Security Directory

R

Randstad

randstad.nl

70

Randstad is a leading staffing agency in the Netherlands, providing a platform for job seekers to find vacancies and employment opportunities. The website is professionally designed, targeting a broad audience seeking employment. It leverages modern technologies including Google Analytics, Tag Manager, and reCaptcha to enhance user experience and security. The site is built on the Hippo CMS platform, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Overall, the website presents a trustworthy and professional front for Randstad's staffing services.

K

kite

kitenet.net

51

The website 'kite' hosted at www.kitenet.net appears to be a personal or small community web hosting platform primarily using the ikiwiki CMS. It offers user homepages, a blog, and wiki-style content focused on the 'kite' server and its users. The site is modest in scale, with basic content and navigation, targeting a general audience interested in personal web hosting and community content. The market position is niche and small scale, with no clear commercial business model or revenue streams evident from the content. Technically, the site uses standard HTML, CSS, and JavaScript with ikiwiki, but lacks modern security features such as HTTPS and security headers. The site is accessible without WAF or blocking mechanisms, but the absence of HTTPS and security policies indicates a low security maturity level. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and trustworthiness despite the site being active. No contact information, privacy, cookie, or terms of service policies are present, limiting compliance with privacy regulations. Overall, the site is functional but basic, with significant room for improvement in security, compliance, and business credibility.

Robby Workman's website is a personal homepage primarily focused on Slackware Linux and related technical content, maintained by a high school physics teacher with a passion for Linux. The site serves as a resource hub for Slackware users, offering packages, HOWTOs, configuration files, and links to community resources. The business model is that of a personal hobbyist and community contributor, with no commercial intent evident. The website targets Linux enthusiasts, particularly Slackware users, and personal visitors interested in the author's activities. Technically, the site is built with simple HTML and CSS, with no modern frameworks or CMS detected. Hosting is provided via colocation by TekLinks. The site has basic performance and accessibility, with limited mobile optimization and SEO features. There is no evidence of analytics or tracking technologies, and no advertising is present. From a security perspective, the domain is well-established with a consistent WHOIS record dating back to 2005. However, DNSSEC is not enabled, and no security headers or HTTPS enforcement details are visible. The site lacks privacy and cookie policies, which impacts compliance posture. No forms or data collection mechanisms are present, reducing attack surface but also limiting user engagement features. Overall, the website is low risk, with a moderate security posture and limited privacy compliance. Strategic improvements include enabling HTTPS with security headers, adding privacy and cookie policies, and implementing vulnerability disclosure mechanisms to enhance trust and security culture.

F

Framasoft

joinpeertube.org

60

JoinPeerTube.org is the official website for PeerTube, a decentralized, open-source video hosting platform developed by the French non-profit organization Framasoft. The platform offers an alternative to centralized Big Tech video services by enabling users to create independent video hosting sites interconnected via a federated network using ActivityPub. The website clearly targets users and content creators interested in privacy-respecting, ad-free, and community-driven video hosting solutions. Technically, the site is built with modern web technologies including Vue.js, WebRTC, and ActivityPub protocols, and is hosted by Gandi SAS. The site is well optimized for mobile and desktop, with excellent design and user experience. Security posture is good with HTTPS enforced and minimal tracking, but lacks explicit security headers and published security policies. Privacy compliance is limited by the absence of explicit privacy and cookie policies. Overall, the domain registration and WHOIS data align well with the organization’s identity, supporting high legitimacy and trustworthiness.

The website 'Bankrupt Trump' serves as an informational platform offering users alternatives to mainstream products and services primarily found in the United States and Russia. It targets a general audience interested in ethical, independent, and innovative options sourced globally. The site positions itself as a niche directory, focusing on providing curated alternatives across multiple categories such as technology, finance, health, and more. The business model appears to be content-driven, relying on user searches and informational listings without direct e-commerce or transactional services. Technically, the website is built on modern web technologies including Next.js and React, ensuring a responsive and user-friendly experience across devices. The site demonstrates good SEO practices and basic accessibility features, with moderate performance. However, there is room for improvement in accessibility and performance optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. Nonetheless, it lacks important security headers and a cookie consent mechanism, which are critical for enhancing security posture and privacy compliance. The absence of WHOIS data and registrant information introduces some trust concerns, although the website content and structure appear professional and legitimate. Overall, the website presents a moderate risk profile with good content quality and technical implementation but requires enhancements in security practices and privacy compliance to improve trustworthiness and user protection.

The OSINT Framework website serves as a curated collection of free and some paid open-source intelligence tools, primarily targeting information security professionals and related fields. Established in 2016, it provides categorized links to various OSINT resources, facilitating easier access to investigative tools. The site is modest in scale, focusing on content aggregation rather than direct service provision. Technically, the site is built with standard web technologies including HTML, CSS, JavaScript, and D3.js for visualization. It is hosted behind Cloudflare DNS and likely uses its CDN services, though DNSSEC is not enabled. The site performs moderately in terms of speed and mobile optimization, with basic accessibility and SEO features. Security-wise, the site benefits from HTTPS and domain registration protections but lacks advanced security headers and DNSSEC, which could be improved. There are no published privacy, cookie, or terms of service policies, nor explicit contact or incident response information, which limits compliance and trust signals. Overall, the site is functional and trustworthy within its niche but would benefit from enhanced security and compliance measures.

P

Private by Design, LLC

prism-break.org

60

PRISM Break is a privacy advocacy website operated by Private by Design, LLC, focused on helping users opt out of global data surveillance programs by recommending privacy-respecting software alternatives. The site targets privacy-conscious users seeking to encrypt communications and reduce reliance on proprietary services. It maintains a niche position in the privacy technology sector with a small organizational footprint and a mission-driven business model. Technically, the website uses standard HTML5 and CSS with FontAwesome icons, is mobile optimized, and provides clear navigation and content relevant to its audience. However, it lacks advanced security headers and formal privacy or cookie policies, which limits its security posture and privacy compliance. The domain is well-established since 2013, registered transparently without privacy protection, aligning with the organization's advocacy goals. Overall, the site is trustworthy but could improve in formalizing privacy and security practices.

F

Fediverse Foundation

fediverse.foundation

65

The Fediverse Foundation is a small, non-profit organization based in Vienna, Austria, dedicated to supporting the Fediverse ecosystem by providing infrastructure, tools, and information. Their focus is on operating and moderating Fediverse instances, educating about the technology and societal impact, and fostering a responsible technology community. The website is professionally designed using the Ghost CMS platform, with good mobile optimization and clear navigation. Technically, the site uses modern JavaScript libraries and enforces HTTPS, though some security headers and DNSSEC are missing. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms. Contact is primarily via email, with no phone or physical address listed. The organization demonstrates transparency with named officers and active social media presence on Mastodon and related Fediverse platforms.

P

Privacy Guides

privacyguidesusercontent.com

68

Privacy Guides is a reputable non-profit organization founded in 2021 that provides independent, ad-free, and open-source privacy and security resources. It operates a comprehensive website offering privacy tool recommendations, educational content, and a community forum. The site is recognized by major media outlets and maintains strict editorial independence, enhancing its credibility in the privacy advocacy space. Technically, the website is built using modern static site generation technologies (mkdocs and mkdocs-material), optimized for performance, accessibility, and mobile responsiveness. Security best practices are well implemented, including HTTPS and robust security headers, with no detected vulnerabilities or exposed sensitive data. However, the absence of a cookie consent mechanism is a minor compliance gap. WHOIS data is unavailable or privacy protected, which is consistent with the site's privacy focus and does not detract from its legitimacy. Overall, Privacy Guides demonstrates a strong security posture, high content quality, and trustworthy business practices, making it a valuable resource for privacy-conscious users.

Faustball Westerstetten is a local sports club website dedicated to the Faustball division of TSV Westerstetten in Germany. The site provides information about teams, match results, training schedules, event calendars, and news updates targeted at community members and sports enthusiasts. The business model is community-focused, offering informational and engagement services without commercial transactions. The website is hosted by Hetzner and built with basic HTML, CSS, and JavaScript, featuring a mobile-responsive design and clear navigation. However, it lacks advanced technical frameworks or CMS platforms. Security posture is minimal with no detected security headers or privacy policies, and the SSL status is unknown, indicating potential risks. There are no signs of tracking or advertising, reflecting a privacy-conscious but basic implementation. Overall, the site is functional and trustworthy for its purpose but requires improvements in security and compliance to meet modern standards.

The website nskm.xyz serves as a personal professional portfolio and blog for Nsukami_, a software engineer based in Dakar, Senegal. The site highlights expertise in Python programming, backend development, and community education, with affiliations to reputable organizations such as Institut Pasteur Dakar and educational institutions. The content is well-organized and targeted towards developers, students, and technology enthusiasts, emphasizing free software advocacy and community impact. Technically, the site is built using the Zola static site generator, with a clean HTML5 and CSS implementation. It is hosted under a domain registered with Gandi SAS, with HTTPS enabled, ensuring basic security. The site is mobile-optimized and offers a good user experience, though it lacks advanced SEO and accessibility features. No analytics or tracking scripts are present, indicating a privacy-conscious approach. From a security perspective, the site employs HTTPS but lacks important security headers and DNSSEC. There are no visible vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies represents a compliance gap, especially regarding GDPR. Contact is provided via a professional email address, but no incident response or vulnerability disclosure information is available. Overall, the website is trustworthy, professional, and safe for general audiences. Strategic improvements in privacy compliance and security hardening would enhance its posture and user trust.

Openports.pl is a niche technical website dedicated to providing an indexed readme and categorized listing of OpenBSD ports. It targets OpenBSD users, developers, and system administrators seeking detailed information about available software packages. The site is modest in scale and serves primarily as an informational resource rather than a commercial business. Technically, the website is built using standard web technologies including HTML5, CSS, JavaScript with jQuery, and is powered by the Perl Dancer framework. The site demonstrates basic mobile optimization and accessibility but lacks advanced SEO and performance enhancements. Security posture is minimal with no visible security headers or published policies, though the domain benefits from DNSSEC and a reputable registrar. No privacy or cookie policies are present, and no contact or incident response information is provided, which limits trust and compliance. Overall, the site is safe for general audiences and does not contain any adult or questionable content.

P

pkgsrc.se | The NetBSD package collection

pkgsrc.se

43

pkgsrc.se is a specialized website providing a web interface to browse and search the NetBSD pkgsrc package collection. It serves primarily developers and system administrators who use NetBSD and its package management system. The site offers package details, updates, and maintainer information, positioning itself as a niche technical resource within the open source community. The domain is well-established since 2005, indicating a mature presence in its domain. Technically, the website uses basic HTML, CSS, and JavaScript without modern frameworks or CMS. The site is hosted with DNS nameservers under core.io domains and registered via 1 Api GmbH. Performance and mobile optimization are basic, with limited accessibility features. The site uses HTTPS links but lacks explicit security headers and advanced SEO or analytics tools. From a security perspective, the site shows moderate maturity. HTTPS is used, and no exposed sensitive data or vulnerable libraries were detected. However, the absence of DNSSEC, security headers, privacy policies, cookie consent mechanisms, and incident response information indicates room for improvement. No WAF or blocking mechanisms were detected, and the content is safe for general audiences. Overall, pkgsrc.se is a functional and legitimate technical resource with a solid domain history but would benefit from enhanced security practices, privacy compliance, and modern technical improvements to increase trust and user experience.

The website meli-email.org represents a small technology project operated by 1337 Services LLC, focused on delivering a terminal-based email client named meli. The project targets terminal users and developers seeking a modern, extensible mail client with support for various email protocols and storage formats. The business model revolves around open source software distribution with downloadable binaries and source code repositories. The website is hosted on privacy-conscious infrastructure (Njalla) and provides clear navigation and relevant technical content, including installation instructions and screenshots. From a technical perspective, the site uses modern web technologies such as Rust for the client software, WebAssembly for an online demo, and standard HTML5 and CSS for the website. The site supports multiple Unix-like platforms and provides source code access via a dedicated git repository. Performance and mobile optimization are moderate, with basic accessibility and SEO features. Security posture is limited; the site lacks published privacy, cookie, or security policies, and no security headers were detected. The domain uses HTTPS but DNSSEC is not enabled. No contact information or incident response channels are provided, limiting transparency and trust. WHOIS data is public and consistent with the project timeline, indicating legitimacy but no strong business presence. Overall, the website is functional and informative for its niche audience but lacks formal privacy and security compliance measures. Strategic improvements in policy publication, security headers, and contact transparency would enhance trust and compliance.

J

Joey Hess

ikiwiki.info

52

Ikiwiki.info is the official website for ikiwiki, an open source wiki compiler and static site generator developed primarily by Joey Hess. The site provides documentation, downloads, and community resources for users and developers interested in flexible wiki and static site solutions. The business operates as a small, niche open source project targeting developers and technical users. The website is simple and functional, focusing on content delivery rather than commercial services. Technically, the site uses basic HTML, CSS, and JavaScript without heavy frameworks or CMS platforms. The domain is well aged and registered consistently with the project lead, indicating legitimacy. However, the site lacks modern security headers, explicit HTTPS confirmation, and privacy or cookie policies, which lowers its security and privacy posture. No advertising or tracking mechanisms are detected, reflecting a privacy-conscious approach. Overall, the site is trustworthy but could improve in security and compliance documentation.

SlackBuilds.org is a well-established community-driven project founded in 2006 that provides SlackBuild scripts for Slackware Linux users to automate software package building. It serves a niche audience of Linux system administrators and enthusiasts who prefer building packages from source with trusted scripts. The website is simple and functional, focusing on content delivery without commercial distractions or heavy tracking. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript without modern frameworks or CMS. Performance and mobile optimization are moderate to basic, reflecting the site's utilitarian design. Security posture is modest; while domain registration uses privacy protection and domain status locks, the site lacks DNSSEC, security headers, and published security policies. Privacy compliance is minimal, with no visible privacy or cookie policies. Overall, the site is trustworthy and credible within its community but could improve security and privacy transparency.

The MacPorts Project is a well-established open-source community initiative focused on providing an easy-to-use system for compiling, installing, and upgrading open-source software on macOS. It offers a command-line driven software package under a BSD license and maintains a large repository of software ports targeting modern macOS versions including Apple Silicon. The project is community-driven, with active development and participation in programs like Google Summer of Code, indicating a strong engagement with the open-source ecosystem. Technically, the website uses standard web technologies including HTML5, CSS, and the MooTools JavaScript framework. The site is moderately optimized for performance and accessibility, with good content quality and clear navigation. However, it lacks modern security headers and explicit HTTPS enforcement information, which could be improved. The absence of analytics and tracking scripts suggests a privacy-conscious approach. From a security perspective, the site shows no immediate vulnerabilities or exposed sensitive data but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data is unavailable, likely due to privacy protection, which is common and justified for community projects. Overall, the domain and website appear legitimate and trustworthy. Strategically, the project should focus on enhancing its security posture by implementing security headers, publishing a security policy, and improving privacy compliance with explicit cookie and privacy policies. These steps will strengthen trust and align with best practices for open-source community projects.

X

Xapian Project

xapian.org

53

The Xapian Project is an established open source search engine library primarily written in C++ with bindings for multiple programming languages. It targets developers and organizations seeking to integrate advanced search capabilities into their applications. The project also offers Omega, a packaged search engine application built on Xapian, enhancing its versatility. The website reflects a mature project with a long domain history dating back to 2001, hosted by Gandi SAS, and presents stable version releases indicating ongoing maintenance. Technically, the website is straightforward, using basic HTML and CSS without advanced frameworks or CMS. It is hosted securely over HTTPS but lacks advanced security headers and DNSSEC, which are recommended for improved security posture. The site is moderately optimized for performance and mobile devices, with clear navigation and relevant content for its target audience. There is no evidence of analytics or tracking scripts, indicating minimal user tracking. From a security perspective, the site benefits from HTTPS but misses several best practices such as security headers and formal privacy or cookie policies. No contact or incident response information is provided, which limits transparency and user trust in security matters. The WHOIS data shows a consistent domain registration history with no suspicious patterns, supporting the legitimacy of the project. Overall, the website is safe, professional, and credible for its niche audience but would benefit from enhanced security measures, privacy compliance documentation, and clearer contact information to improve trust and compliance posture.

Smol Pub is a small, privacy-focused blogging platform launched in 2021, offering users a minimalistic service to manage posts via web and command line interfaces. It supports multiple protocols including Web, Gemini, and Gopher, and emphasizes no JavaScript, ads, or tracking technologies. The platform targets users seeking simple, privacy-conscious blogging solutions with features like image storage, custom CSS, and custom domain SSL support. Technically, the site uses basic HTML and CSS without advanced frameworks or CMS, hosted under a registrar in France with DNS services from DNSimple. Performance and mobile optimization are basic but functional. Security posture is moderate with HTTPS and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is minimal, limited to a single email address. Overall, the site is legitimate and consistent with its business profile but would benefit from enhanced security and compliance documentation.

T

this happy shop

this-happy.shop

65

This Happy Shop is a small e-commerce retail business operating via a Shopify-hosted online store. The website uses the Shopify Dawn theme and standard Shopify infrastructure, indicating a modern but basic digital presence. The business appears to be recently founded in 2022, with domain registration consistent with the business profile. The site offers a contact form for customer inquiries but lacks explicit privacy, cookie, or terms of service policies, which are important for compliance and trust. Technically, the site is functional with HTTPS enabled but lacks advanced security headers and DNSSEC, representing areas for improvement. Analytics and marketing tools are implemented via Shopify's native pixels and scripts, with moderate user tracking. Overall, the website is safe for general audiences and presents a basic but legitimate e-commerce storefront.

U

Unencumbered by Facts – Taking unsubstantiation to new levels

unencumberedbyfacts.com

59

Unencumbered by Facts is a personal technology blog primarily focused on open source webmail client development and related software topics. The site is authored by Jason Munro and hosted on WordPress.com, leveraging standard WordPress technologies such as PHP, JavaScript, and CSS. The blog features detailed posts about software projects, personal anecdotes, and technical insights, targeting developers and technology enthusiasts interested in open source email clients and related protocols. The website has a consistent branding and good content quality, though it lacks formal business contact information and privacy policies.

Freron Software operates the website freron.com, promoting MailMate, a specialized IMAP email client for macOS. The company targets advanced macOS users who require powerful email management features including encryption, advanced search, and integration capabilities. The business model is based on software licensing and product sales, positioning itself as a niche player in the macOS email client market. The website content is professional, well-structured, and consistent with the brand identity, reflecting a small but focused software company based in Denmark. Technically, the website is a straightforward static HTML/CSS site with no detected complex frameworks or CMS. It is hosted under a registrar known for domain services, with no DNSSEC enabled and no advanced security headers detected. The site performs well with basic mobile optimization and accessibility features. There is no evidence of tracking or advertising scripts, indicating a privacy-conscious approach. From a security perspective, the domain is stable and long-lived, registered since 2010 with clientTransferProhibited status, enhancing domain security. However, the lack of DNSSEC and missing security headers are areas for improvement. No explicit security policies or incident response contacts are published, and cookie consent mechanisms are absent, which may impact compliance with privacy regulations. Overall, the website presents a low-risk profile with a solid business credibility score but could benefit from enhanced security and privacy compliance measures to strengthen trust and regulatory adherence.

The domain presscoder.com currently serves a 404 Not Found error page with no active business content. The page content indicates that the domain is hosted by Admiral, a service provider specializing in copyright access control and privacy compliance for digital publishers. The service supports GDPR compliance and subscription management but does not provide direct business or contact information on this domain. Technically, the site is hosted on Google Cloud Platform with AWS DNS servers and uses HTTPS with frequent certificate rotation, indicating a secure hosting environment. However, the lack of security headers and absence of a cookie consent mechanism reduce the overall security posture. The domain registration is consistent and legitimate with no privacy protection, registered via NameCheap in 2022. Overall, the site is minimally functional and does not provide direct business engagement or user interaction features.

Illuna-minetest.tk operates as a niche community gaming website providing dedicated Minetest servers with custom mods and texture packs. The business targets Minetest players seeking a unique and advanced gaming experience, supported by a small but experienced team since 2014. The website reflects a community-driven model with emphasis on server reliability and custom content. Technically, the site is built using modern frontend technologies including Bootstrap, jQuery, and the Zola static site generator, delivering a responsive and user-friendly experience. Performance is moderate with good mobile optimization and SEO practices. Security posture is adequate with HTTPS usage and no exposed sensitive data, but lacks explicit security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices. Overall, the domain registration data supports the legitimacy and maturity of the business. The site is safe for general audiences with no adult or questionable content detected.

The website lemmy-meter.info provides a technical monitoring dashboard for Lemmy instances, leveraging Grafana technology. It targets technical users and administrators interested in instance health metrics. The domain is recently registered in 2023 and hosted with German name servers, while the registrant is located in Canada. The site is functional but lacks comprehensive privacy, cookie, and terms of service policies, as well as contact and incident response information. Technically, it uses modern React and Grafana frameworks but has basic SEO, accessibility, and performance optimizations. Security posture is moderate with HTTPS likely enabled but missing security headers and DNSSEC. Overall, the site is safe with no adult or questionable content detected.

M

Michael Lazar

mozz.us

46

Mozz.us is the personal domain of Michael Lazar, a professional software developer with a strong focus on alternative internet protocols such as Gemini, Gopher, Spartan, and CCSO. The website serves as a portfolio showcasing his open source projects, software development expertise, and personal interests including ASCII art. The site targets technology enthusiasts and developers interested in niche internet protocols and software tools. The business model is primarily personal and community-oriented, with no commercial transactions evident. Technically, the site uses standard HTML5 and CSS with FontAwesome icons, and the backend projects leverage Python frameworks like Flask and Django. Hosting and DNS are managed via Squarespace Domains and Google Cloud DNS respectively. The website is moderately optimized for performance and mobile devices, with basic accessibility and SEO features.

P

Private by Design, LLC

tilde.pink

45

The website tilde.pink is a niche, minimalist site focused on providing access via alternative internet protocols such as Gopher and Gemini. It is operated by Private by Design, LLC, a small US-based entity registered in 2019. The site content is minimal, primarily informational, and targets users interested in retro or alternative internet technologies. The business model appears to be hobbyist or community-focused with no evident commercial services or monetization. Technically, the site uses basic HTML and CSS with no advanced frameworks or CMS detected. Hosting is provided by Porkbun LLC, the domain registrar. The site performs well in terms of loading speed and basic mobile optimization but lacks SEO optimization and accessibility features. No analytics or tracking technologies are present, indicating a privacy-conscious approach. From a security perspective, the site lacks DNSSEC, security headers, and any formal privacy or cookie policies. The SSL configuration is basic but present. No forms or data collection mechanisms are implemented, reducing attack surface but also limiting user engagement. WHOIS data is consistent and legitimate with no privacy protection, which aligns with the site's transparent and minimal nature. Overall, the site is safe and suitable for general audiences but would benefit from improved security practices, privacy compliance, and richer content to enhance credibility and user experience.

rawtext.club is a niche community-driven technology service focused on providing shell access, local email, and hosting for alternative internet protocols such as gemini and gopher. The website emphasizes a slow and deliberate development approach, fostering a community governed by a social contract. The business operates under the domain registered to 1&1 Internet Inc, a reputable US-based hosting provider, with the domain created in 2018 and currently active. Technically, the website is minimalistic, built with basic HTML and CSS without modern frameworks or CMS. It lacks mobile optimization and SEO best practices, resulting in a slow and basic user experience. No analytics or advertising tools are present, indicating a privacy-conscious or low-budget operation. Security measures are limited; DNSSEC is not enabled, and no security headers are detected, which could expose the site to certain risks. From a security perspective, the site uses HTTPS (implied by domain registration and hosting provider but not explicitly confirmed), but lacks advanced security configurations. There are no privacy or cookie policies, which reduces compliance with GDPR and other privacy regulations. The WHOIS data is transparent and consistent with the business, enhancing trustworthiness. No adult or questionable content is present, making the site safe for general audiences. Overall, rawtext.club is a small, community-focused technology service with basic technical and security maturity. Strategic improvements in security headers, DNSSEC, privacy compliance, and mobile optimization would enhance its security posture and user experience.

P

prx

si3t.ch

42

The website si3t.ch is a personal digital space hosted by an individual known as 'prx'. It serves as a repository for documentation, code, tools, and miscellaneous content aimed at digital travelers and enthusiasts interested in self-hosting and privacy. The site also offers community interaction via an XMPP chat and is accessible through a TOR hidden service, emphasizing privacy and anonymity. The business model is non-commercial and hobbyist in nature, with a small-scale operation based in Switzerland. Technically, the site uses basic HTML, CSS, and JavaScript with Atom feeds and XMPP integration. It is self-hosted at home, with moderate performance and basic mobile optimization. No CMS or advanced frameworks are detected. The site lacks formal privacy, cookie, or terms of service policies and does not appear to use analytics or advertising, reflecting a privacy-conscious approach. From a security perspective, the site shows limited security measures in the HTML content, with no detected security headers or HTTPS/SSL information. The use of a TOR hidden service is a positive privacy feature. However, the absence of security policies, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement. No critical vulnerabilities or adult content were detected. Overall, the site is a safe, small personal project with moderate trustworthiness but limited formal security and privacy compliance. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and establishing a vulnerability disclosure process to enhance security posture and user trust.

Nightfall City is a creative and thematic website that presents a fictional virtual city with various districts and services, designed to engage visitors in an artistic and immersive experience. The site does not represent a traditional business but rather a niche project focused on storytelling and virtual exploration. The technical infrastructure is basic, relying on standard HTML and CSS without advanced frameworks or CMS. The website is accessible without any blocking or WAF interference, but lacks modern security headers and privacy compliance features. The absence of contact information, privacy policies, and security best practices limits its trustworthiness and compliance posture. Overall, the site is safe for general audiences and does not contain any adult or explicit content.

J

Jae Lo Presti

jae.moe

66

Jae's Website is a personal site belonging to Jae Lo Presti, a technical artist and content creator based in Helsinki, Finland. The site serves as a portfolio and blog platform showcasing Jae's work in 3D art, VR game development, and mentorship activities on platforms like Resonite. The website targets a general audience interested in technical artistry and virtual worlds. The business model is primarily personal branding and content sharing without commercial transactions. Technically, the website is built with standard HTML, CSS, and JavaScript, including the highlight.js library for code highlighting. It is hosted on the 777.tf domain and appears to be self-managed or hosted by a small provider. The site is well-structured, mobile-optimized, and performs well with good SEO and accessibility features. However, it lacks advanced security headers and formal privacy or cookie policies. From a security perspective, the site uses HTTPS but does not implement common security headers or GDPR compliance mechanisms. No vulnerabilities or exposed sensitive data were detected. The WHOIS data shows the domain is registered to a private person, consistent with the personal nature of the site, and the domain age aligns with the site's content timeline. No WAF or blocking mechanisms are present, allowing full content access. Overall, the site is trustworthy and professional for a personal portfolio but would benefit from adding privacy and cookie policies, security headers, and vulnerability disclosure information to improve compliance and security posture.

Flounder.online is a small niche service providing a free web interface and log builder for the Gemini protocol network, a privacy-focused internet protocol. The website targets users of the Gemini network who require simple tools to manage Gemini capsules. The business model is based on offering free services with optional donations via Patreon. The site is modest in scale and content but updated frequently, indicating active maintenance within its community niche. Technically, the website uses basic HTML and CSS without advanced frameworks or CMS, hosted likely via Namecheap. The site is mobile responsive at a basic level and has moderate performance. Security posture is minimal with no advanced security headers or policies detected, and no HTTPS configuration details available from the provided data. Privacy and cookie policies are absent, and no contact or incident response information is provided, limiting compliance and trust signals. Overall, the site is functional and relevant for its audience but lacks formal security and privacy documentation.

The Midnight Pub is a niche virtual pub platform launched in 2019, offering users the ability to write posts and create pages within a community-oriented environment themed around retro internet culture and small web communities. The platform is hosted on Linode and uses a custom or unknown CMS with basic HTML and CSS technologies. The website content is accessible and primarily text-based, with a donation mechanism via buymeacoffee.com. However, the site lacks critical privacy and cookie policies, contact information, and visible security best practices, which impacts its overall trust and compliance posture. No advanced analytics or tracking scripts are detected, indicating minimal user tracking. The domain registration is consistent with a small community platform, registered through 1API GmbH with a French registrant location, but with limited public registrant details.

F

FileZilla

filezilla-project.org

74

FileZilla is a well-established open source software project providing free FTP client and server solutions, with an additional paid Pro offering supporting cloud storage protocols. The website is professionally designed, with clear navigation and relevant content targeting IT professionals and end users needing reliable file transfer tools. The technical infrastructure is based on standard web technologies with active development and recent security updates, reflecting a mature digital presence. Security posture is solid with HTTPS usage and participation in a bug bounty program, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

S

skyjake (@[email protected]) - skyjake.fi

skyjake.fi

56

The website skyjake.fi hosts a personal Mastodon instance operated by an individual known as 'skyjake'. The site serves as a social platform within the fediverse, focusing on personal and technical content related to software projects such as Gemini protocol applications and the Doomsday Engine. The domain has been registered since 2010, indicating a long-term personal project. The site is small-scale, targeting a niche audience interested in open-source and federated social networking. Technically, the site runs Mastodon version 4.3.8, uses modern web technologies including JavaScript and SVG, and is hosted under a Finnish registrar. The site is mobile-optimized and provides a good user experience with clear navigation and consistent branding. Security posture is solid with HTTPS enabled and no obvious vulnerabilities, though it lacks advanced security headers and published security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Overall, the site is trustworthy and well-maintained for a personal project, with no signs of malicious activity or suspicious registrations.

T

The SquirrelMail Project Team

squirrelmail.org

55

SquirrelMail.org is the official website for the SquirrelMail open source webmail project, providing a PHP-based webmail client and related plugins. The project has a long history dating back to 1999 and maintains a modest but consistent presence with announcements, plugin updates, and security advisories. The website targets system administrators and users seeking a lightweight, open source webmail solution. Technically, the site is basic, using standard HTML, CSS, and PHP, with no modern frameworks or CMS detected. Hosting is supported by Cloudflare DNS but lacks advanced security headers and DNSSEC. Security posture is moderate, with some security fixes and clickjacking protections noted, but no formal security.txt or vulnerability disclosure policy is published. Privacy and cookie policies are absent, and no direct contact information or social media presence is provided, limiting user engagement and compliance transparency. Overall, the site is functional and trustworthy but could benefit from modernization and improved compliance documentation.

Notmuchmail.org is the official website for Notmuch, an open source, fast, tag-based email indexing and search system primarily designed for use within text editors and terminals. The project targets developers and advanced users who require efficient email search capabilities without relying on third-party services. The website serves as a wiki and documentation hub, providing guides, source code access, and community contact channels such as mailing lists and IRC. Technically, the website is built using ikiwiki, a wiki engine, and delivers static HTML and CSS content with minimal dynamic elements. The site demonstrates good performance and basic mobile optimization but lacks advanced SEO and accessibility features. The technology stack includes Xapian for search backend integration and Git for source control, with continuous integration via Travis CI. From a security perspective, the site uses HTTPS (implied by domain and modern standards though SSL details are not provided), but lacks security headers and published security policies. No privacy or cookie policies are present, indicating limited compliance with privacy regulations. The domain WHOIS data is consistent and shows a long-established registration, enhancing trustworthiness. No forms or tracking technologies are present, minimizing data collection risks. Overall, the website is a trustworthy, niche technical resource with good business credibility but could improve in privacy compliance and security best practices to enhance user trust and regulatory adherence.

M

MARMARO

marmaro.de

45

The website marmaro.de is a personal site focused on sharing writings, programming projects, sports interests, and miscellaneous personal content. It does not represent a commercial business entity and lacks formal business information or contact details. The site is simple, static, and primarily serves as a personal portfolio or blog. Technically, the site uses basic HTML and CSS without modern frameworks or CMS. There is no evidence of HTTPS or security headers, which limits the security posture. No privacy or cookie policies are present, indicating low compliance with data protection standards. Overall, the site is safe for general audiences but lacks professional features and security best practices.

Freron Software operates the website freron.com to promote and distribute MailMate, an advanced IMAP email client designed exclusively for macOS users. The product targets a niche market of users requiring powerful email management features including encryption, advanced search, and integration capabilities. The company has maintained a consistent online presence since 2010, indicating stable business operations. The website content is well-structured and professional, focusing on product features and updates, with clear navigation and official social media links to Bluesky and X (Twitter). Technically, the website is simple and fast-loading, built with standard HTML and CSS without complex frameworks or CMS, reflecting a lean digital infrastructure. Hosting and domain registration are managed through a reputable registrar, joker.com, with domain age supporting legitimacy. Security posture is basic; while HTTPS is implied, no advanced security headers or DNSSEC are enabled, and no cookie consent mechanism is present. Privacy policy and EULA are published, but no explicit GDPR compliance statements or security policies are found. No contact emails or phone numbers are listed on the main site, limiting direct communication channels. Overall, the website is safe, professional, and trustworthy but could benefit from enhanced security and privacy compliance measures.

G

Gnus Network User Services

gnus.org

49

Gnus Network User Services operates a niche website dedicated to the Gnus Emacs newsreader, providing resources, manuals, and historical information for users of this open source software. The website serves a specialized audience of Emacs users and enthusiasts, positioning itself as a long-standing community resource since its founding in 1997. The business model focuses on information dissemination rather than commercial transactions, with a small organizational footprint based in Norway. Technically, the website is simple and lightweight, built with basic HTML and CSS without modern frameworks or CMS. It is hosted behind Cloudflare DNS but does not employ advanced security headers or DNSSEC, indicating room for technical modernization. The site performs moderately with basic mobile optimization and accessibility features, but lacks analytics or tracking technologies, reflecting a privacy-conscious approach. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks security headers and formal privacy or cookie policies, which lowers its compliance posture. No forms or data collection mechanisms are present, reducing attack surface but also limiting user engagement. The WHOIS data confirms a consistent and legitimate registration history, enhancing trustworthiness. Overall, the website is a safe, low-risk informational resource with moderate technical and security maturity. Strategic improvements in privacy compliance, security headers, and DNS security would enhance its posture and user trust.

The website aerc-mail.org presents an open source terminal-based email client named 'aerc' designed for technically proficient users such as hackers and developers. The site provides detailed descriptions of the software's features, including support for multiple email protocols, embedded terminal editing, and PGP encryption. The website is built using the Hugo static site generator and hosts content efficiently with minimal tracking or advertising. The technical infrastructure is modern and performant, with fast loading times and basic mobile optimization. However, the site lacks privacy and cookie policies, contact information, and security headers, which limits its compliance and security posture. The domain registration is consistent and transparent, indicating a legitimate and stable project. Overall, the site is professional and trustworthy within its niche but could improve in privacy and security transparency.

M

mCloud doo

rt.rs

62

RT Balkan is a Serbian language news media website operated by mCloud doo, established in 2012. It provides daily updated news content focused on Serbia, the Balkan region, and global events, including live TV streaming and program schedules. The website leverages modern web technologies such as React and lazy loading for performance optimization. It maintains an active presence on major social media platforms including Instagram, Telegram, Facebook, Twitter, and TikTok, enhancing its reach and engagement. The domain registration details align well with the website's regional focus, indicating legitimacy and consistency.

envs.net is a small, community-driven platform offering a shared Linux environment and a suite of self-hosted open source services tailored for Linux enthusiasts, programmers, and sysadmins. The platform emphasizes minimalism, non-commercial use, and collaboration, providing services such as shell accounts, file hosting, collaborative editing, microblogging, and federated social networking. The website and domain have been active since 2018, reflecting a stable and consistent presence in the niche Linux community space. Technically, envs.net runs on Debian GNU/Linux 11 and integrates multiple open source platforms like Gitea, Matrix, Pleroma, and Cryptpad. The website is well-structured with good SEO practices and basic mobile optimization. No advanced CMS or commercial hosting provider is evident, suggesting a self-managed infrastructure. Performance is moderate, suitable for the community's needs. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which are recommended improvements. No cookie consent mechanism is present despite having a privacy policy, indicating partial privacy compliance. No incident response or vulnerability disclosure policies are published, which could be enhanced to improve trust and security posture. Overall, envs.net presents a trustworthy, privacy-respecting community platform with a solid technical foundation but could benefit from enhanced security practices and compliance measures to strengthen its position and user confidence.

F

Free Radical

freeradical.zone

61

Free Radical operates an independent Mastodon social networking server focused on infosec, privacy, technology, and leftward politics. The platform offers users a space to engage in the fediverse with trending content, hashtags, and news exploration. The website is built on the Mastodon open-source platform version 4.4.2, utilizing React and modern JavaScript technologies. The domain is registered since 2017 with privacy protection, consistent with the site's privacy-focused mission. While the site provides basic privacy policy information, it lacks cookie consent mechanisms and explicit terms of service. Security posture is moderate with no detected security headers or incident response policies, but no critical vulnerabilities are evident. Overall, the site is functional, well-branded, and serves a niche community with moderate traffic and engagement.

P

Private by Design, LLC

fedia.io

58

Fedia.io is a small technology company operating a content aggregator and micro-blogging platform focused on the fediverse ecosystem. The platform offers services such as thread posting, photo sharing, and magazine creation, targeting general users interested in decentralized social content. The website is modern and functional, with good design and navigation, but lacks visible privacy and cookie policies on the login page. Technically, the site uses modern JavaScript frameworks and is hosted via bunny.net, indicating a CDN-backed infrastructure with moderate performance and good mobile optimization. Security features include CSRF protection on forms and password preview toggling, but the absence of DNSSEC and security headers indicates room for improvement. The WHOIS data is transparent and consistent with the business profile, enhancing trustworthiness. Overall, the site scores moderately well but needs to improve privacy compliance and security hardening.

P

Private by Design, LLC

klingon.wiki

56

The Klingon Language Wiki is a niche online resource dedicated to the Klingon language, offering a multilingual wiki platform with over 1,800 articles in English and additional content in German, French, and Dutch. The website is operated by Private by Design, LLC, a US-based entity, and serves language learners and enthusiasts interested in Klingon. The business model centers on providing free, open-access language resources through a wiki format, positioning itself as a specialized educational platform within the constructed language community. Technically, the website is built on the Foswiki content management system and uses older versions of jQuery, indicating some technical debt. The site is moderately optimized for mobile devices and SEO, with a clean and consistent design. Hosting details are not explicitly disclosed, but DNS servers suggest a third-party hosting arrangement. Performance is moderate, with no major errors or broken elements detected. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, and it employs an outdated jQuery version with known vulnerabilities. No advanced security policies or incident response contacts are published. Privacy compliance is limited, with no cookie policy or consent mechanism found, and no explicit privacy policy addressing GDPR. Contact information is minimal, with no emails or phone numbers provided on the main page. Overall, the website is a credible and useful resource for its target audience but would benefit from technical and security improvements, enhanced privacy compliance, and clearer contact information to strengthen trust and resilience against potential threats.

TrekCore.com is a well-established fan media website dedicated to Star Trek multimedia content, including high-resolution screencaps, episode guides, scripts, trivia, and gaming information. Founded in 2005 and operated by Trapezoid Media, LLC, it serves a niche audience of Star Trek enthusiasts with extensive, well-organized content and frequent updates. The website holds a strong market position as a leading fan resource in its domain. Technically, the site uses legacy technologies such as jQuery 1.3.2 and is hosted on HostGator servers. While the site is accessible via HTTPS and has a consistent domain registration history, it lacks modern security headers and DNSSEC, which could be improved. Privacy compliance is minimal, with no cookie consent mechanism despite the use of Google Analytics tracking. Overall, the site demonstrates good content quality and business credibility but would benefit from enhanced security and privacy practices.

L

Top Lemmy Instance Health Status

lemmy-status.org

37

The website lemmy-status.org provides a public health and status monitoring service for Lemmy instances, a federated social platform within the Fediverse. It dynamically displays uptime and response time statistics for various Lemmy nodes, targeting users and administrators interested in instance reliability. The site leverages modern web technologies, notably Vue.js, to deliver a responsive and interactive user experience. While the technical implementation is solid with HTTPS enabled and a clean design, the site lacks formal privacy, cookie, and terms of service policies, and the contact information is incomplete, which impacts its overall trustworthiness. Security posture is moderate, with HTTPS but missing security headers and incident response contacts. The domain registration is recent but consistent with the site's purpose and shows no suspicious patterns. Overall, the site is functional and serves a niche community but would benefit from improved compliance and security practices.

C

Chriwi Holding ApS

expressional.social

69

Expressional.social is an independent Mastodon server hosted in Copenhagen, Denmark, operated by Chriwi Holding ApS. The platform offers a federated social networking service focusing on safety, transparency, and security, welcoming users of all languages and federating primarily with other Danish servers. The website presents a modern and functional interface built on the Mastodon platform version 4.4.0-nightly, leveraging React and standard web technologies. The technical infrastructure is solid with HTTPS enforced and Cloudflare as registrar and DNS provider, though DNSSEC is not enabled. Security posture is adequate but could be improved by adding security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms and terms of service. No direct contact information or incident response contacts are published, which limits user support transparency. Overall, the site is trustworthy and professionally maintained, suitable for general audiences without adult content.

T

The Zero Proof

thezeroproof.com

69

The Zero Proof operates a professionally designed e-commerce platform specializing in non-alcoholic beverages including wines, spirits, beers, cocktail kits, and related barware. Established in 2019, the company positions itself as a leading online retailer in this niche, targeting consumers seeking alcohol-free alternatives. The website leverages Shopify's robust platform and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, Klaviyo, and Yotpo, indicating a mature digital marketing strategy. Technically, the site is well-implemented with modern web technologies, fast performance, and good mobile optimization. Security posture is strong with HTTPS enforced and domain locked with multiple EPP status codes, though DNSSEC is not enabled. However, the site lacks visible privacy and cookie policies and explicit contact information, which are areas for improvement. Overall, the site is trustworthy and professional with a solid market presence in the non-alcoholic beverage e-commerce sector.