Security Directory

D

DNStination Inc.

polyfill-fastly.io

63

The website 'Fastly Polyfill' provides a specialized service that dynamically delivers only the necessary JavaScript polyfills required by a user's browser, optimizing web application compatibility and performance. The service is targeted primarily at web developers and technology users who need to ensure cross-browser functionality. The business is relatively new, founded in 2024, and operates under DNStination Inc., a US-based organization. The website branding and content are consistent and professional, with clear navigation and a modern design using Pico CSS. The presence of links to Fastly's corporate privacy and terms pages suggests affiliation or infrastructure usage by Fastly, a recognized CDN provider. Technically, the site employs modern web standards and technologies, including JavaScript and a lightweight CSS framework, ensuring good performance and mobile optimization. The domain is hosted likely on Fastly's infrastructure, contributing to fast load times and reliable service delivery. The site includes interactive forms allowing users to customize polyfill bundles, reflecting a mature technical implementation. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks explicit security headers and a published security policy or incident response contacts, which are areas for improvement. Privacy compliance is partial; while a privacy policy is linked, there is no cookie consent mechanism implemented. No direct contact information such as emails or phone numbers are provided on the site, which may impact user trust. Overall, the website presents a low-risk profile with a solid technical foundation and clear business purpose. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security and incident response policies, and providing direct contact information to improve trust and compliance.

A

Acronym Finder

acronymfinder.com

63

Acronym Finder operates as a comprehensive online dictionary specializing in acronyms, abbreviations, and initialisms with over 4 million entries and more than 1 million human-edited definitions. The website serves a broad audience including professionals, students, and the general public seeking to decode acronyms across various sectors such as technology, government, business, science, and pop culture. It maintains a strong market position as the largest and most trusted resource in its niche, supported by a long domain history dating back to 1998 and notable press coverage. Technically, the website employs a modern tech stack including Bootstrap for responsive design, JavaScript libraries, and is hosted via Cloudflare, ensuring good performance and mobile optimization. Advertising is integrated through Google Adsense and Amazon Ads, with tracking via Cloudflare Insights and Facebook SDK. SEO and accessibility are adequately addressed, though some improvements could be made in security headers and GDPR compliance. From a security perspective, the site benefits from HTTPS and domain transfer protections but lacks DNSSEC and explicit security policies. No incident response or vulnerability disclosure information is publicly available, and cookie consent mechanisms are absent, indicating partial privacy compliance. No critical vulnerabilities or suspicious content were detected. Overall, Acronym Finder presents a professional, trustworthy, and content-rich platform with moderate technical maturity and a solid security baseline. Strategic enhancements in privacy compliance and security policies would further strengthen its posture.

S

Synonym.com

synonym.com

68

Synonym.com is an educational website focused on providing synonyms, antonyms, pronunciation guides, etymology, and vocabulary learning tools to a broad audience including students, educators, and language enthusiasts. The site integrates interactive word games and a word unscrambler to enhance user engagement. Its market position is niche within the education sector, leveraging ad-supported content to sustain operations. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, and Amazon Ads, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and GDPR-compliant consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data is a notable anomaly, reducing transparency but not detracting from the site's apparent legitimacy. Overall, the site offers a professional and trustworthy user experience with moderate technical sophistication.

W

WIPO - World Intellectual Property Organization

wipo.int

69

The World Intellectual Property Organization (WIPO) is a globally recognized intergovernmental organization dedicated to intellectual property services, policy, and data. The website serves as a comprehensive portal offering access to international IP systems such as patents, trademarks, industrial designs, and geographical indications. It targets innovators, creators, governments, and IP professionals worldwide, positioning itself as the authoritative source for IP information and services. The site is well-branded, consistent, and professionally designed, reflecting its enterprise-level stature and long history since 1996. Technically, the website employs modern web technologies including Bootstrap, jQuery, and web components, with integration of analytics tools like Google Tag Manager, Matomo, and CrazyEgg. The site is mobile-optimized, accessible, and SEO-friendly, hosted likely on Geneva-based infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a low-risk profile with high trustworthiness, supported by consistent WHOIS data and official domain usage. The absence of direct contact emails or phone numbers on the homepage is mitigated by dedicated contact pages. Strategic recommendations include publishing explicit security and incident response policies and adding a security.txt file to enhance vulnerability disclosure transparency.

The website at crunch.id is currently inaccessible to the public, presenting a 403 Forbidden error page that blocks access to any meaningful content. The domain is registered through an Indonesian registrar, PT Jagat Informasi Solusi, with a creation date in 2021, indicating a relatively new domain consistent with a small or startup business. The hosting provider is SiteGround, a reputable hosting company. However, the lack of accessible content, absence of privacy and cookie policies, and no visible contact or business information severely limit the ability to assess the business or technical maturity of the site. The technical infrastructure appears minimal with basic HTML and CSS and no advanced frameworks or analytics detected. Security posture is weak due to missing security headers and no DNSSEC, although domain status flags provide some protection against hijacking. Overall, the site appears to be either under development, restricted, or improperly configured for public access.

The analyzed content corresponds to an internal Chrome browser error page displayed when a website is inaccessible or offline. It features the Chrome offline dinosaur game and contains no actual website content, business information, or user interaction elements. The page is not a public website but a browser-generated error page, thus no commercial or organizational data is present. The technical infrastructure is based on standard web technologies including HTML5 Canvas, JavaScript, and CSS, optimized for fast loading and mobile responsiveness within the browser environment. Security posture is basic with no forms or inputs, but lacks security headers and privacy compliance elements due to its nature as an error page. Overall, this content is not representative of a real website and cannot be evaluated for business credibility or privacy compliance.

P

Prinsh | Tips & Tricks Seputar Teknologi

prinsh.com

69

Prinsh.com is a technology-focused blog primarily targeting Indonesian-speaking audiences, offering tutorials, tips, and hacking-related content. The website is built on the Blogger platform, hosted by Google, and employs HTTPS for secure communication. The content is well-structured with good SEO practices and mobile optimization, making it accessible and user-friendly for its target audience. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security headers are minimal, and there is a lack of formal privacy, terms of service, and contact information pages, which impacts the overall trust and compliance posture. Advertising is managed through Google Adsense, with no advanced tracking or analytics detected beyond this.

K

Kobalt Music Group

kobaltmusic.com

64

Kobalt Music Group operates as a global music rights management and services company focused on empowering creators through creative A&R, sync licensing, payment administration, and transparency enabled by technology. The website reflects a mature digital presence with modern video embedding, a responsive design, and comprehensive privacy and cookie policies. The technical infrastructure leverages Alpine.js, Vimeo, Spotify embeds, and Cookiebot for consent management, indicating a commitment to user experience and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not published. The absence of WHOIS data introduces some uncertainty about domain registration legitimacy, but the professional branding and content quality support a trustworthy business profile. Strategic recommendations include enhancing security headers, publishing security policies, and adding contact information to improve transparency and trust.

S

Some Place Studio

someplace.studio

57

Some Place Studio is a small architectural practice operating out of Berlin and Vienna, specializing in buildings, interiors, and exhibitions with a strong commitment to sustainability and cultural engagement. The firm emphasizes collaboration and diversity, positioning itself as a woman-owned business within the German architecture market. Their service offerings include comprehensive architectural design, project management, and construction supervision, targeting clients who value sustainable and contextually aware design solutions. Technically, the website is built on the Cargo CMS platform, utilizing modern web standards and custom typography, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. No forms or direct contact details are provided, which may impact user engagement and trust. Overall, the domain appears legitimate with privacy-protected WHOIS data, consistent with the professional nature of the business. Strategic recommendations include enhancing security headers, adding privacy and cookie policies, and providing clear contact information to improve compliance and user trust.

T

Trojka

trojkavodka.com

41

Trojka is a Swiss spirits brand specializing in flavored vodkas designed for consumers who prefer simple, ready-to-mix alcoholic beverages. The website presents a professional and consistent brand image with a clear focus on product variety and ease of use. Technically, the site uses modern web technologies including JavaScript ES modules, CSS3, and integrates Google Tag Manager and Cookiebot for analytics and cookie consent management. The site appears mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and implements a detailed cookie consent mechanism, but lacks explicit security headers and published security policies. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and branding suggest a legitimate business. Overall, the site demonstrates a moderate to good security posture and privacy compliance but would benefit from enhanced transparency and contact information.

D

Diamond Schmitt

dsai.ca

60

Diamond Schmitt is a well-established architecture firm founded in 2001, specializing in designing cultural, educational, and research facilities. The company has a strong market position with a portfolio of notable projects and serves clients primarily in Canada and the United States. Their website reflects a professional and consistent brand image, targeting institutional clients and stakeholders seeking architectural services. Technically, the website is built on WordPress with modern JavaScript libraries and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain registration transparency, but lacks DNSSEC and security headers, and does not publish explicit security or incident response policies. Privacy compliance is basic, with no clear cookie consent mechanism or detailed privacy policy found. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

Stiftung Buchkunst is a well-established non-profit organization based in Germany that promotes exemplary book design through prestigious competitions such as 'Die Schönsten Deutschen Bücher', 'Förderpreis für junge Buchgestaltung', and 'Best Book Design from all over the World'. The organization targets the book industry, designers, publishers, and the general public interested in book arts. Their business model centers on cultural promotion and recognition of design excellence rather than commercial sales. The website reflects a mature digital presence with clear navigation, multilingual support, and a focus on content quality. Technically, the site uses standard web technologies with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though additional security headers and policies could enhance protection. Overall, the site is trustworthy and professional, with transparent contact information and GDPR compliance.

P

Programming Language Group at Delft University of Technology

webdsl.org

57

WebDSL is an academic project developed by the Programming Language Group at Delft University of Technology, providing a domain-specific language for modeling web applications with a rich data model. The website serves as a documentation hub with tutorials, references, and source code links, targeting developers and researchers interested in domain-specific languages and web application modeling. The project is positioned as a niche academic tool with a small but focused audience. Technically, the site is built using MkDocs with the Material theme, hosted likely on GitHub Pages, and employs modern web standards including HTTPS and responsive design. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks DNSSEC and security headers which could enhance protection. Privacy compliance is minimal with no visible privacy or cookie policies and no contact information for incident response or data protection officers. Overall, the site is trustworthy and professional for its academic purpose but could improve compliance and security transparency.

The website younesklouche.com serves as a personal portfolio for photographer Younès Klouche, showcasing photographic projects under categories such as 'Personnal' and 'Comissions'. The site targets a general audience interested in photography and artistic commissions. The business model is primarily personal branding and portfolio display, with no direct e-commerce or transactional features evident. The domain is registered since 2017 with OVH sas, a reputable hosting and registrar provider, indicating a stable and legitimate online presence. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Swiper.js for UI elements. Google Analytics is integrated for visitor tracking, but no cookie consent mechanism or privacy policies are present, which is a compliance gap. The site is hosted on OVH infrastructure with basic SSL configuration and no DNSSEC enabled. Performance and mobile optimization are basic but functional. From a security perspective, the site uses HTTPS but lacks security headers such as Content-Security-Policy or X-Frame-Options, which could improve protection against common web attacks. No vulnerability disclosures or incident response contacts are provided. The absence of privacy and cookie policies and lack of GDPR compliance indicators reduce trust and compliance posture. No suspicious or malicious content was detected. Overall, the website is a straightforward personal portfolio with moderate technical implementation and basic security posture. Strategic improvements include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and enhancing GDPR compliance. These steps will improve trustworthiness, security, and legal compliance, benefiting both the site owner and visitors.

O

Omnitype

omnitype.ch

52

Omnitype is a small Swiss online type foundry based in Lausanne, specializing in the design, production, and distribution of typefaces. The company is run by Leonardo Azzolini and Simon Mager and offers trial versions and custom font projects. The website presents a professional and consistent brand image targeting designers and clients interested in typography. Technically, the site uses standard HTML5 and CSS3 with moderate performance and good mobile optimization but lacks advanced frameworks or CMS. Security posture is basic with no detected security headers or policies, and no HTTPS status was explicitly provided. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is safe with no adult or questionable content and minimal user tracking.

H

Handshake®

handshake.fun

51

Handshake® is a small creative media and publishing studio based in Spain, specializing in artistic publications and studio projects. The website showcases their key publication 'The Chromatics of Flowers' by Paula Codoner and offers e-commerce capabilities for book sales. The business targets art enthusiasts and creative professionals, positioning itself as a niche player in the media industry. Technically, the website is built on the Cargo Collective platform, utilizing modern web technologies including JavaScript frameworks and analytics tools. The site is mobile-optimized and presents a professional design with good user experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in privacy compliance and security hardening are recommended.

H

HvD Fonts

hvdfonts.com

64

HvD Fonts is a specialized type foundry offering high-quality original retail fonts and custom font solutions. The company targets designers and businesses seeking professional typography products. Their website reflects a niche market position with a clear business model focused on font licensing and custom typeface design. The digital infrastructure employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics and Tag Manager for performance and marketing insights. The site is well-structured, mobile-optimized, and SEO-friendly, providing a professional user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

D

Datamart Inc.

komito.net

57

Komito Analytics is an open-source enhancement tool designed to augment popular web analytics software, providing advanced visitor behavior metrics and integration support. The company behind it, Datamart Inc., is a small technology firm based in the United States, founded in 2017. The website presents a professional and consistent brand image, emphasizing transparency and community engagement through open-source code availability and partner collaborations. Technically, the site leverages modern web standards, Cloudflare hosting, and offers multiple integration methods including Google Tag Manager, WordPress plugin, and NPM package. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements such as enabling DNSSEC and publishing explicit security policies are recommended. Privacy compliance is basic, lacking explicit privacy and cookie policies, which should be addressed to enhance user trust and regulatory adherence. Overall, the website is trustworthy, well-structured, and serves a niche market of analytics professionals and digital marketers.

W

Waiting Room Press

waitingroom.press

45

Waiting Room Press is a small UK-based creative publishing business specializing in artistic calendars, zines, and printed media with botanical and brutalist themes. The company operates an e-commerce website built on the Cargo Collective platform, offering direct sales of its unique print products worldwide. The website demonstrates good content quality and a consistent brand presence, targeting art enthusiasts and collectors. Technically, the site uses modern web technologies including JavaScript and jQuery, with Stripe integrated for payment processing. However, there are gaps in privacy compliance and security best practices, such as the absence of privacy and cookie policies and missing security headers. The domain registration is consistent and transparent, supporting the legitimacy of the business. Overall, the website is functional and professional but would benefit from enhanced security and compliance measures.

P

Projector Media

projector.media

55

Projector Media is a small creative and digital media agency specializing in branding, multi-page publications, and periodicals. The website showcases a portfolio of projects, targeting creative professionals and businesses seeking media services. The technical infrastructure is based on the Readymag platform, leveraging custom fonts and a CDN for content delivery. The site is mobile optimized and provides a visually rich user experience, although SEO and accessibility features are basic. Security posture is limited, with no detected security headers or explicit policies, and WHOIS data is privacy protected, which is common for small agencies. Overall, the site is professional but could improve in privacy compliance and security best practices.

1

100 Beste Plakate e. V.

100-beste-plakate.de

43

100 Beste Plakate e. V. is a German non-profit organization that organizes an annual competition showcasing the 100 best posters of the year. The website serves as a platform to present competition winners, exhibitions, and related publications. It targets design professionals, artists, cultural institutions, and the general public interested in graphic design and poster art. The organization maintains a recognized position in the cultural and media sector in Germany with international outreach through exhibitions. Technically, the website is built on WordPress using a custom theme, with modern HTML5, CSS3, and JavaScript technologies. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks advanced security headers and formal security policies. No vulnerabilities or exposed sensitive data were found in the provided content. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is minimal, with no direct emails or phone numbers visible, which may impact user trust. Overall, the website is professionally designed and trustworthy for its cultural purpose, but improvements in security policies, privacy mechanisms, and contact transparency would enhance its risk posture and user confidence.

Alex Dujet Type System Corp is a specialized graphic and type design studio based in Geneva, Switzerland, founded in 2015. The company focuses on visual communication, editorial, and type design services, and co-founded the Extraset Swiss Type Foundry. The website serves as a portfolio showcasing extensive design projects, exhibitions, and collaborations with notable design entities. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Google Analytics, hosted by Infomaniak Network SA. While the site is functional and professionally designed, it lacks privacy and cookie policies, and DNSSEC is not enabled on the domain. The domain WHOIS data shows a future creation date, which is inconsistent with the business history and may require verification. Security headers are not detected, and no incident response or vulnerability disclosure information is provided. Overall, the website is moderately secure and credible but would benefit from improved privacy compliance and enhanced security configurations.

The website www.ny.gov is the official online portal for the State of New York government, intended to provide residents and visitors with access to government information and public services. However, the current accessible content is limited to a Cloudflare Turnstile human verification challenge page, preventing full content analysis. The site leverages Cloudflare for security and performance, indicating a mature technical infrastructure focused on protecting against automated abuse. Due to the WAF challenge, no direct contact information, privacy policies, or business details are accessible, limiting the ability to fully assess compliance and security posture. The WHOIS data is incomplete, lacking registrar and nameserver information, but the .gov TLD and branding strongly suggest legitimacy as a government entity. Overall, the site demonstrates a high-security posture through access controls but requires bypassing the WAF to conduct a comprehensive evaluation.

R

Reimagine Buildings Collective

reimaginebuildings.com

70

The Reimagine Buildings Collective is a specialized online community platform that connects builders, designers, and changemakers focused on creating healthy, climate-ready buildings. The platform offers peer-to-peer learning, collaborative cohorts called Reimagine Labs, and a rich repository of member stories and testimonials. It targets professionals dedicated to sustainable building practices and aims to foster connection, clarity, and confidence among its members. Technically, the website leverages modern web technologies including HTML5, CSS3, JavaScript, and video streaming via Cloudflare, hosted on the Mighty Networks platform. Analytics and tracking are implemented through Google Analytics, Bing UET, and TrackJS, indicating a moderate level of user behavior monitoring. Security posture is generally good with HTTPS enforced and CSRF protections, but lacks some recommended security headers and visible privacy or cookie policies, which are areas for improvement. The domain WHOIS data for the subdomain is unavailable, which is typical for subdomains, and does not detract from the legitimacy of the platform. Overall, the website is professional, trustworthy, and well-positioned within its niche, though it would benefit from enhanced privacy disclosures and security headers to improve compliance and security posture.

Macquarie Bank Limited operates a comprehensive Australian banking website offering a wide range of personal and business financial services including everyday banking, home loans, investing, and private banking. The site is well-branded and professionally designed, targeting Australian banking customers with clear navigation and extensive product information. The business is positioned as a large, established financial institution under the Macquarie Group umbrella. Technically, the website leverages Adobe Experience Manager CMS and integrates multiple modern analytics and marketing tools such as Google Tag Manager, Crazy Egg, and Facebook Pixel, indicating a mature digital infrastructure. The site is mobile-optimized and accessible with good SEO practices. Security posture is strong with HTTPS enforced and promotion of multi-factor authentication, though explicit security headers and policies could be more visible. WHOIS data is privacy protected, which is typical for financial institutions, but limits transparency. Overall, the website is trustworthy, professional, and secure with minor areas for improvement in security disclosures and contact information visibility.

The website lychkovskiy.com serves as a professional portfolio for Mikhail Lychkovskiy, a contemporary designer and poster artist. The site showcases a comprehensive gallery of poster artworks, emphasizing typographic treatment and a blend of national graphic styles. The business operates primarily as an independent artist, targeting design enthusiasts and art collectors, with sales facilitated through external shop links. The domain is relatively new, registered in 2022, aligning with the artist's career timeline. Technically, the website is built on the Adobe Portfolio platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, and Adobe Typekit fonts. Google Tag Manager is employed for analytics and tracking purposes. The site demonstrates good mobile optimization and user experience, with clear navigation and professional design quality. However, accessibility features are basic, and SEO optimization is moderate. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections in place. However, DNSSEC is not enabled, and no security headers were detected, indicating room for improvement in security hardening. Privacy compliance is lacking, with no privacy or cookie policies found, and no GDPR compliance indicators present. Contact information is limited to a single email address, with no phone numbers or physical addresses provided. Overall, the website presents a trustworthy and professional portfolio for an independent artist but would benefit from enhanced privacy policies, security headers, and clearer compliance documentation to improve its security posture and regulatory adherence.

Alex Dujet Type System Corp is a specialized graphic and type design studio based in Geneva, Switzerland, founded in 2015. The company focuses on visual communication, editorial, and type design, collaborating with a network of design professionals and co-founding the Swiss type foundry Extraset. The website serves as a portfolio showcasing extensive design projects and exhibitions, targeting graphic designers and related professionals. Technically, the site is built with standard web technologies including HTML5, CSS3, JavaScript, and jQuery, hosted on Infomaniak servers. While the site is content-rich and professionally designed, it lacks modern privacy and security compliance features such as privacy and cookie policies, security headers, and DNSSEC. The domain registration is consistent with the business claims, supporting legitimacy. Overall, the website demonstrates good business credibility but has room for improvement in security and privacy compliance.

O

Office for Typography

officefortypography.ch

49

Office for Typography is a small, specialized design studio focusing on graphic design, type design, and font engineering with physical offices in Switzerland and Japan. The website presents a clean, minimalistic design that clearly communicates the company's core services and contact information. The business targets clients in need of professional typography and graphic design services, positioning itself as a niche player with an international footprint. Technically, the website is built with standard HTML5 and CSS3, without detectable CMS or advanced frameworks. The site is mobile-optimized and performs moderately well, though lacks advanced SEO and accessibility features. No analytics or tracking technologies are present, indicating a privacy-conscious approach or minimal digital marketing. From a security perspective, the site uses HTTPS (assumed from domain), but no security headers or policies are published. There are no forms or data collection points, reducing attack surface, but also no published privacy or cookie policies, which is a compliance gap. The WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the website is professional and trustworthy but could improve in privacy compliance and security best practices to enhance user trust and regulatory adherence.

L

linyouting

linyouting.com

51

The website linyouting.com serves as a personal portfolio for Youting Lin, a multidisciplinary designer specializing in graphic design and motion graphics. The site showcases various creative projects and visual works, targeting a general audience interested in design and multimedia art. The business model is primarily portfolio-based, aimed at personal branding and showcasing creative skills. The market position is niche, focusing on creative professionals and potential clients in the design industry. Technically, the site is built on the Cargo Collective platform, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site is hosted on Cargo's infrastructure with assets served from freight.cargo.site and static.cargo.site. The site is mobile optimized with good design quality and user experience, though some SEO and accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protection enabled. However, DNSSEC is not enabled, and no security headers are detected in the HTML content, which are areas for improvement. There are no published privacy, cookie, or terms of service policies, nor any incident response or security contact information, indicating limited compliance and transparency. Overall, the site is a well-designed personal portfolio with moderate technical maturity and security posture. The lack of privacy and security policies, as well as contact information, reduces trust and compliance scores. Strategic improvements in these areas would enhance the site's professionalism and security stance.

L

Lynn Oh

lynnsohn.com

50

Lynn Oh's website is a professionally designed portfolio showcasing her multidisciplinary graphic design expertise, including identity, typography, and motion graphics. The site highlights collaborations with prestigious agencies and clients such as Instagram, COLLINS, Pentagram, Apple, and Nike, positioning her as an established creative professional in the media industry. The business model is focused on personal branding and freelance/contract design services targeting creative industry professionals and potential clients. Technically, the website is built on the Cargo Collective platform using modern web standards including HTML5, CSS3, and JavaScript, with custom fonts loaded from WebType. The site is mobile optimized and performs moderately well, though accessibility and SEO optimizations are basic. Hosting and domain registration are consistent and reputable, with HTTPS enabled and domain transfer protections in place. From a security perspective, the site benefits from HTTPS and domain transfer lock but lacks DNSSEC and security headers, which are recommended for enhanced protection. There are no privacy or cookie policies, nor vulnerability disclosure mechanisms, indicating gaps in compliance and security transparency. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website is safe, professional, and trustworthy with excellent content quality and business credibility. However, improvements in privacy compliance, security headers, and disclosure policies would strengthen its security posture and regulatory adherence.

D

DR.ME

dr-me.com

53

DR.ME is a well-established creative design studio based in Manchester, UK, founded in 2010. The company specializes in innovative and experimental design services including graphic design, art direction, photography, illustration, collage, and video production. They serve a diverse client base in music, fashion, art, and culture sectors and have earned industry recognition such as the D&AD Yellow Pencil award. The website reflects a professional portfolio showcasing their work and client list, positioning them as a respected player in the creative media industry. Technically, the site is built on the Cargo Collective platform using modern web technologies and is mobile optimized with moderate performance. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks advanced security headers and formal privacy or cookie policies. Overall, the site is safe, professional, and trustworthy but could improve compliance and security transparency.

L

Lamm & Kirch GbR

lamm-kirch.com

46

Lamm & Kirch GbR is a small, established graphic design studio founded in 2012, specializing in cultural sector projects including book design, visual identities, and exhibitions. Operating from Leipzig and Berlin, the studio collaborates with a network of professionals to deliver comprehensive design services. Their website reflects a professional and well-curated portfolio, demonstrating their market position as a reputable design studio with international recognition and multiple awards. Technically, the website uses standard web technologies with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protections, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is strong with a detailed GDPR-compliant privacy policy, though cookie consent mechanisms are absent. Overall, the website is trustworthy, professional, and safe for general audiences.

J

Johnson / Kingston

johnsonkingston.ch

47

Johnson / Kingston is a Swiss design studio founded in 2012, specializing in contemporary graphic design with a strong focus on the intersection of design and technology. Their services include digital publishing, typeface development, custom workflows, and identity design for cultural and educational institutions. The studio has received international recognition, including multiple Swiss Design Awards, and maintains a professional online portfolio showcasing their work and teaching activities. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript, jQuery, and Swiper.js, delivering a fast and visually rich user experience optimized for mobile devices. Security-wise, the site lacks visible security headers and privacy/cookie policies, which are areas for improvement, but it does not collect user data or use tracking scripts, reducing risk exposure. The domain registration data is consistent with the business claims, indicating legitimacy and trustworthiness.

M

Marinus Klinksik

marinusklinksik.de

49

Marinus Klinksik is a Hamburg-based multidisciplinary graphic and type designer with a professional online portfolio hosted on the Cargo Collective platform. The website showcases a strong focus on typography, editorial, web, and motion design, complemented by the launch of a type foundry called Why.Foundry in early 2024. The site is well-structured, visually professional, and targets clients and collaborators in the creative design industry. Technically, the website employs modern web standards, including HTTPS, security headers, and Google Analytics with IP anonymization, hosted on a reputable platform. Security posture is solid with no visible vulnerabilities, though cookie consent mechanisms and explicit security policies could be improved. Overall, the website presents a trustworthy and professional digital presence for a small creative business.

R

Raffinerie AG für Gestaltung

raffinerie.com

47

Raffinerie AG für Gestaltung is a well-established design agency based in Zürich, Switzerland, specializing in branding, digital, and editorial design services. The company has a strong portfolio featuring notable clients such as Helsana, Greenpeace, and Zürcher Kantonalbank, positioning itself as a reputable player in the media and creative design sector. The website reflects a professional and consistent brand image, targeting businesses and organizations seeking high-quality design solutions. Technically, the website is built on modern web technologies including HTML5, CSS3, JavaScript, and Alpine.js, hosted on infrastructure associated with Metanet AG. It is optimized for mobile devices and demonstrates good performance and accessibility standards. The use of Google Tag Manager and Vimeo embeds indicates a mature digital marketing and content delivery approach. From a security perspective, the site employs HTTPS with a valid SSL certificate and has domain transfer protections in place. However, it lacks DNSSEC and security headers, which are recommended to enhance security posture. Privacy compliance is basic, with a cookie policy present but no active consent mechanism or detailed GDPR compliance indicators. No incident response or security policy pages were found. Overall, the website is trustworthy and professionally maintained, with minor improvements recommended in security headers and privacy compliance to strengthen its security and regulatory posture.

Eilean Friis-Lund's website serves as a personal graphic design portfolio showcasing a gallery of images. The site targets individuals or businesses interested in graphic design services or artistic inspiration. The business model appears to be a personal brand portfolio aimed at attracting clients or commissions within a niche market. The website is small-scale with basic content quality and consistent branding. Technically, the site is built with standard HTML5, CSS3, and JavaScript without any detected frameworks or CMS. It features a responsive design optimized for mobile devices and moderate performance. However, there is a lack of advanced SEO and accessibility features, and no hosting or platform details are evident. From a security perspective, the site lacks essential security headers and published policies such as privacy or cookie policies. The absence of HTTPS information and incident response contacts indicates a low security posture. No vulnerabilities or tracking technologies were detected, but improvements are needed to enhance compliance and trust. Overall, the website presents a moderate risk profile primarily due to missing privacy and security policies and limited business information. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, enforcing HTTPS, and adding incident response contacts to improve trust and compliance.

The website radzie.de represents a small personal graphic design portfolio operated by Robert Radziejewski based in Berlin. The site primarily showcases the designer's identity and contact information, targeting clients seeking graphic design services. The business model is service-oriented, likely freelance or small studio, with a niche local market position. The website uses WordPress CMS with the Lay theme and jQuery, hosted on a German hosting provider (rzone.de). The technical infrastructure is moderate with good mobile optimization but basic SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is functional but basic in content and technical sophistication.

Studio Dumbar/DEPT® is an established creative agency specializing in bespoke visual identities, motion design, sound, and creative coding. The company has a strong market position with a portfolio of high-profile projects and a consistent, professional brand presence. The website reflects a modern, well-designed digital presence leveraging advanced JavaScript libraries for smooth user experience and animations. However, the site lacks explicit privacy and terms of service documentation, which are important for compliance and user trust. The technical infrastructure is solid with HTTPS enabled and use of reputable third-party libraries, but security headers and DNSSEC are missing, representing areas for improvement. Overall, the security posture is moderate with room for enhancement in policy transparency and technical safeguards.

C

Chloé Pannatier

chloepannatier.ch

55

Chloé Pannatier's website is a professional graphic design portfolio showcasing a wide range of projects including poster designs, visual identities, and artworks for various clients and exhibitions. The site targets clients and collaborators in the creative industry, emphasizing detailed project descriptions and high-quality visuals. Technically, the site is built on WordPress with modern web technologies, featuring lazy loading and responsive design, providing a good user experience across devices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal security policies. Privacy compliance is minimal, with no visible privacy or cookie policies. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

Atelier Choque Le Goff is an independent graphic design studio based in Paris, founded in 2016. The website serves as a portfolio showcasing a variety of creative projects including book design, poster design, editorial work, identity creation, and typography. The studio targets clients interested in high-quality graphic design and art direction services. The business model is centered on creative service delivery with a focus on visual arts and design. The website content is well-structured and visually appealing, reflecting the studio's professional branding and consistent design language. Technically, the website is built on GravCMS, a flat-file CMS, and uses jQuery 2.x along with custom CSS and JavaScript. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO optimization is present but minimal. Hosting appears to be managed via the registrar Nuxit with modns.fr nameservers. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site lacks several best practices such as security headers and DNSSEC. The domain uses HTTPS (assumed from URL) but no explicit security headers were detected in the provided data. No privacy or cookie policies are present, which is a compliance gap especially under GDPR. No contact or incident response information is provided, limiting transparency and trust. The WHOIS data is consistent and legitimate, with a domain age appropriate for the business history. Overall, the website is a good representation of a small creative studio with a professional portfolio. However, it lacks important privacy and security features that could improve trust and compliance. Strategic recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and providing clear contact information to enhance credibility and security posture.

I

Institut plánování a rozvoje hlavního města Prahy

iprpraha.cz

46

Institut plánování a rozvoje hlavního města Prahy (IPR Praha) is the primary conceptual and planning institution for the city of Prague, focusing on architecture, urbanism, and city development. The organization holds a strong market position as the authoritative body for urban planning in Prague, offering services such as metropolitan planning, urban data analytics, and public engagement through its CAMP center. The website reflects a mature digital presence with comprehensive content tailored to residents, city officials, and professionals in urban development. Technically, the website employs modern JavaScript modules, integrates Google Analytics and Tag Manager for tracking, and uses Google reCAPTCHA v3 for bot mitigation. The site is mobile-optimized, accessible, and SEO-friendly, hosted under a reputable Czech registrar. Privacy compliance is well addressed with cookie consent mechanisms and a detailed privacy policy. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies or incident response contacts suggests room for improvement in transparency and readiness. Overall, the site is trustworthy, professional, and well-maintained, supporting the organization's public service mission effectively.

J

Just Another Foundry GmbH

remix-tools.com

51

Just Another Foundry GmbH operates the Font Remix Tools website, providing specialized plug-ins for font editing software FontLab and Glyphs. The company targets professional font designers and typographers, offering tools that enhance font design workflows such as glyph harmonization and small caps generation. The business is well-established with a domain age since 2007 and maintains a niche market position supported by testimonials from recognized font designers. Technically, the website uses standard web technologies with a moderate performance profile and good mobile optimization. Security posture is moderate with no advanced security headers or DNSSEC enabled, and privacy compliance is partial with a comprehensive privacy policy but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and focused on its target audience.

J

Just Another Foundry GmbH

kern-on.com

51

Kern On is a specialized software tool designed to assist type designers and font producers with kerning tasks, implemented as a plug-in for Glyphs. The business is operated by Just Another Foundry GmbH, a small German company founded in 2018, with clear business identity and contact information. The website provides product demos, purchase options, and user support via a forum, targeting a niche market in typography software. Technically, the site uses standard web technologies (HTML5, CSS3, JavaScript) and is hosted with domain services from DomainControl. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is moderate; domain registration protections are in place, but DNSSEC is not enabled and security headers are missing. Privacy compliance is partial, with a privacy policy linked externally but no cookie consent mechanism despite use of Matomo analytics. Overall, the site is trustworthy and professional but could improve security and privacy practices.

J

JobScore

jobscore.com

75

JobScore operates as a provider of talent acquisition and recruiting software, offering a SaaS platform designed to help recruiting teams source candidates, attract talent, assess applicants, and manage interviews effectively. The website presents a professional and well-structured digital presence, leveraging WordPress CMS with SEO optimizations and integration of marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. Security posture is generally good with HTTPS enforced and use of reCAPTCHA for form protection; however, the absence of visible security headers and lack of explicit privacy and cookie policies indicate areas for improvement. The missing WHOIS data introduces some uncertainty regarding domain registration legitimacy, though the website content and branding suggest a legitimate business entity. Overall, the site is suitable for general audiences and targets HR professionals and recruiting teams.

Lottie.host is a specialized technology website providing free hosting and playback of Lottie animation files, targeting developers and designers who require lightweight animation assets. The site uses modern web technologies such as web components and leverages Cloudflare for DNS and likely CDN services, indicating a modern and performant technical infrastructure. However, the website content is minimalistic, lacking privacy, cookie, and terms of service policies, as well as contact information, which limits user trust and compliance posture. Security-wise, the domain is well-registered with a reputable registrar and protected against unauthorized transfers, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Overall, the site is functional and legitimate but would benefit from improved compliance and security practices.

A

Arrange

joinarrange.com

60

Arrange is a technology-focused service platform designed to facilitate fast creation, management, and sharing of calendar events. The website is hosted on Squarespace and uses standard web technologies including JavaScript and Google Fonts. The site content is minimal, featuring a farewell message, indicating possible discontinuation or closure of the service. The technical infrastructure is modern but basic, with no advanced analytics or tracking detected. Security posture is moderate with HTTPS and HSTS enabled but lacks additional security headers and policies. The absence of WHOIS data and domain registration details raises concerns about domain legitimacy and trustworthiness. Overall, the site presents a basic online presence with limited business and security information.

P

PumpParty - Goon for Cash

pumpparty.com

61

PumpParty is a newly launched skill-based gaming platform targeting a Gen-Z audience interested in mobile games and live competitions for cash prizes. The website promotes weekly live gameshows and skill-based trading games accessible via a mobile app. The business model centers on engaging users through skill rather than luck, positioning itself in a niche market of competitive gaming. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, and integrates PostHog analytics for user behavior tracking. Hosting and DNS services leverage Cloudflare infrastructure, providing reliable performance and DNS management. The site is mobile-optimized with smooth animations and responsive design, though accessibility features are basic. From a security perspective, the site uses HTTPS and has domain status protections to prevent unauthorized transfers or deletions. However, no security headers were detected, and DNSSEC is not enabled, representing areas for improvement. The absence of privacy, cookie, and terms of service policies, as well as lack of contact information, reduces compliance and trustworthiness. No forms or user input fields were found, limiting attack surface but also indicating limited direct user data collection on the site. Overall, the website is functional and professionally designed but lacks critical compliance and security disclosures. The domain is very new, consistent with a startup phase. Strategic recommendations include implementing privacy and cookie policies, adding security headers, enabling DNSSEC, and providing clear contact and incident response information to enhance trust and compliance.

B

Blot

blot.im

52

Blot is a technology-focused SaaS platform that enables users to easily convert folders into websites by dragging and dropping files. It targets individuals and small teams seeking a simple publishing solution integrated with their existing tools. The platform has been operational for over a decade, indicating market stability and a niche position. Technically, the website is hosted on AWS infrastructure, uses modern web standards, and delivers moderate performance with good mobile optimization. Security posture is moderate with no visible vulnerabilities but lacks advanced security headers and policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

I

It's Nice That

itsnicethat.com

66

It's Nice That is a creative media platform focused on inspiring creativity through publishing content relevant to creative professionals and enthusiasts. The website demonstrates a solid market position as an established media outlet in the creative industry, offering curated content and creative inspiration. Technically, the site leverages modern web technologies such as React, Cookiebot for consent management, Google Tag Manager for analytics, and Stripe for payment processing, indicating a mature digital infrastructure. The security posture is generally strong with HTTPS enforced and use of reputable third-party services, though explicit security headers and detailed privacy policies are not evident in the provided data. Overall, the site appears legitimate and professional, with a moderate risk profile primarily due to missing explicit privacy and contact information. Strategic recommendations include enhancing transparency with clear privacy and terms of service pages, improving security headers, and publishing incident response contacts to strengthen trust and compliance.

Samarskaya & Partners is a small boutique design and branding firm specializing in visual communications, brand strategy, identity design, and typographic layout. The company has been established since 2005, consistent with the domain registration date. The website presents a professional and focused description of services targeting creative professionals and businesses seeking branding expertise. The digital infrastructure uses standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Google Analytics for tracking. Hosting appears to be via sureserver.com with domain registration through eNom, LLC. The website is accessible without WAF or security challenges and includes social media presence on major platforms.