Security Directory

E

eBay Inc.

ebay.com

71

eBay Inc. operates a leading global e-commerce platform facilitating consumer-to-consumer and business-to-consumer sales worldwide. Founded in 1995, it has established a strong market position with a multibillion-dollar business and operations in approximately 30 countries. The website offers a wide range of products including electronics, cars, fashion, collectibles, and more, targeting a broad audience of consumers and businesses. The business model centers on providing an online marketplace where buyers can shop for free while sellers pay listing and transaction fees. Technically, the website employs modern web technologies such as Marko.js, lazy loading, and extensive JavaScript for dynamic content and performance optimization. The site is well-optimized for mobile devices, accessible, and SEO-friendly. Security is robust with HTTPS enforced, multiple security headers, and client-side error monitoring. Privacy compliance is strong, featuring comprehensive privacy and cookie policies with GDPR adherence and a consent mechanism. The security posture is mature, with no evident vulnerabilities or exposed sensitive data. However, explicit security policies, incident response details, and vulnerability disclosure programs are not publicly documented on the site. The WHOIS data is unavailable due to registry restrictions, which is unusual but likely a privacy measure rather than a red flag. Overall, the site demonstrates high professionalism, trustworthiness, and operational maturity. Strategic recommendations include publishing detailed security and incident response policies, establishing a vulnerability disclosure program, and enhancing transparency around data protection officers and certifications to further strengthen trust and compliance.

D

drinkdirect.ch / Diwisa AG

trojka.ch

48

drinkdirect.ch operates as a specialized e-commerce platform focused on alcoholic beverages, prominently featuring the Trojka Vodka brand. The company, Diwisa AG, has a strong market presence in Switzerland, offering a wide range of spirits and mixer products with an emphasis on ease of use and variety. The website is professionally designed, mobile-optimized, and integrates multiple marketing and analytics tools to enhance user engagement and sales. Technically, the site uses modern e-commerce frameworks and maintains good security practices including HTTPS and security headers. However, explicit security policies and incident response information are not publicly available, which could be improved to enhance trust. Overall, the platform is mature, trustworthy, and well-positioned in its niche.

The website www.leejaemin.net is a professionally designed portfolio site for Jaemin Lee, showcasing a wide range of creative works including design projects, exhibitions, and writing. The site targets a general audience interested in art and design, primarily in South Korea, and is bilingual in Korean and English. The business model is focused on personal branding and promotion of creative services. Technically, the site is built on WordPress with Elementor and uses modern JavaScript libraries such as jQuery and egjs-jquery-transform. SEO is enhanced by the Yoast SEO plugin, and the site is served over HTTPS, ensuring secure connections. However, there is no evidence of privacy or cookie policies, which impacts compliance and user trust. Security posture is generally good with no visible vulnerabilities or exposed sensitive data, but the absence of security headers is a gap. The WHOIS data is missing or inaccessible, which raises questions about domain registration legitimacy despite the active and professional website presence. Overall, the site is functional and professional but would benefit from improved privacy compliance and clearer domain registration transparency.

W

Wyss Sebastian

wyssseb.ch

45

Wyss Sebastian's website is a personal WordPress blog hosted on a standard WordPress platform using the Twenty Twenty-Five theme. The site currently contains minimal content, with no published blog posts or business-related information. The technical infrastructure is modern and secure, utilizing HTTPS and standard WordPress technologies, but lacks advanced SEO, accessibility, and security headers. There are no privacy or cookie policies, nor any contact or incident response information, which limits compliance and trustworthiness. Overall, the site is safe and suitable for general audiences but lacks professional business features and security maturity.

M

Megi Zumstein

megizumstein.ch

51

Megi Zumstein is a graphic designer based in Luzern, Switzerland, presenting a professional portfolio website showcasing various cultural and artistic projects. The website targets a general audience interested in graphic design and cultural collaborations, positioning itself as a niche individual professional service provider. The site features modern frontend technologies such as Alpine.js and SVG graphics, with a responsive design and good navigation clarity. However, it lacks comprehensive privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. Technically, the website is built with modern web standards, uses HTTPS, and loads efficiently, but it could benefit from improved accessibility features and security best practices such as implementing security headers. No analytics or tracking scripts were detected, indicating minimal user tracking and good privacy from that perspective. From a security standpoint, the site has a good SSL configuration but lacks security headers and formal policies related to privacy and incident response. The domain uses privacy protection for WHOIS data, which is reasonable for a small business or individual professional. No suspicious patterns or vulnerabilities were identified in the content or technical setup. Overall, the website is professional and functional but would benefit from enhanced privacy compliance, security hardening, and clearer contact information to improve trust and regulatory adherence.

The website lychkovskiy.com serves as a professional portfolio for Mikhail Lychkovskiy, a contemporary designer and poster artist. The site showcases a comprehensive gallery of poster artworks, emphasizing typographic treatment and a blend of national graphic styles. The business operates primarily as an independent artist, targeting design enthusiasts and art collectors, with sales facilitated through external shop links. The domain is relatively new, registered in 2022, aligning with the artist's career timeline. Technically, the website is built on the Adobe Portfolio platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, and Adobe Typekit fonts. Google Tag Manager is employed for analytics and tracking purposes. The site demonstrates good mobile optimization and user experience, with clear navigation and professional design quality. However, accessibility features are basic, and SEO optimization is moderate. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections in place. However, DNSSEC is not enabled, and no security headers were detected, indicating room for improvement in security hardening. Privacy compliance is lacking, with no privacy or cookie policies found, and no GDPR compliance indicators present. Contact information is limited to a single email address, with no phone numbers or physical addresses provided. Overall, the website presents a trustworthy and professional portfolio for an independent artist but would benefit from enhanced privacy policies, security headers, and clearer compliance documentation to improve its security posture and regulatory adherence.

V

virgileflores.com

virgileflores.com

54

The website virgileflores.com represents a creative bureau specializing in fashion, art, and music. It targets creative professionals and clients seeking artistic and fashion-related services. The business model is that of a niche creative agency with a small scale and focused market position. The website is built using the Framer platform and hosted on Framer's infrastructure, indicating a modern but simple technical setup. The site design is professional and visually appealing, with good mobile optimization and basic accessibility features. However, the site lacks comprehensive privacy, cookie, and terms of service policies, which are important for compliance and user trust. Security posture is minimal with no detected security headers or advanced protections, and WHOIS data is missing, raising concerns about domain legitimacy. Overall, the site is functional and professional but requires improvements in security, compliance, and business transparency to enhance trust and reduce risk.

Alex Dujet Type System Corp is a specialized graphic and type design studio based in Geneva, Switzerland, founded in 2015. The company focuses on visual communication, editorial, and type design, collaborating with a network of design professionals and co-founding the Swiss type foundry Extraset. The website serves as a portfolio showcasing extensive design projects and exhibitions, targeting graphic designers and related professionals. Technically, the site is built with standard web technologies including HTML5, CSS3, JavaScript, and jQuery, hosted on Infomaniak servers. While the site is content-rich and professionally designed, it lacks modern privacy and security compliance features such as privacy and cookie policies, security headers, and DNSSEC. The domain registration is consistent with the business claims, supporting legitimacy. Overall, the website demonstrates good business credibility but has room for improvement in security and privacy compliance.

The website represents zoty中欧·(中国有限公司), an entity positioned as an entertainment gaming platform combined with educational and research activities in China. The site offers news, academic events, organizational information, and various educational resources, targeting a general audience interested in technology and education. The business model appears to blend entertainment services with academic and research functions, positioning itself as a notable player in its niche. Technically, the website is built using Visual SiteBuilder 9 CMS and employs common JavaScript libraries such as jQuery and SuperSlide for UI effects. It integrates third-party analytics from 51.la and includes multiple external scripts, some from less-known domains. The site shows moderate performance and basic mobile optimization but lacks advanced accessibility and SEO features. From a security perspective, the site lacks HTTPS enforcement and security headers, exposing it to potential risks. No privacy or cookie policies are present, and WHOIS data is unavailable, raising concerns about domain legitimacy. The absence of contact emails and limited security best practices further reduce trustworthiness. Overall, the website is functional with relevant content but exhibits significant security and compliance gaps. Strategic improvements in HTTPS deployment, privacy compliance, and domain registration transparency are recommended to enhance trust and security.

N

Neo Neo

neoneo.ch

51

Neo Neo is a Swiss-based graphic design studio specializing in creative services including graphic design, type design, curating, and publishing. The website serves as a comprehensive portfolio showcasing projects from 2010 through 2024, highlighting a strong presence in cultural and artistic sectors. The business targets a general audience interested in high-quality graphic design and cultural projects. Technically, the website is built on WordPress with Yoast SEO plugin, indicating a moderate level of digital maturity and SEO awareness. The site is mobile optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

S

Studio Guillaume Ruiz

guillaumeruiz.com

56

Studio Guillaume Ruiz is a small artistic and graphic design studio based in France, operating since 2011. The website serves as a portfolio showcasing a multidisciplinary range of projects including posters, workshops, editions, visual identities, interfaces, and signage. The business targets a general audience interested in creative design services and artistic direction. Technically, the website is built on WordPress and uses common libraries such as jQuery, Masonry, and Plyr, hosted by OVH sas. The site demonstrates good design quality, mobile optimization, and SEO practices, though accessibility is basic. Security posture is moderate with HTTPS enabled and domain protections in place, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, and no contact or incident response information is provided, which impacts compliance and trust. Overall, the website is professional and functional but could improve in privacy and security transparency.

O

Office for Typography

officefortypography.ch

49

Office for Typography is a small, specialized design studio focusing on graphic design, type design, and font engineering with physical offices in Switzerland and Japan. The website presents a clean, minimalistic design that clearly communicates the company's core services and contact information. The business targets clients in need of professional typography and graphic design services, positioning itself as a niche player with an international footprint. Technically, the website is built with standard HTML5 and CSS3, without detectable CMS or advanced frameworks. The site is mobile-optimized and performs moderately well, though lacks advanced SEO and accessibility features. No analytics or tracking technologies are present, indicating a privacy-conscious approach or minimal digital marketing. From a security perspective, the site uses HTTPS (assumed from domain), but no security headers or policies are published. There are no forms or data collection points, reducing attack surface, but also no published privacy or cookie policies, which is a compliance gap. The WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the website is professional and trustworthy but could improve in privacy compliance and security best practices to enhance user trust and regulatory adherence.

Elias Hanzer is a small independent creative studio and typeface designer with a portfolio showcasing various typeface projects and collaborations. The website serves as a professional portfolio and project showcase targeting design professionals and typography enthusiasts. The technical infrastructure is based on WordPress with a modern theme and uses Matomo for analytics, indicating a moderate level of digital maturity. Mobile optimization and user experience are good, though some SEO and accessibility features could be improved. Security posture is adequate with HTTPS enabled and domain transfer lock, but lacks DNSSEC and security headers. Privacy compliance is basic with a privacy policy linked externally but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained but could benefit from enhanced security and privacy features.

L

Lisa Edi

lisaedi.com

51

Lisa Edi is a professional photographer based in Vienna, Austria, specializing in fashion, portrait, and still life photography. The website showcases a rich portfolio of artistic works and provides comprehensive contact and business information. The business operates a small-scale creative service model with additional print sales. Technically, the website is built on Craft CMS and uses modern JavaScript libraries, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain transfer protection, though DNSSEC and security headers could be improved. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the website presents a trustworthy and professional digital presence.

P

Paul Jochum

pauljochum.com

59

Paul Jochum's website serves as a professional portfolio showcasing his expertise in designing and developing visual identities for brands, institutions, and cultural projects. The site emphasizes a blend of graphic design, web design, and development to deliver cohesive branding systems with a focus on clarity and narrative. The business operates as a small-scale creative professional targeting niche clients in the cultural and institutional sectors. Technically, the website is built using the Framer platform, leveraging modern JavaScript and SVG technologies, with moderate performance and good mobile optimization. However, the site lacks advanced accessibility features and comprehensive SEO optimizations. Security posture is weak due to missing HTTPS verification, absence of security headers, and no visible privacy or cookie policies, which poses compliance and trust challenges. The WHOIS data is unavailable, raising concerns about domain registration legitimacy, although the website content appears professional and consistent. Overall, the site is functional and visually appealing but requires improvements in security, privacy compliance, and domain transparency to enhance trust and reduce risk.

L

linyouting

linyouting.com

51

The website linyouting.com serves as a personal portfolio for Youting Lin, a multidisciplinary designer specializing in graphic design and motion graphics. The site showcases various creative projects and visual works, targeting a general audience interested in design and multimedia art. The business model is primarily portfolio-based, aimed at personal branding and showcasing creative skills. The market position is niche, focusing on creative professionals and potential clients in the design industry. Technically, the site is built on the Cargo Collective platform, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site is hosted on Cargo's infrastructure with assets served from freight.cargo.site and static.cargo.site. The site is mobile optimized with good design quality and user experience, though some SEO and accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protection enabled. However, DNSSEC is not enabled, and no security headers are detected in the HTML content, which are areas for improvement. There are no published privacy, cookie, or terms of service policies, nor any incident response or security contact information, indicating limited compliance and transparency. Overall, the site is a well-designed personal portfolio with moderate technical maturity and security posture. The lack of privacy and security policies, as well as contact information, reduces trust and compliance scores. Strategic improvements in these areas would enhance the site's professionalism and security stance.

L

Lynn Oh

lynnsohn.com

50

Lynn Oh's website is a professionally designed portfolio showcasing her multidisciplinary graphic design expertise, including identity, typography, and motion graphics. The site highlights collaborations with prestigious agencies and clients such as Instagram, COLLINS, Pentagram, Apple, and Nike, positioning her as an established creative professional in the media industry. The business model is focused on personal branding and freelance/contract design services targeting creative industry professionals and potential clients. Technically, the website is built on the Cargo Collective platform using modern web standards including HTML5, CSS3, and JavaScript, with custom fonts loaded from WebType. The site is mobile optimized and performs moderately well, though accessibility and SEO optimizations are basic. Hosting and domain registration are consistent and reputable, with HTTPS enabled and domain transfer protections in place. From a security perspective, the site benefits from HTTPS and domain transfer lock but lacks DNSSEC and security headers, which are recommended for enhanced protection. There are no privacy or cookie policies, nor vulnerability disclosure mechanisms, indicating gaps in compliance and security transparency. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website is safe, professional, and trustworthy with excellent content quality and business credibility. However, improvements in privacy compliance, security headers, and disclosure policies would strengthen its security posture and regulatory adherence.

S

Skala

skaladesign.ch

47

Skala is a Zurich-based graphic design and branding studio founded in 2022, specializing in creative services for institutions, brands, and individuals within culture, education, and business sectors. The website showcases a portfolio of diverse projects emphasizing visual identity, branding, and design innovation. The company positions itself as a niche creative agency with a consistent and professional brand image. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery and Ajaxify, with Google Analytics integrated for user tracking. The site is mobile-optimized and demonstrates good performance and SEO practices. Security-wise, the site uses HTTPS with an excellent SSL configuration but lacks security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security posture. Overall, the website is professional and trustworthy with moderate risk due to missing privacy and security policy disclosures.

D

DR.ME

dr-me.com

53

DR.ME is a well-established creative design studio based in Manchester, UK, founded in 2010. The company specializes in innovative and experimental design services including graphic design, art direction, photography, illustration, collage, and video production. They serve a diverse client base in music, fashion, art, and culture sectors and have earned industry recognition such as the D&AD Yellow Pencil award. The website reflects a professional portfolio showcasing their work and client list, positioning them as a respected player in the creative media industry. Technically, the site is built on the Cargo Collective platform using modern web technologies and is mobile optimized with moderate performance. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks advanced security headers and formal privacy or cookie policies. Overall, the site is safe, professional, and trustworthy but could improve compliance and security transparency.

L

Lamm & Kirch GbR

lamm-kirch.com

46

Lamm & Kirch GbR is a small, established graphic design studio founded in 2012, specializing in cultural sector projects including book design, visual identities, and exhibitions. Operating from Leipzig and Berlin, the studio collaborates with a network of professionals to deliver comprehensive design services. Their website reflects a professional and well-curated portfolio, demonstrating their market position as a reputable design studio with international recognition and multiple awards. Technically, the website uses standard web technologies with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protections, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is strong with a detailed GDPR-compliant privacy policy, though cookie consent mechanisms are absent. Overall, the website is trustworthy, professional, and safe for general audiences.

Studio Terhedebrügge Terhedebrügge is a small Berlin-based design studio specializing in graphic and industrial design services. The website serves as a professional portfolio showcasing their projects and design expertise. The business targets a general audience interested in design and creative services within the Berlin region. The market position is niche, focusing on high-quality design work rather than mass-market offerings. Technically, the website is built on WordPress CMS and uses common frontend libraries such as jQuery and Swiper.js. The site demonstrates good mobile optimization and responsive design, with moderate performance characteristics. However, there is room for improvement in accessibility and SEO optimization. Hosting is provided by rzone.de, a German hosting provider consistent with the domain and business location. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and formal security policies. There are no visible privacy or cookie policies, and no incident response or vulnerability disclosure information is provided. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the security posture is moderate but could be enhanced by implementing standard security headers and compliance documentation. The overall risk assessment is low to moderate, with no critical vulnerabilities or blocking mechanisms detected. Strategic recommendations include adding privacy and cookie policies to comply with GDPR, improving security headers, and providing clear contact information for security incidents. Enhancing SEO and accessibility would also improve the site's technical maturity and user experience.

S

Studio Tillack Knöll

studiotillackknoell.com

48

Studio Tillack Knöll is a small, specialized design practice based in Stuttgart, Germany, focusing on visual communication, spatial design, and graphic design services. Their portfolio includes exhibitions, wayfinding systems, book design, branding, and digital experiences for clients in architecture, art, science, commerce, cultural institutions, and NGOs. The website presents a professional and well-structured portfolio with recent activity and project showcases, indicating an active and reputable studio with international recognition. Technically, the website is built on WordPress with modern JavaScript libraries such as Swiper.js and SEO enhancements via Yoast SEO. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Hosting is inferred to be with GoDaddy.com, LLC, consistent with the domain registrar data. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and DNSSEC. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanisms. Contact information is primarily via a contact form and physical address; no direct emails or phone numbers are publicly listed. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and enhanced security headers to strengthen its security posture and regulatory adherence.

I

Image Format

imageformat.fr

43

Image Format is a French creative design portfolio website showcasing various visual and typographic projects. The site targets design professionals and enthusiasts, presenting a curated collection of creative works. The business model appears to be service or portfolio-based, emphasizing artistic and typographic design. The website is built on WordPress and uses common JavaScript libraries such as jQuery and Splide.js, hosted via Scaleway with DNS managed by o2switch.net. The technical infrastructure is moderate in performance with good mobile optimization but basic accessibility and SEO features. Security posture is average with HTTPS likely enabled but lacking visible security headers and formal security policies. Privacy compliance is low due to absence of privacy and cookie policies. Contact information is limited to an email address, with no phone or physical address provided. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy measures.

M

Mykola Kovalenko Studio

mykolakovalenko.eu

53

Mykola Kovalenko Studio is a small creative design studio specializing in graphic design services such as posters, logos, brand identity, advertising, and packaging. The website serves primarily as a portfolio showcasing a wide range of projects with visual examples and categorization. The studio targets clients seeking professional graphic design and branding solutions. The business has been active since at least 2003, as indicated by copyright information. Technically, the website uses common JavaScript libraries including jQuery, FancyBox, Masonry, and LazyLoad to enhance user experience and image presentation. The site is moderately optimized for mobile devices and has a clear navigation structure. However, there is no evidence of a CMS or advanced frameworks. Performance is moderate with room for improvement in SEO and accessibility. From a security perspective, the website lacks visible security headers and privacy-related policies. HTTPS status is unknown from the provided data but is recommended. No forms or sensitive data collection points are present in the analyzed HTML, reducing immediate risk exposure. Social media links provide additional trust signals but no direct contact emails or phone numbers are listed on the main page. Overall, the website is a professional portfolio with moderate technical maturity and limited security and privacy compliance. Strategic improvements in security headers, privacy policies, and contact information would enhance trust and compliance.

J

Johnson / Kingston

johnsonkingston.ch

47

Johnson / Kingston is a Swiss design studio founded in 2012, specializing in contemporary graphic design with a strong focus on the intersection of design and technology. Their services include digital publishing, typeface development, custom workflows, and identity design for cultural and educational institutions. The studio has received international recognition, including multiple Swiss Design Awards, and maintains a professional online portfolio showcasing their work and teaching activities. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript, jQuery, and Swiper.js, delivering a fast and visually rich user experience optimized for mobile devices. Security-wise, the site lacks visible security headers and privacy/cookie policies, which are areas for improvement, but it does not collect user data or use tracking scripts, reducing risk exposure. The domain registration data is consistent with the business claims, indicating legitimacy and trustworthiness.

M

Marinus Klinksik

marinusklinksik.de

49

Marinus Klinksik is a Hamburg-based multidisciplinary graphic and type designer with a professional online portfolio hosted on the Cargo Collective platform. The website showcases a strong focus on typography, editorial, web, and motion design, complemented by the launch of a type foundry called Why.Foundry in early 2024. The site is well-structured, visually professional, and targets clients and collaborators in the creative design industry. Technically, the website employs modern web standards, including HTTPS, security headers, and Google Analytics with IP anonymization, hosted on a reputable platform. Security posture is solid with no visible vulnerabilities, though cookie consent mechanisms and explicit security policies could be improved. Overall, the website presents a trustworthy and professional digital presence for a small creative business.

R

Raffinerie AG für Gestaltung

raffinerie.com

47

Raffinerie AG für Gestaltung is a well-established design agency based in Zürich, Switzerland, specializing in branding, digital, and editorial design services. The company has a strong portfolio featuring notable clients such as Helsana, Greenpeace, and Zürcher Kantonalbank, positioning itself as a reputable player in the media and creative design sector. The website reflects a professional and consistent brand image, targeting businesses and organizations seeking high-quality design solutions. Technically, the website is built on modern web technologies including HTML5, CSS3, JavaScript, and Alpine.js, hosted on infrastructure associated with Metanet AG. It is optimized for mobile devices and demonstrates good performance and accessibility standards. The use of Google Tag Manager and Vimeo embeds indicates a mature digital marketing and content delivery approach. From a security perspective, the site employs HTTPS with a valid SSL certificate and has domain transfer protections in place. However, it lacks DNSSEC and security headers, which are recommended to enhance security posture. Privacy compliance is basic, with a cookie policy present but no active consent mechanism or detailed GDPR compliance indicators. No incident response or security policy pages were found. Overall, the website is trustworthy and professionally maintained, with minor improvements recommended in security headers and privacy compliance to strengthen its security and regulatory posture.

babyinktwice is a specialized graphic design and letterpress print studio founded in 2009 by Dafi Kühne, operating from Zürich and Glarus, Switzerland. The studio focuses on artisanal poster printing and design services for cultural, architectural, and artistic projects, complemented by educational workshops and university teaching engagements in Europe and the United States. The website serves as a portfolio and e-commerce platform showcasing a rich collection of letterpress posters and projects, many of which have received prestigious awards and nominations. Technically, the website is built on WordPress 6.2.8, utilizing common libraries such as jQuery and D3.js, and styled with Bootstrap CSS. The site is moderately performant and mobile-optimized, with good SEO practices but basic accessibility features. Security-wise, the site enforces HTTPS but lacks important security headers and published security policies, which could be improved to enhance protection and compliance. The security posture is adequate but could benefit from implementing security headers, publishing privacy and cookie policies, and establishing incident response contacts. No vulnerabilities or malicious content were detected. Overall, the site is trustworthy and professional but has room for improvement in privacy compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and cookie policies, adding security headers, establishing a vulnerability disclosure process, and enhancing incident response readiness to strengthen trust and compliance.

F

Fons Hickmann M23

m23.de

38

Fons Hickmann M23 is a Berlin-based design studio specializing in complex communication systems and graphic design projects. The website showcases a professional portfolio with diverse projects including posters, campaigns, animations, and editorial designs, targeting cultural institutions and design professionals. The business is well-established with a domain age dating back to 2002, indicating a mature presence in the design industry. Technically, the website is built on WordPress with modern JavaScript libraries such as Flickity and Plyr, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers which could enhance protection. Privacy compliance is weak due to absence of privacy and cookie policies, representing a compliance risk. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and content-rich but would benefit from improved privacy and security practices.

Eilean Friis-Lund's website serves as a personal graphic design portfolio showcasing a gallery of images. The site targets individuals or businesses interested in graphic design services or artistic inspiration. The business model appears to be a personal brand portfolio aimed at attracting clients or commissions within a niche market. The website is small-scale with basic content quality and consistent branding. Technically, the site is built with standard HTML5, CSS3, and JavaScript without any detected frameworks or CMS. It features a responsive design optimized for mobile devices and moderate performance. However, there is a lack of advanced SEO and accessibility features, and no hosting or platform details are evident. From a security perspective, the site lacks essential security headers and published policies such as privacy or cookie policies. The absence of HTTPS information and incident response contacts indicates a low security posture. No vulnerabilities or tracking technologies were detected, but improvements are needed to enhance compliance and trust. Overall, the website presents a moderate risk profile primarily due to missing privacy and security policies and limited business information. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, enforcing HTTPS, and adding incident response contacts to improve trust and compliance.

H

Huynh & Bohle GbR

nandms.com

66

NAM is a professional design studio operating from Stuttgart, Germany, and Barcelona, Spain, specializing in graphic design, animation, illustration, and 3D visualization. The studio serves a diverse client base including major brands like Nike, Puma, and Coca Cola, and offers services such as brand identity creation, website design, and communication strategies. Their website showcases a modern, multimedia-rich portfolio with embedded Vimeo videos and interactive sliders, reflecting a high level of digital maturity and design expertise. Technically, the site uses Alpine.js and Plyr.js for interactivity and video playback, hosted behind Cloudflare DNS, ensuring good performance and security. Security posture is strong with HTTPS and security headers, though DNSSEC is not enabled and no cookie consent mechanism is present. The privacy policy is comprehensive and GDPR compliant, written in German, and contact information is clearly provided with multiple channels. WHOIS data shows an anomalous future domain creation date, which may be a data error, but overall the domain registration status and website content support legitimacy. Recommendations include enabling DNSSEC, adding cookie consent, and publishing an incident response policy to enhance trust and compliance.

E

Eddy Terki

eddyterki.fr

38

Eddy Terki's website is a professional portfolio showcasing a graphic design atelier based in France, specializing in editorial design, visual identity, signage, and website creation. The site is built on Drupal 8 and hosted by OVH, reflecting a moderate level of technical maturity. The content is rich and well-structured, targeting clients and collaborators in the creative and educational sectors. However, the site lacks critical privacy and cookie policies, which impacts GDPR compliance and overall privacy posture. Security measures such as HTTP security headers are absent, and no explicit contact information or incident response channels are provided, which could affect trust and responsiveness. Overall, the domain registration data aligns well with the website content, indicating legitimacy and consistency.

The website radzie.de represents a small personal graphic design portfolio operated by Robert Radziejewski based in Berlin. The site primarily showcases the designer's identity and contact information, targeting clients seeking graphic design services. The business model is service-oriented, likely freelance or small studio, with a niche local market position. The website uses WordPress CMS with the Lay theme and jQuery, hosted on a German hosting provider (rzone.de). The technical infrastructure is moderate with good mobile optimization but basic SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is functional but basic in content and technical sophistication.

Studio Dumbar/DEPT® is an established creative agency specializing in bespoke visual identities, motion design, sound, and creative coding. The company has a strong market position with a portfolio of high-profile projects and a consistent, professional brand presence. The website reflects a modern, well-designed digital presence leveraging advanced JavaScript libraries for smooth user experience and animations. However, the site lacks explicit privacy and terms of service documentation, which are important for compliance and user trust. The technical infrastructure is solid with HTTPS enabled and use of reputable third-party libraries, but security headers and DNSSEC are missing, representing areas for improvement. Overall, the security posture is moderate with room for enhancement in policy transparency and technical safeguards.

C

Chloé Pannatier

chloepannatier.ch

55

Chloé Pannatier's website is a professional graphic design portfolio showcasing a wide range of projects including poster designs, visual identities, and artworks for various clients and exhibitions. The site targets clients and collaborators in the creative industry, emphasizing detailed project descriptions and high-quality visuals. Technically, the site is built on WordPress with modern web technologies, featuring lazy loading and responsive design, providing a good user experience across devices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal security policies. Privacy compliance is minimal, with no visible privacy or cookie policies. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

P

Principal

principal.studio

54

Principal is a small design and strategy studio presenting a professional website primarily in French. The site showcases various projects and uses modern web technologies including Webflow CMS, Splide.js for slideshows, Howler.js for audio, and Vimeo for video embedding. The technical infrastructure is modern and the site is hosted on Webflow's CDN, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. No contact information or business certifications are publicly available, which limits trust signals. Overall, the website is professional and functional but could improve compliance and transparency.

Vestidos Artesanales de Madrid is a small artisanal fashion business specializing in custom handmade haute couture dresses with a strong emphasis on sustainability and traditional craftsmanship. The company operates primarily in Madrid, Spain, targeting clients seeking personalized, high-quality garments made from sustainable materials. Their key services include dress design, bespoke tailoring, fashion consultancy, and fabric selection. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website employs modern frontend technologies such as Tailwind CSS and vanilla JavaScript, hosted via GoDaddy. It is well-optimized for mobile devices and SEO, with fast performance and good accessibility features. However, there is room for improvement in security practices, including enabling DNSSEC and implementing security headers. The site uses HTTPS, but explicit confirmation was not found in the data. From a security perspective, the site shows no critical vulnerabilities or exposed sensitive data. Privacy compliance is supported by a clear privacy policy, cookie consent banner, and GDPR indicators. Contact information is comprehensive, enhancing business credibility. No incident response or security policy pages were found, which could be areas for future enhancement. Overall, the website presents a low-risk profile with a strong business focus and good digital maturity. Strategic recommendations include improving security headers, enabling DNSSEC, and adding explicit security and incident response policies to further strengthen trust and compliance.

Atelier Choque Le Goff is an independent graphic design studio based in Paris, founded in 2016. The website serves as a portfolio showcasing a variety of creative projects including book design, poster design, editorial work, identity creation, and typography. The studio targets clients interested in high-quality graphic design and art direction services. The business model is centered on creative service delivery with a focus on visual arts and design. The website content is well-structured and visually appealing, reflecting the studio's professional branding and consistent design language. Technically, the website is built on GravCMS, a flat-file CMS, and uses jQuery 2.x along with custom CSS and JavaScript. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO optimization is present but minimal. Hosting appears to be managed via the registrar Nuxit with modns.fr nameservers. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site lacks several best practices such as security headers and DNSSEC. The domain uses HTTPS (assumed from URL) but no explicit security headers were detected in the provided data. No privacy or cookie policies are present, which is a compliance gap especially under GDPR. No contact or incident response information is provided, limiting transparency and trust. The WHOIS data is consistent and legitimate, with a domain age appropriate for the business history. Overall, the website is a good representation of a small creative studio with a professional portfolio. However, it lacks important privacy and security features that could improve trust and compliance. Strategic recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and providing clear contact information to enhance credibility and security posture.

G

Graphic Design Festival Scotland / INTL

graphicdesignfestivalscotland.com

33

Graphic Design Festival Scotland is an established creative festival that has evolved into INTL, a broader international creative organisation focusing on multiple creative disciplines and global engagement through festivals, awards, and competitions. The website presents a professional and consistent brand message targeting creative professionals and enthusiasts worldwide. Technically, the site uses modern web technologies including Google Analytics and jQuery, hosted via GoDaddy, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks security headers and formal privacy or cookie policies, which are critical for compliance and trust. Overall, the site is safe, professional, and legitimate but would benefit from enhanced privacy compliance and security hardening.

Bento is a technology company offering a comprehensive email marketing and CRM platform tailored for small businesses. Founded in 2019, Bento provides an all-in-one solution that includes marketing automation, transactional email services, AI-powered CRM features, and spam protection. The company positions itself as a user-friendly and developer-friendly platform with strong deliverability and enterprise-grade security, evidenced by its SOC 2 Type II compliance. The website reflects a modern, professional brand with clear messaging and a focus on ease of use and integration capabilities. Technically, Bento's website is built using modern web technologies including React and Next.js, hosted with Cloudflare DNS and leveraging cloud media services. The site is fast, mobile-optimized, and accessible, with good SEO practices and structured data enhancing search visibility. Security best practices are observed with HTTPS enforcement, security headers, and domain registration protections, although DNSSEC is not enabled. Privacy compliance is an area for improvement as no explicit privacy or cookie policies are present. From a security perspective, Bento demonstrates a mature posture with SOC 2 Type II certification and features like Spam Shield to maintain email list hygiene. No vulnerabilities or exposed sensitive data were detected in the analysis. However, the absence of published security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for enhancing transparency and readiness. Overall, Bento presents a trustworthy and professional online presence with strong technical and security foundations. To further improve, the company should address privacy compliance gaps, publish comprehensive policies, and enhance contact options to build greater user trust and regulatory adherence.

B

BoldDesk

bolddesk.com

81

BoldDesk is a technology company offering next-generation AI-powered customer service software, including help desk ticketing, live chat, omnichannel support, and knowledge base solutions. Positioned as an enterprise-grade platform, it targets businesses seeking to enhance customer support efficiency through automation and AI. The website demonstrates a mature digital infrastructure built on WordPress with Elementor, optimized for performance and mobile responsiveness. Integration of Google Tag Manager, OneSignal, and CookieYes indicates a focus on marketing, user engagement, and privacy compliance. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The lack of WHOIS data for the domain is a notable anomaly, slightly reducing trust but not detracting from the professional presentation and business legitimacy. Overall, BoldDesk presents as a credible SaaS provider with a solid technical foundation and good privacy practices.

F

FORPSI

forpsi.it

74

FORPSI is a professional Czech technology company specializing in domain registration, web hosting, VPS, cloud services, dedicated servers, email hosting, and website building tools. The company operates its own datacenter with 24/7 monitoring and offers a broad portfolio of IT infrastructure services targeting individuals and businesses seeking reliable online presence solutions. The website is well-structured, multilingual, and provides clear navigation to various service categories including domains, hosting, WordPress, VPS, cloud, and email services. Technical infrastructure is based on ASP.NET WebForms with modern JavaScript libraries and tracking tools integrated. Security posture is adequate with HTTPS and SSL certificates in use, but lacks some advanced security headers and explicit security policies. Privacy compliance is partially addressed with cookie consent but lacks a clearly accessible privacy policy and terms of service. WHOIS data for the domain is unavailable or protected, which slightly reduces trust but the professional presentation and service offerings indicate legitimacy. Overall, the website demonstrates a mature digital presence with room for improvement in transparency and security disclosures.

F

FORPSI

forpsi.cz

73

FORPSI is a Czech-based technology company specializing in domain registration, web hosting, VPS, and cloud services. The company positions itself as a professional and reliable partner with its own data center, targeting both business and individual customers seeking affordable and comprehensive hosting solutions. The website content is well-structured and presented in Czech, reflecting a focus on the local market. The business model revolves around providing essential internet infrastructure services with a strong emphasis on domain and hosting offerings. Technically, the website employs a modern technology stack including jQuery, select2, Google Tag Manager, Cookiebot for consent management, and analytics tools such as Google Analytics, CrazyEgg, and Smartlook. The site is built on Kentico CMS, indicating a mature content management infrastructure. Performance and mobile optimization are good, with proper SEO and accessibility features, although some accessibility aspects could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR requirements. However, it lacks visible security headers and published security policies or incident response information, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analysis. The absence of WHOIS registrant data reduces trust slightly but does not negate the professional appearance and functionality of the site. Overall, FORPSI presents a solid digital presence with good privacy compliance and technical implementation. Strategic recommendations include enhancing transparency by publishing security and incident response policies, improving contact information visibility, and adding security headers to strengthen the security posture further.

F

FORPSI

forpsi.net

74

FORPSI is a professional service provider specializing in domain registration, web hosting, VPS, and cloud services primarily targeting customers in the Czech Republic. The company positions itself as a reliable partner with its own data center infrastructure, offering a range of hosting and domain-related services. The website is well-structured, with clear descriptions of services and a focus on customer usability. Technically, the site uses modern web technologies including jQuery, Select2, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. The presence of a cookie consent banner and detailed cookie policy demonstrates compliance with GDPR requirements. Security-wise, the site enforces HTTPS and uses CSRF protection cookies, but lacks visible security headers and explicit security policies or incident response contacts, which could be improved. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, but the professional presentation and comprehensive privacy compliance mitigate some of these concerns. Overall, the website scores well in content quality, technical implementation, and security posture, with room for improvement in business credibility and transparency.

I

Institut plánování a rozvoje hlavního města Prahy

iprpraha.cz

46

Institut plánování a rozvoje hlavního města Prahy (IPR Praha) is the primary conceptual and planning institution for the city of Prague, focusing on architecture, urbanism, and city development. The organization holds a strong market position as the authoritative body for urban planning in Prague, offering services such as metropolitan planning, urban data analytics, and public engagement through its CAMP center. The website reflects a mature digital presence with comprehensive content tailored to residents, city officials, and professionals in urban development. Technically, the website employs modern JavaScript modules, integrates Google Analytics and Tag Manager for tracking, and uses Google reCAPTCHA v3 for bot mitigation. The site is mobile-optimized, accessible, and SEO-friendly, hosted under a reputable Czech registrar. Privacy compliance is well addressed with cookie consent mechanisms and a detailed privacy policy. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies or incident response contacts suggests room for improvement in transparency and readiness. Overall, the site is trustworthy, professional, and well-maintained, supporting the organization's public service mission effectively.

M

Memberstack

memberstack.com

68

Memberstack is a SaaS platform specializing in providing membership and subscription management solutions integrated seamlessly with Webflow. The company targets web developers, agencies, and SaaS builders who want to add user accounts, gated content, and subscription features without complex tech stack changes. With over 50,000 teams and agencies using their platform, and trusted by notable brands such as Amazon and Salesforce, Memberstack holds a strong market position in the web development technology sector. The website content is professional, well-structured, and rich with customer testimonials and case studies, reflecting a mature and credible business. Technically, the website leverages modern web technologies including Webflow CMS, React, Node.js for backend APIs, and integrates multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, PostHog, and Facebook Pixel. Hosting is provided by Webflow, ensuring fast performance and excellent mobile optimization. Accessibility and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. No vulnerabilities or exposed sensitive data were detected. However, the absence of an explicit cookie consent mechanism and a dedicated security policy page indicates room for improvement in privacy compliance and security transparency. The WHOIS data is unavailable, which reduces transparency but is likely due to privacy protection services common in SaaS businesses. Overall, Memberstack presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include implementing explicit cookie consent, publishing a security policy and incident response information, and adding a vulnerability disclosure channel to enhance trust and compliance.

Wine Industry Network is a leading B2B platform serving the North American wine industry, offering a comprehensive suite of services including news, events, job listings, products, and video content. The website positions itself as a central resource for wine industry professionals, facilitating connections and information sharing. Technically, the site employs established front-end technologies such as jQuery, Bootstrap, and Font Awesome, and integrates New Relic for performance monitoring, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and reCAPTCHA but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data reduces domain trust verification, though the site content and external partnerships suggest legitimacy. Overall, the site is professional and functional but would benefit from enhanced privacy compliance and security transparency.

S

SPIES Kunststoffe GmbH

spies-packaging.com

52

SPIES Kunststoffe GmbH is a German-based manufacturer specializing in sustainable and smart plastic packaging solutions primarily for the international food industry. The company offers end-to-end services including consulting, design, toolmaking, and series production, all centralized at their German facility. Their market position is that of a technology leader focused on innovation and sustainability, supported by their nomination for the Deutscher Nachhaltigkeitspreis 2025. Technically, the website is built on TYPO3 CMS with modern frontend technologies like Bootstrap and jQuery, providing a responsive and well-structured user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. The absence of WHOIS data raises some concerns about domain registration transparency, but the professional website content and clear contact information support business credibility. Overall, the site demonstrates a mature digital presence aligned with its business goals.

N

Netzwerk hdw nrw

hdw-nrw.de

59

Netzwerk hdw nrw operates as a regional educational network focused on higher education didactics in Nordrhein-Westfalen, Germany. The website offers a variety of workshops, coaching, certificates, and working groups aimed at academic professionals such as lecturers, deans, and scientific staff. Their market position is that of a specialized provider for professional development in university teaching within the NRW region. Technically, the site uses a custom CMS with standard web technologies including jQuery and CSS, and it is moderately optimized for mobile devices. Security posture is adequate with HTTPS usage but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and content-rich, serving its target audience effectively.

H

Hochschule Bielefeld

fh-bielefeld.de

61

Hochschule Bielefeld (HSBI) is a German university of applied sciences providing education, research, and transfer services primarily to students, academic staff, and regional partners. The website offers comprehensive information about study programs, research projects, transfer activities, continuing education, and international services. The institution holds a solid regional market position as a medium-sized educational entity in Germany. Technically, the website is built on a custom CMS with jQuery and standard web technologies, featuring good mobile optimization and SEO practices. Security posture is strong with HTTPS and multiple security headers, though some improvements are recommended in privacy compliance and incident response transparency. Overall, the site is professional, trustworthy, and well-structured, serving its target audience effectively.