Security Directory

A

Avris

avris.it

47

Avris.it is a personal website and blog operated by Andrea Vos, a full-stack software engineer and queer activist based in Italy. The site serves as a portfolio showcasing software projects, blogging on topics such as technology, society, and politics, as well as photography and writing. The website targets a general audience interested in technology and social issues, with a niche focus on queer activism and rationalism. The business model is primarily personal branding and content sharing without direct commercial transactions. Technically, the site is built on a modern stack including Symfony PHP framework, Bootstrap for UI, and uses Font Awesome and Twemoji for icons and emojis. The site is mobile optimized, accessible, and SEO friendly, with good performance and modern meta tags including Open Graph and Twitter Cards. Security posture is solid with HTTPS and DNSSEC enabled, but lacks some security headers and formal security policies. The domain is aged since 2014 but currently shows an expired status which poses a risk to availability and trust. Privacy and cookie policies are absent, and no incident response or vulnerability disclosure mechanisms are present. Overall, the site is professional and trustworthy for a personal portfolio but would benefit from improved compliance and security practices.

B

Begeeked Labs, LLC.

discord.me

67

Discord.me is an established online platform founded in 2015 by Begeeked Labs, LLC., focused on providing a directory service for public Discord servers and bots. The website targets Discord users seeking communities across various interests such as gaming and music, facilitating discovery and connection. The platform operates a niche community listing business model, positioning itself as a specialized directory within the broader social and gaming technology sector. Technically, the website employs modern web technologies including Laravel backend framework, Bootstrap for UI, FontAwesome icons, and integrates Google Analytics and Tag Manager for tracking. Hosting and domain registration are managed via Cloudflare, ensuring reliable performance and security. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and benefits from domain transfer protections. However, it lacks DNSSEC and does not publish explicit privacy or cookie policies, which are important for GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is transparent and consistent with the business, supporting legitimacy. Overall, Discord.me presents a solid technical and business foundation with moderate security posture. Key areas for improvement include publishing comprehensive privacy and cookie policies, enhancing accessibility, and establishing a vulnerability disclosure process to strengthen trust and compliance.

B

Blackbaud

blackbaud.com

11

Blackbaud is a leading cloud software company specializing in solutions for nonprofits, education, CSR, and grantmaking. Their extensive product portfolio and market presence position them as a dominant player in the social good technology sector. The website reflects a mature digital presence with comprehensive content targeting nonprofit organizations, educational institutions, and corporate social responsibility programs. Technically, the site leverages modern web technologies including WordPress CMS, JavaScript frameworks, and advanced analytics and marketing tools such as Marketo, Tealium, and New Relic, ensuring a robust and performant user experience. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism and trustworthiness, though transparency could be improved by publishing WHOIS data and security policies.

S

Society of British Neurological Surgeons

sbns.org.uk

60

The Society of British Neurological Surgeons (SBNS) operates as a professional society dedicated to advancing neurosurgery in the United Kingdom. Their website provides comprehensive resources including membership information, scientific meetings, publications, educational materials, and research support. The organization targets neurosurgeons, medical students, researchers, and healthcare professionals interested in neurosurgery. The site reflects a medium-sized, established healthcare society with a strong focus on professional development and community engagement. Technically, the website is built on a modern stack including jQuery, Bootstrap, and Preside CMS, with good mobile optimization and accessibility features. While performance is moderate, the site is well-structured with clear navigation and SEO-friendly metadata. However, explicit privacy and cookie policies are not found, and security headers are not visibly implemented, indicating areas for improvement in compliance and security posture. Security-wise, the site uses HTTPS and does not expose sensitive data, but lacks visible security headers and formal security policies. The WHOIS lookup failed due to domain naming rules, limiting domain registration insights, but the website content and professional presentation suggest legitimacy. Overall, the site scores well on business credibility and content quality but needs enhancements in privacy compliance and security best practices. Strategically, SBNS should prioritize publishing clear privacy and cookie policies, implementing security headers, and establishing incident response and vulnerability disclosure mechanisms to strengthen trust and compliance. These steps will enhance their security posture and align with regulatory requirements, supporting their role as a trusted professional society.

T

TRABIT

trabit.eu

43

TRABIT is a European interdisciplinary training network focused on computational brain imaging in clinical applications. The website serves as an information portal for the consortium, providing details about training events, researchers, and project results. The project is funded by the European Union's Horizon 2020 program under a Marie Sklodowska-Curie grant, positioning it as a credible academic initiative in healthcare and technology sectors. The target audience includes researchers, clinicians, and industry professionals involved in neuroimaging and brain health. Technically, the site is built on Joomla CMS with common web technologies like jQuery, Bootstrap, and UIkit, offering moderate performance and good mobile optimization. Security posture is basic with HTTPS implied but lacking explicit security headers and privacy compliance documentation. No blocking or WAF mechanisms were detected, and content is fully accessible and safe for general audiences.

H

Hypervision Surgical Ltd

hypervisionsurgical.com

69

Hypervision Surgical Ltd is a UK-based medical technology company spun out from King's College London, specializing in AI-powered hyperspectral imaging to enhance surgical precision and patient safety. Their flagship product integrates real-time, non-invasive tissue characterization into surgical workflows, targeting clinicians and healthcare providers. The company is positioned as an innovative early-stage MedTech player with strong academic and industry partnerships, supported by certifications such as ISO 13485, UKCA marking, and FDA clearance. Technically, the website is built using modern frameworks like Bootstrap and Hugo CMS, hosted behind Cloudflare DNS, and optimized for mobile and performance. The site employs lazy loading and standard web technologies, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements like DNSSEC and security headers are recommended. From a security and compliance perspective, the site provides comprehensive privacy, cookie, and terms of service policies with GDPR compliance indicators. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No phone contact is provided, only email and physical address. No tracking or analytics scripts were detected, indicating a privacy-conscious approach. Overall, the website and business present a high level of professionalism, trustworthiness, and technical maturity with minor areas for security enhancement. The risk profile is low, and the company demonstrates credible market positioning in the healthcare technology sector.

S

Shilaan Alzahawi

shilaan.com

61

The website www.shilaan.com serves as the personal academic portfolio of Dr. Shilaan Alzahawi, an Assistant Professor of Management at Texas A&M University. It provides a professional platform showcasing academic posts, talks, and a downloadable CV, targeting academics and researchers in organizational behavior and data science. The site is well-structured, visually consistent, and optimized for mobile devices, reflecting a high level of digital maturity. Technically, it leverages modern web technologies including Hugo with the Wowchemy theme, Bootstrap, and various JavaScript libraries, hosted likely on Netlify, ensuring fast performance and good accessibility. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks some recommended security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, but the professional content and verified external links mitigate some risk. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced compliance and security documentation.

W

Weecology

weecology.org

64

Weecology is an interdisciplinary ecology and environmental data science research group affiliated with the University of Florida. The group combines fieldwork and computational methods to study ecological systems, publish open datasets, develop open source software, and train scientists. Their website reflects a professional academic presence targeting researchers and students in ecology and environmental science. Technically, the site is built using modern static site generation (Hugo) and hosted on Netlify, employing contemporary libraries such as Leaflet and Fuse.js for enhanced user experience. The site loads quickly, is mobile optimized, and includes privacy-respecting analytics via Plausible. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and formal privacy/cookie policies indicates room for improvement. WHOIS data is unavailable due to privacy protection, which is typical and justified for academic groups. Overall, the site is trustworthy, professional, and safe for general audiences.

L

LIBRANET.de

libranet.de

55

LIBRANET.de operates as a node within the federated social networking ecosystem, leveraging the Friendica platform to provide users with a decentralized social network experience. The service is targeted at users interested in privacy-respecting, federated social media alternatives. The website is hosted on a server located in Helsinki, Finland, and offers enhanced add-ons and connectors to improve user experience. Registration is currently closed, and inactive accounts are managed with clear retention policies. The site provides support and community engagement through linked forums and community pages. Technically, the website employs a modern technology stack centered around Friendica 2025.07-rc, utilizing popular frameworks such as Bootstrap and jQuery, along with various UI enhancement libraries. The site is mobile-optimized and demonstrates moderate performance. However, some accessibility and SEO optimizations are basic and could be improved. The site uses HTTPS exclusively, ensuring encrypted communications. From a security perspective, the site implements several best practices including IP blocking after multiple failed login attempts and input sanitization via DOMPurify. However, the absence of explicit security headers such as Content-Security-Policy and HSTS reduces the overall security posture. Privacy compliance is partially addressed with a privacy policy and cookie usage notice, but lacks a consent mechanism. No incident response or vulnerability disclosure policies are publicly available. Overall, LIBRANET.de presents a trustworthy and functional federated social network node with a good technical foundation and moderate security posture. Strategic improvements in security headers, privacy consent mechanisms, and transparency around security policies would enhance trust and compliance. The site is safe for general audiences with no adult or explicit content detected.

W

Web Hosting Hub

webhostinghub.com

66

Web Hosting Hub is a mid-sized web hosting provider offering a range of hosting services including shared hosting, WordPress hosting, domain registration, and eCommerce solutions. The company targets small businesses and individuals seeking affordable and easy-to-use web hosting solutions. Their website demonstrates a professional design with clear navigation and detailed service offerings, supporting a strong market position in the hosting industry. Technically, the site employs modern web technologies and integrates multiple analytics and marketing tools with a robust cookie consent mechanism, indicating a mature digital infrastructure. Security-wise, the website enforces HTTPS, implements security headers, and includes anti-clickjacking measures, though it lacks a publicly visible security policy or incident response contact, which could be improved. Overall, the site is safe, trustworthy, and compliant with privacy regulations, but the absence of WHOIS transparency slightly reduces domain trustworthiness.

G

Greater Birmingham Chambers of Commerce

greaterbirminghamchambers.com

68

Greater Birmingham Chambers of Commerce operates as a regional membership organization supporting over 3200 local businesses. The website presents a professional business networking and support platform aimed at fostering growth within the Greater Birmingham business community. The digital infrastructure leverages modern technologies including Bootstrap, Cookiebot for cookie consent, Google Tag Manager, Microsoft Clarity, and Hotjar for analytics and user behavior tracking. The site is built on Preside CMS and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit privacy and terms pages indicates room for improvement. The WHOIS data is missing, which raises concerns about domain registration legitimacy, but the website content and technology usage suggest a legitimate business presence. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

The Augmented Reality Music Ensemble (ARME) project is an academic research initiative funded by EPSRC and hosted in the UK, focused on understanding musician synchronization and developing computational models to simulate virtual musicians for training purposes. The website serves as a platform to share research outcomes, publications, demos, and news related to the project. The target audience includes musicians, researchers, and the academic community interested in augmented reality and music technology. The project operates primarily as a research entity with public funding and academic partnerships. Technically, the website is built using modern web technologies including the Wowchemy Hugo static site generator, Bootstrap framework, and various JavaScript libraries such as MathJax, Leaflet, and jQuery. Hosting appears to be via Netlify, indicated by the presence of Netlify Identity widgets. The site is mobile optimized with good SEO practices and structured data for enhanced search engine visibility. From a security perspective, the site enforces HTTPS and uses no vulnerable libraries. However, it lacks several security headers and does not publish security policies or incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the security posture is moderate with room for improvement in policy transparency and user privacy controls. The overall risk assessment is low given the academic nature and lack of sensitive data collection. Strategic recommendations include implementing security headers, adding cookie consent for GDPR compliance, publishing security and incident response policies, and providing clear contact information to enhance trust and compliance.

S

Sebastien HELLEU

weechat.org

69

WeeChat.org is the official website for WeeChat, a mature, open-source, extensible chat client primarily focused on IRC and Jabber protocols. Founded in 2005 and maintained by Sebastien HELLEU, the project targets technical users and developers seeking a customizable, lightweight chat client with multi-server support and scripting capabilities. The website reflects a strong community-driven model with donation support and active development evidenced by recent version releases and roadmap events. Technically, the site is built on modern web standards using Bootstrap and jQuery, hosted by OVH sas in France, and optimized for performance and mobile responsiveness. Security posture is adequate with HTTPS usage and CSRF protection on forms, but lacks DNSSEC and explicit security headers, and no published security or privacy policies were found. Overall, the domain registration is consistent and transparent, supporting the legitimacy of the project. Recommendations include enhancing security headers, publishing privacy and cookie policies, and adding vulnerability disclosure information to improve trust and compliance.

K

Kiwi IRC

kiwiirc.com

57

Kiwi IRC is a specialized web-based IRC client service that provides users with an easy and enjoyable way to connect to IRC networks via the web. The platform supports embedding IRC widgets into websites and offers network management tools, positioning itself as a trusted and feature-rich IRC client in the technology sector. The business operates on an open-source model with community sponsorship and donations, targeting IRC users and web developers seeking lightweight, accessible chat solutions. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS services. It is mobile-optimized and uses analytics tools such as Google Analytics and Piwik for user tracking. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and explicit security headers, indicating room for improvement. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or terms of service found. Overall, the website is professional, trustworthy, and safe, with moderate technical and security maturity.

T

elixi.re

toaster.sh

63

elixi.re is a small, niche technology service offering free and open-source file hosting and link shortening. The platform supports multiple vanity domains and emphasizes privacy and transparency, with all source code publicly available on GitLab. The service targets a general audience seeking lightweight file hosting and URL shortening without advertising or tracking. Technically, the website uses modern JavaScript and Bootstrap frameworks, hosted behind Cloudflare DNS, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and no tracking scripts, but lacks explicit security headers and documented incident response contacts. Privacy compliance is supported by a privacy policy and GDPR consent modal, though cookie policy and terms of service are absent. Overall, the site is trustworthy and legitimate, with a domain age consistent with its operational history.

D

elixi.re

downloadmoredownloads.download

63

elixi.re is a small, open-source technology service providing free file hosting and link shortening functionalities. The platform supports multiple vanity domains and emphasizes privacy by avoiding non-free JavaScript and tracking code. The website is technically modern, using Bootstrap and Cloudflare for hosting and DNS, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and open-source transparency, but lacks some security headers and explicit incident response policies. Privacy compliance is partially addressed with a privacy policy and GDPR consent modal, though cookie policies and terms of service are missing. Overall, the site is trustworthy for its niche audience but could improve in security and compliance documentation.

C

elixi.re

cursed-images.xyz

63

elixi.re is a small, open-source technology service providing free file hosting and link shortening functionalities. The platform supports multiple vanity domains and emphasizes privacy and open-source principles, with all client-side code available on GitLab. The website is designed with a modern Bootstrap framework and hosted with Cloudflare DNS services, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no tracking scripts, but lacks explicit security headers and cookie consent mechanisms. Privacy compliance is supported by a clear privacy policy and GDPR consent modal, although no cookie policy or terms of service are present. Overall, the site is trustworthy for its niche audience but could improve in security and compliance documentation.

E

elixi.re

elixi.re

63

elixi.re is a small, open-source technology service providing free file hosting and link shortening functionalities. The platform supports multiple vanity domains and emphasizes privacy by avoiding non-free JavaScript and tracking code. The website is technically modern, using Bootstrap and Cloudflare DNS services, and is mobile optimized with a clean user interface. Security posture is moderate with HTTPS enforced but lacks some security headers and exposes debug information on error pages. Privacy compliance is good with a clear privacy policy and GDPR consent modal, though cookie policy and terms of service are missing. Overall, the site is trustworthy for its niche audience but could improve in security and compliance documentation.

X

XMPP Standards Foundation

xmpp.org

57

The XMPP Standards Foundation operates xmpp.org as the authoritative site for the XMPP open messaging standard. The organization is a small, US-based non-profit focused on providing open specifications, software resources, and community engagement for developers and users of XMPP technology. The website reflects a mature, well-established project with a clear market position as a foundational technology standard powering messaging, IoT, WebRTC, and social applications. Technically, the site uses modern frontend frameworks like Bootstrap and FontAwesome, is mobile optimized, and served securely over HTTPS. However, it lacks some compliance elements such as privacy and cookie policies, and explicit contact information, which could be improved to enhance trust and regulatory adherence. Security posture is solid with HTTPS and domain transfer protections, but could benefit from additional security headers and published incident response details. Overall, the site is professional, trustworthy, and content-rich, serving its target audience effectively.

H

Haskell.org, Inc.

haskell.org

51

Haskell.org is the official home page for the Haskell programming language, a purely functional, statically typed language widely used in academia and industry. The site serves as a comprehensive resource hub offering documentation, downloads, community engagement, and educational tools such as an interactive playground. It is maintained by Haskell.org, Inc., a non-profit organization, and supported by reputable sponsors and partners including Fastly, Status.io, Scarf, DreamHost, and Digital Ocean. The website targets developers and programmers interested in functional programming paradigms and aims to promote the adoption and understanding of Haskell. Technically, the website is well-constructed using modern web technologies including Bootstrap, jQuery, and Glider.js for UI components. It leverages CDN and cloud hosting providers to ensure fast and reliable access globally. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. However, explicit privacy and cookie policies are not present, and no contact emails or phone numbers are listed, which could be improved for transparency and compliance. From a security perspective, the site uses HTTPS and has a dedicated security page, but lacks explicit security headers and a published security.txt file for vulnerability disclosure. No obvious vulnerabilities or exposed sensitive data were detected. The WHOIS data for the domain is incomplete or unavailable, which slightly reduces trustworthiness but is mitigated by the site's professional appearance, community trust, and sponsorships. Overall, Haskell.org is a high-quality, trustworthy resource for the Haskell community with strong technical foundations and good security posture. Enhancements in privacy compliance, security header implementation, and WHOIS transparency would further strengthen its credibility and user trust.

Redscientist Labs operates as a niche experimental media and music lab focusing on producing experimental music albums and software tools such as the Real-Time Corruptor and Eternal Degrade. The website serves as a platform to showcase music releases and software projects, targeting enthusiasts of experimental media and music. The business appears to be small-sized and has been established since 2010, with a consistent brand presence and domain registration history. Technically, the website uses a modern tech stack including Bootstrap and jQuery, hosted by IONOS SE. It employs HTTPS and Google Analytics for tracking but lacks advanced security headers and DNSSEC for DNS security. The site is moderately optimized for mobile and SEO, with a good user experience and clear navigation. From a security perspective, the site has a basic SSL configuration and domain transfer protection but lacks DNSSEC and security headers, which are recommended for enhanced security. There are no visible privacy or cookie policies, which impacts compliance with GDPR and other privacy regulations. No contact or incident response information is provided, limiting transparency and trust. Overall, the website is functional and professional but would benefit from improved privacy compliance, enhanced security headers, and clearer contact information to strengthen trust and security posture.

U

Union Tigers Vöcklabruck

faustball-tigers.at

44

Union Tigers Vöcklabruck is a regional Faustball sports club based in Austria, providing team information, news, events, and community engagement through their website. The site targets sports enthusiasts and local supporters with a focus on club activities, event calendars, and social media integration. The business model is that of a non-profit sports organization with a small size and a founding date around 2016. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, Revolution Slider, and Contact Form 7, hosted by easyname GmbH. The site demonstrates moderate performance and good mobile optimization with a consistent branding approach.

F

Faustball Deutschland

faustball.com

54

Faustball.com is a German-language sports community website dedicated to the sport of Faustball, providing news, competition results, and links to related associations and tournaments primarily in Germany and Europe. The site targets Faustball players, clubs, and fans, serving as an information hub with regular updates and official association endorsements. Technically, the site uses a somewhat dated but functional tech stack including AngularJS and jQuery, with moderate performance and basic mobile optimization. Security posture is average, with HTTPS implied but lacking visible security headers and cookie consent mechanisms. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness, although the website content and external links suggest a legitimate sports community presence. Overall, the site is professional and trustworthy in content but could improve in technical security and privacy compliance.

A

Adafruit Industries

adafru.it

72

Adafruit Industries operates a well-established e-commerce platform specializing in DIY electronics, kits, and educational content. The company targets hobbyists, educators, and makers with a broad product catalog including Arduino, Raspberry Pi, sensors, LEDs, and robotics components. The website demonstrates a strong market position within the maker community, supported by active blogs, forums, and social media engagement. Technically, the website employs modern web technologies such as jQuery, Bootstrap, and Algolia search integrated within a Zencart CMS framework. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Performance is moderate with room for optimization. Security posture is solid with HTTPS enforced and secure form handling, though the absence of security headers and explicit cookie consent mechanisms are areas for improvement. The lack of WHOIS data reduces transparency but does not detract significantly from the site's trustworthiness given other strong indicators. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and improving security headers to strengthen defenses and user trust.

A

ATU Auto-Teile-Unger

atu.de

62

ATU Auto-Teile-Unger operates a comprehensive e-commerce platform specializing in automotive parts, tires, rims, and workshop services primarily targeting the German market. The company holds a strong market position as a large retailer with extensive service offerings including online sales, workshop appointments, and customer loyalty programs. The website demonstrates a mature technical infrastructure utilizing modern web technologies such as jQuery, Bootstrap, Adobe DTM for tag management, and Google Maps API for location services. Security posture is robust with HTTPS enforcement, CSRF protection, and bot mitigation via DataDome, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

M

MMOGA Limited

mmoga.de

64

MMOGA Limited operates a large-scale e-commerce platform specializing in the sale and distribution of digital game keys, virtual currencies, and game-related products. The company positions itself as a market leader in virtual goods for popular online games such as FIFA, World of Warcraft, and Path of Exile. The website is professionally designed, mobile-optimized, and offers a broad product catalog with fast delivery via email. Technically, the site leverages modern JavaScript libraries and Cloudflare DNS for performance and security. Security posture is solid with HTTPS and cookie consent mechanisms, although explicit security headers and incident response policies are not publicly detailed. Overall, MMOGA presents a trustworthy and compliant digital marketplace with strong customer engagement through social media and Trustpilot reviews.

IntelTechniques is a specialized online platform focused on Open Source Intelligence (OSINT) training, privacy education, and related services. The website offers online video training, certification programs, digital and print books, and OSINT tools targeted at individuals and professionals interested in digital investigations and privacy. The business operates a niche market position with a small-sized, focused offering and a domain age of over 10 years, indicating established presence. Technically, the website uses a Bootstrap-based responsive design hosted via Cloudflare, ensuring moderate performance and good mobile optimization. The site lacks advanced CMS or analytics integrations, reflecting a straightforward technical infrastructure. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and visible security headers, which could be improved. Security-wise, the site shows no signs of vulnerabilities or malicious content. However, it lacks formal security policies, incident response information, and cookie consent mechanisms, which are important for compliance and trust. The absence of contact information and social media links reduces direct engagement opportunities but maintains a professional and focused presentation. Overall, IntelTechniques presents a trustworthy and professional online presence with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

G

GitLab

sc07.dev

57

The website is a self-hosted GitLab instance under the domain sc07.dev, primarily serving as a platform for hosting and exploring open source projects related to the Fediverse and Canvas technologies. It leverages the GitLab platform's capabilities to provide project collaboration and CI/CD catalog integration. The target audience includes developers and open source contributors interested in decentralized social networking and related software. The business model is focused on providing a self-managed GitLab environment rather than a commercial offering. Technically, the site uses modern web technologies including JavaScript, Webpack, Tailwind CSS, and Bootstrap, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are absent. Privacy compliance is weak due to the lack of privacy and cookie policies and no consent mechanisms. Overall, the site is functional and professional but lacks formal compliance and contact transparency.

P

primis

primis.tech

66

Primis is a global video discovery platform focused on helping publishers increase revenue by enabling users to discover high-quality video content. The company targets publishers, advertisers, and content providers, positioning itself as a key player in video monetization technology. The website is professionally designed, consistent in branding, and provides clear navigation and relevant content to its audience. The business is based in Israel, with a medium-sized operational scale and a strong market presence in the technology sector. Technically, the website is built on WordPress with modern technologies such as Bootstrap, jQuery, and Swiper. It integrates multiple marketing and analytics tools including Google Tag Manager, Google reCAPTCHA Enterprise, and various social media tracking pixels. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the site uses HTTPS and includes some best practices like reCAPTCHA for bot protection. However, it lacks explicit security headers such as Content-Security-Policy and does not publish a security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website presents a trustworthy and professional image with moderate to good technical and security posture. The absence of explicit privacy and cookie policies is a notable gap in compliance. Strategic improvements in security headers, privacy disclosures, and incident response transparency are recommended to enhance trust and compliance.

Illuna-minetest.tk operates as a niche community gaming website providing dedicated Minetest servers with custom mods and texture packs. The business targets Minetest players seeking a unique and advanced gaming experience, supported by a small but experienced team since 2014. The website reflects a community-driven model with emphasis on server reliability and custom content. Technically, the site is built using modern frontend technologies including Bootstrap, jQuery, and the Zola static site generator, delivering a responsive and user-friendly experience. Performance is moderate with good mobile optimization and SEO practices. Security posture is adequate with HTTPS usage and no exposed sensitive data, but lacks explicit security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices. Overall, the domain registration data supports the legitimacy and maturity of the business. The site is safe for general audiences with no adult or questionable content detected.

M

Milan Ihl

milan-ihl.de

55

Milan Ihl operates as a small, self-employed service provider specializing in IT hosting, web development, and creative media services such as photography and video editing. The business targets regional clients in Germany, particularly local businesses and associations, and has been active since 2020. The website presents a professional and consistent brand image with clear service offerings and contact information. Technically, the site uses modern JavaScript libraries including jQuery and Bootstrap, and is hosted on INWX nameservers, indicating a stable infrastructure. Performance and mobile optimization are good, though accessibility and SEO are basic. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response contacts. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and safe for general audiences.

NeoMutt.org is the official website for the NeoMutt project, an open-source command line mail user agent derived from Mutt with enhanced features. The project targets developers and users who prefer a powerful, customizable email client in a terminal environment. The website provides comprehensive documentation, community engagement channels including mailing lists, IRC, and GitHub repositories, and encourages contributions and sponsorships. The business model is community-driven open-source software with voluntary sponsorship support. Technically, the website employs a modern but lightweight tech stack including jQuery, Bootstrap, AnchorJS, and Algolia for search functionality. Hosting is inferred to be on Linode servers. The site is mobile responsive with good navigation and content structure, though accessibility features are basic. SEO is functional but could be improved with additional metadata and structured data. From a security perspective, the domain is registered via a privacy proxy service, which is common for open-source projects to protect personal information. The domain is mature and consistent with the project's timeline. However, the website lacks visible security headers, DNSSEC is not enabled, and no published security or incident response policies are found. HTTPS usage is assumed but not verifiable from the data provided. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, NeoMutt.org is a trustworthy and professional open-source project website with good content quality and community engagement but could improve in privacy compliance and security best practices to enhance user trust and regulatory adherence.

C

Cypht

cypht.org

61

Cypht is an open source webmail client designed to aggregate multiple email accounts and RSS feeds into a single, modular interface. It targets users such as ISPs, schools, businesses, and individuals seeking a lightweight and flexible email solution. The website presents clear information about the product's features, modular architecture, and open source licensing, supported by an active GitHub repository and community chat on Gitter. Technically, the site is built using PHP and JavaScript with Bootstrap and jQuery for frontend components, and uses the Cecil static site generator for content management. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Security-wise, the site encourages responsible vulnerability disclosure but lacks formal policies and contact details, and does not implement common security headers. WHOIS data is unavailable, likely due to privacy protection, but the domain appears legitimate based on content and community presence. Overall, the site scores well on content quality and business credibility but has room for improvement in privacy compliance and security posture.

北

北京衮雪科技有限公司

x-mol.com

57

X-MOL is a Chinese academic platform focused on chemistry and related scientific disciplines, providing a comprehensive suite of services including paper search, industry news, global mentor listings, and research group tools. The platform targets researchers, academics, and students, positioning itself as a leading resource in the Chinese scientific community. The business operates under Beijing Gunxue Technology Co., Ltd., established in 2014, and maintains a medium-sized presence with consistent branding and professional content. Technically, the website employs modern front-end technologies such as Bootstrap, RequireJS, and Font Awesome, ensuring a responsive and user-friendly experience. SEO practices are well implemented, and the site is mobile-optimized. However, accessibility features are basic and could be improved. The site uses HTTPS with good SSL configuration but lacks important security headers, which could be enhanced to improve security posture. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies indicates compliance gaps, especially regarding GDPR and data protection regulations. WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency, although the website content and business information appear legitimate. Overall, the site is professional, content-rich, and trustworthy for its target audience but would benefit from improved privacy compliance, enhanced security headers, and clearer domain registration transparency to strengthen its security and trustworthiness.

F

feddit.nl - A Dutch Lemmy instance hosted by @tedvdb

feddit.nl

56

Feddit.nl is a Dutch instance of the federated social platform Lemmy, hosted and maintained by an individual or small team associated with @tedvdb. The platform offers community-driven discussion forums with a focus on respectful and moderated content. The website is technically sound, leveraging modern web technologies such as Bootstrap and Inferno.js, and enforces security best practices including HTTPS and DNSSEC. However, it lacks explicit privacy, cookie, and terms of service policies, which are important for regulatory compliance and user trust. The platform employs registration controls to mitigate bot abuse, indicating a proactive security stance. Overall, feddit.nl serves a niche audience interested in decentralized social networking within the fediverse.

P

PieFed.zip - Explore Anything, Discuss Everything.

piefed.zip

73

Piefed.zip is a federated social platform focusing on technology and gaming communities, providing a space for users to explore topics and discuss various subjects. It operates as a sister site to Lemmy.zip, sharing the same team and infrastructure. The platform offers community-driven content with posts, images, and links to external news and media sources, targeting a general audience interested in tech and gaming. The business model centers around federated social networking, leveraging modern web technologies for a responsive and accessible user experience. Technically, the site uses Bootstrap and HTMX frameworks, with images hosted on Backblaze B2, indicating a modern but modest infrastructure. Security posture is decent with HTTPS and CSRF protections, though explicit security headers and policies are lacking. Privacy and cookie policies are not found, and no direct contact or business information is disclosed, which impacts trust and compliance scores. Overall, the site is functional and content-rich but would benefit from enhanced transparency and security disclosures.

F

Feddit.nu

feddit.nu

56

Feddit.nu operates as a Swedish Lemmy instance, providing a federated social media platform primarily targeting Swedish-speaking users interested in community discussions and news. The platform emphasizes open community participation with admin moderation and a captcha-based anti-spam mechanism. Technically, it leverages modern web technologies including Lemmy backend, Bootstrap, and Inferno.js for frontend rendering, hosted under a reputable Swedish registrar, Loopia AB. Security posture is solid with HTTPS enforced and admin approval for accounts, though improvements such as enabling DNSSEC and publishing a security.txt file are recommended. Privacy compliance is strong with a detailed privacy policy aligned with GDPR, though cookie consent mechanisms are absent. Overall, the platform presents a trustworthy, well-maintained niche social network with good content quality and user experience.

Q

Quokk.au - What The Quokk!

quokk.au

61

Quokk.au is a small, community-driven federated social platform branded as an anarchist instance. It offers a chill place for users to engage in discussions across various topics such as news, technology, and entertainment. The platform supports user-generated content, cross-posting, and media sharing, targeting a general audience interested in decentralized social networking. Technically, the website uses modern web technologies including Bootstrap and HTMX, with good mobile optimization and accessibility features. Security posture is moderate with HTTPS enforced and CSRF protection, but lacks DNSSEC and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies, and no contact information is provided. Overall, the site is functional and trustworthy within its niche but would benefit from enhanced privacy and security transparency.

L

Lemmygrad

lemmygrad.ml

57

Lemmygrad is a federated social platform dedicated to Marxist and leftist communities, offering forums, discussion groups, and content sharing focused on political education and memes. The platform operates on the Lemmy software stack, leveraging modern technologies such as Rust backend and Inferno.js frontend, providing a responsive and community-driven experience. Security practices are generally strong, with HTTPS enforcement and password hashing, though direct messages are stored unencrypted, posing a privacy risk. The privacy policy is comprehensive and transparent, addressing data federation and user responsibility. Overall, Lemmygrad serves a niche audience with a clear ideological focus, maintaining moderate trustworthiness and technical maturity.

T

toast.ooo - the home of fediverse events (canvas and friends)

toast.ooo

54

toast.ooo is a small, community-driven Lemmy instance dedicated to hosting and coordinating fediverse events, notably the annual Canvas pixel placing event. It serves a niche audience of fediverse users and open source enthusiasts, providing forums, event information, and federated social networking capabilities. The platform is donation-supported and emphasizes respectful, inclusive community guidelines. Technically, the site leverages modern web technologies including Lemmy, Bootstrap, and Inferno.js, with integrations to Matrix and Discord for real-time communication. Security posture is strong with HTTPS, security headers, and captcha protections, though privacy and cookie policies are lacking. Overall, the site is well-positioned within its niche with a good reputation and active community engagement.

M

Midwest Internet Cooperative Exchange

micemn.net

59

Midwest Internet Cooperative Exchange (MICE) operates as a cooperative Local Exchange Point based in Minneapolis, Minnesota, serving 151 participants primarily network operators and ISPs. The organization facilitates peering and local network interconnections, positioning itself as a regional cooperative with a stable participant base and community engagement through user group events. The website reflects a focused business model centered on cooperative networking services without commercial advertising or extensive marketing. Technically, the website employs Bootstrap and jQuery for frontend presentation, delivering a moderately performing, mobile-optimized experience with clear navigation and relevant content. However, the absence of advanced SEO and accessibility features limits its digital maturity. Security posture is moderate; domain registration is mature and consistent with business claims, but the lack of DNSSEC, security headers, and visible HTTPS status indicates room for improvement. Privacy compliance is minimal, with no privacy or cookie policies present, and contact information is limited to an email address and LinkedIn group link. Overall, the website is professional and trustworthy but would benefit from enhanced security and compliance measures.

P

PeeringDB

peeringdb.com

73

PeeringDB operates as a non-profit, community-driven interconnection database that facilitates global network interconnection at Internet Exchange Points, data centers, and other facilities. It serves network operators, carriers, and organizations seeking interconnection data, positioning itself as the authoritative source in this niche. The platform offers a searchable database, API access, and community-maintained data, supporting the growth and good of the Internet. Technically, the website employs a modern stack including Django backend, Bootstrap, jQuery, and security-focused libraries such as DOMPurify and Google reCAPTCHA. The site is mobile-optimized, fast, and accessible, with good SEO practices. Security posture is solid with HTTPS and CSRF protections, though it lacks some security headers and explicit security policies. WHOIS data is unavailable or protected, which reduces transparency but does not strongly impact legitimacy given the site's reputation. Overall, the site is professional, trustworthy, and safe for general audiences.

X

XPRIMM

xprimm.com

51

XPRIMM.com is a specialized media platform providing insurance news, statistics, reports, and event information focused on Central and Eastern Europe, South Eastern Europe, and former USSR countries. The website serves insurance professionals and market analysts with regularly updated content including interviews, market trends, and technology news. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, and is served over HTTPS, indicating a reasonable level of digital maturity. However, the absence of privacy and cookie policies suggests gaps in compliance with data protection regulations. Security posture is moderate with no visible critical vulnerabilities but lacks advanced security headers and incident response information. The WHOIS data is missing or unavailable, which reduces domain trustworthiness and suggests the domain may be newly registered or privacy protected. Overall, the site is professional and content-rich but would benefit from enhanced privacy compliance and security best practices.

X

XPRIMM

fiar.ro

41

FIAR.ro represents the International Insurance-Reinsurance Forum, a key event organizer and media brand focused on the insurance, reinsurance, and private pensions markets primarily in Central and Eastern Europe and CIS regions. The website showcases detailed event information, speaker profiles, and partner logos, reflecting a well-established business with a strong regional presence. The business model centers on event organization and media publication services, targeting industry professionals and stakeholders. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

X

XPRIMM

xprimmpublications.com

45

XPRIMM is a specialized media brand focused on providing publications and media products for the global re/insurance industry, primarily targeting Central and South-Eastern Europe and CIS regions. The company offers various insurance reports, brochures, and organizes related events, positioning itself as a niche regional media provider. The website reflects a professional and consistent brand image with clear contact information and social media presence, supporting its credibility in the insurance media sector. Technically, the website employs modern web technologies such as Bootstrap, jQuery, CKEditor, and Google Analytics, ensuring a responsive and user-friendly experience. However, there is room for improvement in SEO and accessibility features. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks important security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and trustworthy but would benefit from enhanced security and compliance measures.

X

XPRIMM

xprimmevents.com

48

XPRIMM is a specialized media brand focused on the global re/insurance industry, particularly in Central and Southeastern Europe and CIS regions. The website serves as a platform for insurance events, publications, and video content, positioning itself as a regional leader with a history dating back to 2014. The business model revolves around media products and event organization tailored to insurance professionals and stakeholders. Technically, the site employs modern web technologies including Bootstrap, jQuery, and FullCalendar, providing a responsive and user-friendly experience. However, there is room for improvement in accessibility and SEO optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks important security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but should enhance compliance and security measures to strengthen its risk profile.

C

Claus Web SRL

1asig.ro

45

1asig.ro is a well-established Romanian insurance news and information portal operated by Claus Web SRL since 2000. The website provides comprehensive coverage of the Romanian insurance market, including news, legislation, market statistics, interviews, video content, and job listings. It targets insurance professionals, brokers, companies, and consumers interested in insurance products and market developments. The business model is primarily media and advertising-based, with subscription options for newsletters. The website maintains a consistent brand presence and partners with recognized industry players and media outlets.

P

PieFed.ca - A Canadian-run community, geared towards Canadians, but all are welcome!

piefed.ca

68

PieFed.ca is a Canadian-run federated social community platform designed primarily for Canadians but open to all. It offers community forums, user posts, and content sharing with a focus on Canadian interests and culture. The platform uses modern web technologies such as Bootstrap and HTMX and is hosted with Cloudflare DNS services. The domain is newly registered in 2025, consistent with the website's launch and purpose. Security posture is moderate with HTTPS enabled and CSRF protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, which impacts compliance and user trust. No direct business contact information or formal security policies are published. Overall, the site provides a good user experience with safe content and moderate trustworthiness.

F

Fedecan (non-profit)

lemmy.ca

63

Lemmy.ca is a Canadian non-profit community platform focused on providing a federated social networking experience within the fediverse ecosystem. Operated by Fedecan, it targets Canadian users but welcomes a global audience. The platform emphasizes community moderation, user donations for funding, and clear rules to maintain a respectful environment. Technically, the site uses modern JavaScript frameworks such as Inferno.js and Bootstrap, hosted with Cloudflare DNS and served over HTTPS with strong security headers. While the site lacks a cookie consent mechanism and formal security policies, it maintains good security hygiene and privacy respect. Overall, Lemmy.ca presents a trustworthy and well-maintained community platform with a strong Canadian identity.

M

Mander

mander.xyz

60

Mander.xyz is a small, community-driven Lemmy instance dedicated to nature and science, focusing on STEM fields and fostering respectful, constructive discussions. It operates as part of the fediverse, allowing users to interact across federated communities. The platform emphasizes minimal political content in local communities and active moderation to maintain quality. Technically, it uses modern web technologies including Inferno.js and Bootstrap, hosted on Serverspace.io, with HTTPS enabled and basic anti-spam measures such as captcha and application questions for registration. However, the site lacks explicit privacy, cookie, and terms of service policies, which impacts its privacy compliance score. Security posture is decent with HTTPS and domain transfer protection but could be improved by enabling DNSSEC and adding security headers. Overall, the site is trustworthy and serves a niche audience of science and nature enthusiasts within the fediverse.