Government security reports

The website represents the Église du Vieux-Bourg de Saint-Sulpice-des-Landes, a heritage church located in the Loire-Atlantique department of France. It serves as an official informational portal providing visitors and heritage enthusiasts with details about the church, virtual tours, event calendars, and links to related patrimonial sites. The site is positioned as a cultural and governmental resource, promoting local heritage and tourism. The target audience includes tourists, local visitors, researchers, and cultural heritage advocates. Technically, the website is built on the Jalios JCMS platform, utilizing modern web technologies including Google Tag Manager and Google Analytics for tracking, and Orejime for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. However, no explicit security headers were detected, and no published security or incident response policies were found. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the official nature of the content and domain. Overall, the security posture is good but could be improved by adding security headers and vulnerability disclosure information. The overall risk assessment is low, with the site appearing legitimate, safe, and professionally maintained. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a security.txt file to improve transparency and incident response readiness.

The Abbey of Blanche-Couronne website serves as an official digital presence for a heritage site managed by the Department of Loire-Atlantique in France. It provides comprehensive information about the abbey, visiting options, departmental cultural actions, and links to other related heritage sites. The site targets tourists, heritage enthusiasts, and the general public interested in regional culture. The business model is government/non-profit focused on cultural preservation and tourism promotion. Technically, the website is built on the Jalios JCMS platform, leveraging modern web technologies including Google Tag Manager and Google Analytics for tracking, and Orejime for cookie consent management. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Performance is moderate with a professional design and clear navigation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks a publicly available security policy or incident response contact information, which are recommended for enhanced transparency and trust. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional, with a high level of content quality and compliance. The absence of WHOIS data slightly reduces domain trust verification but does not detract from the site's legitimacy given its official departmental affiliation and consistent branding.

The website jardins-folies-siffait.fr represents the gardens of the Folies Siffait, a heritage site managed by the Loire-Atlantique department in France. It serves as an informational portal for visitors and cultural enthusiasts, offering practical information, virtual tours, and links to related patrimonial sites. The site targets a general audience interested in cultural heritage and tourism. The business model is public sector focused, promoting regional heritage and tourism. Technically, the website is built on the Jalios JCMS platform and integrates modern tools such as Google Tag Manager and Google Analytics for tracking and performance insights. It employs a cookie consent management system (Orejime) ensuring compliance with privacy regulations. The site is mobile-optimized, accessible, and well-structured, providing a good user experience. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent mechanisms. However, it lacks explicit security headers and does not provide visible security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain legitimacy verification but the official branding and content strongly suggest a legitimate government-managed site. Overall, the website is professional, secure, and compliant with privacy standards, suitable for its public heritage promotion purpose. Strategic improvements include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to strengthen trust and security posture.

Domaine de la Garenne Lemot is a heritage site managed by the Loire-Atlantique Department in France, offering cultural and tourism services including guided tours, events, and visitor information. The website is professionally designed using Jalios JCMS, integrates modern analytics and cookie consent tools, and provides comprehensive visitor resources. Security posture is good with HTTPS and cookie management, though additional security headers could enhance protection. The domain WHOIS data is not publicly available due to AFNIC policies, but the website's content and certifications strongly support its legitimacy. Overall, the site serves as a reliable and informative portal for visitors and stakeholders interested in regional heritage.

The Château de Clisson website serves as the official digital presence for a French heritage site managed by the Department of Loire-Atlantique. It provides comprehensive visitor information, event calendars, ticketing options, and cultural highlights aimed at tourists and heritage enthusiasts. The site is well-branded with official logos and certifications, reinforcing its legitimacy and trustworthiness. Technically, the website is built on the Jalios JCMS platform, leveraging modern web technologies including Google Tag Manager and Analytics for user insights, and Orejime for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, offering a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable, likely due to privacy protection, but the domain and website content align with a legitimate government-managed heritage site. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

The Château de Châteaubriant website serves as an official cultural heritage portal managed by the Department of Loire-Atlantique, France. It provides comprehensive visitor information, event calendars, ticketing services, and highlights of the château and related heritage sites. The site targets tourists and cultural enthusiasts, positioning itself as a regional heritage and tourism authority with official certifications such as Qualité Tourisme and historical monument status. Technically, the website is built on the Jalios JCMS platform, integrating modern web technologies including Google Tag Manager and Analytics for user tracking and performance insights. The site demonstrates good mobile optimization, accessibility, and SEO practices, though some security headers are missing. Privacy compliance is well addressed with a clear cookie consent mechanism and a comprehensive privacy policy. From a security perspective, the site enforces HTTPS and manages cookies responsibly but lacks visible security.txt and incident response information. The absence of WHOIS data limits domain trust verification, though the website content and external references strongly indicate legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations, suitable for general audiences without any adult or explicit content.

Musée Dobrée is a regional museum in Nantes, France, operated by the Département de Loire-Atlantique. It offers a rich cultural experience with extensive collections spanning multiple continents and historical periods. The website is professionally designed, mobile-optimized, and provides comprehensive visitor information, educational resources, and online access to collections. The museum targets a broad audience including families, researchers, and the general public. Technically, the site uses Jalios JCMS, integrates Google Tag Manager for analytics, and employs a modern cookie consent manager ensuring GDPR compliance. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers could be improved. WHOIS data is not publicly available, likely due to privacy protection, but the site’s affiliation with a government entity supports its legitimacy.

M

Město Vítkov

vitkov.info

0

The website www.vitkov.info serves as the official online presence for the town of Vítkov in the Czech Republic, providing comprehensive municipal information, public services, and community resources. It targets residents and visitors, offering access to administrative forms, local news, event calendars, and social services. The site is well-structured with clear navigation and consistent branding, reflecting its role as a trusted government portal. Technically, the site employs common web technologies including jQuery, Bootstrap, and Swiper.js, indicating a moderate level of digital maturity. The site is mobile-optimized and includes a cookie consent mechanism aligned with GDPR requirements, demonstrating attention to privacy compliance. However, no major CMS or hosting provider details are evident, suggesting a custom or proprietary platform. From a security perspective, the site uses HTTPS but lacks visible advanced security headers and explicit incident response or vulnerability disclosure information. The WHOIS data is unavailable due to privacy protection or malformed queries, but the domain and content align with an official municipal entity, supporting legitimacy. No WAF or blocking mechanisms were detected, and no suspicious external domains or tracking services were found. Overall, the site presents a secure and privacy-conscious government portal with good content quality and user experience. Strategic improvements in security headers, incident response transparency, and WHOIS data availability could further enhance trust and resilience.

A

AmCham Slovenia

believeinslovenia.si

0

Believe in Slovenia is a cultural and promotional initiative managed by AmCham Slovenia, focusing on highlighting Slovenian ambassadors of friendship in the USA. The project aims to strengthen cultural ties and promote positive relations between Slovenia and the Slovenian diaspora in the United States. The website presents ambassador stories, regional selections, and partner collaborations, supported by government and chamber organizations. Technically, the website uses a standard open-source stack including jQuery, Bootstrap, and Google Analytics, with a cookie consent mechanism implemented. However, it lacks explicit privacy and terms of service policies, and security headers are not detected, indicating room for improvement in security posture. The domain is registered since 2014 with a reputable Slovenian registrar, consistent with the business history and legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

C

CMA France

cma-france.fr

0

Artisanat.fr is the official portal for the Chambres de Métiers et de l'Artisanat (CMA) in France, providing comprehensive information on artisan métiers, training, news, and personalized support services. The site serves a broad audience including artisans, apprentices, and entrepreneurs interested in the artisan sector. It is positioned as a trusted government-related resource with a large network presence across France. Technically, the site is built on Drupal 10 with modern analytics and marketing integrations, demonstrating a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data is noted but does not detract from the site's legitimacy given its official nature. Overall, the site is professional, accessible, and privacy-conscious, supporting the artisan community effectively.

V

Ville de Rungis

rungis.fr

0

The website rungis.fr is the official online presence of the Ville de Rungis, a municipal government entity in France. It provides comprehensive information about local government services, news, events, and administrative procedures targeted primarily at residents and visitors. The site is well-structured, professionally designed, and offers multilingual support with a focus on French. It integrates modern web technologies including Drupal CMS and Matomo analytics for visitor tracking. Privacy and cookie policies are clearly presented with GDPR compliance mechanisms in place. Technically, the site is built on a robust Drupal platform with responsive design and accessibility features, ensuring good performance and user experience across devices. Security posture is solid with HTTPS enforced and domain registration consistent with the official nature of the site. However, explicit security headers and incident response information are not prominently available, representing an area for improvement. Overall, rungis.fr demonstrates a mature digital infrastructure suitable for a government website, with strong business credibility and trust indicators. The site is safe for general audiences, free from adult or questionable content, and maintains transparency through social media and contact information. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen trust and compliance.

A

Agence Nationale pour les Chèques-Vacances (ANCV)

ancv.com

0

The Agence Nationale pour les Chèques-Vacances (ANCV) is a French government public institution dedicated to facilitating access to vacations for a broad population including employees, public agents, families, seniors, and vulnerable groups. It operates through the issuance of Chèque-Vacances vouchers, Coupon Sport, and social aid programs, while also supporting the tourism and leisure sectors via partnerships. The website reflects a mature digital presence with a modern Drupal 10 CMS, Bootstrap 5 styling, and integrated analytics via Google Tag Manager. It provides comprehensive information, including privacy and cookie policies, and actively warns users about phishing attempts impersonating the agency. Security posture is generally good with HTTPS enforced and cookie consent mechanisms, though explicit security headers and incident response information are lacking. The absence of WHOIS data for the domain is a notable anomaly that reduces trust slightly, but the overall branding and content strongly indicate an official and trustworthy government entity.

A

AVERIA LTD.

egov-nn.com

0

eGOVERNMENT.NEWS is a Czech-language online news platform focused on government, public administration, and local self-government topics. Operated by AVERIA LTD., a UK-registered company, the site provides news articles, an interactive digital magazine, and event listings relevant to the public sector and government professionals. The platform holds a niche position in the Czech market, targeting government officials, public administrators, and stakeholders interested in digitalization and governance. The business model centers on content publishing and event promotion, supported by partnerships such as with YOTTABE. Technically, the website is built on WordPress using Elementor and several plugins for events, forms, and GDPR compliance, reflecting a modern and maintainable infrastructure. The site is mobile-optimized, SEO-friendly, and integrates Google Analytics for user insights. Security-wise, the site enforces HTTPS and cookie consent mechanisms, but lacks explicit security policies or incident response information. The absence of WHOIS registration data for the domain introduces some trust concerns, although the website content and company information appear consistent and professional. Overall, the site demonstrates a solid digital presence with room for enhanced security transparency and domain registration clarity.

M

Montpellier Méditerranée Métropole et ville de Montpellier

montpellier3m.fr

0

Montpellier Méditerranée Métropole and the city of Montpellier operate an official government website serving as the primary digital portal for residents, businesses, and visitors. The site provides comprehensive information on municipal institutions, public services, urban development projects, citizen participation, and local governance. It targets a broad audience including local citizens, public service users, and tourists. The business model is that of a public sector entity focused on service delivery and community engagement. Technically, the website is built on Drupal 10, leveraging modern JavaScript libraries such as Swiper.js and AddToAny for enhanced user experience and social sharing. It integrates Matomo analytics with privacy-conscious configurations. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, it lacks publicly available security policies or incident response information, which could be improved to enhance transparency and trust. The WHOIS data is unavailable due to AFNIC policies, but the domain's .fr extension and consistent official branding support its legitimacy. Overall, the website presents a low-risk profile with strong content quality and technical implementation. Strategic recommendations include publishing explicit security and incident response policies, establishing a vulnerability disclosure program, and maintaining up-to-date software to mitigate potential risks.

C

Conseil Départemental de l'Hérault

herault.fr

0

The Conseil Départemental de l'Hérault website serves as the official digital presence for the Hérault department government in France. It provides comprehensive information about departmental services, news, events, and public initiatives targeting residents and stakeholders within the region. The site is well-structured with clear navigation and a focus on accessibility and user experience. The content is primarily in French and covers a broad range of topics including culture, environment, social services, and digital inclusion. Technically, the website employs a variety of established JavaScript libraries such as jQuery, Colorbox, Slick Carousel, and Matomo for analytics, indicating a mature and modern front-end infrastructure. The site uses HTTPS and cookie consent mechanisms compliant with GDPR, reflecting a good level of privacy awareness. However, no explicit security policies or incident response contacts are published, which could be improved. From a security perspective, the site benefits from HTTPS encryption and cookie management but lacks visible security headers and vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected. The WHOIS data confirms the domain's legitimacy and long-standing registration, consistent with a government entity. Overall, the website is professional, trustworthy, and serves its public service role effectively. Strategic improvements could include publishing explicit security policies, incident response contacts, and enhancing security headers to further strengthen the security posture.

V

Ville d'Orléans

orleans.fr

0

The Ville d'Orléans website serves as the official digital presence of the city government, providing residents and visitors with comprehensive access to municipal services, local news, events, and administrative resources. The site is well-branded with consistent city logos and offers a broad range of services including civil status, education, social services, urban planning, and public safety. The target audience primarily includes local citizens and stakeholders interested in city governance and community activities. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as Matomo for analytics and Google Fonts for typography. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and employs secure forms, but lacks visible security headers and explicit cookie consent mechanisms, which are recommended for enhanced protection and GDPR compliance. The absence of WHOIS data limits domain registration transparency, though the site’s content and official branding strongly support its legitimacy. Overall, the website is a professional, trustworthy government portal with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas will strengthen user trust and regulatory adherence.

C

Centre national du livre

partir-en-livre.fr

0

Partir en Livre is a French government-backed cultural initiative organized by the Ministry of Culture and the Centre national du livre. It promotes free youth literature events across France, targeting children, families, and cultural actors. The website is professionally designed using Drupal 9, featuring rich content, event information, and resources for organizers. It integrates Matomo analytics and provides cookie consent mechanisms compliant with GDPR. However, no direct contact emails or phone numbers are publicly listed, relying on contact forms instead. The absence of WHOIS data is notable but likely due to registry policies rather than malicious intent. Overall, the site demonstrates a mature digital presence with good content quality and user experience.

C

Centre national du livre

cnl-demandesdaides.fr

0

The website cnl-demandesdaides.fr is an official French government-related portal managed by the Centre national du livre (CNL) to facilitate digital submission and management of literary aid requests. It serves authors, translators, and literary structures by providing secure login and registration functionalities, emphasizing GDPR compliance and data protection. The site is professionally designed with consistent branding and clear navigation, targeting French literary professionals and organizations. Technically, the site uses a custom JavaScript framework with AJAX for dynamic interactions and file uploads. It employs HTTPS and security tokens to protect user sessions and data submissions. However, it lacks visible security headers and cookie consent mechanisms, and mobile optimization is basic. No third-party analytics or advertising scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site demonstrates good practices such as CSRF token usage and secure password handling. The domain registration data aligns with the official nature of the service, enhancing trustworthiness. No vulnerabilities or suspicious patterns were found in the source code. However, the absence of explicit security policies and incident response contacts suggests room for improvement. Overall, the website presents a secure, compliant, and professional digital service for literary aid management, with recommendations to enhance security headers, privacy notices, and mobile accessibility to further strengthen its posture.

I

International Social Security Association

issa.int

0

The International Social Security Association (ISSA) operates a professional and authoritative website serving as a global network for social security organizations. The site offers comprehensive member services, including guidelines, training, awards, and publications, targeting social security professionals and government agencies worldwide. The website is built on Drupal 10, leveraging modern web technologies and analytics tools with privacy-conscious configurations. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, supporting ISSA's position as a leading international organization in social security.

The domain fgov.be is an official Belgian federal government domain registered since 1996 under the registrant Kanselarij van de Eerste Minister - Externe Communicatie Chancellerie du Premier Ministre - Communication Externe. The website content provided is not the full site but a security challenge page with captcha and obfuscated JavaScript, indicating bot mitigation and access control mechanisms. No privacy, cookie, or terms of service policies are present on this page, nor is there any contact information or business forms. The technical infrastructure includes custom scripts and fingerprinting techniques, but lacks visible modern SEO, accessibility, or security headers. The domain registration data is consistent and trustworthy, confirming the legitimacy of the site as a government entity. However, the content quality and user experience are poor due to the blocking mechanism and minimal content.

B

Belgian Federal Public Service Policy and Support (BOSA)

bosa.be

0

The Belgian Federal Public Service Policy and Support (BOSA) website serves as an official government portal providing multilingual access to federal public service information. The site is positioned as a key government service platform, targeting Belgian citizens and government employees. It offers policy and support services, emphasizing accessibility and compliance with European data protection regulations. The website uses Drupal 10 CMS and integrates modern JavaScript libraries and Matomo analytics with user consent, reflecting a mature digital infrastructure. Security posture is moderate with room for improvement in security headers and transparency of security policies. The domain is a subdomain of belgium.be, indicating high legitimacy despite restricted WHOIS data. Overall, the site is professional, trustworthy, and compliant with GDPR, but could enhance security and transparency further.

The domain belgium.be is an official Belgian government domain registered since 1995 by the Chancellery of the Prime Minister. The website content is currently inaccessible due to a security challenge page with CAPTCHA and obfuscated JavaScript, indicating the presence of a Web Application Firewall or similar security mechanism. This prevents direct content analysis and limits visibility into the website's privacy, cookie, and terms of service policies, as well as contact information. The WHOIS data confirms the legitimacy and consistency of the domain registration with the Belgian government entity. The website appears to serve as a governmental portal targeting the general public and residents of Belgium, providing official information and services. However, the analyzed page lacks visible business or security policy information, and no external links or analytics scripts were detected.

O

Office national de l'emploi

onem.be

0

The Office national de l'emploi (ONEM) is a Belgian public institution responsible for managing the unemployment insurance system and employment-related measures, including career interruption and credit-time schemes. The website serves primarily French-speaking citizens and employers, providing comprehensive information, online services, and updates related to unemployment regulations and benefits. It holds a strong national position as a government agency with a clear public service mandate. Technically, the website employs modern web technologies such as Bootstrap and FontAwesome, with privacy-conscious analytics via Matomo. The site is mobile-optimized, accessible, and well-structured, offering a good user experience. Security is robust with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid for a government site, with good privacy compliance and trust indicators including official social media channels and certifications. The WHOIS data is restricted due to .be domain policies but is consistent with a legitimate government entity. Overall, the site presents low risk with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing a formal security policy and incident response information, and implementing a vulnerability disclosure program to further strengthen trust and compliance.

D

De Rijksdienst voor Arbeidsvoorziening

rva.be

0

De Rijksdienst voor Arbeidsvoorziening (RVA) is the official Belgian government agency responsible for administering social security benefits related to unemployment insurance, career interruption, and time credit. The website serves both citizens and employers, providing comprehensive information, online application services, and up-to-date news and statistics. The RVA holds a strong market position as a trusted public institution with a large operational scale within Belgium. The site is professionally designed with consistent branding and clear navigation, targeting Dutch-speaking users primarily.

F

Fotbalová asociace České republiky

fotbal.cz

0

Fotbalová asociace České republiky operates as the official governing body for football in the Czech Republic, providing comprehensive football-related content including news, match calendars, team information, and fan engagement. The website serves a broad audience including players, coaches, referees, and football fans, positioning itself as an authoritative source in the Czech football ecosystem. The business model is non-profit and focused on sports governance and promotion. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, Smartlook, and Targito marketing tools, alongside frontend libraries like Swiper.js and EasyDropdown. The site is mobile-optimized with good accessibility and SEO practices, although no CMS or hosting provider details were detected. Performance is moderate with a well-structured design and clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, the absence of explicit security headers and privacy policy reduces the overall security and privacy compliance maturity. No critical vulnerabilities were detected, but improvements in security headers and explicit privacy documentation are recommended. Overall, the website is trustworthy and professional, but the lack of WHOIS data and some missing compliance documents suggest areas for improvement in transparency and trust. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, and verifying domain registration details to strengthen legitimacy.

The website www.dpr.go.id represents the official Indonesian House of Representatives, a key government legislative institution. However, the website content is currently inaccessible due to a Web Application Firewall (WAF) or security mechanism, likely provided by Akamai's edgesuite.net service. This blocking prevents access to any substantive content, metadata, or contact information, limiting the ability to perform a full technical and security analysis. The domain registration data confirms the legitimacy and consistency of the site as a government entity in Indonesia. Due to the blocked content, the website's technical infrastructure, security posture, and compliance status cannot be fully evaluated. The site does not contain any adult or questionable content and is safe from a content safety perspective.

S

Stad Oostende

oostende.be

0

Stad Oostende operates as the official municipal government website for the city of Oostende, Belgium. It provides residents and visitors with news, public service information, digital appointment scheduling, and citizen engagement tools such as the O-punt reporting platform. The website is well-positioned as a trusted source of local government information and services, targeting a broad audience including local citizens and tourists. The business model is typical for a government entity, focusing on service delivery rather than commercial revenue. Technically, the website is built on the Icordis CMS platform by LCP nv, utilizing modern JavaScript libraries such as jQuery and Masonry for layout, along with accessibility tools like ReadSpeaker. It employs Matomo analytics for privacy-conscious user tracking and includes cookie consent mechanisms compliant with GDPR. The site demonstrates good mobile optimization and accessibility features, ensuring usability for a wide audience. From a security perspective, the site enforces HTTPS and uses secure forms with anti-forgery tokens. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be improved with additional documentation and security headers. The overall risk assessment is low, with the site showing strong legitimacy, consistent WHOIS data, and no signs of malicious activity. Strategic recommendations include publishing security and incident response policies, implementing vulnerability disclosure, and enhancing security headers to further strengthen the security posture and user trust.

La Fabrique de la Cité is a French think tank focused on urban transitions, founded in 2010 and supported by the VINCI group. The organization collaborates with French and international stakeholders to develop innovative approaches to city planning and reconstruction. Their offerings include research publications, events, and urban projects aimed at sustainable urban development. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting urban planners, policymakers, and researchers. Technically, the website is built on WordPress using the Divi Builder framework, leveraging modern JavaScript libraries such as jQuery and Glide.js for UI components. It employs Google reCAPTCHA for form security and MailerLite for newsletter management. The site is mobile-optimized and demonstrates good SEO practices with Yoast SEO integration and structured data in JSON-LD format. From a security perspective, the site uses HTTPS and includes an invisible reCAPTCHA on forms, along with a cookie consent mechanism compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no public security or incident response policies are found. The WHOIS data for the domain is unavailable, which slightly reduces trust but is mitigated by the professional branding and VINCI backing. Overall, the website presents a low-risk profile with strong content quality and privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and improving WHOIS transparency to bolster trust and compliance.

V

Ville de Laval

monlaval.fr

0

The website monlaval.fr/maelisportail is an official municipal portal operated by the Ville de Laval, France, providing family-oriented administrative services such as childcare registration, school enrollment, activity sign-ups, billing, and communication tools. The portal targets residents of Laval, particularly families with children, and serves as a centralized digital access point for municipal family services. The business model is a government service platform aimed at improving citizen engagement and administrative efficiency. Technically, the site is built on a JavaServer Faces framework using PrimeFaces and Bootstrap for UI components, hosted by OVH. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. The portal includes a cookie consent mechanism and privacy policy modals, reflecting GDPR compliance and data protection awareness. From a security perspective, the site uses HTTPS and secure login forms but lacks explicit security headers such as CSP or HSTS. No vulnerabilities or malicious content were detected, but improvements in security headers and incident response documentation are recommended. Privacy compliance is strong with a clear DPO contact and comprehensive privacy notices. Overall, the site is trustworthy, professionally designed, and well-aligned with its government service purpose. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility and SEO to further strengthen the portal's security posture and user experience.

N

Nordic Urban Resilience Institute

nordicresilience.com

0

The Nordic Urban Resilience Institute is a specialized organization focused on enhancing urban resilience in Nordic regions through expert knowledge and cross-sector collaboration. Their website presents a professional and clear description of their mission, services, and target audience, primarily regional governments, municipalities, academia, and business sectors. The institute positions itself as a neutral facilitator for addressing regional challenges related to climate change, urbanization, and societal pressures. Technically, the website is built on WordPress using the Enfold theme and standard web technologies such as jQuery and Google Fonts. The site is mobile optimized with good SEO and accessibility basics, though some advanced accessibility features could be improved. Performance is moderate with no major issues detected. No analytics or tracking scripts were found, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and formal policies such as privacy, cookie, and incident response disclosures. No vulnerability disclosure or security.txt files are present. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or registration issues, which impacts domain legitimacy assessment. Overall, the website is professional and trustworthy in content and presentation but would benefit from improved transparency in privacy and security policies and verification of domain registration details to enhance trust and compliance.

R

Resilient Cities Network

resilientcitiesnetwork.org

0

Resilient Cities Network is a globally recognized non-profit organization dedicated to fostering urban resilience by connecting cities worldwide. Their platform facilitates collaboration, knowledge sharing, and capacity building among city governments and resilience professionals to address urban challenges and promote safe, equitable urban environments. The organization operates primarily through a membership and network model, targeting city officials and stakeholders interested in sustainability and resilience. Technically, the website is built on WordPress using the Divi theme, leveraging modern web technologies including jQuery, Google Analytics, and Google Tag Manager. Hosting and DNS services are managed via Cloudflare, ensuring reliable performance and security. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and employs reCAPTCHA on forms, but lacks DNSSEC and explicit security policies or vulnerability disclosure mechanisms. Security headers are partially implemented, and no critical vulnerabilities were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a professional, trustworthy digital presence with a solid security posture suitable for a non-profit organization. Recommendations include enabling DNSSEC, publishing a security policy, and enhancing HTTP security headers to further strengthen security and trust.

R

Red Española de Ciudades por el Clima

redciudadesclima.es

0

The Red Española de Ciudades por el Clima website serves as an official platform for a Spanish government-affiliated network focused on local climate change policies. It provides resources, news, projects, and events to support municipalities in their climate action efforts. The site is well-branded, professionally designed, and targets local governments and stakeholders interested in environmental policy. Technically, it is built on Drupal 8 with common web libraries and includes modern UI components like Swiper.js and cookie consent management. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks visible advanced security headers and incident response information. The site is fully accessible without WAF or blocking mechanisms, indicating good operational status. Overall, the website is trustworthy and credible, though WHOIS data is unavailable due to query restrictions, which is common for .es domains. Strategic improvements in security headers and incident response disclosures are recommended.

L

Laval Economie

laval-economie.fr

0

Laval Economie is a French economic development agency serving the Laval Agglomération region. It operates as a non-profit association under French law (loi 1901) and focuses on supporting business creation, implantation, talent recruitment, sustainable development, and providing economic indicators to stimulate local economic vitality. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. It integrates Google Analytics for visitor tracking and implements a cookie consent mechanism to comply with privacy regulations. However, the absence of a visible privacy policy and WHOIS data reduces trustworthiness. Security posture is solid with HTTPS enforced but lacks some security headers and explicit incident response information. Overall, the site is a credible resource for local businesses and entrepreneurs, but improvements in transparency and security practices are recommended.

V

Ville de Laval

laval.fr

0

The website www.laval.fr is the official digital presence of the city of Laval, France, serving as a comprehensive portal for municipal information, public services, cultural activities, and citizen engagement. It targets residents, visitors, and local businesses, providing a broad range of services and information relevant to the community. The site is well-structured with clear navigation and professional design, reflecting the city's commitment to accessibility and transparency. Technically, the site is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery, Google Fonts, and a robust cookie consent management system (Tarteaucitron.js). Analytics are handled via Matomo, respecting user privacy and Do Not Track settings. The site demonstrates good mobile optimization and accessibility features, although some security headers are not explicitly detected in the provided data. From a security perspective, the site enforces HTTPS and employs a comprehensive cookie consent mechanism, indicating a mature approach to privacy compliance. However, the absence of WHOIS data limits domain registration transparency, though this is likely due to AFNIC policies rather than malicious intent. No critical vulnerabilities or suspicious content were identified. Overall, the site presents a low-risk profile with strong business credibility as a government entity. Strategic recommendations include enhancing security headers, publishing explicit security policies, and providing clearer contact information for privacy and security concerns to further strengthen trust and compliance.

N

Nationale Loterij

nationale-loterij.be

0

Nationale Loterij is the official national lottery operator in Belgium, providing a variety of lottery and gambling games including Lotto, EuroMillions, Extra Lotto, EuroDreams, Vikinglotto, and instant lottery games. The organization operates under government oversight, ensuring socially responsible and secure gaming experiences. The website is professionally designed, multilingual, and offers comprehensive information about games, results, and responsible play. Technically, the site uses Adobe Experience Manager and React.js, with modern web technologies and secure HTTPS connections. Security posture is strong with standard security headers and secure login mechanisms including integration with the Belgian itsme authentication service. However, explicit security policies and incident response contacts are not publicly disclosed, and no vulnerability disclosure program is evident. Overall, the site is trustworthy, well-maintained, and serves a large adult audience in Belgium interested in lottery gaming.

I

Inštitút pre dobre spravovanú spoločnosť (SGI)

odkazprestarostu.sk

0

Odkazprestarostu.sk is a Slovak non-profit civic engagement platform established in 2010, operated by the Inštitút pre dobre spravovanú spoločnosť (SGI). It enables citizens to report local problems and track their resolution in cooperation with local governments, promoting transparency and public service improvement. The platform has a strong presence in Slovakia with over 100,000 resolved reports and is supported by the European Social Fund. Technically, the website uses a custom CMS with modern JavaScript libraries including jQuery, Bootstrap, and AngularJS, and integrates social media SDKs and analytics tools such as Google Analytics and Mixpanel. The site is mobile-optimized and provides a good user experience with clear navigation and multilingual support. Security-wise, the site enforces HTTPS with excellent SSL configuration but lacks some security headers and explicit cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is trustworthy, professionally maintained, and serves an important civic function in Slovakia.

C

Communauté d'agglomération Seine-Eure

agglo-seine-eure.fr

0

The website represents the Communauté d'agglomération Seine-Eure, a regional government entity in Normandy, France, serving 60 communes and over 100,000 inhabitants. It provides local government information, community services, event announcements, and administrative resources to residents and businesses in the Seine-Eure territory. The site is built on WordPress, leveraging modern SEO practices and analytics tools such as Google Analytics and Tag Manager, and includes push notification capabilities with user consent via OneSignal. The design is professional, mobile-optimized, and accessible, reflecting a mature digital presence for a public sector organization. However, the absence of WHOIS data and registrant information is a notable anomaly that impacts domain trustworthiness from a registration perspective. Security posture is generally good with HTTPS enforced, but the site lacks explicit privacy, cookie, and security policies, which are important for compliance and user trust. Overall, the site is functional, informative, and trustworthy from a content and business perspective but would benefit from enhanced transparency and security documentation.

L

La Fédération Nationale des Agences d'Urbanisme

fnau.org

0

La Fédération Nationale des Agences d'Urbanisme (FNAU) is a French national network of approximately 50 urban planning agencies focused on territorial planning and development. The organization serves as a collaborative platform for public entities, local authorities, and state partners to coordinate urban development efforts. The website reflects a mature, professional presence with a focus on publications, events, and networking among urban planning professionals. Technically, the site is built on WordPress with common plugins and hosted by OVH sas, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance. Overall, the site is trustworthy and well-aligned with its stated mission and audience.

T

Terres d'Argentan

terresdargentan.fr

0

Terres d'Argentan is a French local government community portal serving 49 communes with approximately 34,000 inhabitants. The website provides comprehensive information about community services, events, public announcements, and citizen resources. It positions itself as an essential public service platform for residents and stakeholders in the Argentan area. The site is well-branded and consistent with official government communications. Technically, the website is built on WordPress using a modern tech stack including Bootstrap, jQuery, Leaflet.js for maps, and integrates Google Fonts and Google reCAPTCHA for security. It employs Matomo for privacy-conscious analytics and uses the Complianz GDPR plugin to manage cookie consent, demonstrating a good level of digital maturity and compliance with European privacy regulations. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. Cookie consent is actively managed, and analytics cookies are disabled by default. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website is trustworthy, professionally maintained, and compliant with privacy laws. It serves its community audience effectively with good content quality and user experience. Strategic recommendations include enhancing security headers, publishing a dedicated security policy, and continuing regular updates to maintain security posture.

V

Ville de Montreuil

montreuil.fr

0

The website www.montreuil.fr is the official digital presence of the city of Montreuil, France. It provides comprehensive municipal information, services, and citizen engagement tools. The site is well-branded, professionally designed, and targets a broad audience including residents, families, professionals, and associations. It offers multilingual support and a rich set of resources including news, events, and administrative procedures. Technically, the site is built on Drupal 11, leveraging modern web technologies and privacy-conscious analytics via Matomo. The site is mobile-optimized and accessible, with clear navigation and structured content. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data is typical for .fr domains managed by AFNIC and does not detract from the site's legitimacy. Overall, the site demonstrates a mature digital infrastructure suitable for a large municipal government entity. It balances user experience, privacy, and security effectively, though it could enhance transparency by publishing explicit security policies and incident response contacts.

A

Agence Nationale pour la Rénovation Urbaine

anru.fr

0

The Agence Nationale pour la Rénovation Urbaine (ANRU) is a French public agency dedicated to financing and supporting the transformation of urban neighborhoods under the national urban policy. The website serves as an authoritative resource hub offering detailed information on programs, recent projects, publications, and innovation initiatives related to urban renewal across France. It targets public sector stakeholders, journalists, startups, beneficiaries, and job candidates. Technically, the site is built on Drupal 10, employs Matomo for analytics, and uses a cookie consent mechanism compliant with GDPR. The site is well-structured, mobile-optimized, and professionally designed, reflecting its government agency status. Security posture is good with HTTPS enforced and privacy policies in place, though some HTTP security headers could be improved. WHOIS data is unavailable due to AFNIC policies for .fr domains but the domain and content strongly indicate legitimacy. Overall, the site is a reliable and professional digital presence for ANRU.

C

Caux Seine agglo

cauxseine.fr

0

Caux Seine agglo is a French regional government entity providing local community services and information to residents and businesses in the Caux Seine area. The website serves as an official portal for announcements, events, and public services, targeting a regional audience. The site is built on WordPress and leverages modern web technologies including Matomo for analytics and Google Fonts for typography. The technical infrastructure is moderately optimized with good mobile responsiveness and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of a privacy policy and WHOIS data reduces compliance and trust scores. Overall, the site is professional and trustworthy but could benefit from enhanced privacy disclosures and security hardening.

L

Laval Agglomération

agglo-laval.fr

0

Laval Agglomération operates as the official regional government body for the Laval area in the Mayenne department of France. The website serves as a comprehensive portal offering information and services related to economic development, urban planning, public services, tourism, and community engagement for approximately 100,000 residents and over 6,000 businesses. The site is well-structured with clear navigation and targets local residents, businesses, and visitors. Technically, the site is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery and Google Fonts, and employs Matomo for analytics with privacy-conscious configurations such as Do Not Track support and explicit cookie consent management via tarteaucitron.js. Security posture is moderate with room for improvement in HTTP security headers and SSL configuration transparency. The absence of WHOIS data limits domain registration transparency but does not detract from the site's legitimacy given its official nature and content quality. Privacy policies and cookie consent mechanisms are present and appear GDPR compliant, supporting user privacy rights. Overall, the site demonstrates a solid digital presence for a government entity with good content quality and user experience.

F

France Ville Durable

sustainablecitybyfrance.org

0

Sustainable City by France is a French non-profit association dedicated to accelerating the transition of cities and territories towards sustainability and resilience. It brings together local authorities, state entities, companies, and experts to collaborate on sustainable urban development projects. The website reflects a medium-sized organization with strong government and private sector partnerships, offering resources, project mapping, and events to its audience. Technically, the site is built on WordPress with Elementor, uses modern web technologies, and is hosted by OVH sas. Security posture is good with HTTPS and reCAPTCHA implemented, though there is room for improvement in DNS security and HTTP headers. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its niche.

S

Statutární město Havířov

havirov-city.cz

0

Statutární město Havířov operates an official municipal website providing comprehensive information and services to its residents and visitors. The site covers a wide range of topics including city history, administration, social services, culture, education, and urban planning. It serves as a central hub for city news, public notices, and access to municipal resources. The website targets local citizens and stakeholders, positioning itself as the authoritative source for city-related information. Technically, the website is built on Drupal 10 CMS, leveraging modern web technologies such as Google Analytics for visitor tracking and Klaro for cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Hosting appears stable with a reputable registrar and nameserver provider. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent mechanisms compliant with GDPR. However, no explicit security headers were detected, and no vulnerability disclosure or incident response information is publicly available. The site does not expose sensitive data and uses anonymized IP tracking in analytics, indicating a reasonable security posture. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively supports the city’s communication and service delivery objectives. Strategic improvements in security headers and transparency around security policies could further enhance its security maturity and user trust.

M

Mon Restau Responsable®

monrestauresponsable.org

0

Mon Restau Responsable® is a French initiative focused on promoting sustainable and healthy collective catering through a participative and free self-assessment platform. It targets collective restaurants in schools, universities, companies, and medico-social sectors, helping them improve ecological and social practices. The website is well-positioned in the French market with over 2300 engaged restaurants and strong partnerships with recognized organizations such as FNH and Restau'Co. Technically, the site uses modern frameworks like Next.js and Chakra UI, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable, slightly reducing domain trust. Strategic recommendations include publishing security policies and vulnerability disclosure information to enhance trust further.

C

Commune de Kopstal

kopstal.lu

0

The Commune de Kopstal website serves as the official digital presence for the local government of Kopstal, Luxembourg. It provides residents and visitors with comprehensive information about municipal services, news, events, publications, and administrative procedures. The site is well-structured, professionally designed, and targets local citizens and stakeholders. The business model is typical of a government entity focused on public service delivery and community engagement. Technically, the website is built on Drupal 10, leveraging modern web technologies including Tailwind CSS and Alpine.js for frontend interactivity. It integrates Piwik PRO for analytics and Usercentrics for GDPR-compliant cookie consent management, indicating a mature digital infrastructure with attention to privacy and user experience. The site is mobile-optimized and accessible, with good SEO practices. From a security standpoint, the site enforces HTTPS and implements cookie consent mechanisms. However, there is a lack of visible security headers and no published security or incident response policies, which are areas for improvement. The absence of WHOIS data due to a failed query reduces domain registration transparency, though the official .lu domain and consistent branding support legitimacy. Overall, the website is a reliable and professional government portal with strong content and technical foundations but could enhance its security posture and transparency regarding domain registration and privacy policies.

F

France Villes et territoires Durables

francevilledurable.fr

0

France Villes et territoires Durables is a French non-profit association dedicated to accelerating the transition of cities and territories towards sustainability and resilience. It brings together local authorities, government entities, companies, and experts to collaborate on sustainable urban development. The website reflects a professional and well-established organization with a clear mission and a strong network of reputable partners. The digital infrastructure is based on WordPress with modern plugins and technologies, hosted by OVH and utilizing Cloudflare DNS services. Security posture is solid with HTTPS, security headers, and reCAPTCHA protections in place, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, well-maintained, and serves its target audience effectively.

Č

Česká centra

czechcentres.cz

0

Česká centra is the official governmental organization responsible for promoting Czech culture worldwide through a network of cultural centers abroad. The website serves as a comprehensive portal for information about their international branches, cultural events, projects, and media resources. It targets international audiences interested in Czech culture, including partners, media, and the general public. The organization holds a strong market position as the official cultural representation of the Czech Republic abroad. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Facebook Pixel, Vimeo for video content, and Algolia for search functionality. The CMS appears to be Statamic, and the site is well-optimized for mobile devices with good SEO and accessibility features. Performance is moderate with asynchronous loading of scripts to enhance user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating good privacy compliance. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly visible and could be improved. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is notable but likely due to registry policies for government domains. Overall, the site demonstrates a strong security posture with room for minor improvements. The overall risk assessment is low, with the website appearing trustworthy, professional, and compliant with GDPR. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility. The site is a reliable digital asset for the Czech government's cultural diplomacy efforts.