Security Directory

P

Private by Design, LLC

hl2.sh

52

The website hl2.sh is a personal portfolio and blog site operated by an individual or small entity named Private by Design, LLC, based in the US. The site primarily serves as a curated hub for the author's interests, including technology, gaming, and software tools, with links to various external resources. The business model is non-commercial and focused on personal expression and information sharing. The site uses the Astro framework and is hosted on bunny.net, indicating a modern but simple technical infrastructure. Performance and mobile optimization are basic but functional. Security posture is weak due to lack of visible HTTPS confirmation, absence of security headers, and no disclosed privacy or cookie policies. No contact or incident response information is provided, limiting trust and compliance. Overall, the site is safe for general audiences with no adult or explicit content detected.

U

uwu.dog | the dog ever

uwu.dog

55

The website uwu.dog appears to be a small personal or hobby site with minimal content focused on links to other personal or interest-related sites. The domain is registered with privacy protection through NameCheap and hosted with Cloudflare DNS services. The site lacks any formal business information, privacy or cookie policies, and contact details, indicating it is not a commercial or professional business site. Technically, the site uses basic HTML and CSS with no detected CMS or advanced frameworks. Security posture is minimal with no security headers or HTTPS enforcement details available, and no analytics or tracking scripts are present. Overall, the site is low risk but also low in professionalism and compliance.

The website connormcf.com is a personal site belonging to a UK-based systems administrator. It serves primarily as a personal blog and portfolio, sharing technical content and providing a PGP key for encrypted communication. The site is small-scale, non-commercial, and targets a general audience interested in technology and systems administration. The domain was registered in 2015 and is hosted via Cloudflare, indicating a stable and reputable infrastructure. From a technical perspective, the site uses standard web technologies including HTML5, CSS, and JavaScript, with Cloudflare Insights for minimal analytics. The site is mobile-optimized and has basic SEO and accessibility features. However, it lacks advanced frameworks or CMS platforms, suggesting a simple, custom-built or static site. Security posture is moderate with HTTPS enforced and domain transfer protection enabled. However, the absence of DNSSEC, security headers, and published security policies reduces the overall security maturity. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is low due to missing privacy and cookie policies and lack of GDPR indicators. Overall, the site is low risk given its personal nature and limited data collection. Strategic improvements include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and providing contact information for security incidents to enhance trust and compliance.

B

Application error: a client-side exception has occurred

breq.dev

59

The website breq.dev serves as a personal portfolio and project showcase primarily focused on software development, hardware projects, and open source contributions. It targets developers and technology enthusiasts interested in programming, hardware tinkering, and web applications. The site hosts numerous projects with demos and repositories, reflecting a strong technical background and active development. However, the main page currently suffers from a client-side application error, which significantly impacts user experience and accessibility. Technically, the site is built using modern web technologies including Next.js, React, Python, Flask, and Node.js, and is hosted on Vercel. The technology stack is diverse and up-to-date, supporting a variety of programming languages and frameworks. Despite this, the site lacks important security headers and privacy compliance elements, and the frontend error suggests some technical debt or deployment issues. From a security perspective, the site does not present explicit vulnerabilities but lacks essential security best practices such as HTTPS verification, security headers, and privacy policies. No incident response or vulnerability disclosure information is provided, which limits trust and compliance with data protection regulations. Analytics usage is minimal and limited to Cloudflare Insights, with no aggressive tracking or advertising. Overall, the site is a technically competent personal portfolio with good content relevance but suffers from poor user experience due to errors and missing compliance/security features. Strategic improvements in frontend stability, privacy compliance, and security hardening are recommended to enhance trustworthiness and professionalism.

InvoxiPlayGames is a personal and hobbyist website operated by Emma, a software developer and security researcher specializing in reverse engineering, game modding, and open source projects. The site serves as a portfolio and project hub, targeting enthusiasts in gaming, security research, and technology. The business model is informal and community-driven, focusing on sharing knowledge and software rather than commercial activities. The domain is well-established since 2015, supporting the credibility of the operator's experience and project history. Technically, the website is built with standard web technologies including HTML5, CSS3, and JavaScript, with backend and project languages spanning C#, C, C++, NodeJS, and others. Hosting is via Cloudflare, providing HTTPS and performance benefits. The site is mobile-optimized with good navigation and content structure, though accessibility and SEO are basic. No CMS is detected, indicating a custom or static site approach. From a security perspective, the site uses HTTPS and does not expose sensitive data or forms, reducing attack surface. However, it lacks security headers and formal privacy or cookie policies, which are recommended for compliance and enhanced security posture. The presence of a HackerOne profile indicates responsible vulnerability disclosure practices. No critical vulnerabilities or suspicious content were detected. Overall, the site is a credible, well-maintained personal project hub with moderate technical sophistication and a good security baseline. Improvements in privacy compliance and security headers would enhance trust and protection. The risk level is low given the non-commercial nature and limited data collection.

A

lexd0g's website

alice.tf

54

The website alice.tf is a personal site representing an individual named Alice, also known as lexd0g. It serves as a personal portfolio and social hub showcasing interests in technology, music, and various hobbies. The site is simple, static, and non-commercial, targeting a general audience interested in the owner's personal projects and social profiles. The domain is recently registered and consistent with the personal nature of the site. Technically, the site is built with basic HTML and CSS, hosted via OVH with Cloudflare nameservers. There is no evidence of advanced frameworks, CMS, or analytics tools. The site is mobile-friendly and has good content quality but lacks advanced SEO and accessibility features. Security posture is minimal with no security headers detected and no privacy or cookie policies present. From a security perspective, the site does not expose sensitive data or use vulnerable libraries but lacks formal security policies and incident response information. The absence of privacy and cookie policies indicates low privacy compliance. No WAF or blocking mechanisms are detected, allowing full content access. Overall, the site is low risk due to its personal nature and lack of commercial transactions or sensitive data. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and improving accessibility and SEO to enhance trust and compliance.

S

Stringy Software

mae.wtf

60

The website mae.wtf is a personal portfolio and creative showcase for an individual named vimae, who identifies as a queer programmer, musician, and internet user with interests in technology and creative arts. The site highlights programming skills, music production, and various creative projects, positioning itself as a niche personal brand rather than a commercial business. The domain is registered with privacy protection and hosted using modern web technologies, including React, Next.js, and TailwindCSS, ensuring a fast and responsive user experience. Social media integration includes Discord, Bluesky, and YouTube, supporting community engagement. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced security headers and explicit policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite analytics usage. Overall, the site is trustworthy, well-designed, and serves its purpose as a personal creative hub.

P

Private by Design, LLC

ioletsgo.gay

55

The website ioletsgo.gay is a personal site representing an individual known as Ivory / Ivy / Io, focusing on personal interests such as gaming, technology, art, and music. It serves primarily as a personal branding and social hub with links to various social media and friend sites. The site is small scale, recently created in 2024, and hosted via Porkbun with privacy protection on the domain registration. Technically, the site is built with basic HTML, CSS, and JavaScript without any detected CMS or frameworks. The performance and mobile optimization are basic but functional. Security posture is minimal with HTTPS enabled but lacking security headers and DNSSEC. No privacy or cookie policies are present, and no forms or data collection mechanisms are implemented. Security-wise, the site shows no critical vulnerabilities but lacks advanced protections and compliance features. The domain registration is consistent and legitimate, with privacy protection justified for a personal site. No adult or explicit content is present, making the site safe for general audiences. Overall, the site is a modest personal web presence with room for improvement in security, privacy compliance, and professional polish. Strategic enhancements could improve trust and security posture while maintaining the personal nature of the site.

The website daniela.lol is a personal portfolio and hobbyist site belonging to Daniela, a young trans woman from Germany who engages in coding, game modding, 3D modeling, and art. The site serves as a platform to showcase her creative projects, share social media links, and accept donations. The business model is informal and community-driven, targeting a general audience interested in gaming mods and creative content. The domain is very new, registered in September 2024, consistent with a recently launched personal site. Technically, the site is built with basic HTML and CSS, hosted behind Cloudflare DNS but without DNSSEC enabled. There is no evidence of advanced frameworks, CMS, or analytics tools. The site performance and mobile optimization are basic but functional. SEO and accessibility features are minimal. No security headers or privacy policies are present, indicating a low maturity level in security and compliance. From a security perspective, the site uses HTTPS (implied by Cloudflare DNS usage but SSL configuration details are unknown), but lacks security headers and privacy compliance mechanisms. No forms or data collection points are present, reducing attack surface but also limiting user engagement features. The WHOIS data shows a recent registration with no privacy protection, consistent with a personal site. No suspicious patterns or vulnerabilities were detected. Overall, the site is low risk but also low in professional security and compliance standards. It is suitable for personal use but would benefit from improvements in privacy policies, security headers, and contact transparency to enhance trust and compliance.

Shrecknt's Silly Site is a personal technology-focused website serving as a blog and portfolio for the individual known as Shrecknt. The site features links to various social media profiles including Discord, GitHub, and Matrix, as well as a collection of partner and related sites. The content is primarily personal and technical in nature, targeting a general audience interested in technology and programming. The site does not appear to represent a commercial business entity but rather a personal project or hobbyist presence. Technically, the website is built with standard HTML5, CSS3, and JavaScript, utilizing Font Awesome icons for visual elements. There is no evidence of a CMS or complex frameworks, indicating a lightweight and straightforward implementation. The site appears to be mobile-optimized with good navigation clarity, though accessibility features are basic. No analytics or tracking scripts were detected, suggesting minimal user tracking and a privacy-conscious approach. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are important for compliance and user trust. No contact emails or phone numbers are provided, limiting direct communication channels. The domain uses privacy protection for WHOIS data, which is common for personal sites but reduces transparency. No vulnerabilities or malicious content were detected, and the site content is safe for general audiences. Overall, the site scores moderately on content quality and business credibility but scores lower on security posture and privacy compliance. Strategic improvements in security headers, privacy policies, and contact information would enhance trust and compliance. The site is suitable as a personal portfolio but lacks features expected from professional or commercial websites.

The website kibty.town is a personal portfolio site belonging to a developer and (un)professional pentester named Eva, who focuses on infosec, software pentesting, and devops. The site highlights several open source projects and community involvement, targeting infosec enthusiasts and developers. The business model is primarily personal and community-driven, with no commercial transactions evident. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, Google Fonts, and integrates third-party services such as Umami Analytics and Ko-fi chat widgets. The site is moderately optimized for mobile and performance but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS implied but no DNSSEC or security headers detected. Privacy compliance is minimal with no privacy or cookie policies present. WHOIS data is consistent and transparent, indicating a legitimate personal site. Overall, the site is safe, professional, and trustworthy but could improve in privacy and security practices.

M

matdoesdev

matdoes.dev

47

The website matdoes.dev is a personal portfolio site for a full-stack software developer named mat. It serves as a platform to showcase blog posts and projects, targeting a general audience interested in software development. The site uses modern web technologies, specifically the SvelteKit framework, ensuring a fast and responsive user experience. External links to GitHub, Matrix, and Ko-fi provide social and donation channels, enhancing community engagement. However, the site lacks formal privacy, cookie, and terms of service policies, which limits its compliance posture. From a technical perspective, the site demonstrates good implementation with module preloading and modern JavaScript frameworks, contributing to fast performance and good mobile optimization. Accessibility is basic but functional. Security measures such as HTTPS are assumed but not explicitly confirmed in the provided data, and no security headers were detected. There are no forms or data collection mechanisms present, reducing exposure to common web vulnerabilities. Security posture is moderate but could be improved by adding security headers, formal privacy and cookie policies, and explicit contact information for incident response. No vulnerabilities or suspicious patterns were detected. The domain uses privacy protection for WHOIS data, which is appropriate for a personal portfolio. Overall, the site is safe, professional, and suitable for general audiences. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, providing clear contact information, and improving accessibility features to strengthen compliance and trustworthiness.

C

c7.pm

c7.pm

44

The website c7.pm is a personal or community-oriented site established in 2018, serving as a hub for links to friends, communities, and miscellaneous related sites. It does not represent a commercial business and lacks formal business descriptions or commercial services. The site is hosted on a small hosting provider and uses basic web technologies such as HTML, CSS, and JavaScript without any major frameworks or CMS. The design is consistent and functional, with moderate performance and basic mobile optimization. Security posture is limited, with no detected security headers or HTTPS confirmation from the provided data, and no privacy or cookie policies present. No contact information or incident response details are provided, which limits trust and compliance. Overall, the site is safe for general audiences and does not contain adult or explicit content.

A

Ariana "adryd"

adryd.com

46

The website adryd.com is a personal site owned by Ariana (aka adryd), primarily serving as a platform to share personal projects, blog posts, and references related to technology, trains, radios, and other hobbies. The site is small-scale, non-commercial, and targets a general audience interested in these niche topics. The domain has been registered since 2016, indicating a stable presence. The website uses modern technologies such as the Astro static site generator and Cloudflare DNS, delivering a fast and mobile-optimized experience with good design quality and navigation clarity. From a security perspective, the site benefits from HTTPS and domain status protections that prevent unauthorized transfers or deletions. However, it lacks DNSSEC, security headers, privacy and cookie policies, and explicit contact information, which are areas for improvement. No forms or data collection mechanisms are present, reducing privacy risks but also limiting user engagement options. No advertising or tracking technologies were detected, indicating minimal user tracking. Overall, the website presents a moderate security posture with good technical implementation but limited privacy compliance and business credibility signals. The content is safe for general audiences, with no adult or questionable material detected. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and providing contact information to enhance trust and compliance.

The website enfys.wales is a personal portfolio and blog site for Enfys, a developer and musician based in North Wales. The site targets niche communities such as the demoscene and technology enthusiasts, offering links to social profiles and partner sites. The business model is personal branding and community engagement rather than commercial services. Technically, the site is a simple static HTML/CSS/JavaScript implementation with no detected CMS or advanced frameworks. Mobile optimization is poor, and no advanced SEO or accessibility features are evident. Security posture is minimal with no HTTPS or security headers detected, and no privacy or cookie policies are present, indicating low compliance with GDPR and other regulations. No contact or incident response information is provided, limiting trust and professional credibility. Overall, the site is safe for general audiences but lacks professional security and compliance features.

The website e2.pm is a small, informal personal webpage primarily featuring humorous and casual content without any clear business or professional focus. The site lacks formal business information, contact details, privacy policies, or terms of service, indicating it is not intended for commercial or enterprise use. The domain was registered in late 2019 and remains active, consistent with the site's informal nature. Technically, the website uses basic HTML, CSS, and JavaScript with external resources such as Google Fonts and a cookie consent library. Hosting and DNS are managed via Cloudflare, providing standard performance and security benefits. The site is moderately optimized for mobile and accessibility but lacks advanced SEO and security headers. From a security perspective, the site uses HTTPS and includes a cookie consent banner, showing some privacy awareness. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No forms or data collection points are present, reducing attack surface but also limiting user engagement. Overall, the website poses low risk but also offers limited trust and professionalism. Strategic improvements include adding privacy and security policies, contact information, and enhancing technical and security best practices to improve credibility and compliance.

L

luna

l4.pm

44

The website l4.pm is a personal portfolio and hobbyist project site operated by an individual known as Luna (LUN-4). It primarily showcases backend development work for partners such as anlatan.ai and novelai.net, alongside open source projects related to virtual reality and personal interests like music and blogging. The site is small-scale, targeting technology enthusiasts and VR communities, with no commercial business model or formal market positioning. Technically, the site is built with basic HTML, CSS, and SVG graphics, hosted on Hetzner, and demonstrates moderate performance and basic mobile optimization. Security posture is minimal, with no visible security headers or published policies, and no evidence of HTTPS status was found in the provided data. The site lacks privacy, cookie, and terms of service policies, which impacts compliance and trust. Content includes mild adult-themed warnings but no explicit adult content. Overall, the domain registration is consistent and legitimate, supporting the personal nature of the site.

The website 'Mary's Internet Realm' is a personal and hobbyist site created in 2018, featuring casual content including a Tetris game and links to various personal projects and friends' websites. It targets general internet users interested in casual gaming and personal portfolios. The site is small-scale with basic content quality and moderate branding consistency. Technically, it uses standard HTML, CSS, and JavaScript with Cloudflare DNS hosting but lacks advanced frameworks or CMS. Mobile optimization is good, but accessibility and SEO are basic. Security posture is weak due to lack of security headers, DNSSEC, and privacy policies. The domain is privacy protected via a reputable registrar, which is typical for personal sites. Overall, the site is safe and suitable for general audiences but lacks professional security and privacy compliance features.

E

Essem

essem.space

60

Essem.space is a personal website belonging to an individual named Essem, who is a coder and content creator. The site serves as a portfolio and microblog platform linking to various personal projects and social media profiles. The business model is personal branding and content sharing, targeting a general audience interested in technology and coding. The site is small scale and founded in 2018, with no corporate affiliations or subsidiaries. Technically, the site is simple, built with basic HTML and CSS, hosted likely via Namecheap, and lacks advanced frameworks or CMS. Performance and mobile optimization are basic but functional. Security posture is minimal, with no visible security headers or policies, and no HTTPS status explicitly known from the data. Privacy compliance is lacking as no privacy or cookie policies are present. The WHOIS data shows privacy protection typical for personal sites, with domain age consistent with the site's history. Overall, the site is safe, trustworthy for general audiences, but lacks formal security and compliance features.

E

elixi.re

elixi.re

63

elixi.re is a small, open-source technology service providing free file hosting and link shortening functionalities. The platform supports multiple vanity domains and emphasizes privacy by avoiding non-free JavaScript and tracking code. The website is technically modern, using Bootstrap and Cloudflare DNS services, and is mobile optimized with a clean user interface. Security posture is moderate with HTTPS enforced but lacks some security headers and exposes debug information on error pages. Privacy compliance is good with a clear privacy policy and GDPR consent modal, though cookie policy and terms of service are missing. Overall, the site is trustworthy for its niche audience but could improve in security and compliance documentation.

The website eightyeightthirty.one is a small-scale technical project focused on building a graph of the Internet based on 88x31 badges, which are small link badges used on websites. The business behind the domain is registered as Private by Design, LLC in the US, indicating a privacy-conscious small entity likely operating in the technology sector. The site requires WebGL and JavaScript to function, and without these, only minimal placeholder content is visible. The technical infrastructure uses modern JavaScript modules and WebGL, with styling based on CSS variables and Material Design Components, suggesting a moderate level of digital maturity. However, the site lacks visible privacy, cookie, or terms of service policies, and no contact or incident response information is provided, which limits its compliance and trustworthiness. Security posture is basic with no detected security headers or advanced configurations, and DNSSEC is not enabled. Overall, the site is functional but minimalistic, with room for improvement in security, privacy compliance, and user engagement.

N

NotNet

n2.pm

54

NotNet is a small community of friends and developers focused on software and systems development, as indicated by their website content and linked resources. The site serves primarily as an informational hub with links to their home server, Hetzner-hosted server, and code repositories on GitHub and Forgejo. The business model appears community-driven without commercial transactions or extensive service offerings. The website is modest in design and content, reflecting a niche technical audience rather than a broad commercial market. Technically, the website is built with basic HTML, CSS, and SVG graphics, lacking advanced frameworks or CMS platforms. Hosting is partially identified with Hetzner for one server, suggesting some professional infrastructure. Performance and mobile optimization are basic but functional. SEO and accessibility features are minimal, and no analytics or tracking technologies are detected, indicating a privacy-conscious or low-traffic site. From a security perspective, the site lacks visible security headers and formal policies such as privacy, cookie, or terms of service documents. No incident response or vulnerability disclosure mechanisms are present. The domain is secured with HTTPS (assumed from URL), but SSL configuration details are unknown. WHOIS data shows a consistent and legitimate registration since 2019, supporting the site's authenticity. Overall, the security posture is basic with room for improvement in policy transparency and technical safeguards. The overall risk is low given the non-commercial nature and limited data collection, but the absence of privacy and security policies could pose compliance risks if the site evolves. Strategic recommendations include implementing standard security headers, publishing privacy and cookie policies, adding contact and incident response information, and considering vulnerability disclosure practices to enhance trust and compliance.

C

coolmathgam.es

coolmathgam.es

68

coolmathgam.es operates as a parody Mastodon instance within the fediverse, providing a niche social networking platform that mimics Mastodon but is explicitly unaffiliated with the well-known Cool Math Games site. The platform offers basic Mastodon features such as user profiles, public timelines, and trending feeds, targeting general users interested in decentralized social media. The site is small in scale with minimal active users and clear disclaimers about its parody nature. Technically, the website is built on a modern tech stack including Mastodon version 4.4.0-nightly and React, leveraging Cloudflare for hosting and analytics. The site uses HTTPS with script integrity checks, indicating a reasonable level of technical maturity. However, some standard security headers are missing, and privacy compliance mechanisms such as cookie consent banners are absent. From a security perspective, the site benefits from HTTPS and no visible vulnerabilities or exposed sensitive data. The use of privacy protection in domain registration is typical for small or parody sites, though it limits transparency. The absence of contact information, terms of service, and security policies reduces trust and compliance posture. Overall, the security posture is moderate but could be improved with additional headers and policies. The overall risk is low given the site's parody and small scale nature, but strategic improvements in privacy compliance, security headers, and transparency would enhance trustworthiness and user confidence.

T

toot.community

toot.community

73

toot.community is an independent Mastodon instance based in the Netherlands, operated by digital enthusiasts since 2022. It provides a federated social networking platform within the fediverse, targeting a global audience interested in decentralized social media. The platform offers trending posts, hashtag exploration, and user registration, positioning itself as a community-driven alternative to mainstream social networks. Technically, the site runs Mastodon version 4.4.2 on a Ruby on Rails backend with React frontend components, hosted on servers managed by the registrant's hosting provider. The website is moderately optimized for performance and mobile use, with good SEO and accessibility basics. Security posture is solid with HTTPS and script integrity checks, though it lacks advanced security headers and explicit security policies. Privacy compliance is basic with a privacy policy and terms of service present but no cookie consent mechanism. WHOIS data is transparent and consistent with the website's claims, enhancing trustworthiness. Overall, toot.community is a credible, well-maintained social platform with room for security and privacy enhancements.

E

EmuMovies

emumovies.com

65

EmuMovies is a niche media repository and community platform focused on providing high-quality video previews, artwork, and related media for retro gaming and emulation front-ends. Established in 2005, it has built a loyal user base and offers unique services such as EmuMovies Sync for fast media downloads. The website is powered by the Invision Community CMS and leverages modern web technologies and Cloudflare for hosting and DNS. Security posture is solid with HTTPS and domain locks, though DNSSEC is not enabled. Privacy and cookie policies are present and indicate GDPR compliance, but no explicit terms of service or security policy pages were found. Contact is primarily via a web form, and social media presence is limited to Facebook.

C

evan clue's media portfolio

clue.media

50

The website clue.media serves as a personal media portfolio for Evan Clue, showcasing a variety of creative works including graphic design, video production, web design, merchandising, and a self-published music label. The site highlights several projects such as 'planet clue', 'kayboards', and 'yesclip', demonstrating a niche but consistent presence primarily in the media and creative content space. The business model is centered around personal branding, content creation, and merchandising with a small but engaged audience, particularly on social media platforms like YouTube and TikTok. From a technical perspective, the website is built using standard web technologies including HTML5, CSS, and JavaScript, hosted on Amazon AWS infrastructure. The site is moderately optimized for performance and mobile use, with a clean and consistent design that supports good user experience and navigation clarity. However, there is no detected use of advanced frameworks or CMS, and SEO and accessibility features are basic. Security posture is minimal; no security headers or advanced configurations are present, and DNSSEC is not enabled. The domain is secured with HTTPS (assumed from domain and modern hosting), but no privacy or cookie policies are published, indicating low compliance maturity. No forms or data collection mechanisms are present, reducing attack surface but also limiting user engagement features. The WHOIS data shows a domain age consistent with the portfolio's timeline and a registrant country matching the website's language and contact domain, supporting legitimacy. Overall, the site is a well-maintained personal portfolio with good content quality and business credibility but lacks formal privacy, security, and compliance features. Strategic improvements in security headers, privacy policies, and incident response information would enhance trust and compliance posture.

X

xmpp.work

xmpp.work

61

xmpp.work is a specialized job board platform focused on employment opportunities related to XMPP technology. Founded in 2020, it serves a niche audience of job seekers and employers in the XMPP ecosystem. The website offers job listings, job posting services, and search functionality tailored to this sector. Technically, the site is built on WordPress with common plugins and libraries such as jQuery and Select2, hosted by Hosting Concepts B.V. The site is accessible, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or detailed GDPR compliance indicators. Contact information is limited to a contact form with no direct emails or phone numbers visible. Overall, the site is legitimate and trustworthy for its niche but could improve security and privacy practices.

Tygrys is a small technology company founded in 2022 offering privacy-focused secure messaging, email, and code/project management services. The company emphasizes user data ownership, no ads, no tracking, and open source technologies. Their market position is niche with no direct competitors offering the same integrated privacy-centric services. Technically, the website is well implemented with modern technologies, mobile optimization, and good SEO practices. Hosting is via AWS DNS infrastructure. Security posture is strong with HTTPS and no trackers, but lacks some security headers and published policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy with room for improvement in compliance documentation and security transparency.

T

Tigase

tigase.net

56

Tigase.net is a specialized technology provider offering scalable instant communication, presence, and messaging software solutions based on the XMPP standard. The company targets enterprises and developers requiring robust real-time communication infrastructure, providing products such as XMPP servers, clients, and libraries. The website reflects a mature business with a domain registered since 2007 and a consistent brand presence. Technically, the site is built with modern frameworks like React and Gatsby, hosted via Amazon infrastructure, and optimized for performance and mobile devices. Security posture is adequate with HTTPS enabled and domain status protections, but lacks DNSSEC and security headers, and does not publish explicit privacy or security policies. Analytics usage is moderate, primarily via Google services, but privacy compliance is minimal. Overall, Tigase.net presents a professional and trustworthy technology business with room for improvement in privacy and security transparency.

E

Erlang Solutions

erlang-solutions.com

68

Erlang Solutions is a technology company specializing in building scalable, distributed systems using Erlang and related technologies. The company positions itself as an expert partner for ambitious enterprises seeking transformative software solutions. Their website demonstrates a mature digital presence with professional design, comprehensive content, and compliance with privacy regulations including GDPR. Technically, the site leverages WordPress CMS, modern JavaScript libraries, and analytics tools such as Google Tag Manager and Mouseflow, indicating a well-maintained infrastructure. Security posture is solid with HTTPS enforced and bot protection via Cloudflare Turnstile, though explicit security headers and incident response information are lacking. The absence of WHOIS data raises some concerns about domain registration transparency but does not detract significantly from the overall legitimacy given the professional content and external references. Strategic recommendations include enhancing security headers, publishing security policies, and providing clearer contact information to improve trust and compliance.

OpenDomain is a small US-based entity founded in 2004 that offers free use of domains they own but do not actively develop. Their business model is non-commercial, focusing on supporting open source communities by providing domain usage rights without transfer or sale. The website is built on WordPress and uses Cloudflare for DNS services. The technical infrastructure is moderate with basic mobile optimization and SEO. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. No contact information or incident response details are provided, limiting trust and compliance. Overall, the site is functional and safe but would benefit from enhanced security and compliance measures.

Leslie O'Bray's website serves as a personal academic and professional portfolio highlighting her PhD research in Machine Learning at ETH Zürich, with a focus on graph machine learning models and bioinformatics. The site also references her prior experience at Google and academic background in statistics. The website targets academics, researchers, and professionals interested in machine learning and related fields. It is a small-scale personal site without commercial business operations. Technically, the website is built using the Hugo static site generator with the Coder theme, hosted with domain registration via Squarespace Domains and DNS managed by Google Cloud DNS. The site is well-structured, mobile-optimized, and uses modern web technologies including FontAwesome icons. Performance is moderate with good SEO and accessibility basics. From a security perspective, HTTPS is enabled and domain status protections are in place. However, no advanced security headers or DNSSEC are implemented. There are no privacy or cookie policies, no contact emails or phone numbers, and no analytics or advertising scripts detected, indicating minimal data collection and tracking. The site is safe for general audiences with no adult or questionable content. Overall, the website is professional and trustworthy as an academic portfolio but lacks formal privacy and security policies. Strategic improvements could enhance compliance and security posture.

M

Michael Moor

michaelmoor.me

41

Michael Moor's personal website serves as an academic and professional platform highlighting his expertise in medical AI and machine learning. The site effectively communicates his research focus, academic appointments, and recent achievements, targeting an audience of researchers, healthcare professionals, and AI enthusiasts. The website is built on a modern static site generator (Hugo) with a clean, responsive design and integrates several well-known libraries and frameworks to enhance user experience and content presentation. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement in compliance and security best practices. Overall, the site is trustworthy, professional, and well-maintained, with minimal privacy risks due to lack of data collection mechanisms.

S

Super Dimension Fortress EU

sdf-eu.org

38

The Super Dimension Fortress EU (SDF-EU) operates as a non-profit community based in Falkenstein, Germany, offering free UNIX shell accounts and a variety of computing resources aimed at educators, students, researchers, and hobbyists. The organization is an independent subsidiary of the SDF Public Access UNIX System and focuses on providing remote computing facilities for education, cultural enrichment, and recreation. The website serves as a portal for account creation and community interaction, leveraging the DokuWiki CMS platform. From a technical perspective, the website employs standard web technologies including HTML, CSS, JavaScript, and jQuery, with DokuWiki as the content management system. The site is moderately optimized with basic mobile responsiveness and accessibility features. Performance is average, and SEO practices are minimal but present. The hosting provider is not explicitly identified beyond the registrar information. Security posture is basic; HTTPS is enabled ensuring encrypted communications, but no advanced security headers or DNSSEC are implemented. The absence of privacy and cookie policies, as well as incident response contacts, indicates compliance and security maturity gaps. No vulnerabilities or malware indicators were detected, but improvements are recommended to enhance security and privacy compliance. Overall, the website is functional and trustworthy for its niche community audience but would benefit from enhanced security measures, formalized privacy documentation, and clearer contact information to improve compliance and user trust.

P

Porkbun LLC

yesterweb.org

55

The Yesterweb is a small, community-driven initiative founded in 2021, focused on reclaiming and transforming internet culture through a progressive countercultural movement. It operates various community spaces including forums, a Mastodon server, and a webring, emphasizing social responsibility, collective well-being, and rehumanizing online social relations. The website content is rich, well-structured, and reflects a mature understanding of online community dynamics and challenges. Technically, the site is built with standard web technologies (HTML, CSS, JavaScript) without a CMS, and uses minimal external scripts, notably GoatCounter for privacy-conscious analytics. Security posture is basic with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is consistent and domain registration legitimate, matching the community's founding timeline. Overall, the site is trustworthy and professional but would benefit from improved privacy and security disclosures.

Suricrasia Online is a small, Toronto-based niche ISP with a satirical and community-driven approach, featuring anthropomorphic shark mascots and unique internet delivery concepts such as River Basin Network Architecture. The website serves as a portal for their demosene projects, online library, and social media presence. Technically, the site is a simple static HTML/CSS/JS implementation hosted on NearlyFreeSpeech.NET, with basic mobile optimization and moderate performance. Security posture is basic with HTTPS enabled but lacking security headers and formal policies. No privacy or cookie policies are present, and no contact information is provided, limiting trust and compliance. The WHOIS data shows privacy protection and a domain age inconsistent with the claimed founding date, indicating a hobbyist or satirical nature rather than a commercial ISP. Overall, the site is safe, accessible, and content-rich but lacks professional security and compliance features.

B

BNS Services LLC

as206628.net

66

EzriCloud is a small, non-profit IT and networking project operated by BNS Services LLC, focused on providing free hosting and BGP upstream services primarily to students and open-source projects. The website clearly communicates its mission and key services, positioning itself as a niche provider in the technology sector with a strong community and educational focus. The business model is centered on open peering and free transit, supported by partnerships with established colocation and transit providers. Technically, the website is built with clean HTML and CSS, leveraging the Pure CSS framework for responsive design, resulting in good performance and user experience across devices. However, the site lacks advanced technical frameworks or CMS platforms, reflecting a lightweight and straightforward infrastructure. Security posture is moderate; while the domain is protected against unauthorized deletion and transfer, DNSSEC is not enabled and security headers are absent, which could be improved to enhance resilience. Privacy and cookie policies are missing, indicating compliance gaps, and no incident response or vulnerability disclosure mechanisms are present. Overall, the website is trustworthy and professional but would benefit from enhanced security and privacy compliance measures to align with best practices. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, adding security headers, and establishing incident response contacts to improve trust and compliance.

The website alphamethyl.barr0w.net serves as a root endpoint for a technical server community named Barrow B1 Alphamethyl Server. It provides user home directories, SSL certificate root files, and links to related technical resources. The site targets technical users and community members interested in server management and SSL certificate handling. The business model appears to be community-driven server hosting with a focus on secure communications and user access management. The website is small in scale with basic content quality and moderate branding consistency. Technically, the site uses standard HTML5 and CSS with external stylesheets and PEM-format SSL certificates. There is no detected CMS or advanced frameworks. Performance and mobile optimization are basic, with minimal SEO and accessibility features. Security practices include HTTPS enforcement and SSL key rotation announcements, but lack standard security headers and formal policies. No forms or user input fields are present, reducing attack surface but also limiting interactivity. Security posture is moderate with good SSL configuration but missing security headers and no published privacy or cookie policies. The WHOIS data is missing or indicates the domain is unregistered, which raises legitimacy concerns despite the active website and admin contact email. No advertising or analytics services are detected, and content is safe for general audiences. Overall, the site is functional for its niche technical community purpose but lacks formal business and security documentation. The domain registration inconsistency and absence of privacy compliance reduce trustworthiness. Strategic improvements in security headers, policy publication, and domain registration transparency are recommended.

P

Private by Design, LLC

synth.download

51

Synth.download is a small, private tilde/pubnix community primarily serving friends and established mutuals. Managed by the sysadmin known as ~sneexy, the site offers a mix of private and a few public services, emphasizing selective membership and manual registration processes. The website is built using the Eleventy static site generator, featuring custom CSS and JavaScript for accessibility and user interface enhancements. The technical infrastructure is modern and optimized for performance and mobile devices, with good accessibility features. Security posture is adequate with HTTPS enabled and domain protections in place, though improvements such as enabling DNSSEC and adding security headers are recommended. The site lacks formal privacy, cookie, and terms of service policies, which impacts compliance and trust. Overall, Synth.download presents a niche, well-managed private community with room for enhanced security and compliance documentation.

BunnyHearted is a small content creator focused on vtuber streaming and community engagement. The website serves as a hub for BunnyHearted's Twitch streams, social media presence, merchandise sales, and community support via Patreon and tips. The business model revolves around content creation and fan monetization through merchandise and donations. The site is well-branded with consistent retro and cozy themes, targeting a general audience interested in vtuber content. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, hosted by HOSTINGER operations, UAB. The site shows moderate performance and good mobile optimization. SEO is well addressed with proper meta tags and structured data. Accessibility is basic but functional. No advanced analytics or tracking services are detected. From a security perspective, the site uses HTTPS and has domain transfer protections enabled. However, it lacks DNSSEC and security headers, which are recommended for improved security posture. No privacy or cookie policies are present, indicating gaps in compliance with GDPR and other privacy regulations. No incident response or vulnerability disclosure information is provided. Overall, the website is safe, professional, and trustworthy for its niche audience but would benefit from enhanced security measures and privacy compliance to improve trust and legal standing.

The website annwfn.net serves as a personal placeholder domain primarily used by the individual Bastian Rieck for private email communication and hosting personal and friends' websites. The site content is minimal and non-commercial, focusing on providing information about the domain's purpose and links to related personal projects. The domain is well aged, registered since 2004, and the registrant information aligns with the website content, indicating a legitimate personal use case. From a technical perspective, the site uses basic HTML and CSS without advanced frameworks or CMS. Hosting and DNS are managed through Dynadot and messagingengine.com respectively, suggesting a stable but simple infrastructure. The site lacks modern security headers and does not implement DNSSEC, which could be improved. No analytics or advertising tools are detected, reflecting a privacy-conscious approach but also limiting insights into user engagement. Security posture is basic with no evident vulnerabilities or exposed sensitive data, but the absence of security headers and policies reduces the overall security maturity. Privacy compliance is minimal, with no privacy or cookie policies present, which is typical for a personal site but would be insufficient for commercial operations. Overall, the site is safe, with no adult or questionable content, and accessible without WAF or blocking mechanisms. The overall risk is low given the personal nature and limited scope of the site, but improvements in security headers, DNSSEC, and privacy disclosures would enhance trust and compliance. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, and implementing basic security headers to improve the security posture and user trust.

T

The Monero Project

getmonero.org

63

The Monero Project operates a comprehensive website dedicated to the promotion and support of Monero, a privacy-focused decentralized cryptocurrency. The site offers extensive educational resources, wallet downloads, community engagement platforms, and a transparent vulnerability disclosure process. The project is well-positioned in the cryptocurrency market as a leading privacy coin with a strong global community and active research lab. Technically, the website is built with standard web technologies, is mobile-optimized, and provides a good user experience with clear navigation and multilingual support. Security posture is strong with HTTPS enforced and an onion service for Tor users, though some security headers and cookie consent mechanisms are absent. The WHOIS data is privacy protected, which aligns with the privacy-centric nature of the project. Overall, the website is professional, trustworthy, and serves its target audience effectively.

Y

YEENTOWN

yeen.town

55

YEEN TOWN is a newly launched social platform focused on community engagement and content sharing, operating under the organization YEENTOWN based in the US. The platform uses the Misskey social software and is hosted via Cloudflare, indicating a modern web infrastructure. The website presents a niche community model with a casual and edgy branding style, targeting a general audience interested in social networking. Technical infrastructure is moderate with basic mobile optimization and performance, leveraging JavaScript and icon libraries. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to absence of privacy and cookie policies, and no explicit GDPR compliance indicators. Overall, the site is functional but would benefit from improved security and compliance documentation.

X

XMPP Standards Foundation

xmpp.org

57

The XMPP Standards Foundation operates xmpp.org as the authoritative site for the XMPP open messaging standard. The organization is a small, US-based non-profit focused on providing open specifications, software resources, and community engagement for developers and users of XMPP technology. The website reflects a mature, well-established project with a clear market position as a foundational technology standard powering messaging, IoT, WebRTC, and social applications. Technically, the site uses modern frontend frameworks like Bootstrap and FontAwesome, is mobile optimized, and served securely over HTTPS. However, it lacks some compliance elements such as privacy and cookie policies, and explicit contact information, which could be improved to enhance trust and regulatory adherence. Security posture is solid with HTTPS and domain transfer protections, but could benefit from additional security headers and published incident response details. Overall, the site is professional, trustworthy, and content-rich, serving its target audience effectively.

P

planet clue

planetclue.com

51

Planet Clue is a personal creative website representing Evan Clue, a young graphic designer, video producer, and content creator focused on niche and esoteric media from the late 1990s and early 2000s. The site serves as a portfolio and social media hub, linking to various platforms such as TikTok, YouTube, Patreon, Discord, and Bluesky. The business model appears to be centered on personal branding and content monetization via Patreon and media promotion. Technically, the website is built with basic HTML and CSS, hosted likely on AWS infrastructure given the registrar and DNS servers. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No CMS or frameworks are detected, indicating a simple static site. From a security perspective, the site uses HTTPS and has a valid domain status but lacks DNSSEC and security headers. There are no forms or data collection points, reducing attack surface, but also no privacy or cookie policies, which impacts compliance. No incident response or security policies are published, and no contact information is provided, limiting transparency. Overall, the website is safe, professional, and suitable for general audiences but would benefit from improved security practices, privacy compliance, and contact transparency to enhance trust and reduce risk.

Nekoweb.org is a niche technology platform offering free static website hosting with a strong emphasis on user freedom, ad-free experience, and community engagement. Founded in 2023 by a group of coders and artists, it targets individuals and small creators who prefer personal websites over social media. The platform supports advanced features such as FTP and Git for donators, custom domains, and API automation, positioning itself as a flexible and user-centric hosting service. The business model relies on donations and optional paid upgrades, fostering a community-driven ecosystem. Technically, Nekoweb.org utilizes modern web standards including HTML5, CSS3, and JavaScript, with Cloudflare providing DNS and registrar services. The site is mobile-optimized with good navigation and basic accessibility features. Security measures include HTTPS enforcement and Cloudflare Turnstile CAPTCHA to mitigate bot traffic, though DNSSEC is not enabled and security headers are minimal. The platform blocks generative AI crawlers to protect user content, reflecting a proactive approach to content security. From a security perspective, the site demonstrates a moderate security posture with room for improvement in DNS security and explicit security policies. Privacy compliance is basic, with a privacy policy and terms of service present but lacking cookie consent mechanisms. Contact information is clearly provided, enhancing business credibility. No adult or questionable content is detected, making the site safe for general audiences. Overall, Nekoweb.org presents a trustworthy and well-maintained service with a clear community focus. Strategic recommendations include enabling DNSSEC, enhancing security headers, publishing a security policy, and implementing cookie consent to improve compliance and security posture. These steps will strengthen user trust and align the platform with best practices in web security and privacy.

I

INARA

inara.cz

58

INARA is a specialized gaming community website established in 2015, serving as a companion resource for popular games such as Elite: Dangerous, Starfield, and Kingdom Come: Deliverance II. The site provides detailed game databases, news, and community tools aimed at gamers interested in these titles. Its market position is niche but well-defined, focusing on dedicated gaming audiences. The business model relies on community engagement, supported by donations and advertising revenue. Technically, the website employs a modern JavaScript stack including jQuery and jQuery UI, with Cloudflare DNS services and Google Tag Manager for analytics. The site shows moderate performance and good mobile optimization, though accessibility features are basic. The CMS appears custom or proprietary, with no major frameworks detected. From a security perspective, the site uses Cloudflare nameservers and anonymizes IPs in analytics, but lacks visible security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. Cookie consent mechanisms exist but lack full transparency. Overall, the security posture is moderate but could benefit from enhanced policies and headers. The overall risk is moderate with no blocking or WAF detected. Recommendations include implementing comprehensive security policies, improving cookie consent transparency, adding security headers, and publishing vulnerability disclosure information to enhance trust and compliance.

Y

Yellow Dog Man Studios s.r.o.

resonite.com

59

Resonite is a technology company operating an innovative all-in-one digital platform that combines social interaction, creative tools, and gaming experiences with strong VR support. The platform targets creative users, gamers, and developers seeking collaborative and immersive environments. Their business model is freemium with optional paid subscriptions via Patreon, offering expanded storage and exclusive features. The company is a small-sized entity based in the Czech Republic, branded consistently with a professional web presence. Technically, the website is built on Webflow CMS, leveraging modern web technologies including Google Fonts and jQuery, and is hosted via AWS Cloudfront CDN. The site demonstrates good mobile optimization and moderate performance, though accessibility and SEO optimizations are basic. No major technical issues or vulnerabilities were detected in the frontend code. From a security perspective, the site enforces HTTPS with excellent SSL configuration but lacks important security headers and formal security or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Contact information is limited to an external contact page without direct emails or phone numbers on the main site. Overall, the website is trustworthy and professionally maintained with moderate security posture and business credibility. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance the platform's trust and security maturity.

D

Domains By Proxy, LLC

plush.city

65

Plush.city is a small, community-focused Mastodon instance founded in 2017, offering decentralized social media services centered on compassion and respectful interaction. The platform leverages the open-source Mastodon software (version 4.4.2) and provides a safe space for users to engage in a harassment-free environment, supported by a detailed Code of Conduct and active moderation. The website is well-designed with good navigation and mobile optimization, reflecting a professional and trustworthy community platform. Technically, the site uses modern web technologies including React and ES modules, hosted with domain registration privacy protection and CDN support. Security posture is moderate with HTTPS enabled and domain EPP protections, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or terms of service page. Overall, Plush.city presents a credible and secure platform for decentralized social networking with room for enhancements in security and privacy transparency.