Security Directory

C

CATRAXX

catraxx.de

38

The website catraxx.de is a personal portfolio and hobbyist site belonging to an individual frontend developer and musician known as catraxx. The site showcases personal projects, music mixes, and shares insights into the author's development journey and interests. It targets frontend developers, musicians, and members of the Fediverse community, positioning itself as a niche personal brand with a focus on technology and electronic music. The business model is non-commercial, primarily serving as a creative outlet and community engagement platform. Technically, the site is built using modern static site generation technology (11ty), with a clean HTML5 and CSS3 codebase. Hosting appears to be with a German provider (kasserver.com), and the site is optimized for fast performance and good mobile experience. SEO and accessibility are basic but adequate. No CMS or analytics tools are detected, indicating a lightweight and privacy-conscious setup. From a security perspective, the site uses HTTPS as inferred from the Open Graph URL, but no explicit security headers are detected. There are no forms or data collection points, reducing attack surface. However, the absence of privacy and cookie policies, as well as lack of verified contact information, represents compliance and trust gaps. No vulnerabilities or suspicious patterns are found, but security best practices could be improved. Overall, the site is safe, professional, and trustworthy for its intended personal and community use. The main risks relate to privacy compliance and security hardening. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and providing verified contact details to enhance credibility and compliance.

The website 'mira's site' hosted on twoneis.site is a minimal personal presence site with a friendly and informal tone. It primarily serves as a placeholder with links to social platforms such as the Fediverse and Matrix, and provides a contact email. The site lacks substantive business content, policies, or commercial services, indicating a small-scale personal or community-oriented project. The domain WHOIS data is inconsistent, showing a future creation date and a registrant organization unrelated to the website content, which raises legitimacy concerns. Technically, the site is built with basic HTML and CSS, hosted via Porkbun, LLC. There is no evidence of advanced frameworks, CMS, or analytics tools. The site appears accessible without WAF or blocking mechanisms but lacks HTTPS confirmation and security headers, which weakens its security posture. Privacy and cookie policies are absent, and no forms or data collection mechanisms are present, limiting privacy compliance. Security-wise, the absence of HTTPS and security headers, combined with suspicious WHOIS data, lowers the trustworthiness and security score. No vulnerabilities or malware indicators were detected, but the site would benefit from implementing standard security best practices and compliance policies. Overall, the site is low risk but also low maturity in business and security terms. Strategic improvements in security, privacy compliance, and domain legitimacy verification are recommended to enhance trust and professionalism.

Chloe's Website is a personal and community-focused site that provides links to a blog, gallery, donation page, and visitor information. The site also features numerous external links to related personal and community websites, many of which reflect LGBTQ+ and transgender/non-binary themes. The website appears to serve as a hub for personal expression and community engagement rather than a commercial business. Technically, the site is built with straightforward HTML and CSS, validated by W3C badges, and hosted under a domain registered with Porkbun, LLC. However, the WHOIS data shows a suspicious future creation date, which raises concerns about the accuracy or legitimacy of the domain registration information. Security posture is minimal, with no detected security headers or privacy policies, and no analytics or tracking services are present, indicating a privacy-conscious but basic security setup. Overall, the site is safe for general audiences and provides a good user experience with clear navigation and consistent branding, but lacks formal business and compliance information.

G

Gen's Website

genshibe.ca

52

Gen's Website is a personal, non-commercial site run by an individual known as Gen, who self-identifies as a catgirl. The site serves as a personal homepage with minimal content, linking to related personal and community sites such as potatoe.ca and the Catppuccin Webring. The website does not represent a formal business entity and lacks professional business information or commercial services. Technically, the site is built with basic HTML and CSS, is mobile responsive, and includes some meta tags for social media previews. However, it lacks modern security features such as HTTPS and security headers, and no privacy or cookie policies are present. The WHOIS data for the domain is missing, raising questions about domain registration legitimacy. Overall, the site is a simple personal blog with limited technical sophistication and minimal security posture.

T

The Forest

theforest.link

51

The Forest website is a small-scale creative project launched in 2021, designed to offer users an unpredictable and exploratory web experience. It encourages users to 'walk the forest' of the internet and includes a link to a tree planting initiative, reflecting a creative and environmentally conscious theme. The site is simple, with minimal content and no commercial business model or extensive services. Technically, the site uses modern HTML5 and CSS3 with custom variable fonts and is hosted on Hover.com. It is mobile-optimized and performs well with a clean, consistent design. Security posture is basic; the domain is privacy protected and has domain status flags to prevent unauthorized changes, but lacks DNSSEC and security headers. No privacy or cookie policies are present, and no contact or incident response information is provided, limiting compliance and trust signals. Overall, the site is safe, free of adult or questionable content, and accessible without WAF or blocking mechanisms.

M

Minimalism Life

minimalism.com

52

Minimalism.com is a well-established lifestyle brand focused on promoting minimalism through content, art, design, and e-commerce. Founded in 2003, it targets a general audience interested in simplifying life and sustainable design. The website offers diverse content including a journal, projects, and a shop, supported by a newsletter with over 40,000 subscribers. The brand maintains a consistent and professional online presence with active social media channels. Technically, the site uses standard web technologies with moderate performance and good mobile optimization but lacks advanced CMS or frameworks indications. Security posture is basic with HTTPS enabled but missing key security headers and DNSSEC. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism or GDPR indicators. Contact information is limited to a general email and newsletter form, with no phone or physical address provided. Overall, the site is trustworthy and professionally maintained but could improve security and privacy practices.

M

Minimalissimo

minimalissimo.com

46

Minimalissimo is an independent digital magazine and creative studio dedicated to minimal design, covering architecture, art, interiors, furniture, lighting, and product design. Established in 2009, it has a niche market position with a loyal audience of design enthusiasts and professionals. The website offers curated editorial content, a newsletter, and an online shop, supported by active social media channels. Technically, the site uses modern web technologies including Google Tag Manager and infinite scroll, hosted on Hover's infrastructure. The site is mobile optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. No direct company emails or phone numbers are published, relying on contact forms and social media for communication. Overall, the site is professional, trustworthy, and content-rich, but could improve in privacy and security transparency.

F

FormFeelingFunction®

formfeelingfunction.com

54

FormFeelingFunction® is a newly established creative lab specializing in digital and analog product design, architectural and interior design websites, and branded merchandise. Led by Carl Barenbrug and Manu Moreale, the company emphasizes simplicity, taste, and purpose, targeting creative professionals and design enthusiasts. The business operates a small-scale e-commerce platform integrated via Shopify Buy Button, offering products such as apparel, wallpapers, and desk accessories. The website reflects a consistent and professional brand identity with good design quality and user experience. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with Shopify integration for commerce. Hosting is managed via Hover, and the site uses HTTPS for secure content delivery. However, there is a lack of advanced security headers and no DNSSEC enabled, which are areas for improvement. The site is mobile optimized and performs moderately well, though accessibility and SEO optimizations are basic. From a security perspective, the site lacks published privacy and cookie policies, which impacts GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided. The domain is newly registered with Tucows Domains Inc., with protective domain status flags, indicating legitimate registration consistent with the business profile. No WAF or blocking mechanisms are detected, and content is safe for general audiences. Overall, the website scores moderately well in content quality and business credibility but requires enhancements in privacy compliance and security posture to improve trust and regulatory adherence.

B

BlueMaxima

flashpointarchive.org

55

Flashpoint Archive is a well-established non-profit community project focused on preserving web games and animations, particularly those created with Flash and other legacy web technologies. Founded in 2017 by BlueMaxima, it has grown into a significant digital preservation effort with a large collection and active community contributors. The project provides open-source software tools to facilitate access and playback of archived content, emphasizing accessibility and preservation of internet culture. Technically, the website employs standard modern web technologies including HTML5, CSS, and JavaScript, with hosting and DNS services provided by Cloudflare. The site is mobile-optimized and features good SEO practices, though accessibility features are basic. The absence of analytics and tracking scripts suggests a privacy-conscious approach. However, the site lacks some advanced security headers and DNSSEC is not enabled, indicating room for improvement in security hardening. From a security perspective, the site benefits from HTTPS and domain transfer protection, but does not publish formal security policies, incident response contacts, or vulnerability disclosure information. No privacy or cookie policies are present, which may impact compliance with GDPR and other privacy regulations. The domain registration is privacy protected, which is justified for this type of community project, though the domain age is relatively recent compared to the project's founding date. Overall, the website is trustworthy, professional, and focused on its mission of digital preservation. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, enhancing security headers and DNSSEC, and publishing security and incident response information to improve compliance and trust.

P

Puffyan - We Donut Track You

puffyan.us

71

Puffyan is a small, individual-operated website offering privacy-respecting online services such as XMPP chat, a SearX metasearch engine, and an Invidious YouTube front-end. The site emphasizes user privacy by not tracking or selling user data and provides these services free of charge, supported by donations and referral programs. The website's market position is niche, targeting privacy-conscious users seeking alternatives to mainstream services. Technically, the site uses standard web technologies (HTML5, CSS3) and hosts privacy-focused open-source services. The site is mobile-optimized with good navigation and content quality. However, there is no evidence of advanced frameworks or CMS usage. Hosting details are not explicitly disclosed, but the domain is registered via NameCheap with no privacy protection. From a security perspective, the site uses HTTPS (implied by the URL), but no DNSSEC is enabled, and no security headers are detected in the provided content. There is no published privacy or cookie policy, which is a compliance gap, especially under GDPR. Incident response contact is provided via an abuse email. No vulnerability disclosure or security.txt file is present. Overall, the security posture is moderate but could be improved with better header implementation and formal policies. The overall risk is low given the nature of the services and the absence of sensitive transactions or personal data collection. Strategic recommendations include publishing privacy and cookie policies, enabling DNSSEC, adding security headers, and establishing a vulnerability disclosure process to enhance trust and compliance.

Erista Group operates a niche technology business focused on video game preservation by providing high-bandwidth solutions and a high-performance content delivery network tailored for video game enthusiasts and archivists worldwide. The company offers specialized services such as the hShop 3DS content archive and Myrient, which preserves video game history. Founded in 2020 and registered under 1337 Services LLC in Saint Kitts and Nevis, the business maintains a small but focused market presence. Technically, the website is built with standard HTML, CSS, and JavaScript, hosted behind Cloudflare DNS and CDN services. The site demonstrates moderate performance and basic mobile optimization but lacks advanced frameworks or CMS platforms. SEO practices are adequately implemented with proper meta tags and Open Graph data, though accessibility features are basic. From a security perspective, the domain benefits from clientTransferProhibited status to prevent unauthorized transfers but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. No HTTPS or SSL configuration details were explicitly found in the provided data, and no incident response or vulnerability disclosure policies are published. Privacy and cookie policies are absent, indicating gaps in compliance and user data protection. Overall, the website is functional and professional with good content relevance and navigation clarity but requires improvements in privacy compliance, security best practices, and transparency to enhance trustworthiness and reduce risk.

Geekring.net is a niche, noncommercial hobby project launched in 2020 that hosts a curated webring of geeky, retro, and offbeat websites. It targets enthusiasts of old-school internet culture and geeks who appreciate quirky and personal websites. The site offers navigation widgets, redirect services, and an admin panel for member site management. The business model is purely community-driven without any monetization or commercial intent. Technically, the website uses simple HTML, CSS, and minimal JavaScript, with hosting and DNS services provided by CSL Computer Service Langenbach GmbH and one.com respectively. The site supports both HTTP and HTTPS, with HTTP as default to accommodate older devices. Performance and mobile optimization are basic, reflecting the retro ethos. No CMS or advanced frameworks are detected, and accessibility and SEO optimizations are minimal. From a security perspective, the site lacks DNSSEC and important security headers, and defaults to HTTP which may expose users to downgrade risks. However, it claims no logging, no cookies, and no client-side tracking, which aligns with its privacy-conscious stance. The absence of privacy and cookie policies beyond a basic statement and no incident response or security policies indicate room for improvement in compliance and security maturity. Overall, geekring.net is a trustworthy, small-scale community project with a clear noncommercial focus and minimal security risks. Strategic improvements in security headers, HTTPS enforcement, and formal privacy documentation would enhance its security posture and user trust.

The website citrons.xyz is a personal website belonging to an individual named raven, featuring journal entries, podcasts, galleries, and personal information. It serves as a personal publishing platform with a niche audience and does not represent a commercial business. The domain is privacy protected and registered since 2021, consistent with the website's personal nature. Technically, the site is built with basic HTML and CSS, hosted on Mythic Beasts servers, and shows moderate performance and basic mobile optimization. There is no evidence of CMS or advanced frameworks. Security posture is minimal with no detected security headers or HTTPS enforcement information, and no privacy or cookie policies are present. No contact or incident response information is provided, limiting transparency and trust. Overall, the site is safe for general audiences but lacks professional security and compliance features.

The website garlic.garden is a small-scale resource and service platform hosted by Allium House, operated under the organization Private by Design, LLC based in the US. The site presents minimal content with a focus on gardening-related resources but lacks detailed business model information or extensive service descriptions. The technical infrastructure is basic, utilizing Font Awesome for icons and hosted via Porkbun DNS services. There is no evidence of a CMS or advanced frameworks. Security posture is weak, with no HTTPS enforcement or security headers detected, and no privacy or cookie policies present. The WHOIS data is transparent and consistent with the website's apparent scale and purpose, with domain registration dating back to 2020. Overall, the site appears legitimate but lacks maturity in security and compliance aspects.

N

NXTSys Megatrends, Inc.

adskiyfox.com

55

The website www.adskiyfox.com presents minimal content styled as a retro BIOS system interface with no clear business description or services. The site appears to be a static page with basic HTML and JavaScript, lacking modern web features or business-related information. The domain WHOIS data is unavailable or indicates the domain is unregistered, which raises significant concerns about legitimacy. No contact details, privacy policies, or security features are present, limiting trust and compliance. The technical infrastructure is basic with no detected CMS or hosting details, and no security headers or HTTPS information were found. Overall, the site lacks professional and security maturity, posing risks for users and visitors.

P

Rose Garden

pinkro.se

41

The website pinkro.se is a personal portfolio site for Rose, an 18-year-old programmer specializing in operating system development and systems programming. The site highlights Rose's personal projects, open source contributions, and provides multiple contact methods including email, XMPP, and IRC. The content is well structured and targeted towards the programming and open source community. The site is hosted with Cloudflare DNS and uses standard web technologies such as HTML, CSS, and JavaScript without any detected CMS or heavy frameworks. From a technical perspective, the website is well implemented with good design quality, mobile optimization, and interactive UI elements. However, it lacks advanced security headers and DNSSEC, and no privacy or cookie policies are present, which impacts compliance. The WHOIS data shows an anomalous future domain creation date, which reduces trust in the domain registration data but does not reflect on the website content quality. Security posture is moderate with no visible vulnerabilities or exposed sensitive data, but improvements are recommended in DNS security, security headers, and privacy compliance. There is no evidence of tracking, advertising, or analytics services, indicating a privacy-conscious approach. Overall, the site is safe, professional, and credible as a personal portfolio, but domain registration inconsistencies and lack of compliance documentation reduce the overall trust score.

D

...that moves the sun and stars.

detondev.com

44

The website detondev.com is a minimalistic landing page with very limited content, primarily consisting of a single clickable area linking to an internal page. The site lacks any explicit business description, contact information, or policy documents, which limits its utility for visitors and reduces trustworthiness. The domain is registered with Porkbun LLC since March 2022, indicating a relatively new but legitimate registration. The technical infrastructure is basic, with no detected CMS, frameworks, or analytics tools, and no visible security headers or HTTPS status provided. The site does not employ any privacy or cookie policies, nor does it provide terms of service or incident response information. Overall, the digital maturity of the site is low, with minimal SEO and accessibility features.

P

Private by Design, LLC

witchfuneral.quest

51

The website witchfuneral.quest is a personal portfolio and blog site operated by an individual named Ada, who identifies as a nonbinary lesbian and technology enthusiast. The site serves as a personal corner of the internet to share interests in Linux, coding, art, and music, with a small audience likely composed of like-minded individuals. The business model is informal, relying on voluntary support via coff.ee, and does not represent a commercial enterprise or large-scale operation. Technically, the site is a simple static HTML page with basic CSS and JavaScript, including a last.fm integration for music display. The hosting is provided by Porkbun, a domain registrar, with no detected CMS or advanced frameworks. Performance and mobile optimization are basic, with minimal SEO and accessibility features. No security headers or HTTPS status were detected from the data provided, indicating potential security improvements. From a security perspective, the site lacks formal privacy, cookie, or terms of service policies, and no contact information for incident response or data protection officers is provided. The domain WHOIS data is privacy protected by Private by Design, LLC, which is reasonable for a personal site, but the domain creation date is suspiciously set in the future, which may be a data error. No WAF or blocking mechanisms are detected, and no adult or unsafe content is present. Overall, the site scores low to moderate on content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic improvements in HTTPS deployment, security headers, privacy policies, and contact information would enhance trust and compliance.

A

ari melody 💫

arimelody.space

59

The website arimelody.space represents a personal brand of an individual named ari melody, who is a musician, developer, streamer, and content creator. The site serves as a hub linking to various creative projects, social media platforms, and streaming channels. The business model is primarily content creation with monetization through music sales and streaming engagement. The site targets a general audience interested in music, gaming, and creative tech projects. Technically, the site uses modern web standards including HTML5, CSS3, and JavaScript ES modules, hosted with Cloudflare DNS services. The site is mobile optimized and has good SEO practices but lacks advanced security headers and privacy compliance documentation. Security posture is moderate with HTTPS enabled and domain transfer protections, but no DNSSEC or security.txt found. Overall, the site is safe, trustworthy, and professionally presented but could improve privacy and security compliance.

P

Privacy service provided by Withheld for Privacy ehf

eepy.zone

35

eepy.zone is a recently registered domain (October 2023) currently serving as a parked domain with advertising content primarily from Google Adsense and Bodis. The website lacks any clear business description, contact information, or services, indicating it is not an active commercial or organizational site. The technical infrastructure relies on basic HTML, CSS, and JavaScript with external ad scripts and DNS hosting by ParkLogic. No CMS or advanced frameworks are detected. Security posture is minimal with no DNSSEC, no visible HTTPS enforcement, and absence of security headers. Privacy compliance is limited to a basic privacy policy page without cookie consent mechanisms. Overall, the site presents low business credibility and trustworthiness due to its placeholder nature and privacy-protected WHOIS registration.

The website freakish.dev appears to be a personal or small-scale blog site with minimal content focused on a philosophical quote and links to other small personal or hobbyist domains. There is no indication of a formal business presence, and no contact or corporate information is provided. The site lacks privacy, cookie, and terms of service policies, which limits its compliance posture. Technically, the site uses basic HTML and CSS without detectable frameworks or CMS. There is no evidence of HTTPS or security headers, which negatively impacts the security posture. No analytics or advertising scripts are present, indicating minimal tracking or marketing activity. Overall, the site is simple and safe for general audiences but lacks professional and security maturity.

M

Mercury Workshop

mercurywork.shop

66

Mercury Workshop is a small, community-driven organization focused on developing free and open source software projects, primarily targeting developers and technology enthusiasts interested in ChromeOS and web technologies. The website showcases multiple public projects hosted on GitHub and provides detailed member profiles, emphasizing collaboration and open source contributions. The business model centers on community engagement and software development without commercial sales or advertising. Technically, the website uses modern web standards including HTML5, CSS3, and JavaScript modules, with some projects leveraging WebAssembly. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security posture is basic; HTTPS is implied but no explicit security headers or vulnerability disclosure policies are present. Contact information is clearly provided with dedicated emails for legal, security, and support inquiries, reflecting a responsible approach to incident response. Overall, the site is professional and trustworthy within its niche but could improve privacy compliance and security best practices.

S

Shenzhen Huaqiu Electronics Co., Ltd.

nextpcb.com

68

NextPCB, a subsidiary of Shenzhen Huaqiu Electronics Co., Ltd., is a large-scale manufacturer specializing in PCB prototype, fabrication, and assembly services. The company offers a broad range of PCB types including multilayer, HDI, rigid-flex, and metal core PCBs, supported by certifications such as ISO9001, IATF16949, and UL. Their online platform facilitates instant quoting, order tracking, and management, targeting electronics manufacturers and hardware developers globally. The website is professionally designed with comprehensive service descriptions and customer testimonials, reflecting a strong market position in the manufacturing sector. Technically, the website employs modern web technologies including jQuery, Swiper.js, and multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Yandex Metrika. It is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and secure forms, though explicit security headers are not visibly configured. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The WHOIS data is unavailable, indicating privacy protection or unregistered status, which slightly reduces trust but is common for commercial entities. Overall, the site demonstrates a mature digital presence with strong business credibility and moderate to high security standards.

A

ATLAS DATA STORAGE

atlasds.com

59

Atlas Data Storage is a small technology company specializing in end-to-end DNA data storage solutions. The website presents a focused business model targeting enterprises and organizations interested in advanced data storage technologies. The company appears to be emerging in the DNA data storage market with limited public business information and no visible parent or subsidiary companies. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and providing a moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS with HSTS, but lacks additional security headers and published security policies. The absence of privacy and cookie policies, as well as missing WHOIS registration data, reduces overall trust and compliance posture. Contact information is limited to email addresses without phone or physical address details.

G

GetTerms

getterms.io

70

GetTerms is a technology company specializing in providing data privacy compliance solutions for businesses worldwide. Established in 2015, it offers a suite of SaaS products including privacy policy generators, cookie policy generators, terms and conditions generators, and consent management platforms. The company targets businesses needing to comply with global privacy regulations such as GDPR, CCPA, CalOPPA, and others. With over 500,000 customers and strong trust indicators like high Trustpilot ratings, GetTerms holds a solid market position as a reliable compliance partner. Technically, the website is built on WordPress with modern technologies including Google Tag Manager for analytics and Cloudflare for DNS management. The site is well optimized for performance, mobile responsiveness, and accessibility. SEO practices are implemented effectively using Yoast SEO plugin. Security posture is strong with HTTPS enforced and privacy-by-design principles applied in consent management, although some security headers could be improved. From a security perspective, the site demonstrates good practices such as default denied consent in Google Consent Mode and embedding a cookie consent widget. However, there is no publicly available security policy or incident response information, and no security.txt file for vulnerability disclosures. The domain registration is privacy protected but consistent with the business profile and age, indicating legitimacy. Overall, GetTerms presents a professional, trustworthy, and technically sound online presence with a strong focus on privacy compliance. The risk level is low, but improvements in security transparency and header implementation are recommended to further enhance trust and security posture.

A

Arsys Internet S.L.U.

arsys.net

73

Arsys Internet S.L.U. is a well-established European technology company specializing in domain registration, web hosting, cloud computing, and managed IT services. Founded in 1996 and headquartered in Logroño, Spain, Arsys positions itself as a trusted provider with 25 years of experience, offering a broad portfolio of services including email hosting, SSL certificates, and ecommerce solutions. The company targets businesses and individuals seeking reliable internet presence solutions, emphasizing European data sovereignty and comprehensive cloud infrastructure. Technically, the website employs modern web technologies including JavaScript, CSS3, and HTML5, with integrations of error tracking (Sentry) and marketing analytics (Tune.js). Hosting appears to be managed by IONOS, indicating a robust infrastructure. The site is well-optimized for mobile devices and SEO, with structured data enhancing search engine understanding. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses SSL certificates, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the domain WHOIS data is unavailable or protected, which slightly reduces transparency and trustworthiness. However, the professional presentation, consistent branding, and comprehensive service offerings support a positive risk assessment. Strategic recommendations include enhancing security headers, publishing detailed security policies, and improving accessibility to further strengthen the security posture and user trust.

P

Private by Design, LLC

osp.gay

49

osp.gay is a personal website representing Woodrow Caldera, featuring personal content such as a blog, webring participation, and a guestbook. The site targets a general audience interested in community and personal expression rather than commercial services. The domain is recently registered in 2023 with privacy protection, consistent with a personal site. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript, with hosting DNS managed by Hurricane Electric. External references to Neocities and community webrings indicate a niche community focus. Security posture is limited, with no visible HTTPS or security headers in the provided data, and no privacy or cookie policies published. No contact information or incident response details are available, limiting trust and compliance. Overall, the site is safe and suitable for general audiences but lacks professional security and privacy practices.

P

Private by Design, LLC

proot.party

48

The website proot.party is a personal site belonging to an individual known as strongsand, a high school student interested in cybersecurity, furry art, and gaming. The site is currently incomplete and serves primarily as a personal expression platform with links to related community sites. The domain is newly registered in late 2024, consistent with the site's early development stage. The technical infrastructure is basic, relying on static HTML and CSS, hosted likely via Porkbun's DNS services. There is no evidence of advanced CMS or frameworks, and no analytics or tracking technologies are present. From a security perspective, the site lacks HTTPS confirmation in the provided data, security headers, privacy policies, and contact information for incident response. The domain registration is consistent and legitimate, with no privacy protection that would obscure ownership, which is appropriate for a personal site. No WAF or blocking mechanisms were detected, and the content is accessible without restrictions. The site does not contain adult or explicit content and is safe for general audiences. Overall, the site scores moderately on content and business credibility but scores low on privacy compliance and security posture due to missing policies and security controls. The site would benefit from implementing HTTPS, security headers, privacy and cookie policies, and providing contact information to improve trust and compliance.

K

Katie's Website

trinkey.com

50

The website trinkey.com is a personal homepage for an individual named Katelyn, also known as Katie or 'trinkey'. It serves primarily as a personal hub linking to friends' websites and webrings, with no commercial or business services offered. The site is simple, with basic HTML, CSS, and JavaScript, hosted via Cloudflare. The domain is newly registered in December 2024, consistent with the personal nature of the site. Technically, the site uses standard web technologies without advanced frameworks or CMS. It has basic mobile optimization and accessibility but lacks SEO and security best practices such as security headers and DNSSEC. No analytics or tracking scripts are present, indicating minimal user tracking. From a security perspective, the site is accessible without WAF or security challenges but lacks privacy and cookie policies, contact information, and incident response details. The domain registration is transparent and consistent with the website content, indicating legitimacy. However, security posture is basic and could be improved with standard headers and policies. Overall, the site poses low risk but would benefit from improved privacy compliance, security hardening, and contact transparency to enhance trust and user confidence.

P

Potatoe

potatoe.ca

61

Potatoe.ca is a personal website operated by an individual named Spike, serving as a small corner of the Internet with personal content and links to other community and personal sites. The site is simple, static, and handcrafted without JavaScript, emphasizing privacy and minimalism. The domain was registered in early 2023 and is protected by WHOIS privacy, consistent with a personal project rather than a commercial enterprise. The hosting is self-managed on a personal HP ProDesk machine, indicating a small-scale operation. Technically, the website uses basic HTML and CSS with no advanced frameworks or CMS detected. It is mobile responsive and accessible, but lacks modern security features such as DNSSEC, HTTPS confirmation, and security headers. No analytics or tracking scripts are present, which aligns with the privacy-conscious approach. The site does not provide privacy, cookie, or terms of service policies, nor does it offer contact information or incident response details. From a security perspective, the absence of HTTPS information and security headers reduces the security posture. The domain is locked against unauthorized transfers and updates, which is a positive indicator. However, the lack of formal policies and contact channels limits compliance and incident response readiness. No vulnerabilities or malicious content were detected, and the content is safe for general audiences. Overall, Potatoe.ca is a low-risk personal website with basic technical implementation and minimal security features. Strategic improvements include enabling HTTPS, adding security headers, publishing privacy and cookie policies, and providing contact information to enhance trust and compliance.

The website beepi.ng is a personal homepage operated by an individual known as 'unnick', hosted under a domain registered to Ginkoid LLC in the US. The site serves as a portfolio and hub for personal projects, creative content, and links to various social media and technical platforms. It is not a commercial business site and targets a general audience interested in programming, shaders, and creative web tools. The domain is newly registered in late 2024, consistent with the site's content and purpose. Technically, the site uses standard HTML5, CSS3, and JavaScript with Cloudflare DNS services. The site is moderately optimized for mobile and accessibility but lacks advanced frameworks or CMS. Performance is moderate with no heavy scripts or analytics detected. The site does not implement common security headers or privacy policies, indicating a basic security posture. Security-wise, the site uses HTTPS (implied by domain and external links), but no DNSSEC or security headers are enabled. There are no visible vulnerabilities or exposed sensitive data, but the absence of privacy and cookie policies and security incident contacts reduces compliance and trust. No WAF or blocking mechanisms are detected, and the site content is fully accessible. Overall, the site is a safe, personal, and creative web presence with moderate technical quality but limited security and privacy compliance. Strategic improvements in security headers, privacy policies, and contact information would enhance trust and compliance.

C

Alexia's Webplace

cyrneko.eu

49

The website 'Alexia's Webplace' serves as a personal online presence for an individual named Alexia, who is active in various online communities such as the Fediverse, Bluesky, and open source projects. The site provides contact information primarily through modern decentralized communication platforms like Signal, XMPP, and Matrix, and offers links to code repositories and a blog. The business model is personal and community-focused, relying on donations via Ko-Fi, GitHub Sponsors, and Monero wallet contributions. The website targets a general audience interested in social and open-source communities. Technically, the site is built with standard HTML5, CSS3, and JavaScript, using modern web fonts and CSS variables for styling. The site appears to be hosted under a domain registered with Porkbun LLC, a reputable registrar. The site is moderately optimized for mobile and accessibility, though no advanced frameworks or CMS are detected. Performance is moderate with no evident analytics or tracking scripts, indicating a privacy-conscious approach. From a security perspective, the site lacks explicit security headers and does not provide privacy or cookie policies, which limits compliance with GDPR and other privacy regulations. No forms collect sensitive data, reducing risk exposure. There is no vulnerability disclosure or incident response information, which could be improved to enhance transparency and trust. The domain registration data is consistent with the website content, and no suspicious patterns are detected. Overall, the website is safe, well-structured, and serves its purpose as a personal web presence. However, it would benefit from adding privacy and cookie policies, security headers, and incident response information to improve compliance and security posture.

P

Private by Design, LLC

niko.lgbt

59

The website niko.lgbt is a personal portfolio site belonging to a 19-year-old trans and enby developer from Canada. It serves as a platform to share personal information, coding and non-coding projects, and contact options. The site is simple and straightforward, targeting a general audience interested in the developer's work and identity. The domain is registered under Private by Design, LLC, a US-based privacy-focused organization, which aligns with the personal and privacy-conscious nature of the site. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript, with privacy-friendly GoatCounter analytics integrated. The site is lightweight, fast-loading, and mobile-optimized with basic accessibility and SEO features. DNS is managed via Desec.io, but DNSSEC is not enabled, representing a minor security gap. No CMS or advanced frameworks are detected, indicating a custom or static site. From a security perspective, the site benefits from domain status protections preventing unauthorized transfers or deletions. However, no security headers are detected, and there is no evidence of privacy or cookie policies, which limits compliance with GDPR and other privacy regulations. The absence of contact emails or phone numbers reduces direct communication options, though a contact page is linked. No vulnerabilities or suspicious content are identified, and the site does not contain adult or questionable material. Overall, niko.lgbt is a legitimate, small-scale personal website with a moderate security posture and limited privacy compliance. Strategic improvements in security headers, privacy documentation, and contact transparency would enhance trust and compliance.

The website megmer.net is a small, personal or community-driven site launched in August 2023. It focuses on creative content such as 'ebubbles' and 'origami', and integrates a guest message form that connects to a Matrix bridge, indicating a niche audience interested in privacy and alternative communication platforms. The site is hosted on privacy-conscious infrastructure (Njalla) and uses Umami analytics, reflecting a preference for minimal user tracking. Technically, the site employs standard HTML, CSS, and JavaScript with no major frameworks detected. The performance and mobile optimization are basic but functional. Security posture is moderate; HTTPS is used, but no DNSSEC or security headers are implemented, and no privacy or cookie policies are present, which limits compliance maturity. The site does not expose sensitive data but lacks advanced security controls. Overall, the security posture is adequate for a personal site but would require enhancements for commercial or higher-risk use cases. The domain registration is consistent with the site's nature, showing no suspicious patterns. The absence of direct contact emails or phone numbers and lack of formal policies reduce business credibility and privacy compliance scores. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies, and improving form security. These steps would enhance trust, compliance, and security posture while maintaining the site's privacy-conscious ethos.

P

Private by Design, LLC

pancakes.gay

46

The website pancakes.gay is a personal portfolio and project showcase site belonging to a 22-year-old non-binary individual from Australia. It focuses on technology interests such as Linux, programming, and Fediverse-related projects. The site is built using modern web technologies including SvelteKit and JavaScript modules, providing a good user experience with clear navigation and mobile optimization. The domain is very new, registered in November 2024, consistent with the recent content and projects presented. Security posture is moderate with domain-level protections like clientDeleteProhibited status but lacks DNSSEC and security headers. No privacy or cookie policies are present, and no direct contact emails or phone numbers are provided, limiting compliance and trust signals. Overall, the site is safe, non-commercial, and targeted at a general audience interested in technology and open source.

D

Liam's Portfolio

duckwithsunglasses.com

56

The website duckwithsunglasses.com is a personal portfolio for Liam, a multimedia designer from the UK specializing in graphic design, brand identity, and motion graphics. The site showcases his skills and work samples and includes a link to resources sold via Gumroad. The business model is freelance and resource sales, targeting potential clients and employers interested in multimedia design. The site is small scale and recently established in 2022. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, WebGL shaders, and Google Fonts. It is hosted behind Cloudflare DNS and CDN services, ensuring good SSL configuration and moderate performance. The site is mobile optimized with good design and navigation but lacks advanced accessibility features and SEO optimization. From a security perspective, the site enforces HTTPS and has domain transfer protection but lacks visible security headers and privacy or cookie policies. No contact information or incident response policies are disclosed, and no vulnerability disclosure mechanisms are present. Tracking is minimal, limited to Cloudflare Insights. Overall, the security posture is moderate but could be improved with standard security headers and compliance documentation. The overall risk is low given the nature of the site as a personal portfolio with no sensitive data collection or e-commerce. Strategic recommendations include adding privacy and cookie policies, security headers, and contact information to improve trust and compliance. Enhancing accessibility and SEO would also benefit the site's reach and professionalism.

A

Arsys Internet S.L.U.

arsys.fr

66

Arsys Internet S.L.U. is a well-established European technology company specializing in domain registration, web hosting, cloud services, and managed IT solutions. With over 25 years of experience, Arsys targets businesses and individuals primarily in France, Spain, Portugal, and English-speaking markets. Their offerings include domain sales, professional email, WordPress and ecommerce hosting, VPS and dedicated servers, and comprehensive cloud solutions with a focus on European data sovereignty. Technically, the website demonstrates a mature digital infrastructure with modern web technologies, responsive design, and integration of advanced analytics and error monitoring tools such as Sentry and Tune. The presence of structured data enhances SEO and business transparency. The hosting environment appears robust, likely leveraging their own or Ionos infrastructure, ensuring fast performance and good accessibility. From a security perspective, the site enforces HTTPS and uses secure cookie settings, with no visible vulnerabilities or exposed sensitive data. However, explicit security headers and a published security policy or incident response contacts are absent, representing areas for improvement. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR. Overall, Arsys presents a trustworthy and professional online presence with strong business credibility and technical maturity. The lack of WHOIS data due to privacy protection slightly reduces domain trust but is justified for this business type. Strategic recommendations include enhancing security header implementation, publishing a security policy, and adding vulnerability disclosure mechanisms to further strengthen security posture and customer trust.

A

Arsys Internet S.L.U.

arsys.pt

69

Arsys Internet S.L.U. is a well-established European technology company specializing in domain registration, web hosting, cloud computing, and managed IT services. Founded in 1996 and headquartered in Spain, Arsys offers a comprehensive portfolio of services targeting both individual and business customers seeking reliable internet presence solutions. The company emphasizes European data sovereignty and operates a large infrastructure with over 100,000 servers across 30 data centers. Technically, the website demonstrates modern web standards, responsive design, and good SEO practices, supported by structured data and multilingual support. Security posture is solid with HTTPS enforcement and secure cookie practices, although explicit security policies and incident response information are not publicly detailed. Overall, Arsys presents a trustworthy and professional digital presence aligned with its market position as a leading European hosting provider.

A

Arsys Internet S.L.U.

arsys.es

68

Arsys Internet S.L.U. is a well-established Spanish technology company founded in 1996, specializing in domain registration, web hosting, cloud services, and managed IT solutions. The company targets businesses and individuals seeking reliable internet presence solutions, offering a comprehensive portfolio including email hosting, SSL certificates, and online store hosting. Their market position is strong within Spain and they maintain sister sites for other language markets. Technically, the website employs modern web standards with good mobile optimization and SEO practices, hosted likely by Ionos, and uses structured data for enhanced search engine visibility. Security posture is solid with HTTPS enforced and secure cookie practices, though explicit security headers and policies are not evident in the provided data. Privacy compliance is limited by the absence of visible privacy and cookie policies in the analyzed content. Overall, the website is professional, trustworthy, and content-rich, with clear contact information and social media presence. Recommendations include publishing explicit privacy and cookie policies, adding security headers, and establishing a vulnerability disclosure process to enhance compliance and security transparency.

C

Carl Barenbrug

cmhb.de

54

Carl Barenbrug's website serves as a professional portfolio showcasing his work as a product designer and creative director. The site highlights his involvement with various creative projects and companies, including Minimalissimo and 099. The business model is centered on creative services and personal branding within the design industry. The website is well-structured with good design quality and clear navigation, targeting design professionals and enthusiasts. Technically, the site uses modern web standards with custom fonts and JavaScript, hosted on Hover's DNS infrastructure. Performance and mobile optimization are adequate, though accessibility could be improved. Security posture is moderate; domain registration protections are in place but DNSSEC is not enabled and security headers are missing. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the site is trustworthy but could benefit from enhanced security and compliance measures.

P

For Sale Page

panther.co

50

The analyzed website at panther.co currently serves as a domain for sale placeholder page, indicating that the domain is not actively used for business operations. The content is minimal, with no privacy policies, contact information, or business descriptions present. The domain was registered recently in 2025 by an individual in the US, consistent with the domain's current status. Technically, the site uses basic HTML and CSS served from spaceship-cdn.com, with no advanced frameworks or CMS detected. Security configurations are minimal, with no DNSSEC enabled and no security headers observed. There is no evidence of HTTPS enforcement or privacy compliance mechanisms. Overall, the site lacks business credibility and trust indicators, reflecting its placeholder nature.

F

FARO

faro.co

61

FARO is a retail and technology company specializing in helping international fashion brands offload obsolete inventory through stores in emerging and non-core markets. Their business model focuses on sustainability, brand protection, and supply chain optimization leveraging technology. The website presents a professional and consistent brand image with clear messaging and partner endorsements from well-known fashion brands. Technically, the site is built on Webflow, uses modern web technologies, and is optimized for performance and mobile devices. Security posture is good with HTTPS and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, FARO appears to be a legitimate and professional business with a solid digital presence.

AI Growth Labs is a newly founded technology startup focused on AI innovation to improve consumer products and services. The company is currently in stealth mode, indicating early-stage development and a focus on building AI-first solutions. The website presents a professional design with clear messaging about their mission but limited public content. Technical infrastructure includes HTTPS and Cloudflare DNS, but lacks advanced DNS security features like DNSSEC and security headers. No privacy or cookie policies are published, which is a compliance gap. Contact is limited to email addresses, with no phone or physical address provided. Overall, the digital maturity is moderate with room for improvement in security and compliance documentation.

Awoo Systems is a small technology company focused on providing highly reliable uptime services, emphasizing zero 9s uptime since 2017. The website is minimalistic, primarily serving as a digital presence with a blog and a contact email reference. The company appears to target technology customers requiring operational reliability. Technically, the website is simple, built with basic HTML and CSS, hosted via NameCheap, and lacks advanced frameworks or CMS. Performance and mobile optimization are basic, with no detected analytics or tracking tools. Security posture is limited; HTTPS is assumed but no security headers or DNSSEC are enabled. Privacy and cookie policies are absent, and contact information is minimal and obfuscated. WHOIS data shows the domain is privacy protected and moderately aged, consistent with a small tech business. Overall, the site is functional but lacks comprehensive security, privacy, and compliance features.

The website hwii.net is a personal site focused on esoteric and mystical topics, including Kabbalah and personal writings. It serves as a platform for the site owner to share blog-like content and miscellaneous writings, targeting a general audience interested in mysticism and religion. The site is small-scale and non-commercial, with a recent domain registration in 2024 consistent with the stated history of the site. Technically, the site uses basic HTML, CSS, and JavaScript with MathJax for rendering mathematical notation. It is hosted behind Cloudflare with HTTPS enabled, ensuring secure transport. However, the site lacks advanced security headers and does not implement privacy or cookie policies, which limits its compliance posture. No forms or tracking technologies are present, indicating minimal data collection and user tracking.

A

yz authenyo.x

authenyo.xyz

62

authenyo.xyz is a personal website operated by an individual named Iris, who identifies as a Brazilian DEI hire at OpenAI and a government department. The site serves as a personal blog and a hub for various self-hosted projects including Fediverse instances, a Minecraft server, and streaming services. The website is built using the Zola static site generator and hosted on a VPS provider (Netcup) with DNS managed by Cloudflare. The content is primarily personal and technical in nature, targeting general internet users interested in niche internet culture and self-hosting. Technically, the site uses modern web technologies including HTML5, CSS, JavaScript, and integrates third-party scripts for analytics from a suspicious domain. The site lacks advanced security headers and DNSSEC is not enabled, which presents moderate security risks. The website is moderately optimized for performance and mobile use but lacks comprehensive privacy and cookie policies, which impacts compliance with GDPR and other privacy regulations. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks explicit security policies and incident response information. The use of privacy protection in WHOIS is justified given the personal nature of the site, but the presence of an external tracking script from a suspicious domain is a concern. No contact information or formal business credentials are provided, limiting trust and business credibility. Overall, the website is functional and content-rich for its niche but requires improvements in security posture, privacy compliance, and transparency to enhance trustworthiness and reduce risk.

N

home // notfire.cc

notfire.cc

57

The website notfire.cc is a personal or hobbyist homepage featuring a simple layout with links to blog, services, and contact pages. It encourages visitor interaction through a guestbook and links to various other personal or community sites. The site does not present itself as a commercial business and lacks formal business information or contact details. Technically, the site is built with basic HTML, CSS, and JavaScript without advanced frameworks or CMS. The performance and mobile optimization are moderate to basic, with no advanced SEO or accessibility features detected. Security posture is minimal with no visible security headers or privacy policies, and no HTTPS confirmation in the provided data. No analytics or advertising scripts are present, indicating minimal user tracking. Overall, the site is safe for general audiences with no adult content or explicit material detected.

abtmtr.link is a small technology-focused domain managed by an individual or small entity named MeowcaTheoRange. The website serves as a hub for various community and personal projects including a CDN directory, Discord server, Minecraft server, and Nextcloud service. The site content is minimal but functional, targeting a general audience interested in these services. The domain is recently registered with privacy protection, consistent with the site's scale and nature. Technically, the site uses basic HTML and CSS with Cloudflare DNS services but lacks advanced frameworks or CMS. Performance and mobile optimization are basic, and SEO and accessibility features are minimal. No analytics or tracking technologies are detected, indicating a privacy-conscious approach. From a security perspective, the site lacks published security policies, privacy or cookie policies, and contact information for incident response. DNSSEC is not enabled, and no security headers are detected, which lowers the security posture score. However, no critical vulnerabilities or exposed sensitive data were found. The domain registration is privacy protected but legitimate, with no suspicious patterns. Overall, the site is safe and suitable for general audiences but would benefit from improved security practices, privacy compliance, and transparency to enhance trust and professionalism.

V

velzie.rip

velzie.rip

57

The website velzie.rip is a personal site belonging to an individual named velzie, who is a programmer, neovim evangelist, and open source contributor. The site serves as a portfolio and blog, showcasing software projects and interests in gaming and music. It targets a general audience interested in technology and programming, with a small-scale, hobbyist business model. The site is hosted on Cloudflare and uses modern web technologies including JavaScript ES modules and a lightweight router for enhanced user experience. The technical infrastructure is modern and performant, with good mobile optimization and SEO practices. Security posture is moderate; HTTPS is implied via Cloudflare hosting, but DNSSEC is not enabled and security headers are missing. Privacy compliance is minimal, with no privacy or cookie policies present. Contact information is limited to a single verified email address. Overall, the site is trustworthy for its purpose but lacks formal security and privacy documentation.

P

Private by Design, LLC

nyatalie.fyi

61

The website nyatalie.fyi is a personal site belonging to an individual named Natalie, who is engaged in gaming console hardmods and has interests in high-speed trains. The site serves primarily as a personal branding and community connection platform, linking to various social and federated networks. The domain is newly registered in 2025 under the company Private by Design, LLC, consistent with the site's copyright year. Technically, the site is built with basic HTML and CSS, uses HTTPS, and includes WebP images. It lacks advanced security headers and privacy-related policies, which limits its compliance posture. No forms or data collection mechanisms are present, and no analytics or tracking scripts were detected, indicating minimal user tracking. Security-wise, the site benefits from domain status protections but could improve by enabling DNSSEC and adding security headers. Overall, the site is safe, well-structured for its purpose, but lacks formal privacy and security policies.