Security Directory

Sublime HQ Pty Ltd is a small Australian technology company specializing in developing remarkable software products, notably Sublime Text and Sublime Merge, which cater primarily to software developers and technical professionals. The website presents a minimal but professional front showcasing these products with consistent branding and clear navigation. However, the lack of detailed company information, contact details, and policy documents limits the depth of user engagement and trust signals. Technically, the website uses standard HTML5 and CSS3 with external stylesheets, but lacks advanced frameworks or CMS platforms. Performance and mobile optimization are basic but functional. No analytics, tracking, or advertising scripts were detected, indicating a privacy-conscious or minimalistic approach. Security features such as HTTPS status and security headers could not be confirmed from the provided data, but no WAF or blocking mechanisms were detected. From a security and compliance perspective, the absence of WHOIS registration data is a notable concern, as it raises questions about domain legitimacy and ownership transparency. The website lacks privacy, cookie, and terms of service policies, which are critical for GDPR and other regulatory compliance. No incident response or vulnerability disclosure information is available, limiting the security posture assessment. Overall, the site appears safe with no adult or questionable content but would benefit from enhanced security and compliance measures. The overall risk assessment suggests moderate trustworthiness with room for improvement in transparency, security best practices, and compliance documentation. Strategic recommendations include implementing HTTPS with strong SSL/TLS, publishing privacy and cookie policies, adding contact and incident response information, and improving WHOIS registration visibility to enhance legitimacy and user trust.

H

HRT.COFFEE

hrt.coffee

64

HRT.COFFEE is a specialized informational website focused on providing verified supplier listings for hormone replacement therapy products such as estradiol, progesterone, and anti-androgens. The platform serves a niche audience seeking reliable pharmaceutical sources, primarily targeting individuals involved in hormone therapy. The business operates as a referral and informational service without direct sales, emphasizing supplier verification and discount information. Technically, the website is built with standard web technologies including HTML5, CSS3, and JavaScript libraries like jQuery and DataTables, hosted via Cloudflare. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security posture is moderate with domain registration protections but missing DNSSEC and security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR indicators. Contact information is limited to a contact page form, with no direct emails or phone numbers visible. Overall, the website is functional, trustworthy within its niche, but could improve in security and privacy transparency.

J

Joshua Barrett

ptnote.dev

45

PT_NOTE is a personal website and blog operated by Joshua Barrett, focusing on personal writing and project showcases. The site targets general internet users interested in personal content rather than commercial services. The website is built using the Zola static site generator, employing standard web technologies such as HTML, CSS, and JavaScript. The technical infrastructure is simple and lightweight, with moderate performance and basic mobile optimization. No advanced CMS or hosting provider details are evident. Security posture is basic; no security headers or incident response contacts are present, and privacy compliance is minimal due to the absence of privacy and cookie policies. The site uses HTTPS (assumed from domain), but no explicit security headers were detected in the HTML content. Overall, the site is safe, with no adult or questionable content detected, and minimal user tracking or advertising. The domain registration is privacy protected, which is appropriate for a personal blog. The website demonstrates moderate trustworthiness but lacks formal business or compliance documentation.

S

Sam Randa

samranda.com

53

Sam Randa's website is a personal portfolio showcasing a recent computer science graduate's skills and creative projects in web platform engineering, 2D graphics, generative art, game development, and fashion. The site targets tech enthusiasts, creative hobbyists, and niche communities interested in design and urban history. The business model is primarily personal branding and project showcasing without commercial transactions or services. Technically, the website uses standard HTML5, CSS, and JavaScript with no detected CMS or advanced frameworks. Hosting appears to be via NameCheap with basic DNS configuration but lacks DNSSEC and security headers. The site is moderately optimized for mobile and accessibility but could improve SEO and performance further. Security posture is basic with HTTPS implied but no advanced headers or policies. No privacy, cookie, or terms of service policies are present, indicating low privacy compliance. No contact information or incident response details are provided, limiting trust and professional credibility. Overall, the site is safe, professional, and consistent with a personal portfolio but lacks advanced security and compliance features. Strategic improvements in privacy policies, security headers, and contact transparency would enhance trust and compliance.

E

Home - enjarai.dev

enjarai.dev

51

The website enjarai.dev is a personal site belonging to Evelyn, a Dutch computer science student and Minecraft mod developer. The site serves as a hub for sharing personal interests, mod projects, and community links. It targets Minecraft modders and programming enthusiasts with a focus on hobbyist content and personal blogging. The business model is primarily personal branding and community engagement through mod development and content sharing. The site is small-scale and niche, with a moderate market position within the Minecraft modding community. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript, with lightweight analytics via Plausible and a tracking script from trans.fish. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. There is no detected CMS or advanced frameworks. The site is hosted on an unknown provider and does not exhibit advanced technical infrastructure. From a security perspective, the site uses HTTPS but lacks security headers and formal security policies. There are no forms or user input fields, reducing attack surface, but also no visible incident response or vulnerability disclosure mechanisms. Privacy and cookie policies are absent, indicating poor compliance with GDPR and related regulations. Tracking is minimal and transparent. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is low given the personal and non-commercial nature of the site, but improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and security culture.

Pixilic.com is a personal technical blog operated by Hunter Fuller, focusing on topics such as networking, Linux, VoIP, and home automation. The site serves a niche audience of technology enthusiasts and IT professionals, providing detailed blog posts, tutorials, and talks. The business model is content publishing without apparent commercial transactions or services. The domain has been registered since 2009, indicating a stable and long-term presence. Technically, the website is built on WordPress 6.4.5 using the JupiterX Lite theme, with jQuery and standard web technologies. The site is hosted likely via NameCheap, with HTTPS enabled and moderate performance. Mobile optimization and accessibility are basic to good, with room for improvement in SEO and security headers. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and important security headers. No privacy or cookie policies are present, which is a compliance gap. No contact or incident response information is provided, limiting trust and transparency. Overall, the site is trustworthy and safe, with good content quality but limited privacy and security compliance. Strategic improvements in privacy policies, security headers, and contact transparency would enhance the site's credibility and compliance.

P

pineconet

pineco.net

45

The website pineco.net is a personal portfolio site representing an undergraduate student named pinecone, who is pursuing an interdisciplinary degree at the University of Washington. The site serves primarily as a showcase of personal interests, projects, and social links rather than a commercial business. The content is basic and focused on personal expression with no commercial or transactional elements. The domain was registered in 2020, consistent with the stated personal timeline. Technically, the site is a simple static HTML and CSS implementation using Google Fonts. There is no evidence of advanced frameworks, CMS, or analytics tools. The site appears to be hosted via NameCheap, the registrar, with no DNSSEC enabled and no visible security headers or HTTPS status provided. Performance and mobile optimization are basic but functional. From a security perspective, the site lacks critical elements such as privacy and cookie policies, security headers, and incident response contacts. The domain registration is consistent and legitimate for a personal site, but the absence of HTTPS and security best practices lowers the security posture. No vulnerabilities or malicious content were detected. Overall, the site is low risk but also low in professionalism and security maturity. Strategic recommendations include enabling HTTPS, adding privacy and cookie policies, implementing security headers, and providing incident response information to improve trust and compliance.

V

Varun Biniwale

varun.ch

66

The website varun.ch is a personal portfolio and blog of Varun Biniwale, a software engineer and cybersecurity researcher about to start undergraduate studies at the University of Waterloo. The site highlights Varun's projects, contributions to open source, and participation in bug bounty programs, positioning him as an emerging professional in the technology and cybersecurity space. The website targets students, developers, and cybersecurity enthusiasts, serving as a platform to showcase skills and share knowledge. Technically, the website is well-implemented using modern web standards including custom web components for efficient YouTube embedding, hosted on Vercel for performance and reliability. The site is mobile optimized, accessible, and SEO friendly with proper meta tags and structured content. No CMS is detected, indicating a custom or static site approach. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks security headers and formal policies such as privacy, cookie, or vulnerability disclosure statements. No forms or data collection mechanisms are present, reducing attack surface. The WHOIS data aligns well with the website content, showing a legitimate registration without privacy protection, consistent with a personal site. Overall, the site is trustworthy and professional but would benefit from adding privacy and cookie policies to improve compliance and user trust. Implementing security headers and a vulnerability disclosure policy would further enhance its security posture.

G

Gianni's Site

giannirosato.com

58

The website giannirosato.com serves as a personal portfolio and informational hub for Gianni Rosato, a student and open-source software enthusiast specializing in digital compression algorithms. The site highlights Gianni's work on video and image compression technologies, accessible encoding tools, and public resources related to codecs such as AV1, JPEG XL, and QOI. The target audience includes students, programmers, and open-source community members interested in multimedia compression. The business model is primarily personal branding and knowledge sharing, with no commercial transactions evident. Technically, the site is built with standard HTML5, CSS3, and JavaScript, incorporating Umami Analytics for privacy-conscious visitor tracking. Hosting is managed via Packetframe, inferred from the nameservers. The site is mobile-optimized and performs well with good SEO practices, though accessibility features are basic. No CMS or major frameworks are detected, indicating a lightweight, custom-built site. From a security perspective, the site uses HTTPS and has domain registration protections such as clientDeleteProhibited and clientTransferProhibited statuses. However, DNSSEC is not enabled, and no security headers are present, which are areas for improvement. There is no privacy or cookie policy, nor a vulnerability disclosure or incident response policy published. The site does not collect data via forms, limiting exposure to input-based vulnerabilities. Overall, the website is safe, professional, and trustworthy for its intended purpose, with moderate security posture and room for enhanced privacy compliance. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and publishing a vulnerability disclosure policy to improve trust and security maturity.

J

jordane.day

jordane.day

57

jordane.day is a personal website belonging to Jordan Day, a computer science student at the University of Massachusetts Amherst. The site serves as a portfolio and blog showcasing personal interests, academic background, and upcoming internship at Amazon. It targets a general audience interested in software development, cybersecurity, and academic pursuits. The website is simple, static, and primarily informational without commercial or business operations. Technically, the site uses basic HTML and CSS with a web font loaded from a CDN. There is no evidence of a CMS or advanced frameworks. The site is mobile responsive and has clear navigation but lacks advanced SEO and accessibility features. Security posture is minimal with no detected security headers or policies, and no HTTPS status was provided. Privacy and cookie policies are absent, and no contact information is available, limiting trust and compliance. The domain uses privacy protection in WHOIS, which is typical for personal sites. Overall, the site is safe, professional, and suitable for its purpose but could improve security and privacy compliance.

env.fail is a small, US-based information security blog operated by Private by Design, LLC. The site features multiple contributors who publish content focused on web security and infosec topics. The business model centers on content publishing aimed at security professionals and enthusiasts. The website is relatively new, with domain registration in March 2024, consistent with the recent blog post dates. Technically, the website uses standard web technologies including HTML5, CSS, and JavaScript, with Cloudflare providing DNS services. The site appears to be custom-built or uses an unknown CMS. Performance and mobile optimization are moderate to good, though accessibility and SEO optimizations are basic. No advanced frameworks or analytics services are detected. From a security perspective, the site benefits from HTTPS and domain status protections but lacks DNSSEC and security headers. There are no visible vulnerabilities or exposed sensitive data. However, the absence of privacy, cookie, and terms of service policies, as well as contact information and vulnerability disclosure mechanisms, indicates room for improvement in compliance and incident response readiness. Overall, the website is professional and relevant to its niche audience but would benefit from enhanced security practices and compliance documentation to improve trust and legal standing.

M

Mike Klubnika

mikeklubnika.com

47

Mike Klubnika is an indie game developer specializing in experimental and atmospheric games with dystopian themes. The website serves as a hub for showcasing game projects, updates, logs, and community engagement primarily through Discord and Steam. The business operates on a small scale, targeting niche gamers interested in unique indie experiences. Technically, the website is built with standard web technologies (HTML, CSS, JavaScript) and hosted via NameCheap, with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS enabled but lacking security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional for its scale but would benefit from enhanced security and compliance measures.

The website crim.in is a personal portfolio and hobby site belonging to an individual named Maya (also known as Pawllie). The site showcases personal interests such as game design, programming, tech art, music, and web development. It is a work in progress with sections for projects, music, and a to-do list. The site is informal and creative, targeting general internet users interested in indie projects and personal content. Technically, the site uses standard HTML5, CSS3, and JavaScript with custom SVG graphics and animations. There is no evidence of a CMS or advanced frameworks. The site appears moderately optimized for mobile and basic accessibility but lacks advanced SEO features. Security posture is minimal with no detected HTTPS information, security headers, or privacy policies. No contact information or business credentials are provided, limiting trust and compliance. The domain is long-standing since 2002 with privacy-protected WHOIS data, consistent with the personal nature of the site. Overall, the site is safe and suitable for general audiences but lacks professional security and compliance features.

The website auberylis.moe is a personal creative homepage launched recently in December 2023. It offers artistic multimedia content with interactive visual modes designed for mature audiences, including warnings about flashing graphics and adult language. The site is built with standard web technologies such as HTML, CSS, and JavaScript, with a focus on desktop viewing and basic accessibility features. Mobile optimization is minimal and the site explicitly disallows use of its content for AI training. Security posture is weak due to lack of HTTPS information and absence of security headers or policies. No privacy, cookie, or terms of service policies are present, and no contact or business information is provided, limiting trust and compliance. The domain is privacy protected, which is justified for a personal site, and no suspicious WHOIS patterns are detected.

J

jae kaplan

jkap.io

45

The website jkap.io is a personal blog and online presence of an individual named Jae Kaplan, who is a former CEO of Posting at cohost and currently working on a chat app. The site serves as a platform for sharing blog posts, personal updates, and links to social media profiles. It targets a general audience interested in technology and personal content. The business model is primarily personal branding and content sharing with no commercial transactions evident. The domain is well aged since 2014 and uses privacy protection typical for personal sites. Technically, the site is built on Bear Blog platform with modern web technologies including htmx and lite-youtube-embed for enhanced user experience. It is hosted behind Cloudflare DNS with HTTPS enabled, ensuring good performance and mobile optimization. SEO and accessibility are basic but adequate for a personal blog. However, no advanced security headers or privacy policies are implemented. From a security perspective, the site uses HTTPS and domain status protections but lacks DNSSEC and security headers, which are recommended for improved security posture. No forms or sensitive data collection are present, reducing attack surface. Privacy compliance is low due to absence of privacy and cookie policies. No incident response or vulnerability disclosure information is provided. Overall, the site is low risk with good content quality and moderate trustworthiness. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and improving contact mechanisms to enhance trust and compliance.

The website brambleshadow4.net is a personal hobby site maintained by a software developer who shares various personal projects including music, blog posts, fonts, and coding projects. The site is explicitly described as non-professional and serves as a personal portfolio and creative outlet rather than a commercial business. The domain is registered since 2017 and is consistent with the website's stated history. The site is hosted with standard DNS services and uses basic web technologies such as HTML, CSS, and JavaScript without any major frameworks or CMS detected. From a technical perspective, the website is functional with moderate performance and basic mobile optimization. However, it lacks advanced SEO, accessibility features, and modern security headers. The domain registration includes standard protections but does not enable DNSSEC, which could be improved. No privacy, cookie, or terms of service policies are present, and no contact information or incident response details are provided, indicating low privacy compliance and limited business credibility. Security posture is basic with no detected vulnerabilities or exposed sensitive data, but the absence of security headers and policies reduces the overall security maturity. The site is accessible without WAF or security challenges and contains safe, family-friendly content. Overall, the website scores moderately due to its personal nature and limited professional or security features. Strategic recommendations include enabling DNSSEC, adding privacy and cookie policies, implementing security headers, and providing contact and incident response information to improve trust and compliance.

R

Rebane

rebane2001.com

61

Rebane2001.com is a personal website operated by an individual developer showcasing a variety of creative and technical projects including Minecraft mapart generators, Discord utilities, web applications, and Adobe After Effects plugins. The site targets a niche audience interested in gaming tools and creative software enhancements. The business model is primarily a personal portfolio and tool sharing platform without commercial transactional elements. Technically, the website is built with basic HTML and CSS, hosted under a domain registered with Porkbun LLC since 2014, indicating a stable and long-term presence. The site lacks advanced frameworks or CMS and shows moderate performance and basic mobile optimization. Security posture is minimal with no detected security headers or privacy policies, and DNSSEC is not enabled. The site uses HTTPS (assumed from domain but not explicitly confirmed in data), but no advanced security mechanisms are observed. Contact information is limited to a single company email and social media profiles, with no phone or physical address provided. Overall, the site is safe, with no adult or questionable content detected, but lacks formal privacy and security compliance documentation.

N

Nerrix Solutions

discord.id

61

Discord.id is an unofficial web service providing lookup functionality for Discord User and Bot IDs. The service is operated by Nerrix Solutions, a small technology entity based in Indonesia, with the domain registered since 2017. The website offers a free lookup tool with optional donations for an ad-free experience and vanity invite links. It clearly states it is not affiliated with Discord, Inc., targeting Discord users seeking ID information. Technically, the site uses standard web technologies (JavaScript, CSS, HTML5) and is hosted behind Cloudflare DNS, ensuring good SSL configuration and moderate performance. However, it lacks advanced security headers and DNSSEC, which are recommended for improved security. From a security perspective, the site enforces HTTPS and has domain transfer protections but does not provide privacy or cookie policies, nor contact information for incident response or security inquiries. No vulnerabilities or malicious content were detected. Overall, the site is safe for general audiences and functions as a niche lookup tool within the Discord community.

Jamie.rs is a personal website representing Jamie Hildreth, a software developer specializing in Minecraft-related software projects. The site serves as a portfolio showcasing open source projects, contact information, and community links. The business model is personal and community-focused, targeting Minecraft players, developers, and cybersecurity enthusiasts. The website is small scale and recently established in 2023, consistent with the domain registration date. Technically, the site is built with standard HTML and CSS, uses Google Fonts for typography, and integrates Cloudflare Insights for minimal analytics. The site is mobile optimized and performs well with fast loading times. However, it lacks advanced frameworks or CMS platforms, reflecting a simple but effective technical infrastructure. From a security perspective, the site uses HTTPS and includes an OpenPGP key for secure communication, which is a positive indicator. However, it lacks DNSSEC, security headers, privacy and cookie policies, and vulnerability disclosure mechanisms. These gaps suggest room for improvement in compliance and security posture. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is trustworthy and safe for general audiences, with a moderate security posture and good business credibility for a personal developer site. Strategic improvements in privacy compliance and security best practices would enhance trust and reduce risk.

O

~/*-oake

oa.ke

58

The website oa.ke is a newly registered domain (July 2024) hosting a minimalistic site that serves as a simple directory listing two user profiles with links to their respective subdomains. There is no explicit business description, contact information, or policies present on the site, indicating it is either in early development or intended for limited personal use. The technical infrastructure is basic, relying on HTML and CSS, and hosted behind Cloudflare DNS services. Security posture is minimal with HTTPS enabled but lacking DNSSEC and security headers. No analytics or advertising technologies are detected, and no privacy or cookie policies are implemented, which limits compliance and trustworthiness. Overall, the site is accessible without WAF or security challenges but offers limited content and business credibility.

J

Join the fediverse!

jointhefediverse.net

50

The website 'Join the fediverse!' serves as an educational and community gateway platform focused on the fediverse, a decentralized social media ecosystem. It provides users with information about the fediverse concept, alternatives to mainstream social media, and links to communities where users can join. The site targets general internet users interested in decentralized social media and aims to simplify adoption by offering multilingual support and theme customization. The business model is informational and community referral, with no direct commercial transactions or services offered on the site. Technically, the site is built using modern web technologies including Bootstrap 5.3.3 for responsive design, Scrollama for scroll-driven interactions, and Matomo for analytics. It is hosted on DigitalOcean with DigitalOcean nameservers. The site is mobile optimized with good SEO practices and basic accessibility features. However, no CMS or complex backend is detected, suggesting a lightweight or static site architecture. From a security perspective, the site enforces HTTPS and has domain status protections to prevent unauthorized domain transfers or deletions. However, DNSSEC is not enabled, and no security headers were detected in the provided data. There are no privacy or cookie policies present, nor any contact or incident response information, indicating compliance gaps with GDPR and best practices. The use of Matomo analytics shows a preference for privacy-respecting tracking, but no explicit consent mechanism is implemented. Overall, the website is safe, professional, and well-designed for its educational purpose but lacks formal privacy, security, and contact disclosures that would improve trust and compliance. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and providing contact and incident response information to enhance security posture and regulatory compliance.

P

Private by Design, LLC

wolfgirl.systems

46

wolfgirl.systems is a small, volunteer-run community project hosting multiple Linux systems running NixOS across global points of presence. It aims to provide a comfortable and private environment for invited friends, emphasizing a non-profit and abuse-resistant model. The website content is clear and focused on technical and community aspects without commercial intent. Technically, the site uses modern web technologies including JavaScript libraries for search and syntax highlighting, and is designed with responsive and accessible features, though some accessibility and SEO optimizations remain basic. Security posture is moderate; while the domain uses protective domain status flags and HTTPS is implied, there is no DNSSEC or security headers implemented, and no formal privacy or cookie policies are published. Incident response is partially addressed with an abuse contact email provided. Overall, the site is trustworthy for its niche audience but would benefit from enhanced security and compliance documentation.

H

Haylin Moore

haylinmoore.com

49

Haylin Moore's website serves as a personal professional portfolio and technical blog highlighting his expertise as a software and network engineer. The site features detailed descriptions of his current and past roles at reputable technology companies, alongside open source projects and technical writings. The target audience includes technology professionals and open source enthusiasts. The business model is centered on personal branding and knowledge sharing rather than commercial transactions. Technically, the website is built using modern web standards with HTML5, CSS3 (Pure.css framework), and JavaScript. It is mobile-optimized and performs well with fast loading times. The site uses HTTPS, ensuring secure connections, but lacks explicit security headers and privacy policies. No analytics or tracking scripts are present, indicating a privacy-conscious approach. From a security perspective, the site demonstrates good baseline practices such as HTTPS usage and absence of user input forms, reducing attack surface. However, it lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data is privacy protected, which is appropriate for a personal site, and no suspicious patterns were detected. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements include adding privacy and cookie policies, security headers, and contact information to enhance compliance and trust.

The website lyra.horse is a personal portfolio and blog site belonging to Lyra Rebane, focusing on creative audiovisual web experiences, infosec topics, and various digital tools. The site targets a general audience interested in technology, creative coding, and information security. The business model is primarily personal branding and content sharing, with a small-scale presence in the technology sector. The domain is registered under a privacy protection service, which is typical for personal websites and does not detract from legitimacy. Technically, the site is built with clean HTML5 and CSS3, with no detected CMS or complex frameworks. It performs well with good mobile optimization and basic accessibility features. SEO is basic but sufficient for a personal site. Hosting details are limited but the domain registrar is Porkbun, a reputable provider. No advanced analytics or tracking technologies are detected, indicating a privacy-conscious approach. From a security perspective, the site lacks several best practices such as security headers and DNSSEC, and no privacy or cookie policies are present, which impacts compliance and trust. The domain status flags clientDeleteProhibited and clientTransferProhibited add a layer of domain security. No forms or data collection mechanisms reduce attack surface but also limit user interaction. Overall, the security posture is moderate but could be improved with standard headers and policies. The overall risk is low given the personal nature and limited data collection, but improvements in privacy compliance and security hardening are recommended to enhance trust and protect visitors. The site is accessible without WAF or blocking mechanisms, allowing full content analysis.

A

Aroze <3

aroze.me

54

The website aroze.me is a personal portfolio site for a young fullstack developer named Aroze, based in London. The site highlights skills in Java, Kotlin, Python, and Minecraft plugin development, with a recent interest in web development. The business model is personal branding and showcasing development skills, targeting a general audience interested in gaming and software development. The site is small scale and founded in 2022, consistent with the domain registration date. Technically, the site is built with basic HTML and CSS, hosted behind Cloudflare DNS, but lacks advanced frameworks or CMS. Performance and mobile optimization are moderate to basic, with no detected analytics or tracking scripts. The site does not implement privacy or cookie policies, nor does it provide contact emails or phone numbers, limiting its privacy compliance and business credibility. From a security perspective, the site uses HTTPS (implied by Cloudflare DNS and typical modern hosting), but no security headers were detected in the provided data. The domain uses privacy protection for WHOIS, which is justified for a personal site. No vulnerabilities or malicious indicators were found, but the absence of security best practices and policies reduces the overall security posture. Overall, the site is safe and suitable for general audiences, with a moderate trust level. Strategic improvements include adding privacy and cookie policies, security headers, and contact information to enhance compliance and user trust.

fastdl.me is a specialized hosting service focused on providing fast downloads for Counter-Strike: Source maps, particularly catering to niche communities such as bhop, surf, kz, trikz, and xc map players. The service operates primarily as a community resource, offering curated and unfiltered map directories, submission channels, and open source repositories to maintain and expand its map archive. The website is small-scale, community-driven, and operates with a privacy-protected domain registration based in Iceland. Technically, the website employs a straightforward HTML and CSS design, leveraging Cloudflare's CDN and Workers to optimize download performance and mitigate issues related to long-running requests. The site is basic in mobile optimization and accessibility but functional for its target audience. Open source repositories on GitHub support transparency and community involvement. The site does not use a CMS and is hosted behind Cloudflare, with no explicit hosting provider disclosed. From a security perspective, the site enforces HTTPS and uses Cloudflare's infrastructure but lacks explicit security headers and formal security policies. Privacy and cookie policies are present but basic, with no consent mechanism implemented. The site logs request data for operational and security purposes with limited retention. No incident response contacts or vulnerability disclosure mechanisms are published. The site has experienced multiple server storage failures, indicating some operational risks. Overall, fastdl.me is a niche, community-focused service with moderate technical maturity and a basic security posture. It is trustworthy within its domain but could benefit from enhanced security practices, formal policies, and improved user experience. The risk level is low given the non-commercial nature and limited exposure, but operational stability and security hardening are recommended.

E

Epic Blazed, Inc.

epicblazed.com

53

Epic Blazed, Inc. is a newly established small business focused on retail and branding of cannabis-related products such as blunts, joints, and various strains. The website content is basic and primarily targets adult consumers interested in cannabis culture. The site branding includes multiple trademarks related to cannabis products, indicating a niche market positioning. Technically, the website is simple, built with basic HTML and CSS, hosted and registered via Cloudflare, but lacks modern web features such as CMS, analytics, or advanced SEO. Security posture is weak due to absence of HTTPS information, security headers, and privacy policies. No contact or compliance information is provided, limiting trust and credibility. Overall, the site is functional but minimalistic, with significant room for improvement in security, privacy, and user engagement.

S

Smokepowered

smokepowered.com

40

Smokepowered.com is a newly established website (created May 2023) focused on smoking culture, specifically blunt discussion and wrapping. The site features minimal content including a video montage and references to Valve Corporation trademarks, possibly as thematic or stylistic elements. The target audience appears to be mature users interested in cannabis and smoking culture. Technically, the site is basic with HTML and CSS, hosted with DNS servers from Hurricane Electric, but lacks modern security features such as HTTPS and security headers. No privacy or cookie policies are present, and no contact or business information is provided, limiting trust and compliance. Security posture is weak due to missing HTTPS and security best practices. Overall, the site is functional but minimal and lacks professional security and compliance measures.

S

Sublime HQ Pty Ltd

sublimetext.com

50

Sublime Text is a sophisticated text editor designed for code, markup, and prose, developed and marketed by Sublime HQ Pty Ltd, an Australian company. The website presents a professional and polished interface targeting software developers and technical users, offering products such as Sublime Text and Sublime Merge. The company positions itself as a niche player in the developer tools market with a focus on performance and user experience. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript, and supports multiple platforms including Windows, Mac, and Linux. The site is well-optimized for performance and mobile devices, with clear navigation and high-quality content. Security-wise, while the site uses HTTPS (implied by the URL), no explicit security headers were detected in the provided data, and no forms or user input fields are present, reducing attack surface. However, the absence of privacy and cookie policies and lack of WHOIS data transparency slightly reduce trust. Overall, the site is professional and trustworthy but could improve transparency and security posture.

N

nano – Text editor

nano-editor.org

55

The website nano-editor.org serves as the official homepage for the GNU nano text editor, a widely used open source terminal-based text editor. The site provides basic information about the software, including the latest version, download links, documentation, and news updates. It targets developers, system administrators, and users seeking a simple, user-friendly text editor alternative. The business model is centered on open source software distribution and community engagement, with no commercial transactions evident on the site. From a technical perspective, the website is a straightforward static HTML and CSS implementation hosted on DigitalOcean. It lacks modern web frameworks or CMS platforms and shows basic mobile optimization and accessibility features. The site does not employ analytics or tracking technologies, indicating a minimalistic approach to user data collection and privacy. Security posture is moderate but could be improved. The domain is well-established with a long registration period and clientTransferProhibited status, indicating domain ownership protection. However, the absence of DNSSEC, security headers, and explicit HTTPS enforcement reduces the overall security robustness. No privacy or cookie policies are published, which limits compliance with GDPR and other privacy regulations. Overall, the website is functional and trustworthy for its purpose but would benefit from enhanced security configurations, privacy disclosures, and modern web practices to improve user trust and compliance.

S

spooky ghost zone

spookyghost.zone

44

The website spookyghost.zone is a personal site operated by an individual named Valerie, focusing on sharing personal interests such as music and a curated list of physical albums. It is a small-scale, hobbyist site without commercial intent or business operations. The site is hosted on Hetzner servers with privacy-protected WHOIS registration, consistent with a personal project started in early 2023. Technically, the site uses basic HTML, CSS, and JavaScript with minimal external dependencies and no CMS detected. The site is accessible over HTTPS but lacks advanced security headers and formal privacy or cookie policies. No contact information or business credentials are provided, limiting trust and credibility from a business perspective. Security posture is basic but acceptable for a personal site, with recommendations to improve DNS security and add security headers. Overall, the site is safe for general audiences and contains no adult or explicit content.

The website t-ch.net is a personal hobbyist site operated by an individual named Tech, who is a former medical pathology professional and currently a mental health professional. The site primarily serves as a portfolio and informational hub for personal projects, including Java development related to Minecraft, community chatroom participation, and legal information about name changes in Ontario. The site targets developers, Minecraft enthusiasts, and individuals interested in mental health or legal name changes. It operates on a small scale without commercial business operations or formal market positioning. Technically, the site is built using the Nuxt.js framework with modern JavaScript ES modules and is hosted on Cloudflare infrastructure. The site demonstrates moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. No CMS or complex backend systems are detected. Security-wise, the site enforces HTTPS and uses Cloudflare for hosting but lacks DNSSEC and security headers, which could be improved. No privacy or cookie policies are present, and no contact information or incident response details are provided, limiting transparency and compliance. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in security headers, privacy compliance, and contact transparency. The site content is safe for general audiences with no adult or explicit material. The domain registration is consistent with the site’s nature and age, showing no suspicious patterns. The site’s AI score reflects basic content quality and technical implementation but is penalized for missing privacy and contact information. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and providing clear contact and incident response information to enhance trust and compliance.

The website wico.lol is a minimal personal or hobby site with limited content and no clear business model or commercial services. It primarily serves as a hub linking to various social media and partner sites. The domain is registered through a privacy protection service, indicating a preference for anonymity or privacy. The technical infrastructure is basic, relying on standard HTML and CSS, hosted via Hurricane Electric's DNS services. The site lacks advanced technical features, security headers, or compliance policies, reflecting a low level of digital maturity. Security posture is moderate due to HTTPS usage but lacks DNSSEC and security headers, which are recommended for improved protection. Overall, the site poses low risk but also lacks trust and compliance indicators typical of professional or commercial websites.

Z

reflection

z7.vc

52

The website at z7.vc is a minimalistic personal or community page primarily serving as a hub of links to other related sites and social contacts. It lacks clear business information, commercial services, or professional branding. The site’s content is sparse, with explicit language present, indicating a mature audience but no adult services or explicit adult content. Technically, the site uses basic HTML, CSS, and JavaScript without modern frameworks or CMS, and lacks SEO and accessibility optimizations. Security posture is weak with no detected HTTPS or security headers, and no privacy or cookie policies are present. The domain uses privacy protection in WHOIS, consistent with the non-commercial nature of the site. Overall, the site scores low on professionalism, security, and privacy compliance, reflecting a casual or hobbyist web presence rather than a business.

The website meower.moe is a minimal personal webpage representing an individual named 'sam' who identifies as a 'sleep-deprived ffxiv/deadlock/IA player'. The site contains very limited content, no business or commercial information, and no contact or policy pages. The domain is recently registered in 2023 with Porkbun as the registrar, consistent with a small personal site. Technically, the site uses basic HTML and CSS without advanced frameworks or CMS. There is no evidence of HTTPS or security headers from the provided data, indicating a low security posture. No privacy or cookie policies are present, and no contact information is provided, limiting trust and compliance. Overall, the site is safe for general audiences but lacks professionalism and business credibility.

The website marisakirisame.net is a small personal or hobby site focused on technology-related content such as sourcemod, music, and graphical buttons. It does not represent a commercial business entity and serves a niche audience interested in these topics. The site is relatively new, founded in 2022, and uses Cloudflare DNS with domain registration through NameCheap. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript without any detected CMS or frameworks. Mobile optimization and navigation are functional but minimal. Security posture is moderate with some positive indicators such as clientTransferProhibited domain status and Cloudflare DNS, but lacks advanced security headers and policies. Privacy and cookie policies are absent, which impacts compliance. Overall, the site is safe with no adult or explicit content detected.

Wito.bar is a small personal or community website centered around gaming and creative content, with a focus on social media engagement and content sharing. The site features links to multiple social platforms such as Twitter, YouTube, Twitch, Steam, and others, indicating an active online presence. The domain is relatively new, registered in early 2023, and uses privacy protection services consistent with a personal or small community site. The website design is basic with a retro aesthetic and limited mobile optimization. From a technical perspective, the site uses standard HTML and CSS with web fonts and is hosted behind Cloudflare DNS services. However, no advanced frameworks or CMS platforms are detected. Performance and accessibility are moderate to basic, with no detected analytics or advertising scripts, suggesting minimal tracking or marketing tools in use. Security posture is basic; HTTPS is implied but no security headers or DNSSEC are enabled. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is provided, limiting compliance and transparency. No forms or data collection mechanisms are found, reducing attack surface but also limiting user interaction. Overall, the site is safe for general audiences with no adult or explicit content detected. The domain registration and website content are consistent, with no suspicious indicators. Strategic improvements include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and providing contact and incident response information to enhance trust and compliance.

The website nya.rest is a personal homepage for an individual known as SweetFade, who identifies as a local internet catgirl. The site primarily serves as a social hub linking to various social media platforms including Twitter, Mastodon, Telegram, GitHub, and GitLab. The content is minimal and personal in nature, with no commercial or business services offered. The domain was registered in 2022 and uses privacy protection services, which is consistent with personal use. The website employs WebGL shaders for visual effects, indicating some technical proficiency, but lacks advanced security features and compliance documentation such as privacy or cookie policies. The site is hosted behind Cloudflare DNS but does not have DNSSEC enabled.

Utsuho Rocks is a personal and hobbyist website primarily serving as an online presence for an individual describing themselves as an 'interweb traveller and bird mom.' The site does not represent a commercial business entity and focuses on personal interests and social connectivity. It links to various social media and partner sites, indicating a community-oriented approach rather than a commercial market position. The domain is registered with privacy protection, consistent with personal use, and has been active since 2018. Technically, the website is simple and minimalist, built with basic HTML and CSS, served via a Caddy server. It avoids JavaScript entirely, which reduces complexity and potential security risks but also limits interactivity and modern web features. The site is moderately optimized for mobile and accessibility but lacks advanced SEO and performance optimizations. No CMS or advanced frameworks are detected. From a security perspective, the site benefits from minimal attack surface due to no JavaScript and no forms collecting user data. However, it lacks security headers and DNSSEC is not enabled, which are areas for improvement. The domain uses privacy protection, which is appropriate for a personal site. No privacy or cookie policies are present, indicating low compliance with GDPR or similar regulations. Overall, the website poses low risk, serving a personal audience with safe content. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and confirming HTTPS enforcement to improve security posture and compliance.

Foxwells Garden is a small, niche online community platform that brands itself as an 'online beer garden with less beer and more nerds.' It offers semi-private social spaces including chatrooms across multiple platforms (Telegram, Discord, Mumble, IRC) and gaming servers such as Minecraft. The site also hosts code repositories on GitHub and GitLab, indicating a tech-savvy user base. The business model centers on community engagement and social interaction rather than commercial services. The domain is privacy protected and registered since 2018, consistent with a small community site. Technically, the website is simple, built with basic HTML and CSS, hosted with DNS services via Cloudflare, and secured with HTTPS. The site lacks advanced frameworks or CMS and shows basic mobile optimization and accessibility. No analytics or tracking scripts are detected, indicating minimal user tracking. However, the site does not implement security headers or privacy/cookie policies, which are areas for improvement. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers. No forms or data collection mechanisms are present, reducing attack surface. The absence of privacy and cookie policies and contact information limits compliance with GDPR and general trustworthiness. No vulnerabilities or suspicious activities are detected. Overall, Foxwells Garden is a modest, community-focused site with basic technical implementation and moderate security posture. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and security. The site is safe for general mature audiences, with content related to social gaming and community chat rather than explicit or adult material.

L

LavaTech

gitdab.com

50

Gitdab is a small-scale, community-driven Git forge platform operated by LavaTech, focusing on providing free, privacy-respecting Git hosting services using the open source Forgejo platform. The website targets developers and open source enthusiasts seeking alternatives to large corporate Git hosting services. The platform emphasizes transparency and open source customizations, positioning itself as a niche player in the technology sector. Technically, the site is well-implemented with modern web standards, fast performance, and mobile optimization. It leverages Cloudflare for DNS and hosting infrastructure, ensuring reliable uptime and security. However, DNSSEC is not enabled, and security headers are absent, representing areas for improvement. The security posture is solid with HTTPS enforced and domain registration protections in place, but lacks published security policies or incident response contacts. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security transparency.

iTerm2.com is the official website for iTerm2, a macOS terminal replacement software project founded in 2011 by George Nachman. The site provides detailed information about the software, including features, documentation, downloads, and community support via a bug tracker and forum. The business model is open source with donation support, targeting macOS users who require advanced terminal capabilities. The website is technically modern, using HTML5, CSS, JavaScript, and the Foundation framework, with hosting and DNS managed by DreamHost and Cloudflare respectively. Mobile optimization and user experience are good, though accessibility and SEO are basic. Security posture is moderate; the domain is stable and legitimate but lacks DNSSEC and security headers, and no privacy or cookie policies are published. Contact information is limited to an obfuscated personal email. Overall, the site is professional and trustworthy for its niche audience but could improve compliance and security documentation.

N

Nerd Fonts

nerdfonts.com

57

Nerd Fonts is an open source project focused on aggregating, patching, and distributing developer-targeted fonts enriched with a vast collection of iconic glyphs from popular icon fonts such as Font Awesome, Octicons, and Devicons. The project targets developers and programmers who want enhanced terminal and editor fonts with rich iconography. It enjoys a strong community presence on GitHub and Gitter, with frequent updates and a comprehensive font patcher tool. Technically, the website is well-structured, mobile-optimized, and uses modern web technologies including Google Fonts and analytics tools. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks explicit security headers and formal privacy or cookie policies. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, though the active open source community and transparent project details mitigate this risk. Overall, the site is professional, trustworthy, and safe for general audiences.

P

Private by Design, LLC

maggiepi.fyi

44

The website maggiepi.fyi is a personal site belonging to an individual named Maggie, a computer science student and technology enthusiast. The site serves primarily as a personal hub linking to Maggie's blog, social media, and technical interests. It provides detailed information about Maggie's interests, current desktop setup, and favorite media, targeting a general audience interested in technology and personal content. The site is small-scale and non-commercial, with no direct business services or e-commerce functionality. Technically, the site is built with basic HTML and CSS, uses Google Fonts, and is hosted with Cloudflare DNS services. The site is mobile responsive and has a moderate performance profile. However, it lacks advanced technical frameworks, CMS, or analytics tools. SEO and accessibility are basic but adequate for a personal site. From a security perspective, the site lacks critical security headers and does not have privacy or cookie policies, which impacts compliance and trust. The WHOIS data shows a suspicious future domain creation date, which reduces trustworthiness. No forms or data collection mechanisms are present, minimizing attack surface but also limiting user engagement. Overall, the security posture is basic with room for improvement in policy transparency and technical safeguards. The overall risk is low given the non-commercial nature and safe content, but the domain registration anomaly and lack of privacy policies suggest caution. Strategic improvements in security headers, privacy compliance, and domain registration transparency are recommended to enhance trust and security posture.

P

Private by Design, LLC

basil.cafe

62

Basil's Café is a personal website and portfolio belonging to an individual developer named Basil, who identifies as a catgirl and full-stack developer. The site serves as a personal blog and project showcase, targeting web developers and tech enthusiasts. The business model is personal branding and content sharing, with a small-scale market presence. The website is hosted on Cloudflare and built using modern web technologies including Astro framework, with a focus on clean design and mobile optimization. However, it lacks formal business infrastructure such as privacy policies, contact information, and security headers. The security posture is adequate with HTTPS and domain protection statuses but could be improved by enabling DNSSEC and adding security headers. Overall, the site is safe, professional, and trustworthy for its intended personal use but lacks compliance and business credibility features typical of commercial sites.

W

Start

wamwoowam.co.uk

54

The website wamwoowam.co.uk serves as a personal portfolio and social hub for an individual named Thomas May. It showcases social media profiles, projects, and gaming interests, targeting a general audience interested in technology and personal content. The site is relatively new, founded in 2022, and hosted via Namecheap with DNSSEC enabled, indicating a basic but secure domain setup. The content is well organized with a Windows 8.1 start screen style interface, providing a unique user experience. However, the site lacks formal privacy, cookie, and terms of service policies, and does not provide direct contact information, which limits its business credibility and compliance posture.

L

Lylythii

lylythii.com

52

Lylythii.com is a personal portfolio website for a multimedia artist named Lily, showcasing her projects primarily hosted on GitHub and other personal subdomains. The site serves as a digital space for creative expression and links to various social and content platforms. The business model is individual and niche, focusing on artistic experimentation rather than commercial enterprise. Technically, the site uses basic HTML, CSS, and JavaScript with jQuery, hosted likely via NameCheap services. The site is mobile responsive at a basic level but lacks advanced SEO and accessibility features. Security posture is minimal with no detected HTTPS or security headers from the provided data, and no privacy or cookie policies are present, indicating low compliance maturity. Overall, the site is safe for general audiences but would benefit from enhanced security and compliance measures.

N

N/A

kneesox.moe

53

Kneesox.moe is a personal website operated by an individual known as Kneesox, primarily serving as a platform to share programming projects, image hosting, and personal interests. The site draws design inspiration from the videogame VA-11 HALL-A and offers tools such as a junkcode generator and a ShareX login portal. The target audience is general internet users interested in programming and niche personal content. The business model is that of a hobbyist or personal project without commercial intent or extensive market positioning. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with the use of Howler.js for audio playback. Hosting and DNS services are provided via Cloudflare and NameCheap respectively. The site demonstrates moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. No CMS or major frameworks are detected, indicating a custom-built site. From a security perspective, the site uses HTTPS but lacks important security headers such as Content-Security-Policy and HSTS. There are no privacy or cookie policies, and no vulnerability disclosure or security.txt files are present. The domain is privacy protected, which is appropriate for a personal site, and no suspicious WHOIS patterns are found. Overall security posture is moderate but could be improved with standard best practices. The overall risk is low given the non-commercial and personal nature of the site, but improvements in privacy compliance, security headers, and transparency would enhance trustworthiness and user confidence. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, enabling DNSSEC, and adding vulnerability disclosure information.

The website mihao.pl is a personal portfolio and blog site belonging to an individual named Michał (alias Mihao), focused on game development, music creation for games, and 3D modeling. The site is relatively new, created in late 2024, and serves primarily as a personal branding and creative showcase platform. It targets peers and enthusiasts in indie game development and related creative fields. The business model is non-commercial, centered on personal expression and portfolio presentation. Technically, the site is built using modern web technologies including Astro framework version 5.0.9, with standard HTML, CSS, and JavaScript. Hosting is provided by home.pl S.A., a Polish hosting provider. The site demonstrates good mobile optimization and basic accessibility but lacks advanced SEO and security headers. Performance is moderate with no evident broken elements. From a security perspective, the site lacks critical security headers and privacy compliance mechanisms such as privacy and cookie policies. There is no evidence of HTTPS enforcement or DNSSEC enabled, which are recommended for improved security posture. No incident response or vulnerability disclosure information is present. The WHOIS data is consistent and legitimate, with no privacy protection or suspicious registration patterns. Overall, the site is safe and appropriate for general audiences, with no adult or questionable content. The main risks relate to missing security and privacy best practices, which could be improved to enhance trust and compliance.

N

nax.dev home

nax.dev

60

The website nax.dev is a personal site belonging to an individual named nax, who identifies as enby and uses they/them pronouns. The site serves as a personal hub for sharing interests in software development, niche subcultures, and self-hosted services. It is not a commercial business site but rather a hobbyist's portfolio and social presence. The site uses modern web technologies including the Astro framework and ES modules, delivering a fast and mobile-optimized experience with good design and navigation. However, it lacks formal business information, privacy policies, and security headers, which limits its compliance and security posture. No forms or data collection mechanisms are present, reducing privacy risks but also limiting engagement features. Overall, the site is safe, trustworthy, and suitable for general audiences.