Security Directory

M

mooncell07

mooncell07.me

56

Mooncell07 is a personal website and blog operated by an individual known as nova/mooncell07, focusing on web development learning, emulator development, network programming, gaming, and visual novels. The site serves as a platform to share open source projects and personal posts, targeting technology enthusiasts and developers. The website is built using modern frontend technology SvelteKit and hosted by Hostinger with privacy-protected domain registration, reflecting a small-scale personal project rather than a commercial enterprise. Technically, the site demonstrates a modern tech stack with good mobile optimization and basic SEO, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS and domain transfer protection but lacks DNSSEC and security headers, and no formal privacy or cookie policies are published. Overall, the site is safe, trustworthy, and professional for its intended personal use, but lacks formal compliance and security documentation typical of commercial sites.

Z

aman/home

zeffo.me

56

The website zeffo.me is a personal portfolio site owned by an individual named Aman, primarily showcasing programming projects and animal rehabilitation efforts. The site is small-scale and targets a general audience interested in technology and personal hobbies. It is hosted on Cloudflare and built using the modern SvelteKit framework, indicating a moderate level of technical maturity. The website design is good with clear navigation and mobile optimization, but lacks formal business and compliance documentation such as privacy or cookie policies. Security posture is adequate with HTTPS enabled and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is safe, trustworthy, and professionally presented for a personal project, but lacks formal compliance and security policies expected in business contexts.

L

lighttigerXIV - About

lighttigerxiv.dev

56

The website lighttigerxiv.dev is a personal portfolio site for Afonso Fonseca, a young developer from Portugal. It serves primarily as a showcase for his programming projects, open source contributions, and professional CV. The site targets a general audience interested in technology and programming, with a focus on personal branding rather than commercial business operations. Technically, the site is built using modern web technologies including SvelteKit and Google Fonts, delivering a fast and mobile-optimized experience. However, it lacks explicit privacy, cookie, and security policies, which are important for compliance and trust. Security posture is moderate with HTTPS implied but no detected security headers or incident response information. Overall, the site is safe, professional, and trustworthy but could improve in privacy compliance and security best practices.

P

Private by Design, LLC

dunkirk.sh

58

The website dunkirk.sh is a personal portfolio and blog site for Kieran Klukas, a 17-year-old homeschooled coder and content creator based in the United States. The site showcases personal interests such as filmmaking, FPV, and TypeScript programming, and provides contact information primarily via email. The domain is newly registered in 2024 under Private by Design, LLC, with transparent WHOIS data and appropriate domain security statuses. The site uses modern web technologies including TypeScript, Cloudflare DNS and CDN, and JavaScript, delivering a fast and mobile-optimized user experience with good SEO practices. From a security perspective, the site enforces HTTPS and benefits from Cloudflare's infrastructure, but lacks explicit security headers and formal privacy or cookie policies, indicating room for compliance improvement. No forms or sensitive data collection mechanisms are present, reducing attack surface. Analytics usage is minimal and privacy-conscious, relying on anonymous HTTP request counters. No vulnerabilities or suspicious content were detected. Overall, the site presents a moderate to good security posture with a strong technical foundation and clear business credibility as a personal portfolio. However, the absence of privacy and cookie policies and explicit security headers are notable gaps. Strategic improvements in these areas would enhance compliance and trustworthiness.

J

Jan's Website

jan-osing.de

57

Jan's website is a personal portfolio and social presence site for a young developer from Germany. It focuses on personal interests such as gaming, anime, open source software, and Linux distributions. The site is simple, well-structured, and provides links to various social and community platforms. The technical infrastructure is basic, relying on static HTML and CSS with Cloudflare DNS services. There is no evidence of advanced frameworks or CMS usage. Security posture is minimal with no visible security headers or policies, but no critical vulnerabilities or malicious content were detected. Privacy compliance is lacking as no privacy or cookie policies are present. Overall, the site is low risk but would benefit from improved security and compliance documentation.

P

PURE Sports Nutrition

puresportsnutrition.com

62

PURE Sports Nutrition is a New Zealand-based e-commerce business specializing in premium sports nutrition products including sports drinks, energy gels, protein powders, and hydration solutions. The website is professionally designed and hosted on the Shopify platform, leveraging modern web technologies and multiple third-party marketing and analytics integrations. The brand positions itself as a clean, performance-focused nutrition provider targeting active lifestyle consumers. Technically, the site demonstrates good performance and mobile optimization, though accessibility features are basic. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks explicit security headers and formal policies. The absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy. Overall, the site is functional and trustworthy but would benefit from enhanced privacy compliance and transparency.

R

Rokeby Nutrition

rokebyfarms.com.au

67

Rokeby Nutrition is a small Australian nutrition food company specializing in award-winning dairy products and nutrition beverages, operating primarily through an e-commerce Shopify platform. The website presents a professional and consistent brand image targeting health-conscious consumers in Australia. Technically, the site leverages modern Shopify technologies, including Google Tag Manager and Facebook Pixel for analytics and marketing, and employs hCaptcha for form security. The site is mobile-optimized with good performance and SEO practices. Security posture is adequate with HTTPS enforced and clientTransferProhibited domain status, but could be improved by enabling DNSSEC and adding advanced security headers. Privacy compliance is basic with a privacy policy and cookie consent banner, but lacks explicit GDPR compliance details. Contact information is limited to forms without direct emails or phone numbers. Overall, the site is trustworthy and well-structured but would benefit from enhanced security and privacy transparency.

Chemist Warehouse is Australia's largest pharmacy retailer, offering a wide range of products including fragrances, prescriptions, vitamins, beauty, and baby care items. The company operates a professional and well-branded e-commerce platform targeting the general Australian population. The website demonstrates a mature digital infrastructure using modern technologies such as Next.js and React, with integrations for analytics and cookie consent management. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit privacy and terms of service pages were not detected in the provided content. Overall, the website is trustworthy and professionally maintained, reflecting a large retail business with a significant market presence in Australia.

M

Marathon-Photos.com Limited

marathonphotos.live

59

Marathon Photos Live is a globally recognized leader in mass participation event sports photography, operating in 70 countries and serving millions of athletes. The company specializes in capturing and delivering live race images, positioning itself as a key service provider in the sports media sector. Their website reflects a professional and consistent brand image with a focus on user experience and accessibility for athletes and event organizers worldwide. Technically, the site is built on modern frameworks such as Vue.js, with good mobile optimization and SEO practices, although some accessibility features could be enhanced. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published security policies. The domain is privacy protected but consistent with the business profile, and no suspicious indicators were found. Overall, the website demonstrates a mature digital presence with room for security and compliance improvements.

P

Private by Design, LLC

fedi.gay

39

The website at fedi.gay is a minimal, non-commercial site containing only a literary poem themed on Elven lore from Tolkien's universe. There is no business description, contact information, or commercial content. The domain is registered to Private by Design, LLC, a US-based entity, but the website content does not reflect any business operations or services. The domain WHOIS data is suspicious due to a future creation date, which raises concerns about legitimacy. Technically, the site uses basic HTML and CSS with no advanced frameworks or scripts detected. There are no privacy, cookie, or terms of service policies, and no contact or incident response information is provided. Security posture is weak with no DNSSEC, no security headers, and unknown SSL status. Overall, the site appears to be a placeholder or personal page rather than a professional business site.

The website floof.gay is a personal site belonging to an individual named Olivia, serving as a small corner of the internet to share personal interests, social media presence, and blog content. The site is positioned as a personal brand rather than a commercial business, targeting a general audience interested in the author's activities and social links. The site leverages modern web technologies such as Dev.css and web fonts to provide a clean and responsive user experience. The technical infrastructure is straightforward, hosted likely via NameCheap with privacy-protected WHOIS registration, reflecting a typical personal website setup. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and security headers, which are recommended for improved security posture. There are no privacy or cookie policies present, and no contact information or forms for data collection, indicating minimal compliance with privacy regulations. No analytics or advertising scripts were detected, suggesting limited tracking and data collection. Overall, the site is safe and appropriate for general audiences, with no adult or questionable content detected. The domain is recently registered and privacy protected, consistent with a personal site. The security posture is moderate but could be improved with additional headers and policies. The site’s business credibility is limited due to its personal nature and lack of formal business information. Strategic recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and considering a security.txt file for vulnerability disclosure to enhance trust and compliance.

The website nekomimi.party currently serves as a minimal placeholder page with very limited content and no clear business description or services. The domain is newly registered in early 2023 and uses Cloudflare as its registrar and hosting provider. There is no evidence of a mature or established business presence, and no contact or policy information is provided on the site. Technically, the site uses basic HTML and CSS with no advanced frameworks or CMS detected. Security posture is minimal with no security headers or DNSSEC enabled, and privacy compliance is absent due to missing policies. Overall, the site appears to be in an early or inactive stage of development with low trustworthiness and limited user engagement potential.

KitsuPage is a small technology service offering free static hosting for user repositories, leveraging Git branches to serve content automatically. The service targets developers and users seeking simple, no-cost static site hosting with optional custom domain support. The website is minimalistic, providing essential information about usage and configuration but lacks comprehensive business or legal documentation. Technically, the site uses basic HTML and CSS without advanced frameworks or CMS, and no analytics or advertising scripts are present, indicating a lightweight and privacy-conscious approach. Security posture is limited with no visible security headers or privacy policies, and no contact information is provided except for an abuse report link. The domain uses privacy protection, which is typical for small tech projects, and no suspicious WHOIS patterns were detected. Overall, the site is functional but basic, with room for improvement in security, compliance, and user engagement.

T

Techland S.A.

dyinglightgame.com

62

Techland S.A. operates the official website for the Dying Light franchise, a well-established video game series with over 40 million players worldwide. The website serves as a central hub for game information, news, community engagement, and digital sales, targeting gamers interested in parkour and zombie-themed entertainment. The company maintains a strong market position with consistent branding and a professional online presence. Technically, the website employs modern web technologies including JavaScript, CSS, and integrates third-party services such as Google Tag Manager and Cookiebot for analytics and consent management. Hosting is managed via AWS infrastructure, ensuring reliable performance and scalability. Security posture is solid with HTTPS enforced and domain transfer protections in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is well addressed with clear policies and cookie consent mechanisms, aligning with GDPR requirements. Overall, the website is professional, secure, and trustworthy, supporting Techland's business objectives effectively.

The website citrons.xyz is a personal website belonging to an individual named raven, featuring journal entries, podcasts, galleries, and personal anecdotes. It does not represent a commercial business or organization and lacks formal business information or contact details. The site is modest in technical sophistication, built with basic HTML and CSS, and hosted on Mythic Beasts servers. There is no evidence of advanced frameworks, CMS, or analytics tools. Security posture is minimal with no detected HTTPS or security headers, and no privacy or cookie policies are present, indicating low compliance with modern web security and privacy standards. The domain is privacy protected and registered in 2021, consistent with the personal nature of the site. Overall, the site is safe for general audiences but lacks professional and security maturity.

S

SCS Software

worldoftrucks.com

63

World of Trucks is an online community platform operated by SCS Software that complements their popular truck simulation games, Euro Truck Simulator 2 and American Truck Simulator. The website serves as a hub for players to engage in community events, share content such as screenshots and videos, and stay updated with news and DLC releases. The platform targets simulation gaming enthusiasts and supports community-driven activities enhancing player engagement. Technically, the website is well-structured with modern web technologies, uses HTTPS exclusively, and integrates Google Analytics with privacy considerations such as IP anonymization. Media assets are hosted on Amazon S3, ensuring reliable content delivery. Security posture is solid with session protection and cookie consent mechanisms, though some security headers and explicit incident response policies are not publicly documented. The absence of WHOIS data is notable but does not detract from the site's legitimacy given the professional presentation and strong brand association with SCS Software. Overall, the site demonstrates a mature digital presence with good privacy compliance and user experience.

meow.company appears to be a small technology-focused website or personal project branded as "pancakes' corner of the internet." The site provides links to related services such as AodeRelay, Forgejo, and Iceshrimp.NET, indicating a community or developer-oriented ecosystem. The website is hosted on Debian GNU/Linux 12 in Melbourne, Australia, consistent with the domain registration data. The content is minimal but functional, with some ASCII art and basic system information displayed. There is no evidence of commercial activity or extensive business operations. The domain is newly registered in 2024, matching the apparent small scale and recent launch of the site.

The website 'mira's site' hosted on twoneis.site is a minimal personal presence site with a friendly and informal tone. It primarily serves as a placeholder with links to social platforms such as the Fediverse and Matrix, and provides a contact email. The site lacks substantive business content, policies, or commercial services, indicating a small-scale personal or community-oriented project. The domain WHOIS data is inconsistent, showing a future creation date and a registrant organization unrelated to the website content, which raises legitimacy concerns. Technically, the site is built with basic HTML and CSS, hosted via Porkbun, LLC. There is no evidence of advanced frameworks, CMS, or analytics tools. The site appears accessible without WAF or blocking mechanisms but lacks HTTPS confirmation and security headers, which weakens its security posture. Privacy and cookie policies are absent, and no forms or data collection mechanisms are present, limiting privacy compliance. Security-wise, the absence of HTTPS and security headers, combined with suspicious WHOIS data, lowers the trustworthiness and security score. No vulnerabilities or malware indicators were detected, but the site would benefit from implementing standard security best practices and compliance policies. Overall, the site is low risk but also low maturity in business and security terms. Strategic improvements in security, privacy compliance, and domain legitimacy verification are recommended to enhance trust and professionalism.

A

Amy

amy.rip

47

Amy.rip is a personal website representing an individual named Amy, who identifies as a programmer and content creator sharing humorous and personal content. The site includes a link tree to a Git repository and integrates Discord OAuth2 for user reviews, indicating some community engagement. The website is small-scale, with a niche audience primarily composed of friends or followers interested in Amy's personal projects and content. Technically, the site uses modern JavaScript modules and React framework, suggesting a contemporary development approach, though performance and accessibility are basic. Security posture is minimal with no detected security headers or privacy policies, and no contact information is provided, limiting trust and compliance. The domain is privacy protected, which aligns with the personal nature of the site. Overall, the site is functional but lacks professional business features and security best practices.

M

Minimalissimo

minimalissimo.com

46

Minimalissimo is an independent digital magazine and creative studio dedicated to minimal design, covering architecture, art, interiors, furniture, lighting, and product design. Established in 2009, it has a niche market position with a loyal audience of design enthusiasts and professionals. The website offers curated editorial content, a newsletter, and an online shop, supported by active social media channels. Technically, the site uses modern web technologies including Google Tag Manager and infinite scroll, hosted on Hover's infrastructure. The site is mobile optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. No direct company emails or phone numbers are published, relying on contact forms and social media for communication. Overall, the site is professional, trustworthy, and content-rich, but could improve in privacy and security transparency.

B

BlueMaxima

flashpointarchive.org

55

Flashpoint Archive is a well-established non-profit community project focused on preserving web games and animations, particularly those created with Flash and other legacy web technologies. Founded in 2017 by BlueMaxima, it has grown into a significant digital preservation effort with a large collection and active community contributors. The project provides open-source software tools to facilitate access and playback of archived content, emphasizing accessibility and preservation of internet culture. Technically, the website employs standard modern web technologies including HTML5, CSS, and JavaScript, with hosting and DNS services provided by Cloudflare. The site is mobile-optimized and features good SEO practices, though accessibility features are basic. The absence of analytics and tracking scripts suggests a privacy-conscious approach. However, the site lacks some advanced security headers and DNSSEC is not enabled, indicating room for improvement in security hardening. From a security perspective, the site benefits from HTTPS and domain transfer protection, but does not publish formal security policies, incident response contacts, or vulnerability disclosure information. No privacy or cookie policies are present, which may impact compliance with GDPR and other privacy regulations. The domain registration is privacy protected, which is justified for this type of community project, though the domain age is relatively recent compared to the project's founding date. Overall, the website is trustworthy, professional, and focused on its mission of digital preservation. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, enhancing security headers and DNSSEC, and publishing security and incident response information to improve compliance and trust.

Geekring.net is a niche, noncommercial hobby project launched in 2020 that hosts a curated webring of geeky, retro, and offbeat websites. It targets enthusiasts of old-school internet culture and geeks who appreciate quirky and personal websites. The site offers navigation widgets, redirect services, and an admin panel for member site management. The business model is purely community-driven without any monetization or commercial intent. Technically, the website uses simple HTML, CSS, and minimal JavaScript, with hosting and DNS services provided by CSL Computer Service Langenbach GmbH and one.com respectively. The site supports both HTTP and HTTPS, with HTTP as default to accommodate older devices. Performance and mobile optimization are basic, reflecting the retro ethos. No CMS or advanced frameworks are detected, and accessibility and SEO optimizations are minimal. From a security perspective, the site lacks DNSSEC and important security headers, and defaults to HTTP which may expose users to downgrade risks. However, it claims no logging, no cookies, and no client-side tracking, which aligns with its privacy-conscious stance. The absence of privacy and cookie policies beyond a basic statement and no incident response or security policies indicate room for improvement in compliance and security maturity. Overall, geekring.net is a trustworthy, small-scale community project with a clear noncommercial focus and minimal security risks. Strategic improvements in security headers, HTTPS enforcement, and formal privacy documentation would enhance its security posture and user trust.

The website citrons.xyz is a personal website belonging to an individual named raven, featuring journal entries, podcasts, galleries, and personal information. It serves as a personal publishing platform with a niche audience and does not represent a commercial business. The domain is privacy protected and registered since 2021, consistent with the website's personal nature. Technically, the site is built with basic HTML and CSS, hosted on Mythic Beasts servers, and shows moderate performance and basic mobile optimization. There is no evidence of CMS or advanced frameworks. Security posture is minimal with no detected security headers or HTTPS enforcement information, and no privacy or cookie policies are present. No contact or incident response information is provided, limiting transparency and trust. Overall, the site is safe for general audiences but lacks professional security and compliance features.

D

doskel

doskel.net

53

The website doskel.net hosts a personal MediaWiki instance named DSKLwiki, maintained by an individual known as doskel. The site serves as a personal repository for programming, amateur radio, cycling, hiking, and other hobbies. It is a niche, small-scale personal site without commercial intent or broad market positioning. The technical infrastructure is based on MediaWiki 1.44.0, hosted on a domain registered with NameCheap. The site is accessible via HTTPS and uses basic web technologies without advanced frameworks or analytics. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is minimal, with a privacy policy present but no cookie consent or GDPR indicators. Contact information is openly provided with multiple communication channels including email, phone, and federated social media. Overall, the site is safe, with no adult or questionable content detected.

P

Rose Garden

pinkro.se

41

The website pinkro.se is a personal portfolio site for Rose, an 18-year-old programmer specializing in operating system development and systems programming. The site highlights Rose's personal projects, open source contributions, and provides multiple contact methods including email, XMPP, and IRC. The content is well structured and targeted towards the programming and open source community. The site is hosted with Cloudflare DNS and uses standard web technologies such as HTML, CSS, and JavaScript without any detected CMS or heavy frameworks. From a technical perspective, the website is well implemented with good design quality, mobile optimization, and interactive UI elements. However, it lacks advanced security headers and DNSSEC, and no privacy or cookie policies are present, which impacts compliance. The WHOIS data shows an anomalous future domain creation date, which reduces trust in the domain registration data but does not reflect on the website content quality. Security posture is moderate with no visible vulnerabilities or exposed sensitive data, but improvements are recommended in DNS security, security headers, and privacy compliance. There is no evidence of tracking, advertising, or analytics services, indicating a privacy-conscious approach. Overall, the site is safe, professional, and credible as a personal portfolio, but domain registration inconsistencies and lack of compliance documentation reduce the overall trust score.

The website freakish.dev appears to be a personal or small-scale blog site with minimal content focused on a philosophical quote and links to other small personal or hobbyist domains. There is no indication of a formal business presence, and no contact or corporate information is provided. The site lacks privacy, cookie, and terms of service policies, which limits its compliance posture. Technically, the site uses basic HTML and CSS without detectable frameworks or CMS. There is no evidence of HTTPS or security headers, which negatively impacts the security posture. No analytics or advertising scripts are present, indicating minimal tracking or marketing activity. Overall, the site is simple and safe for general audiences but lacks professional and security maturity.

The website pre1ude.dev serves as a personal portfolio and freelance developer showcase for an individual named Laura, a 17-year-old freelance developer and student based in Latvia. The site highlights her technical skills, projects, and social connections, targeting potential clients interested in personal websites, small business websites, Discord bots, and general web applications. The business model is that of a small-scale independent freelancer with a focus on technology and software development. The website is well-structured, visually consistent, and provides clear contact information, including email and multiple social media profiles, enhancing its credibility. From a technical perspective, the site employs a modern technology stack including HTML, CSS, JavaScript, TypeScript, Python, NodeJS, Express, and Svelte, running on a Linux environment. The site is moderately performant with good mobile optimization and basic accessibility features. SEO optimization is basic but present through meta tags and Open Graph data. No CMS or hosting provider details are explicitly identified. Security posture is generally good with HTTPS enforced and no visible exposed sensitive data or vulnerable libraries. However, the absence of security headers such as Content-Security-Policy and Strict-Transport-Security represents an area for improvement. Privacy compliance is weak due to the lack of privacy and cookie policies, and no incident response or vulnerability disclosure information is provided. The site does not use analytics or tracking scripts, indicating minimal user tracking. Overall, the website is safe, professional, and trustworthy for its intended audience, with no adult or explicit content detected. The domain uses privacy protection for WHOIS data, which is justified given the personal nature of the site. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure process to enhance security and compliance posture.

I

Iceshrimp

iceshrimp.net

62

Iceshrimp is an open source project focused on providing a decentralized and federated social networking service implementing the ActivityPub standard. The project emphasizes performance, stability, and maintainability with a new .NET-based backend and Blazor WASM frontend. It targets users and developers interested in federated social networks and offers compatibility with Mastodon clients. The project operates without commercialization and prioritizes community-driven development. Technically, the website is hosted on a Forgejo instance and uses modern web technologies including .NET, Blazor, C#, and Docker. The site is performant, mobile-optimized, and structured for developer use. Security practices include HTTPS enforcement and CSRF protection, though explicit security headers and policies are not published. From a security perspective, the site shows good SSL configuration and secure form handling but lacks published privacy, cookie, and security policies, as well as incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of privacy and cookie policies impacts compliance scoring. Overall, the website is trustworthy and professional with a strong technical foundation but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

K

Katie's Website

trinkey.com

50

The website trinkey.com is a personal homepage for an individual named Katelyn, also known as Katie or 'trinkey'. It serves primarily as a personal hub linking to friends' websites and webrings, with no commercial or business services offered. The site is simple, with basic HTML, CSS, and JavaScript, hosted via Cloudflare. The domain is newly registered in December 2024, consistent with the personal nature of the site. Technically, the site uses standard web technologies without advanced frameworks or CMS. It has basic mobile optimization and accessibility but lacks SEO and security best practices such as security headers and DNSSEC. No analytics or tracking scripts are present, indicating minimal user tracking. From a security perspective, the site is accessible without WAF or security challenges but lacks privacy and cookie policies, contact information, and incident response details. The domain registration is transparent and consistent with the website content, indicating legitimacy. However, security posture is basic and could be improved with standard headers and policies. Overall, the site poses low risk but would benefit from improved privacy compliance, security hardening, and contact transparency to enhance trust and user confidence.

The website megmer.net is a small, personal or community-driven site launched in August 2023. It focuses on creative content such as 'ebubbles' and 'origami', and integrates a guest message form that connects to a Matrix bridge, indicating a niche audience interested in privacy and alternative communication platforms. The site is hosted on privacy-conscious infrastructure (Njalla) and uses Umami analytics, reflecting a preference for minimal user tracking. Technically, the site employs standard HTML, CSS, and JavaScript with no major frameworks detected. The performance and mobile optimization are basic but functional. Security posture is moderate; HTTPS is used, but no DNSSEC or security headers are implemented, and no privacy or cookie policies are present, which limits compliance maturity. The site does not expose sensitive data but lacks advanced security controls. Overall, the security posture is adequate for a personal site but would require enhancements for commercial or higher-risk use cases. The domain registration is consistent with the site's nature, showing no suspicious patterns. The absence of direct contact emails or phone numbers and lack of formal policies reduce business credibility and privacy compliance scores. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies, and improving form security. These steps would enhance trust, compliance, and security posture while maintaining the site's privacy-conscious ethos.

P

Private by Design, LLC

pancakes.gay

46

The website pancakes.gay is a personal portfolio and project showcase site belonging to a 22-year-old non-binary individual from Australia. It focuses on technology interests such as Linux, programming, and Fediverse-related projects. The site is built using modern web technologies including SvelteKit and JavaScript modules, providing a good user experience with clear navigation and mobile optimization. The domain is very new, registered in November 2024, consistent with the recent content and projects presented. Security posture is moderate with domain-level protections like clientDeleteProhibited status but lacks DNSSEC and security headers. No privacy or cookie policies are present, and no direct contact emails or phone numbers are provided, limiting compliance and trust signals. Overall, the site is safe, non-commercial, and targeted at a general audience interested in technology and open source.

A

Autumn Town

autumn.town

56

Autumn Town is a personal website operated by an individual named Autumn, focusing on personal blogging, photography, programming, and hardware/software projects. The site is positioned as a creative outlet rather than a commercial business, targeting a general audience interested in personal and indie content. The website is built using the Hugo static site generator and hosted via Cloudflare, ensuring fast performance and HTTPS security. The technical infrastructure is modern and lightweight, with minimal external dependencies and good mobile optimization. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is low due to absence of privacy and cookie policies. Overall, the site is trustworthy as a personal project but would benefit from enhanced security and compliance measures.

S

StG - " + coolPhrase[shuffleOne] + "

skyetheguy.com

51

The website skyetheguy.com is a personal portfolio site representing an individual known as Skye Sonomura or Skyetheguy, focusing on animation, editorial, and sound. The site content is minimal and primarily serves as a showcase with embedded video content and basic navigation. The domain is registered since 2014 with a reputable registrar and shows no signs of privacy protection or suspicious registration patterns, indicating legitimacy for a personal brand site. Technically, the site uses basic HTML, CSS, and JavaScript with embedded Vimeo video content. Hosting appears to be via Powweb based on nameservers. The site lacks modern security features such as HTTPS enforcement, security headers, and accessibility enhancements. There is no evidence of analytics, tracking, or advertising technologies, suggesting a low digital maturity level. From a security perspective, the site has a low security posture with no privacy or cookie policies, no incident response or security contact information, and no visible security headers or HTTPS enforcement. The domain status clientTransferProhibited provides some protection against unauthorized domain transfers. Overall, the site is low risk but would benefit from improved security and compliance measures. The overall risk assessment is moderate due to the lack of security and privacy controls, but no critical vulnerabilities or malicious content were detected. Strategic recommendations include enabling HTTPS, adding privacy and cookie policies, implementing security headers, and providing clear contact and incident response information to enhance trust and compliance.

T

Telepath

telepath.im

59

Telepath is a small technology service provider offering free-of-charge public chat and VoIP services using XMPP, IRC, and Mumble protocols. The service emphasizes privacy and freedom of speech, positioning itself as a niche alternative to mainstream chat platforms. The website is professionally designed with clear navigation and good mobile optimization, hosted by FSKY, a known hosting provider. Technical infrastructure is modern and clean, though no CMS or advanced frameworks are detected. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. Privacy and cookie policies are absent, which reduces compliance confidence. Overall, the domain registration data aligns well with the hosting and service claims, indicating legitimacy. The website content is safe for general audiences with no adult or explicit content.

P

For Sale Page

panther.co

50

The analyzed website at panther.co currently serves as a domain for sale placeholder page, indicating that the domain is not actively used for business operations. The content is minimal, with no privacy policies, contact information, or business descriptions present. The domain was registered recently in 2025 by an individual in the US, consistent with the domain's current status. Technically, the site uses basic HTML and CSS served from spaceship-cdn.com, with no advanced frameworks or CMS detected. Security configurations are minimal, with no DNSSEC enabled and no security headers observed. There is no evidence of HTTPS enforcement or privacy compliance mechanisms. Overall, the site lacks business credibility and trust indicators, reflecting its placeholder nature.

X

Xeno

getxeno.com

64

Xeno is a technology company offering a next-generation AI-powered CRM solution tailored for the retail industry. Their platform focuses on maximizing repeat revenue through personalized marketing communications across multiple channels including SMS, Email, Whatsapp, and Instagram. The website positions Xeno as an innovative player in the retail CRM market with key services including customer engagement, loyalty programs, and offer management. The digital presence is built on modern web technologies such as Webflow CMS, Google Analytics, and Facebook Pixel, indicating a mature digital marketing infrastructure. However, the absence of WHOIS data raises questions about domain registration legitimacy, which should be further investigated. Security posture is adequate with HTTPS enabled and secure forms, but lacks important security headers and visible privacy compliance documentation. Overall, the website is professional and well-designed, targeting retail businesses seeking advanced CRM solutions.

The website hwii.net is a personal site focused on esoteric and mystical topics, including Kabbalah and personal writings. It serves as a platform for the site owner to share blog-like content and miscellaneous writings, targeting a general audience interested in mysticism and religion. The site is small-scale and non-commercial, with a recent domain registration in 2024 consistent with the stated history of the site. Technically, the site uses basic HTML, CSS, and JavaScript with MathJax for rendering mathematical notation. It is hosted behind Cloudflare with HTTPS enabled, ensuring secure transport. However, the site lacks advanced security headers and does not implement privacy or cookie policies, which limits its compliance posture. No forms or tracking technologies are present, indicating minimal data collection and user tracking.

A

yz authenyo.x

authenyo.xyz

62

authenyo.xyz is a personal website operated by an individual named Iris, who identifies as a Brazilian DEI hire at OpenAI and a government department. The site serves as a personal blog and a hub for various self-hosted projects including Fediverse instances, a Minecraft server, and streaming services. The website is built using the Zola static site generator and hosted on a VPS provider (Netcup) with DNS managed by Cloudflare. The content is primarily personal and technical in nature, targeting general internet users interested in niche internet culture and self-hosting. Technically, the site uses modern web technologies including HTML5, CSS, JavaScript, and integrates third-party scripts for analytics from a suspicious domain. The site lacks advanced security headers and DNSSEC is not enabled, which presents moderate security risks. The website is moderately optimized for performance and mobile use but lacks comprehensive privacy and cookie policies, which impacts compliance with GDPR and other privacy regulations. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks explicit security policies and incident response information. The use of privacy protection in WHOIS is justified given the personal nature of the site, but the presence of an external tracking script from a suspicious domain is a concern. No contact information or formal business credentials are provided, limiting trust and business credibility. Overall, the website is functional and content-rich for its niche but requires improvements in security posture, privacy compliance, and transparency to enhance trustworthiness and reduce risk.

N

home // notfire.cc

notfire.cc

57

The website notfire.cc is a personal or hobbyist homepage featuring a simple layout with links to blog, services, and contact pages. It encourages visitor interaction through a guestbook and links to various other personal or community sites. The site does not present itself as a commercial business and lacks formal business information or contact details. Technically, the site is built with basic HTML, CSS, and JavaScript without advanced frameworks or CMS. The performance and mobile optimization are moderate to basic, with no advanced SEO or accessibility features detected. Security posture is minimal with no visible security headers or privacy policies, and no HTTPS confirmation in the provided data. No analytics or advertising scripts are present, indicating minimal user tracking. Overall, the site is safe for general audiences with no adult content or explicit material detected.

abtmtr.link is a small technology-focused domain managed by an individual or small entity named MeowcaTheoRange. The website serves as a hub for various community and personal projects including a CDN directory, Discord server, Minecraft server, and Nextcloud service. The site content is minimal but functional, targeting a general audience interested in these services. The domain is recently registered with privacy protection, consistent with the site's scale and nature. Technically, the site uses basic HTML and CSS with Cloudflare DNS services but lacks advanced frameworks or CMS. Performance and mobile optimization are basic, and SEO and accessibility features are minimal. No analytics or tracking technologies are detected, indicating a privacy-conscious approach. From a security perspective, the site lacks published security policies, privacy or cookie policies, and contact information for incident response. DNSSEC is not enabled, and no security headers are detected, which lowers the security posture score. However, no critical vulnerabilities or exposed sensitive data were found. The domain registration is privacy protected but legitimate, with no suspicious patterns. Overall, the site is safe and suitable for general audiences but would benefit from improved security practices, privacy compliance, and transparency to enhance trust and professionalism.

V

velzie.rip

velzie.rip

57

The website velzie.rip is a personal site belonging to an individual named velzie, who is a programmer, neovim evangelist, and open source contributor. The site serves as a portfolio and blog, showcasing software projects and interests in gaming and music. It targets a general audience interested in technology and programming, with a small-scale, hobbyist business model. The site is hosted on Cloudflare and uses modern web technologies including JavaScript ES modules and a lightweight router for enhanced user experience. The technical infrastructure is modern and performant, with good mobile optimization and SEO practices. Security posture is moderate; HTTPS is implied via Cloudflare hosting, but DNSSEC is not enabled and security headers are missing. Privacy compliance is minimal, with no privacy or cookie policies present. Contact information is limited to a single verified email address. Overall, the site is trustworthy for its purpose but lacks formal security and privacy documentation.

P

Private by Design, LLC

nyatalie.fyi

61

The website nyatalie.fyi is a personal site belonging to an individual named Natalie, who is engaged in gaming console hardmods and has interests in high-speed trains. The site serves primarily as a personal branding and community connection platform, linking to various social and federated networks. The domain is newly registered in 2025 under the company Private by Design, LLC, consistent with the site's copyright year. Technically, the site is built with basic HTML and CSS, uses HTTPS, and includes WebP images. It lacks advanced security headers and privacy-related policies, which limits its compliance posture. No forms or data collection mechanisms are present, and no analytics or tracking scripts were detected, indicating minimal user tracking. Security-wise, the site benefits from domain status protections but could improve by enabling DNSSEC and adding security headers. Overall, the site is safe, well-structured for its purpose, but lacks formal privacy and security policies.

V

VINYL

vinyl.vc

44

VINYL is a formation stage venture capital fund specializing in commerce infrastructure, focusing on early-stage startups that build the systems and solutions powering the future economy. The website presents a curated portfolio of companies, many of which are pre-revenue and pre-product, emphasizing a niche investment approach. The site branding is consistent and professional, targeting commerce startups and investors interested in foundational commerce technologies. Technically, the website uses modern JavaScript modules, Google Fonts, and Google Analytics for tracking. The site is mobile-optimized with a visually engaging design but lacks advanced accessibility features and comprehensive SEO optimizations. No CMS or hosting provider details are evident from the content. Performance is moderate, with no critical errors or broken elements detected. From a security perspective, the site uses HTTPS but lacks visible security headers and does not provide privacy, cookie, or terms of service policies. There are no forms or data collection points, reducing immediate risk exposure. However, the absence of privacy compliance mechanisms and incident response contacts indicates room for improvement in regulatory adherence and security posture. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security best practices, and clearer contact information to improve trust and regulatory alignment.

S

Syft Data, Inc.

getsyft.app

73

Syft Data, Inc. operates a technology-driven SaaS platform focused on identifying high-intent person-level leads from inbound website traffic and LinkedIn engagements. Their AI-powered solution automates multi-channel outreach campaigns, enabling marketing and growth teams to capture revenue opportunities efficiently. The company positions itself as a trusted partner for lean, fast-moving teams, supported by customer testimonials and case studies. Technically, the website is built on modern frameworks such as Next.js and React, with strong mobile optimization and good SEO practices. Security posture is robust with HTTPS, security headers, and consent management via Cookiebot, although explicit security policies and incident response details are not published. Overall, the domain registration and website content are consistent and legitimate, reflecting a professional and trustworthy business presence.

F

Fastmail Pty Ltd

fastmail.com

71

Fastmail Pty Ltd operates a professional email and calendar hosting service focused on privacy, security, and productivity for individuals and businesses. The company positions itself as an independent alternative to major providers like Gmail and iCloud, emphasizing no ads, no data mining, and strong user control. The website is well-designed, mobile-optimized, and rich in content that clearly communicates the business value and service features. Technical infrastructure leverages modern web technologies with fast performance and good accessibility, although explicit security headers are not evident in the HTML source. The security posture is strong with HTTPS enforced, a bug bounty program, and clear incident response channels, but could be improved by publishing a security.txt file and adding more visible certifications. Privacy compliance is robust with comprehensive privacy and cookie policies and GDPR adherence. WHOIS data for the domain is unavailable from the provided raw output, which is unusual and reduces transparency, but the website content and external presence strongly indicate legitimacy. Overall, the site scores well on content quality, technical implementation, security, privacy, and business credibility, making it a trustworthy and professional service provider.

G

Greatsword

greatsword.xyz

56

Greatsword.xyz is a personal hobbyist website launched in mid-2024, focusing on pixel art, low-poly 3D modelling, music, and Free Software interests. The site also hosts an XMPP server and provides links to related projects and Free Software communities. It targets enthusiasts in these niche areas rather than commercial customers. The website is simple, built with basic HTML and CSS, and lacks advanced technical frameworks or CMS platforms. Hosting and DNS are managed via Namecheap and desec.io respectively, with no DNSSEC enabled. Security posture is minimal with no security headers detected and no privacy or cookie policies published. The domain is privacy protected, which aligns with the personal nature of the site. No contact emails or phone numbers are provided, limiting business credibility and compliance indicators. Overall, the site is functional but basic, with moderate trustworthiness given the lack of formal business information and security best practices.

Cornbread2100 is a small-scale technology project website focused on providing Minecraft-related tools and utilities, including a Minecraft Server Scanner Discord bot, a Minecraft Ping API, and tools for the game n-gon. The site targets Minecraft players and developers interested in open-source gaming tools. The business model appears to be community-driven and open source, with no direct commercial offerings visible. Technically, the website is built with basic HTML, CSS, and JavaScript, with links to GitHub repositories and Discord for community engagement. The site is accessible without any WAF or security challenges, but lacks HTTPS and security headers, which reduces its security posture. No privacy or cookie policies are present, and no contact information is provided, limiting compliance and trust. WHOIS data is missing or unavailable, raising questions about domain legitimacy despite the professional content. Overall, the site is functional and relevant for its niche but requires improvements in security, compliance, and transparency to enhance trust and professionalism.

N

N/A

112batman.com

59

112batman.com is a personal website representing an individual named Tijn. The site serves primarily as a contact and social hub, emphasizing privacy-conscious communication channels such as Matrix and PGP-encrypted email. The website provides links to various social and development platforms including GitHub, Discord, and a Forgejo Git instance. The content is straightforward, professional, and targeted at general internet users interested in contacting or following the individual. The domain is recently registered in 2023, consistent with the personal nature of the site. From a technical perspective, the website uses standard HTML5 and CSS with SVG icons for visual elements. It is hosted via Cloudflare, providing reliable infrastructure and HTTPS support. The site is moderately optimized for mobile devices and has a clean, consistent design. However, there is no evidence of advanced frameworks or CMS usage, indicating a simple static site architecture. Security posture is adequate but could be improved. HTTPS is enforced, and the domain has a clientTransferProhibited status, which helps prevent unauthorized transfers. The publication of a PGP public key is a positive security indicator. However, the absence of DNSSEC, security headers, and formal security or incident response policies limits the overall security maturity. No vulnerabilities or malicious content were detected. Overall, the website is safe, trustworthy, and serves its purpose well as a personal contact portal. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and enhancing accessibility features to improve compliance and security posture.

G

Home

gemmebacon.com

60

GemmeBacon.com is a small personal website focused on technology content, specifically daily CPU posts and related topics. The site serves a general audience interested in technology and gaming, providing links to various related resources and personal content. The business model appears to be content creation and personal sharing without commercial transactions or formal business operations. The website is relatively new, founded in 2023, and hosted using Cloudflare services for DNS and CDN. Technically, the site uses basic HTML and CSS with minimal frameworks or CMS detected. It includes Cloudflare Insights for analytics but lacks advanced SEO, accessibility, or performance optimizations. Mobile optimization is basic, and the site structure is simple but navigable. Security measures include HTTPS and domain transfer protection, but DNSSEC is not enabled, and no security headers are present. From a security perspective, the site has a moderate posture with no critical vulnerabilities detected. However, the absence of privacy and cookie policies, lack of formal contact information, and missing security headers represent compliance and security gaps. The WHOIS data is consistent with the website's nature and age, registered via a reputable registrar without privacy protection, which aligns with the site's personal use. Overall, the site is safe and appropriate for general audiences but would benefit from improved privacy compliance, enhanced security headers, and more professional contact mechanisms to increase trust and security posture.

S

Scuttlebutt

scuttlebutt.nz

54

Scuttlebutt is a small technology-focused organization providing a decentralized social networking platform aimed at empowering local communities and offering an alternative to large corporate social networks. The website serves as an informational and educational resource with links to talks, videos, and documentation. The platform is community-driven and funded via Open Collective, reflecting an open-source ethos. Technically, the website is built using the Hugo static site generator, leveraging modern web technologies such as HTML5, CSS, and JavaScript for embedding Vimeo and YouTube videos. The site is hosted under a reputable registrar with stable DNS configuration but lacks DNSSEC. Performance and mobile optimization are good, though accessibility and SEO are basic. From a security perspective, the site uses HTTPS but lacks visible security headers and DNSSEC, which are recommended for enhanced security. No forms or user input fields reduce attack surface, but the absence of privacy, cookie, and terms of service policies indicates compliance gaps. No contact or incident response information is provided, limiting transparency. Overall, the website is trustworthy and professional but would benefit from improved privacy compliance, security hardening, and clearer contact channels to enhance user trust and regulatory adherence.