Security Directory

Box.org is a nonprofit organization specializing in secure cloud content management and file sharing services tailored for nonprofits and social impact organizations. Established in 2005, it has positioned itself as a trusted provider in the nonprofit technology sector, offering collaboration tools that emphasize security and compliance. The website reflects a mature digital presence with comprehensive privacy and cookie policies, and clear contact channels, reinforcing its commitment to transparency and user trust. Technically, the site employs modern web technologies including VideoJS for media playback and Adobe Target for marketing and analytics, ensuring a responsive and performant user experience across devices. Security is robust, with HTTPS enforced and multiple security headers implemented, alongside recognized certifications such as SOC 2 Type II and ISO 27001, underscoring its dedication to data protection. While WHOIS data is unavailable due to privacy protection, the overall domain and website characteristics support legitimacy. Strategic recommendations include publishing a dedicated security policy and vulnerability disclosure to further enhance trust and compliance.

A

Arsys Internet S.L.U.

servidoresdns.net

73

Arsys Internet S.L.U. is a well-established Spanish technology company founded in 1996, specializing in domain registration, web hosting, cloud computing, email services, and managed IT solutions. The company positions itself as a leading European provider with a strong focus on data sovereignty and comprehensive cloud infrastructure. Their website reflects a mature digital presence with professional design, clear navigation, and extensive service offerings targeting businesses and individuals seeking reliable internet presence solutions. Technically, the site employs modern web technologies, asynchronous loading of analytics and error tracking scripts, and is hosted likely by IONOS, indicating robust infrastructure. Security posture is strong with HTTPS enforced and secure cookie settings, though explicit security headers and incident response contacts are not publicly evident. The WHOIS data for the domain www.arsys.net is incomplete or missing, which raises some concerns about domain registration transparency but does not detract significantly from the overall legitimacy given the company's established brand and presence. Overall, Arsys demonstrates a solid business and technical foundation with room for improvement in security transparency and WHOIS data clarity.

F

Fastmail Pty Ltd

fastmail.com

71

Fastmail Pty Ltd operates a professional email and calendar hosting service focused on privacy, security, and productivity for individuals and businesses. The company positions itself as an independent alternative to major providers like Gmail and iCloud, emphasizing no ads, no data mining, and strong user control. The website is well-designed, mobile-optimized, and rich in content that clearly communicates the business value and service features. Technical infrastructure leverages modern web technologies with fast performance and good accessibility, although explicit security headers are not evident in the HTML source. The security posture is strong with HTTPS enforced, a bug bounty program, and clear incident response channels, but could be improved by publishing a security.txt file and adding more visible certifications. Privacy compliance is robust with comprehensive privacy and cookie policies and GDPR adherence. WHOIS data for the domain is unavailable from the provided raw output, which is unusual and reduces transparency, but the website content and external presence strongly indicate legitimacy. Overall, the site scores well on content quality, technical implementation, security, privacy, and business credibility, making it a trustworthy and professional service provider.

G

Greatsword

greatsword.xyz

56

Greatsword.xyz is a personal hobbyist website launched in mid-2024, focusing on pixel art, low-poly 3D modelling, music, and Free Software interests. The site also hosts an XMPP server and provides links to related projects and Free Software communities. It targets enthusiasts in these niche areas rather than commercial customers. The website is simple, built with basic HTML and CSS, and lacks advanced technical frameworks or CMS platforms. Hosting and DNS are managed via Namecheap and desec.io respectively, with no DNSSEC enabled. Security posture is minimal with no security headers detected and no privacy or cookie policies published. The domain is privacy protected, which aligns with the personal nature of the site. No contact emails or phone numbers are provided, limiting business credibility and compliance indicators. Overall, the site is functional but basic, with moderate trustworthiness given the lack of formal business information and security best practices.

F

FSKY

fsky.io

57

FSKY is a small technology collective founded in 2023, dedicated to hosting public online services and supporting open source development. Their market position is niche, focusing on privacy-conscious users and developers who value anonymity and decentralized communication. Key services include chat and VoIP platforms, collaborative coding, and private frontends for popular services like Reddit and Imgur, with strong integration into privacy networks such as Tor and Yggdrasil. The business model relies on community funding and voluntary donations, reflecting a grassroots approach rather than commercial scale operations. Technically, the website is built with standard HTML5 and CSS3, featuring a clean and consistent design optimized for mobile devices. The infrastructure leverages reputable registrars and DNS providers but lacks advanced security features such as DNSSEC and security headers. Performance is moderate with no detected analytics or advertising, aligning with the privacy-focused ethos. The absence of CMS or complex frameworks suggests a lightweight and maintainable platform. From a security perspective, the site benefits from HTTPS and domain transfer protections but misses critical enhancements like DNSSEC and published security policies. No forms or data collection mechanisms are present, reducing attack surface, but the lack of privacy and cookie policies indicates compliance gaps, especially under GDPR. The use of privacy-protected WHOIS registration is consistent with the business's privacy orientation and justified. Overall, the security posture is moderate but could be improved with better header configurations and transparency. The overall risk is low given the nature of the services and limited data collection, but strategic improvements in privacy compliance and security best practices are recommended to enhance trust and resilience. The website is professional and trustworthy within its niche but should address policy disclosures and technical security enhancements to meet broader compliance standards.

P

Private by Design, LLC

derg.rest

43

The website derg.rest is a personal site representing an aspiring master electrician named Tom Darsonian based in Michigan, USA. The site serves primarily as a personal portfolio or presence with minimal content focused on personal interests and updates. The business is small-scale and newly established, as indicated by the domain registration date in early 2024. The site lacks formal business contact information, privacy policies, and terms of service, which limits its professional and compliance posture. Technically, the site is simple, built with basic HTML and CSS, and uses Cloudflare for DNS services. There is no evidence of a CMS or advanced frameworks. Mobile optimization and accessibility are basic but functional. Performance is moderate with no visible errors or broken elements. However, security measures are minimal; no security headers or DNSSEC are enabled, and HTTPS enforcement is not confirmed from the data provided. From a security perspective, the domain registration is consistent and legitimate with appropriate domain status protections. The absence of privacy and cookie policies, contact information, and security headers reduces the overall security and privacy compliance score. No vulnerabilities or malicious content were detected. The site content is safe for general audiences with no adult or explicit material. Overall, the site scores moderately on AI evaluation, with strengths in business credibility due to consistent WHOIS data and weaknesses in privacy compliance and security posture. Strategic improvements in security headers, privacy policies, and contact information would enhance trust and compliance.

CBAX dot DEV Blog is a personal technology blog maintained by an individual enthusiast focused on topics such as homelab management, amateur radio, and retro technology. The site is currently under construction and hosts minimal content, primarily serving as a tech-focused personal space with links to a source code repository. The target audience includes technology hobbyists and enthusiasts interested in niche technical topics. The business model is informal and content-driven without commercial services or monetization evident. Technically, the website is a static HTML/CSS site with custom styling and no detected CMS or frameworks. It uses a dark/light mode color scheme and a monospace font for a clean, minimalistic design. Performance and mobile optimization are basic but functional. Security posture is minimal with no HTTPS or security headers explicitly detected in the provided data, and no privacy or cookie policies are present, indicating low compliance with privacy regulations. No contact or incident response information is provided, limiting trust and professional credibility. Overall, the site is a small-scale personal project with moderate trustworthiness but significant room for improvement in security, privacy, and professional presentation.

Cornbread2100 is a small-scale technology project website focused on providing Minecraft-related tools and utilities, including a Minecraft Server Scanner Discord bot, a Minecraft Ping API, and tools for the game n-gon. The site targets Minecraft players and developers interested in open-source gaming tools. The business model appears to be community-driven and open source, with no direct commercial offerings visible. Technically, the website is built with basic HTML, CSS, and JavaScript, with links to GitHub repositories and Discord for community engagement. The site is accessible without any WAF or security challenges, but lacks HTTPS and security headers, which reduces its security posture. No privacy or cookie policies are present, and no contact information is provided, limiting compliance and trust. WHOIS data is missing or unavailable, raising questions about domain legitimacy despite the professional content. Overall, the site is functional and relevant for its niche but requires improvements in security, compliance, and transparency to enhance trust and professionalism.

A

Home

ammar.win

55

The website ammar.win is a newly registered personal or small project site created in June 2024. It features minimal content primarily focused on visual effects using JavaScript libraries such as particles.js and typed.js. The site is hosted on Cloudflare with HTTPS enabled, indicating basic security measures. However, it lacks critical compliance elements such as privacy and cookie policies, terms of service, and contact information, which limits its business credibility and privacy compliance. The technical implementation is moderate with modern libraries but could benefit from improved accessibility and SEO optimization. Security posture is basic with no DNSSEC and missing security headers, though no vulnerabilities or malicious content were detected. Overall, the site is safe for general audiences but scores low on business credibility and privacy compliance due to missing policies and contact details.

N

N/A

112batman.com

59

112batman.com is a personal website representing an individual named Tijn. The site serves primarily as a contact and social hub, emphasizing privacy-conscious communication channels such as Matrix and PGP-encrypted email. The website provides links to various social and development platforms including GitHub, Discord, and a Forgejo Git instance. The content is straightforward, professional, and targeted at general internet users interested in contacting or following the individual. The domain is recently registered in 2023, consistent with the personal nature of the site. From a technical perspective, the website uses standard HTML5 and CSS with SVG icons for visual elements. It is hosted via Cloudflare, providing reliable infrastructure and HTTPS support. The site is moderately optimized for mobile devices and has a clean, consistent design. However, there is no evidence of advanced frameworks or CMS usage, indicating a simple static site architecture. Security posture is adequate but could be improved. HTTPS is enforced, and the domain has a clientTransferProhibited status, which helps prevent unauthorized transfers. The publication of a PGP public key is a positive security indicator. However, the absence of DNSSEC, security headers, and formal security or incident response policies limits the overall security maturity. No vulnerabilities or malicious content were detected. Overall, the website is safe, trustworthy, and serves its purpose well as a personal contact portal. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and enhancing accessibility features to improve compliance and security posture.

M

mudkip

mudkip.dev

59

mudkip.dev is a personal website and portfolio for an individual software developer and security researcher known as mudkip. The site showcases interests in programming, video games, and music, and includes links to social profiles and contact email. The business model is personal branding and knowledge sharing through blogging and project showcases. The site uses modern web technologies such as Astro framework and is designed with good navigation and mobile responsiveness. However, it lacks formal privacy, cookie, and security policies, which limits compliance maturity. Security posture is moderate with HTTPS implied but no explicit security headers or vulnerability disclosure mechanisms. Overall, the site is trustworthy for its intended purpose but would benefit from enhanced security and compliance documentation.

C

coentjeee.nl

coentjeee.nl

49

The website coentjeee.nl is a newly registered domain (December 2024) that currently serves as a parked domain with minimal content primarily focused on advertising through Google Adsense and Bodis. There is no clear business description, contact information, or services offered, indicating that the site is not actively used for commercial or informational purposes. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. Security posture is minimal with HTTPS enabled but lacking security headers and DNSSEC, and no privacy or cookie consent mechanisms are implemented. Overall, the site presents a low trust profile with limited business credibility and poor content quality.

G

Home

gemmebacon.com

60

GemmeBacon.com is a small personal website focused on technology content, specifically daily CPU posts and related topics. The site serves a general audience interested in technology and gaming, providing links to various related resources and personal content. The business model appears to be content creation and personal sharing without commercial transactions or formal business operations. The website is relatively new, founded in 2023, and hosted using Cloudflare services for DNS and CDN. Technically, the site uses basic HTML and CSS with minimal frameworks or CMS detected. It includes Cloudflare Insights for analytics but lacks advanced SEO, accessibility, or performance optimizations. Mobile optimization is basic, and the site structure is simple but navigable. Security measures include HTTPS and domain transfer protection, but DNSSEC is not enabled, and no security headers are present. From a security perspective, the site has a moderate posture with no critical vulnerabilities detected. However, the absence of privacy and cookie policies, lack of formal contact information, and missing security headers represent compliance and security gaps. The WHOIS data is consistent with the website's nature and age, registered via a reputable registrar without privacy protection, which aligns with the site's personal use. Overall, the site is safe and appropriate for general audiences but would benefit from improved privacy compliance, enhanced security headers, and more professional contact mechanisms to increase trust and security posture.

S

SCS Software s.r.o.

eurotrucksimulator2.com

69

Euro Truck Simulator 2 is a well-established truck driving simulation game developed and published by SCS Software s.r.o., a medium-sized company based in the Czech Republic. The website serves as a comprehensive portal for the game, offering information about the game features, expansions, and community engagement. The company holds a strong market position in the niche of truck simulation games, supported by licensed truck brands and a dedicated fan base. The business model revolves around game sales, expansions, and community-driven modding support. Technically, the website is built on a custom stack using standard web technologies such as HTML5, CSS3, and JavaScript, with integrations for Google Analytics, YouTube embeds, and Steam widgets. The site is hosted via GoDaddy.com, LLC, and employs HTTPS with a good SSL configuration. The site is mobile optimized and accessible, with a well-implemented cookie consent mechanism that complies with GDPR requirements. From a security perspective, the website demonstrates good practices including HTTPS enforcement and cookie consent management. However, there is room for improvement by enabling DNSSEC, adding security headers, and publishing formal security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It effectively supports the business goals of SCS Software and provides a positive user experience for its target audience.

S

Scuttlebutt

scuttlebutt.nz

54

Scuttlebutt is a small technology-focused organization providing a decentralized social networking platform aimed at empowering local communities and offering an alternative to large corporate social networks. The website serves as an informational and educational resource with links to talks, videos, and documentation. The platform is community-driven and funded via Open Collective, reflecting an open-source ethos. Technically, the website is built using the Hugo static site generator, leveraging modern web technologies such as HTML5, CSS, and JavaScript for embedding Vimeo and YouTube videos. The site is hosted under a reputable registrar with stable DNS configuration but lacks DNSSEC. Performance and mobile optimization are good, though accessibility and SEO are basic. From a security perspective, the site uses HTTPS but lacks visible security headers and DNSSEC, which are recommended for enhanced security. No forms or user input fields reduce attack surface, but the absence of privacy, cookie, and terms of service policies indicates compliance gaps. No contact or incident response information is provided, limiting transparency. Overall, the website is trustworthy and professional but would benefit from improved privacy compliance, security hardening, and clearer contact channels to enhance user trust and regulatory adherence.

Awoo Systems is a small technology company focused on delivering extremely high uptime services, emphasizing zero 9s of uptime since 2017. The website is minimalistic, providing basic information about the company and a blog subdomain. The business targets customers requiring highly reliable system availability. The domain is registered through NameCheap with privacy protection, which is common for small tech firms. Technically, the website uses basic HTML and CSS without advanced frameworks or CMS. The site lacks modern SEO and accessibility features but is functional with moderate performance. No advanced hosting or platform details are evident. Security posture is weak due to missing security headers, lack of DNSSEC, and no visible HTTPS confirmation in the data provided. Security-wise, the site does not publish privacy, cookie, or terms policies, nor does it provide incident response or vulnerability disclosure information. The domain registration is privacy protected but legitimate with no suspicious patterns. No WAF or blocking mechanisms are detected, and the content is safe for general audiences. Overall, the website scores average in content quality and technical implementation but scores low on privacy compliance and security posture. Strategic improvements in security headers, policy publication, and transparency would enhance trust and compliance.

CD-ROM Journal is a niche content website dedicated to exploring multimedia games and software from the 1990s and beyond. The site offers a collection of blog posts and articles focusing on historical aspects of CD-ROM era software and games, targeting enthusiasts and researchers interested in retro multimedia. The business model is primarily content publishing with a small scale and specialized audience. Technically, the website is built with basic HTML and CSS, hosted under a Canadian registrar, and does not utilize advanced CMS or frameworks. Mobile optimization and accessibility are basic but functional. Security posture is minimal with no evident security headers or DNSSEC enabled, and no privacy or cookie policies published, indicating room for improvement in compliance and security best practices. The domain is privacy protected but legitimate, with a registration date consistent with the site's content timeline. Overall, the site is safe for general audiences and maintains moderate trustworthiness despite lacking formal business contact information or security documentation.

V

VIKTOR THE GREAT

viktorthegreat.com

57

The website viktorthegreat.com is a personal site belonging to an individual named Viktor, showcasing his hobbies including games, art, articles, and social media presence. The site is informal, described as a work in progress, and targets a general audience interested in personal creative content. The domain is relatively new, registered in 2022, and uses privacy protection typical for personal websites. Technically, the site is basic HTML and CSS without advanced frameworks or CMS detected, hosted with DNS managed by Google Domains and registered via Squarespace Domains. Performance and mobile optimization are basic but functional. Security posture is minimal with no DNSSEC, no security headers, and no visible HTTPS enforcement details. Privacy and cookie policies are absent, and no contact or incident response information is provided, limiting compliance and trust. Overall, the site is low risk but lacks professional security and privacy practices.

G

GOOP HOUSE

goop.house

57

GOOP HOUSE is a small, niche online community of creators focused on experimental music and art. They organize creative events such as GOOP WEEK, where participants create music inspired by visual art, with proceeds benefiting charity. The website serves as a hub linking to social platforms like Discord, SoundCloud, Twitch, and Twitter to engage their community. The business model centers on community-driven creative collaboration and merchandise sales. Technically, the website is built with basic HTML, CSS, and JavaScript, hosted behind Cloudflare DNS and CDN services. The site shows moderate performance and basic mobile optimization but lacks advanced frameworks or CMS. SEO and accessibility features are minimal but functional. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site lacks important security headers and DNSSEC is not enabled. The domain uses privacy protection, which is reasonable for this type of small community. No privacy or cookie policies are present, representing compliance gaps. No contact emails or phone numbers are provided, limiting direct communication and incident response capabilities. Overall, the site is safe for general audiences, with no adult or explicit content detected. The trustworthiness is moderate given the lack of formal business information and security best practices. Strategic improvements in security headers, privacy compliance, and contact transparency would enhance trust and resilience.

Lavender Software is a small digital product studio specializing in software development projects such as theming platforms, synchronized video playback webapps, and upcoming niche applications for music marketplaces and secure communication clients. The company offers consulting, system operations, and contractual project work, targeting software users, developers, artists, and Linux users. The website is professionally designed with clear navigation and good content relevance, though it lacks formal privacy and cookie policies as well as contact information. Technically, the website uses standard HTML, CSS, and JavaScript with DNS hosted by Hurricane Electric. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No CMS or frameworks are detected. Security posture is moderate with HTTPS implied but no DNSSEC or security headers implemented. No analytics or tracking scripts are present, indicating minimal user tracking. Security-wise, the domain is registered with privacy protection, which is common and justified for a small software company. The domain age aligns with the company's founding year, supporting legitimacy. However, the absence of security headers and DNSSEC reduces the security score. No incident response or vulnerability disclosure information is provided, and no contact channels for security issues are available. Overall, the website is safe with no adult or questionable content. The business credibility is moderate due to transparency in source code availability but limited contact and policy information. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and providing contact information to improve trust and compliance.

The website nikolan.xyz is a personal webpage belonging to an individual named Niko, who shares his interests and hobbies related to IT, programming, gaming, and radio. The site serves as a personal hub for sharing projects, social links, and personal interests rather than a commercial business. The content is straightforward, hobby-focused, and targets a general audience interested in technology and gaming. Technically, the site is a simple static HTML page hosted behind Cloudflare, with HTTPS enabled and minimal external dependencies. The site lacks advanced frameworks or CMS platforms and has basic mobile and accessibility features. Security-wise, the site benefits from HTTPS and Cloudflare DNS but lacks security headers and formal privacy or cookie policies, which limits its compliance posture. No contact information or business credentials are provided, consistent with a personal site. Overall, the site is safe, with no adult or explicit content detected, and no blocking or WAF challenges present.

J

joinfreedomacademy.com

joinfreedomacademy.com

36

The website ww1.joinfreedomacademy.com appears to be a parked domain with minimal content primarily consisting of advertisements served via Google Adsense and Bodis. There is no substantive business information, contact details, or services described on the site. The domain WHOIS query returned no registration data, indicating the domain is either unregistered or parked, which undermines the legitimacy of any business claims. Technically, the site uses basic HTML, CSS, and JavaScript with no advanced frameworks or CMS detected. Security posture is weak due to lack of HTTPS and absence of security headers. Privacy compliance is minimal with only basic privacy and legal pages present but no cookie consent or GDPR indicators. Overall, the site lacks professionalism and trustworthiness, posing a low risk but also offering no business value or credible presence.

The website imeesa.com appears to be a personal homepage primarily serving as a hub for social links and community participation, such as a webring. The site does not represent a formal business entity and lacks detailed business information or commercial services. The content is minimal and focused on personal contact and community connections. Technically, the site is simple, built with basic HTML and CSS, hosted via Cloudflare, and does not employ advanced frameworks or CMS platforms. Mobile optimization and accessibility are basic but functional. Security posture is moderate due to HTTPS via Cloudflare and domain transfer protection, but lacks DNSSEC and security headers. No privacy or cookie policies are present, indicating low compliance with privacy regulations. The WHOIS data shows an anomalous domain creation date in the future, which reduces trust in domain legitimacy. Overall, the site is safe for general audiences with no adult or explicit content detected.

The website sandcat.lol is a personal hobbyist site owned by an individual named Tom, who shares interests in technology, gaming, and personal computer hardware. The site serves as a personal blog and contact point primarily via Discord. The content is basic and targeted at general internet users interested in tech and gaming. The domain is newly registered in December 2024 and uses privacy protection services, which is typical for personal websites. Technically, the site uses standard HTML, CSS, and JavaScript with Cloudflare DNS but lacks advanced security headers and privacy policies. No forms or data collection mechanisms are present, and no analytics or advertising scripts are detected. The site is accessible without WAF or security challenges and contains no adult or explicit content, making it safe for general audiences.

C

Codestorm

codestorm.net

55

Codestorm is a small-scale technology-focused website established in 2023, offering cloud collaboration services via Nextcloud, audio/video conferencing through Jitsi, and resources for the Matrix community. The site appears to be personal or community-driven rather than a commercial enterprise, targeting technology enthusiasts and Matrix users. The business model revolves around providing hosted services and community resources without evident monetization or commercial partnerships. Technically, the website is simple, built with basic HTML and CSS, hosted behind Cloudflare, and lacks advanced frameworks or CMS. Performance and mobile optimization are basic but functional. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers. No privacy or cookie policies are present, indicating limited compliance with GDPR or privacy best practices. Contact information is minimal, provided only via a text file and an about page, with no explicit emails or phone numbers. No advertising or analytics tools are detected, suggesting minimal user tracking. Overall, the site is trustworthy but basic, with room for improvement in security, privacy, and professionalism.

isekai.rocks is a small niche website dedicated to fans of isekai, providing free gemini capsule hosting and a public XMPP service. The site targets a specialized audience interested in alternative internet protocols and community interaction. The business model is community-focused with manual account registration, indicating a small-scale operation without automated commercial services. The domain is newly registered in June 2024 and is managed by Private by Design, LLC, a US-based organization consistent with the website's hosting and service location. Technically, the website uses basic HTML and CSS with no detected CMS or advanced frameworks. It supports Gemini protocol content proxied via kineto and offers XMPP services. The site is hosted by Porkbun LLC and shows moderate performance and good mobile optimization. However, there is no evidence of advanced SEO or accessibility features beyond basic standards. From a security perspective, the domain has protective status flags but lacks DNSSEC and security headers. There is no published security policy or incident response contact, and no HTTPS enforcement details are visible in the HTML content. Privacy compliance is minimal, with no privacy or cookie policies found. The site does not use tracking or analytics services, which reduces privacy risks but also limits business intelligence. Overall, the website is legitimate and consistent with its stated purpose but would benefit from improved security practices, privacy compliance, and transparency to enhance trust and protect users. Strategic recommendations include enabling DNSSEC, implementing HTTPS with strong TLS, adding security headers, and publishing privacy and security policies.

The website 'Niko's Webpage' is a personal hobbyist site created by an individual named Niko, focusing on interests such as IT, coding, computing, radio, gaming, and programming projects. The site serves as a personal portfolio and social hub linking to various related hobbyist and friend sites. The domain is very new, registered in August 2024, and consistent with the personal nature of the content. The site does not represent a commercial business entity and lacks formal business information or contact details. Technically, the website is built with basic HTML and CSS, hosted behind Cloudflare DNS but without advanced security headers or CMS frameworks. The site has moderate performance and basic mobile optimization but lacks SEO and accessibility enhancements. No analytics or advertising technologies are detected, indicating minimal tracking or marketing efforts. From a security perspective, the site lacks privacy and cookie policies, security headers, and vulnerability disclosure mechanisms. The domain does not use DNSSEC, and SSL/TLS configuration details are not provided, which may indicate basic or incomplete HTTPS implementation. No forms or data collection points are present, reducing attack surface but also limiting user interaction. Overall, the website is safe for general audiences, with no adult or explicit content. The risk profile is low given the personal nature and limited functionality, but improvements in security posture and privacy compliance are recommended to enhance trust and protection.

Squarebowl.club is a small personal blog website created in late 2022, focusing on computer-related topics and personal interests such as chicken. The site is built using the Hugo static site generator and presents basic content with minimal design and navigation features. The technical infrastructure is simple, with no detected CMS beyond Hugo, and no advanced frameworks or analytics tools in use. Hosting details are not explicitly disclosed, but DNS is managed via desec.io and desec.org name servers. Security posture is minimal, with no security headers detected and DNSSEC not enabled. The domain registration is privacy protected, which is consistent with the personal nature of the site. No privacy, cookie, or terms of service policies are published, and no contact information is provided, limiting compliance and trust indicators. Overall, the site is safe with no adult or explicit content, but lacks professional security and privacy practices.

E

EasyChair

easychair.org

47

EasyChair is a well-established technology platform specializing in conference management and related services such as registration, publishing, and content dissemination tools like Smart CFP and Smart Slide. With a large user base exceeding 4 million users and over 119,000 conferences managed, it holds a strong market position in the academic and professional conference domain. The platform targets conference organizers and academic communities, offering a comprehensive suite of tools to streamline conference workflows. Technically, the website uses standard web technologies including JavaScript, CSS, and HTML5, hosted via GoDaddy with domain privacy protection. The site is well-structured, mobile-optimized, and provides a professional user experience with clear navigation and rich content. Security posture is moderate; while HTTPS is implied, no explicit security headers or incident response policies are publicly visible, and DNSSEC is not enabled. Privacy compliance is good with a clear privacy policy and terms of service, though no cookie consent mechanism is detected. Overall, the website is trustworthy and professional, with strong business credibility and minimal security concerns.

Purelymail is a small technology company founded in 2018 that provides affordable, no-frills email hosting services. Their offerings include IMAP and POP3 compatible email hosting, webmail access via Roundcube, and support for multiple domains without additional charges. Positioned as a cost-effective alternative to established providers like Protonmail and Google Workspace, Purelymail targets individuals and small to medium businesses seeking simple and inexpensive email solutions. The website content is clear, professional, and focused on the core service without extraneous features or marketing distractions. Technically, the website is hosted on Amazon AWS and uses standard web technologies including HTML5, CSS3, and JavaScript. The webmail service is powered by Roundcube. The site demonstrates moderate performance and basic mobile optimization. SEO and accessibility features are present but could be enhanced. Security practices include HTTPS and domain status protections, but lack DNSSEC and security headers, which are recommended for improved security posture. From a security perspective, Purelymail maintains a basic but functional security stance. The absence of DNSSEC and security headers, as well as no visible vulnerability disclosure or incident response contacts, indicate areas for improvement. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. No contact emails or phone numbers are provided, which may impact user trust and support accessibility. Overall, Purelymail presents a legitimate and focused business with a clear value proposition in the email hosting market. Strategic improvements in security practices, privacy compliance, and contact transparency would enhance trust and resilience. The website quality and business credibility are good, supporting a moderate risk profile with opportunities for growth and maturity.

C

Cloudflare, Inc

code.golf

54

Code Golf is an online platform dedicated to coding challenges focused on minimizing code length, appealing primarily to programmers and coding enthusiasts. The website offers a variety of coding problems categorized by themes such as sequences, mathematics, gaming, and art, fostering a niche community of developers interested in code golfing. The platform integrates community features such as Discord for advice and GitHub for source code transparency, positioning itself as a specialized educational and recreational coding site. Technically, the website employs modern web standards including HTML5, CSS3 with light and dark themes, and JavaScript ES modules. Hosting and domain registration are managed by Cloudflare, ensuring reliable performance and security infrastructure. The site is mobile-optimized and demonstrates good SEO practices with appropriate meta tags and Open Graph data. However, no CMS or major frameworks are detected, indicating a custom or lightweight implementation. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks visible security headers and does not provide privacy, cookie, or terms of service policies, which are important for compliance and user trust. No contact information or incident response channels are provided, limiting transparency. The absence of a security.txt or vulnerability disclosure policy suggests room for improvement in security communication. Overall, Code Golf presents a well-structured, content-rich platform with a strong technical foundation but requires enhancements in privacy compliance, security best practices, and user trust mechanisms to improve its security posture and regulatory adherence.

Z

ZEISS

zeiss.com.au

66

ZEISS Australia and New Zealand is a regional branch of the globally recognized ZEISS Group, specializing in optics and optoelectronics technology. The company operates multiple business units including Vision Care, Medical Technology, Industrial Quality, and Research Microscopy, serving both B2B and B2C markets. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored for a general audience interested in advanced technology solutions. The company maintains a medium-sized operation with over 250 employees in the region and a history dating back to 1961 in Australia. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and tracking tools such as Google Tag Manager and OneTrust for cookie consent, indicating a good level of digital maturity and compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding explicit security headers and publishing incident response policies. Overall, the domain and website exhibit high trustworthiness and professionalism, consistent with a reputable international technology enterprise.

I

iNPUTmice

ltt.rs

59

The website hosts an open source Android email client project named 'lttrs-android' developed by iNPUTmice. It targets users seeking a lightweight, maintainable email client supporting the modern JMAP protocol. The project is positioned as a niche offering within the open source technology sector, emphasizing minimal dependencies and maintainability. The repository is hosted on Codeberg.org, a community-driven platform, and shows active development with recent commits and multiple contributors. The business model is primarily open source with free distribution and optional paid versions via app stores.

P

ProcessOne

process-one.net

55

ProcessOne operates as a technology company specializing in scalable, powerful, and versatile multiprotocol messaging platforms. Their offerings include advanced messaging solutions and the ejabberd XMPP server, targeting businesses and developers requiring robust messaging infrastructure. The company positions itself as a proven provider powering messaging platforms supporting billions of users globally. The website content is professional and well-structured, reflecting a focused business model in software development for messaging technologies. Technically, the website is built on the Ghost CMS platform, utilizing modern web technologies such as JavaScript, Alpine.js, and CSS3. The site demonstrates good mobile optimization and SEO practices, with moderate performance. Analytics are implemented via privacy-conscious Fathom Analytics, indicating a moderate level of digital maturity and privacy awareness. However, the absence of explicit privacy and cookie policies, as well as security headers, suggests room for improvement in compliance and security hardening. From a security perspective, the site enforces HTTPS and shows no signs of exposed sensitive data or vulnerable libraries. Nonetheless, the lack of security headers, vulnerability disclosure information, and incident response contacts limits the overall security posture. Critically, the WHOIS data is unavailable or indicates the domain may not be registered, which raises significant legitimacy concerns despite the professional appearance of the website. Overall, the website presents a credible business front with solid technical implementation but suffers from critical gaps in domain registration transparency and privacy compliance. Strategic recommendations include establishing clear privacy and cookie policies, publishing security and incident response information, implementing security headers, and resolving domain registration issues to enhance trust and compliance.

M

Luna Sorcery

moonbase.lgbt

45

The website moonbase.lgbt is a personal site belonging to Luna, a software developer and reverse engineer who shares blog posts, artwork, and personal interests. The site serves as a portfolio and blog platform targeting a general audience interested in technology, demoscene art, and personal projects. The market position is niche, focusing on personal branding rather than commercial business operations. Technically, the site is hosted on DigitalOcean and uses a simple tech stack of HTML, CSS, JavaScript, and GoatCounter analytics. The site is well-structured, mobile-optimized, and performs well with fast loading times. However, it lacks advanced SEO and accessibility features and does not use a CMS or frameworks. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which reduces its security posture. No privacy or cookie policies are present, and no contact information for security incidents is provided. The use of privacy protection in WHOIS is justified given the personal nature of the site. Overall, the site is safe, trustworthy, and suitable for general audiences but could improve compliance and security practices. The overall risk is low given the non-commercial nature, but strategic improvements in security headers, privacy policies, and contact transparency are recommended to enhance trust and compliance.

S

spax.zone

spax.zone

64

The website spax.zone is a personal hobby site maintained by an individual known as Spax, also referred to as Claire and Nahua. It serves as a personal blog and social hub linking to various social media platforms and community webrings. The site content is informal and community-focused, with no commercial business model or corporate presence. The site is hosted behind Cloudflare, ensuring HTTPS and basic security protections. The technical infrastructure is simple, relying on standard HTML, CSS, and JavaScript, with no CMS detected. Security posture is adequate for a personal site, with no visible vulnerabilities or sensitive data exposure. However, the site lacks formal privacy, cookie, and terms of service policies, which impacts compliance and trust. Overall, the site is safe, with no adult or explicit content, targeting a general audience interested in personal blogs and social communities.

C

COOLSTATION

coolstation.space

48

Coolstation.space is a niche community website dedicated to the Space Station 13 gaming server and its player community. It provides access to game servers, forums, wiki documentation, and open source code repositories, fostering a retro gaming culture with active community engagement through IRC and Discord. The site targets Space Station 13 players and enthusiasts, operating as a small-scale community hub founded in 2021. Technically, the website uses a basic but functional tech stack including HTML5, Bootstrap CSS, and JavaScript. Hosting is provided via Namecheap with privacy-protected domain registration. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility and SEO features. No CMS or complex frameworks are detected. From a security perspective, the site uses HTTPS and has domain transfer protection but lacks DNSSEC and security headers such as CSP or HSTS. There are no visible privacy, cookie, or terms of service policies, and no incident response or vulnerability disclosure information is provided. Tracking is minimal, limited to a web hit counter. Overall security posture is basic with room for improvement. The website content is safe for general audiences, with no adult or explicit content detected. The site lacks formal business contact information and legal disclosures, which impacts trust and privacy compliance. The domain registration is privacy protected, which is justified for this type of community site. The overall risk is moderate, with recommendations to improve security headers, privacy policies, and contact transparency to enhance trust and compliance.

W

wow, perfect!

wowperfect.net

62

The website wowperfect.net is a personal portfolio site operated by an individual known as meadow, showcasing various programming projects including games, interactive web applications, and personal diaries. The site targets a general audience interested in creative coding and personal project sharing. It operates as a small-scale personal hobby site without commercial business operations or formal company structure. Technically, the site is built using modern web technologies such as React and Next.js, hosted on Cloudflare infrastructure, and demonstrates good performance and mobile optimization. However, accessibility and SEO optimizations are basic. Security posture is adequate with HTTPS enforced and domain transfer protection enabled, but lacks security headers and DNSSEC. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is provided, which limits compliance and trust. Overall, the site is safe, trustworthy for general audiences, and legitimate based on WHOIS data, but would benefit from improved security and compliance documentation.

B

Bambosh Internet Website

bambosh.dev

57

The website bambosh.dev serves as a personal online presence for an individual known as Bambosh, providing links to their projects, social media profiles, and a donation channel via PayPal. The site is minimalistic, primarily informational, and targets a general audience interested in the individual's work or online persona. The business model is personal branding and community engagement rather than commercial enterprise. Technically, the site is built with basic HTML and CSS, enhanced with Font Awesome icons, and hosted on GitHub Pages, indicating a lightweight and fast-loading infrastructure with good mobile optimization but limited advanced features or frameworks. Security posture is minimal; no HTTPS status was explicitly provided, no security headers or policies are present, and no forms or data collection mechanisms exist, reducing the attack surface but also limiting user interaction. Privacy and compliance measures are absent, with no privacy or cookie policies, and no contact information for incident response or data protection officers. Overall, the site is low risk but lacks professional security and compliance maturity. Strategic improvements in security headers, privacy policies, and contact transparency are recommended to enhance trust and compliance.

P

Proxy Protection LLC

elm-lang.org

55

Elm-lang.org is the official website for the Elm programming language, a functional language designed for building reliable web applications. The site offers comprehensive technical content including documentation, examples, an online playground, and community resources. The business behind the domain is privacy protected under Proxy Protection LLC, consistent with open source project practices. The website targets developers and software engineers seeking a robust and productive language for front-end development. The site is well designed, mobile optimized, and provides fast performance with clear navigation and professional content.

The Association for Computational Heresy operates the SIGBOVIK conference, an annual event celebrating humorous and eclectic computational research inspired by Harry Quechua Bovik. The website serves as a hub for conference proceedings, announcements, and livestreams, targeting academics and enthusiasts in computational humor and parody research. The business model is non-commercial, relying on community participation and optional sales of bound volumes through Lulu.com. Technically, the site uses basic HTML, CSS, and JavaScript with Google Analytics and Tag Manager for tracking. Hosting appears to be affiliated with Carnegie Mellon University, indicated by the nameservers. Security posture is modest, with no DNSSEC, no visible security headers, and no published security or privacy policies. The domain is privacy protected but longstanding and consistent with the conference's history. Overall, the site is functional and trustworthy but lacks modern security and privacy best practices.

The website timedout.uk is a personal site operated by an individual known as 'nex', focusing on cybersecurity interests, programming skills, and casual gaming. It serves as a personal blog and portfolio with links to various social and gaming profiles. The site does not represent a commercial business entity and lacks formal business information or contact details. Technically, the site is built with standard HTML and CSS, hosted likely on a Linux-based VPS environment with Cloudflare as the domain registrar. The site is accessible without any WAF or security challenges and uses HTTPS with DNSSEC enabled, indicating a good baseline security posture. However, the absence of privacy, cookie, or terms of service policies and lack of contact information limits its privacy compliance and business credibility. The WHOIS data shows an anomalous domain creation date set in the future, which raises questions about domain registration legitimacy but does not directly impact the site's content or security. Overall, the site is safe for general audiences and provides a moderate level of technical and security maturity.

T

tufo's site :3

tufo.dev

56

The website tufo.dev is a personal site belonging to an individual known as Tufo or Zoey. It serves as a personal blog and a space to share interests such as programming, cybersecurity, chemistry, and personal projects. The site is informal, with a focus on personal expression rather than commercial activity. The technical infrastructure is simple, using basic HTML, CSS, and JavaScript, with a self-hosted analytics script. There is no evidence of a CMS or advanced frameworks. Security posture is moderate with HTTPS implied but lacking explicit security headers and formal policies. Privacy compliance is minimal, with no privacy or cookie policies present. The site does not collect personal data via forms and has minimal user tracking. Overall, the site is safe, with no adult or explicit content detected, and no WAF or blocking mechanisms present.

S

home - sylvie.lol

sylvie.lol

57

Sylvie.lol is a personal portfolio and blog website belonging to Sylvia (aka sylvxa), a full-stack software developer and programming enthusiast. The site serves as a platform to share programming knowledge, open source projects, and personal interests such as speedrunning and cats. It targets a niche audience of developers and tech hobbyists. The website is newly created in 2024 and reflects a small-scale personal brand rather than a corporate entity. Technically, the website uses standard modern web technologies including HTML5, CSS3, and JavaScript, with Cloudflare providing DNS and likely CDN services. The site is well-structured with good mobile optimization and SEO meta tags. However, it lacks advanced frameworks or CMS platforms, indicating a lightweight and custom-built approach. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers such as Content-Security-Policy. There are no visible forms or data collection mechanisms, reducing attack surface but also limiting user interaction. Privacy and cookie policies are absent, which is a compliance gap. No incident response or vulnerability disclosure information is provided. Overall, sylvie.lol is a safe, well-maintained personal website with moderate trustworthiness. To improve, the owner should consider adding privacy and cookie policies, security headers, and contact information to enhance compliance and user trust.

L

Lonaasan

lona.moe

53

Lona.moe is a personal website belonging to Lonaasan, a 22-year-old software engineer from Germany. The site serves as a portfolio and community hub featuring programming projects, blog content, photography, and social links. It targets a general audience interested in cats, blahaj, and programming. The website is small scale, with a niche market position focused on personal branding and community engagement. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript, with Cloudflare DNS hosting. The site is mobile optimized and accessible, with good SEO practices. However, DNSSEC is not enabled, and no advanced security headers are detected. The site uses a minimal tracking script (umami) for analytics, indicating a low level of user tracking. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers. There is a potential XSS vulnerability in the citation block due to unsanitized HTML content. No privacy or cookie policies are present, which impacts compliance. The domain registration is privacy protected but consistent with the personal nature of the site. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is low given the personal and non-commercial nature of the site, but improvements in security headers, privacy policies, and content sanitization are recommended to enhance trust and compliance.

P

Private by Design, LLC

funtimes909.xyz

61

The website funtimes909.xyz is a personal site operated by Amy, an 18-year-old technology and privacy enthusiast. The site serves as a platform to share personal interests, projects, and contact information, targeting a niche audience of tech and privacy advocates. The business model is non-commercial, focusing on hobbyist and community engagement with open source and privacy tools. The domain is registered under a privacy protection service, consistent with the personal and privacy-focused nature of the site. Technically, the site is built with basic HTML and CSS, hosted behind Cloudflare DNS services, and uses HTTPS for secure communication. The site lacks advanced frameworks or CMS and has moderate performance and basic mobile optimization. SEO and accessibility features are minimal but functional. No analytics or tracking scripts are present, reflecting a strong privacy orientation. From a security perspective, the site benefits from HTTPS and domain transfer protections but lacks security headers and formal policies such as privacy or cookie policies. No vulnerability disclosure or incident response information is provided. The absence of these elements suggests room for improvement in security posture and compliance. Overall, the site is safe, trustworthy, and suitable for general audiences. The risk level is low given the personal nature and limited scope of the site. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and establishing vulnerability disclosure mechanisms to enhance trust and security maturity.

The website ees4.dev hosts a personal or community-oriented page titled 'imeesa.com' that primarily serves as a hub for social links and participation in a community webring. The site does not present any commercial business information, products, or services. The content is minimal but functional, focusing on personal contact via email and Discord, and linking to various community and personal sites. The technical infrastructure is simple, relying on static HTML and CSS without detectable CMS or advanced frameworks. The site appears moderately optimized for mobile and basic SEO but lacks advanced technical features or performance optimizations. Security posture is weak due to absence of visible HTTPS confirmation, security headers, and no privacy or cookie policies. No incident response or vulnerability disclosure information is present. Overall, the site is safe for general audiences with no adult or explicit content detected. The domain uses privacy protection for WHOIS data, which aligns with the personal nature of the site. The overall risk is low but the site would benefit from improved security and privacy compliance measures.

R

restart

restartb.xyz

58

The website restartb.xyz is a personal portfolio and project showcase site for a 17-year-old individual from the UK named restart. The site highlights interests in IT, networking, homelabbing, and Python programming, with a featured open source Discord bot project called Titanium. The site is hosted on Cloudflare Pages and uses Cloudflare Analytics, indicating a modern and performant technical infrastructure. The design is clean, mobile-optimized, and user-friendly, with clear navigation and relevant external links to social media and partner sites. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, which impacts compliance and trust. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is safe, professional, and suitable for a general audience, but could improve in privacy compliance and security best practices.

This website represents a personal portfolio and contact hub for Patrick, known as Paddyk45, a young developer from Hamburg, Germany. The site serves primarily as a showcase of his interests, projects, and social presence, targeting fellow developers and tech enthusiasts. It includes links to various social platforms and partner sites, emphasizing community and open-source engagement. The business model is personal branding and networking rather than commercial enterprise. Technically, the site is built with modern HTML and CSS, using the new.css framework and custom fonts. It includes minimal JavaScript, notably a script from rybbit.io for analytics. The site is lightweight, fast, and mobile-optimized with good accessibility. Hosting is sponsored by Brutecat, indicating a reliable infrastructure. SEO is basic but sufficient for a personal site. From a security perspective, the site lacks formal security policies, cookie consent, and privacy statements, which are common for personal sites but represent compliance gaps. The presence of a PGP key is a positive trust indicator for secure communication. No forms collect sensitive data, reducing attack surface. However, security headers are missing, and HTTPS status is unknown, suggesting room for improvement. Overall, the site is low risk, safe for general audiences, and professionally presented for its scope. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and publishing a vulnerability disclosure or security policy to enhance trust and compliance.

P

Private by Design, LLC

joinmatrix.org

57

Join Matrix is a small US-based technology company operating a federated, open-source chat platform focused on privacy, decentralization, and user control. The website presents a clear value proposition targeting users dissatisfied with centralized chat services, offering end-to-end encryption and interoperability via bridges. Technically, the site is built with Jekyll, uses HTTPS, and includes minimal tracking via GoatCounter, reflecting a moderate level of digital maturity. However, the site lacks formal privacy, cookie, and terms of service policies, and does not provide contact information or security documentation, which limits trust and compliance assurance. Security posture is basic with no DNSSEC and missing security headers, though domain registration is consistent and legitimate. Overall, the site is professional and content-rich but would benefit from enhanced security and compliance transparency.