechanisms with granular user control. While some security headers are not explicitly detected, no critical vulnerabilities or exposed sensitive data were found. Privacy compliance is strong, with clear privacy and cookie policies linked from the site. No incident response or security policy pages were found. Overall, the website presents a low-risk profile with strong business credibility and compliance. Recommendations include enhancing security headers and publishing a formal security policy. The domain is newly registered but consistent with the project timeline and legitimate in nature.

H

Hlavný banský úrad

hbu.sk

56

Hlavný banský úrad is the main mining authority in Slovakia, operating as a government regulatory agency under the Ministry of Economy. The website serves as an official portal providing information about mining supervision, legal frameworks, registers, and public notices. It targets organizations involved in mining activities and the general public seeking regulatory information. The site demonstrates a solid technical infrastructure using modern web technologies including jQuery, Kabernet CMS, and service workers for progressive web app capabilities. The design is professional, mobile-optimized, and accessible, with clear navigation and relevant content. Security posture is strong with HTTPS enforced and cookie consent implemented, though additional security headers and incident response information could enhance protection. Overall, the website is trustworthy, compliant with GDPR, and reflects the legitimacy of a government entity.

S

Sanktuarium św. Jana Pawła II Wielkiego w Krakowie

sjanpawel2.pl

37

The website represents the Sanctuary of Saint John Paul II in Kraków, Poland, serving as a spiritual and cultural hub for pilgrims and visitors. It provides comprehensive information about the sanctuary's history, religious services, chapels, relics, and community events. The site targets religious visitors and the local community, positioning itself as an important non-profit religious institution with a medium-sized digital presence. Technically, the site is built on WordPress with a modern tech stack including WooCommerce and various JavaScript libraries, hosted by a reputable Polish registrar. The website is well-structured, mobile-optimized, and includes privacy and cookie policies with consent mechanisms, reflecting good digital maturity. Security posture is solid with HTTPS and some security best practices, though improvements like DNSSEC and enhanced security headers are recommended. Overall, the site is trustworthy, professional, and compliant with GDPR, with moderate user tracking via Google Analytics. No critical security issues or adult content were detected, making it safe for general audiences.

V

Verbund Safer Internet DE

saferinternet.de

41

The website www.saferinternet.de serves as the German Safer Internet Centre, part of the EU's Digital Europe Programme. It provides educational resources, awareness campaigns, and support services focused on online safety for children, youth, parents, and educators. The site acts as a hub linking to partner organizations such as klicksafe, Nummer gegen Kummer, jugendschutz.net, and internet-beschwerdestelle.de, which collectively offer media literacy, helpline services, and complaint mechanisms for illegal online content. The business model is non-profit and government-supported, targeting a broad audience concerned with child and youth online protection in Germany. Technically, the website uses a basic technology stack including jQuery 1.7.1 and standard CSS, with no detected CMS or advanced frameworks. The site is moderately optimized for performance and mobile use but lacks modern security headers and updated libraries. No forms or data collection mechanisms were found on the analyzed page, and no analytics or tracking scripts were detected, indicating a privacy-conscious approach but also a lack of advanced digital maturity. From a security perspective, the site is accessible without WAF or blocking mechanisms, but it lacks visible security headers and privacy/cookie policies. The WHOIS data is minimal but consistent with a legitimate non-profit EU initiative. No vulnerabilities or exposed sensitive data were detected, but the outdated jQuery version and missing security headers present moderate risks. The site does not provide explicit contact or incident response information, which could be improved. Overall, the website is trustworthy, safe, and professionally presented with a clear mission. However, it would benefit from enhanced security practices, updated technology, and improved privacy compliance to strengthen its digital maturity and user trust.

M

MAS Střední Haná

masstrednihana.cz

10

MAS Střední Haná is a local action group operating in the Czech Republic's Střední Haná region, focusing on community-led local development and managing EU regional development programs. The organization acts as a partnership between public and private sectors to facilitate regional growth and project implementation. The website reflects a well-structured, content-rich platform targeting local municipalities and stakeholders, providing program information, news, and contact details. Technically, the site is built on WordPress with several plugins for content management, GDPR compliance, and analytics. While the site is mobile-optimized and user-friendly, it uses outdated WordPress and jQuery versions, which pose security risks. Security posture is moderate with HTTPS enforced and cookie consent mechanisms in place, but lacks advanced security headers and up-to-date software. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. Recommendations include updating the CMS and libraries, enhancing security headers, and maintaining compliance documentation.

Č

Českomoravská Bezpečnostní Agentura spol. s r.o.

centralni-ochrana.cz

57

Českomoravská Bezpečnostní Agentura spol. s r.o. operates the Pult centrální ochrany (PCO), a central protection desk service primarily serving the Czech Republic. The company offers security solutions tailored for private individuals, families, commercial enterprises, and government entities, emphasizing rapid response and modern technical monitoring. Their market position is that of a regional security provider expanding nationwide coverage with a focus on reliability and professional service. The website reflects a medium-sized enterprise with consistent branding and good content quality. Technically, the website is built on WordPress using WPBakery Page Builder and integrates modern web technologies including Google Fonts and Google Analytics for tracking. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms with CAPTCHA protection on forms, though it lacks advanced security headers and explicit security policies. The security posture is solid but could be enhanced by implementing additional HTTP security headers and publishing incident response information. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear legitimate and professional. Overall, the site presents a trustworthy and functional digital presence for a security services provider.

M

Ministry of the Environment of the Czech Republic

sdg-data.cz

58

The website www.sdg-data.cz is an official government portal managed by the Ministry of the Environment of the Czech Republic, providing comprehensive data and information related to the United Nations' 2030 Agenda for Sustainable Development and the Czech Republic's national strategic framework CR 2030. It serves as a key resource for policymakers, researchers, and the public interested in sustainable development indicators and progress within the Czech Republic. The site features structured content, including detailed descriptions of the SDGs, national goals, and links to official partner organizations. Technically, the site is built on Drupal 10, employs Matomo for privacy-conscious analytics, and uses modern web technologies such as Bootstrap and jQuery UI. The site is mobile optimized and accessible, with a cookie consent mechanism compliant with GDPR regulations. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and a security.txt file added. WHOIS data for the domain is unavailable, which slightly reduces trust from a domain registration perspective, but the content and external references strongly support legitimacy. Overall, the site is professional, trustworthy, and well-suited for its governmental informational purpose.

S

Sustainable Development Solutions Network (SDSN)

sdgindex.org

57

The SDG Transformation Center website represents a UN Sustainable Development Solutions Network (SDSN) initiative focused on providing science-based tools and analytics to support Sustainable Development Goals (SDG) pathways, policies, and financing. The site offers flagship reports such as the Sustainable Development Report and SDG Index, along with geospatial tools and financing analyses. It targets governments, policymakers, researchers, and development organizations globally. Technically, the website is built on modern frameworks like Next.js and React, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies, and no contact information is explicitly provided. Overall, the site is professional, trustworthy, and content-rich, but could improve transparency and security practices.

B

Bundesministerium für Bildung und Forschung (BMBF)

fona.de

50

The website www.fona.de serves as the official platform for the German Federal Ministry of Education and Research (BMBF) focused on sustainability research (FONA). It provides comprehensive information on sustainability topics, current news, events, and research coordination. The platform targets researchers, policymakers, and the general public interested in sustainable development. The site is well-branded with consistent government logos and maintains a professional and trustworthy appearance. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integration of Cookiebot for consent management and Matomo for analytics. Hosting is managed via net-server.de, and the site uses HTTPS with good SSL configuration. Accessibility and SEO optimizations are well implemented, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms to comply with GDPR. However, explicit security headers like Content-Security-Policy and incident response contacts are not evident, representing areas for improvement. No vulnerabilities or suspicious content were detected, and the domain registration aligns with the official government entity, supporting high legitimacy. Overall, the website demonstrates a strong security posture, good privacy compliance, and excellent content quality. Strategic recommendations include publishing a formal security policy, incident response contacts, and enhancing security headers to further strengthen trust and compliance.

W

Webenlét Informatikai Szolgáltató Kft.

interreg-danube.eu

43

The Interreg Danube Region Programme website represents a well-established EU-funded initiative focused on fostering transnational cooperation for sustainable development in the Danube region. The programme supports projects that enhance competitiveness, green transition, social inclusion, and governance across 14 countries. The website is professionally designed, mobile-optimized, and provides comprehensive information about funding opportunities, project management, and news updates. The presence of official contact details, social media channels, and a newsletter subscription enhances user engagement and trust. Technically, the website employs modern frontend technologies such as Alpine.js and Swiper.js, uses Tailwind CSS for styling, and integrates analytics tools like Google Analytics and Microsoft Clarity. The site is fast, accessible, and SEO-friendly, though it lacks a visible cookie consent mechanism and some security headers. HTTPS is enforced, and form submissions use secure JSON payloads. From a security perspective, the site demonstrates good practices with HTTPS and secure data handling but could improve by adding explicit security policies, incident response contacts, and vulnerability disclosure information. Privacy compliance is partially met with a clear privacy policy but lacks cookie consent features. Overall, the website is trustworthy, professional, and serves its target audience effectively. Strategic improvements in privacy compliance and security transparency would further enhance its posture.

D

Diözesanstelle Berufe der Kirche

berufe-der-kirche-freiburg.de

44

The website 'Diözesanstelle Berufe der Kirche' serves as an informational and advisory platform focused on church-related professions and vocational guidance within the Archdiocese of Freiburg, Germany. It targets individuals interested in pursuing careers in the church, offering coaching, orientation, and event information. The site is positioned as a regional non-profit service with strong ties to the church community and affiliated organizations. Technically, the site is built on Edith CMS, uses modern JavaScript libraries like jQuery and FontAwesome, and integrates Matomo analytics with respect for user privacy preferences. The hosting and domain registration are consistent with the organization's identity, indicating legitimacy and trustworthiness. Security posture is good with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and explicit cookie consent mechanisms are recommended. Overall, the site presents professional content with clear navigation and a consistent brand image, supporting its mission effectively.

E

EUREGIO Bayerischer Wald - Böhmerwald / Regionalmanagement Mühlviertel

euregio.at

57

EUREGIO Bayerischer Wald - Böhmerwald / Regionalmanagement Mühlviertel is a non-profit regional cooperation organization founded in 1994, serving the border region between Bavaria, Czech Republic, and Austria. It acts as a regional hub for cross-border projects and regional development, promoting collaboration and European integration in the Mühlviertel area. The website is professionally designed using TYPO3 CMS and modern web technologies, providing clear navigation and relevant content in German. Contact information and cookie consent mechanisms are properly implemented, supporting GDPR compliance. The security posture is moderate with HTTPS usage and cookie consent but lacks advanced security headers and explicit incident response policies. WHOIS data is unavailable, limiting domain trust verification, but the website content and branding indicate legitimacy and professionalism.

D

DigitalPA S.r.l.

garatelematica.net

63

DigitalPA S.r.l. operates the website garatelematica.net, offering a leading software platform for managing electronic public procurement processes in Italy. The platform supports public entities in conducting secure, compliant, and efficient digital tendering and procurement activities. The company positions itself as a market leader with over 1000 public contracting authorities as clients and offers complementary services including consulting and training for public procurement professionals. The website content is professionally presented, with comprehensive information about software modules, services, and client testimonials, targeting public administration entities and suppliers.

D

DigitalPA S.r.l.

acquistitelematici.it

66

DigitalPA S.r.l. operates the website acquistitelematici.it, offering a certified e-procurement platform tailored for the Italian Public Administration and companies. The platform supports comprehensive management of procurement processes, including compliance with Italian public contract codes and ANAC requirements. The company positions itself as a market leader in Italy with over 1,000 active platforms and extensive client references from public entities. The business model combines software licensing with specialized consultancy and training services, targeting public sector officials and private companies involved in procurement. The website content is professional, well-structured, and rich in relevant information, supporting a strong market presence.

M

Město Žirovnice

kulturazirovnice.cz

53

The website www.kulturazirovnice.cz serves as the official platform for the town of Žirovnice's cultural department, organizing and promoting local cultural events and programs. It targets residents and visitors interested in cultural activities, offering event schedules, ticket purchasing options, and contact information. The site leverages modern web technologies such as React, Next.js, and Material-UI to deliver a responsive and user-friendly experience. Despite the absence of WHOIS data, the website presents itself as a legitimate local government or community organization with clear contact details and social media presence. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and cookie consent mechanisms, which are recommended for enhanced compliance and protection. Overall, the site is well-structured, informative, and trustworthy for its intended audience.

K

Kultura Kamenice nad Lipou

kulturaknl.cz

39

Kultura Kamenice nad Lipou is a cultural and tourist information website serving the town of Kamenice nad Lipou in the Czech Republic. It provides information about local museums, libraries, cultural houses, community centers, and festivals, targeting residents and visitors interested in cultural events. The website is built on WordPress using Elementor and Slider Revolution, with a moderate performance and good mobile optimization. While the site has a professional design and clear navigation, it lacks critical privacy and cookie policies and does not actively use Google Analytics tracking despite having the plugin installed. Security posture is adequate with HTTPS enabled but missing important security headers and policies. The domain registration is consistent and legitimate, supporting the trustworthiness of the site.

Nová Lípa, s.o. is a voluntary association of municipalities in the Czech Republic focused on regional development and community projects. The website provides information about member municipalities, ongoing projects, official notices, and contact options primarily via a contact form. The organization appears to be a small, local government entity established in 2015, with a clear focus on serving local residents and stakeholders. Technically, the website uses a combination of Bootstrap, jQuery, and is hosted on the Estranky.cz CMS platform, with external integrations including Google Analytics and Facebook SDK for tracking and marketing purposes. Security posture is moderate but could be improved by updating JavaScript libraries and implementing security headers. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures.

M

Město Lipnice nad Sázavou

lipnicenadsazavou.cz

46

The website represents the official municipal portal for Lipnice nad Sázavou, providing residents and visitors with comprehensive information about the city, local government services, schools, clubs, and cultural events. It serves as a central hub for official announcements, contact details, and community engagement. The site is positioned as a trusted local government resource with a clear focus on public service and community information. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It includes accessibility and basic mobile optimization features, though there is room for improvement in performance and modern responsive design. The integration of Google Translate enhances accessibility for non-Czech speakers. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks advanced security headers and explicit cookie consent mechanisms, which are recommended for enhanced privacy compliance. No vulnerabilities or malicious content were detected, indicating a generally secure posture appropriate for a municipal website. Overall, the site is a reliable and professional municipal resource with a good balance of content quality and technical implementation. Strategic improvements in privacy and security policies would further strengthen its compliance and trustworthiness.

S

Sdružení historických sídel Čech, Moravy a Slezska, z.s.

historickasidla.cz

57

Sdružení historických sídel Čech, Moravy a Slezska (SHS ČMS) is a well-established Czech non-profit organization founded in 1990, dedicated to preserving and promoting historical municipalities and cultural heritage. The website serves as an information hub for members and the public, offering event calendars, news, competitions, and resources related to heritage preservation. The organization maintains active engagement through social media and partner sites, reinforcing its position in the cultural heritage sector. Technically, the website uses a CMS called Public4u, integrates jQuery libraries, Google Tag Manager for analytics, and Mapy.cz API for mapping functionalities. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks advanced security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS data reduces domain transparency and trustworthiness, but the website content and contact information appear legitimate and professional. Overall, the website is a reliable and professional platform for its niche audience, with moderate technical maturity and a good security baseline. Improvements in security headers, incident response transparency, and domain registration disclosure would enhance trust and compliance.

T

Technické služby Havlíčkův Brod

tshb.cz

50

Technické služby Havlíčkův Brod is a municipal contributory organization serving the citizens of Havlíčkův Brod, Czech Republic. The organization provides a broad range of public services including municipal public transport, waste management, city cleaning, maintenance of recreational and sports facilities, and care for urban greenery and forests. The website reflects a local government service provider with a focus on community support and public utility management. The business model is centered on public service delivery with a medium-sized operational scale and a clear target audience of local residents and visitors. From a technical perspective, the website employs modern web technologies such as Bootstrap, jQuery, FontAwesome, and Owl Carousel, and is built on the CPedit CMS platform. It demonstrates good mobile optimization, accessibility, and SEO practices. The site uses HTTPS with an excellent SSL configuration and integrates Google Analytics and Google Tag Manager for analytics, alongside Google reCAPTCHA for form security. Cookie consent mechanisms are implemented in compliance with GDPR requirements. Security posture is generally strong with HTTPS enforcement and use of CAPTCHA; however, the absence of visible security headers, a published security policy, and incident response contact details are notable gaps. The lack of WHOIS data for the domain reduces trustworthiness and raises questions about domain registration transparency. No critical vulnerabilities or malicious content were detected. Overall, the website is professional, trustworthy, and well-structured, serving its public service purpose effectively. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and verifying domain registration details to improve trust and compliance.

T

Technické služby města Pelhřimova, p.o.

tspe.cz

46

Technické služby města Pelhřimova, p.o. is a municipal service provider responsible for various public services in the city of Pelhřimov, Czech Republic. Their official website offers information about waste management, public greenery, road maintenance, public lighting, cemetery management, sports and playground facilities, parking, and public contracts. The site targets local residents and visitors, providing operational updates and contact channels. The business operates as a small government entity with a domain established in 2003, reflecting a stable presence in the community. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It incorporates Google services like reCAPTCHA for form security and Google Translate for multilingual support. The site is hosted likely via Forpsi, with a registrar in the Czech Republic. Performance and mobile optimization are moderate, with basic accessibility and SEO features implemented. From a security perspective, the website uses HTTPS and Google reCAPTCHA to protect forms. However, it lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic but present, with a privacy policy and cookie information available, though no active consent mechanism is implemented. Overall, the website is trustworthy and professional, serving its municipal function effectively. Recommendations include enhancing security headers, implementing cookie consent, and expanding privacy and security disclosures to improve compliance and user trust.

V

Verlag Dashöfer

fulsoft.cz

48

Fulsoft.cz is an established Czech online legal information system operated by Verlag Dashöfer, offering comprehensive access to laws, judiciary decisions, contract templates, and legislative updates. The platform targets legal professionals, government officials, and businesses requiring up-to-date Czech legal content. The website is subscription-based, providing monitoring services and alerts for legislative changes. Technically, the site employs modern web technologies including Bootstrap 4, jQuery, and Font Awesome, with good mobile optimization and a professional design. Security posture is solid with HTTPS enforced and secure login forms, though some security headers could be improved. Privacy compliance is evident with GDPR-aligned policies and cookie consent mechanisms. However, the absence of WHOIS registration data reduces domain trustworthiness, warranting further verification. Overall, the site presents a trustworthy and professional resource for Czech legal information.

E

Erzdiözese Freiburg

ebfr.de

44

The Erzdiözese Freiburg website serves as the official digital presence of one of Germany's largest Catholic archdioceses, providing extensive information on faith, pastoral care, education, social services, and community engagement. The site targets a broad audience including parishioners, families, youth, and church staff within the Freiburg region. It offers structured navigation and a variety of resources reflecting its role as a major religious institution. Technically, the website is built on Edith CMS, leveraging modern JavaScript libraries like jQuery and AblePlayer, and uses Matomo for analytics with privacy-conscious configurations. Hosting and content delivery are managed via w-commerce.de and related domains. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and published security policies. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the site is professional, trustworthy, and well-branded, but could improve transparency and security practices.

Slovenská komora stavebných inžinierov (SKSI) is a Slovak professional chamber representing authorized construction engineers. The organization provides membership services, professional examinations, educational programs, and maintains official registers and public portals. The website reflects a national authoritative position within the construction engineering sector in Slovakia, targeting professionals and stakeholders in this industry. Technically, the site uses a modern CMS (BUXUS), standard JavaScript libraries like jQuery and RequireJS, and integrates Google Analytics and Facebook Pixel for tracking. The site is mobile optimized with good navigation and professional design. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though it lacks some security headers and a cookie consent mechanism. WHOIS data confirms legitimacy and consistency with the organization's identity. Overall, the website is a reliable and professional digital presence for SKSI.

M

Medienanstalt Rheinland-Pfalz

klicksafe.de

53

klicksafe.de is a German EU-funded initiative dedicated to promoting online safety and digital competence among children, youth, parents, and educators. It operates under the Medienanstalt Rheinland-Pfalz and is part of the Safer Internet Centres network across Europe. The website offers comprehensive educational materials, awareness campaigns, and events to support safe and critical internet use. The initiative enjoys a strong market position as a trusted source for internet safety education in Germany, supported by EU funding and partnerships. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as Bootstrap, jQuery, and Swiper.js for responsive and interactive content delivery. It employs Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and does not publish a security policy or incident response information. There is no cookie consent mechanism detected, which is a minor compliance gap given GDPR requirements. Overall, the security posture is solid but could be improved with additional transparency and technical controls. The website content is safe for general audiences, focusing on educational and awareness topics without any adult or explicit material. Social media presence is active across major platforms, enhancing outreach and engagement. WHOIS data aligns with the website's claims, showing consistency and legitimacy. No suspicious or malicious indicators were found. Strategic recommendations include implementing a cookie consent banner, publishing a security policy and incident response contacts, adding security headers, and considering a vulnerability disclosure policy to enhance trust and compliance.

T

The British Chamber of Commerce in the Slovak Republic

britcham.sk

48

The British Chamber of Commerce in the Slovak Republic (Britcham) is a well-established organization founded in 2003 that supports businesses of all sizes in Slovakia, particularly those involved in UK-Slovakia trade relations. The chamber facilitates networking, advocacy, knowledge sharing, and sustainable business growth. Their website reflects a professional and consistent brand with clear messaging and active social media engagement. Technically, the site is built on WordPress with modern plugins and frameworks, hosted on Websupport, and uses HTTPS with Google Analytics for tracking. Security posture is good but could be improved by adding explicit security headers and publishing security policies. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the site is trustworthy and serves its business audience effectively.

E

Enterprise Europe Network Slovakia

een.sk

45

Enterprise Europe Network Slovakia operates a professional and comprehensive website focused on supporting SMEs in innovation, international growth, and cooperation. The site offers detailed information on services, events, publications, and client testimonials, positioning itself as a key resource for Slovak businesses seeking EU-related support. Technically, the site runs on Drupal 7 with common JavaScript libraries and integrates Google Analytics and Bugherd for analytics and feedback. Mobile optimization and accessibility are well addressed, though the use of an older CMS version and missing security headers present some security concerns. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the website is trustworthy and professional but could improve security and privacy practices.

T

Taliansko - Slovenská obchodná komora

camit.sk

51

Taliansko - Slovenská obchodná komora is a well-established bilateral chamber of commerce facilitating trade and business relations between Slovakia and Italy. The organization offers a broad range of services including company formation consulting, accounting, partner search, translation, and Erasmus programs. The website reflects a professional and consistent brand image with strong trust signals such as testimonials from notable figures and membership in recognized associations. Technically, the site is built on the Cyclone3 framework, uses modern tracking and security tools like Google Analytics and reCAPTCHA, and implements GDPR-compliant privacy and cookie policies. Security posture is good with HTTPS and consent mechanisms, though some security headers could be improved. Overall, the site is accessible, well-structured, and targets business professionals and entrepreneurs in the Slovak-Italian trade sector.

W

Web Commerce GmbH

kath-musterhausen.de

47

The website www.kath-musterhausen.de represents SESAM, a web platform service designed for church institutions within the Erzdiözese Freiburg. It is developed and hosted by Web Commerce GmbH, providing a comprehensive web-building toolkit including event management, news, forms, newsletters, and room and duty scheduling. The site targets church organizations seeking a versatile and supported online presence. Technically, the site uses Edith CMS, jQuery, and Matomo analytics, with good mobile optimization and accessibility. Security posture is solid with HTTPS and some security headers, though cookie consent mechanisms and explicit security policies are lacking. Overall, the site is professional, trustworthy, and well-aligned with its niche audience.

The website 'Wissen hilft schützen' is a German government-affiliated non-profit platform dedicated to providing information and educational materials aimed at protecting children and adolescents from sexualized violence in digital environments. It targets educators, social workers, and parents, offering resources, training opportunities, and help services. The site is well-branded and professionally designed, with a clear focus on its mission and audience. Technically, it is built on WordPress using common libraries and plugins, with moderate performance and good mobile optimization. Security-wise, HTTPS is used, but there is a lack of security headers and explicit privacy or cookie policies, which are areas for improvement. The site uses Piwik for analytics, indicating moderate user tracking. Overall, the domain and website content align with a legitimate and trustworthy entity, though some compliance and security best practices could be enhanced.

U

Unabhängige Bundesbeauftragte gegen sexuellen Missbrauch von Kindern und Jugendlichen

schule-gegen-sexuelle-gewalt.de

67

The website 'Schule gegen sexuelle Gewalt' is an official German government-supported portal dedicated to supporting schools in developing protection concepts against sexual violence. It provides comprehensive educational content, digital training, and region-specific information to schools and educators. The site is well-positioned as a trusted resource in the child protection and education sector, collaborating with federal and state authorities. Technically, the site is built on TYPO3 CMS and uses Matomo analytics configured with strong privacy protections, including IP anonymization and user consent mechanisms. The website demonstrates good design, accessibility, and SEO practices, ensuring a positive user experience. Security posture is solid with HTTPS and privacy compliance, though explicit security headers and incident response policies are not publicly documented. Overall, the site is trustworthy, professional, and serves a critical social function with minimal risk.

M

Ministerstvo životního prostředí

cr2030.cz

58

The website www.cr2030.cz serves as the official platform for the Czech Republic's sustainable development strategy, known as Česká republika 2030. It provides comprehensive information on national goals, strategic frameworks, projects, and public engagement opportunities related to sustainable development. The site is managed by the Ministry of the Environment of the Czech Republic, indicating a government-backed initiative with a focus on environmental and social governance. The platform targets a broad audience including citizens, government stakeholders, NGOs, and international partners. Technically, the website is built on Drupal 10 CMS, leveraging modern web technologies such as responsive design and accessibility features. The site demonstrates good SEO practices and mobile optimization, ensuring usability across devices. No blocking or WAF mechanisms were detected, and the site uses HTTPS with a secure SSL configuration. However, explicit security headers are not evident, suggesting room for security enhancements. From a security and compliance perspective, the site includes a cookie consent mechanism aligned with GDPR requirements and provides a privacy policy in Czech. Contact information is clearly presented with official government email and phone contacts, enhancing trust. The absence of WHOIS data limits domain registration trust analysis, but the official nature of the content and domain usage supports legitimacy. Overall, the website presents a professional, secure, and informative platform supporting the Czech Republic's sustainable development agenda. Strategic recommendations include improving security headers, publishing a vulnerability disclosure policy, and enhancing transparency around data collection and retention.