Government security reports

The website www.zaragozaciudad.net serves as an official municipal blog platform for the Ayuntamiento de Zaragoza, targeting local citizens with community engagement and information about city neighborhoods and municipal services. The site provides a directory of citizen blogs categorized by topics and neighborhoods, supporting local communication and participation. The business model is public sector focused, providing a platform for citizen interaction and municipal transparency. The website content is primarily in Spanish and reflects a government entity's communication channel. Technically, the website uses XHTML 1.0 and CSS 2.0 with JavaScript enhancements and integrates Google Analytics and Google Tag Manager for visitor tracking. The design is basic and somewhat dated, with limited mobile optimization and accessibility features. No modern CMS or advanced frameworks are detected. Performance is moderate, and SEO is basic with meta tags present but no advanced structured data or Open Graph tags. From a security perspective, the site uses HTTPS as inferred from script sources but lacks explicit security headers such as CSP or HSTS. No privacy or cookie policies are present, indicating GDPR compliance gaps. The WHOIS data is missing or unavailable, which is inconsistent with the active municipal content and raises concerns about domain legitimacy. No incident response or vulnerability disclosure information is published, and no security best practices beyond basic HTTPS are observed. Overall, the website is functional and serves its public sector purpose but has notable gaps in privacy compliance, security posture, and domain registration transparency. Strategic improvements in security headers, privacy policies, and WHOIS registration clarity are recommended to enhance trust and compliance.

D

Département de la Charente-Maritime

charente-maritime.fr

65

The website la.charente-maritime.fr serves as the official online presence for the Département de la Charente-Maritime, a governmental entity in France. It provides extensive information about departmental services, elected officials, public projects, social services, tourism, and cultural activities. The site targets residents, visitors, and stakeholders within the Charente-Maritime region, offering a broad range of public sector services and information. The business model is that of a public sector government service provider, with a large scope and audience. Technically, the website is built on the Drupal CMS platform, leveraging modern web technologies such as Google Fonts, Google Maps API, and Matomo Analytics for privacy-conscious user tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The presence of cookie consent mechanisms indicates attention to privacy compliance, though an explicit privacy policy page was not detected in the provided content. From a security perspective, the site enforces HTTPS and uses modern JavaScript libraries, but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which is unusual but may be due to AFNIC registry policies or privacy protections. Overall, the site appears trustworthy and professional, consistent with an official government entity. The overall risk is low, but improvements are recommended in publishing comprehensive privacy and security policies, implementing security headers, and providing clear contact information for security incidents to enhance trust and compliance.

C

Conseil départemental de la Vendée

vendee.fr

62

The website www.vendee.fr is the official online presence of the Conseil départemental de la Vendée, a government entity serving the Vendée department in France. It provides comprehensive information and services related to social support, infrastructure, culture, and public administration targeted at residents and stakeholders of the region. The site is well-branded, professionally designed, and structured to facilitate user navigation and access to departmental resources. Technically, the site is built on TYPO3 CMS with Bootstrap and FontAwesome for frontend styling, and integrates Matomo analytics for user behavior tracking, including heatmaps and session recordings. The presence of cookie consent mechanisms and structured data indicates a mature digital infrastructure with attention to privacy and SEO best practices. Performance and mobile optimization are good, supporting a positive user experience. From a security perspective, the site enforces HTTPS and includes some security headers, though additional headers like Content-Security-Policy could enhance protection. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data is unavailable, likely due to privacy protection, which is justified for a government domain. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website demonstrates a strong security posture, good privacy compliance, and high business credibility as a government portal. Strategic recommendations include enhancing security headers and publishing a clear privacy policy page to improve transparency and compliance.

I

Informační centrum Litomyšl

ticlitomysl.cz

41

Informační centrum Litomyšl operates as a local government-affiliated tourism and cultural information center serving visitors to Litomyšl, Czech Republic. The website provides comprehensive information on city tours, accommodation, dining, cultural events, and ticket sales, supported by an e-shop for related products. The site is built on Joomla CMS with modern UI libraries, offering a good user experience and mobile responsiveness. However, the absence of privacy and cookie policies indicates a gap in GDPR compliance. Security posture is moderate with HTTPS usage but lacks advanced security headers and vulnerability disclosure mechanisms. The WHOIS data is unavailable, limiting domain trust verification, but the website content and external partnerships suggest legitimacy. Strategic improvements in privacy compliance and security practices are recommended to enhance trust and regulatory adherence.

T

Technické služby Tábor s.r.o.

tstabor.cz

44

Technické služby Tábor s.r.o. is a municipal service company based in Tábor, Czech Republic, providing essential public services such as parking management, green area maintenance, public lighting, cemetery management, and animal shelter operations. Established in 1995, the company holds multiple ISO certifications indicating a commitment to quality and environmental standards. The website serves as an informational and contact portal for residents and stakeholders, featuring news updates, service links, and a contact form. The website is built on WordPress with a moderate technical infrastructure including common plugins and scripts such as Contact Form 7 and Google Maps API. The site is mobile-optimized with good navigation and content relevance. Security posture is adequate with HTTPS enforced and CAPTCHA on forms, but lacks advanced security headers and cookie consent mechanisms. No WHOIS data is available, which limits domain registration trust analysis. Overall, the security posture is stable but could be improved by implementing security headers, cookie consent, and publishing incident response contacts. The business credibility is strong based on certifications and clear company information. The website content is safe and appropriate for a general audience with no adult or questionable content detected. Strategic recommendations include enhancing security headers, adding cookie consent for GDPR compliance, publishing vulnerability disclosure and incident response information, and improving WHOIS transparency to increase trustworthiness.

T

Technické služby města Litoměřice

tsmlt.cz

60

Technické služby města Litoměřice is a municipal contributory organization established to provide essential technical and communal services to the city of Litoměřice, Czech Republic. Founded in 1995, the organization focuses on maintaining city cleanliness, public green spaces, infrastructure repairs, and other city maintenance tasks. The website reflects a well-established local government service provider with a clear mission and target audience consisting primarily of city residents and local stakeholders. The digital presence is professional, with good content quality and clear navigation, supporting the organization's public service role. From a technical perspective, the website employs a traditional tech stack including jQuery, Google Fonts, and Google Tag Manager for analytics. While the site is mobile-optimized and performs moderately well, the use of an outdated jQuery version suggests some technical debt and potential security risks. The hosting is managed through WEDOS, a Czech hosting provider, consistent with the domain registration data. Security posture is moderate; the site uses HTTPS and has implemented cookie consent mechanisms in compliance with GDPR. However, no explicit security headers or vulnerability disclosure policies are present, and the older JavaScript libraries could expose the site to known vulnerabilities. Contact information and a data protection officer are clearly provided, indicating some compliance with data protection regulations. Overall, the site is trustworthy but could benefit from enhanced security measures and updated technical components. The overall risk assessment is low to moderate, with no critical security issues detected. Strategic recommendations include updating JavaScript libraries, implementing security headers, formalizing security policies, and enhancing privacy documentation to improve compliance and trust. These steps will strengthen the organization's digital security posture and better protect user data while maintaining a professional and accessible web presence.

M

Město Borovany

borovany-cb.cz

49

Město Borovany operates an official municipal website serving the residents and visitors of Borovany, Czech Republic. The site provides comprehensive local government information including news, official notices, contact details, event calendars, and public services. The target audience is primarily local citizens and stakeholders interested in municipal affairs. The business model is a government service portal with no commercial intent. The website maintains a consistent brand identity and good content quality, supporting its role as a trusted local government resource. Technically, the website uses a modern technology stack including jQuery, Bootstrap, Swiper.js, and Leaflet.js for mapping. It is built on the Ocelot CMS platform and demonstrates good mobile optimization and accessibility compliance, including an accessibility certification. Performance is moderate, with no major technical issues detected. However, some security best practices such as security headers are missing. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks a published privacy policy and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces domain trustworthiness, but the official nature of the content and contact information supports legitimacy. Overall, the website is a well-maintained municipal portal with good usability and security posture, though improvements in privacy compliance and domain transparency are recommended to enhance trust and regulatory adherence.

I

Informační portál Kaplice a Kaplicko

ikaplice.cz

44

The website ikaplice.cz serves as an information portal dedicated to the town of Kaplice and its surrounding region in the Czech Republic. It provides comprehensive local cultural, tourist, and community event information, targeting residents and visitors interested in the area. The portal features event calendars, news articles, and service directories, positioning itself as a key regional resource for cultural engagement and tourism promotion. The site is supported by partnerships with local government and tourism organizations, enhancing its credibility and reach. Technically, the website employs a custom CMS with a technology stack including jQuery 1.11.2, jQuery UI, Fancybox, Google Fonts, Google Analytics, and Mapy.cz API for mapping services. While the site is functional and well-structured with good navigation and content relevance, it uses outdated JavaScript libraries that may pose security risks. Mobile optimization and accessibility are basic, and SEO practices are moderate. The site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and explicit privacy or terms of service policies. From a security perspective, the portal demonstrates moderate maturity. The use of outdated libraries and absence of security headers are notable vulnerabilities. No direct contact emails or phone numbers are provided, limiting transparency. The cookie consent banner indicates some GDPR awareness, but the lack of a privacy policy and security incident response information suggests compliance gaps. No WAF or blocking mechanisms are detected, and the domain registration data aligns well with the website's regional focus, supporting legitimacy. Overall, ikaplice.cz is a valuable regional information resource with good content quality and business credibility but requires improvements in technical security, privacy compliance, and modernization of its technology stack to enhance trust and resilience against threats.

H

Health Resources & Services Administration

organdonor.gov

77

The website organdonor.gov is an official U.S. government platform managed by the Health Resources & Services Administration (HRSA) under the Department of Health & Human Services. It serves as a comprehensive resource for organ, eye, and tissue donation information, targeting both the general public and healthcare professionals. The site provides educational content, registration guidance, statistics, and professional outreach materials, positioning itself as a trusted authority in the organ donation space. Technically, the site is built on Drupal 10 and leverages modern web technologies including the US Web Design System, Google Analytics, and YouTube integration. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The hosting environment is consistent with government infrastructure, ensuring reliability and security. From a security perspective, the site enforces HTTPS and employs several best practices, though explicit security headers like X-Frame-Options were not confirmed. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy linked from the site, though a cookie consent mechanism is not evident. The WHOIS data is unavailable due to privacy typical for .gov domains, but the domain's legitimacy is supported by consistent branding and authoritative content. Overall, organdonor.gov presents a professional, secure, and trustworthy online presence with minor areas for improvement in cookie consent and explicit security header implementation. It effectively fulfills its mission as a government resource for organ donation awareness and education.

The website kjh.cz represents the Místní akční skupina Království – Jestřebí hory, a regional non-profit organization focused on community and regional development in the Czech Republic. It provides information on local events, projects, educational initiatives, and regional services, targeting residents and stakeholders of the Jestřebí hory region. The site maintains partnerships with regional organizations and uses a custom CMS platform with a moderate technology stack including jQuery, Google Maps API, and Google Analytics. Technically, the website employs several legacy JavaScript libraries which may pose security risks and lacks explicit security headers. The site is served over HTTPS with a cookie consent mechanism that complies with GDPR principles, although no formal privacy policy or terms of service pages were found. The user experience is generally good with clear navigation and mobile optimization, but accessibility features are basic. From a security perspective, the site benefits from HTTPS and cookie consent but should update outdated libraries and implement security headers to enhance protection. No incident response or vulnerability disclosure information is present. WHOIS data confirms the domain's legitimacy and consistency with the website's regional focus. Overall, the site is a credible regional non-profit platform with good content quality but requires improvements in security practices and privacy documentation to meet higher compliance and security standards.

Svazek obcí Jestřebí hory operates as a regional government association website serving the Jestřebí hory region in the Czech Republic. The site provides localized news, event information, cultural and natural attractions, and community resources targeted at residents and visitors. It maintains a consistent and professional brand presence with partner affiliations to regional organizations. Technically, the website uses a variety of JavaScript libraries including jQuery, Modernizr, and Google Maps API, but some libraries are outdated which may pose security risks. The site is hosted on a domain registered since 2004, indicating a stable presence. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and DNSSEC. Privacy compliance is basic with no explicit privacy policy or terms of service pages found. Overall, the website is functional and trustworthy but would benefit from technical and compliance improvements.

D

Digitální agora

digitalniagora.cz

52

Digitální agora is a Czech-based organization specializing in digital civic engagement and public participation tools, with over 20 years of experience. Their services include participatory budgeting, public space creation, and strategic planning, supported by custom digital platforms. The website reflects a professional and consistent brand presence targeting municipalities, schools, and companies. Technically, the site is built on WordPress with Elementor and JetFormBuilder, incorporating modern web technologies and GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS, reCAPTCHA protection on forms, and no visible vulnerabilities, though additional security headers could enhance protection. WHOIS data is unavailable, common for CZ domains, but the presence of official funding logos and partner links supports legitimacy. Overall, the site is well-structured, secure, and compliant, serving its niche effectively.

C

Cirad

cirad.fr

62

Cirad is a prominent French public research organization specializing in agronomic research and international cooperation for sustainable development in tropical and Mediterranean regions. The website reflects a well-established institution with a clear mission, extensive research themes, and active engagement in global projects and partnerships. The digital infrastructure is modern, leveraging eZ Platform CMS, and integrates analytics tools such as Matomo and Google Analytics with privacy-conscious configurations. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data is noted but does not detract significantly from the site's legitimacy given its government affiliation and professional presentation. Overall, the site is trustworthy, informative, and well-structured, serving a diverse audience including researchers, students, and institutional partners.

K

Kulturní zařízení Ostrava-Jih, příspěvková organizace

kulturajih.cz

47

Kulturní zařízení Ostrava-Jih is a public cultural institution based in Ostrava, Czech Republic, focused on organizing cultural events, operating a cinema, and providing educational and creative courses for the local community. The organization targets a broad audience including seniors, families, and schools, positioning itself as a key cultural hub in the Ostrava-Jih region. The website reflects this mission with detailed event listings, partner affiliations, and community engagement features. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Leaflet.js for maps, and integrates Google Analytics and Google Tag Manager for tracking. The site is mobile responsive and well-structured, though some accessibility features could be improved. Security measures include HTTPS enforcement and CAPTCHA protection on forms, but lack of security headers and cookie consent mechanisms indicate areas for enhancement. From a security and compliance perspective, the site shows good practices with encrypted connections and privacy policy availability, but lacks visible incident response contacts, security policies, and cookie consent banners, which are important for GDPR compliance. WHOIS data is unavailable, likely due to privacy protection, which is common for public organizations but limits domain trust verification. Overall, the website is professional, trustworthy, and serves its community well, but should improve privacy compliance and security headers to strengthen its security posture and regulatory adherence.

D

Deutsch-Griechische Industrie- und Handelskammer

german-chamber.gr

48

The Deutsch-Griechische Industrie- und Handelskammer (German-Greek Chamber of Industry and Commerce) serves as a bilateral business network fostering trade and cooperation between Germany and Greece. With approximately 900 members, it offers a range of services including market entry consulting, legal and tax advice, delegation support, job portals, and translation services. The organization also hosts social events and networking opportunities to strengthen business ties. The website reflects a professional and consistent brand image aligned with its institutional partners such as BMWK, DIHK, and IHK. Technically, the site is built on the Ibexa DXP CMS with Vue.js and Swiper.js for frontend interactivity, delivering a good user experience with mobile optimization and accessibility considerations. Security posture is solid with HTTPS and no exposed sensitive data, though improvements could be made by adding security headers and explicit incident response information. Privacy compliance is partially met with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site is trustworthy and well-positioned within its niche, serving a medium-sized organization focused on government and non-profit sectors.

M

Město Český Brod

cesbrod.cz

57

Město Český Brod operates an official municipal website serving the residents and stakeholders of Český Brod, Czech Republic. The site provides comprehensive information about local government services, events, public announcements, and contact channels. It maintains a consistent brand presence and integrates social media platforms to enhance community engagement. The website is built on a modern CMS framework (Nette) and uses standard web technologies including Google Analytics and reCAPTCHA for security and analytics purposes. While the site is well-structured and mobile-optimized, it lacks explicit privacy and terms of service pages, which are important for compliance and transparency. Security practices include HTTPS enforcement and cookie consent mechanisms, but no detailed security policy or incident response information is publicly available. The domain is long-established and consistent with the municipal nature of the site, indicating high legitimacy. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

M

Město Říčany

ricany.cz

57

Město Říčany is the official municipal government website for the town of Říčany in the Czech Republic. It serves as a comprehensive portal for citizens and local businesses, providing news updates, cultural event calendars, public service information, official notices, and contact details. The site targets local residents and stakeholders, offering a user-friendly experience with multilingual support and clear navigation. The business model is focused on public administration and community engagement, positioning itself as a trusted local government authority. Technically, the website is built on WordPress with a modern tech stack including jQuery, WPML for multilingual support, and various plugins for GDPR compliance and user interaction. The site demonstrates good performance, mobile optimization, and accessibility features. It integrates Google Analytics and Tag Manager for analytics and marketing purposes, with a clear cookie consent mechanism ensuring GDPR compliance. From a security perspective, the site enforces HTTPS and uses best practices such as cookie consent and DOMPurify for sanitization. However, some minor issues like broken lazy loading images and missing explicit security headers (CSP, X-Frame-Options) were noted. The WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and official branding support its legitimacy. Overall, the site presents a low-risk profile with strong business credibility and good technical implementation. Strategic recommendations include enhancing security headers, fixing image loading errors, and adding a security.txt file for vulnerability disclosure to further strengthen trust and compliance.

M

Mauges Communauté

maugescommunaute.fr

48

Mauges Communauté is a French local government community of agglomeration providing a broad range of public services and information to residents and stakeholders within the Mauges territory. The website serves as an official portal offering details on governance, environmental initiatives, economic development, cultural activities, and citizen participation. It targets local residents and public sector stakeholders, positioning itself as a key regional authority. Technically, the site is built on WordPress using the Divi theme, incorporating modern JavaScript libraries and Matomo analytics for user tracking. The site demonstrates good mobile optimization and SEO practices, though some accessibility features are basic. Security posture is solid with HTTPS enforced and use of security plugins, but lacks visible security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain appears legitimate despite missing WHOIS data, consistent with privacy protection norms for government domains. Strategic improvements in security headers, privacy mechanisms, and transparency would enhance trust and compliance.

O

Obec Malé Svatoňovice

malesvatonovice.cz

45

Obec Malé Svatoňovice operates an official municipal website serving local citizens and tourists with information about the village, cultural events, local services, and historical sites such as the Museum of the Čapek brothers. The website is well-structured, primarily in Czech, and provides clear navigation and contact details, positioning itself as a trusted local government information portal. The domain is long-established since 2004, reinforcing its credibility and stable presence in the region. Technically, the website uses a modest technology stack including jQuery 1.11.1 and alertify.js, with CSS stylesheets and Google Fonts for styling. The site appears to be built on a CMS platform, likely CMS Made Simple, based on URL and form patterns. The site is mobile responsive and SEO optimized with proper meta tags, but lacks modern security headers and uses an outdated jQuery version, which could pose security risks. From a security perspective, the site enforces HTTPS and uses POST methods for forms, but does not implement visible security headers such as Content-Security-Policy or X-Frame-Options. There is no cookie consent mechanism despite having a GDPR policy page, indicating partial privacy compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is a reliable and professional municipal portal with good content quality and business credibility. However, improvements in security headers, updating JavaScript libraries, and implementing cookie consent would enhance its security posture and privacy compliance.

F

Fundación Estatal para la Formación en el Empleo - Fundae

fundae.es

64

Fundación Estatal para la Formación en el Empleo (Fundae) is a Spanish government-affiliated entity dedicated to supporting and collaborating with the public employment service (SEPE) in the area of workforce training. The organization provides a variety of services including training portals, subsidy management, statistical data publication, and digital competence evaluation aimed at workers and companies across Spain. The website reflects a mature digital presence with multiple language options and a clear focus on accessibility and user experience. Technically, the site is built on the Sitefinity CMS platform and leverages modern web technologies such as jQuery, Bootstrap, and Google Tag Manager. It implements cookie consent mechanisms and integrates third-party analytics and tracking tools like Metricool. The website is mobile-optimized and adheres to accessibility standards, providing a good user experience. From a security perspective, the site uses HTTPS and cookie consent but lacks visible advanced security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable due to query restrictions, but the website's official branding and government affiliation strongly support its legitimacy. Overall, Fundae's website is a professional, secure, and compliant platform that effectively serves its public service mission. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and maintaining regular audits of third-party scripts to further strengthen security posture.

The website www.zaragoza.es/sede/ is the official electronic headquarters of the Ayuntamiento de Zaragoza, serving as a comprehensive digital platform for municipal services, citizen information, and electronic administration. It offers a wide range of services including public employment offers, cultural agendas, citizen participation, and access to various municipal resources. The site targets residents and visitors of Zaragoza, providing a government-backed, authoritative source of information and services. Technically, the site employs modern web technologies such as HTML5, CSS3, JavaScript, jQuery, Bootstrap, and FontAwesome, with integrations for Google Tag Manager and Google Analytics, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Security-wise, the site uses HTTPS and shows good security practices, though explicit security headers and a cookie consent mechanism could be improved. The WHOIS data is unavailable due to access restrictions, but the domain is a recognized official government domain, lending high legitimacy. Overall, the site is professional, trustworthy, and well-maintained, serving as a critical digital interface for Zaragoza's municipal government.

M

MĚSTO TŘEBÍČ

trebiczije.cz

47

The website trebiczije.cz serves as an official informational portal for the city of Třebíč, Czech Republic, targeting citizens, entrepreneurs, and tourists. It provides comprehensive information about living, business opportunities, tourism, and community events, supported by a dedicated incoming team. The site positions itself as a regional hub for local development and engagement, reflecting a medium-sized government entity with a focus on sustainable urban growth and community well-being. Technically, the site employs a modern JavaScript stack including jQuery, Swiper, Fancybox, and integrates analytics tools such as Google Analytics, Microsoft Clarity, and Google Tag Manager. It features responsive design and basic accessibility, with cookie consent mechanisms aligned with GDPR requirements. However, the absence of detected security headers and incomplete WHOIS data indicate areas for improvement in security and domain transparency. From a security perspective, the site benefits from HTTPS encryption and client-side form validation but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The missing WHOIS data raises concerns about domain registration legitimacy, although the website content and contact information strongly suggest it is an official municipal resource. Overall, the website is professionally designed and functional, with good content quality and user experience. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and resolving WHOIS data visibility to improve trust and compliance. These steps will strengthen the site's security posture and business credibility while maintaining its role as a vital community resource.

P

Paris&Co

parisandco.com

10

Paris&Co is a territorial innovation agency serving Paris and its metropolitan area, focused on accelerating impactful projects related to sustainable transitions. The organization targets entrepreneurs, enterprises, institutions, and territories, providing sector-specific expertise and tailored programs to foster innovation. The website is professionally designed using WordPress and Elementor, with good mobile optimization and SEO practices. It integrates marketing and analytics tools such as Google Analytics and HubSpot, and implements a cookie consent mechanism to comply with privacy regulations. However, the absence of a visible privacy policy, terms of service, and explicit contact information limits full compliance and user trust. The lack of WHOIS data for the domain is a notable concern, although the website content and branding strongly indicate legitimacy. Security posture is adequate with HTTPS and no visible vulnerabilities, but could be improved by adding security headers and incident response information.

E

Expertise France

expertisefrance.fr

62

Expertise France is a French public agency specializing in international technical cooperation, operating as a subsidiary of the Agence française de développement. The agency holds a strong market position as the second largest technical cooperation entity in Europe, delivering projects across governance, security, climate, health, education, and cultural sectors in over 140 countries. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, it leverages Drupal CMS, the French government design system (DSFR), and integrates modern analytics and consent management tools, ensuring compliance with privacy regulations. Security posture is robust with HTTPS enforcement and consent mechanisms, though some security headers could be explicitly confirmed. Overall, the site demonstrates high professionalism and trustworthiness, though WHOIS data is unavailable, which slightly impacts domain legitimacy assessment.

C

Cerema

cerema.fr

48

Cerema is a French public entity specializing in climate adaptation and territorial planning, serving government bodies, local authorities, and enterprises. It holds a strong market position as a referent public organization providing tailored solutions for environmental and infrastructural challenges. The website reflects a mature digital presence with a modern Drupal 10 CMS, integrated analytics tools, and a professional design that supports user engagement and accessibility. Security posture is solid with HTTPS and privacy-conscious analytics configurations, though explicit security policies and vulnerability disclosures are absent. Overall, the site demonstrates high business credibility and technical maturity, aligned with its governmental role.

S

Sénat

senat.fr

62

The website www.senat.fr is the official portal of the French Senate, providing authoritative information on parliamentary work, senators, legislative texts, and public consultations. It serves a broad audience including citizens, government officials, researchers, and media professionals. The site offers extensive content in French with multilingual support and integrates various services such as video archives, petitions, and legislative databases. Technically, the site is built on TYPO3 CMS, uses Bootstrap for responsive design, and employs Matomo for analytics with a GDPR-compliant cookie consent mechanism. The website demonstrates a mature digital infrastructure with good performance and accessibility standards. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although security headers and explicit incident response policies could be improved. The absence of WHOIS data is noted but likely due to registry privacy policies and does not detract from the site's legitimacy. Overall, the site is professional, trustworthy, and well-maintained, reflecting its role as a key government information source.

A

Agence Bio

agencebio.org

60

Agence Bio is the official French agency dedicated to the development and promotion of organic agriculture. It serves as a governmental and non-profit entity focused on raising awareness, providing data, funding projects, and communicating the benefits of organic farming to various stakeholders including consumers, producers, distributors, and the general public in France. The agency maintains a strong market position as the authoritative source for organic agriculture information and support in France. Technically, the website is built on a modern WordPress CMS platform with Elementor page builder and enhanced SEO via Yoast. It integrates multiple marketing and analytics tools such as Google Tag Manager, Matomo, and Sendinblue, indicating a mature digital infrastructure. The site is well-optimized for mobile and accessibility, with good performance and clear navigation. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks visible advanced security headers and a published security.txt file. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data limits domain trust verification, though the website content and official tone strongly suggest legitimacy. Overall, Agence Bio presents a professional, trustworthy, and content-rich platform supporting organic agriculture in France. Strategic improvements in security headers, privacy policy transparency, and incident response disclosures would enhance its security posture and compliance.

F

Fonds Français pour l’Environnement Mondial (FFEM)

ffem.fr

58

The Fonds Français pour l’Environnement Mondial (FFEM) is a French government-established fund focused on financing innovative environmental projects in developing countries. With a history dating back to 1994, FFEM supports projects that preserve biodiversity, combat climate change, and promote sustainable resource management. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support. Technically, it is built on Drupal CMS with modern frameworks and includes accessibility and SEO best practices. Security posture is strong with HTTPS and consent management, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates high trustworthiness and aligns well with its governmental and non-profit mission.

A

Agence Française de Développement

afd.fr

61

The Agence Française de Développement (AFD) is a prominent French public development bank dedicated to financing and supporting sustainable development projects worldwide. The website reflects a mature, well-established organization with a clear mission to promote social and environmental transitions. The site targets a diverse audience including governments, investors, civil society, and enterprises. Technically, the website is built on Drupal CMS with modern frameworks and analytics tools, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS and consent management, though explicit security headers should be verified. The absence of WHOIS data is due to AFNIC privacy policies, which is typical for French government domains. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

Ú

ÚSTAV PRO STÁTNÍ KONTROLU VETERINÁRNÍCH BIOPREPARÁTŮ A LÉČIV

uskvbl.cz

53

Ústav pro státní kontrolu veterinárních biopreparátů a léčiv (ÚSKVBL) is a Czech government institute responsible for the regulation and state control of veterinary biopreparations and medicines. The website serves as an official portal providing access to databases of registered veterinary medicinal products, safety warnings, and professional information targeted primarily at veterinarians and applicants in the veterinary pharmaceutical sector. The site is positioned as a trusted national regulatory authority with a clear government mandate. Technically, the website is built on Joomla CMS and leverages modern web technologies including jQuery, Bootstrap, and Google Fonts. It demonstrates good mobile optimization, accessibility, and SEO practices. The site uses HTTPS with a secure SSL configuration and implements a cookie consent mechanism compliant with GDPR requirements. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site shows a solid posture with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data limits domain registration trust analysis, but the official nature of the site, consistent branding, and domain-matching contact information support its legitimacy. No advertising or tracking scripts are present, indicating a privacy-conscious approach. Overall, the website is professional, secure, and compliant with privacy regulations, serving its role as a government regulatory platform effectively. Strategic improvements include adding security headers, publishing security policies, and enhancing WHOIS transparency to strengthen trust and security posture.

B

Banque des Territoires

banquedesterritoires.fr

65

Banque des Territoires is a major French public financial institution affiliated with Groupe Caisse des Dépôts, focused on supporting territorial actors in project development and financing. The website reflects a professional and comprehensive digital presence with clear navigation, modern technologies, and strong GDPR compliance. The technical infrastructure is based on Drupal CMS with integration of consent management and analytics tools, indicating a mature digital setup. Security posture is good with HTTPS, consent mechanisms, and no visible vulnerabilities, though explicit security policies and incident response contacts are not found. The absence of WHOIS data reduces trust slightly but the website's affiliation and content quality support legitimacy. Overall, the site is well-positioned to serve its public sector audience with relevant financial and territorial services.

V

Vernalis

vernalis.fr

47

Vernalis Interactive is a French digital agency specializing in providing digital communication services to public sector entities such as municipalities, intercommunalities, and mixed syndicates. With over 20 years of experience, the company offers website creation, extranet development, and mobile application services tailored to the needs of public institutions. The website reflects a professional and consistent brand image targeting French public organizations. Technically, the site is built on WordPress, leveraging modern libraries like jQuery and Popper.js, and integrates Matomo for analytics, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks visible security headers and explicit cookie consent mechanisms, which are areas for improvement. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, although the website content and social media presence support its credibility. Overall, Vernalis Interactive presents as a trustworthy and specialized digital agency serving the French public sector.

I

Ifremer

monlopindemer.fr

58

Ifremer is a French public research institute specializing in marine science and technology. The analyzed webpage presents the 'Mon lopin de mer' educational project aimed at raising awareness about ocean ecosystems and encouraging preservation actions among students and the public. The website is professionally designed, well-structured, and mobile-optimized, reflecting a mature digital presence. Technically, it uses Drupal CMS with modern web standards and security best practices including HTTPS and security headers. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is evident with clear privacy and cookie policies and consent mechanisms. Business credibility is high due to official government branding, partnerships, and certifications. WHOIS data is unavailable, likely due to privacy or registry response, but this does not detract from the site's legitimacy given its governmental nature. Overall, the site is trustworthy, secure, and serves an important educational mission.

V

Ville de Paris

paris.fr

67

The website paris.fr is the official digital portal of the City of Paris, providing comprehensive access to municipal services, practical information, news, and events for residents and visitors. It serves as a central hub for public service delivery and environmental data dissemination, including water quality and air pollution monitoring. The site demonstrates a high level of digital maturity with modern technologies such as Matomo analytics for privacy-conscious tracking, Algolia for search, and Font Awesome for iconography. The design is professional, mobile-optimized, and accessible, reflecting the city's commitment to user experience. From a security perspective, the site enforces HTTPS and uses asynchronous script loading to enhance performance and security. However, explicit security headers and vulnerability disclosure mechanisms are not evident, suggesting room for improvement in security hardening and transparency. Privacy compliance is basic, with no clear privacy or cookie policies detected in the provided content, which is a critical area for enhancement given GDPR requirements. Overall, the site is trustworthy and authoritative, consistent with its role as a government portal. The absence of WHOIS data is likely due to registry policies or privacy protection common for government domains and does not detract from the site's legitimacy. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure process to strengthen security posture and user trust.

A

A2LA

a2la.org

65

A2LA is a well-established accreditation organization founded in 1996, providing comprehensive accreditation services to laboratories, inspection bodies, product certification bodies, and proficiency testing providers. The company operates primarily in the government and healthcare sectors, offering a wide range of ISO-based accreditation programs and training services. Their website reflects a strong market position with professional branding, extensive service offerings, and a clear focus on quality and public safety. The target audience includes laboratories, organizations, and individuals seeking accreditation and quality assurance services. Technically, the website is built on WordPress using the Genesis Framework, leveraging modern web technologies such as Bootstrap, jQuery, and various analytics and marketing tools including Google Analytics, Facebook Pixel, and Salesforce Live Chat. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, employs domain locking statuses, and avoids exposing sensitive data. However, DNSSEC is not enabled, and there is no explicit cookie consent mechanism, which may affect GDPR compliance. No security policy or incident response information is published, and no vulnerability disclosure program is evident. Tracking technologies are used moderately, with standard marketing and analytics tools. Overall, A2LA's website demonstrates a high level of professionalism, trustworthiness, and business credibility. The security posture is good but could be improved with enhanced privacy compliance and DNS security. The site is safe for general audiences, with no adult or questionable content. Strategic recommendations include implementing cookie consent, enabling DNSSEC, publishing security policies, and adding a vulnerability disclosure channel to further strengthen trust and compliance.

A

American Legal Publishing

amlegal.com

61

American Legal Publishing is a well-established company specializing in codification services for municipalities and local governments, with over 90 years of experience. Their website reflects a professional and trustworthy business with a clear focus on legal publishing and related services. The company is positioned as a trusted partner in the government sector, supported by its affiliation with the International Code Council. Technically, the website is built on modern web technologies including Webflow CMS, GSAP animations, and integrates analytics tools such as Google Tag Manager and Metricool. The site is fast, mobile-optimized, and accessible, providing a positive user experience. Security posture is generally good with HTTPS enforced and domain registration consistent with a legitimate business; however, some improvements are needed such as enabling DNSSEC and fixing the disabled reCAPTCHA on the contact form. Privacy compliance is basic, lacking cookie consent mechanisms and explicit GDPR indicators. Overall, the website is professional and credible but could enhance its security and privacy transparency to better align with best practices.

The website www.bescheinigung-forschungszulage.de serves as the official digital platform for the Bescheinigungsstelle Forschungszulage (BSFZ), a German government entity responsible for certifying research and development projects eligible for tax incentives under the Forschungszulagengesetz. It targets companies with tax residence in Germany engaged in R&D activities, providing them with information, application procedures, and digital access to submit certification requests. The site is well-branded with official logos and links to the Bundesministerium für Bildung und Forschung (BMBF), reinforcing its authoritative position. Technically, the website is built on TYPO3 CMS, hosted on German infrastructure (SGX Leipzig), and employs modern web standards with responsive design and accessibility considerations. The site lacks advanced tracking or advertising technologies, focusing on privacy and minimal data collection. However, no explicit cookie consent mechanism was detected despite anonymized data collection disclosures. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found in the analyzed content. The WHOIS data aligns with the website's official nature, showing consistent domain registration and hosting details. Overall, the website demonstrates a solid business credibility and technical foundation suitable for its government service role. Strategic improvements include implementing security headers, adding cookie consent mechanisms, and publishing security and incident response policies to enhance trust and compliance.

M

mairie-me

mairie-me.org

64

The website mairie-me.org appears to be a community engagement platform aimed at inhabitants of a commune or municipality, encouraging them to propose ideas and act collectively to improve local living conditions. The business model focuses on local governance participation, targeting residents as the primary audience. The website is built on the Bubble.io platform, utilizing modern JavaScript libraries and Google Fonts, with hosting provided by OVH sas. The technical infrastructure is moderate in performance and basic in mobile optimization and accessibility. Security posture is basic with HTTPS enabled and a cookie consent mechanism in place, but lacks DNSSEC and security headers, and no explicit security or incident response policies are published. The WHOIS data raises concerns due to a domain creation date set in the future, which questions the legitimacy and operational status of the domain. Overall, the website content is safe and suitable for a general audience with no adult or explicit content detected.

The website for the Communauté de communes de l'île d'Oléron serves as the official digital presence for the local government community of Île d'Oléron in France. It provides comprehensive information on territorial management, community services, environmental initiatives, economic development, and cultural activities. The site targets residents and stakeholders of the island, offering resources and news relevant to their daily lives and local governance. The business model is that of a public service entity, focusing on community support and regional development. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Amazon Polly, ensuring good SEO and accessibility. The site is mobile-optimized and features a clear navigation structure. Security-wise, the site uses HTTPS and includes Google reCAPTCHA for form protection and a cookie consent mechanism, but lacks visible advanced security headers and published security policies. The WHOIS data is unavailable or hidden, which is unusual for a government domain and warrants further verification. Overall, the site is professional, trustworthy, and serves its community well, though improvements in privacy transparency and security documentation are recommended.

B

Bordeaux Métropole

bordeaux-metropole.fr

61

Bordeaux Métropole is the official metropolitan government entity serving 28 communes around Bordeaux, France, providing a wide range of public services including urban planning, transport, waste management, water, economic development, and environmental initiatives. The website serves residents, professionals, associations, and visitors with comprehensive information and digital services. Technically, the site is built on Drupal 10 with modern frontend technologies like Swiper.js, offering good mobile optimization, accessibility, and SEO. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response contacts are not published. The absence of WHOIS data is typical for some ccTLDs or privacy-protected domains and does not detract from the site's legitimacy given its government nature. Overall, the site is professional, trustworthy, and well-maintained, supporting the metropolitan community effectively.

L

Leader France

leaderfrance.fr

52

Leader France is a national federation dedicated to supporting rural territories engaged in the LEADER approach for rural development in France and Europe. The organization acts as a coordinating body for local action groups, organizes events such as congresses, and publishes reports and project collections to promote rural development initiatives. The website reflects a professional and consistent brand presence targeting stakeholders in rural development, including public and private partners. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics for tracking. Hosting is provided by OVH, a reputable provider, and the domain is well-established since 2007. Security posture is good with HTTPS enforced and security headers present, though there is room for improvement in privacy compliance and incident response transparency. Overall, the website is trustworthy and serves its audience effectively.

M

Městská část Praha 18

praha18.cz

45

The website praha18.cz serves as the official digital portal for the municipal district Praha 18 (Letňany) in the Czech Republic. It provides residents and visitors with comprehensive information about local government services, social support, public notices, events, and contact details. The site also promotes a mobile application to enhance citizen engagement and accessibility. The business model is that of a government service portal focused on transparency and community interaction. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google Analytics and Google reCAPTCHA for analytics and form security, respectively. The site is hosted on reputable Czech providers and employs HTTPS with strong SSL configuration. The design is responsive and accessible, with good SEO practices and clear navigation. From a security perspective, the site demonstrates good practices including HTTPS enforcement, GDPR-compliant cookie consent with granular options, and use of reCAPTCHA to prevent spam. However, it lacks explicit security policies, incident response contacts, and security headers which could enhance its security posture. No vulnerabilities or suspicious content were detected. Overall, praha18.cz is a trustworthy and professionally maintained municipal website with a strong focus on user accessibility and compliance. Strategic improvements in security policy transparency and header implementation could further strengthen its security and trustworthiness.

A

Autonomie Paris Saint-Jacques, Maison des Aînés et des aidants Paris Centre

centraider.fr

45

Centr'aider® is a specialized resource website dedicated to supporting caregivers (aidants) in the Île-de-France region. It provides comprehensive information on caregiver rights, available aids, activities, and professional resources. The platform is funded by the Agence Régionale de Santé Île-de-France and initiated by the association Autonomie Paris Saint-Jacques, reflecting a strong governmental and non-profit backing. The website targets caregivers, professionals working with caregivers, and organizations offering aid services, positioning itself as a trusted regional support hub. Technically, the site is built on WordPress with modern JavaScript libraries such as Vue.js and Axios, and uses FontAwesome for icons. It employs a GDPR-compliant cookie consent mechanism via the Complianz plugin and integrates Google Analytics for user behavior insights. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the website enforces HTTPS and uses cookie consent management, but lacks explicit security headers and a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is not publicly available, which is common for .fr domains, but the website's legitimacy is supported by its official funding and professional presentation. Overall, Centr'aider® presents a secure, professional, and privacy-conscious platform with a clear mission to support caregivers in the Île-de-France region. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

C

Collectif Transition Citoyenne

pactetransition-legislatives.org

46

The website pactetransition-legislatives.org is a French non-profit civic engagement platform operated by the Collectif Transition Citoyenne. It focuses on ecological and social transition issues relevant to the 2022 legislative elections in France. The platform provides detailed information on seven key transition challenges, maps interpellations of legislative candidates by citizens and associations, and encourages voter engagement. The site is well-structured, content-rich, and targets French citizens interested in environmental and social policy. Technically, it is built on WordPress, hosted by OVH sas, and uses modern web technologies including Leaflet.js for mapping and Google Analytics for tracking. Security posture is adequate with HTTPS enabled and domain registration consistent and transparent, though DNSSEC is not enabled and security headers are missing. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. No direct contact information or incident response policies are visible. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security best practices.

M

Métropole du Grand Paris

metropolegrandparis.fr

69

Métropole du Grand Paris is a French governmental organization responsible for metropolitan governance, urban planning, transportation, and regional development in the Greater Paris area. The website serves as an official portal providing information and services to residents, businesses, and stakeholders within the metropolitan region. It positions itself as a key regional authority with a focus on public service and sustainable development. The technical infrastructure is based on Drupal 10 CMS, leveraging modern web technologies including FontAwesome Pro for iconography and Matomo for analytics, indicating a moderate level of digital maturity and privacy awareness. The site is hosted with DNS managed by Claradns and registered through Gandi, reflecting a stable and consistent hosting environment. Security posture is adequate with HTTPS enforced and domain transfer protections in place. However, the absence of visible security headers, privacy and cookie policies, and incident response contact information indicates areas for improvement in compliance and security transparency. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, explicit security policies, and improved contact transparency to strengthen user trust and regulatory adherence.

P

Paris Terres d’Envol

paristerresdenvol.fr

53

Paris Terres d’Envol is an official French regional government website serving the Paris Terres d’Envol territory. It provides residents and businesses with access to public services such as waste management, water and sanitation, urban planning, and local news and events. The site positions itself as a trusted source of regional information and services, targeting local citizens and enterprises. Technically, the website is built on WordPress with modern web technologies including jQuery, Font Awesome, and Google Fonts. It employs a cookie consent mechanism compliant with GDPR and uses Matomo for analytics, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though some security headers are missing and accessibility compliance is currently below standards. The absence of WHOIS data limits domain trust analysis, but the official branding and content quality support legitimacy. Overall, the site is professional, user-friendly, and trustworthy for its intended audience.

L

La Région Auvergne-Rhône-Alpes

europeenauvergnerhonealpes.fr

61

The website www.europeenauvergnerhonealpes.fr is the official digital presence of the Auvergne-Rhône-Alpes regional government in France, focusing on European funding and project support. It serves as a comprehensive resource for beneficiaries such as local authorities, associations, companies, and research entities seeking information and assistance with European funds and programs. The site is well-branded, professionally designed, and provides clear navigation and relevant content tailored to its target audience. Technically, the site is built on Drupal 10, leveraging modern web technologies including Matomo for analytics and lazy loading for performance optimization. It is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although the absence of certain security headers suggests room for improvement. From a security and compliance perspective, the site demonstrates GDPR compliance with clear privacy and cookie policies. However, the WHOIS data is unavailable, which slightly impacts trustworthiness but is mitigated by the official nature of the site and its consistent branding. No vulnerabilities or malicious content were detected. Overall, the website is a trustworthy, professional government portal with strong content quality and user experience. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and monitoring third-party scripts for security risks.

W

World Media Partners, s.r.o.

unesco-czech.cz

60

The website 'Sedmnáct českých divů světa - České dědictví UNESCO' serves as the official portal for the Czech UNESCO heritage association, providing comprehensive information about UNESCO-listed cultural sites in the Czech Republic. It targets a general audience interested in cultural heritage and tourism, offering multimedia content, event calendars, virtual tours, and an e-shop. The site is professionally designed with consistent branding and clear navigation, supporting multiple languages to reach an international audience. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Leaflet for maps, and Matomo for analytics. It is mobile-optimized and demonstrates good SEO practices. However, some accessibility features could be improved. The site uses HTTPS, but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and security hardening. From a security perspective, the site shows a moderate posture with secure login forms and no exposed sensitive data. The absence of WHOIS data for the domain reduces trust slightly, though the official branding and government funding mention support legitimacy. No vulnerability disclosure or incident response information is provided, which could be improved to enhance security transparency. Overall, the website is a credible, well-maintained informational portal with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and improving accessibility to strengthen trust and compliance.

Městské kulturní středisko Třebíč operates as a municipal cultural center providing comprehensive information on cultural events such as cinema, theater, concerts, and exhibitions in the city of Třebíč. The website serves as a centralized platform for residents and visitors to access event schedules, ticket sales, and cultural news, positioning itself as a key local cultural institution. The business model focuses on event promotion and community engagement through digital channels. Technically, the website employs a modern JavaScript stack including jQuery, Swiper, and Fancybox, alongside Google Analytics and Tag Manager for tracking. Cookie consent is managed via CookieScript, ensuring GDPR compliance. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and incident response information. The absence of WHOIS data limits domain legitimacy verification, though the website content and external references suggest a legitimate municipal entity. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations, serving its target audience effectively.