Security Directory

P

Puffyan - We Donut Track You

puffyan.us

71

Puffyan is a small, individual-operated website offering privacy-respecting online services such as XMPP chat, a SearX metasearch engine, and an Invidious YouTube front-end. The site emphasizes user privacy by not tracking or selling user data and provides these services free of charge, supported by donations and referral programs. The website's market position is niche, targeting privacy-conscious users seeking alternatives to mainstream services. Technically, the site uses standard web technologies (HTML5, CSS3) and hosts privacy-focused open-source services. The site is mobile-optimized with good navigation and content quality. However, there is no evidence of advanced frameworks or CMS usage. Hosting details are not explicitly disclosed, but the domain is registered via NameCheap with no privacy protection. From a security perspective, the site uses HTTPS (implied by the URL), but no DNSSEC is enabled, and no security headers are detected in the provided content. There is no published privacy or cookie policy, which is a compliance gap, especially under GDPR. Incident response contact is provided via an abuse email. No vulnerability disclosure or security.txt file is present. Overall, the security posture is moderate but could be improved with better header implementation and formal policies. The overall risk is low given the nature of the services and the absence of sensitive transactions or personal data collection. Strategic recommendations include publishing privacy and cookie policies, enabling DNSSEC, adding security headers, and establishing a vulnerability disclosure process to enhance trust and compliance.

Erista Group operates a niche technology business focused on video game preservation by providing high-bandwidth solutions and a high-performance content delivery network tailored for video game enthusiasts and archivists worldwide. The company offers specialized services such as the hShop 3DS content archive and Myrient, which preserves video game history. Founded in 2020 and registered under 1337 Services LLC in Saint Kitts and Nevis, the business maintains a small but focused market presence. Technically, the website is built with standard HTML, CSS, and JavaScript, hosted behind Cloudflare DNS and CDN services. The site demonstrates moderate performance and basic mobile optimization but lacks advanced frameworks or CMS platforms. SEO practices are adequately implemented with proper meta tags and Open Graph data, though accessibility features are basic. From a security perspective, the domain benefits from clientTransferProhibited status to prevent unauthorized transfers but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. No HTTPS or SSL configuration details were explicitly found in the provided data, and no incident response or vulnerability disclosure policies are published. Privacy and cookie policies are absent, indicating gaps in compliance and user data protection. Overall, the website is functional and professional with good content relevance and navigation clarity but requires improvements in privacy compliance, security best practices, and transparency to enhance trustworthiness and reduce risk.

D

...that moves the sun and stars.

detondev.com

44

The website detondev.com is a minimalistic landing page with very limited content, primarily consisting of a single clickable area linking to an internal page. The site lacks any explicit business description, contact information, or policy documents, which limits its utility for visitors and reduces trustworthiness. The domain is registered with Porkbun LLC since March 2022, indicating a relatively new but legitimate registration. The technical infrastructure is basic, with no detected CMS, frameworks, or analytics tools, and no visible security headers or HTTPS status provided. The site does not employ any privacy or cookie policies, nor does it provide terms of service or incident response information. Overall, the digital maturity of the site is low, with minimal SEO and accessibility features.

P

Private by Design, LLC

witchfuneral.quest

51

The website witchfuneral.quest is a personal portfolio and blog site operated by an individual named Ada, who identifies as a nonbinary lesbian and technology enthusiast. The site serves as a personal corner of the internet to share interests in Linux, coding, art, and music, with a small audience likely composed of like-minded individuals. The business model is informal, relying on voluntary support via coff.ee, and does not represent a commercial enterprise or large-scale operation. Technically, the site is a simple static HTML page with basic CSS and JavaScript, including a last.fm integration for music display. The hosting is provided by Porkbun, a domain registrar, with no detected CMS or advanced frameworks. Performance and mobile optimization are basic, with minimal SEO and accessibility features. No security headers or HTTPS status were detected from the data provided, indicating potential security improvements. From a security perspective, the site lacks formal privacy, cookie, or terms of service policies, and no contact information for incident response or data protection officers is provided. The domain WHOIS data is privacy protected by Private by Design, LLC, which is reasonable for a personal site, but the domain creation date is suspiciously set in the future, which may be a data error. No WAF or blocking mechanisms are detected, and no adult or unsafe content is present. Overall, the site scores low to moderate on content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic improvements in HTTPS deployment, security headers, privacy policies, and contact information would enhance trust and compliance.

A

ari melody 💫

arimelody.space

59

The website arimelody.space represents a personal brand of an individual named ari melody, who is a musician, developer, streamer, and content creator. The site serves as a hub linking to various creative projects, social media platforms, and streaming channels. The business model is primarily content creation with monetization through music sales and streaming engagement. The site targets a general audience interested in music, gaming, and creative tech projects. Technically, the site uses modern web standards including HTML5, CSS3, and JavaScript ES modules, hosted with Cloudflare DNS services. The site is mobile optimized and has good SEO practices but lacks advanced security headers and privacy compliance documentation. Security posture is moderate with HTTPS enabled and domain transfer protections, but no DNSSEC or security.txt found. Overall, the site is safe, trustworthy, and professionally presented but could improve privacy and security compliance.

P

Privacy service provided by Withheld for Privacy ehf

eepy.zone

35

eepy.zone is a recently registered domain (October 2023) currently serving as a parked domain with advertising content primarily from Google Adsense and Bodis. The website lacks any clear business description, contact information, or services, indicating it is not an active commercial or organizational site. The technical infrastructure relies on basic HTML, CSS, and JavaScript with external ad scripts and DNS hosting by ParkLogic. No CMS or advanced frameworks are detected. Security posture is minimal with no DNSSEC, no visible HTTPS enforcement, and absence of security headers. Privacy compliance is limited to a basic privacy policy page without cookie consent mechanisms. Overall, the site presents low business credibility and trustworthiness due to its placeholder nature and privacy-protected WHOIS registration.

M

Mercury Workshop

mercurywork.shop

66

Mercury Workshop is a small, community-driven organization focused on developing free and open source software projects, primarily targeting developers and technology enthusiasts interested in ChromeOS and web technologies. The website showcases multiple public projects hosted on GitHub and provides detailed member profiles, emphasizing collaboration and open source contributions. The business model centers on community engagement and software development without commercial sales or advertising. Technically, the website uses modern web standards including HTML5, CSS3, and JavaScript modules, with some projects leveraging WebAssembly. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security posture is basic; HTTPS is implied but no explicit security headers or vulnerability disclosure policies are present. Contact information is clearly provided with dedicated emails for legal, security, and support inquiries, reflecting a responsible approach to incident response. Overall, the site is professional and trustworthy within its niche but could improve privacy compliance and security best practices.

S

Shenzhen Huaqiu Electronics Co., Ltd.

nextpcb.com

68

NextPCB, a subsidiary of Shenzhen Huaqiu Electronics Co., Ltd., is a large-scale manufacturer specializing in PCB prototype, fabrication, and assembly services. The company offers a broad range of PCB types including multilayer, HDI, rigid-flex, and metal core PCBs, supported by certifications such as ISO9001, IATF16949, and UL. Their online platform facilitates instant quoting, order tracking, and management, targeting electronics manufacturers and hardware developers globally. The website is professionally designed with comprehensive service descriptions and customer testimonials, reflecting a strong market position in the manufacturing sector. Technically, the website employs modern web technologies including jQuery, Swiper.js, and multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Yandex Metrika. It is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and secure forms, though explicit security headers are not visibly configured. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The WHOIS data is unavailable, indicating privacy protection or unregistered status, which slightly reduces trust but is common for commercial entities. Overall, the site demonstrates a mature digital presence with strong business credibility and moderate to high security standards.

A

ATLAS DATA STORAGE

atlasds.com

59

Atlas Data Storage is a small technology company specializing in end-to-end DNA data storage solutions. The website presents a focused business model targeting enterprises and organizations interested in advanced data storage technologies. The company appears to be emerging in the DNA data storage market with limited public business information and no visible parent or subsidiary companies. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and providing a moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS with HSTS, but lacks additional security headers and published security policies. The absence of privacy and cookie policies, as well as missing WHOIS registration data, reduces overall trust and compliance posture. Contact information is limited to email addresses without phone or physical address details.

G

GetTerms

getterms.io

70

GetTerms is a technology company specializing in providing data privacy compliance solutions for businesses worldwide. Established in 2015, it offers a suite of SaaS products including privacy policy generators, cookie policy generators, terms and conditions generators, and consent management platforms. The company targets businesses needing to comply with global privacy regulations such as GDPR, CCPA, CalOPPA, and others. With over 500,000 customers and strong trust indicators like high Trustpilot ratings, GetTerms holds a solid market position as a reliable compliance partner. Technically, the website is built on WordPress with modern technologies including Google Tag Manager for analytics and Cloudflare for DNS management. The site is well optimized for performance, mobile responsiveness, and accessibility. SEO practices are implemented effectively using Yoast SEO plugin. Security posture is strong with HTTPS enforced and privacy-by-design principles applied in consent management, although some security headers could be improved. From a security perspective, the site demonstrates good practices such as default denied consent in Google Consent Mode and embedding a cookie consent widget. However, there is no publicly available security policy or incident response information, and no security.txt file for vulnerability disclosures. The domain registration is privacy protected but consistent with the business profile and age, indicating legitimacy. Overall, GetTerms presents a professional, trustworthy, and technically sound online presence with a strong focus on privacy compliance. The risk level is low, but improvements in security transparency and header implementation are recommended to further enhance trust and security posture.

A

Arsys Internet S.L.U.

arsys.net

73

Arsys Internet S.L.U. is a well-established European technology company specializing in domain registration, web hosting, cloud computing, and managed IT services. Founded in 1996 and headquartered in Logroño, Spain, Arsys positions itself as a trusted provider with 25 years of experience, offering a broad portfolio of services including email hosting, SSL certificates, and ecommerce solutions. The company targets businesses and individuals seeking reliable internet presence solutions, emphasizing European data sovereignty and comprehensive cloud infrastructure. Technically, the website employs modern web technologies including JavaScript, CSS3, and HTML5, with integrations of error tracking (Sentry) and marketing analytics (Tune.js). Hosting appears to be managed by IONOS, indicating a robust infrastructure. The site is well-optimized for mobile devices and SEO, with structured data enhancing search engine understanding. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses SSL certificates, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the domain WHOIS data is unavailable or protected, which slightly reduces transparency and trustworthiness. However, the professional presentation, consistent branding, and comprehensive service offerings support a positive risk assessment. Strategic recommendations include enhancing security headers, publishing detailed security policies, and improving accessibility to further strengthen the security posture and user trust.

P

Private by Design, LLC

osp.gay

49

osp.gay is a personal website representing Woodrow Caldera, featuring personal content such as a blog, webring participation, and a guestbook. The site targets a general audience interested in community and personal expression rather than commercial services. The domain is recently registered in 2023 with privacy protection, consistent with a personal site. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript, with hosting DNS managed by Hurricane Electric. External references to Neocities and community webrings indicate a niche community focus. Security posture is limited, with no visible HTTPS or security headers in the provided data, and no privacy or cookie policies published. No contact information or incident response details are available, limiting trust and compliance. Overall, the site is safe and suitable for general audiences but lacks professional security and privacy practices.

P

Private by Design, LLC

proot.party

48

The website proot.party is a personal site belonging to an individual known as strongsand, a high school student interested in cybersecurity, furry art, and gaming. The site is currently incomplete and serves primarily as a personal expression platform with links to related community sites. The domain is newly registered in late 2024, consistent with the site's early development stage. The technical infrastructure is basic, relying on static HTML and CSS, hosted likely via Porkbun's DNS services. There is no evidence of advanced CMS or frameworks, and no analytics or tracking technologies are present. From a security perspective, the site lacks HTTPS confirmation in the provided data, security headers, privacy policies, and contact information for incident response. The domain registration is consistent and legitimate, with no privacy protection that would obscure ownership, which is appropriate for a personal site. No WAF or blocking mechanisms were detected, and the content is accessible without restrictions. The site does not contain adult or explicit content and is safe for general audiences. Overall, the site scores moderately on content and business credibility but scores low on privacy compliance and security posture due to missing policies and security controls. The site would benefit from implementing HTTPS, security headers, privacy and cookie policies, and providing contact information to improve trust and compliance.

P

Potatoe

potatoe.ca

61

Potatoe.ca is a personal website operated by an individual named Spike, serving as a small corner of the Internet with personal content and links to other community and personal sites. The site is simple, static, and handcrafted without JavaScript, emphasizing privacy and minimalism. The domain was registered in early 2023 and is protected by WHOIS privacy, consistent with a personal project rather than a commercial enterprise. The hosting is self-managed on a personal HP ProDesk machine, indicating a small-scale operation. Technically, the website uses basic HTML and CSS with no advanced frameworks or CMS detected. It is mobile responsive and accessible, but lacks modern security features such as DNSSEC, HTTPS confirmation, and security headers. No analytics or tracking scripts are present, which aligns with the privacy-conscious approach. The site does not provide privacy, cookie, or terms of service policies, nor does it offer contact information or incident response details. From a security perspective, the absence of HTTPS information and security headers reduces the security posture. The domain is locked against unauthorized transfers and updates, which is a positive indicator. However, the lack of formal policies and contact channels limits compliance and incident response readiness. No vulnerabilities or malicious content were detected, and the content is safe for general audiences. Overall, Potatoe.ca is a low-risk personal website with basic technical implementation and minimal security features. Strategic improvements include enabling HTTPS, adding security headers, publishing privacy and cookie policies, and providing contact information to enhance trust and compliance.

The website beepi.ng is a personal homepage operated by an individual known as 'unnick', hosted under a domain registered to Ginkoid LLC in the US. The site serves as a portfolio and hub for personal projects, creative content, and links to various social media and technical platforms. It is not a commercial business site and targets a general audience interested in programming, shaders, and creative web tools. The domain is newly registered in late 2024, consistent with the site's content and purpose. Technically, the site uses standard HTML5, CSS3, and JavaScript with Cloudflare DNS services. The site is moderately optimized for mobile and accessibility but lacks advanced frameworks or CMS. Performance is moderate with no heavy scripts or analytics detected. The site does not implement common security headers or privacy policies, indicating a basic security posture. Security-wise, the site uses HTTPS (implied by domain and external links), but no DNSSEC or security headers are enabled. There are no visible vulnerabilities or exposed sensitive data, but the absence of privacy and cookie policies and security incident contacts reduces compliance and trust. No WAF or blocking mechanisms are detected, and the site content is fully accessible. Overall, the site is a safe, personal, and creative web presence with moderate technical quality but limited security and privacy compliance. Strategic improvements in security headers, privacy policies, and contact information would enhance trust and compliance.

C

Alexia's Webplace

cyrneko.eu

49

The website 'Alexia's Webplace' serves as a personal online presence for an individual named Alexia, who is active in various online communities such as the Fediverse, Bluesky, and open source projects. The site provides contact information primarily through modern decentralized communication platforms like Signal, XMPP, and Matrix, and offers links to code repositories and a blog. The business model is personal and community-focused, relying on donations via Ko-Fi, GitHub Sponsors, and Monero wallet contributions. The website targets a general audience interested in social and open-source communities. Technically, the site is built with standard HTML5, CSS3, and JavaScript, using modern web fonts and CSS variables for styling. The site appears to be hosted under a domain registered with Porkbun LLC, a reputable registrar. The site is moderately optimized for mobile and accessibility, though no advanced frameworks or CMS are detected. Performance is moderate with no evident analytics or tracking scripts, indicating a privacy-conscious approach. From a security perspective, the site lacks explicit security headers and does not provide privacy or cookie policies, which limits compliance with GDPR and other privacy regulations. No forms collect sensitive data, reducing risk exposure. There is no vulnerability disclosure or incident response information, which could be improved to enhance transparency and trust. The domain registration data is consistent with the website content, and no suspicious patterns are detected. Overall, the website is safe, well-structured, and serves its purpose as a personal web presence. However, it would benefit from adding privacy and cookie policies, security headers, and incident response information to improve compliance and security posture.

P

Private by Design, LLC

niko.lgbt

59

The website niko.lgbt is a personal portfolio site belonging to a 19-year-old trans and enby developer from Canada. It serves as a platform to share personal information, coding and non-coding projects, and contact options. The site is simple and straightforward, targeting a general audience interested in the developer's work and identity. The domain is registered under Private by Design, LLC, a US-based privacy-focused organization, which aligns with the personal and privacy-conscious nature of the site. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript, with privacy-friendly GoatCounter analytics integrated. The site is lightweight, fast-loading, and mobile-optimized with basic accessibility and SEO features. DNS is managed via Desec.io, but DNSSEC is not enabled, representing a minor security gap. No CMS or advanced frameworks are detected, indicating a custom or static site. From a security perspective, the site benefits from domain status protections preventing unauthorized transfers or deletions. However, no security headers are detected, and there is no evidence of privacy or cookie policies, which limits compliance with GDPR and other privacy regulations. The absence of contact emails or phone numbers reduces direct communication options, though a contact page is linked. No vulnerabilities or suspicious content are identified, and the site does not contain adult or questionable material. Overall, niko.lgbt is a legitimate, small-scale personal website with a moderate security posture and limited privacy compliance. Strategic improvements in security headers, privacy documentation, and contact transparency would enhance trust and compliance.

D

Liam's Portfolio

duckwithsunglasses.com

56

The website duckwithsunglasses.com is a personal portfolio for Liam, a multimedia designer from the UK specializing in graphic design, brand identity, and motion graphics. The site showcases his skills and work samples and includes a link to resources sold via Gumroad. The business model is freelance and resource sales, targeting potential clients and employers interested in multimedia design. The site is small scale and recently established in 2022. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, WebGL shaders, and Google Fonts. It is hosted behind Cloudflare DNS and CDN services, ensuring good SSL configuration and moderate performance. The site is mobile optimized with good design and navigation but lacks advanced accessibility features and SEO optimization. From a security perspective, the site enforces HTTPS and has domain transfer protection but lacks visible security headers and privacy or cookie policies. No contact information or incident response policies are disclosed, and no vulnerability disclosure mechanisms are present. Tracking is minimal, limited to Cloudflare Insights. Overall, the security posture is moderate but could be improved with standard security headers and compliance documentation. The overall risk is low given the nature of the site as a personal portfolio with no sensitive data collection or e-commerce. Strategic recommendations include adding privacy and cookie policies, security headers, and contact information to improve trust and compliance. Enhancing accessibility and SEO would also benefit the site's reach and professionalism.

A

Arsys Internet S.L.U.

arsys.fr

66

Arsys Internet S.L.U. is a well-established European technology company specializing in domain registration, web hosting, cloud services, and managed IT solutions. With over 25 years of experience, Arsys targets businesses and individuals primarily in France, Spain, Portugal, and English-speaking markets. Their offerings include domain sales, professional email, WordPress and ecommerce hosting, VPS and dedicated servers, and comprehensive cloud solutions with a focus on European data sovereignty. Technically, the website demonstrates a mature digital infrastructure with modern web technologies, responsive design, and integration of advanced analytics and error monitoring tools such as Sentry and Tune. The presence of structured data enhances SEO and business transparency. The hosting environment appears robust, likely leveraging their own or Ionos infrastructure, ensuring fast performance and good accessibility. From a security perspective, the site enforces HTTPS and uses secure cookie settings, with no visible vulnerabilities or exposed sensitive data. However, explicit security headers and a published security policy or incident response contacts are absent, representing areas for improvement. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR. Overall, Arsys presents a trustworthy and professional online presence with strong business credibility and technical maturity. The lack of WHOIS data due to privacy protection slightly reduces domain trust but is justified for this business type. Strategic recommendations include enhancing security header implementation, publishing a security policy, and adding vulnerability disclosure mechanisms to further strengthen security posture and customer trust.

A

Arsys Internet S.L.U.

arsys.pt

69

Arsys Internet S.L.U. is a well-established European technology company specializing in domain registration, web hosting, cloud computing, and managed IT services. Founded in 1996 and headquartered in Spain, Arsys offers a comprehensive portfolio of services targeting both individual and business customers seeking reliable internet presence solutions. The company emphasizes European data sovereignty and operates a large infrastructure with over 100,000 servers across 30 data centers. Technically, the website demonstrates modern web standards, responsive design, and good SEO practices, supported by structured data and multilingual support. Security posture is solid with HTTPS enforcement and secure cookie practices, although explicit security policies and incident response information are not publicly detailed. Overall, Arsys presents a trustworthy and professional digital presence aligned with its market position as a leading European hosting provider.

A

Arsys Internet S.L.U.

arsys.es

68

Arsys Internet S.L.U. is a well-established Spanish technology company founded in 1996, specializing in domain registration, web hosting, cloud services, and managed IT solutions. The company targets businesses and individuals seeking reliable internet presence solutions, offering a comprehensive portfolio including email hosting, SSL certificates, and online store hosting. Their market position is strong within Spain and they maintain sister sites for other language markets. Technically, the website employs modern web standards with good mobile optimization and SEO practices, hosted likely by Ionos, and uses structured data for enhanced search engine visibility. Security posture is solid with HTTPS enforced and secure cookie practices, though explicit security headers and policies are not evident in the provided data. Privacy compliance is limited by the absence of visible privacy and cookie policies in the analyzed content. Overall, the website is professional, trustworthy, and content-rich, with clear contact information and social media presence. Recommendations include publishing explicit privacy and cookie policies, adding security headers, and establishing a vulnerability disclosure process to enhance compliance and security transparency.

C

Carl Barenbrug

cmhb.de

54

Carl Barenbrug's website serves as a professional portfolio showcasing his work as a product designer and creative director. The site highlights his involvement with various creative projects and companies, including Minimalissimo and 099. The business model is centered on creative services and personal branding within the design industry. The website is well-structured with good design quality and clear navigation, targeting design professionals and enthusiasts. Technically, the site uses modern web standards with custom fonts and JavaScript, hosted on Hover's DNS infrastructure. Performance and mobile optimization are adequate, though accessibility could be improved. Security posture is moderate; domain registration protections are in place but DNSSEC is not enabled and security headers are missing. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the site is trustworthy but could benefit from enhanced security and compliance measures.

F

FARO

faro.co

61

FARO is a retail and technology company specializing in helping international fashion brands offload obsolete inventory through stores in emerging and non-core markets. Their business model focuses on sustainability, brand protection, and supply chain optimization leveraging technology. The website presents a professional and consistent brand image with clear messaging and partner endorsements from well-known fashion brands. Technically, the site is built on Webflow, uses modern web technologies, and is optimized for performance and mobile devices. Security posture is good with HTTPS and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, FARO appears to be a legitimate and professional business with a solid digital presence.

AI Growth Labs is a newly founded technology startup focused on AI innovation to improve consumer products and services. The company is currently in stealth mode, indicating early-stage development and a focus on building AI-first solutions. The website presents a professional design with clear messaging about their mission but limited public content. Technical infrastructure includes HTTPS and Cloudflare DNS, but lacks advanced DNS security features like DNSSEC and security headers. No privacy or cookie policies are published, which is a compliance gap. Contact is limited to email addresses, with no phone or physical address provided. Overall, the digital maturity is moderate with room for improvement in security and compliance documentation.

Awoo Systems is a small technology company focused on providing highly reliable uptime services, emphasizing zero 9s uptime since 2017. The website is minimalistic, primarily serving as a digital presence with a blog and a contact email reference. The company appears to target technology customers requiring operational reliability. Technically, the website is simple, built with basic HTML and CSS, hosted via NameCheap, and lacks advanced frameworks or CMS. Performance and mobile optimization are basic, with no detected analytics or tracking tools. Security posture is limited; HTTPS is assumed but no security headers or DNSSEC are enabled. Privacy and cookie policies are absent, and contact information is minimal and obfuscated. WHOIS data shows the domain is privacy protected and moderately aged, consistent with a small tech business. Overall, the site is functional but lacks comprehensive security, privacy, and compliance features.

Box.org is a nonprofit organization specializing in secure cloud content management and file sharing services tailored for nonprofits and social impact organizations. Established in 2005, it has positioned itself as a trusted provider in the nonprofit technology sector, offering collaboration tools that emphasize security and compliance. The website reflects a mature digital presence with comprehensive privacy and cookie policies, and clear contact channels, reinforcing its commitment to transparency and user trust. Technically, the site employs modern web technologies including VideoJS for media playback and Adobe Target for marketing and analytics, ensuring a responsive and performant user experience across devices. Security is robust, with HTTPS enforced and multiple security headers implemented, alongside recognized certifications such as SOC 2 Type II and ISO 27001, underscoring its dedication to data protection. While WHOIS data is unavailable due to privacy protection, the overall domain and website characteristics support legitimacy. Strategic recommendations include publishing a dedicated security policy and vulnerability disclosure to further enhance trust and compliance.

A

Arsys Internet S.L.U.

servidoresdns.net

73

Arsys Internet S.L.U. is a well-established Spanish technology company founded in 1996, specializing in domain registration, web hosting, cloud computing, email services, and managed IT solutions. The company positions itself as a leading European provider with a strong focus on data sovereignty and comprehensive cloud infrastructure. Their website reflects a mature digital presence with professional design, clear navigation, and extensive service offerings targeting businesses and individuals seeking reliable internet presence solutions. Technically, the site employs modern web technologies, asynchronous loading of analytics and error tracking scripts, and is hosted likely by IONOS, indicating robust infrastructure. Security posture is strong with HTTPS enforced and secure cookie settings, though explicit security headers and incident response contacts are not publicly evident. The WHOIS data for the domain www.arsys.net is incomplete or missing, which raises some concerns about domain registration transparency but does not detract significantly from the overall legitimacy given the company's established brand and presence. Overall, Arsys demonstrates a solid business and technical foundation with room for improvement in security transparency and WHOIS data clarity.

F

FSKY

fsky.io

57

FSKY is a small technology collective founded in 2023, dedicated to hosting public online services and supporting open source development. Their market position is niche, focusing on privacy-conscious users and developers who value anonymity and decentralized communication. Key services include chat and VoIP platforms, collaborative coding, and private frontends for popular services like Reddit and Imgur, with strong integration into privacy networks such as Tor and Yggdrasil. The business model relies on community funding and voluntary donations, reflecting a grassroots approach rather than commercial scale operations. Technically, the website is built with standard HTML5 and CSS3, featuring a clean and consistent design optimized for mobile devices. The infrastructure leverages reputable registrars and DNS providers but lacks advanced security features such as DNSSEC and security headers. Performance is moderate with no detected analytics or advertising, aligning with the privacy-focused ethos. The absence of CMS or complex frameworks suggests a lightweight and maintainable platform. From a security perspective, the site benefits from HTTPS and domain transfer protections but misses critical enhancements like DNSSEC and published security policies. No forms or data collection mechanisms are present, reducing attack surface, but the lack of privacy and cookie policies indicates compliance gaps, especially under GDPR. The use of privacy-protected WHOIS registration is consistent with the business's privacy orientation and justified. Overall, the security posture is moderate but could be improved with better header configurations and transparency. The overall risk is low given the nature of the services and limited data collection, but strategic improvements in privacy compliance and security best practices are recommended to enhance trust and resilience. The website is professional and trustworthy within its niche but should address policy disclosures and technical security enhancements to meet broader compliance standards.

P

Private by Design, LLC

derg.rest

43

The website derg.rest is a personal site representing an aspiring master electrician named Tom Darsonian based in Michigan, USA. The site serves primarily as a personal portfolio or presence with minimal content focused on personal interests and updates. The business is small-scale and newly established, as indicated by the domain registration date in early 2024. The site lacks formal business contact information, privacy policies, and terms of service, which limits its professional and compliance posture. Technically, the site is simple, built with basic HTML and CSS, and uses Cloudflare for DNS services. There is no evidence of a CMS or advanced frameworks. Mobile optimization and accessibility are basic but functional. Performance is moderate with no visible errors or broken elements. However, security measures are minimal; no security headers or DNSSEC are enabled, and HTTPS enforcement is not confirmed from the data provided. From a security perspective, the domain registration is consistent and legitimate with appropriate domain status protections. The absence of privacy and cookie policies, contact information, and security headers reduces the overall security and privacy compliance score. No vulnerabilities or malicious content were detected. The site content is safe for general audiences with no adult or explicit material. Overall, the site scores moderately on AI evaluation, with strengths in business credibility due to consistent WHOIS data and weaknesses in privacy compliance and security posture. Strategic improvements in security headers, privacy policies, and contact information would enhance trust and compliance.

CBAX dot DEV Blog is a personal technology blog maintained by an individual enthusiast focused on topics such as homelab management, amateur radio, and retro technology. The site is currently under construction and hosts minimal content, primarily serving as a tech-focused personal space with links to a source code repository. The target audience includes technology hobbyists and enthusiasts interested in niche technical topics. The business model is informal and content-driven without commercial services or monetization evident. Technically, the website is a static HTML/CSS site with custom styling and no detected CMS or frameworks. It uses a dark/light mode color scheme and a monospace font for a clean, minimalistic design. Performance and mobile optimization are basic but functional. Security posture is minimal with no HTTPS or security headers explicitly detected in the provided data, and no privacy or cookie policies are present, indicating low compliance with privacy regulations. No contact or incident response information is provided, limiting trust and professional credibility. Overall, the site is a small-scale personal project with moderate trustworthiness but significant room for improvement in security, privacy, and professional presentation.

A

Home

ammar.win

55

The website ammar.win is a newly registered personal or small project site created in June 2024. It features minimal content primarily focused on visual effects using JavaScript libraries such as particles.js and typed.js. The site is hosted on Cloudflare with HTTPS enabled, indicating basic security measures. However, it lacks critical compliance elements such as privacy and cookie policies, terms of service, and contact information, which limits its business credibility and privacy compliance. The technical implementation is moderate with modern libraries but could benefit from improved accessibility and SEO optimization. Security posture is basic with no DNSSEC and missing security headers, though no vulnerabilities or malicious content were detected. Overall, the site is safe for general audiences but scores low on business credibility and privacy compliance due to missing policies and contact details.

M

mudkip

mudkip.dev

59

mudkip.dev is a personal website and portfolio for an individual software developer and security researcher known as mudkip. The site showcases interests in programming, video games, and music, and includes links to social profiles and contact email. The business model is personal branding and knowledge sharing through blogging and project showcases. The site uses modern web technologies such as Astro framework and is designed with good navigation and mobile responsiveness. However, it lacks formal privacy, cookie, and security policies, which limits compliance maturity. Security posture is moderate with HTTPS implied but no explicit security headers or vulnerability disclosure mechanisms. Overall, the site is trustworthy for its intended purpose but would benefit from enhanced security and compliance documentation.

C

coentjeee.nl

coentjeee.nl

49

The website coentjeee.nl is a newly registered domain (December 2024) that currently serves as a parked domain with minimal content primarily focused on advertising through Google Adsense and Bodis. There is no clear business description, contact information, or services offered, indicating that the site is not actively used for commercial or informational purposes. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. Security posture is minimal with HTTPS enabled but lacking security headers and DNSSEC, and no privacy or cookie consent mechanisms are implemented. Overall, the site presents a low trust profile with limited business credibility and poor content quality.

S

SCS Software s.r.o.

eurotrucksimulator2.com

69

Euro Truck Simulator 2 is a well-established truck driving simulation game developed and published by SCS Software s.r.o., a medium-sized company based in the Czech Republic. The website serves as a comprehensive portal for the game, offering information about the game features, expansions, and community engagement. The company holds a strong market position in the niche of truck simulation games, supported by licensed truck brands and a dedicated fan base. The business model revolves around game sales, expansions, and community-driven modding support. Technically, the website is built on a custom stack using standard web technologies such as HTML5, CSS3, and JavaScript, with integrations for Google Analytics, YouTube embeds, and Steam widgets. The site is hosted via GoDaddy.com, LLC, and employs HTTPS with a good SSL configuration. The site is mobile optimized and accessible, with a well-implemented cookie consent mechanism that complies with GDPR requirements. From a security perspective, the website demonstrates good practices including HTTPS enforcement and cookie consent management. However, there is room for improvement by enabling DNSSEC, adding security headers, and publishing formal security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It effectively supports the business goals of SCS Software and provides a positive user experience for its target audience.

Awoo Systems is a small technology company focused on delivering extremely high uptime services, emphasizing zero 9s of uptime since 2017. The website is minimalistic, providing basic information about the company and a blog subdomain. The business targets customers requiring highly reliable system availability. The domain is registered through NameCheap with privacy protection, which is common for small tech firms. Technically, the website uses basic HTML and CSS without advanced frameworks or CMS. The site lacks modern SEO and accessibility features but is functional with moderate performance. No advanced hosting or platform details are evident. Security posture is weak due to missing security headers, lack of DNSSEC, and no visible HTTPS confirmation in the data provided. Security-wise, the site does not publish privacy, cookie, or terms policies, nor does it provide incident response or vulnerability disclosure information. The domain registration is privacy protected but legitimate with no suspicious patterns. No WAF or blocking mechanisms are detected, and the content is safe for general audiences. Overall, the website scores average in content quality and technical implementation but scores low on privacy compliance and security posture. Strategic improvements in security headers, policy publication, and transparency would enhance trust and compliance.

J

joinfreedomacademy.com

joinfreedomacademy.com

36

The website ww1.joinfreedomacademy.com appears to be a parked domain with minimal content primarily consisting of advertisements served via Google Adsense and Bodis. There is no substantive business information, contact details, or services described on the site. The domain WHOIS query returned no registration data, indicating the domain is either unregistered or parked, which undermines the legitimacy of any business claims. Technically, the site uses basic HTML, CSS, and JavaScript with no advanced frameworks or CMS detected. Security posture is weak due to lack of HTTPS and absence of security headers. Privacy compliance is minimal with only basic privacy and legal pages present but no cookie consent or GDPR indicators. Overall, the site lacks professionalism and trustworthiness, posing a low risk but also offering no business value or credible presence.

isekai.rocks is a small niche website dedicated to fans of isekai, providing free gemini capsule hosting and a public XMPP service. The site targets a specialized audience interested in alternative internet protocols and community interaction. The business model is community-focused with manual account registration, indicating a small-scale operation without automated commercial services. The domain is newly registered in June 2024 and is managed by Private by Design, LLC, a US-based organization consistent with the website's hosting and service location. Technically, the website uses basic HTML and CSS with no detected CMS or advanced frameworks. It supports Gemini protocol content proxied via kineto and offers XMPP services. The site is hosted by Porkbun LLC and shows moderate performance and good mobile optimization. However, there is no evidence of advanced SEO or accessibility features beyond basic standards. From a security perspective, the domain has protective status flags but lacks DNSSEC and security headers. There is no published security policy or incident response contact, and no HTTPS enforcement details are visible in the HTML content. Privacy compliance is minimal, with no privacy or cookie policies found. The site does not use tracking or analytics services, which reduces privacy risks but also limits business intelligence. Overall, the website is legitimate and consistent with its stated purpose but would benefit from improved security practices, privacy compliance, and transparency to enhance trust and protect users. Strategic recommendations include enabling DNSSEC, implementing HTTPS with strong TLS, adding security headers, and publishing privacy and security policies.

Squarebowl.club is a small personal blog website created in late 2022, focusing on computer-related topics and personal interests such as chicken. The site is built using the Hugo static site generator and presents basic content with minimal design and navigation features. The technical infrastructure is simple, with no detected CMS beyond Hugo, and no advanced frameworks or analytics tools in use. Hosting details are not explicitly disclosed, but DNS is managed via desec.io and desec.org name servers. Security posture is minimal, with no security headers detected and DNSSEC not enabled. The domain registration is privacy protected, which is consistent with the personal nature of the site. No privacy, cookie, or terms of service policies are published, and no contact information is provided, limiting compliance and trust indicators. Overall, the site is safe with no adult or explicit content, but lacks professional security and privacy practices.

Purelymail is a small technology company founded in 2018 that provides affordable, no-frills email hosting services. Their offerings include IMAP and POP3 compatible email hosting, webmail access via Roundcube, and support for multiple domains without additional charges. Positioned as a cost-effective alternative to established providers like Protonmail and Google Workspace, Purelymail targets individuals and small to medium businesses seeking simple and inexpensive email solutions. The website content is clear, professional, and focused on the core service without extraneous features or marketing distractions. Technically, the website is hosted on Amazon AWS and uses standard web technologies including HTML5, CSS3, and JavaScript. The webmail service is powered by Roundcube. The site demonstrates moderate performance and basic mobile optimization. SEO and accessibility features are present but could be enhanced. Security practices include HTTPS and domain status protections, but lack DNSSEC and security headers, which are recommended for improved security posture. From a security perspective, Purelymail maintains a basic but functional security stance. The absence of DNSSEC and security headers, as well as no visible vulnerability disclosure or incident response contacts, indicate areas for improvement. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. No contact emails or phone numbers are provided, which may impact user trust and support accessibility. Overall, Purelymail presents a legitimate and focused business with a clear value proposition in the email hosting market. Strategic improvements in security practices, privacy compliance, and contact transparency would enhance trust and resilience. The website quality and business credibility are good, supporting a moderate risk profile with opportunities for growth and maturity.

C

Cloudflare, Inc

code.golf

54

Code Golf is an online platform dedicated to coding challenges focused on minimizing code length, appealing primarily to programmers and coding enthusiasts. The website offers a variety of coding problems categorized by themes such as sequences, mathematics, gaming, and art, fostering a niche community of developers interested in code golfing. The platform integrates community features such as Discord for advice and GitHub for source code transparency, positioning itself as a specialized educational and recreational coding site. Technically, the website employs modern web standards including HTML5, CSS3 with light and dark themes, and JavaScript ES modules. Hosting and domain registration are managed by Cloudflare, ensuring reliable performance and security infrastructure. The site is mobile-optimized and demonstrates good SEO practices with appropriate meta tags and Open Graph data. However, no CMS or major frameworks are detected, indicating a custom or lightweight implementation. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks visible security headers and does not provide privacy, cookie, or terms of service policies, which are important for compliance and user trust. No contact information or incident response channels are provided, limiting transparency. The absence of a security.txt or vulnerability disclosure policy suggests room for improvement in security communication. Overall, Code Golf presents a well-structured, content-rich platform with a strong technical foundation but requires enhancements in privacy compliance, security best practices, and user trust mechanisms to improve its security posture and regulatory adherence.

Z

ZEISS

zeiss.com.au

66

ZEISS Australia and New Zealand is a regional branch of the globally recognized ZEISS Group, specializing in optics and optoelectronics technology. The company operates multiple business units including Vision Care, Medical Technology, Industrial Quality, and Research Microscopy, serving both B2B and B2C markets. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored for a general audience interested in advanced technology solutions. The company maintains a medium-sized operation with over 250 employees in the region and a history dating back to 1961 in Australia. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and tracking tools such as Google Tag Manager and OneTrust for cookie consent, indicating a good level of digital maturity and compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding explicit security headers and publishing incident response policies. Overall, the domain and website exhibit high trustworthiness and professionalism, consistent with a reputable international technology enterprise.

I

iNPUTmice

ltt.rs

59

The website hosts an open source Android email client project named 'lttrs-android' developed by iNPUTmice. It targets users seeking a lightweight, maintainable email client supporting the modern JMAP protocol. The project is positioned as a niche offering within the open source technology sector, emphasizing minimal dependencies and maintainability. The repository is hosted on Codeberg.org, a community-driven platform, and shows active development with recent commits and multiple contributors. The business model is primarily open source with free distribution and optional paid versions via app stores.

P

ProcessOne

process-one.net

55

ProcessOne operates as a technology company specializing in scalable, powerful, and versatile multiprotocol messaging platforms. Their offerings include advanced messaging solutions and the ejabberd XMPP server, targeting businesses and developers requiring robust messaging infrastructure. The company positions itself as a proven provider powering messaging platforms supporting billions of users globally. The website content is professional and well-structured, reflecting a focused business model in software development for messaging technologies. Technically, the website is built on the Ghost CMS platform, utilizing modern web technologies such as JavaScript, Alpine.js, and CSS3. The site demonstrates good mobile optimization and SEO practices, with moderate performance. Analytics are implemented via privacy-conscious Fathom Analytics, indicating a moderate level of digital maturity and privacy awareness. However, the absence of explicit privacy and cookie policies, as well as security headers, suggests room for improvement in compliance and security hardening. From a security perspective, the site enforces HTTPS and shows no signs of exposed sensitive data or vulnerable libraries. Nonetheless, the lack of security headers, vulnerability disclosure information, and incident response contacts limits the overall security posture. Critically, the WHOIS data is unavailable or indicates the domain may not be registered, which raises significant legitimacy concerns despite the professional appearance of the website. Overall, the website presents a credible business front with solid technical implementation but suffers from critical gaps in domain registration transparency and privacy compliance. Strategic recommendations include establishing clear privacy and cookie policies, publishing security and incident response information, implementing security headers, and resolving domain registration issues to enhance trust and compliance.

M

Luna Sorcery

moonbase.lgbt

45

The website moonbase.lgbt is a personal site belonging to Luna, a software developer and reverse engineer who shares blog posts, artwork, and personal interests. The site serves as a portfolio and blog platform targeting a general audience interested in technology, demoscene art, and personal projects. The market position is niche, focusing on personal branding rather than commercial business operations. Technically, the site is hosted on DigitalOcean and uses a simple tech stack of HTML, CSS, JavaScript, and GoatCounter analytics. The site is well-structured, mobile-optimized, and performs well with fast loading times. However, it lacks advanced SEO and accessibility features and does not use a CMS or frameworks. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which reduces its security posture. No privacy or cookie policies are present, and no contact information for security incidents is provided. The use of privacy protection in WHOIS is justified given the personal nature of the site. Overall, the site is safe, trustworthy, and suitable for general audiences but could improve compliance and security practices. The overall risk is low given the non-commercial nature, but strategic improvements in security headers, privacy policies, and contact transparency are recommended to enhance trust and compliance.

S

spax.zone

spax.zone

64

The website spax.zone is a personal hobby site maintained by an individual known as Spax, also referred to as Claire and Nahua. It serves as a personal blog and social hub linking to various social media platforms and community webrings. The site content is informal and community-focused, with no commercial business model or corporate presence. The site is hosted behind Cloudflare, ensuring HTTPS and basic security protections. The technical infrastructure is simple, relying on standard HTML, CSS, and JavaScript, with no CMS detected. Security posture is adequate for a personal site, with no visible vulnerabilities or sensitive data exposure. However, the site lacks formal privacy, cookie, and terms of service policies, which impacts compliance and trust. Overall, the site is safe, with no adult or explicit content, targeting a general audience interested in personal blogs and social communities.

W

wow, perfect!

wowperfect.net

62

The website wowperfect.net is a personal portfolio site operated by an individual known as meadow, showcasing various programming projects including games, interactive web applications, and personal diaries. The site targets a general audience interested in creative coding and personal project sharing. It operates as a small-scale personal hobby site without commercial business operations or formal company structure. Technically, the site is built using modern web technologies such as React and Next.js, hosted on Cloudflare infrastructure, and demonstrates good performance and mobile optimization. However, accessibility and SEO optimizations are basic. Security posture is adequate with HTTPS enforced and domain transfer protection enabled, but lacks security headers and DNSSEC. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is provided, which limits compliance and trust. Overall, the site is safe, trustworthy for general audiences, and legitimate based on WHOIS data, but would benefit from improved security and compliance documentation.

P

Proxy Protection LLC

elm-lang.org

55

Elm-lang.org is the official website for the Elm programming language, a functional language designed for building reliable web applications. The site offers comprehensive technical content including documentation, examples, an online playground, and community resources. The business behind the domain is privacy protected under Proxy Protection LLC, consistent with open source project practices. The website targets developers and software engineers seeking a robust and productive language for front-end development. The site is well designed, mobile optimized, and provides fast performance with clear navigation and professional content.

S

home - sylvie.lol

sylvie.lol

57

Sylvie.lol is a personal portfolio and blog website belonging to Sylvia (aka sylvxa), a full-stack software developer and programming enthusiast. The site serves as a platform to share programming knowledge, open source projects, and personal interests such as speedrunning and cats. It targets a niche audience of developers and tech hobbyists. The website is newly created in 2024 and reflects a small-scale personal brand rather than a corporate entity. Technically, the website uses standard modern web technologies including HTML5, CSS3, and JavaScript, with Cloudflare providing DNS and likely CDN services. The site is well-structured with good mobile optimization and SEO meta tags. However, it lacks advanced frameworks or CMS platforms, indicating a lightweight and custom-built approach. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers such as Content-Security-Policy. There are no visible forms or data collection mechanisms, reducing attack surface but also limiting user interaction. Privacy and cookie policies are absent, which is a compliance gap. No incident response or vulnerability disclosure information is provided. Overall, sylvie.lol is a safe, well-maintained personal website with moderate trustworthiness. To improve, the owner should consider adding privacy and cookie policies, security headers, and contact information to enhance compliance and user trust.

L

Lonaasan

lona.moe

53

Lona.moe is a personal website belonging to Lonaasan, a 22-year-old software engineer from Germany. The site serves as a portfolio and community hub featuring programming projects, blog content, photography, and social links. It targets a general audience interested in cats, blahaj, and programming. The website is small scale, with a niche market position focused on personal branding and community engagement. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript, with Cloudflare DNS hosting. The site is mobile optimized and accessible, with good SEO practices. However, DNSSEC is not enabled, and no advanced security headers are detected. The site uses a minimal tracking script (umami) for analytics, indicating a low level of user tracking. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers. There is a potential XSS vulnerability in the citation block due to unsanitized HTML content. No privacy or cookie policies are present, which impacts compliance. The domain registration is privacy protected but consistent with the personal nature of the site. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is low given the personal and non-commercial nature of the site, but improvements in security headers, privacy policies, and content sanitization are recommended to enhance trust and compliance.

This website represents a personal portfolio and contact hub for Patrick, known as Paddyk45, a young developer from Hamburg, Germany. The site serves primarily as a showcase of his interests, projects, and social presence, targeting fellow developers and tech enthusiasts. It includes links to various social platforms and partner sites, emphasizing community and open-source engagement. The business model is personal branding and networking rather than commercial enterprise. Technically, the site is built with modern HTML and CSS, using the new.css framework and custom fonts. It includes minimal JavaScript, notably a script from rybbit.io for analytics. The site is lightweight, fast, and mobile-optimized with good accessibility. Hosting is sponsored by Brutecat, indicating a reliable infrastructure. SEO is basic but sufficient for a personal site. From a security perspective, the site lacks formal security policies, cookie consent, and privacy statements, which are common for personal sites but represent compliance gaps. The presence of a PGP key is a positive trust indicator for secure communication. No forms collect sensitive data, reducing attack surface. However, security headers are missing, and HTTPS status is unknown, suggesting room for improvement. Overall, the site is low risk, safe for general audiences, and professionally presented for its scope. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and publishing a vulnerability disclosure or security policy to enhance trust and compliance.