Security Directory

S

Skwodo's website

skwodo.com

57

The website skwodo.com is a personal portfolio site belonging to a beginner programmer from Poland named Skwodo. The site primarily serves as a personal presence and a showcase of programming interests, focusing on frontend development. It includes links to friends' websites and the source code repository on GitHub. The business model is minimal and personal, with no commercial or enterprise features. The market position is niche and informal, targeting general visitors interested in the author's programming journey. Technically, the site is built using the Zola static site generator, served with HTML, CSS, and JavaScript, and hosted behind Cloudflare DNS servers. The site is basic in design and functionality, with moderate performance and basic mobile optimization. No advanced CMS or analytics tools are detected, indicating a simple and lightweight infrastructure. From a security perspective, the site lacks several best practices such as security headers, privacy and cookie policies, and contact information for incident response. DNSSEC is not enabled, and no vulnerability disclosure or security policy information is present. However, no critical vulnerabilities or blocking mechanisms are detected, and the domain registration details are consistent and appropriate for a personal site. Overall, the site is low risk but also low in professionalism and compliance. Strategic improvements in privacy compliance, security headers, and contact information would enhance trust and security posture.

The website lemonsh.moe is a personal portfolio and blog site operated by an individual named lemonsh, a technology enthusiast from Poland. The site focuses on topics such as *nix operating systems, networking, programming, and retro-computing, with additional interests in music, cycling, photography, and graphic design. The site serves as a platform to showcase projects, share blog content, and provide contact information for community engagement. It is positioned as a niche personal tech presence rather than a commercial business. Technically, the website is built using the Zola static site generator and hosted with Cloudflare DNS services. The tech stack includes Rust, C, C#, Java, HTML/CSS, Bash, and some JavaScript, reflecting the owner's programming skills. The site is served over HTTPS with a good SSL configuration but lacks DNSSEC and security headers. Performance and mobile optimization are moderate to basic, with no detected analytics or tracking scripts, indicating a privacy-conscious approach. From a security perspective, the site benefits from HTTPS and WHOIS privacy protection, which is justified for a personal site. However, it lacks formal privacy, cookie, or terms of service policies, and no incident response or vulnerability disclosure information is provided. No security headers are detected, and no forms or data collection mechanisms are present, reducing attack surface but also limiting user interaction. The site content is safe for general audiences with no adult or questionable material. Overall, the website demonstrates a good level of professionalism and technical competence for a personal project. The main risks relate to missing privacy and security policies and the absence of security headers. Strategic improvements in these areas would enhance trust and compliance. The domain registration is legitimate and consistent with the site’s nature, with no suspicious indicators.

H

Haskell.org, Inc.

haskell.org

51

Haskell.org is the official home page for the Haskell programming language, a purely functional, statically typed language widely used in academia and industry. The site serves as a comprehensive resource hub offering documentation, downloads, community engagement, and educational tools such as an interactive playground. It is maintained by Haskell.org, Inc., a non-profit organization, and supported by reputable sponsors and partners including Fastly, Status.io, Scarf, DreamHost, and Digital Ocean. The website targets developers and programmers interested in functional programming paradigms and aims to promote the adoption and understanding of Haskell. Technically, the website is well-constructed using modern web technologies including Bootstrap, jQuery, and Glider.js for UI components. It leverages CDN and cloud hosting providers to ensure fast and reliable access globally. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. However, explicit privacy and cookie policies are not present, and no contact emails or phone numbers are listed, which could be improved for transparency and compliance. From a security perspective, the site uses HTTPS and has a dedicated security page, but lacks explicit security headers and a published security.txt file for vulnerability disclosure. No obvious vulnerabilities or exposed sensitive data were detected. The WHOIS data for the domain is incomplete or unavailable, which slightly reduces trustworthiness but is mitigated by the site's professional appearance, community trust, and sponsorships. Overall, Haskell.org is a high-quality, trustworthy resource for the Haskell community with strong technical foundations and good security posture. Enhancements in privacy compliance, security header implementation, and WHOIS transparency would further strengthen its credibility and user trust.

Loveshock.xyz is a small personal website operated by the Digital Star System, serving as a cozy online space focused on music, technology, and curated interests. The site offers blog content and links to related interests but does not represent a commercial business. The technical infrastructure is simple, using basic HTML, CSS, and JavaScript, hosted likely on Neocities with domain registration via Squarespace Domains. The site is accessible, mobile responsive at a basic level, and uses Cloudflare DNS without DNSSEC enabled. Security posture is moderate with HTTPS enabled but lacking security headers and formal policies. Privacy and compliance documentation are absent, and no contact information is provided, limiting business credibility. Overall, the site is safe and family-friendly with no adult content or suspicious elements.

The website reimu.info is a personal hobbyist site titled "Ezio's webpage" that hosts various files useful for outdated operating systems and shares personal interests such as anime reviews and VR Google Earth pictures. It targets a niche audience of technology enthusiasts and hobbyists rather than commercial customers. The site is small in scale, with no evident business model or commercial intent, and was registered in 2022 with privacy protection enabled. Technically, the site is simple, built with basic HTML and CSS, and uses Cloudflare for DNS hosting without DNSSEC enabled. There is no evidence of a CMS or advanced frameworks. The site performance is moderate with basic mobile optimization and accessibility. SEO optimization is minimal, and no analytics or tracking services are detected. From a security perspective, the site lacks HTTPS confirmation in the provided data, has no security headers, and does not implement privacy or cookie policies. No forms or data collection mechanisms are present, reducing attack surface but also indicating minimal user engagement features. The WHOIS data shows privacy protection, which is justified given the personal nature of the site. No vulnerabilities or suspicious patterns were detected. Overall, the site is low risk but also low in professionalism and compliance. Strategic recommendations include enabling HTTPS with strong TLS, adding security headers, publishing privacy and cookie policies, and improving technical SEO and accessibility to enhance user experience and trust.

P

Private by Design, LLC

alia.science

60

The website alia.science is a personal portfolio and blog site titled 'Alia Lescoulie', operated by an entity registered as Private by Design, LLC in the US. The site features sections about the author, projects, and blog posts focused on science, technology, and games. It serves a general audience interested in these topics and functions primarily as a personal showcase and content platform. The domain is newly registered in 2024, consistent with the site's content and scope. Technically, the site is built with basic HTML and CSS without advanced frameworks or CMS detected. Hosting and DNS services appear to be provided by Porkbun, the registrar. The site shows moderate performance and basic mobile optimization but lacks modern security headers and DNSSEC. No analytics or advertising technologies are present, indicating minimal tracking and a privacy-conscious approach. From a security perspective, the site uses HTTPS (assumed but not explicitly confirmed), but no security headers or policies are implemented. There are no privacy or cookie policies, no contact or incident response information, and no vulnerability disclosure mechanisms. The WHOIS data is transparent and consistent with the website content, with no suspicious patterns. Overall, the security posture is basic and could be improved with standard best practices. The overall risk is low given the personal nature and limited data collection, but the site would benefit from adding privacy and security policies, enabling DNSSEC, and improving security headers to enhance trust and compliance.

S

SERVFAIL :: main

servfail.network

57

Project SERVFAIL is a small-scale, open-source authoritative DNS nameserver network currently in beta. It offers free DNS hosting services with a lightweight, no-JavaScript web interface and a PowerDNS-compatible API for automation. The project is community-driven with collaboration among several contributors and encourages donations and contributions. The website content is technical and targeted at DNS users and beta testers. The market position is niche, focusing on DNS infrastructure enthusiasts and small-scale users. Technically, the website uses basic HTML and CSS without JavaScript, which reduces attack surface but also limits interactivity. The site lacks advanced frameworks or CMS and shows moderate performance and basic mobile optimization. No explicit hosting provider or SSL configuration details were found. The site links to several partner domains and community resources, indicating an active ecosystem. From a security perspective, the site lacks visible HTTPS enforcement and security headers, and no privacy or cookie policies are present, which impacts compliance and trust. The WHOIS data is unavailable or malformed, limiting domain legitimacy verification. No contact emails or phone numbers are provided, reducing transparency. However, the open-source nature and community engagement are positive trust signals. Overall, the site is functional and relevant for its niche but requires improvements in security posture, privacy compliance, and domain transparency to enhance trust and professional credibility.

The website cqql.site is a personal technical blog operated by an individual or small entity registered as Njalla Okta LLC in Saint Kitts and Nevis. The site focuses on technology-related content including hacking tutorials, generative art, CTF writeups, and queer/trans community resources. It serves a niche audience of technology enthusiasts and members of the queer/trans community interested in technical topics. The business model is content publishing and community engagement without evident commercial transactions. The domain is newly registered in May 2024 with privacy protection, consistent with the website's privacy-conscious theme. Technically, the site is a static HTML/CSS site hosted via Njalla, a privacy-focused hosting provider. The site is basic but functional with good content relevance and navigation clarity. Mobile optimization and accessibility are basic but adequate. No CMS or advanced frameworks are detected. Performance is likely fast due to static content delivery. SEO and metadata are minimal but present. From a security perspective, the site lacks HTTPS enforcement information and security headers in the provided data, which lowers its security posture. No privacy or cookie policies are present, indicating limited compliance with privacy regulations. No forms or data collection mechanisms are detected, reducing exposure to input-based vulnerabilities. The domain registration is legitimate and consistent with the website content and operator profile. No WAF or blocking mechanisms are detected. Overall, the site is a safe, niche personal blog with moderate trustworthiness but could improve security and privacy compliance. Strategic recommendations include implementing HTTPS with HSTS, adding security headers, publishing privacy and cookie policies, and establishing vulnerability disclosure and incident response information to enhance trust and security posture.

The website at pythons.site appears to be a personal or hobbyist project launched recently in April 2024. It features minimal content focused on creative expression, including an autoplaying audio file and animated images, but lacks any clear business or commercial purpose. The site does not provide privacy, cookie, or terms of service policies, nor does it offer any contact information or business details. Technically, the site uses basic HTML, CSS, and JavaScript without modern frameworks or CMS platforms. Hosting is provided by Namecheap, but no HTTPS or security headers were detected in the provided data, indicating a weak security posture. The presence of a suspicious executable download link hosted on a Discord CDN raises potential security concerns. WHOIS data shows the domain is privacy-protected and very new, consistent with a non-commercial or experimental site. Overall, the site scores low on content quality, security, and business credibility, with no indicators of tracking or advertising.

P

Private by Design, LLC

msx.gay

56

The website msx.gay is a personal portfolio and social presence site belonging to an individual known as msxdotgay, a neurodivergent young adult from rural Iowa. The site serves as a platform to share personal projects, photography, writings, and interests including LGBTQ+ identity and cats. The business model is non-commercial and focused on personal expression and community engagement. The domain is registered under Private by Design, LLC, a privacy-focused registrar, consistent with the personal nature of the site. Technically, the site is hosted on Neocities, uses basic HTML, CSS, and JavaScript, and includes a small external script for a cat animation. The site is served over HTTPS but lacks advanced security headers and modern CMS or frameworks. Performance and mobile optimization are basic but functional. No analytics or tracking scripts are present, indicating a privacy-conscious approach. From a security perspective, the site benefits from HTTPS and domain transfer protections but lacks DNSSEC and security headers. There are no forms or data collection points, reducing attack surface. However, the absence of privacy and cookie policies, security.txt, and vulnerability disclosure mechanisms indicates room for improvement in compliance and security transparency. Overall, the site is safe, family-friendly, and trustworthy as a personal website. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and publishing a security.txt file to enhance security posture and compliance.

P

Private by Design, LLC

lea.pet

59

The website lea.pet is a personal instance of the Sharkey social platform, designed for a small community of friends. It operates under the domain registered to Private by Design, LLC, a US-based organization. The site offers social networking services with a focus on personal and community content sharing. The business model is niche and community-oriented, with no commercial or enterprise scale indications. The technical infrastructure uses modern web technologies including JavaScript and CSS, with a custom theme and no detected CMS. Hosting details are not explicit, and the domain uses suspicious name servers which may pose security concerns. The site is accessible without WAF or blocking mechanisms and shows moderate performance and mobile optimization. Security posture is average with no DNSSEC and missing security headers, and privacy compliance is weak due to lack of privacy and cookie policies. The site contains adult-themed content and links, targeting a mature audience without age verification. Overall, the site is functional but has notable security and compliance gaps that should be addressed to improve trust and safety.

The website brodokk.space serves as a personal homepage for an individual known as Brodokk, who identifies as a Fennec fox persona. The site highlights personal and professional programming activities, server management, and participation in various online communities and projects. The content is straightforward, primarily textual with some images, and links to multiple social media and community platforms. The website is small-scale and targeted at a general audience interested in technology and creative online communities. From a technical perspective, the site is built with basic HTML and CSS, hosted by Gandi SAS, and does not use any advanced frameworks or CMS. The site is moderately optimized for mobile devices and accessibility but lacks advanced SEO and performance optimizations. No analytics or advertising technologies are detected, indicating a privacy-conscious or minimalistic approach. Security posture is basic; the domain uses HTTPS (implied by the URL), but no DNSSEC is enabled, and no security headers are present. There are no forms or data collection points, reducing attack surface but also limiting user interaction. The WHOIS data is transparent and consistent with the website's personal nature, with no privacy protection used. No privacy or cookie policies are present, which is a compliance gap. Overall, the website is low risk, safe for general audiences, and serves as a personal portfolio and community hub. Strategic recommendations include improving security headers, adding privacy and cookie policies, enabling DNSSEC, and enhancing mobile and accessibility features to improve user experience and compliance.

Arcane Sorrows is a personal website operated by an individual known as mossweaver, presenting a cozy, artistic corner of the internet focused on personal interests and curated content. The site is small-scale, non-commercial, and currently under construction with limited content. The target audience appears to be general internet users interested in personal blogs, art, and niche communities. Technically, the site is built with basic HTML, CSS, and JavaScript, hosted on Hover's infrastructure, and includes external scripts for a webring widget. The site lacks advanced frameworks or CMS platforms and shows basic mobile optimization and accessibility. Security posture is minimal with no DNSSEC, no security headers, and no visible HTTPS enforcement details. Privacy and compliance policies are absent, and no contact or incident response information is provided. The domain registration is consistent with the site's personal nature and shows no suspicious patterns. Overall, the site is safe for general audiences but lacks professional security and compliance features.

D

dragon.style

dragon.style

58

Dragon.style is a small, niche Mastodon instance focused on providing a decentralized social media platform for a queer-friendly community. It is administered by an individual known as Gracious Anthracite, emphasizing a moderated, safe, and ad-free environment. The website serves as an about page detailing community rules, contact information, and donation options, reflecting a non-commercial, community-supported business model. Technically, the site runs Mastodon version 4.0.15, hosted on DigitalOcean, with a standard modern web stack including JavaScript and CSS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR-specific features. Overall, the site is trustworthy and professional for its scope but could improve security and privacy practices.

E

eldritch.cafe

eldritch.cafe

59

Eldritch.cafe operates as an independent Mastodon instance providing decentralized social media services primarily targeting queer, feminist, and anarchist communities, with a focus on French-speaking users. The platform emphasizes community moderation, inclusivity, and amplifying marginalized voices. It maintains a small but active user base and is hosted by Fedi Monster in France. The website content is bilingual and includes detailed moderation guidelines, credits, and legal notices consistent with French law. Technically, the site runs on a Glitch-soc fork of Mastodon, leveraging modern web technologies such as React and JavaScript. The infrastructure is moderately performant and mobile-optimized, though accessibility and SEO features are basic. Hosting and domain registration are consistent and legitimate, with HTTPS enabled and domain transfer protections in place. However, DNSSEC is not enabled, and security headers are absent, indicating room for improvement in security hardening. From a security perspective, the instance enforces clear community rules prohibiting hateful conduct, harassment, misinformation, and illegal content. While no explicit security policy or incident response contacts are published, the moderation team is transparent and active. Privacy compliance is adequate with a privacy policy present, but the absence of a cookie consent mechanism is a minor gap. No vulnerabilities or suspicious patterns were detected in the analysis. Overall, eldritch.cafe presents a trustworthy, community-driven social media platform with a solid technical foundation and clear governance. Strategic enhancements in security headers, cookie consent, and incident response transparency would further strengthen its security posture and compliance standing.

V

VSCodium

vscodium.com

54

VSCodium is a community-driven open source project that provides freely-licensed binaries of Microsoft's VS Code editor without telemetry or proprietary licensing. It targets developers and programmers who prefer open source software with privacy considerations. The website offers comprehensive installation instructions across multiple platforms and package managers, emphasizing ease of access to MIT-licensed VS Code binaries. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and external libraries like AnchorJS and Font Awesome, hosted with Cloudflare DNS services. The site is well-structured, mobile-optimized, and fast loading, with good SEO practices but lacks some accessibility features. Security-wise, the project demonstrates good practices by disabling telemetry and signing Windows binaries, but the website itself lacks explicit security headers, privacy policies, and incident response information, which are areas for improvement. Overall, the domain registration is consistent and transparent, supporting the legitimacy of the project. The site contains no adult or questionable content and is safe for general audiences.

T

The Khronos Group, Inc.

opengl.org

70

The Khronos Group operates the official OpenGL website, providing authoritative resources, documentation, and news for the OpenGL graphics API. The organization is well-established with a domain registered since 1997, reflecting its long-standing presence in the graphics technology industry. The website targets developers and technology professionals seeking high-performance graphics standards and related tools. Technically, the site employs modern web technologies including HTML5, CSS, JavaScript, and integrates Google Analytics and Tag Manager for tracking and search functionality. Hosting is provided by DigitalOcean, ensuring reliable infrastructure. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism despite use of tracking scripts. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and serves as a key resource hub for the graphics development community.

RARLAB operates the official website for WinRAR, a widely used file archiving software supporting RAR and ZIP formats. The company, win.rar GmbH, has a long-standing presence since 2002 and offers software downloads, licensing, and partner programs. The website is professionally designed with clear navigation and provides essential information about the product and purchasing options. Technically, the site uses jQuery and standard web technologies with basic mobile optimization and accessibility. Security posture is moderate with cookie consent implemented but lacks visible security headers and explicit HTTPS verification. WHOIS data is unavailable, which slightly reduces trust but is common for software vendors. Overall, the site is safe, trustworthy, and serves a general audience without any adult or questionable content.

X

xkcd: Geologic Periods

xkcd.com

9

xkcd.com is a popular webcomic site delivering humor and intellectual content centered on romance, sarcasm, math, and language. The site targets a general audience interested in science and technology humor and maintains a consistent brand presence with active social media channels. The business model primarily revolves around content publishing, newsletter distribution, and book sales. Technically, the site uses standard web technologies (HTML, CSS, JavaScript) with moderate performance and basic mobile optimization. Security posture is moderate but lacks advanced security headers and visible privacy or cookie policies, which could be improved to enhance user trust and compliance. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy and security measures.

C

CSL Computer Service Langenbach GmbH d/b/a joker.com

modarchive.org

9

The Mod Archive is a well-established niche media platform hosting one of the world's largest collections of music modules, serving musicians, demoscene enthusiasts, and casual visitors. The site offers a community-driven model with user accounts, module uploads, favorites, and forums, supported by donations and hosted by SceneSat. The platform has a consistent brand and a long history dating back to 1996, with the domain registered since 2004. Technically, the website uses basic web technologies including HTML, CSS, JavaScript, and jQuery, with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS implied but lacking DNSSEC and security headers, and no visible advanced security policies or incident response contacts. Privacy compliance is limited, with no cookie consent or explicit GDPR compliance indicators. Overall, the site is trustworthy and functional but would benefit from enhanced security and privacy measures.

G

Giorgio Maone

noscript.net

10

NoScript.net is the official website for the NoScript Security Suite, a free and open-source browser extension that enhances user security by blocking malicious scripts and allowing trusted content only. The project is well-established since 2005 and is integrated into the Tor Browser, positioning it as a trusted tool in the privacy and security software market. The website targets privacy-conscious users and security experts seeking enhanced browser protection. The business model is donation-based, emphasizing free software principles. Technically, the website is built with standard web technologies (HTML, CSS, JavaScript) and supports multiple major browsers. The site is well-structured, mobile-optimized, and accessible, with good SEO practices. However, some modern security enhancements like DNSSEC are not enabled, and no explicit security headers were detected in the provided data. The site does not appear to use any CMS or complex frameworks, reflecting a lightweight and focused technical infrastructure. From a security perspective, the website promotes strong security practices through its product, including script blocking and anti-XSS protections. However, the site itself lacks published privacy, cookie, or security policies, and no contact information or vulnerability disclosure mechanisms are provided. DNSSEC absence and missing security headers represent minor security gaps. Overall, the security posture is good but could be improved with better transparency and technical hardening. The overall risk assessment is low given the nature of the site and its content. Strategic recommendations include publishing privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear contact and vulnerability disclosure information to enhance trust and compliance.

Open Camera is a small-scale, open source software project focused on providing an advanced camera application for Android devices. The website serves primarily as an informational and download portal, featuring detailed descriptions of app features, licensing, and links to source code repositories. The business model is based on free software distribution with revenue generated through website advertising. The target audience is Android users seeking enhanced camera functionality beyond stock apps. Technically, the website is a static site hosted by 123-Reg Limited, utilizing standard web technologies such as HTML, CSS, and JavaScript. It integrates Google services including Analytics, Tag Manager, and Adsense for tracking and monetization. The site is mobile-optimized with a basic but functional design and navigation structure. However, it lacks advanced CMS features and some modern security headers. From a security perspective, the site uses HTTPS (implied by domain and Google services usage) and implements cookie consent with anonymized IP tracking for analytics, indicating some privacy awareness. However, no explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are present. The absence of security headers and contact information for security incidents suggests room for improvement in security posture. Overall, the website is trustworthy and professionally maintained for its niche purpose but would benefit from enhanced security practices and clearer privacy compliance documentation. The domain registration data supports legitimacy with consistent and long-term ownership.

The website wolfyja.de is a personal site belonging to an individual named jade, a 21-year-old non-binary transfeminine person from Germany who identifies as a wolfy. The site serves as a personal blog and portfolio showcasing interests in vintage computing, Linux, trains, photography, and social engagement within hacker and maker communities. The site also promotes social media presence and community participation but does not represent a commercial business entity. Technically, the site is built with basic HTML and CSS, hosted with Cloudflare DNS services, and shows moderate performance and mobile optimization. However, it lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and trust. Security posture is basic with no visible vulnerabilities but also no formal security disclosures or incident response information. Overall, the site is safe, non-commercial, and targeted at a general audience interested in personal tech and social topics.

N

ninee's webbed site

ninee.xyz

62

The website ninee.neocities.org is a personal homepage primarily serving as a curated links page to various social, development, and personal interest sites. It does not represent a commercial business or organization and lacks detailed business information or contact data. The site is hosted on Neocities, a platform popular for personal and hobbyist web projects. The technical infrastructure is minimal, relying on basic HTML and CSS without advanced frameworks or CMS. Security posture is limited, with no detected security headers or privacy policies, and no HTTPS status information available from the data. The site content is safe, general audience appropriate, and free from adult or questionable material. Overall, the site is functional but basic, with room for improvement in security and privacy compliance.

P

Private by Design, LLC

moth.monster

60

moth.monster is a small personal and creative website operated by Private by Design, LLC, based in the US. The site features a blog, projects, art portfolio, an online shop, and contact information, targeting a general audience interested in creative content and merchandise. The business model appears to be content sharing combined with merchandise sales through an external shop platform. The website is modest in scale and positioned as a niche personal digital presence rather than a commercial enterprise. Technically, the website is built with standard HTML, CSS, and JavaScript without any detected CMS or advanced frameworks. Hosting and DNS services are provided by Porkbun, LLC. The site shows basic mobile optimization and SEO features but lacks advanced accessibility and performance enhancements. No analytics or advertising technologies are detected, indicating minimal user tracking and a privacy-conscious approach. From a security perspective, the domain is privacy protected and has domain status flags that prevent unauthorized transfers or deletions, which is positive. However, DNSSEC is not enabled, and no security headers are detected, which are areas for improvement. The site lacks privacy and cookie policies, vulnerability disclosure information, and incident response contacts, indicating gaps in compliance and security transparency. No WAF or blocking mechanisms are present, and the content is safe for general audiences. Overall, moth.monster is a modest, privacy-conscious personal website with basic technical and security posture. Strategic improvements in security headers, privacy compliance, and vulnerability disclosure would enhance trust and resilience. The site is low risk but would benefit from formalizing privacy and security practices to align with best practices.

S

The Barkzone

sugrstrz.com

56

SugrStrz.com is a personal website and blog maintained by an individual gamer and technology enthusiast. The site focuses on sharing personal interests including gaming, music, and social media engagement. It serves a niche audience of gaming and retro game fans as well as followers of the owner's social profiles. The business model is non-commercial, primarily a hobby/personal branding platform with no direct revenue streams or commercial services. The website is hosted on Neocities with DNS managed by Cloudflare and domain registration through GoDaddy, reflecting a modest but stable technical infrastructure. The site uses basic HTML, CSS, and JavaScript with some outdated elements such as the deprecated marquee tag, indicating room for modernization. Security posture is basic with no DNSSEC enabled and no visible security headers or HTTPS enforcement in the HTML content, though the domain registration status includes protective flags. Privacy and cookie policies are absent, and no contact or incident response information is provided, limiting compliance and trust signals. Overall, the site is safe for general audiences with no adult content detected. Recommendations include improving security configurations, adding privacy and cookie policies, and enhancing mobile and accessibility features to improve user experience and compliance.

F

fawnover.fun

fawnover.fun

45

fawnover.fun is a personal website operated by an individual named June, focusing on sharing media reviews, personal art, and social engagement across various platforms including Fediverse, Twitter, YouTube, Bluesky, Twitch, and Git.gay. The site features artistic SVG graphics and interactive elements such as theme switching and audio playback, reflecting a creative and personal brand. The domain is newly registered in December 2024 and uses privacy protection services, consistent with a personal blog rather than a commercial enterprise. Technically, the site is hosted behind Cloudflare DNS with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies. No analytics or tracking scripts are detected, indicating a privacy-conscious approach.

The website ielenia.lgbt is a personal homepage for Luna Aria Ielenia, a young transfeminine individual from the United States studying music and electronics engineering technology. The site primarily serves as a personal presence with links to social profiles on the fediverse and a partner site. It is a small-scale personal site without commercial business operations or complex services. The technical infrastructure is minimal, relying on static HTML and CSS, hosted under a domain registered with Porkbun LLC. The domain WHOIS data shows an unusual future creation date, which is inconsistent with the current date and website content, raising questions about data accuracy but not necessarily legitimacy. Security posture is basic with no advanced headers or policies implemented, and no privacy or cookie policies are present. The site does not use analytics or advertising technologies, indicating minimal user tracking and a focus on privacy. Overall, the site is safe for general audiences and serves as a personal digital identity hub.

Eloydegen.com is a personal website operated by Eloy, a retro technology enthusiast and hacker involved in the RevSpace community near The Hague. The site primarily serves as a blog and contact hub, sharing writings on technology, retro computing, and related topics. It targets a niche audience of technology hobbyists and open source contributors. The website is built using the Hugo static site generator and hosted on infrastructure associated with TransIP, featuring a simple, minimalistic design with basic mobile optimization and accessibility. Security posture is moderate with domain transfer protections but lacks DNSSEC and security headers. Privacy compliance is low due to absence of privacy and cookie policies. Overall, the site is trustworthy and legitimate but would benefit from enhanced security and compliance measures.

The website shift.gay is a personal portfolio site titled 'Shebang' belonging to an individual known as 'shebang' who shares links to personal projects, open source utilities, and creative web concepts. The site targets technology enthusiasts and the open source community, serving primarily as a showcase and link aggregator rather than a commercial business. The domain is recently registered in mid-2023 under a privacy-focused registrar, consistent with the personal nature of the site. Technically, the site is built with basic HTML and CSS, with no detected CMS or advanced frameworks. The hosting provider is not explicitly identified, but DNS nameservers suggest a decentralized or privacy-conscious setup. The site is moderately optimized for mobile and accessibility but lacks advanced SEO and performance optimizations. No analytics or advertising scripts are present, indicating minimal tracking. From a security perspective, the site lacks security headers, DNSSEC is not enabled, and no privacy or cookie policies are present, which lowers compliance and security posture scores. However, no critical vulnerabilities or exposed sensitive data were detected. The site uses HTTPS (implied by the URL) but no explicit SSL configuration details were provided. No contact information or incident response channels are available, limiting trust and business credibility. Overall, the site is low risk with safe content and a clear personal/technical focus but would benefit from improved security practices, privacy compliance, and contact transparency to enhance trustworthiness and compliance.

EEP.WTF is a personal website belonging to an individual named Ember, who identifies as a political activist, musician, and community-oriented person. The site serves as a personal expression platform rather than a commercial business, focusing on themes of justice, liberation, and community engagement. The website content is minimal but meaningful, with a casual and direct tone. The target audience is likely individuals interested in activism and personal narratives. Technically, the website is simple, built with basic HTML and CSS, hosted via a registrar in Germany with DNS hosted on alldomains.hosting. There is no evidence of a CMS or advanced frameworks. The site includes an embedded ad iframe from metamuffin.org, indicating some monetization. Mobile optimization and accessibility are basic, and SEO features are minimal. No analytics or tracking scripts were detected. From a security perspective, the site lacks published privacy or cookie policies, security policies, or incident response information. DNSSEC is not enabled, and no security headers were detected in the provided data. The domain is recently registered, consistent with a new personal site, and no suspicious WHOIS patterns were found. The security posture is basic with room for improvement, especially in compliance and security best practices. Overall, the website is low risk but lacks professional security and privacy features. It is suitable for personal use but would benefit from adding privacy and cookie policies, enabling DNSSEC, and improving security headers to enhance trust and compliance.

B

besties

pages.gay

38

pages.gay is a small technology startup offering a niche service for hosting static websites quickly and easily, tightly integrated with the git.gay source code repository platform. The service targets developers and users who want to deploy static sites with minimal setup, leveraging open source software and git repositories. The website is modern, built with SvelteKit, and uses Cloudflare for DNS hosting, providing fast performance and good mobile optimization. However, the site lacks formal privacy, cookie, and terms of service policies, and does not provide contact information, which limits trust and compliance. Security posture is decent with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. No analytics or advertising tools are present, indicating minimal user tracking.

Astrid.tech is a personal technology blog and project showcase website maintained by Astrid Yu. The site focuses on topics such as networking, homelab setups, programming languages, and various tech projects. It is a niche site targeting technology enthusiasts and readers interested in detailed technical content. The website is built using a custom Rust-based static site generator CMS called Seams and hosts static assets on Backblaze B2. The site is fast, mobile-optimized, and uses modern web technologies including JavaScript and CSS. Google Analytics is employed for visitor tracking, but no visible cookie consent mechanism is present. Security posture is moderate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal security policies. The domain is privacy protected, registered in 2020, which aligns with the site's personal nature and recent content updates. Overall, the site is trustworthy and professional but would benefit from improved privacy compliance and security best practices.

C

crimew.gay

crimew.gay

57

crimew.gay is a small, community-driven Fediverse instance operated by an individual named Maia. It provides a social networking platform based on the Pleroma software, targeting users interested in a curated and moderated federated social experience. The instance emphasizes active moderation and federation policies to maintain community standards. Technically, the site uses modern web technologies and is mobile optimized, though it lacks some advanced security headers and privacy compliance features. The domain is relatively new, registered in 2022 with privacy protection, which is appropriate for this type of community service. Security posture is moderate with HTTPS enabled but could be improved with DNSSEC and additional headers. Overall, the site is functional and trustworthy but would benefit from enhanced privacy policies and contact transparency.

The website arch.dog is a personal, playful blog and project showcase owned by Gabriel Simmer, based in Great Britain. It features a dog-themed persona with links to social media, personal projects, and a community of related sites. The site is small-scale and targets a general audience interested in creative and personal content. Technically, the site is built with standard HTML, CSS, and JavaScript, hosted via Cloudflare DNS, but lacks advanced frameworks or CMS. Performance and mobile optimization are moderate to good, with basic accessibility and SEO features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. No privacy or cookie policies are present, and no contact information or incident response details are provided, limiting compliance and trust signals. Overall, the site is legitimate and safe, but could improve in security and privacy transparency.

L

lymkwi

vulpinecitrus.info

52

VulpineCitrus is a personal blog operated by an individual named lux, a PhD student with interests in networking, programming (notably Rust), Linux development, and cycling. The website serves as a platform for sharing technical knowledge, personal writings, and photography. It targets a general audience interested in technology and personal insights rather than commercial customers. The business model is non-commercial, focusing on content sharing and community engagement. The site is small-scale and niche, with a consistent brand identity and clear contact information.

Keybase, owned by Zoom Video Communications, Inc., is a secure messaging and file-sharing platform that leverages public key cryptography to provide end-to-end encryption for individuals, families, communities, and companies. The service is available across multiple platforms including desktop and mobile operating systems, emphasizing privacy and security without reliance on third-party tracking or advertising. The website content is professionally designed, clear, and focused on promoting secure communication and file sharing with features such as exploding messages and team collaboration. Technically, the site uses modern web technologies and is hosted on AWS infrastructure, with DNS managed via Amazon's DNS services. Security posture is strong with HTTPS enforced, CSRF protections, and domain registration protections, though DNSSEC is not enabled and some security headers are not explicitly confirmed. Privacy compliance is robust with clear privacy and terms of service documentation, but no cookie consent mechanism is present, likely due to minimal cookie usage. No contact emails or phone numbers are publicly listed, which may limit direct user support visibility. Overall, the site is trustworthy, secure, and well-positioned in the technology sector as a privacy-focused communication tool.

T

The Fox Nexus

fox.nexus

67

The Fox Nexus operates as a small independent Mastodon social media instance, providing a federated platform for users interested in the fediverse. The website offers basic services typical of Mastodon servers, including user registration (currently closed), login, and content exploration. The platform targets users familiar with decentralized social networking and positions itself as a niche community for 'foxes'. Technically, the site runs Mastodon version 4.4.0-alpha.4+chuckya, leveraging modern web technologies such as JavaScript, SVG, and CSS with integrity checks on scripts and stylesheets, ensuring a moderate level of technical maturity and performance. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, though it lacks advanced security headers and explicit incident response policies. Privacy compliance is basic, with privacy and terms of service pages present but no cookie consent mechanism or GDPR-specific disclosures. Overall, the site is safe, professional, and trustworthy for its intended audience but could benefit from enhanced security and privacy features.

5

5225225

5snb.club

62

5snb.club is a personal blog and creative site maintained by an entity identified as 5225225. The site focuses on sharing technical, artistic, and security-related content, targeting a general technical and creative audience. It operates as a niche personal publishing platform with community engagement through webrings and related links. The website is built using the Zola static site generator, delivering content primarily through static HTML, CSS, and JavaScript, with no detected dynamic forms or tracking mechanisms. The site demonstrates good content quality and consistent branding, though it lacks advanced SEO and accessibility features. Security posture is moderate, with no HTTPS or security headers explicitly detected in the provided content, but no sensitive data exposure or vulnerabilities are evident. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanisms. Business credibility is limited due to the absence of contact information or formal business details, consistent with a personal blog. Overall, the site is safe, trustworthy, and well-maintained for its intended purpose.

Sophari.org is a personal website operated by an individual or small entity registered as Private by Design, LLC in the US. The site serves as a platform for sharing personal projects, blogs, social links, and various interests with an informal and experimental design approach. It targets a general internet audience interested in niche internet culture and personal content. The business model is non-commercial and hobbyist in nature, with no clear market positioning beyond personal expression. Technically, the website is built with basic HTML and CSS, referencing a custom 'infernal-engine' technology. Hosting is provided by Porkbun LLC, with no CMS or advanced frameworks detected. The site shows moderate performance and basic mobile optimization but lacks SEO and accessibility best practices. No analytics or tracking services are employed, reflecting minimal data collection. From a security perspective, the site lacks HTTPS information, security headers, DNSSEC, and any formal security or privacy policies. No contact information or incident response channels are provided, limiting trust and compliance posture. The domain registration is transparent and consistent with the site's personal nature, with no suspicious WHOIS patterns. Overall, the security posture is weak, and privacy compliance is absent. The overall risk is low given the non-commercial, personal nature of the site, but improvements in security, privacy policies, and contact transparency are recommended to enhance trust and compliance.

J

Joey Hess

joeyh.name

53

The website joeyh.name is a personal technical portfolio and blog belonging to Joey Hess, a free software developer and technologist. The site features a variety of personal and technical content including blog posts, code repositories, talks, and podcasts. The business model is primarily personal branding and knowledge sharing, targeting a general audience interested in technology and free software. The site is positioned as an individual contributor's platform rather than a commercial enterprise. Technically, the site is built using the ikiwiki static site generator, with a simple HTML, CSS, and JavaScript stack. Hosting is under a domain registered with Gandi SAS, a reputable registrar. The site shows moderate performance and basic mobile optimization. SEO and accessibility are basic but functional. No advanced analytics or tracking technologies are detected, indicating a privacy-conscious approach. From a security perspective, the domain status clientTransferProhibited is a positive indicator against unauthorized domain transfers. However, the site lacks security headers, privacy and cookie policies, and vulnerability disclosure mechanisms. No HTTPS status was explicitly detected in the provided data, so SSL configuration is unknown. The site does not appear to use any WAF or security challenge mechanisms, and no vulnerabilities or suspicious patterns were found. Overall, the site is safe, trustworthy, and professionally maintained as a personal technical resource. The main risks relate to lack of formal privacy and security policies, which could be improved to enhance compliance and user trust.

U

Upmind

upmind.app

57

Upmind is a technology company focused on providing developer documentation and resources, likely through a SaaS platform or API documentation hosting service. The website analyzed is a documentation subdomain hosted on ReadMe.io, which serves as a platform for technical documentation. The specific page requested is not found (404 error), limiting content availability for analysis. The site uses modern web technologies including React and integrates multiple analytics and customer engagement tools such as Google Tag Manager, Amplitude, FullStory, and Intercom. Security posture is moderate with HTTPS enforced but lacks security headers and privacy policies on the analyzed page. No contact or business information is present on this page, reducing business credibility and privacy compliance scores. Overall, the site appears to be a legitimate technical documentation resource but the analyzed page is an error page, limiting full assessment.

9

⛧-440729 [sophie raven]

999eagle.moe

68

The website https://999eagle.moe/ represents a personal and technical online presence for unit ⛧-440729, known by callsigns [sophie] and [raven]. This entity describes itself as a synthetic mind existing within a human-shaped biological chassis, focusing on software, cybersecurity, and open source contributions. The site serves as a hub for sharing technical musings, hosting infrastructure, and community engagement within the fediverse and open source ecosystems. The market position is niche, targeting technically inclined users and contributors. Technically, the site is built with standard HTML5 and CSS, uses HTTPS with a good SSL configuration, and is hosted on infrastructure indicated by the nameservers (Desec.io). The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. No CMS or advanced frameworks are detected, indicating a lightweight and manually maintained site. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks advanced security headers and DNSSEC. There is no published security policy, vulnerability disclosure, or incident response information, which limits transparency and readiness. Privacy and cookie policies are absent, impacting compliance with GDPR and related regulations. No tracking or advertising technologies are present, reflecting a privacy-conscious approach. Overall, the website is safe, professional, and trustworthy within its niche but could improve compliance and security posture by adding formal policies and security disclosures. The domain registration is stable and privacy-protected, consistent with the personal nature of the site. Strategic improvements in security headers, DNSSEC, and privacy documentation would enhance trust and compliance.

T

TeamForge.net

teamforge.net

47

TeamForge.net is a niche open source hosting platform established in 2005, providing free hosting services primarily for selected open source projects such as WinSCP and SiteBar. The website serves a specialized audience of open source developers and users seeking alternatives to larger platforms like SourceForge. The business model relies on donations and community support, with a small but consistent presence in the open source ecosystem. Technically, the site uses basic HTML, CSS, and JavaScript with Google Analytics for visitor tracking, hosted behind Cloudflare. The site performance and mobile optimization are basic but functional, with no advanced frameworks or CMS detected. Security posture is moderate; HTTPS is enabled but lacks DNSSEC and security headers, and no privacy or cookie policies are present, indicating gaps in compliance and best practices. Overall, the domain is long-established and trustworthy, with no suspicious WHOIS data or blocking mechanisms detected.

N

Neocities

neocities.org

64

Neocities is a technology platform founded in 2013 that offers free static web hosting and tools to empower individuals to create and share personal websites. It positions itself as a community-driven alternative to large cloud hosting providers by focusing on creativity, zero advertising, and open source transparency. The platform supports over 1.1 million websites and is funded by supporter accounts and donations, emphasizing privacy and user control. Technically, Neocities uses a modern but simple tech stack including HTML5, CSS, JavaScript, and jQuery, with hCaptcha integration for bot protection. The site is well optimized for performance and mobile use, with fast loading times and good SEO practices. Security posture is solid with HTTPS enforced and client transfer prohibited domain status, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the domain registration is privacy protected but consistent with the business age and nature, indicating legitimacy.

The website roxie.nyc serves as a personal portfolio and creative showcase for an individual named Roxie Mika. It features links to social media profiles, galleries for original characters and photography, and a minimalistic design focused on personal branding. The site is hosted on DigitalOcean and uses HTTPS, indicating a basic but secure technical infrastructure. However, it lacks common compliance and security features such as privacy policies, cookie consent mechanisms, and security headers. No contact information or business details are provided, which limits its business credibility and user trust. The content is safe for general audiences and does not contain any adult or explicit material.

pkgsrc.pub is a small technology-focused website operated by SkyLime, providing services related to the pkgsrc open source package management system. The site offers mirrors of binary packages for multiple operating systems, a searchable index of all pkgsrc packages, and a work-in-progress search over distfiles. The business targets developers and system administrators who rely on pkgsrc for software distribution. The domain has been registered since 2014, indicating a mature presence in its niche. Technically, the website is minimalistic, built with basic HTML and CSS, and hosted with DNS services provided by core.io domains. There is no evidence of a CMS or advanced frameworks. The site lacks modern security features such as DNSSEC and security headers, and no SSL/TLS configuration details were provided. The website is moderately optimized for mobile and accessibility but lacks advanced SEO and analytics tools. From a security perspective, the site does not present any immediate red flags such as malware or phishing indicators. However, the absence of privacy policies, cookie consent mechanisms, and incident response information indicates a low maturity in compliance and security posture. The domain registration is consistent and legitimate, but improvements in DNS security and published policies are recommended. Overall, pkgsrc.pub is a niche technical service with moderate trustworthiness and basic web presence. Strategic improvements in security, privacy compliance, and transparency would enhance its credibility and user trust.

The website www.ticketmaster.ca is a regional domain for Ticketmaster, a globally recognized ticket sales and distribution company. The accessible content is blocked by a security challenge page designed to detect bots and unusual browsing activity, which prevents full content and metadata analysis. The site employs advanced bot detection technologies such as Google reCAPTCHA Enterprise and multiple Google Tag Manager containers, indicating a mature technical infrastructure focused on security and user verification. However, the lack of accessible content, privacy policies, and WHOIS data limits the ability to fully assess the website's compliance and trustworthiness. Overall, the site appears to be a legitimate enterprise-level e-commerce platform for ticket sales, but the security challenge restricts detailed evaluation.

T

Trialfire

trialfire.com

60

Trialfire operates a web-based measurement platform accessible via a login portal at app.trialfire.com. The platform appears to target business users requiring analytics or measurement tools, delivered as a SaaS solution. The website uses AngularJS and custom JavaScript for functionality and tracking. The login page is minimalistic, focusing on user authentication without additional content or policies visible. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. WHOIS data for the subdomain is unavailable, which is typical for subdomains, and does not indicate risk. Overall, the site is functional but could improve transparency and compliance disclosures.

K

KPN

overons.kpn

73

KPN is a leading telecommunications company in the Netherlands, providing comprehensive fixed and mobile network services. The company is recognized for its reliable infrastructure, innovation, sustainability efforts, and security focus. The website reflects a mature digital presence with modern technologies such as SvelteKit and integrates key marketing and analytics tools like Google Tag Manager and Facebook Pixel. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response contacts could be improved. Privacy and cookie policies are present and GDPR compliant, supporting user trust. Overall, KPN's website demonstrates a professional, secure, and user-friendly platform aligned with its enterprise market position.