Security Directory

P

Private Registry Authority

sunosama.org

43

The website sunosama.org represents a niche cultural and linguistic community project focused on international choirbooks supporting languages such as Esperanto, Guosa, and Tokipona. It provides free downloadable choirbook PDFs and promotes collaboration among language communities. The site is small-scale and non-commercial, targeting enthusiasts and speakers of these constructed and minority languages. Technically, the site uses modern frontend technologies like Bootstrap and Google Fonts, hosted on Vodien infrastructure. However, it lacks advanced SEO, accessibility features, and comprehensive privacy or security policies. Security posture is minimal with no DNSSEC and no visible security headers. The WHOIS data shows privacy protection but contains a suspicious domain creation date in the future, which reduces trust. Overall, the site is safe, with no adult or malicious content detected, but lacks business transparency and compliance documentation.

K

Kitty Cat

kitty.social

57

Kitty.social is a niche social networking platform focused on cat enthusiasts, including neko and furry communities, operating within the fediverse ecosystem. The platform offers a cozy, community-driven space for users to share content and interact, leveraging the Misskey software framework. The business model centers on providing a specialized social experience rather than commercial services, targeting a small but dedicated audience. Technically, the website employs modern JavaScript tooling with Vite and Misskey 2025.2.1, ensuring a contemporary and responsive user experience. The site uses HTTPS with reCAPTCHA integration to prevent bot registrations, and media proxying enhances user privacy. However, some standard security headers are missing, and no privacy or cookie policies are published, which limits compliance maturity. From a security perspective, the platform demonstrates good baseline practices such as HTTPS enforcement and bot mitigation but lacks comprehensive security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of privacy and cookie policies is a notable compliance gap, especially for GDPR considerations. Overall, Kitty.social presents a well-implemented niche social platform with good technical foundations and a safe content environment. To enhance trust and compliance, the site should publish privacy and cookie policies, implement security headers, and provide incident response information. These steps will improve user confidence and regulatory adherence.

P

Purple Panda Labs

purplepandalabs.io

57

Purple Panda Labs operates an e-commerce platform specializing in the sale of anabolic steroids, peptides, and laboratory equipment. The business targets bodybuilders, fitness enthusiasts, and customers seeking pharmaceutical-grade products with global and US domestic shipping options. The website presents a professional design with clear navigation and a broad product catalog, indicating a niche market position within the healthcare and fitness sectors. Technical infrastructure includes common JavaScript libraries and Baidu Analytics for user tracking, with moderate performance and mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and explicit privacy compliance mechanisms. The domain is privacy protected but has an appropriate age consistent with the business claims. Overall, the site demonstrates moderate trustworthiness but could improve transparency and security practices.

E

EasyStore

easy.co

67

EasyStore is a mature SaaS platform specializing in unified customer experience (UCX) solutions for retail and ecommerce merchants. The company offers a comprehensive suite of services including online stores, point of sale systems, marketplace integrations, live selling, payment gateways, and loyalty programs. Their platform supports multi-channel selling and customer engagement through mobile and brand apps, unified inbox, and broadcast messaging. The website demonstrates strong digital maturity with extensive use of modern analytics, marketing, and customer engagement technologies. Security posture is good with HTTPS and reCAPTCHA usage, though explicit security headers and privacy policies are not visible in the provided content. WHOIS data is privacy protected, which is common for commercial platforms, but limits transparency. Overall, EasyStore presents as a professional, trustworthy, and well-positioned player in the ecommerce technology sector.

W

Web Order Pharmacy

weborderpharmacy.md

55

Web Order Pharmacy operates as an online pharmacy specializing in the sale of brand name and generic medications with worldwide shipping. The website targets a general audience seeking affordable pharmaceutical products and provides key services such as order tracking and customer support. The business appears to be a small-sized healthcare e-commerce entity based in Moldova, with a consistent domain registration and business focus. Technically, the website employs common JavaScript libraries like jQuery and Owl Carousel, integrates Google Analytics and Tag Manager for tracking, and shows moderate performance and mobile optimization. However, it lacks a CMS indication and advanced hosting details. Security posture is moderate with HTTPS usage but missing critical security headers and explicit privacy or cookie policies, which are compliance gaps. No WAF or blocking mechanisms were detected, and the content is safe for general audiences without adult or explicit material. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

W

Web Order Pharmacy

weborderpharmacy-uk.md

55

Web Order Pharmacy operates as an online pharmacy providing a wide range of brand name and generic medications primarily targeting customers in the United Kingdom and internationally. The business model focuses on e-commerce sales with worldwide shipping and includes customer support and order tracking features. The website content is professionally presented with clear navigation and a good user experience, although it lacks some compliance elements such as privacy and cookie policies. Technically, the site uses modern JavaScript libraries and Google Analytics for tracking, hosted behind Cloudflare, indicating moderate digital maturity. Security posture is adequate with HTTPS enabled but lacks visible security headers and published security policies, which are areas for improvement. The domain registration is privacy protected, which is common for this business type but reduces transparency and trust. Overall, the site is functional and safe for general audiences but would benefit from enhanced privacy compliance and security hardening.

U

United Pharmacies

unitedpharmacies.md

60

United Pharmacies is an established online pharmacy operating since 2001, offering a wide range of brand name and generic medications with international shipping, including to the US and UK markets. The website targets general consumers seeking affordable pharmaceutical products through an e-commerce platform. The business maintains a subsidiary UK domain to cater to UK customers with localized pricing and shipping options. Technically, the site uses a combination of legacy and modern web technologies including jQuery, Bootstrap, and Owl Carousel, with Google Analytics and JivoSite for analytics and customer support. While the site is functional and professionally designed, it shows signs of technical debt such as outdated JavaScript libraries and lacks modern security headers and cookie consent mechanisms, which impacts its security posture and privacy compliance. Contact information is clearly provided, enhancing business credibility. WHOIS data confirms domain longevity and registrant consistency, supporting legitimacy.

U

United Pharmacies (UK)

unitedpharmacies-uk.md

59

United Pharmacies (UK) operates as an online pharmacy specializing in pharmaceutical product sales with UK and international shipping. The website presents a broad catalog of medications and health-related products, targeting customers primarily in the UK but also internationally. The business model focuses on discount pricing and convenience through online ordering and discreet packaging. The company appears to have been established since at least 2001, indicating a longstanding presence in the online pharmacy market. The site includes customer support features such as live chat and multiple social media channels to engage users. Technically, the website employs a mix of legacy and modern web technologies including jQuery 1.6.1, Bootstrap, and Owl Carousel, alongside Google Analytics and Tag Manager for tracking. While the site is functional and moderately optimized for mobile, it shows signs of technical debt, notably the use of outdated JavaScript libraries that may pose security risks. SEO and accessibility features are basic but present. From a security perspective, the site uses HTTPS but lacks visible security headers such as Content Security Policy or HSTS. The absence of cookie consent mechanisms and the use of outdated libraries reduce the overall security posture. No explicit security policies or incident response contacts are provided, which is a gap for compliance and trust. WHOIS data is privacy protected but consistent with the business claims, and no suspicious patterns were detected. Overall, the website is a moderately professional online pharmacy with good business credibility but requires improvements in security practices, privacy compliance, and technical modernization to enhance trust and reduce risk.

R

Trusted Online Pharmacy - rxaisle.com

rxaisle.com

55

RxAisle.com is an online pharmacy platform established since 1999, offering a broad catalog of pharmaceutical products across multiple health categories including asthma, allergies, cancer, and more. The business model focuses on direct-to-consumer e-commerce sales with an emphasis on no prescription required and competitive pricing. The website is built on the PrestaShop CMS platform and uses Cloudflare for DNS management, indicating a moderate level of technical infrastructure. The site is accessible without any WAF or security challenges, and it supports HTTPS, ensuring secure communication. However, the absence of privacy, cookie, and terms of service policies, as well as lack of visible security headers, indicates gaps in compliance and security best practices. No contact information or incident response details are provided, which may impact customer trust and regulatory compliance. Overall, the site presents a basic but functional online pharmacy presence with room for improvement in security and privacy compliance.

ReliableRx Pharmacy operates as an online pharmacy platform primarily serving customers in the United States. The business focuses on distributing generic and prescribed drugs through an e-commerce model, positioning itself as a competitive player in the online pharmaceutical market. The website offers features such as product search by brand or generic name, customer support via contact forms and click-to-call functionality, and order tracking services. The platform leverages Magento 2 as its e-commerce CMS, integrating modern web technologies and marketing tools including Google Analytics, Google Tag Manager, and LivePerson chat for customer engagement and analytics. From a technical perspective, the website demonstrates a moderate level of digital maturity with a well-structured Magento 2 implementation, responsive design, and integration of various third-party marketing and analytics services. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is generally good with HTTPS enforced and standard security headers present, although there is a lack of publicly available security policies or incident response information. A significant concern is the absence of WHOIS domain registration data, which is unusual for an active commercial website and raises questions about domain legitimacy and business transparency. Privacy and cookie policies are present and indicate GDPR compliance, supporting user privacy rights. Overall, the website appears professional and trustworthy in its content and user experience but would benefit from improved transparency regarding domain registration and security policies. Strategic recommendations include verifying and publishing domain registration information, enhancing security and incident response disclosures, improving accessibility compliance, and maintaining up-to-date third-party libraries to mitigate potential vulnerabilities.

P

Pilloid.com

pilloid.com

62

Pilloid.com is a Russian-based online pharmacy specializing in the sale of pharmaceutical drugs with international shipping primarily targeting customers in North America and Europe. The website offers a wide range of authentic medical products and supplements, leveraging the PrestaShop e-commerce platform. The business is relatively young, established in 2018, and maintains a consistent brand presence with clear contact information and a structured product catalog. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and Tawk.to for live chat support, hosted behind Cloudflare DNS services. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC, and no explicit security or incident response policies are published. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is functional, professional, and trustworthy but could improve in security and privacy compliance areas.

F

Pharmacy online store

farmacy-houses.com

40

Farmacy-houses.com is an online pharmacy store established in 2019, offering a wide range of medications and health supplements with worldwide delivery. The website targets general consumers seeking convenient access to pharmaceutical products without the need for prescriptions. The business operates primarily as an e-commerce platform with features such as user accounts, shopping cart, and live chat support. Technically, the site is built on OpenCart CMS and utilizes common web technologies including jQuery, Bootstrap, and third-party services like Google Analytics and JivoSite chat. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but missing DNSSEC and security headers, which are recommended for improvement. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and moderately trustworthy but would benefit from enhanced security and compliance measures.

J

Japan Health Center

bio-japan.net

36

Japan Health Center operates an e-commerce platform specializing in authentic Japanese medicines, vitamins, and dietary supplements. The website targets health-conscious consumers globally, offering a wide range of original Japanese health products with detailed descriptions, customer reviews, and guarantees. The business has been active since 2013 and emphasizes product authenticity and customer trust. Technically, the site is built on OpenCart with common JavaScript libraries and tracking tools, providing a moderate performance and good mobile experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, representing areas for improvement. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration data supports the legitimacy of the business, and no WAF or blocking mechanisms interfere with content access.

P

Pacific Health Ltd

inhousepharmacy.vu

77

Inhouse Pharmacy, operated by Pacific Health Ltd, is a reputable online pharmacy established since 1996, specializing in shipping authentic prescription medications worldwide from a South Pacific facility. The company emphasizes affordable pricing, authentic sourcing from government-registered and FDA-approved manufacturers, and excellent customer service supported by licensed pharmacists. Their market position is strong within the online pharmacy sector, targeting individuals seeking safe and affordable medications globally. Technically, the website is built on ASP.NET WebForms with modern JavaScript libraries such as jQuery and integrates multiple analytics and tracking tools including Microsoft Clarity, Google Tag Manager, and Facebook SDK. The site is mobile-optimized with good SEO and accessibility basics, though there is room for improvement in security headers and accessibility compliance. Security posture is solid with HTTPS enforced and use of Trustwave security seals, but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a professional, trustworthy, and user-friendly platform with moderate technical sophistication and a good security baseline. The absence of WHOIS data reduces transparency but is common in this sector. Strategic recommendations include enhancing HTTP security headers, publishing security policies, and improving accessibility standards.

H

healthyareastore

healthyareastore.com

59

healthyareastore.com is a newly established e-commerce website launched in early 2024, specializing in health and beauty products including makeup, skin care, hair care, and nutritional supplements. The site targets general consumers interested in improving their health and wellbeing through quality products. The business operates primarily online with a straightforward retail model and a focus on product variety within the health and beauty niche. The website is hosted on the edit.site platform and uses modern web technologies including JavaScript and REST APIs to deliver content and e-commerce functionality. The design is professional and mobile-optimized, providing a good user experience with clear navigation and calls to action. Security posture is basic but adequate with HTTPS enabled and domain transfer protection in place, though DNSSEC is not enabled and security headers are absent. Privacy compliance is addressed through a cookie consent mechanism and a privacy policy page, but terms of service and incident response policies are missing. Contact information is limited to an email address and a subscription form, with no phone or physical address provided. Overall, the site presents a moderate risk profile with room for improvement in security, compliance, and business credibility indicators.

favskinhouse.com is a small e-commerce website specializing in the sale of vitamins, supplements, haircare, whitening products, and hormone replacement therapy (HRT) products. The site targets consumers interested in health and beauty products, operating primarily as an online retail platform. The business appears to be relatively new, with the domain registered in 2020, and no parent or subsidiary companies identified. The website content is basic but functional, with product listings and a cookie consent mechanism in place. However, critical business contact information and privacy policies are missing, which may affect user trust and regulatory compliance. Technically, the website is built on the ShopUp e-commerce platform, utilizing older versions of jQuery and Bootstrap frameworks. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is weak, with no DNSSEC, security headers, or visible HTTPS enforcement in the provided data. The WHOIS data is consistent and shows no privacy protection, indicating transparency in domain registration. Security-wise, the absence of privacy policies, terms of service, and contact information for incident response reduces the site's compliance and trustworthiness. The lack of security headers and DNSSEC exposes the site to potential risks. No analytics or tracking services were detected, suggesting minimal user tracking. Overall, the site is functional but requires significant improvements in security, privacy compliance, and business transparency to enhance trust and regulatory adherence. The overall risk assessment indicates a moderate risk profile primarily due to missing compliance documentation and weak security configurations. Strategic recommendations include implementing privacy and terms policies, enhancing security headers and DNSSEC, enforcing HTTPS, and providing clear business contact information to improve credibility and compliance.

Dragon Ordnance operates an e-commerce platform specializing in pharmaceutical raw materials, peptides, injectables, and related products sourced from international warehouses including China, Turkey, and the U.S. The website targets individuals and businesses seeking these specialized pharmaceutical compounds. The business model is retail and wholesale e-commerce with account management features for customers. The site has been active since 2018 and maintains a moderate market position within its niche. Technically, the site uses a custom-built platform leveraging Bootstrap, jQuery, and Swiper for UI components, hosted behind Cloudflare DNS but lacks advanced security configurations such as DNSSEC or security headers. The site is moderately optimized for performance and mobile use but lacks comprehensive privacy and security policies.

N

na

dashpct.io

58

DashPCT is an international online pharmacy platform specializing in a wide range of pharmaceutical and medical products including hormones, SARMs, antibiotics, and injectables. The site targets adult customers seeking specialized health and performance enhancing products globally. The business operates an e-commerce model with user account management and product search capabilities. Technically, the website uses common web technologies such as jQuery, Bootstrap, and Swiper.js, hosted behind Cloudflare DNS services. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is basic with no DNSSEC, no visible security headers, and no cookie consent mechanisms, which presents moderate risk. The domain is very recently registered with minimal WHOIS data, which may affect trustworthiness. Overall, the site is functional and professionally designed but requires improvements in security, privacy compliance, and transparency to enhance credibility and user trust.

The website onlinepharmacy-uk.org is a Bulgarian language online pharmacy targeting Bulgarian-speaking customers residing in the UK. It offers a wide range of pharmaceutical products, including medicines, homeopathic products, vitamins, and supplements, with an e-commerce model focused on online ordering and delivery. The site features customer testimonials and a product catalog with prices in GBP. Technically, the site uses a combination of jQuery, Bootstrap, and various UI plugins, hosted by Hosting Concepts B.V. The site is mobile responsive and has basic SEO and accessibility features. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies exist but lack explicit consent mechanisms. The domain is newly registered in 2024, consistent with a startup business. Overall, the site is functional and moderately trustworthy but would benefit from enhanced security and compliance measures.

A

Amazon4Health.com

amazing4health.com

57

Amazing4Health.com is an online e-commerce platform specializing in affordable pharmaceutical and skincare products, including antibiotics, hormones, anti-aging, and other health-related categories. The website targets a general audience seeking quality medicines without prescription requirements. The business appears to be small-sized and was founded around 2021, consistent with the domain registration date. The platform is built on WordPress with WooCommerce and uses the Storefront theme, indicating a standard e-commerce infrastructure. The site is hosted behind Cloudflare DNS but the hosting provider is not explicitly identified. Technically, the website is moderately optimized with good mobile responsiveness and SEO practices, but lacks advanced accessibility features and some security best practices.

AllDayChemist is an established online pharmacy offering a wide range of prescription and over-the-counter healthcare products. The website positions itself as a trusted source for genuine medicines with secure payment options and customer support features. The business targets general consumers seeking convenient access to pharmaceutical products through an e-commerce platform. Technically, the website uses a modern tech stack including jQuery, Google Tag Manager, Google Analytics 4, and Hotjar, with Magento likely as the CMS. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enabled and secure payment gateways, though some security headers could be improved. Privacy compliance is addressed with visible privacy and cookie policies and GDPR indicators. However, the absence of WHOIS data reduces domain trustworthiness and suggests further verification is needed. Overall, the website is professional, functional, and trustworthy for its business purpose.

A

Aipctshop

aipctshop.com

60

Aipctshop.com is an established online pharmacy specializing in Post Cycle Therapy (PcT) and anti estrogen inhibitors (AI), operating since 2015. The website offers a range of pharmaceutical products with a focus on health-related supplies, targeting individuals seeking convenient online access to these medicines. The business model is e-commerce based, leveraging WooCommerce on WordPress, with a clear emphasis on credit card payment acceptance including modern options like Google Pay and Apple Pay. The site positions itself as a niche player with competitive pricing and customer trust signals such as testimonials and reviews. Technically, the site uses a modern WordPress stack with Elementor and several plugins for SEO, marketing, and customer engagement. Hosting details are not explicit but DNS is managed via Cloudflare, and the domain is registered with Tucows, indicating a stable infrastructure. Security posture is adequate with HTTPS and domain transfer locks, but lacks DNSSEC and published security policies. Privacy compliance is basic, missing cookie consent mechanisms and explicit GDPR indicators. Overall, the site is functional, professional, and trustworthy but could improve in privacy and security transparency.

4

4NRX Ltd

4nrx-uk.md

60

4NRX Ltd operates an established online pharmacy website, 4nrx-uk.md, providing competitively priced pharmaceutical products including brand name and generic drugs. The business targets UK and international customers seeking convenient online purchase and home delivery of medicines. The website features a broad product catalog, company news, and customer support via contact forms and live chat, reflecting a mature e-commerce healthcare business. Technically, the site uses standard web technologies including JavaScript, Google Analytics, Google Tag Manager, and a live chat widget, with a custom or unknown CMS. The site is moderately optimized for performance and mobile use, with good SEO practices but basic accessibility features. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks important security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. WHOIS data confirms the domain is long-established since 1999, with registrant information consistent with the business claims, supporting legitimacy. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and security hardening.

O

Otokonoko Pharmaceuticals

otkph.am

44

Otokonoko Pharmaceuticals operates as a niche e-commerce platform specializing in hormone-related pharmaceutical products, targeting consenting adults. The business model focuses on online retail with cryptocurrency payment acceptance, positioning itself in a specialized healthcare market segment. The website is built on WordPress with WooCommerce, leveraging standard e-commerce technologies and plugins such as Easy Age Verify and BTCPay Server for crypto payments. The site includes age verification overlays and adult content disclaimers to comply with legal requirements for adult products. However, the absence of privacy and cookie policies indicates compliance gaps that should be addressed. Security posture is moderate with HTTPS and reCAPTCHA implemented, but lacks HTTP security headers and formal security policies. Overall, the website is functional and professionally presented but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

P

Panacea Pharma

panaceapharma.net

60

Panacea Pharma is a newly established Australian e-commerce business specializing in the sale of high-quality estradiol injections for DIY hormone replacement therapy (HRT) customers worldwide. The company positions itself as a safe and affordable alternative in the niche DIY HRT market, emphasizing product safety through independent testing and accommodating customers displaced by competitor shutdowns. The website is built on a modern WordPress platform using WooCommerce and Elementor, providing a professional and user-friendly shopping experience with clear product offerings and pricing. However, the site lacks critical privacy and cookie policies, as well as explicit contact information, which impacts its compliance and trustworthiness. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Overall, the domain registration details align with the business claims, supporting legitimacy despite the recent domain age.

A

AstroVials

astrovials.com

61

AstroVials is a newly established e-commerce website launched in early 2024, specializing in astronomy-themed vials and related products. The site targets consumers interested in space and astronomy collectibles, operating on a niche retail business model. The website is built on WordPress using WooCommerce and Elementor, indicating a modern and flexible technical infrastructure suitable for e-commerce operations. The site demonstrates good design quality, mobile optimization, and user experience, although some SEO and accessibility features could be enhanced. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and trustworthy for its business scope but would benefit from improved privacy and security practices.

V

Voix Céleste

voixceleste.cc

56

Voix Céleste is a small, niche e-commerce business specializing in DIY Hormone Replacement Therapy (HRT) products for transfeminine individuals who face barriers accessing conventional healthcare. The company offers lab-tested estradiol injections and sprays, positioning itself as a community-focused provider addressing a critical underserved market. The website is built on WordPress with WooCommerce, leveraging modern web technologies such as React and jQuery. Hosting is provided by Njalla, a privacy-conscious provider. Security posture is moderate with HTTPS enforced but lacking advanced security headers and DNSSEC. Privacy compliance is limited, with no cookie consent or explicit GDPR indicators. Business credibility is supported by clear product information, FAQ, and contact options, though no direct contact emails or phone numbers are published. Overall, the site is accessible, professionally designed, and trustworthy within its niche, but improvements in security and privacy compliance are recommended.

D

The DIY HRT Directory 2.0 | The DIY HRT Directory 2.0

diyhrt.info

57

The DIY HRT Directory 2.0 is a niche informational website dedicated to providing transgender individuals with comprehensive guidance on safely performing DIY hormone replacement therapy. It offers specialized resources including transfeminine and transmasculine guides, telehealth and informed consent information, blood testing advice, and safe injection supply locations. The website operates as a non-commercial directory without selling products or services, targeting a sensitive and underserved community. The domain is relatively new, registered in 2022, and uses privacy protection likely justified by the nature of its content and audience. Technically, the site is built using modern static site generation technology (Astro) and leverages Cloudflare for DNS and CDN services, resulting in fast performance and good mobile optimization. The site includes accessibility and SEO best practices, with clear navigation and a professional design. However, it lacks some security headers and does not have DNSSEC enabled, which could be improved. The site uses minimal analytics via Cloudflare Insights, with no intrusive tracking detected. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. No forms collect sensitive data, reducing risk exposure. However, the absence of privacy and cookie policies, as well as incident response contacts, indicates gaps in compliance and security transparency. The WHOIS data shows privacy protection but no suspicious patterns, supporting legitimacy. Overall, the website is a trustworthy, well-constructed resource with good content quality and technical implementation but would benefit from enhanced privacy compliance and security policies to improve user trust and regulatory adherence.

#

#HalfMyDAF

halfmydaf.com

59

The #HalfMyDAF website is a non-profit initiative focused on encouraging donors with donor advised funds to increase charitable giving by offering matching grants. The site is professionally designed using the Squarespace platform and provides clear instructions and resources for both donors and nonprofits. It partners with the Amalgamated Foundation, which sponsors the matching grants and promotes the initiative. Technically, the site uses modern web technologies and is mobile optimized with good SEO practices. Security posture is strong with HTTPS and HSTS enabled, though some security headers could be improved. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. The domain WHOIS data is missing or unavailable, which is unusual and slightly reduces trust, but the website content and partner association support legitimacy. Overall, the site is a credible and well-maintained platform serving a niche non-profit market.

P

Private by Design, LLC

unseen.ninja

57

The website unseen.ninja is a personal portfolio site representing an individual or small entity focused on design and coding services. The site presents a modern, clean design with SVG-based branding and uses Vue.js framework for frontend interactivity. The content is minimal but relevant, targeting a general audience interested in design and code. The domain is newly registered in early 2024, consistent with the site's apparent purpose as a personal portfolio. Technically, the site employs modern web technologies including ES modules, web fonts, and SVG graphics. It is hosted under a reputable registrar Porkbun LLC, though the hosting provider is not explicitly identified. The site is mobile optimized and has basic accessibility features. SEO is basic but includes proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS but lacks DNSSEC and visible security headers, which are recommended for enhanced security. No forms or data collection mechanisms are present, reducing attack surface but also limiting user interaction. No privacy or cookie policies are provided, which is a compliance gap. The WHOIS data is consistent and transparent, with no privacy protection, appropriate for this type of site. Overall, the site is low risk with moderate trustworthiness but would benefit from improved security headers, privacy compliance, and contact transparency to enhance credibility and user trust.

N

newt

newty.dev

63

newty.dev is a personal website of an 18-year-old developer based in Scotland, showcasing software engineering projects, blogging, and a game server hosting initiative called amethyst. The site targets developers and tech enthusiasts, aiming to share knowledge and collaborate on emerging projects. The business model is primarily personal branding and project promotion with a small team focus. Technically, the website is built using modern frameworks such as Astro and Svelte, styled with TailwindCSS, and optimized for performance and mobile use. The hosting appears to be self-managed, with references to a home server. Security posture is solid with HTTPS enforced and minimal exposed risks, though the site lacks explicit security headers and formal security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the site is professional and trustworthy for a personal developer portfolio, with room for improvement in security and compliance documentation.

The website 'noololly.studio' is a personal portfolio site primarily showcasing a software project named 'Uno'. The site is minimalistic and informal, targeting a general audience likely familiar with the site owner. The business model is non-commercial, focusing on personal project display rather than a formal business offering. The domain registration data is inconsistent, showing a future creation date which undermines trust and raises questions about data accuracy or legitimacy. Technically, the site uses basic HTML, CSS, and minimal JavaScript with no detected CMS or advanced frameworks. Hosting appears to be via Name.com based on WHOIS data. Security posture is weak with no security headers, no DNSSEC, and no privacy or cookie policies. No contact information or incident response details are provided, limiting trust and compliance. Overall, the site is low risk but lacks professional security and privacy practices.

P

index · pigeon

pigeon.life

55

The website pigeon.life is a small-scale personal or creative project site launched in 2019, featuring interactive tools such as language translation, pixel plotting, morse code encoding, and font displays. It also links to a GitHub profile, indicating a developer or hobbyist focus. The site is built using modern web technologies including the Astro framework and is hosted on DigitalOcean, reflecting a moderate level of technical maturity. However, the site lacks formal business information, contact details, and compliance policies, which limits its professional credibility. Security posture is minimal with no security headers or privacy policies detected, and DNSSEC is not enabled on the domain. The domain registration is privacy protected, which is typical for personal projects and does not raise immediate concerns. Overall, the site is safe and suitable for general audiences but would benefit from improved security and compliance measures.

M

mooncell07

mooncell07.me

56

Mooncell07 is a personal website and blog operated by an individual known as nova/mooncell07, focusing on web development learning, emulator development, network programming, gaming, and visual novels. The site serves as a platform to share open source projects and personal posts, targeting technology enthusiasts and developers. The website is built using modern frontend technology SvelteKit and hosted by Hostinger with privacy-protected domain registration, reflecting a small-scale personal project rather than a commercial enterprise. Technically, the site demonstrates a modern tech stack with good mobile optimization and basic SEO, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS and domain transfer protection but lacks DNSSEC and security headers, and no formal privacy or cookie policies are published. Overall, the site is safe, trustworthy, and professional for its intended personal use, but lacks formal compliance and security documentation typical of commercial sites.

Z

aman/home

zeffo.me

56

The website zeffo.me is a personal portfolio site owned by an individual named Aman, primarily showcasing programming projects and animal rehabilitation efforts. The site is small-scale and targets a general audience interested in technology and personal hobbies. It is hosted on Cloudflare and built using the modern SvelteKit framework, indicating a moderate level of technical maturity. The website design is good with clear navigation and mobile optimization, but lacks formal business and compliance documentation such as privacy or cookie policies. Security posture is adequate with HTTPS enabled and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is safe, trustworthy, and professionally presented for a personal project, but lacks formal compliance and security policies expected in business contexts.

The website is a personal portfolio and blog of a computer science student and open source contributor named Isabel Roses. It documents her development journey, contributions to open source projects such as Nixpkgs and Catppuccin themes, and showcases her projects. The site targets developers and tech enthusiasts interested in programming and open source software. The business model is personal branding and community engagement through blogging and project maintenance. The site is small scale and founded recently in 2023. Technically, the site is built using the Astro static site generator (version 5.8.0) with client-side JavaScript for theme switching. It uses Cloudflare DNS servers but does not have DNSSEC enabled. The site loads quickly, is mobile optimized, and has good SEO metadata. Analytics are self-hosted, indicating some privacy consideration. However, no CMS or hosting provider is explicitly identified. From a security perspective, the site uses HTTPS and domain registration includes protective statuses against unauthorized deletion or transfer. However, DNSSEC is not enabled, and no security headers are detected in the HTML content. There are no privacy or cookie policies, no contact information, and no vulnerability disclosure or security.txt files. These gaps reduce compliance and security posture scores. Overall, the site is trustworthy and legitimate as a personal project with good technical quality but lacks formal privacy and security documentation. Strategic improvements include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and providing contact information for incident response.

A

ryu@archy

alokranjan.me

64

The website alokranjan.me is a personal technology-focused site operated by an individual who identifies as a Linux enthusiast, Rust programmer, and cybersecurity aficionado. It serves as a portfolio and blog platform, targeting technology professionals and enthusiasts. The site features modern frontend technologies such as Tailwind CSS, Anime.js, and GSAP, hosted behind Cloudflare DNS and CDN services, ensuring good performance and mobile optimization. The content is well-structured, professional, and relevant to its niche audience. However, the site lacks formal privacy, cookie, and terms of service policies, which impacts its privacy compliance score. Security posture is moderate with HTTPS enabled but missing key security headers and DNSSEC. The WHOIS data indicates privacy protection but contains an anomalous domain creation date set in the future, which may be a data error or placeholder. Overall, the site is trustworthy for its intended purpose but could improve compliance and security practices.

T

tnixc.space

tnixc.space

56

The website tnixc.space appears to be a small personal or portfolio site created recently in 2023. It is built using modern web technologies such as Astro and Tailwind CSS, hosted on Vercel, and includes minimal content primarily serving as an index or landing page. The site has a clean and responsive design with good navigation and performance characteristics. However, it lacks critical compliance elements such as privacy and cookie policies, terms of service, and contact information, which limits its business credibility and privacy compliance maturity. Security posture is moderate with HTTPS enabled but no DNSSEC or security headers detected. Analytics are implemented via Umami, indicating minimal user tracking. Overall, the site is safe for general audiences with no adult or explicit content detected.

The website pontushenriksson.com represents a personal portfolio for an individual web developer and programmer named Pontus Henriksson. The site is currently under development with a legacy site linked for reference. The business model is focused on showcasing skills and previous work to attract freelance or contract opportunities. The target audience includes potential clients or employers seeking web development and design services. The website is hosted on Cloudflare Pages and uses basic modern web technologies such as HTML5, CSS3, and JavaScript. The design is responsive and user-friendly, though content is minimal and lacks comprehensive business or contact information. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers, which are recommended to enhance protection. No privacy, cookie, or terms of service policies are present, indicating limited compliance with GDPR or other privacy regulations. No contact emails, phone numbers, or social media links are provided, reducing business credibility and user trust. Analytics are implemented via Cloudflare Pages Analytics with minimal user tracking. Overall, the website is safe with no adult or questionable content detected. The domain registration is consistent with the website's new status and shows no suspicious patterns. The security posture is moderate but can be improved by adding security headers and privacy policies. The site’s technical implementation is adequate for a personal portfolio but lacks advanced SEO and accessibility features. Strategic recommendations include implementing privacy and cookie policies, adding security headers, providing clear contact information, enabling DNSSEC, and enhancing SEO and accessibility to improve user trust and compliance.

J

JoubaMety

joubamety.com

54

JoubaMety is a personal website representing Jan Rašnovský, a content creator and developer specializing in Minecraft machinima, video production, and programming. The site serves as a portfolio and community hub, linking to various social media and community platforms. The business operates as a small personal brand targeting Minecraft and machinima enthusiasts as well as programming communities. Technically, the website is well-constructed using modern CSS frameworks like Tailwind CSS and Ripple UI, with JavaScript enhancements and Cloudflare DNS. Performance and mobile optimization are good, and SEO practices are adequately implemented. Security posture is decent with HTTPS and domain transfer protection, but lacks DNSSEC and security headers. Privacy and compliance policies are absent, representing a compliance gap. Overall, the site is trustworthy and safe for general audiences.

L

lighttigerXIV - About

lighttigerxiv.dev

56

The website lighttigerxiv.dev is a personal portfolio site for Afonso Fonseca, a young developer from Portugal. It serves primarily as a showcase for his programming projects, open source contributions, and professional CV. The site targets a general audience interested in technology and programming, with a focus on personal branding rather than commercial business operations. Technically, the site is built using modern web technologies including SvelteKit and Google Fonts, delivering a fast and mobile-optimized experience. However, it lacks explicit privacy, cookie, and security policies, which are important for compliance and trust. Security posture is moderate with HTTPS implied but no detected security headers or incident response information. Overall, the site is safe, professional, and trustworthy but could improve in privacy compliance and security best practices.

R

Robin Roses

robinroses.xyz

56

Robin Roses is a personal website serving as an internet garden for sharing ideas, blog posts, and documentation related to software development, aesthetics, and nature-inspired projects. The site targets individuals interested in neovim, nix, rust, UI design, and minimalism. It operates as a small-scale personal brand with open-source projects and content sharing as its core offerings. Technically, the site is built using modern static site generation tools like Zola and reproducible build systems like Nix, hosted behind Cloudflare DNS and CDN services. The site demonstrates good performance, mobile optimization, and basic accessibility, but lacks advanced SEO and comprehensive privacy compliance features. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers. No privacy or cookie policies are published, and no contact or incident response information is provided, limiting compliance and trust. Overall, the site is safe, professional, and well-structured but would benefit from enhanced security and privacy practices.

The website duanin2.top currently presents no accessible content beyond an empty HTML skeleton. There is no metadata, no visible text, no forms, no contact information, and no business-related content. The domain is registered with HOSTINGER operations, UAB, with privacy protection enabled, and uses Cloudflare DNS servers. The domain age is approximately one year, consistent with a newly created or placeholder site. Due to the lack of content and contact details, the website does not provide any meaningful business information or user engagement opportunities. From a technical perspective, the site lacks any detectable technologies, scripts, or frameworks. There is no evidence of HTTPS or security headers, which are critical for secure web operations. The absence of privacy, cookie, or terms of service policies indicates non-compliance with common data protection regulations such as GDPR. No analytics or tracking mechanisms are present, suggesting minimal or no user data collection. Security posture is weak due to the absence of HTTPS and security headers, and no incident response or vulnerability disclosure information is available. The domain registration is privacy protected, which is common for small or new sites but reduces transparency. No suspicious patterns were detected, but the overall trustworthiness is low given the lack of content and business information. Overall, the website appears to be inactive or a placeholder with no substantive content or business presence. Strategic recommendations include implementing HTTPS, adding essential security headers, publishing privacy and cookie policies, providing clear contact information, and developing meaningful website content to improve trust, compliance, and user engagement.

I

InvitedToHell

pompomsoft.de

47

The website pompomsoft.de represents a personal or small-scale developer presence primarily focused on social and gaming community engagement. The site features links to social media platforms such as Telegram, GitHub, and Mastodon, and includes a 3D interactive element powered by Spline. There is no formal business description or corporate information provided, indicating an individual or hobbyist operation rather than a commercial enterprise. The technical infrastructure leverages modern frontend technologies including Svelte and Cloudflare DNS services, suggesting a moderate level of digital maturity. However, the site lacks comprehensive metadata, privacy policies, and security headers, which limits its compliance and security posture. The absence of forms or data collection mechanisms reduces privacy risks but also limits business functionality. Overall, the site is accessible and functional but basic in content and security features.

I

is-a.dev - Free subdomains for developers

is-a.dev

61

The website is-a.dev offers a free subdomain registration service targeted primarily at developers. It enables users to obtain free `.is-a.dev` subdomains by following instructions hosted on a GitHub repository. The service is positioned as a niche developer tool with a small-scale operation founded in 2020. The website content is clear, relevant, and professionally presented with consistent branding and a focus on developer engagement through GitHub and Discord communities. From a technical perspective, the site uses modern web technologies including HTML5, CSS3, JavaScript, and is hosted behind Cloudflare, ensuring fast performance and good mobile optimization. The presence of Carbon Ads and Cloudflare Insights indicates minimal advertising and analytics usage, with a low level of user tracking. SEO and accessibility are adequately addressed, though accessibility is basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security headers and formal privacy or cookie policies, which are important for compliance and trust. Incident response is partially addressed via a GitHub abuse reporting mechanism, but no dedicated security contact or vulnerability disclosure policy is present. Overall, the website is trustworthy and functional with a good balance of usability and security for its scope. The main risks relate to privacy compliance and formal security governance, which could be improved to enhance user trust and regulatory adherence.

H

H4LO

h4lo.ca

56

H4LO.ca is a personal portfolio website created and maintained by an individual developer named H4LO. The site serves as a showcase for projects, an online storefront, and a code repository linked via GitHub. The business model is personal branding and project demonstration, targeting a general audience interested in technology and development. The website is relatively new, founded in 2024, and positions itself as a niche personal brand rather than a commercial enterprise. The content is concise, well-structured, and professionally presented with consistent branding and clear navigation.

P

Private by Design, LLC

dunkirk.sh

58

The website dunkirk.sh is a personal portfolio and blog site for Kieran Klukas, a 17-year-old homeschooled coder and content creator based in the United States. The site showcases personal interests such as filmmaking, FPV, and TypeScript programming, and provides contact information primarily via email. The domain is newly registered in 2024 under Private by Design, LLC, with transparent WHOIS data and appropriate domain security statuses. The site uses modern web technologies including TypeScript, Cloudflare DNS and CDN, and JavaScript, delivering a fast and mobile-optimized user experience with good SEO practices. From a security perspective, the site enforces HTTPS and benefits from Cloudflare's infrastructure, but lacks explicit security headers and formal privacy or cookie policies, indicating room for compliance improvement. No forms or sensitive data collection mechanisms are present, reducing attack surface. Analytics usage is minimal and privacy-conscious, relying on anonymous HTTP request counters. No vulnerabilities or suspicious content were detected. Overall, the site presents a moderate to good security posture with a strong technical foundation and clear business credibility as a personal portfolio. However, the absence of privacy and cookie policies and explicit security headers are notable gaps. Strategic improvements in these areas would enhance compliance and trustworthiness.

R

refact0r

refact0r.dev

58

The website refact0r.dev is a personal portfolio and blog belonging to a student interested in computer science, web development, and design. It serves as a platform to showcase projects, share blog content, and present personal interests. The site is built using modern web technologies including SvelteKit, and it demonstrates good design quality, mobile optimization, and user experience. However, it lacks formal business information, contact details, and compliance documentation such as privacy or cookie policies. From a technical perspective, the site uses a modern JavaScript framework (SvelteKit) and includes minimal analytics via umami, indicating a lightweight and privacy-conscious approach. The performance appears fast, and the site is mobile responsive. However, no security headers were detected in the provided data, and there is no evidence of HTTPS enforcement or advanced security practices. Security posture is moderate but could be improved by implementing standard security headers, privacy policies, and incident response information. The absence of contact information and compliance documents reduces trust and business credibility. No vulnerabilities or suspicious content were detected, and the domain registration uses privacy protection, which is appropriate for a personal site. Overall, the site is a well-designed personal portfolio with room for improvement in security, privacy compliance, and business transparency. Strategic recommendations include adding privacy and cookie policies, implementing security headers, providing contact information, and considering a vulnerability disclosure policy to enhance trust and compliance.

J

Jason Cameron

jsn.cam

64

Jason Cameron's website is a professional portfolio showcasing his expertise as a software engineer specializing in backend web development, scalable systems, DevOps, and cybersecurity. The site highlights his contributions to major organizations and open source projects, positioning him as a credible and skilled developer. The technical infrastructure is modern, leveraging SvelteKit for frontend and Golang for backend projects, with good performance and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and privacy policies are missing. Overall, the site is trustworthy and professional but could improve compliance and security transparency.

The website zacharykai.net currently serves a bot verification page employing Google reCAPTCHA invisible to prevent automated access. This indicates a security mechanism or WAF challenge blocking direct content access, limiting visibility into the actual business or service offered. The domain is newly registered in early 2024 via NameCheap without privacy protection, suggesting transparency but also a nascent online presence. No business, contact, or policy information is publicly accessible on the landing page, and no SEO or analytics technologies are detected beyond the reCAPTCHA scripts. The security posture shows basic use of CAPTCHA but lacks DNSSEC and security headers, and HTTPS status is unknown from the provided data. Overall, the site is in an early stage with minimal content and limited trust signals, resulting in a low AI score primarily due to access restrictions and lack of business information.