Security Directory

S

Synonym.com

synonym.com

68

Synonym.com is an educational website focused on providing synonyms, antonyms, pronunciation guides, etymology, and vocabulary learning tools to a broad audience including students, educators, and language enthusiasts. The site integrates interactive word games and a word unscrambler to enhance user engagement. Its market position is niche within the education sector, leveraging ad-supported content to sustain operations. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, and Amazon Ads, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and GDPR-compliant consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data is a notable anomaly, reducing transparency but not detracting from the site's apparent legitimacy. Overall, the site offers a professional and trustworthy user experience with moderate technical sophistication.

W

WIPO - World Intellectual Property Organization

wipo.int

69

The World Intellectual Property Organization (WIPO) is a globally recognized intergovernmental organization dedicated to intellectual property services, policy, and data. The website serves as a comprehensive portal offering access to international IP systems such as patents, trademarks, industrial designs, and geographical indications. It targets innovators, creators, governments, and IP professionals worldwide, positioning itself as the authoritative source for IP information and services. The site is well-branded, consistent, and professionally designed, reflecting its enterprise-level stature and long history since 1996. Technically, the website employs modern web technologies including Bootstrap, jQuery, and web components, with integration of analytics tools like Google Tag Manager, Matomo, and CrazyEgg. The site is mobile-optimized, accessible, and SEO-friendly, hosted likely on Geneva-based infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a low-risk profile with high trustworthiness, supported by consistent WHOIS data and official domain usage. The absence of direct contact emails or phone numbers on the homepage is mitigated by dedicated contact pages. Strategic recommendations include publishing explicit security and incident response policies and adding a security.txt file to enhance vulnerability disclosure transparency.

The website at crunch.id is currently inaccessible to the public, presenting a 403 Forbidden error page that blocks access to any meaningful content. The domain is registered through an Indonesian registrar, PT Jagat Informasi Solusi, with a creation date in 2021, indicating a relatively new domain consistent with a small or startup business. The hosting provider is SiteGround, a reputable hosting company. However, the lack of accessible content, absence of privacy and cookie policies, and no visible contact or business information severely limit the ability to assess the business or technical maturity of the site. The technical infrastructure appears minimal with basic HTML and CSS and no advanced frameworks or analytics detected. Security posture is weak due to missing security headers and no DNSSEC, although domain status flags provide some protection against hijacking. Overall, the site appears to be either under development, restricted, or improperly configured for public access.

Andrei Polgar's website serves as a professional personal brand platform showcasing his expertise as a PhD economist, entrepreneur, investor, YouTuber, and best-selling author. The site highlights his consulting services, speaking engagements, interviews, and educational content primarily focused on economics, finance, and investing in exotic assets such as cryptocurrencies and premium domains. The business model revolves around personal branding, content creation, and consulting services targeting individuals and organizations interested in economic insights and investment strategies. Technically, the website employs basic HTML, CSS, and JavaScript with older libraries like jQuery 1.7.1 and Cufon font replacement, hosted on StableHost servers. Performance and mobile optimization are basic, with room for modernization and improved accessibility. Security posture is moderate but lacks modern security headers, DNSSEC, and visible HTTPS enforcement details. No privacy or cookie policies are present, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy and professional but would benefit from technical and compliance improvements.

S

SPINX Digital

spinxdigital.com

69

SPINX Digital is a Los Angeles-based web design and development agency with over 18 years of experience serving leading brands. The company positions itself as a top digital agency specializing in creating professional websites and digital solutions for businesses. Their website reflects a mature and professional business model targeting companies seeking high-quality web design and development services. Technically, the website is built on WordPress CMS, utilizing modern frameworks such as Bootstrap and performance optimization tools like NitroPack. The site is mobile-optimized, fast-loading, and SEO-friendly, indicating a strong digital maturity. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks publicly available privacy, cookie policies, and incident response contacts, which are areas for improvement. Overall, the website is trustworthy and professional, but the absence of WHOIS data and privacy compliance documentation slightly reduces the trust score. Strategic recommendations include publishing comprehensive privacy and cookie policies, adding a vulnerability disclosure page, and enhancing incident response transparency.

M

Masarykova univerzita

muni.cz

67

Masarykova univerzita is a prominent public university based in Brno, Czech Republic, offering a wide range of educational programs including bachelor, master, doctoral, and lifelong learning. The website reflects a mature digital presence with comprehensive content targeting prospective students, researchers, academic staff, and the general public. It maintains a consistent brand identity and provides multiple official channels for engagement including social media and partner sites. The technical infrastructure leverages modern analytics and tracking tools such as Matomo, Microsoft Clarity, and Google Analytics, integrated via Google Tag Manager, ensuring effective data collection and user behavior insights. The site is well-optimized for mobile and accessibility, with clear navigation and professional design.

The website deutscheurlauber.eu serves as a news aggregation platform focusing on incidents involving German tourists and cruise ships, particularly highlighting tragic maritime events and migration-related news. The site compiles headlines and links from various reputable German news outlets, targeting a general audience interested in these topics. The business model appears to be informational, without direct commercial services or e-commerce functionalities. Technically, the site employs modern web technologies including ES modules and CSS, delivering a moderately optimized and mobile-friendly experience. However, it lacks advanced SEO and accessibility features. From a security perspective, the site is accessible without WAF or blocking mechanisms but shows significant gaps. There is no evidence of HTTPS enforcement or security headers, no privacy or cookie policies, and no contact or incident response information. These deficiencies reduce the site's trustworthiness and compliance posture. No analytics or advertising scripts were detected, indicating minimal user tracking. The WHOIS data shows the domain is registered via a reputable registrar but lacks detailed registrant information, which slightly impacts legitimacy assessment. Overall, the site provides relevant and well-structured content but requires improvements in security, privacy compliance, and business transparency to enhance trust and professional standing. The risk level is moderate due to missing security best practices and lack of user data protection disclosures.

C

Christina Mäckelburg

christina-maeckelburg.de

58

Christina Mäckelburg's website is a professional portfolio showcasing her work as an illustrator and animator specializing in children's books. The site targets a general audience interested in artistic and creative services, positioning itself as a niche personal brand in the illustration industry. The business model is primarily portfolio-based, aimed at attracting clients or collaborators. Technically, the website employs modern web standards including ES modules, CSS, and video content, hosted behind Cloudflare DNS services. The site is mobile optimized with good SEO practices but lacks some accessibility features and security headers. Performance is moderate with a clean and visually appealing design. From a security perspective, the site uses HTTPS with a good SSL configuration and does not expose sensitive data or contain forms that collect user input. However, it lacks security headers and formal privacy or cookie policies, which are important for compliance and trust. Minimal user tracking is done via Plausible Analytics, which respects privacy better than many alternatives. Overall, the website presents a low-risk profile with good professionalism but could improve privacy compliance and security posture. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and enhancing contact options to improve user trust and regulatory compliance.

S

Some Place Studio

someplace.studio

57

Some Place Studio is a small architectural practice operating out of Berlin and Vienna, specializing in buildings, interiors, and exhibitions with a strong commitment to sustainability and cultural engagement. The firm emphasizes collaboration and diversity, positioning itself as a woman-owned business within the German architecture market. Their service offerings include comprehensive architectural design, project management, and construction supervision, targeting clients who value sustainable and contextually aware design solutions. Technically, the website is built on the Cargo CMS platform, utilizing modern web standards and custom typography, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. No forms or direct contact details are provided, which may impact user engagement and trust. Overall, the domain appears legitimate with privacy-protected WHOIS data, consistent with the professional nature of the business. Strategic recommendations include enhancing security headers, adding privacy and cookie policies, and providing clear contact information to improve compliance and user trust.

T

Trojka

trojkavodka.com

41

Trojka is a Swiss spirits brand specializing in flavored vodkas designed for consumers who prefer simple, ready-to-mix alcoholic beverages. The website presents a professional and consistent brand image with a clear focus on product variety and ease of use. Technically, the site uses modern web technologies including JavaScript ES modules, CSS3, and integrates Google Tag Manager and Cookiebot for analytics and cookie consent management. The site appears mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and implements a detailed cookie consent mechanism, but lacks explicit security headers and published security policies. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and branding suggest a legitimate business. Overall, the site demonstrates a moderate to good security posture and privacy compliance but would benefit from enhanced transparency and contact information.

D

Diamond Schmitt

dsai.ca

60

Diamond Schmitt is a well-established architecture firm founded in 2001, specializing in designing cultural, educational, and research facilities. The company has a strong market position with a portfolio of notable projects and serves clients primarily in Canada and the United States. Their website reflects a professional and consistent brand image, targeting institutional clients and stakeholders seeking architectural services. Technically, the website is built on WordPress with modern JavaScript libraries and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain registration transparency, but lacks DNSSEC and security headers, and does not publish explicit security or incident response policies. Privacy compliance is basic, with no clear cookie consent mechanism or detailed privacy policy found. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

Stiftung Buchkunst is a well-established non-profit organization based in Germany that promotes exemplary book design through prestigious competitions such as 'Die Schönsten Deutschen Bücher', 'Förderpreis für junge Buchgestaltung', and 'Best Book Design from all over the World'. The organization targets the book industry, designers, publishers, and the general public interested in book arts. Their business model centers on cultural promotion and recognition of design excellence rather than commercial sales. The website reflects a mature digital presence with clear navigation, multilingual support, and a focus on content quality. Technically, the site uses standard web technologies with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though additional security headers and policies could enhance protection. Overall, the site is trustworthy and professional, with transparent contact information and GDPR compliance.

Affichage Public is a small Swiss cultural association founded in 2015 dedicated to promoting Swiss graphic design as a cultural heritage through exhibitions and events primarily in the French-speaking region of Switzerland. The website serves as an informational platform highlighting upcoming exhibitions, partner organizations, and the association's mission. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript with jQuery, without advanced CMS or analytics integrations. Mobile optimization and accessibility are basic but functional. Security posture is minimal with no visible security headers or policies, and no HTTPS verification data available. Privacy and cookie policies are absent, which impacts compliance and user trust. The WHOIS data is consistent with the association's profile, showing no privacy protection and appropriate domain age. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

G

GitHub

github.blog

71

GitHub Blog is a professionally maintained content platform operated by GitHub, Inc., a leading technology company specializing in software development and collaboration tools. The blog serves as a key communication channel to deliver updates, insights, and educational content to developers worldwide, reinforcing GitHub's market position as a premier developer platform. The site targets software developers, engineers, and technology professionals, offering resources on AI, security, enterprise software, and developer skills. Technically, the website is built on WordPress with modern SEO and accessibility optimizations, ensuring fast performance and a responsive user experience across devices. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and vulnerability disclosure mechanisms are not prominently published on the blog. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the website demonstrates high business credibility, technical maturity, and content quality, supporting GitHub's brand and community engagement objectives.

G

GitHub

githubuniverse.com

60

GitHub Universe 2025 is a flagship global developer event hosted by GitHub, a leading technology company and subsidiary of Microsoft. The event focuses on innovation, collaboration, and AI-powered software development, targeting developers, engineers, and technology professionals worldwide. The website provides comprehensive event details including dates, location, agenda, speakers, ticketing options, and highlights from previous years. The business model centers on ticket sales for in-person attendance and free virtual participation, positioning GitHub Universe as a premier industry event with strong brand recognition and market presence. Technically, the website is built using modern web technologies such as React and Next.js, ensuring fast performance, mobile optimization, and good accessibility. The site is hosted with reputable DNS and registrar services, and employs HTTPS with strong domain registration security flags. However, there is room for improvement in DNS security (DNSSEC not enabled) and in publishing comprehensive privacy and security policies. From a security perspective, the site demonstrates good baseline practices including HTTPS enforcement and domain locking. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of explicit privacy, cookie, and security policies, as well as contact information for incident response, represents a compliance gap that should be addressed to enhance trust and regulatory adherence. Overall, GitHub Universe 2025's website is professional, trustworthy, and technically sound, supporting its role as a major industry event. Strategic improvements in privacy compliance and security transparency will further strengthen its security posture and user confidence.

P

Programming Language Group at Delft University of Technology

webdsl.org

57

WebDSL is an academic project developed by the Programming Language Group at Delft University of Technology, providing a domain-specific language for modeling web applications with a rich data model. The website serves as a documentation hub with tutorials, references, and source code links, targeting developers and researchers interested in domain-specific languages and web application modeling. The project is positioned as a niche academic tool with a small but focused audience. Technically, the site is built using MkDocs with the Material theme, hosted likely on GitHub Pages, and employs modern web standards including HTTPS and responsive design. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks DNSSEC and security headers which could enhance protection. Privacy compliance is minimal with no visible privacy or cookie policies and no contact information for incident response or data protection officers. Overall, the site is trustworthy and professional for its academic purpose but could improve compliance and security transparency.

Duo d’Art is a Swiss screen printing company established in 1932, recognized as the oldest in its sector in Switzerland. It specializes in screen printing and digital printing services for advertising, art prints, and large visual communication surfaces, including advertising on public transport. Since 2016, it operates as part of the Remarq SA group, enhancing its technical and human resources. The website presents clear contact information and certifications but lacks privacy and cookie policies, which are important for compliance. Technically, the site is basic with no detected CMS or advanced frameworks, and minimal mobile optimization. Security posture is weak due to missing security headers and unclear SSL status. No analytics or tracking scripts were found, indicating minimal user tracking. Overall, the website is functional but could improve in security, privacy compliance, and technical modernization.

The website younesklouche.com serves as a personal portfolio for photographer Younès Klouche, showcasing photographic projects under categories such as 'Personnal' and 'Comissions'. The site targets a general audience interested in photography and artistic commissions. The business model is primarily personal branding and portfolio display, with no direct e-commerce or transactional features evident. The domain is registered since 2017 with OVH sas, a reputable hosting and registrar provider, indicating a stable and legitimate online presence. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Swiper.js for UI elements. Google Analytics is integrated for visitor tracking, but no cookie consent mechanism or privacy policies are present, which is a compliance gap. The site is hosted on OVH infrastructure with basic SSL configuration and no DNSSEC enabled. Performance and mobile optimization are basic but functional. From a security perspective, the site uses HTTPS but lacks security headers such as Content-Security-Policy or X-Frame-Options, which could improve protection against common web attacks. No vulnerability disclosures or incident response contacts are provided. The absence of privacy and cookie policies and lack of GDPR compliance indicators reduce trust and compliance posture. No suspicious or malicious content was detected. Overall, the website is a straightforward personal portfolio with moderate technical implementation and basic security posture. Strategic improvements include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and enhancing GDPR compliance. These steps will improve trustworthiness, security, and legal compliance, benefiting both the site owner and visitors.

O

Omnitype

omnitype.ch

52

Omnitype is a small Swiss online type foundry based in Lausanne, specializing in the design, production, and distribution of typefaces. The company is run by Leonardo Azzolini and Simon Mager and offers trial versions and custom font projects. The website presents a professional and consistent brand image targeting designers and clients interested in typography. Technically, the site uses standard HTML5 and CSS3 with moderate performance and good mobile optimization but lacks advanced frameworks or CMS. Security posture is basic with no detected security headers or policies, and no HTTPS status was explicitly provided. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is safe with no adult or questionable content and minimal user tracking.

H

Handshake®

handshake.fun

51

Handshake® is a small creative media and publishing studio based in Spain, specializing in artistic publications and studio projects. The website showcases their key publication 'The Chromatics of Flowers' by Paula Codoner and offers e-commerce capabilities for book sales. The business targets art enthusiasts and creative professionals, positioning itself as a niche player in the media industry. Technically, the website is built on the Cargo Collective platform, utilizing modern web technologies including JavaScript frameworks and analytics tools. The site is mobile-optimized and presents a professional design with good user experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in privacy compliance and security hardening are recommended.

Tiro Typeworks is a specialized digital type foundry founded by John Hudson and Ross Mills, focusing on creating custom fonts for multilingual publishing and computing. The company operates a professional and well-structured website showcasing a broad catalog of fonts, articles, and licensing information. Their market position is that of a niche player with international reach, serving publishers, typographers, and scholars. The business model revolves around font licensing and custom font creation, targeting a specialized audience in the technology and publishing sectors. Technically, the website is built on Craft CMS and employs modern web technologies including JavaScript, CSS, and HTML5. It uses Cloudflare Turnstile captcha for form security and Fathom Analytics for privacy-conscious visitor tracking. The site is mobile-optimized, SEO-friendly, and performs well with fast loading times and good accessibility features. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, but lacks explicit security headers such as CSP or HSTS. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a comprehensive privacy policy, though no cookie consent mechanism was found. Contact information is limited to a subscription form, with no direct emails or phone numbers publicly listed. Overall, the website is trustworthy and professional, though the absence of WHOIS data for the domain reduces domain registration transparency and slightly impacts trust. Strategic improvements include adding security headers, publishing security and incident response policies, and implementing cookie consent to enhance privacy compliance.

H

HvD Fonts

hvdfonts.com

64

HvD Fonts is a specialized type foundry offering high-quality original retail fonts and custom font solutions. The company targets designers and businesses seeking professional typography products. Their website reflects a niche market position with a clear business model focused on font licensing and custom typeface design. The digital infrastructure employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics and Tag Manager for performance and marketing insights. The site is well-structured, mobile-optimized, and SEO-friendly, providing a professional user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

D

Datamart Inc.

komito.net

57

Komito Analytics is an open-source enhancement tool designed to augment popular web analytics software, providing advanced visitor behavior metrics and integration support. The company behind it, Datamart Inc., is a small technology firm based in the United States, founded in 2017. The website presents a professional and consistent brand image, emphasizing transparency and community engagement through open-source code availability and partner collaborations. Technically, the site leverages modern web standards, Cloudflare hosting, and offers multiple integration methods including Google Tag Manager, WordPress plugin, and NPM package. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements such as enabling DNSSEC and publishing explicit security policies are recommended. Privacy compliance is basic, lacking explicit privacy and cookie policies, which should be addressed to enhance user trust and regulatory adherence. Overall, the website is trustworthy, well-structured, and serves a niche market of analytics professionals and digital marketers.

W

Waiting Room Press

waitingroom.press

45

Waiting Room Press is a small UK-based creative publishing business specializing in artistic calendars, zines, and printed media with botanical and brutalist themes. The company operates an e-commerce website built on the Cargo Collective platform, offering direct sales of its unique print products worldwide. The website demonstrates good content quality and a consistent brand presence, targeting art enthusiasts and collectors. Technically, the site uses modern web technologies including JavaScript and jQuery, with Stripe integrated for payment processing. However, there are gaps in privacy compliance and security best practices, such as the absence of privacy and cookie policies and missing security headers. The domain registration is consistent and transparent, supporting the legitimacy of the business. Overall, the website is functional and professional but would benefit from enhanced security and compliance measures.

Big Cartel is a specialized e-commerce platform designed to empower artists and small businesses to create and manage online stores with ease. The company offers a tiered pricing model starting with a free plan, targeting a niche market of creative entrepreneurs. The website demonstrates a strong market position within the e-commerce sector by providing customizable templates, product management tools, and integrated payment options tailored for small-scale sellers. Technically, the site leverages modern web technologies such as React and Next.js, ensuring fast performance, mobile responsiveness, and good SEO practices. Security is robust with HTTPS enforcement and comprehensive security headers, although there is room for improvement in public security policy disclosures and incident response visibility. Overall, the site is professional, trustworthy, and well-optimized for its target audience, though the lack of publicly available WHOIS data introduces some uncertainty regarding domain registration details.

The website matteovenet.org is a personal portfolio site for an individual named Matteo Venet, primarily showcasing visual projects or artworks. The site is built on WordPress and uses standard web technologies such as JavaScript, CSS, and HTML5. The technical infrastructure is basic but functional, with HTTPS enabled and a moderate performance profile. However, the site lacks key compliance and security features such as privacy and cookie policies, security headers, and contact information. No analytics or tracking tools are present, indicating minimal user data collection. The domain registration is consistent with the website content and shows no suspicious patterns, supporting legitimacy. Overall, the site is suitable for general audiences with safe content but would benefit from improved security and compliance measures.

P

Projector Media

projector.media

55

Projector Media is a small creative and digital media agency specializing in branding, multi-page publications, and periodicals. The website showcases a portfolio of projects, targeting creative professionals and businesses seeking media services. The technical infrastructure is based on the Readymag platform, leveraging custom fonts and a CDN for content delivery. The site is mobile optimized and provides a visually rich user experience, although SEO and accessibility features are basic. Security posture is limited, with no detected security headers or explicit policies, and WHOIS data is privacy protected, which is common for small agencies. Overall, the site is professional but could improve in privacy compliance and security best practices.

1

100 Beste Plakate e. V.

100-beste-plakate.de

43

100 Beste Plakate e. V. is a German non-profit organization that organizes an annual competition showcasing the 100 best posters of the year. The website serves as a platform to present competition winners, exhibitions, and related publications. It targets design professionals, artists, cultural institutions, and the general public interested in graphic design and poster art. The organization maintains a recognized position in the cultural and media sector in Germany with international outreach through exhibitions. Technically, the website is built on WordPress using a custom theme, with modern HTML5, CSS3, and JavaScript technologies. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks advanced security headers and formal security policies. No vulnerabilities or exposed sensitive data were found in the provided content. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is minimal, with no direct emails or phone numbers visible, which may impact user trust. Overall, the website is professionally designed and trustworthy for its cultural purpose, but improvements in security policies, privacy mechanisms, and contact transparency would enhance its risk posture and user confidence.

Alex Dujet Type System Corp is a specialized graphic and type design studio based in Geneva, Switzerland, founded in 2015. The company focuses on visual communication, editorial, and type design services, and co-founded the Extraset Swiss Type Foundry. The website serves as a portfolio showcasing extensive design projects, exhibitions, and collaborations with notable design entities. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Google Analytics, hosted by Infomaniak Network SA. While the site is functional and professionally designed, it lacks privacy and cookie policies, and DNSSEC is not enabled on the domain. The domain WHOIS data shows a future creation date, which is inconsistent with the business history and may require verification. Security headers are not detected, and no incident response or vulnerability disclosure information is provided. Overall, the website is moderately secure and credible but would benefit from improved privacy compliance and enhanced security configurations.

4

475 High Performance Building Supply

475.supply

68

475 High Performance Building Supply operates a professional e-commerce platform specializing in high quality building envelope solutions. The company combines product sales with educational resources and training to support building professionals and contractors. Their market position is niche but well established within the construction and building supply industry. The website is built on Shopify, leveraging modern web technologies and optimized for performance and accessibility. Security posture is strong with HTTPS, security headers, and secure forms, though no explicit security policy or incident response page was found. Privacy compliance is good with clear privacy and cookie policies and GDPR indicators. Overall, the site presents a trustworthy and professional digital presence with moderate business credibility and technical maturity.

The website www.ny.gov is the official online portal for the State of New York government, intended to provide residents and visitors with access to government information and public services. However, the current accessible content is limited to a Cloudflare Turnstile human verification challenge page, preventing full content analysis. The site leverages Cloudflare for security and performance, indicating a mature technical infrastructure focused on protecting against automated abuse. Due to the WAF challenge, no direct contact information, privacy policies, or business details are accessible, limiting the ability to fully assess compliance and security posture. The WHOIS data is incomplete, lacking registrar and nameserver information, but the .gov TLD and branding strongly suggest legitimacy as a government entity. Overall, the site demonstrates a high-security posture through access controls but requires bypassing the WAF to conduct a comprehensive evaluation.

R

Reimagine Buildings Collective

reimaginebuildings.com

70

The Reimagine Buildings Collective is a specialized online community platform that connects builders, designers, and changemakers focused on creating healthy, climate-ready buildings. The platform offers peer-to-peer learning, collaborative cohorts called Reimagine Labs, and a rich repository of member stories and testimonials. It targets professionals dedicated to sustainable building practices and aims to foster connection, clarity, and confidence among its members. Technically, the website leverages modern web technologies including HTML5, CSS3, JavaScript, and video streaming via Cloudflare, hosted on the Mighty Networks platform. Analytics and tracking are implemented through Google Analytics, Bing UET, and TrackJS, indicating a moderate level of user behavior monitoring. Security posture is generally good with HTTPS enforced and CSRF protections, but lacks some recommended security headers and visible privacy or cookie policies, which are areas for improvement. The domain WHOIS data for the subdomain is unavailable, which is typical for subdomains, and does not detract from the legitimacy of the platform. Overall, the website is professional, trustworthy, and well-positioned within its niche, though it would benefit from enhanced privacy disclosures and security headers to improve compliance and security posture.

Macquarie Bank Limited operates a comprehensive Australian banking website offering a wide range of personal and business financial services including everyday banking, home loans, investing, and private banking. The site is well-branded and professionally designed, targeting Australian banking customers with clear navigation and extensive product information. The business is positioned as a large, established financial institution under the Macquarie Group umbrella. Technically, the website leverages Adobe Experience Manager CMS and integrates multiple modern analytics and marketing tools such as Google Tag Manager, Crazy Egg, and Facebook Pixel, indicating a mature digital infrastructure. The site is mobile-optimized and accessible with good SEO practices. Security posture is strong with HTTPS enforced and promotion of multi-factor authentication, though explicit security headers and policies could be more visible. WHOIS data is privacy protected, which is typical for financial institutions, but limits transparency. Overall, the website is trustworthy, professional, and secure with minor areas for improvement in security disclosures and contact information visibility.

The website lychkovskiy.com serves as a professional portfolio for Mikhail Lychkovskiy, a contemporary designer and poster artist. The site showcases a comprehensive gallery of poster artworks, emphasizing typographic treatment and a blend of national graphic styles. The business operates primarily as an independent artist, targeting design enthusiasts and art collectors, with sales facilitated through external shop links. The domain is relatively new, registered in 2022, aligning with the artist's career timeline. Technically, the website is built on the Adobe Portfolio platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, and Adobe Typekit fonts. Google Tag Manager is employed for analytics and tracking purposes. The site demonstrates good mobile optimization and user experience, with clear navigation and professional design quality. However, accessibility features are basic, and SEO optimization is moderate. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections in place. However, DNSSEC is not enabled, and no security headers were detected, indicating room for improvement in security hardening. Privacy compliance is lacking, with no privacy or cookie policies found, and no GDPR compliance indicators present. Contact information is limited to a single email address, with no phone numbers or physical addresses provided. Overall, the website presents a trustworthy and professional portfolio for an independent artist but would benefit from enhanced privacy policies, security headers, and clearer compliance documentation to improve its security posture and regulatory adherence.

Alex Dujet Type System Corp is a specialized graphic and type design studio based in Geneva, Switzerland, founded in 2015. The company focuses on visual communication, editorial, and type design, collaborating with a network of design professionals and co-founding the Swiss type foundry Extraset. The website serves as a portfolio showcasing extensive design projects and exhibitions, targeting graphic designers and related professionals. Technically, the site is built with standard web technologies including HTML5, CSS3, JavaScript, and jQuery, hosted on Infomaniak servers. While the site is content-rich and professionally designed, it lacks modern privacy and security compliance features such as privacy and cookie policies, security headers, and DNSSEC. The domain registration is consistent with the business claims, supporting legitimacy. Overall, the website demonstrates good business credibility but has room for improvement in security and privacy compliance.

O

Office for Typography

officefortypography.ch

49

Office for Typography is a small, specialized design studio focusing on graphic design, type design, and font engineering with physical offices in Switzerland and Japan. The website presents a clean, minimalistic design that clearly communicates the company's core services and contact information. The business targets clients in need of professional typography and graphic design services, positioning itself as a niche player with an international footprint. Technically, the website is built with standard HTML5 and CSS3, without detectable CMS or advanced frameworks. The site is mobile-optimized and performs moderately well, though lacks advanced SEO and accessibility features. No analytics or tracking technologies are present, indicating a privacy-conscious approach or minimal digital marketing. From a security perspective, the site uses HTTPS (assumed from domain), but no security headers or policies are published. There are no forms or data collection points, reducing attack surface, but also no published privacy or cookie policies, which is a compliance gap. The WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the website is professional and trustworthy but could improve in privacy compliance and security best practices to enhance user trust and regulatory adherence.

L

linyouting

linyouting.com

51

The website linyouting.com serves as a personal portfolio for Youting Lin, a multidisciplinary designer specializing in graphic design and motion graphics. The site showcases various creative projects and visual works, targeting a general audience interested in design and multimedia art. The business model is primarily portfolio-based, aimed at personal branding and showcasing creative skills. The market position is niche, focusing on creative professionals and potential clients in the design industry. Technically, the site is built on the Cargo Collective platform, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site is hosted on Cargo's infrastructure with assets served from freight.cargo.site and static.cargo.site. The site is mobile optimized with good design quality and user experience, though some SEO and accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protection enabled. However, DNSSEC is not enabled, and no security headers are detected in the HTML content, which are areas for improvement. There are no published privacy, cookie, or terms of service policies, nor any incident response or security contact information, indicating limited compliance and transparency. Overall, the site is a well-designed personal portfolio with moderate technical maturity and security posture. The lack of privacy and security policies, as well as contact information, reduces trust and compliance scores. Strategic improvements in these areas would enhance the site's professionalism and security stance.

L

Lynn Oh

lynnsohn.com

50

Lynn Oh's website is a professionally designed portfolio showcasing her multidisciplinary graphic design expertise, including identity, typography, and motion graphics. The site highlights collaborations with prestigious agencies and clients such as Instagram, COLLINS, Pentagram, Apple, and Nike, positioning her as an established creative professional in the media industry. The business model is focused on personal branding and freelance/contract design services targeting creative industry professionals and potential clients. Technically, the website is built on the Cargo Collective platform using modern web standards including HTML5, CSS3, and JavaScript, with custom fonts loaded from WebType. The site is mobile optimized and performs moderately well, though accessibility and SEO optimizations are basic. Hosting and domain registration are consistent and reputable, with HTTPS enabled and domain transfer protections in place. From a security perspective, the site benefits from HTTPS and domain transfer lock but lacks DNSSEC and security headers, which are recommended for enhanced protection. There are no privacy or cookie policies, nor vulnerability disclosure mechanisms, indicating gaps in compliance and security transparency. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website is safe, professional, and trustworthy with excellent content quality and business credibility. However, improvements in privacy compliance, security headers, and disclosure policies would strengthen its security posture and regulatory adherence.

D

DR.ME

dr-me.com

53

DR.ME is a well-established creative design studio based in Manchester, UK, founded in 2010. The company specializes in innovative and experimental design services including graphic design, art direction, photography, illustration, collage, and video production. They serve a diverse client base in music, fashion, art, and culture sectors and have earned industry recognition such as the D&AD Yellow Pencil award. The website reflects a professional portfolio showcasing their work and client list, positioning them as a respected player in the creative media industry. Technically, the site is built on the Cargo Collective platform using modern web technologies and is mobile optimized with moderate performance. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks advanced security headers and formal privacy or cookie policies. Overall, the site is safe, professional, and trustworthy but could improve compliance and security transparency.

L

Lamm & Kirch GbR

lamm-kirch.com

46

Lamm & Kirch GbR is a small, established graphic design studio founded in 2012, specializing in cultural sector projects including book design, visual identities, and exhibitions. Operating from Leipzig and Berlin, the studio collaborates with a network of professionals to deliver comprehensive design services. Their website reflects a professional and well-curated portfolio, demonstrating their market position as a reputable design studio with international recognition and multiple awards. Technically, the website uses standard web technologies with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protections, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is strong with a detailed GDPR-compliant privacy policy, though cookie consent mechanisms are absent. Overall, the website is trustworthy, professional, and safe for general audiences.

J

Johnson / Kingston

johnsonkingston.ch

47

Johnson / Kingston is a Swiss design studio founded in 2012, specializing in contemporary graphic design with a strong focus on the intersection of design and technology. Their services include digital publishing, typeface development, custom workflows, and identity design for cultural and educational institutions. The studio has received international recognition, including multiple Swiss Design Awards, and maintains a professional online portfolio showcasing their work and teaching activities. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript, jQuery, and Swiper.js, delivering a fast and visually rich user experience optimized for mobile devices. Security-wise, the site lacks visible security headers and privacy/cookie policies, which are areas for improvement, but it does not collect user data or use tracking scripts, reducing risk exposure. The domain registration data is consistent with the business claims, indicating legitimacy and trustworthiness.

M

Marinus Klinksik

marinusklinksik.de

49

Marinus Klinksik is a Hamburg-based multidisciplinary graphic and type designer with a professional online portfolio hosted on the Cargo Collective platform. The website showcases a strong focus on typography, editorial, web, and motion design, complemented by the launch of a type foundry called Why.Foundry in early 2024. The site is well-structured, visually professional, and targets clients and collaborators in the creative design industry. Technically, the website employs modern web standards, including HTTPS, security headers, and Google Analytics with IP anonymization, hosted on a reputable platform. Security posture is solid with no visible vulnerabilities, though cookie consent mechanisms and explicit security policies could be improved. Overall, the website presents a trustworthy and professional digital presence for a small creative business.

R

Raffinerie AG für Gestaltung

raffinerie.com

47

Raffinerie AG für Gestaltung is a well-established design agency based in Zürich, Switzerland, specializing in branding, digital, and editorial design services. The company has a strong portfolio featuring notable clients such as Helsana, Greenpeace, and Zürcher Kantonalbank, positioning itself as a reputable player in the media and creative design sector. The website reflects a professional and consistent brand image, targeting businesses and organizations seeking high-quality design solutions. Technically, the website is built on modern web technologies including HTML5, CSS3, JavaScript, and Alpine.js, hosted on infrastructure associated with Metanet AG. It is optimized for mobile devices and demonstrates good performance and accessibility standards. The use of Google Tag Manager and Vimeo embeds indicates a mature digital marketing and content delivery approach. From a security perspective, the site employs HTTPS with a valid SSL certificate and has domain transfer protections in place. However, it lacks DNSSEC and security headers, which are recommended to enhance security posture. Privacy compliance is basic, with a cookie policy present but no active consent mechanism or detailed GDPR compliance indicators. No incident response or security policy pages were found. Overall, the website is trustworthy and professionally maintained, with minor improvements recommended in security headers and privacy compliance to strengthen its security and regulatory posture.

F

Fons Hickmann M23

m23.de

38

Fons Hickmann M23 is a Berlin-based design studio specializing in complex communication systems and graphic design projects. The website showcases a professional portfolio with diverse projects including posters, campaigns, animations, and editorial designs, targeting cultural institutions and design professionals. The business is well-established with a domain age dating back to 2002, indicating a mature presence in the design industry. Technically, the website is built on WordPress with modern JavaScript libraries such as Flickity and Plyr, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers which could enhance protection. Privacy compliance is weak due to absence of privacy and cookie policies, representing a compliance risk. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and content-rich but would benefit from improved privacy and security practices.

Eilean Friis-Lund's website serves as a personal graphic design portfolio showcasing a gallery of images. The site targets individuals or businesses interested in graphic design services or artistic inspiration. The business model appears to be a personal brand portfolio aimed at attracting clients or commissions within a niche market. The website is small-scale with basic content quality and consistent branding. Technically, the site is built with standard HTML5, CSS3, and JavaScript without any detected frameworks or CMS. It features a responsive design optimized for mobile devices and moderate performance. However, there is a lack of advanced SEO and accessibility features, and no hosting or platform details are evident. From a security perspective, the site lacks essential security headers and published policies such as privacy or cookie policies. The absence of HTTPS information and incident response contacts indicates a low security posture. No vulnerabilities or tracking technologies were detected, but improvements are needed to enhance compliance and trust. Overall, the website presents a moderate risk profile primarily due to missing privacy and security policies and limited business information. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, enforcing HTTPS, and adding incident response contacts to improve trust and compliance.

E

Eddy Terki

eddyterki.fr

38

Eddy Terki's website is a professional portfolio showcasing a graphic design atelier based in France, specializing in editorial design, visual identity, signage, and website creation. The site is built on Drupal 8 and hosted by OVH, reflecting a moderate level of technical maturity. The content is rich and well-structured, targeting clients and collaborators in the creative and educational sectors. However, the site lacks critical privacy and cookie policies, which impacts GDPR compliance and overall privacy posture. Security measures such as HTTP security headers are absent, and no explicit contact information or incident response channels are provided, which could affect trust and responsiveness. Overall, the domain registration data aligns well with the website content, indicating legitimacy and consistency.

The website radzie.de represents a small personal graphic design portfolio operated by Robert Radziejewski based in Berlin. The site primarily showcases the designer's identity and contact information, targeting clients seeking graphic design services. The business model is service-oriented, likely freelance or small studio, with a niche local market position. The website uses WordPress CMS with the Lay theme and jQuery, hosted on a German hosting provider (rzone.de). The technical infrastructure is moderate with good mobile optimization but basic SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is functional but basic in content and technical sophistication.

Studio Dumbar/DEPT® is an established creative agency specializing in bespoke visual identities, motion design, sound, and creative coding. The company has a strong market position with a portfolio of high-profile projects and a consistent, professional brand presence. The website reflects a modern, well-designed digital presence leveraging advanced JavaScript libraries for smooth user experience and animations. However, the site lacks explicit privacy and terms of service documentation, which are important for compliance and user trust. The technical infrastructure is solid with HTTPS enabled and use of reputable third-party libraries, but security headers and DNSSEC are missing, representing areas for improvement. Overall, the security posture is moderate with room for enhancement in policy transparency and technical safeguards.

C

Chloé Pannatier

chloepannatier.ch

55

Chloé Pannatier's website is a professional graphic design portfolio showcasing a wide range of projects including poster designs, visual identities, and artworks for various clients and exhibitions. The site targets clients and collaborators in the creative industry, emphasizing detailed project descriptions and high-quality visuals. Technically, the site is built on WordPress with modern web technologies, featuring lazy loading and responsive design, providing a good user experience across devices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal security policies. Privacy compliance is minimal, with no visible privacy or cookie policies. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

Atelier Choque Le Goff is an independent graphic design studio based in Paris, founded in 2016. The website serves as a portfolio showcasing a variety of creative projects including book design, poster design, editorial work, identity creation, and typography. The studio targets clients interested in high-quality graphic design and art direction services. The business model is centered on creative service delivery with a focus on visual arts and design. The website content is well-structured and visually appealing, reflecting the studio's professional branding and consistent design language. Technically, the website is built on GravCMS, a flat-file CMS, and uses jQuery 2.x along with custom CSS and JavaScript. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO optimization is present but minimal. Hosting appears to be managed via the registrar Nuxit with modns.fr nameservers. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site lacks several best practices such as security headers and DNSSEC. The domain uses HTTPS (assumed from URL) but no explicit security headers were detected in the provided data. No privacy or cookie policies are present, which is a compliance gap especially under GDPR. No contact or incident response information is provided, limiting transparency and trust. The WHOIS data is consistent and legitimate, with a domain age appropriate for the business history. Overall, the website is a good representation of a small creative studio with a professional portfolio. However, it lacks important privacy and security features that could improve trust and compliance. Strategic recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and providing clear contact information to enhance credibility and security posture.