Skip to main content

Is svitavy.cz a Scam? Security Check Results - Městský úřad Svitavy Reviews

svitavy.cz favicon

Is svitavy.cz Safe? Security Analysis for Městský úřad Svitavy

Check if svitavy.cz is a scam or legitimate. Free security scan and reviews.

GovernmentCzech Republicmedium
Drupal 10BootstrapjQueryGoogle Analytics
Analyzed 7/31/2025Completed 12:15:01 PM
59
Security Score
MEDIUM RISK

AI Summary

The website www.svitavy.cz serves as the official municipal portal for the city of Svitavy in the Czech Republic. It provides comprehensive information about the city administration, local institutions, events, and citizen services. The site targets residents and visitors, offering a well-structured and localized experience primarily in Czech. The business model is that of a government service portal, focusing on transparency and public service delivery. The website is medium-sized in scope and content, with consistent branding and trust indicators such as official contact details and social media presence. Technically, the site is built on Drupal 10 CMS with Bootstrap for responsive design, incorporating modern web technologies and Google Analytics for user tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with no critical technical issues detected. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and a security.txt file suggests room for improvement. From a security and compliance perspective, the site complies with GDPR through cookie consent and privacy policy disclosures. However, no explicit security policy or incident response information is published. The lack of WHOIS data for the domain is a notable anomaly that reduces domain registration trustworthiness, though the website content and official branding strongly support legitimacy. Overall, the site is professional, secure, and user-friendly, with recommendations to enhance security headers and publish vulnerability disclosure information. The overall risk assessment is low, with strategic recommendations focusing on improving domain registration transparency, security header implementation, and formalizing security policies to strengthen trust and compliance.

Detected Technologies

Drupal 10BootstrapjQueryGoogle Analytics

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

The city of Svitavy operates this official portal to serve its residents and visitors by providing timely information on municipal governance, cultural events, public services, and safety. The portal integrates with multiple partner domains related to local services, cultural institutions, and safety initiatives, indicating a collaborative ecosystem. The business model is non-commercial, focused on public administration and community engagement. The presence of multilingual translation links suggests an effort to reach a broader audience including tourists and non-Czech speakers. The site’s content and structure reflect a mature digital presence for a municipal government, supporting transparency and citizen participation through features like participatory budgeting and online service portals.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

p*****@svitavy.cz

Phone Numbers (2)

461******
461******

Security Posture Analysis

Comprehensive Security Assessment

The website enforces HTTPS, uses cookie consent banners compliant with EU regulations, and avoids exposing sensitive data in its HTML content. However, it lacks visible security headers such as Content-Security-Policy, X-Content-Type-Options, and X-Frame-Options, which are recommended to mitigate common web vulnerabilities. No security.txt or explicit vulnerability disclosure policy is present, limiting transparency for security researchers. The site uses third-party scripts including Google Analytics and Tag Manager, which require ongoing monitoring for vulnerabilities. Overall, the security posture is good but could be enhanced by implementing recommended HTTP security headers and publishing incident response contacts.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement HTTP security headers including Content-Security-Policy, X-Content-Type-Options, and X-Frame-Options to improve protection against common web attacks.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

Městský úřad Svitavy

Description:

Official municipal portal providing information about the city of Svitavy, its administration, services, events, and local institutions.

Key Services:
Citizen portalOfficial announcementsEvent calendarMunicipal services informationContact information
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
Drupal 10BootstrapjQueryGoogle Analytics
Frameworks:
Drupal
Performance:

moderate

Mobile:

good

Accessibility:

good

SEO:

good

Security Assessment

Security Score:
85/100
Best Practices:
  • HTTPS enforced
  • Cookie consent banner with categories
  • No exposed sensitive data in HTML

Analytics & Tracking

Services:
Google Analytics
Tracking Level:moderate
Privacy Compliance:good

Advertising & Marketing

Transparency Level:good

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:high

Key Observations

1

Official municipal website for the city of Svitavy in the Czech Republic.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

40/100
Score

Missing Strict-Transport-Security header

HIGH

Forces HTTPS connections

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

40/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

EU business without adequate privacy measures

CRITICAL

EU businesses are subject to strict GDPR requirements

Third-party services without privacy policy

HIGH

Detected services: Google Analytics, Facebook, YouTube

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy85% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: transport, digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

85/100
Score

Strict DMARC Alignment

LOW

Strict alignment may cause legitimate emails to fail

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 mx ip4:82.117.143.5 ip4:82.117.143.16 ip4:82.117.143.17 ip4:82.117.143.250 ip4:82.117.143.6 ip4:88.86.118.81 -all
DNS Lookups:1/10
Policy:-all
DKIM Selectors Found
Selector:google(1296-bit rsa)
DMARC Details
Policy:quarantine
Subdomain Policy:none
Aggregate Reports:dmarc@svitavy.cz
Forensic Reports:dmarc@svitavy.cz

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

42/100
Score

Weak Protocols Supported

HIGH

Server supports weak protocols: TLSv1.1

OCSP Stapling Not Enabled

LOW

OCSP stapling improves performance and privacy

Certificate Transparency Not Implemented

LOW

Certificate is not logged in Certificate Transparency logs

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 77 days

Weak SSL Key Length

HIGH

SSL certificate uses 256-bit key, which is considered weak

Mixed Content Detected

MEDIUM

11 resources loaded over insecure HTTP

Partial SSL/TLS Assessment

LOW

Completed 3 of 4 security checks due to time constraints

Protocol Support

TLSv1.3TLSv1.2TLSv1.1

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

85/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

Domain Registration Details

Domain Age
27 years(mature)

DNS Records

A Records:82.117.143.28
Name Servers:
nscdt.svitavy.czDNS only
nsvps.svitavy.czDNS only
MX Records:
5: spmail2.svitavy.cz
SOA:Serial: 2020043164, TTL: 10800s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:67ms

SPF Analysis

SPF Record:
v=spf1 mx ip4:82.117.143.5 ip4:82.117.143.16 ip4:82.117.143.17 ip4:82.117.143.250 ip4:82.117.143.6 ip4:88.86.118.81 -all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on Drupal 10 CMS with Bootstrap framework, ensuring responsive design and modern UI components. It uses Google Tag Manager and Google Analytics for tracking user behavior. The site includes accessibility features and SEO optimizations such as meta tags and structured navigation. Performance is moderate, with lazy loading images and efficient CSS usage. The absence of visible security headers is a technical gap. The site is hosted on an unknown provider, with no direct hosting metadata available. Overall, the technical infrastructure is solid and modern, suitable for a government portal, with opportunities to enhance security configurations.
Analyze Another Website