Skip to main content

Is josepmartins.com a Scam? Security Check Results - Josep Martins Reviews

josepmartins.com favicon

Is josepmartins.com Safe? Security Analysis for Josep Martins

Check if josepmartins.com is a scam or legitimate. Free security scan and reviews.

TechnologySpainsmall
ReactWebpackTypekit fonts
Analyzed 8/2/2025Completed 6:28:00 PM
55
Security Score
MEDIUM RISK

AI Summary

Josep Martins is an individual product designer and frontend developer based in Girona, Spain, with professional experience at notable technology companies such as GitHub, New Relic, Typeform, and currently Stripe. The website serves as a personal portfolio showcasing his design and development work, including side projects like open-source libraries and free texture archives. The site is well-structured, visually consistent, and targets a general audience interested in design and frontend development. Technically, the website is built using React and modern frontend tooling, including Webpack and Typekit fonts. It demonstrates good mobile optimization and basic accessibility features. However, there is no evidence of a CMS or hosting provider information. Performance is moderate, with no detected analytics or tracking scripts, indicating a privacy-conscious approach. From a security perspective, the site lacks visible security headers and explicit security policies. HTTPS status and SSL configuration could not be confirmed from the provided data. No privacy or cookie policies are present, and no incident response or vulnerability disclosure information is available. The WHOIS lookup failed to return domain registration data, which raises concerns about domain legitimacy and transparency. Overall, the website is a professional personal portfolio with good content quality and technical implementation but has gaps in security posture and privacy compliance. The absence of WHOIS data and lack of security policies reduce trustworthiness and compliance standing.

Detected Technologies

ReactWebpackTypekit fonts

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

Josep Martins operates as an individual professional in the technology sector, focusing on product design and frontend development. His portfolio highlights experience with leading tech companies, positioning him as a skilled designer with a strong personal brand. The business model is primarily personal branding and showcasing expertise, supplemented by open-source side projects that may contribute to reputation and community engagement. The target audience includes potential employers, collaborators, and the design/development community. There is no indication of revenue streams or partnerships beyond professional affiliations. The website's clean design and external links to reputable companies enhance credibility, though the lack of formal business information and WHOIS transparency limits full business intelligence insights.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

j*****@gmail.com

Security Posture Analysis

Comprehensive Security Assessment

The website demonstrates a basic security posture with no detected HTTPS enforcement or security headers in the provided data. There are no visible forms collecting sensitive data, reducing immediate risk exposure. However, the absence of privacy and cookie policies indicates non-compliance with GDPR and other privacy regulations. No incident response contacts or vulnerability disclosure mechanisms are present, which could hinder timely security issue resolution. The WHOIS data absence is a notable concern, as domain registration transparency is a key trust factor. Overall, the security maturity is low to moderate, with recommendations to implement standard security headers, privacy policies, and domain registration transparency to improve trust and compliance.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement HTTPS with a valid SSL certificate and enforce secure connections site-wide.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

Josep Martins

Description:

I'm Josep Martins, a product designer and frontend developer based in Girona. Systems designer at GitHub. Previously at design engineer at New Relic and Typeform.

Key Services:
Product designFrontend developmentDesign systemsOpen source side projects
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
ReactWebpackTypekit fonts
Frameworks:
React
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

basic

Security Assessment

Security Score:
50/100

Analytics & Tracking

Tracking Level:minimal
Privacy Compliance:poor

Advertising & Marketing

Transparency Level:poor

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:high

Key Observations

1

Website is a personal portfolio for a product designer and developer.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

30/100
Score

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

35/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

Third-party services without privacy policy

HIGH

Detected services: Twitter, LinkedIn

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: transport

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

65/100
Score

No DMARC record found

HIGH

DMARC provides email authentication and reporting

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 include:spf.dondominio.com
DNS Lookups:1/10
DMARC Details
Policy:none
MTA-STS Details

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

72/100
Score

Weak Protocols Supported

HIGH

Server supports weak protocols: TLSv1.1

OCSP Stapling Not Enabled

LOW

OCSP stapling improves performance and privacy

Certificate Transparency Not Implemented

LOW

Certificate is not logged in Certificate Transparency logs

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 49 days

Partial SSL/TLS Assessment

LOW

Completed 3 of 4 security checks due to time constraints

Protocol Support

TLSv1.3TLSv1.2TLSv1.1

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

70/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

Domain Transfer Lock Not Enabled

MEDIUM

Domain can be transferred without authorization

Domain Delete Lock Not Enabled

LOW

Domain can be deleted without additional verification

Domain Registration Details

Domain Age
12 years(mature)
Expiry Risk
low(88 days)
Protection Level
noneDNSSEC OFF
Suspicious Indicators Detected
  • No domain protection locks enabled

DNS Records

A Records:76.76.21.21
Name Servers:
ns2.dondominio.com
ns6.dondominio.com
SOA:Serial: 2021122106, TTL: 3600s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:94ms

SPF Analysis

SPF Record:
v=spf1 include:spf.dondominio.com

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built using React with Webpack bundling and uses Typekit for fonts, indicating a modern frontend technology stack. The site loads multiple JavaScript chunks and uses lazy loading for images, which supports performance optimization. There is no CMS detected, suggesting a custom or static site approach. The site is mobile optimized with responsive design elements. However, no analytics or tracking scripts were found, which may be intentional for privacy reasons. The absence of security headers and unknown SSL status are technical risks. The site could benefit from improved accessibility features and SEO optimizations such as meta tags and structured data.
Analyze Another Website