Security Directory

B

Breek

breek.fr

51

Breek is a French technology consultancy specializing in web strategy, functional specifications, and development services primarily using Drupal and iOS platforms. Established in 2003, the company serves a professional clientele including major brands such as LVMH, Apple, and BNP Paribas, positioning itself as a niche expert in web development and AMOA services. The website reflects a professional and consistent brand image with a clear focus on technology and consulting services. Technically, the site is built on Drupal CMS with modern JavaScript libraries and frameworks, offering good mobile optimization and SEO practices. Analytics are implemented via Piwik PRO, indicating moderate user tracking. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and published security policies suggests room for improvement. Privacy compliance is partial, lacking a cookie consent mechanism and detailed GDPR indicators. Overall, the website is trustworthy and professional, with a strong business credibility score and no signs of malicious or adult content.

S

SIL Global

sil.org

63

SIL Global is a well-established, faith-based nonprofit organization dedicated to language development and community empowerment worldwide. Their website reflects a professional and comprehensive digital presence, offering extensive resources, training, and services in linguistic research, literacy, translation, and language technology. The organization targets diverse global communities and language professionals, emphasizing equal access to education and socio-economic opportunities regardless of language barriers. Technically, the website is built on Drupal CMS with modern frameworks like Bootstrap and uses standard web technologies including jQuery and Font Awesome. It is mobile-optimized and accessible, with embedded multimedia content enhancing user engagement. Security posture is solid with HTTPS enforced and secure form handling, though the absence of certain security headers and explicit cookie consent mechanisms are areas for improvement. The lack of WHOIS data limits domain registration trust verification, but the presence of recognized nonprofit certifications and consistent branding supports legitimacy. Overall, the site scores well on content quality, technical implementation, and business credibility, with moderate privacy compliance.

Axess Groupe is a French technology company specializing in cloud sovereign hosting and IT infrastructure services. They provide secure, performant, and compliant cloud hosting solutions tailored for enterprises, including healthcare data hosting certified under HDS and ISO 27001 standards. The company targets a broad range of clients from SMEs to large public institutions within France, emphasizing data sovereignty and security. Their website demonstrates a mature digital presence with comprehensive content, professional design, and strong GDPR compliance. Technically, the site uses Drupal CMS with modern analytics and marketing tools, ensuring good performance and accessibility. Security posture is strong with certifications and secure hosting practices, though some improvements in security headers and incident response transparency are recommended. The absence of WHOIS registration data slightly impacts domain trust but does not overshadow the overall professionalism and legitimacy of the business. Strategic recommendations include enhancing security disclosures and verifying domain registration details to improve trust further.

P

Proparco

proparco.fr

61

Proparco is a French development finance institution affiliated with the Agence Française de Développement (AFD) group. It focuses on financing and supporting private sector enterprises and financial institutions across Africa, Asia, Latin America, Eurasia, and the Middle East, aiming to contribute to the Sustainable Development Goals (SDGs). The website presents a professional and comprehensive overview of its mission, services, and impact, targeting businesses, investors, and development stakeholders. The content is rich, well-structured, and available in French and English, reflecting a mature digital presence. Technically, the website is built on Drupal CMS with integration of French government design system DSFR, and uses modern JavaScript libraries and consent management tools. It is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be better documented. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates a high level of professionalism, trustworthiness, and operational maturity. The lack of WHOIS data is noted but likely due to privacy protection common for government-affiliated domains. The site is not blocked by any WAF or security challenge, allowing full content access and analysis.

E

Expertise France

expertisefrance.fr

62

Expertise France is a French public agency specializing in international technical cooperation, operating as a subsidiary of the Agence française de développement. The agency holds a strong market position as the second largest technical cooperation entity in Europe, delivering projects across governance, security, climate, health, education, and cultural sectors in over 140 countries. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, it leverages Drupal CMS, the French government design system (DSFR), and integrates modern analytics and consent management tools, ensuring compliance with privacy regulations. Security posture is robust with HTTPS enforcement and consent mechanisms, though some security headers could be explicitly confirmed. Overall, the site demonstrates high professionalism and trustworthiness, though WHOIS data is unavailable, which slightly impacts domain legitimacy assessment.

F

Fonds Français pour l’Environnement Mondial (FFEM)

ffem.fr

58

The Fonds Français pour l’Environnement Mondial (FFEM) is a French government-established fund focused on financing innovative environmental projects in developing countries. With a history dating back to 1994, FFEM supports projects that preserve biodiversity, combat climate change, and promote sustainable resource management. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support. Technically, it is built on Drupal CMS with modern frameworks and includes accessibility and SEO best practices. Security posture is strong with HTTPS and consent management, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates high trustworthiness and aligns well with its governmental and non-profit mission.

A

Agence Française de Développement

afd.fr

61

The Agence Française de Développement (AFD) is a prominent French public development bank dedicated to financing and supporting sustainable development projects worldwide. The website reflects a mature, well-established organization with a clear mission to promote social and environmental transitions. The site targets a diverse audience including governments, investors, civil society, and enterprises. Technically, the website is built on Drupal CMS with modern frameworks and analytics tools, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS and consent management, though explicit security headers should be verified. The absence of WHOIS data is due to AFNIC privacy policies, which is typical for French government domains. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

B

Banque des Territoires

banquedesterritoires.fr

65

Banque des Territoires is a major French public financial institution affiliated with Groupe Caisse des Dépôts, focused on supporting territorial actors in project development and financing. The website reflects a professional and comprehensive digital presence with clear navigation, modern technologies, and strong GDPR compliance. The technical infrastructure is based on Drupal CMS with integration of consent management and analytics tools, indicating a mature digital setup. Security posture is good with HTTPS, consent mechanisms, and no visible vulnerabilities, though explicit security policies and incident response contacts are not found. The absence of WHOIS data reduces trust slightly but the website's affiliation and content quality support legitimacy. Overall, the site is well-positioned to serve its public sector audience with relevant financial and territorial services.

I

Ifremer

monlopindemer.fr

58

Ifremer is a French public research institute specializing in marine science and technology. The analyzed webpage presents the 'Mon lopin de mer' educational project aimed at raising awareness about ocean ecosystems and encouraging preservation actions among students and the public. The website is professionally designed, well-structured, and mobile-optimized, reflecting a mature digital presence. Technically, it uses Drupal CMS with modern web standards and security best practices including HTTPS and security headers. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is evident with clear privacy and cookie policies and consent mechanisms. Business credibility is high due to official government branding, partnerships, and certifications. WHOIS data is unavailable, likely due to privacy or registry response, but this does not detract from the site's legitimacy given its governmental nature. Overall, the site is trustworthy, secure, and serves an important educational mission.

S

Service Public d’Information en Santé

sante.fr

63

Santé.fr is the official French public health information portal managed under the Ministry of Health. Established in 2016, it serves as a comprehensive and reliable source of health information for the general public and health professionals. The website offers extensive editorial content, a large directory of health professionals and establishments, and personalized health advice services. It is positioned as a leading government-backed health information platform in France. Technically, the site is built on Drupal CMS with modern frontend technologies including Vue.js and FontAwesome. It implements strong privacy and cookie consent mechanisms using tarteaucitron.js and supports mobile and accessibility standards well. The site is served over HTTPS with no detected blocking or WAF interference, indicating good operational maturity. From a security perspective, the site enforces HTTPS and secure login via OpenID Connect but lacks explicit HTTP security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Overall, Santé.fr presents a trustworthy, professional, and secure public health information service with excellent content quality and user experience. The domain WHOIS data is not publicly available, consistent with government domain privacy practices, and the site aligns well with its stated mission and branding.

A

April

april.org

55

April is a well-established French non-profit association dedicated to promoting and defending free software and open standards since 1996. It serves a broad francophone audience including individuals, professionals, and institutions. The website reflects an active organization with frequent news, events, and educational content. Technically, the site is built on Drupal CMS, uses jQuery and Matomo analytics, and is moderately optimized for mobile and SEO. Security posture is adequate with HTTPS and domain transfer protection but lacks DNSSEC and explicit security headers. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but could improve transparency and security practices.

G

Gérontopôle Autonomie Longévité des Pays de la Loire

gerontopole-paysdelaloire.fr

57

The Gérontopôle Autonomie Longévité des Pays de la Loire is a regional non-profit organization dedicated to improving the quality of life for elderly people in the Pays de la Loire region of France. It acts as a network of stakeholders focused on aging well, offering services such as training, research, economic development in the silver economy, and support for territorial policies. The website is professionally designed using Drupal CMS and integrates modern technologies including Google Analytics, Google Tag Manager, and reCAPTCHA for security. Privacy and cookie consent mechanisms are well implemented, reflecting GDPR compliance. However, the absence of WHOIS data raises concerns about domain registration status, which should be verified to ensure legitimacy. Security posture is generally good with HTTPS and secure forms, but could be improved by adding security headers and publishing incident response policies. Overall, the site presents a trustworthy and professional digital presence for a specialized healthcare non-profit.

I

IDDRI

iddri.org

52

IDDRI is an independent French think tank specializing in sustainable development research and policy analysis. It operates as a multi-stakeholder dialogue platform and collaborates with prominent institutions such as Sciences Po. The website is professionally designed, content-rich, and targets policymakers, researchers, and stakeholders interested in environmental and sustainable development issues. Technically, the site is built on Drupal CMS and integrates multiple analytics tools including Matomo, Google Analytics, and Hotjar, with a strong emphasis on privacy compliance and cookie consent mechanisms. Security posture is solid with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates a mature digital presence aligned with its mission and audience.

F

Ferrero Hazelnut Company

ferrerohazelnutcompany.com

69

Ferrero Hazelnut Company is a division of the Ferrero Group focused on the entire hazelnut value chain, from cultivation to processing, emphasizing sustainability and quality. The company operates globally with agribusiness development programs and a commitment to responsible sourcing. The website reflects a professional corporate presence with detailed information about their mission, programs, and sustainability efforts. Technically, the site is built on Drupal CMS, uses modern web technologies, and integrates Google Tag Manager for analytics. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers are not detected and privacy compliance could be improved. WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not negate the apparent legitimacy given the strong brand association. Overall, the site is trustworthy, professional, and well-maintained, serving as an effective corporate communication platform.

Kinder Finland is a regional website representing the Kinder brand, a well-known confectionery brand owned by Ferrero. The site targets parents and families with children, offering product information, brand storytelling, sustainability initiatives, and interactive applications such as Applaydu. The website is professionally designed with consistent branding and good content quality, supporting the brand's market position in the retail confectionery sector. Technically, the site is built on Drupal CMS with modern JavaScript libraries and is mobile optimized, though some accessibility and security header improvements are recommended. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but explicit security headers and privacy policy pages are lacking. The WHOIS data for the domain is missing, which reduces trust slightly, but the website content and linked Ferrero domains strongly indicate legitimacy. Overall, the site is a credible and professional digital presence for Kinder in Finland.

N

Nutella®

nutella.com

66

Nutella® is a globally recognized brand specializing in hazelnut spread products. The website serves as the official international portal for Nutella®, providing product information, recipe inspiration, sustainability commitments, and brand storytelling. The site targets a general audience interested in Nutella® products and related content. Technically, the website is built on Drupal CMS with modern JavaScript libraries such as Swiper.js for sliders and integrates Google Tag Manager for analytics. The site is mobile-optimized and offers a professional user experience with clear navigation and rich multimedia content. Security-wise, the site uses HTTPS and does not expose sensitive data, but lacks explicit security headers and detailed privacy or cookie policies. WHOIS data is unavailable or privacy protected, but the domain is active and consistent with a legitimate brand presence. Overall, the website demonstrates a mature digital presence with room for improvement in privacy compliance and security transparency.

F

Ferrero Group

ferrero.com

71

Ferrero Group is a globally recognized Italian family-owned confectionery company founded in 1946, with a strong presence in over 170 countries and a portfolio of more than 35 iconic brands including Nutella®, Kinder®, Tic Tac®, and Ferrero Rocher®. The company emphasizes quality, tradition, and sustainability, supported by a workforce of approximately 47,000 employees. The website reflects a mature digital presence with comprehensive content, multimedia integration, and multi-language support, targeting a broad consumer and business audience. Technically, the site is built on Drupal CMS, employs modern web technologies such as Google Tag Manager and lazy loading, and demonstrates good mobile optimization and accessibility standards. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response contacts are not evident. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. The absence of WHOIS data is notable but likely due to privacy protection or query limitations, not detracting from the site's legitimacy. Overall, the site is professional, trustworthy, and well-maintained.

F

Ferrero Foodservice

ferrerofoodservice.com

66

Ferrero Foodservice is a professional B2B website representing the Ferrero Group's foodservice brands such as Nutella®, Kinder®, Tic Tac®, and Ferrero Rocher. The site targets restaurant owners, distributors, and other professional sectors, offering product information, recipes, and tools to support business operations. The website demonstrates a high level of digital maturity with a modern Drupal CMS infrastructure, responsive design, and integration of analytics and marketing tools. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response contacts are absent. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good GDPR compliance. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy, which contrasts with the professional and trustworthy website content. Overall, the site is professional, secure, and user-friendly but would benefit from improved transparency in domain registration and security disclosures.

F

FERRERO France

ferrero.fr

73

Ferrero France is a subsidiary of the globally recognized Ferrero Group, a family-owned Italian confectionery company founded in 1946. The company operates in the manufacturing and retail sectors, specializing in sweet food products with iconic brands such as Nutella®, Kinder®, Tic Tac®, and Ferrero Rocher®. The website reflects a mature, enterprise-level business with a strong emphasis on quality, sustainability, and corporate social responsibility. The digital presence is well-structured, multilingual, and professionally designed, targeting a broad general audience including consumers, partners, and job seekers. Technically, the website is built on Drupal CMS and incorporates modern web technologies such as Google Tag Manager for analytics, AddToAny for social sharing, and UserWay for accessibility enhancements. The site is mobile-optimized and includes SEO best practices, though accessibility compliance is moderate at 57%. Security posture is strong with HTTPS enforced and multiple security headers present, alongside a published vulnerability disclosure policy. However, WHOIS data for the domain is unavailable, which is unusual for a major brand and warrants monitoring. Overall, the website demonstrates a high level of digital maturity and security awareness, with comprehensive privacy and cookie policies aligned with GDPR requirements. The absence of explicit contact emails and phone numbers on the public site suggests a preference for contact via forms or social media channels. The site is safe for general audiences with no adult or questionable content detected.

A

AFM-Téléthon

afm-telethon.fr

65

AFM-Téléthon is a prominent French non-profit organization dedicated to combating rare diseases through fundraising, research support, and patient assistance. The website reflects a mature digital presence with comprehensive content targeting families affected by rare diseases, donors, researchers, and healthcare professionals. It offers donation mechanisms, educational resources, and extensive information about its activities and subsidiaries. Technically, the site is built on Drupal CMS, employs modern analytics and consent management tools, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and headers could be enhanced. The absence of WHOIS data is unusual but does not detract significantly from the site's legitimacy given the strong branding and external references. Overall, the site is professional, trustworthy, and well-aligned with its mission.

D

Del Monte Foods

delmontefoods.com

68

Del Monte Foods is a well-established food manufacturing and retail company with a rich history spanning over 135 years. The company offers a portfolio of well-known brands focused on wholesome and quality food products, targeting general consumers and grocery buyers primarily in the United States. Their business model centers on manufacturing and brand management with a strong emphasis on sustainability and corporate responsibility. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content that supports their market position. Technically, the website is built on the Drupal CMS platform, utilizing modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile optimized and includes accessibility features such as the UserWay widget. Performance is moderate, with good SEO and meta tag implementation. However, some security headers are not explicitly present, and there is no visible cookie consent mechanism, which could be improved for compliance. From a security perspective, the site enforces HTTPS and uses secure analytics scripts, but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data is unavailable, which reduces trustworthiness from a domain registration perspective, though the website content and branding strongly indicate legitimacy. Overall, the security posture is good but could benefit from enhanced header policies and privacy compliance features. The overall risk assessment is low, with recommendations to improve privacy compliance by adding cookie consent, publish security policies, and enhance security headers. These steps will strengthen trust and regulatory adherence while maintaining a professional and secure online presence.

R

Région Nouvelle-Aquitaine

nouvelle-aquitaine.fr

61

Région Nouvelle-Aquitaine is the official regional government entity responsible for managing and supporting various public services and initiatives in the Nouvelle-Aquitaine region of France. The website serves as a comprehensive portal for citizens, providing information on economic development, employment, youth programs, territorial planning, and ecological transition. It maintains a strong market position as a government authority with a large audience base. Technically, the site is built on Drupal CMS, employs modern JavaScript libraries, and integrates Google Tag Manager for analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, though WHOIS data is unavailable, likely due to registry server response issues rather than malicious intent.

E

EFFIA

effia.com

65

EFFIA is a prominent parking service provider operating primarily in France and Belgium, offering parking space reservations and subscription plans across more than 500 locations. The company targets drivers and commuters seeking convenient and cost-effective parking solutions near city centers and train stations. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content to its audience. Technically, the site is built on Drupal CMS and integrates modern tools such as Google Maps API, Didomi for consent management, and analytics platforms like Piano Analytics and Google Tag Manager. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with visible cookie consent mechanisms and a comprehensive privacy policy. However, the absence of WHOIS registration data for the domain www.effia.com raises some concerns about domain legitimacy, though the website content and business presence appear credible. Overall, the site scores well in content quality, technical implementation, and security, but could improve business credibility by providing more transparent domain registration and direct contact information.

V

VTT Technical Research Centre of Finland Ltd.

vttresearch.com

75

VTT Technical Research Centre of Finland Ltd. is a leading European research and innovation organization focused on sustainable growth and applied science. The company offers a wide range of R&D services across multiple industries including energy, healthcare, manufacturing, and ICT. Their website demonstrates a high level of professionalism, with comprehensive service descriptions, structured data, and a strong brand presence. Technically, the site is built on Drupal CMS with modern analytics and cookie consent tools, optimized for accessibility and mobile use. Security posture is good with HTTPS and consent mechanisms, though lacking explicit security headers and published security policies. WHOIS data is missing, which raises some concerns about domain registration transparency, but the overall business credibility and content quality remain strong.

N

National Institute of Industrial Property

inpi.fr

67

The National Institute of Industrial Property (INPI) is the official French government agency responsible for intellectual property and business formalities. The website serves as a comprehensive portal for entrepreneurs, IP professionals, and innovators to access services such as business registration, intellectual property rights management, financing solutions, and training programs. The site is well-branded, professionally designed, and provides clear navigation and relevant content tailored to its audience. Technically, the site is built on Drupal CMS, uses Matomo for analytics, and integrates cookie consent and translation tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not published. Overall, the site is trustworthy and authoritative, with minor gaps in transparency around security and data protection officer contact details.

M

Monotype

typecast.com

67

Monotype is a globally recognized technology company specializing in fonts and typography solutions. Their business model revolves around font licensing, subscription services, custom font design, and embedded font technologies targeting designers, developers, and enterprises. The website branding and navigation reflect a professional and consistent corporate identity. However, the analyzed URL is blocked by a security mechanism returning a 403 Access Denied error, limiting content visibility and analysis. Technically, the site uses Drupal CMS and integrates modern analytics and marketing tools such as Google Tag Manager, Datadog RUM, and Adobe Launch. The site is mobile optimized with basic accessibility features but lacks visible security headers and explicit privacy or cookie policies on the blocked page. The absence of WHOIS data reduces trust signals, although external links to known Monotype services support legitimacy. Security posture is moderate with HTTPS enforced but missing key security headers and incident response information. Privacy compliance is poor due to missing policies and consent mechanisms. Overall, the site presents a moderate risk profile primarily due to content blocking and lack of transparency in domain registration. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, enhancing security headers, providing clear contact and incident response channels, and improving accessibility and SEO features to strengthen trust and compliance.

H

Harmonie Mutuelle

harmonie-fp.fr

70

Harmonie Mutuelle is a major French mutual insurance company specializing in health insurance and social protection services. It operates under the Groupe VYV umbrella, offering tailored solutions for individuals, entrepreneurs, and public sector employees. The website provides a comprehensive user experience with clear navigation and multiple service options, including personalized assistance and contact forms. Technically, the site is built on Drupal CMS with modern JavaScript libraries and integrates analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, suitable for a large healthcare mutual organization.

D

Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH

giz.de

70

The Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH is a German government-owned enterprise specializing in international development cooperation. The organization operates globally to promote sustainable development, offering solutions and partnerships to improve living conditions worldwide. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional design, targeting governments, international partners, businesses, and professionals in the development sector. Technically, the site is built on Drupal CMS, uses Matomo for privacy-respecting analytics, and employs a consent management system (Klaro) to comply with GDPR. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and compliance policies are transparent and comprehensive, supporting GDPR compliance. Overall, the website is trustworthy, professional, and well-aligned with the organization's mission and market position.

M

Mgen - Espace Public

mgen.fr

64

MGEN is a leading mutual insurance organization in France specializing in health, insurance, and retirement services primarily for public service agents, employees, students, and retirees. The website reflects a mature digital presence with comprehensive service offerings including health insurance, life insurance, savings plans, and various specialized insurance products. The site is well-branded and consistent with the parent company Groupe VYV, indicating a strong market position. Technically, the site uses Drupal CMS with modern frameworks like Bootstrap and integrates privacy and analytics tools such as TagCommander and Piano Analytics. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not found. WHOIS data is unavailable due to AFNIC policies, but the site’s content and structure strongly support legitimacy. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

H

Harmonie Mutuelle

harmonie-mutuelle.fr

68

Harmonie Mutuelle is a large French mutual insurance company specializing in health insurance, provident schemes, and complementary retirement savings for individuals, entrepreneurs, companies, and the social and solidarity economy (ESS). It is part of the Groupe VYV and positions itself as a collective advancement mutual. The website is professionally designed, well-structured, and targets a broad audience including private individuals, entrepreneurs, public sector employees, and social economy actors. Key services include health mutual insurance, provident plans, and retirement savings products. The company maintains a strong market position in France with a clear brand identity and consistent messaging.

O

Organization for Security and Co-operation in Europe

osce.org

62

The Organization for Security and Co-operation in Europe (OSCE) is a prominent intergovernmental organization dedicated to security, cooperation, and human rights across Europe and neighboring regions. The website reflects a mature digital presence with comprehensive multilingual content, clear navigation, and professional design, targeting governments, policymakers, and civil society. Technically, the site is built on Drupal CMS, leveraging modern web technologies and analytics tools such as Google Analytics and New Relic, ensuring good performance and user experience. Security posture is strong with HTTPS enforcement and multiple security headers, though explicit security policy and incident response information could be improved. Overall, the site demonstrates high trustworthiness and business credibility, with no signs of malicious activity or content safety concerns.

S

Sociálna poisťovňa

socpoist.sk

11

Sociálna poisťovňa is the official Slovak government social insurance institution providing a wide range of social security services including pensions, sickness and maternity benefits, unemployment benefits, and employer services. The website serves as a comprehensive portal for insured persons, employers, and other stakeholders, offering information, electronic services, and contact channels. The institution holds a strong market position as the national social insurance provider with a long operational history since 2003. Technically, the website is built on Drupal CMS with modern JavaScript libraries such as Swiper.js and jQuery, ensuring good accessibility, mobile optimization, and user experience. The site uses HTTPS and includes a cookie consent mechanism compliant with GDPR. Analytics are implemented via Google Tag Manager and Google Analytics, with moderate user tracking. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks visible security headers in the HTML content. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website is professional, trustworthy, and well-maintained, serving its government mandate effectively. Strategic recommendations include enhancing security headers, publishing a security.txt file for vulnerability disclosure, and providing explicit incident response contacts to further strengthen security posture and trust.

K

Klub Pathfinder z.s.

pathfinder.cz

63

Klub Pathfinder z.s. is a Czech non-profit organization dedicated to youth development through scouting and outdoor activities. The organization offers a variety of programs including weekend meetings, camps, and educational opportunities for youth leaders. The website reflects a well-structured and content-rich platform targeting children, youth, and their guardians, emphasizing values such as responsibility, nature protection, and faith. Technically, the site is built on Drupal CMS with modern web technologies and includes integrations for analytics and user tracking. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and explicit security policies. The absence of WHOIS data is a concern for domain trust but does not detract from the legitimacy of the organization as evidenced by comprehensive contact information and partnerships. Overall, the site is professional, trustworthy, and well-positioned within its sector.

L

Landes Chalosse Tourisme | Vos vacances dans le Sud-Ouest

landes-chalosse.com

59

The website www.landes-chalosse.com serves as the official tourism portal for the Landes Chalosse region in southwestern France. It provides comprehensive information about local attractions, events, accommodations, dining, and activities, targeting tourists and visitors interested in exploring this cultural and natural area. The site integrates booking functionalities and promotes regional heritage and leisure options, positioning itself as a key regional tourism resource. Technically, the site is built on Drupal CMS with AngularJS enhancements, leveraging modern web technologies such as Bootstrap, jQuery, and Leaflet for interactive maps. It employs Google Tag Manager and Zendesk Chat for analytics and user engagement. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks several important security headers and explicit privacy or security policies. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Overall, the site is professionally designed and functional, serving its tourism promotion purpose effectively. The main risks relate to incomplete WHOIS information and minimal security policy disclosures. Strategic improvements in security headers, privacy documentation, and WHOIS transparency would enhance trust and compliance.

D

Destination Pays Bigouden

destination-paysbigouden.com

62

Destination Pays Bigouden is a regional tourism website promoting the Pays Bigouden area in France. It offers comprehensive information on local experiences, accommodations, restaurants, events, and practical visitor information. The site targets tourists and families interested in exploring the region's culture and natural attractions. Technically, the website uses Drupal CMS with AngularJS and integrates multiple third-party services including Google Maps, YouTube, and marketing automation tools. The site is well-structured, mobile-optimized, and provides a good user experience with multilingual support. Security posture is adequate with HTTPS and reCAPTCHA Enterprise, but could be improved by adding more security headers and publishing explicit security policies. Privacy compliance is partial, with a cookie consent mechanism but no clear privacy policy page. WHOIS data is unavailable, which raises some legitimacy concerns despite the professional appearance and content quality of the site. Overall, the website is a credible and useful tourism resource but should address WHOIS transparency and privacy policy gaps to enhance trust.

O

Office de Tourisme de Rochefort Océan

rochefort-ocean.com

68

Office de Tourisme de Rochefort Océan operates as a regional tourism office providing comprehensive information and services related to tourism in the Rochefort Océan area of France. The website offers details on accommodations, events, local attractions, and thermal cures, targeting tourists and visitors interested in this coastal region. The business model focuses on tourism promotion and facilitating bookings and event ticketing, positioning itself as a key regional tourism resource. Technically, the website is built on Drupal CMS with AngularJS and Bootstrap frameworks, integrating modern web technologies such as Google Maps API, Matomo analytics, and Crisp chat for user engagement. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with a professional design and consistent branding. From a security perspective, the site enforces HTTPS and includes several security headers, along with a cookie consent mechanism indicating some privacy compliance. However, the absence of a dedicated privacy policy page and incident response information represents gaps in compliance and security transparency. No vulnerabilities or malicious content were detected, and the site maintains a good security posture overall. The WHOIS data is missing, with the domain appearing unregistered or expired in the registry, which raises concerns about domain legitimacy. Despite this, the website content and presentation suggest a legitimate tourism office. Monitoring domain registration status is recommended to ensure continued trustworthiness. Overall, the site is a well-constructed regional tourism platform with room for improvement in privacy compliance and domain registration transparency.

A

Agence nationale du Sport

agencedusport.fr

59

Agence nationale du Sport is the official French national agency dedicated to the development and support of sports activities, high performance athletes, and territorial sport projects. It operates under the French Ministry of Sports and provides funding, governance, and coordination services to sports federations, athletes, and local authorities. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with government standards. Technically, the site is built on Drupal CMS with modern libraries and frameworks, ensuring good performance, accessibility, and SEO. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly detailed. WHOIS data is not available, likely due to privacy protection, which is justified for a government-related domain. Overall, the site is trustworthy, professional, and compliant with GDPR regulations.

I

ILUNION

ilunionretail.com

60

ILUNION Tu Tienda operates a network of over 65 accessible retail stores located primarily in hospitals and strategic points across Spain. The business model emphasizes social responsibility, employing a workforce largely composed of people with disabilities and offering sustainable products. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive privacy and cookie compliance mechanisms. Technically, the site uses Drupal CMS with modern libraries and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is good with HTTPS and reCAPTCHA protections, though some security headers are not detected and could be improved. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the strong brand association with Grupo Social ONCE and consistent content quality.

I

Institute of Physics

iop.org

77

The Institute of Physics (IOP) is a well-established professional body and learned society dedicated to promoting physics in the UK and Ireland. The website serves as a comprehensive platform for physicists, educators, students, and the general public, offering membership services, educational resources, policy advocacy, events, and publications. The organization holds a strong market position as a leading physics institution with international collaborations and a focus on inclusivity and accessibility. Technically, the website is built on the Drupal CMS platform, leveraging modern web technologies including Google Tag Manager for analytics and OneTrust for cookie consent management. The site demonstrates good performance, excellent mobile optimization, and accessibility features, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates cookie consent mechanisms, indicating a solid security posture. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations such as GDPR. The lack of WHOIS data is mitigated by the site's transparency and consistent branding. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure information, and enhancing direct security contact options to further strengthen trust and compliance.

W

Women's Environment and Development Organization

genderclimatetracker.org

10

The Gender Climate Tracker website is a well-established non-profit platform operated by the Women's Environment and Development Organization. It focuses on tracking gender mandates in climate policy, women's participation in climate diplomacy, and providing country profiles related to gender and climate change. The platform serves policy makers, researchers, activists, and NGOs with data, news, and resources to support gender equality in climate action. The site is professionally designed with consistent branding and clear navigation, including multilingual support and a mobile app for offline access. Technically, the website is built on Drupal CMS with modern JavaScript libraries such as jQuery, Highcharts, and Tableau embedding for data visualization. It uses Matomo and Google Analytics for user tracking while respecting Do Not Track settings. The site is hosted with a reputable registrar and uses HTTPS, but lacks DNSSEC and some security headers, which could be improved. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site implements a cookie consent mechanism with opt-in consent, but does not provide explicit privacy policies, terms of service, or vulnerability disclosure information. No contact information or incident response channels are visible, which limits transparency. The domain registration is consistent and stable, supporting the legitimacy of the organization. Overall, the security posture is adequate but could benefit from enhanced security headers, published policies, and vulnerability disclosure. The overall risk is low given the non-profit nature and content focus, but strategic improvements in privacy and security documentation would enhance trust and compliance.

I

ILUNION Economía Circular

ilunioneconomiacircular.com

54

ILUNION Economía Circular is a large Spanish company specializing in integrated waste management services with a strong commitment to sustainability and social impact. The company offers a range of services including treatment plants, waste management, transportation, and equipment rental. It is part of the Grupo Social ONCE, which enhances its market credibility. The website is professionally designed, mobile-optimized, and provides comprehensive information about its services and corporate values. Technically, the site uses Drupal CMS with modern libraries and tracking tools such as Google Tag Manager and Facebook Pixel. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. The WHOIS data is missing or unavailable, which slightly reduces trust but the overall digital presence and association with a known parent company support legitimacy.

I

ILUNION

iluniontutienda.com

62

ILUNION Tu Tienda operates a network of over 65 accessible retail stores located primarily in hospitals and strategic points across Spain. The business model focuses on social impact by employing a workforce largely composed of people with disabilities and offering sustainable, socially responsible products. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content about their services, values, and partner ecosystem. Technically, the site uses Drupal CMS with modern libraries and integrates analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and reCAPTCHA for security. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. The absence of WHOIS registration data for the domain is a notable concern, but the website's association with Grupo Social ONCE and ILUNION corporate entities supports its legitimacy. Overall, the site presents a trustworthy and professional digital presence aligned with its social enterprise mission.

I

ILUNION TextilCare

iluniontextilcare.com

66

ILUNION TextilCare is a large, well-established textile management service provider operating primarily in Spain with presence in Portugal and Colombia. The company offers services such as uniform renting, industrial laundry, and other textile-related solutions, focusing on sustainability and social inclusion under the Grupo Social ONCE umbrella. The website demonstrates a mature digital presence with modern technologies including Drupal CMS, Bootstrap, and integrated analytics tools. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though no explicit security policy or incident response contacts are published. The domain WHOIS data is unavailable, which limits trust verification, but the website's professional content and branding mitigate concerns. Overall, the site is well-designed, accessible, and compliant with privacy regulations, serving a business audience effectively.

I

ILUNION

ilunion.com

70

ILUNION is a Spanish enterprise focused on social inclusion and diversity, operating a business model that combines economic profitability with social impact by creating quality employment for people with disabilities and vulnerable groups. The company is positioned as a leader in diversity and transformation with a broad portfolio of services including hospitality, retail, consulting, and wellbeing. Technically, the website is built on Drupal CMS with modern front-end frameworks and integrates analytics and marketing tools such as Google Tag Manager and Visual Website Optimizer. The site demonstrates excellent accessibility, mobile optimization, and SEO practices. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. The WHOIS data is missing, which slightly reduces domain trustworthiness, but the website's content, branding, and external links to Grupo Social ONCE and subsidiaries strongly support legitimacy. Overall, ILUNION presents a professional, trustworthy, and socially responsible digital presence.

G

Grand Palais

grandpalais.fr

64

Grand Palais is a prominent French cultural institution offering exhibitions, concerts, educational workshops, and guided tours. The website is well-designed, mobile-optimized, and uses Drupal CMS with modern technologies such as Google Tag Manager and OneTrust for cookie consent. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable, which slightly reduces trust but the website content and branding strongly indicate legitimacy. Overall, the site is professional, compliant with GDPR, and serves a broad audience including families, professionals, and visitors with special needs.

D

Del Monte

delmonte.com

67

Del Monte is a well-established brand specializing in canned fruits, vegetables, and snacks, targeting general consumers and families seeking nutritious food options. The website reflects a mature digital presence with rich content including product catalogs, recipes, and brand storytelling. Technically, the site is built on Drupal CMS with modern analytics and marketing integrations, optimized for mobile and accessibility. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and cookie consent mechanisms could be improved. The WHOIS data is unavailable, likely due to privacy protection, which is common for large brands but should be monitored. Overall, the site is professional, trustworthy, and compliant with basic privacy standards.

I

Infocentrum Valašské Klobouky

infocentrum-valasskeklobouky.cz

49

The website www.infocentrum-valasskeklobouky.cz serves as the official online presence of a cultural and educational center in Valašské Klobouky, Czech Republic. It provides information about local cultural events, tourist attractions, traditions, and services aimed at residents and visitors. The site is positioned as a local government or non-profit entity focused on promoting regional culture and tourism. Technically, the site is built on Drupal CMS with older versions of jQuery and Bootstrap, integrating Google Analytics and Facebook SDK for analytics and social media features. The site is accessible and mobile-optimized but lacks advanced security headers and a comprehensive privacy policy. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy. Overall, the site is functional and informative but could improve its security posture and privacy compliance.

A

Amendis

amendis.ma

57

Amendis is a Moroccan utility company specializing in water and electricity distribution, wastewater treatment, and customer services. It operates under the Veolia group umbrella, indicating a strong market position in the energy sector. The website provides comprehensive information about its services, news, and career opportunities, targeting both residential and commercial customers. The digital infrastructure is built on Drupal CMS with modern privacy and cookie consent mechanisms, reflecting a mature digital presence. Security posture is good with HTTPS and security headers implemented, though there is room for improvement in publishing explicit security policies and incident response contacts. The absence of WHOIS registration data is a concern but does not negate the legitimacy suggested by the website content and corporate affiliation. Overall, the site is professional, secure, and compliant with GDPR, serving as a reliable digital front for Amendis.

F

Fundación ONCE

fundaciononce.es

66

Fundación ONCE is a prominent Spanish non-profit organization dedicated to the social inclusion and cooperation for people with disabilities. It operates under the Grupo Social ONCE umbrella and provides a wide range of services including training, employment support, accessibility innovation, and international cooperation. The website reflects a mature and professional digital presence with comprehensive content and strong branding consistency. Technically, the site is built on Drupal CMS with modern web technologies and integrates multiple analytics and marketing tools while maintaining good privacy compliance and security posture. Security best practices such as HTTPS, security headers, and cookie consent mechanisms are implemented, although there is room for improvement in incident response transparency and vulnerability disclosure. Overall, the website is trustworthy, well-maintained, and aligned with its mission and audience.