Security Directory

ActivityPub Rocks! is a niche, community-driven informational website dedicated to promoting and supporting the ActivityPub protocol, a W3C standard for decentralized social networking. The site offers guides, tutorials, test suites, and news updates aimed at developers, implementers, and users interested in federated social web technologies. It occupies a specialized position within the technology sector, focusing on open standards and decentralized communication. Technically, the website is built with standard HTML5 and CSS, hosting SVG images for branding. It is hosted on Linode infrastructure, as indicated by the nameservers. The site lacks a CMS and advanced frameworks, reflecting a lightweight and straightforward technical implementation. Performance and mobile optimization are basic but adequate for the informational purpose. SEO and accessibility features are minimal but present. From a security perspective, the site uses HTTPS (implied by the URL), but no advanced security headers or DNSSEC are enabled. The domain registration is consistent and legitimate, with a long registration period and clientTransferProhibited status to prevent unauthorized transfers. However, the absence of privacy and cookie policies, contact information, and security incident response details indicates gaps in compliance and user trust facilitation. Overall, the website is trustworthy and professional within its niche but would benefit from enhanced privacy compliance, security hardening, and clearer contact channels to improve user confidence and regulatory adherence.

F

Fedi.Garden

fedi.garden

57

Fedi.Garden is a small, human-curated directory website focused on listing well-run Mastodon and Fediverse servers that adhere to responsible moderation and reliability standards. It serves a niche audience of users seeking trustworthy Fediverse communities and provides categorized listings by language, topic, country, and other criteria. The website is built on WordPress using a classic theme, with basic but clear navigation and content relevant to its target audience. Technical infrastructure is standard for a small WordPress site, hosted under a reputable registrar, with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or detailed GDPR indicators. No contact emails or phone numbers are provided, but a Mastodon social link is available for communication. The site does not employ advertising or analytics tracking, reflecting a privacy-conscious approach. Overall, the site is trustworthy and safe for general audiences, with room for improvement in security hardening and privacy compliance.

P

Private by Design, LLC

thefedi.wiki

44

The Fediverse Wiki is a community-driven informational website dedicated to documenting the Fediverse and its associated services. It serves as a central knowledge repository for users interested in understanding and participating in the Fediverse ecosystem. The site encourages user contributions and provides resources on various Fediverse software, tools, and concepts. The business operates as a small, technology-focused entity registered in the US under Private by Design, LLC, emphasizing privacy and community engagement. Technically, the website is built on the DokuWiki CMS platform, utilizing Bootstrap 3 for responsive design and jQuery for interactivity. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Hosting details are limited, but the domain is registered through Porkbun with standard domain protection statuses. The site uses HTTPS and includes minimal tracking via Tinylytics, reflecting a privacy-conscious approach. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and explicit HTTP security headers, which are recommended for enhanced security. No privacy or security policies are explicitly published, and contact information is limited to a contact form without direct email or phone contacts. There are no indications of vulnerabilities or malicious content, and the site content is safe for general audiences. Overall, the Fediverse Wiki presents a trustworthy, well-maintained community resource with room for improvement in formal privacy and security disclosures. Strategic enhancements in security headers, DNSSEC implementation, and publishing clear privacy and security policies would strengthen its security posture and user trust.

H

Hugh Wells

crablab.uk

58

The website crablab.co.uk serves as a personal professional portfolio for Hugh Wells, a Platform Engineer at Wise with extensive experience in cloud engineering, consultancy, and public sector digital projects. The site highlights his involvement in hackathon organization and community events, positioning him as an active technology professional and community contributor. The website is modest but well-structured, providing clear contact information and links to professional social media and code repositories. Technically, the site uses basic HTML and CSS with Font Awesome icons, hosted under a reputable registrar (Gandi) with a domain age consistent with the professional history presented. Security posture is adequate for a personal site, with HTTPS assumed but lacking advanced security headers and policies. Privacy and cookie policies are absent, which is a compliance gap. Overall, the site is trustworthy, safe, and professionally presented, though it would benefit from enhanced privacy and security disclosures.

E

Electromagnetic Field

emfcamp.org

60

Electromagnetic Field is a UK-based non-profit organization that hosts an annual camping festival focused on technology, creativity, and maker culture. The event attracts a niche audience of hackers, artists, scientists, and engineers interested in diverse topics ranging from computer security to crafts. The organization operates primarily through volunteer efforts and sponsorships, providing attendees with amenities such as fast internet and power. The website reflects a well-branded, content-rich platform that effectively communicates the event's purpose and community spirit. Technically, the website employs standard modern web technologies including HTML5, CSS3, and JavaScript, hosted by a reputable UK provider, Sargasso Networks. The site is mobile-optimized with good SEO practices but lacks some advanced accessibility features and security headers. HTTPS is enabled, ensuring secure communications, and forms are implemented securely. However, the absence of a cookie consent mechanism and security policy pages indicates room for improvement in privacy compliance. From a security perspective, the site shows a moderate security posture with HTTPS and secure form handling but lacks explicit security headers and incident response information. The WHOIS data is unavailable or privacy-protected, which is common for non-profit events but limits domain trust verification. No vulnerabilities or malicious content were detected. Overall, the site is trustworthy and safe for general audiences. Strategically, the organization should focus on enhancing privacy compliance by adding cookie consent and publishing security policies. Implementing security headers and a vulnerability disclosure program would strengthen security posture. Improving accessibility and providing clearer contact information would enhance user trust and inclusivity. These steps will support the organization's credibility and protect its community as it grows.

UK Gov Camp is a UK-based non-profit organization that hosts an annual unconference aimed at improving public sector services. The event is community-driven, free to attend, and funded by sponsors and grants. The website serves as an informational hub for past events, sponsors, news, and contact details. Technically, the site is built with standard HTML and CSS, hosted with Cloudflare DNS services, and shows moderate performance with good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, which could be improved. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

A

Avera - Landing

averagedood.xyz

55

The website averagedood.xyz is a minimal personal landing page primarily serving as a language selection gateway for a personal or creative online presence named 'Avera' or 'AverageDood'. The site offers content in Spanish and English and includes basic Open Graph metadata for social sharing. The domain is registered through Cloudflare with transparent WHOIS data indicating a registrant located in Murcia, Spain, and was created in May 2023, consistent with a new personal site. The technical infrastructure is simple, relying on basic HTML and CSS without any detected CMS or advanced frameworks. Hosting is via Cloudflare, providing HTTPS and domain transfer protection, but DNSSEC is not enabled. No security headers or privacy-related policies are present, and no contact information or forms are provided, limiting business credibility and privacy compliance. No analytics or advertising technologies are detected, and the site does not appear to collect user data.

S

Soluciones Corporativas IP, c/o Whois Proxy

nadia.moe

58

Nadia.moe is a personal website representing Nadia Santalla, a systems programmer and container enthusiast. The site serves as a professional portfolio and contact hub, linking to social media profiles and providing downloadable CV content. The business model is personal branding within the technology sector, targeting a general audience interested in software engineering. The website is newly established in 2024 and uses privacy protection for domain registration, which is common for personal sites. Technically, the site employs modern CSS frameworks such as matcha.css and XP.css, along with Material Design icons, resulting in a visually appealing and mobile-optimized experience. The site is simple, with no complex CMS or analytics tools detected, which reduces attack surface but also limits tracking and marketing capabilities. Performance is moderate with good mobile responsiveness and basic accessibility. From a security perspective, the domain is protected with clientTransferProhibited status, but DNSSEC is not enabled. No security headers were detected in the provided data, and no privacy or cookie policies are present, indicating room for improvement in compliance and security best practices. No forms or data collection mechanisms are present, reducing risk exposure. The site content is safe and professional with no adult or questionable material. Overall, the website is trustworthy and professionally presented but would benefit from enhanced security headers, privacy policies, and DNS security improvements. The domain registration is legitimate and consistent with the website's personal branding purpose.

S

Soluciones Corporativas IP, c/o Whois Proxy

owo.cafe

74

owo.cafe is an independent Mastodon server providing a decentralized social media platform focused on a transinclusive, antifascist, and anticapitalist community centered around hobbies such as gaming, cinema, books, and technology. The platform leverages the open-source Mastodon software to offer users a safe and engaging environment within the fediverse. The website is well-structured with good content quality and consistent branding, targeting a niche audience interested in decentralized social networking and hobby discussions. Technically, the site uses modern web technologies including React and ES modules, delivering a moderate performance with good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, though improvements are needed in DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms and terms of service. Contact information is limited to an administrative email. Overall, the site is trustworthy and professionally maintained but could enhance compliance and security practices.

H

Heatherhornses's Amazing Cyber Site – When you're here, you're family

heatherhorns.com

43

Heatherhornses.com is a small personal or hobby website created in 2020, featuring minimal content centered around a friendly theme. The site uses WordPress CMS hosted on WebHostingHub with basic technical infrastructure. The website lacks comprehensive business information, privacy policies, and contact details, indicating it is not a commercial or enterprise-grade site. Technically, the site is functional with HTTPS enabled but lacks advanced security headers and DNSSEC, which are recommended for improved security posture. The security posture is basic with no detected vulnerabilities but also no formal security or incident response policies. Overall, the site is low risk but also low in business credibility and privacy compliance.

nanoshinono.me is a personal portfolio website of a young developer known as prefetcher, based in Poland. The site showcases various niche projects related to retro computing culture, multiplayer games, online radio, and music streaming. The business model is primarily personal branding and project promotion within a niche community. The website is modest in scale and targets enthusiasts of 1990s-2000s computing aesthetics and indie game development. Technically, the site is built with standard HTML, CSS, and JavaScript, hosted behind Cloudflare DNS services. It lacks advanced frameworks or CMS platforms and shows basic mobile optimization and accessibility. Performance is moderate with no detected tracking or advertising services, indicating a lightweight footprint. From a security perspective, the site uses HTTPS and domain-level protections but lacks important security headers and privacy compliance mechanisms such as privacy and cookie policies. No forms or data collection points are present, reducing attack surface but also limiting user interaction. The presence of links to an NSFW site without warnings impacts content safety ratings. Overall, the security posture is average with room for improvement in headers and compliance. The overall risk is moderate, with no critical vulnerabilities detected but lacking in privacy and security best practices. Strategic recommendations include implementing security headers, adding privacy and cookie policies, improving mobile and accessibility features, and clearly labeling NSFW content. These steps would enhance trust and compliance while maintaining the site's niche appeal.

The website 'zeroptr' is a personal portfolio and community hub maintained by a self-taught developer named Yui. It features sections such as blog, projects, gallery, and an interactive chat, targeting a general audience interested in technology and personal development projects. The site is small-scale and niche, focusing on showcasing creative works and fostering community engagement through chat and webrings. Technically, the site uses standard web technologies including JavaScript, SVG, CSS, and HTML5, hosted likely on Neocities, with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS enforced but lacking advanced security headers and formal privacy or cookie policies. No contact information or formal business details are provided, reflecting its personal nature. Overall, the site is safe, trustworthy for general audiences, but lacks formal compliance and security best practices.

G

goldenstack's homepage

goldenstack.net

60

The website goldenstack.net is a personal homepage belonging to an individual known as golden, a computer science and art student at UC Irvine. The site serves primarily as a portfolio and personal blog showcasing programming projects, interests, and social contacts. It targets a niche audience interested in computer science, programming languages, and related personal projects. The business model is non-commercial and focused on personal expression and networking. Technically, the site is built with simple HTML and CSS, likely using the Astro framework, and is hosted via Cloudflare. It has a fast loading performance and basic mobile optimization but lacks advanced SEO and accessibility features. No JavaScript is used, which reduces security risks but also limits interactivity. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers. There are no forms or data collection mechanisms, reducing attack vectors. However, the absence of privacy and cookie policies indicates non-compliance with GDPR and other privacy regulations. No incident response or security contact information is provided. Overall, the site is low risk due to its personal nature and minimal data collection but would benefit from improved privacy compliance and security best practices. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and providing contact information for security incidents.

H

Haylin Moore

hayl.in

50

Haylin Moore's website serves as a personal professional portfolio and blog, highlighting his expertise as a software and network engineer with experience at notable companies such as Qumulo and Arista Networks. The site features detailed descriptions of projects, writings, and professional affiliations, targeting technology professionals and the open source community. The business model is centered on personal branding and sharing technical knowledge rather than commercial services. Technically, the website is well-implemented using modern HTML5, CSS (Pure.css), and JavaScript, with a responsive design optimized for mobile devices. The site loads quickly and provides a good user experience with clear navigation and professional content presentation. However, no CMS or hosting provider details are explicitly identified. From a security perspective, the site uses HTTPS as indicated by canonical URLs, but lacks explicit security headers and formal privacy or cookie policies. There are no forms or data collection points, reducing attack surface, but also no incident response or vulnerability disclosure mechanisms are present. No suspicious or vulnerable scripts were detected, and no sensitive data is exposed. Overall, the website is safe, professional, and trustworthy, but could improve its privacy compliance and security posture by adding policies, security headers, and contact information for security incidents.

M

Mem :3

mem451.com

53

The website mem451.com is a personal creative portfolio belonging to a 21-year-old non-binary individual focused on music and gaming. The site serves primarily as a hub linking to various social media and creative platforms, with minimal original content hosted directly. The business model is personal branding and creative expression rather than commercial enterprise. The domain is recently registered in 2023, consistent with the site's stated purpose. Technically, the site is simple, built with basic HTML and CSS, hosted with Cloudflare DNS services, and lacks advanced frameworks or CMS. Performance and mobile optimization are basic but functional. SEO and accessibility features are minimal. No analytics or tracking scripts are present, indicating a privacy-conscious or minimalistic approach. From a security perspective, the site lacks key security headers and does not enable DNSSEC, which could improve domain security. There is no visible HTTPS enforcement information, and no privacy or cookie policies are provided, which limits compliance with GDPR and other privacy regulations. No forms or data collection mechanisms are present, reducing attack surface but also limiting user engagement features. Overall, the site is low risk but also low in professional and security maturity. Strategic recommendations include enabling DNSSEC, adding security headers, implementing HTTPS enforcement, and publishing privacy and cookie policies to improve trust and compliance.

G

GOTH

goth.zip

56

The website goth.zip is a personal blog operated by an individual named Selene. It serves as a homepage with links to related sites and includes a music track display component. The site is built using the Astro framework, indicating a modern technical approach, but it remains a work in progress with minimal business or compliance information. The target audience appears to be general visitors interested in the author's content and related projects. The site is part of a webring associated with staydown.money, suggesting a small network of related personal or niche sites. Technically, the site uses modern web technologies including Astro v3.2.3, JavaScript modules, CSS, and WebP images. The site appears to be mobile optimized and has basic SEO and accessibility features. However, no CMS or hosting provider information is evident. Performance is moderate based on the use of modern but minimalistic design and external scripts. From a security perspective, the site lacks visible security headers and does not provide privacy, cookie, or terms of service policies. No contact information or incident response details are provided, limiting trust and compliance. The site uses an external hit counter from websiteout.com, which may raise privacy concerns. No WAF or blocking mechanisms are detected, and the content is fully accessible. No adult or explicit content is present, making the site safe for general audiences. Overall, the site scores moderately on AI evaluation due to its basic content quality and technical implementation but scores low on privacy compliance and security posture. Strategic improvements include adding privacy and cookie policies, implementing security headers, providing contact and incident response information, and auditing external scripts for privacy and security risks.

The website votehusky.org represents a small, informal political party called the Husky Party. The site is designed with a humorous and casual tone, promoting fun and engagement in politics rather than serious political campaigning. The business model is centered on political promotion and community engagement with a niche audience interested in alternative political ideas. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript with Google Fonts, hosted under a domain registered via NameCheap with privacy protection. The site lacks advanced frameworks, CMS, or analytics tools, indicating a low digital maturity level. From a security perspective, the website does not demonstrate strong security practices. There is no evidence of HTTPS enforcement or security headers, no privacy or cookie policies, and no forms to assess input security. The domain uses privacy protection, which is common for small or informal political sites but reduces transparency. No vulnerabilities or malware were detected, but the lack of security best practices and compliance policies is a concern. Overall, the website is safe for general audiences, with no adult or explicit content. However, the lack of privacy compliance, security measures, and professional business information lowers its credibility and trustworthiness. Strategic improvements in security posture, privacy compliance, and professional presentation are recommended to enhance trust and user confidence.

H

Honbra

honbra.com

61

Honbra.com is a personal website operated by a student from Czechia who is passionate about technology and its potential uses and abuses. The site primarily serves as a blog and personal portfolio, sharing technology-related insights and posts. The website is built using the Astro framework, indicating a modern and performant technical infrastructure. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC. Privacy compliance is minimal, with no privacy or cookie policies present. Contact options are limited to an email address and a Matrix instant messaging handle. Overall, the site is trustworthy for a personal blog but would benefit from improved privacy and security practices.

P

Private by Design, LLC

hl2.sh

52

The website hl2.sh is a personal portfolio and blog site operated by an individual or small entity named Private by Design, LLC, based in the US. The site primarily serves as a curated hub for the author's interests, including technology, gaming, and software tools, with links to various external resources. The business model is non-commercial and focused on personal expression and information sharing. The site uses the Astro framework and is hosted on bunny.net, indicating a modern but simple technical infrastructure. Performance and mobile optimization are basic but functional. Security posture is weak due to lack of visible HTTPS confirmation, absence of security headers, and no disclosed privacy or cookie policies. No contact or incident response information is provided, limiting trust and compliance. Overall, the site is safe for general audiences with no adult or explicit content detected.

U

uwu.dog | the dog ever

uwu.dog

55

The website uwu.dog appears to be a small personal or hobby site with minimal content focused on links to other personal or interest-related sites. The domain is registered with privacy protection through NameCheap and hosted with Cloudflare DNS services. The site lacks any formal business information, privacy or cookie policies, and contact details, indicating it is not a commercial or professional business site. Technically, the site uses basic HTML and CSS with no detected CMS or advanced frameworks. Security posture is minimal with no security headers or HTTPS enforcement details available, and no analytics or tracking scripts are present. Overall, the site is low risk but also low in professionalism and compliance.

The website connormcf.com is a personal site belonging to a UK-based systems administrator. It serves primarily as a personal blog and portfolio, sharing technical content and providing a PGP key for encrypted communication. The site is small-scale, non-commercial, and targets a general audience interested in technology and systems administration. The domain was registered in 2015 and is hosted via Cloudflare, indicating a stable and reputable infrastructure. From a technical perspective, the site uses standard web technologies including HTML5, CSS, and JavaScript, with Cloudflare Insights for minimal analytics. The site is mobile-optimized and has basic SEO and accessibility features. However, it lacks advanced frameworks or CMS platforms, suggesting a simple, custom-built or static site. Security posture is moderate with HTTPS enforced and domain transfer protection enabled. However, the absence of DNSSEC, security headers, and published security policies reduces the overall security maturity. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is low due to missing privacy and cookie policies and lack of GDPR indicators. Overall, the site is low risk given its personal nature and limited data collection. Strategic improvements include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and providing contact information for security incidents to enhance trust and compliance.

InvoxiPlayGames is a personal and hobbyist website operated by Emma, a software developer and security researcher specializing in reverse engineering, game modding, and open source projects. The site serves as a portfolio and project hub, targeting enthusiasts in gaming, security research, and technology. The business model is informal and community-driven, focusing on sharing knowledge and software rather than commercial activities. The domain is well-established since 2015, supporting the credibility of the operator's experience and project history. Technically, the website is built with standard web technologies including HTML5, CSS3, and JavaScript, with backend and project languages spanning C#, C, C++, NodeJS, and others. Hosting is via Cloudflare, providing HTTPS and performance benefits. The site is mobile-optimized with good navigation and content structure, though accessibility and SEO are basic. No CMS is detected, indicating a custom or static site approach. From a security perspective, the site uses HTTPS and does not expose sensitive data or forms, reducing attack surface. However, it lacks security headers and formal privacy or cookie policies, which are recommended for compliance and enhanced security posture. The presence of a HackerOne profile indicates responsible vulnerability disclosure practices. No critical vulnerabilities or suspicious content were detected. Overall, the site is a credible, well-maintained personal project hub with moderate technical sophistication and a good security baseline. Improvements in privacy compliance and security headers would enhance trust and protection. The risk level is low given the non-commercial nature and limited data collection.

A

lexd0g's website

alice.tf

54

The website alice.tf is a personal site representing an individual named Alice, also known as lexd0g. It serves as a personal portfolio and social hub showcasing interests in technology, music, and various hobbies. The site is simple, static, and non-commercial, targeting a general audience interested in the owner's personal projects and social profiles. The domain is recently registered and consistent with the personal nature of the site. Technically, the site is built with basic HTML and CSS, hosted via OVH with Cloudflare nameservers. There is no evidence of advanced frameworks, CMS, or analytics tools. The site is mobile-friendly and has good content quality but lacks advanced SEO and accessibility features. Security posture is minimal with no security headers detected and no privacy or cookie policies present. From a security perspective, the site does not expose sensitive data or use vulnerable libraries but lacks formal security policies and incident response information. The absence of privacy and cookie policies indicates low privacy compliance. No WAF or blocking mechanisms are detected, allowing full content access. Overall, the site is low risk due to its personal nature and lack of commercial transactions or sensitive data. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and improving accessibility and SEO to enhance trust and compliance.

P

Private by Design, LLC

ioletsgo.gay

55

The website ioletsgo.gay is a personal site representing an individual known as Ivory / Ivy / Io, focusing on personal interests such as gaming, technology, art, and music. It serves primarily as a personal branding and social hub with links to various social media and friend sites. The site is small scale, recently created in 2024, and hosted via Porkbun with privacy protection on the domain registration. Technically, the site is built with basic HTML, CSS, and JavaScript without any detected CMS or frameworks. The performance and mobile optimization are basic but functional. Security posture is minimal with HTTPS enabled but lacking security headers and DNSSEC. No privacy or cookie policies are present, and no forms or data collection mechanisms are implemented. Security-wise, the site shows no critical vulnerabilities but lacks advanced protections and compliance features. The domain registration is consistent and legitimate, with privacy protection justified for a personal site. No adult or explicit content is present, making the site safe for general audiences. Overall, the site is a modest personal web presence with room for improvement in security, privacy compliance, and professional polish. Strategic enhancements could improve trust and security posture while maintaining the personal nature of the site.

The website daniela.lol is a personal portfolio and hobbyist site belonging to Daniela, a young trans woman from Germany who engages in coding, game modding, 3D modeling, and art. The site serves as a platform to showcase her creative projects, share social media links, and accept donations. The business model is informal and community-driven, targeting a general audience interested in gaming mods and creative content. The domain is very new, registered in September 2024, consistent with a recently launched personal site. Technically, the site is built with basic HTML and CSS, hosted behind Cloudflare DNS but without DNSSEC enabled. There is no evidence of advanced frameworks, CMS, or analytics tools. The site performance and mobile optimization are basic but functional. SEO and accessibility features are minimal. No security headers or privacy policies are present, indicating a low maturity level in security and compliance. From a security perspective, the site uses HTTPS (implied by Cloudflare DNS usage but SSL configuration details are unknown), but lacks security headers and privacy compliance mechanisms. No forms or data collection points are present, reducing attack surface but also limiting user engagement features. The WHOIS data shows a recent registration with no privacy protection, consistent with a personal site. No suspicious patterns or vulnerabilities were detected. Overall, the site is low risk but also low in professional security and compliance standards. It is suitable for personal use but would benefit from improvements in privacy policies, security headers, and contact transparency to enhance trust and compliance.

Shrecknt's Silly Site is a personal technology-focused website serving as a blog and portfolio for the individual known as Shrecknt. The site features links to various social media profiles including Discord, GitHub, and Matrix, as well as a collection of partner and related sites. The content is primarily personal and technical in nature, targeting a general audience interested in technology and programming. The site does not appear to represent a commercial business entity but rather a personal project or hobbyist presence. Technically, the website is built with standard HTML5, CSS3, and JavaScript, utilizing Font Awesome icons for visual elements. There is no evidence of a CMS or complex frameworks, indicating a lightweight and straightforward implementation. The site appears to be mobile-optimized with good navigation clarity, though accessibility features are basic. No analytics or tracking scripts were detected, suggesting minimal user tracking and a privacy-conscious approach. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are important for compliance and user trust. No contact emails or phone numbers are provided, limiting direct communication channels. The domain uses privacy protection for WHOIS data, which is common for personal sites but reduces transparency. No vulnerabilities or malicious content were detected, and the site content is safe for general audiences. Overall, the site scores moderately on content quality and business credibility but scores lower on security posture and privacy compliance. Strategic improvements in security headers, privacy policies, and contact information would enhance trust and compliance. The site is suitable as a personal portfolio but lacks features expected from professional or commercial websites.

The website kibty.town is a personal portfolio site belonging to a developer and (un)professional pentester named Eva, who focuses on infosec, software pentesting, and devops. The site highlights several open source projects and community involvement, targeting infosec enthusiasts and developers. The business model is primarily personal and community-driven, with no commercial transactions evident. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, Google Fonts, and integrates third-party services such as Umami Analytics and Ko-fi chat widgets. The site is moderately optimized for mobile and performance but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS implied but no DNSSEC or security headers detected. Privacy compliance is minimal with no privacy or cookie policies present. WHOIS data is consistent and transparent, indicating a legitimate personal site. Overall, the site is safe, professional, and trustworthy but could improve in privacy and security practices.

C

c7.pm

c7.pm

44

The website c7.pm is a personal or community-oriented site established in 2018, serving as a hub for links to friends, communities, and miscellaneous related sites. It does not represent a commercial business and lacks formal business descriptions or commercial services. The site is hosted on a small hosting provider and uses basic web technologies such as HTML, CSS, and JavaScript without any major frameworks or CMS. The design is consistent and functional, with moderate performance and basic mobile optimization. Security posture is limited, with no detected security headers or HTTPS confirmation from the provided data, and no privacy or cookie policies present. No contact information or incident response details are provided, which limits trust and compliance. Overall, the site is safe for general audiences and does not contain adult or explicit content.

The website enfys.wales is a personal portfolio and blog site for Enfys, a developer and musician based in North Wales. The site targets niche communities such as the demoscene and technology enthusiasts, offering links to social profiles and partner sites. The business model is personal branding and community engagement rather than commercial services. Technically, the site is a simple static HTML/CSS/JavaScript implementation with no detected CMS or advanced frameworks. Mobile optimization is poor, and no advanced SEO or accessibility features are evident. Security posture is minimal with no HTTPS or security headers detected, and no privacy or cookie policies are present, indicating low compliance with GDPR and other regulations. No contact or incident response information is provided, limiting trust and professional credibility. Overall, the site is safe for general audiences but lacks professional security and compliance features.

The website e2.pm is a small, informal personal webpage primarily featuring humorous and casual content without any clear business or professional focus. The site lacks formal business information, contact details, privacy policies, or terms of service, indicating it is not intended for commercial or enterprise use. The domain was registered in late 2019 and remains active, consistent with the site's informal nature. Technically, the website uses basic HTML, CSS, and JavaScript with external resources such as Google Fonts and a cookie consent library. Hosting and DNS are managed via Cloudflare, providing standard performance and security benefits. The site is moderately optimized for mobile and accessibility but lacks advanced SEO and security headers. From a security perspective, the site uses HTTPS and includes a cookie consent banner, showing some privacy awareness. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No forms or data collection points are present, reducing attack surface but also limiting user engagement. Overall, the website poses low risk but also offers limited trust and professionalism. Strategic improvements include adding privacy and security policies, contact information, and enhancing technical and security best practices to improve credibility and compliance.

L

luna

l4.pm

44

The website l4.pm is a personal portfolio and hobbyist project site operated by an individual known as Luna (LUN-4). It primarily showcases backend development work for partners such as anlatan.ai and novelai.net, alongside open source projects related to virtual reality and personal interests like music and blogging. The site is small-scale, targeting technology enthusiasts and VR communities, with no commercial business model or formal market positioning. Technically, the site is built with basic HTML, CSS, and SVG graphics, hosted on Hetzner, and demonstrates moderate performance and basic mobile optimization. Security posture is minimal, with no visible security headers or published policies, and no evidence of HTTPS status was found in the provided data. The site lacks privacy, cookie, and terms of service policies, which impacts compliance and trust. Content includes mild adult-themed warnings but no explicit adult content. Overall, the domain registration is consistent and legitimate, supporting the personal nature of the site.

The website 'Mary's Internet Realm' is a personal and hobbyist site created in 2018, featuring casual content including a Tetris game and links to various personal projects and friends' websites. It targets general internet users interested in casual gaming and personal portfolios. The site is small-scale with basic content quality and moderate branding consistency. Technically, it uses standard HTML, CSS, and JavaScript with Cloudflare DNS hosting but lacks advanced frameworks or CMS. Mobile optimization is good, but accessibility and SEO are basic. Security posture is weak due to lack of security headers, DNSSEC, and privacy policies. The domain is privacy protected via a reputable registrar, which is typical for personal sites. Overall, the site is safe and suitable for general audiences but lacks professional security and privacy compliance features.

E

Essem

essem.space

60

Essem.space is a personal website belonging to an individual named Essem, who is a coder and content creator. The site serves as a portfolio and microblog platform linking to various personal projects and social media profiles. The business model is personal branding and content sharing, targeting a general audience interested in technology and coding. The site is small scale and founded in 2018, with no corporate affiliations or subsidiaries. Technically, the site is simple, built with basic HTML and CSS, hosted likely via Namecheap, and lacks advanced frameworks or CMS. Performance and mobile optimization are basic but functional. Security posture is minimal, with no visible security headers or policies, and no HTTPS status explicitly known from the data. Privacy compliance is lacking as no privacy or cookie policies are present. The WHOIS data shows privacy protection typical for personal sites, with domain age consistent with the site's history. Overall, the site is safe, trustworthy for general audiences, but lacks formal security and compliance features.

N

NotNet

n2.pm

54

NotNet is a small community of friends and developers focused on software and systems development, as indicated by their website content and linked resources. The site serves primarily as an informational hub with links to their home server, Hetzner-hosted server, and code repositories on GitHub and Forgejo. The business model appears community-driven without commercial transactions or extensive service offerings. The website is modest in design and content, reflecting a niche technical audience rather than a broad commercial market. Technically, the website is built with basic HTML, CSS, and SVG graphics, lacking advanced frameworks or CMS platforms. Hosting is partially identified with Hetzner for one server, suggesting some professional infrastructure. Performance and mobile optimization are basic but functional. SEO and accessibility features are minimal, and no analytics or tracking technologies are detected, indicating a privacy-conscious or low-traffic site. From a security perspective, the site lacks visible security headers and formal policies such as privacy, cookie, or terms of service documents. No incident response or vulnerability disclosure mechanisms are present. The domain is secured with HTTPS (assumed from URL), but SSL configuration details are unknown. WHOIS data shows a consistent and legitimate registration since 2019, supporting the site's authenticity. Overall, the security posture is basic with room for improvement in policy transparency and technical safeguards. The overall risk is low given the non-commercial nature and limited data collection, but the absence of privacy and security policies could pose compliance risks if the site evolves. Strategic recommendations include implementing standard security headers, publishing privacy and cookie policies, adding contact and incident response information, and considering vulnerability disclosure practices to enhance trust and compliance.

C

evan clue's media portfolio

clue.media

50

The website clue.media serves as a personal media portfolio for Evan Clue, showcasing a variety of creative works including graphic design, video production, web design, merchandising, and a self-published music label. The site highlights several projects such as 'planet clue', 'kayboards', and 'yesclip', demonstrating a niche but consistent presence primarily in the media and creative content space. The business model is centered around personal branding, content creation, and merchandising with a small but engaged audience, particularly on social media platforms like YouTube and TikTok. From a technical perspective, the website is built using standard web technologies including HTML5, CSS, and JavaScript, hosted on Amazon AWS infrastructure. The site is moderately optimized for performance and mobile use, with a clean and consistent design that supports good user experience and navigation clarity. However, there is no detected use of advanced frameworks or CMS, and SEO and accessibility features are basic. Security posture is minimal; no security headers or advanced configurations are present, and DNSSEC is not enabled. The domain is secured with HTTPS (assumed from domain and modern hosting), but no privacy or cookie policies are published, indicating low compliance maturity. No forms or data collection mechanisms are present, reducing attack surface but also limiting user engagement features. The WHOIS data shows a domain age consistent with the portfolio's timeline and a registrant country matching the website's language and contact domain, supporting legitimacy. Overall, the site is a well-maintained personal portfolio with good content quality and business credibility but lacks formal privacy, security, and compliance features. Strategic improvements in security headers, privacy policies, and incident response information would enhance trust and compliance posture.

Tygrys is a small technology company founded in 2022 offering privacy-focused secure messaging, email, and code/project management services. The company emphasizes user data ownership, no ads, no tracking, and open source technologies. Their market position is niche with no direct competitors offering the same integrated privacy-centric services. Technically, the website is well implemented with modern technologies, mobile optimization, and good SEO practices. Hosting is via AWS DNS infrastructure. Security posture is strong with HTTPS and no trackers, but lacks some security headers and published policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy with room for improvement in compliance documentation and security transparency.

P

Porkbun LLC

yesterweb.org

55

The Yesterweb is a small, community-driven initiative founded in 2021, focused on reclaiming and transforming internet culture through a progressive countercultural movement. It operates various community spaces including forums, a Mastodon server, and a webring, emphasizing social responsibility, collective well-being, and rehumanizing online social relations. The website content is rich, well-structured, and reflects a mature understanding of online community dynamics and challenges. Technically, the site is built with standard web technologies (HTML, CSS, JavaScript) without a CMS, and uses minimal external scripts, notably GoatCounter for privacy-conscious analytics. Security posture is basic with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is consistent and domain registration legitimate, matching the community's founding timeline. Overall, the site is trustworthy and professional but would benefit from improved privacy and security disclosures.

Suricrasia Online is a small, Toronto-based niche ISP with a satirical and community-driven approach, featuring anthropomorphic shark mascots and unique internet delivery concepts such as River Basin Network Architecture. The website serves as a portal for their demosene projects, online library, and social media presence. Technically, the site is a simple static HTML/CSS/JS implementation hosted on NearlyFreeSpeech.NET, with basic mobile optimization and moderate performance. Security posture is basic with HTTPS enabled but lacking security headers and formal policies. No privacy or cookie policies are present, and no contact information is provided, limiting trust and compliance. The WHOIS data shows privacy protection and a domain age inconsistent with the claimed founding date, indicating a hobbyist or satirical nature rather than a commercial ISP. Overall, the site is safe, accessible, and content-rich but lacks professional security and compliance features.

B

BNS Services LLC

as206628.net

66

EzriCloud is a small, non-profit IT and networking project operated by BNS Services LLC, focused on providing free hosting and BGP upstream services primarily to students and open-source projects. The website clearly communicates its mission and key services, positioning itself as a niche provider in the technology sector with a strong community and educational focus. The business model is centered on open peering and free transit, supported by partnerships with established colocation and transit providers. Technically, the website is built with clean HTML and CSS, leveraging the Pure CSS framework for responsive design, resulting in good performance and user experience across devices. However, the site lacks advanced technical frameworks or CMS platforms, reflecting a lightweight and straightforward infrastructure. Security posture is moderate; while the domain is protected against unauthorized deletion and transfer, DNSSEC is not enabled and security headers are absent, which could be improved to enhance resilience. Privacy and cookie policies are missing, indicating compliance gaps, and no incident response or vulnerability disclosure mechanisms are present. Overall, the website is trustworthy and professional but would benefit from enhanced security and privacy compliance measures to align with best practices. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, adding security headers, and establishing incident response contacts to improve trust and compliance.

The website alphamethyl.barr0w.net serves as a root endpoint for a technical server community named Barrow B1 Alphamethyl Server. It provides user home directories, SSL certificate root files, and links to related technical resources. The site targets technical users and community members interested in server management and SSL certificate handling. The business model appears to be community-driven server hosting with a focus on secure communications and user access management. The website is small in scale with basic content quality and moderate branding consistency. Technically, the site uses standard HTML5 and CSS with external stylesheets and PEM-format SSL certificates. There is no detected CMS or advanced frameworks. Performance and mobile optimization are basic, with minimal SEO and accessibility features. Security practices include HTTPS enforcement and SSL key rotation announcements, but lack standard security headers and formal policies. No forms or user input fields are present, reducing attack surface but also limiting interactivity. Security posture is moderate with good SSL configuration but missing security headers and no published privacy or cookie policies. The WHOIS data is missing or indicates the domain is unregistered, which raises legitimacy concerns despite the active website and admin contact email. No advertising or analytics services are detected, and content is safe for general audiences. Overall, the site is functional for its niche technical community purpose but lacks formal business and security documentation. The domain registration inconsistency and absence of privacy compliance reduce trustworthiness. Strategic improvements in security headers, policy publication, and domain registration transparency are recommended.

The website annwfn.net serves as a personal placeholder domain primarily used by the individual Bastian Rieck for private email communication and hosting personal and friends' websites. The site content is minimal and non-commercial, focusing on providing information about the domain's purpose and links to related personal projects. The domain is well aged, registered since 2004, and the registrant information aligns with the website content, indicating a legitimate personal use case. From a technical perspective, the site uses basic HTML and CSS without advanced frameworks or CMS. Hosting and DNS are managed through Dynadot and messagingengine.com respectively, suggesting a stable but simple infrastructure. The site lacks modern security headers and does not implement DNSSEC, which could be improved. No analytics or advertising tools are detected, reflecting a privacy-conscious approach but also limiting insights into user engagement. Security posture is basic with no evident vulnerabilities or exposed sensitive data, but the absence of security headers and policies reduces the overall security maturity. Privacy compliance is minimal, with no privacy or cookie policies present, which is typical for a personal site but would be insufficient for commercial operations. Overall, the site is safe, with no adult or questionable content, and accessible without WAF or blocking mechanisms. The overall risk is low given the personal nature and limited scope of the site, but improvements in security headers, DNSSEC, and privacy disclosures would enhance trust and compliance. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, and implementing basic security headers to improve the security posture and user trust.

T

The Monero Project

getmonero.org

63

The Monero Project operates a comprehensive website dedicated to the promotion and support of Monero, a privacy-focused decentralized cryptocurrency. The site offers extensive educational resources, wallet downloads, community engagement platforms, and a transparent vulnerability disclosure process. The project is well-positioned in the cryptocurrency market as a leading privacy coin with a strong global community and active research lab. Technically, the website is built with standard web technologies, is mobile-optimized, and provides a good user experience with clear navigation and multilingual support. Security posture is strong with HTTPS enforced and an onion service for Tor users, though some security headers and cookie consent mechanisms are absent. The WHOIS data is privacy protected, which aligns with the privacy-centric nature of the project. Overall, the website is professional, trustworthy, and serves its target audience effectively.

P

planet clue

planetclue.com

51

Planet Clue is a personal creative website representing Evan Clue, a young graphic designer, video producer, and content creator focused on niche and esoteric media from the late 1990s and early 2000s. The site serves as a portfolio and social media hub, linking to various platforms such as TikTok, YouTube, Patreon, Discord, and Bluesky. The business model appears to be centered on personal branding and content monetization via Patreon and media promotion. Technically, the website is built with basic HTML and CSS, hosted likely on AWS infrastructure given the registrar and DNS servers. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No CMS or frameworks are detected, indicating a simple static site. From a security perspective, the site uses HTTPS and has a valid domain status but lacks DNSSEC and security headers. There are no forms or data collection points, reducing attack surface, but also no privacy or cookie policies, which impacts compliance. No incident response or security policies are published, and no contact information is provided, limiting transparency. Overall, the website is safe, professional, and suitable for general audiences but would benefit from improved security practices, privacy compliance, and contact transparency to enhance trust and reduce risk.

Nekoweb.org is a niche technology platform offering free static website hosting with a strong emphasis on user freedom, ad-free experience, and community engagement. Founded in 2023 by a group of coders and artists, it targets individuals and small creators who prefer personal websites over social media. The platform supports advanced features such as FTP and Git for donators, custom domains, and API automation, positioning itself as a flexible and user-centric hosting service. The business model relies on donations and optional paid upgrades, fostering a community-driven ecosystem. Technically, Nekoweb.org utilizes modern web standards including HTML5, CSS3, and JavaScript, with Cloudflare providing DNS and registrar services. The site is mobile-optimized with good navigation and basic accessibility features. Security measures include HTTPS enforcement and Cloudflare Turnstile CAPTCHA to mitigate bot traffic, though DNSSEC is not enabled and security headers are minimal. The platform blocks generative AI crawlers to protect user content, reflecting a proactive approach to content security. From a security perspective, the site demonstrates a moderate security posture with room for improvement in DNS security and explicit security policies. Privacy compliance is basic, with a privacy policy and terms of service present but lacking cookie consent mechanisms. Contact information is clearly provided, enhancing business credibility. No adult or questionable content is detected, making the site safe for general audiences. Overall, Nekoweb.org presents a trustworthy and well-maintained service with a clear community focus. Strategic recommendations include enabling DNSSEC, enhancing security headers, publishing a security policy, and implementing cookie consent to improve compliance and security posture. These steps will strengthen user trust and align the platform with best practices in web security and privacy.

D

Domains By Proxy, LLC

plush.city

65

Plush.city is a small, community-focused Mastodon instance founded in 2017, offering decentralized social media services centered on compassion and respectful interaction. The platform leverages the open-source Mastodon software (version 4.4.2) and provides a safe space for users to engage in a harassment-free environment, supported by a detailed Code of Conduct and active moderation. The website is well-designed with good navigation and mobile optimization, reflecting a professional and trustworthy community platform. Technically, the site uses modern web technologies including React and ES modules, hosted with domain registration privacy protection and CDN support. Security posture is moderate with HTTPS enabled and domain EPP protections, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or terms of service page. Overall, Plush.city presents a credible and secure platform for decentralized social networking with room for enhancements in security and privacy transparency.

The website selic.re is a personal portfolio and project showcase for an individual developer and artist known as Selicre. The site highlights the owner's skills in software development, particularly in Rust, as well as graphic design and generative art. The target audience includes developers, learners, and art enthusiasts. The business model is primarily personal branding and sharing of projects and contact via social media. The domain is registered since 2019 and hosted on Hetzner infrastructure, indicating a stable and consistent technical setup. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and SVG for visual effects. There is no evidence of a CMS or third-party frameworks. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. No analytics or advertising scripts are present, indicating minimal user tracking. From a security perspective, the site lacks published privacy, cookie, or security policies, and no security headers were detected. There are no forms or data collection points, reducing attack surface but also limiting user interaction. The WHOIS data is consistent and transparent, with no privacy protection or suspicious patterns. Overall, the security posture is basic but without critical vulnerabilities detected. The overall risk is low given the personal nature of the site and lack of sensitive data handling. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and providing direct contact information for security or business inquiries to enhance trust and compliance.

F

Frost Dragon Art LLC

furaffinity.net

63

Fur Affinity, operated by Frost Dragon Art LLC, is a well-established online community and gallery platform dedicated to furry art and related creative content. It serves a niche audience within the furry fandom, offering a variety of user-generated content including artwork, writing, music, and crafts. The platform supports monetization through a subscription service (FA+) and an official merchandise store, positioning itself as a leading site in its niche. Technically, the website employs modern web technologies such as JavaScript frameworks and ad management tools, delivering a fast and mobile-optimized user experience. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms but lacks visible advanced security headers and explicit incident response information. The absence of WHOIS registrant data introduces some uncertainty regarding domain registration legitimacy, though the site's consistent branding and active community mitigate this concern. Overall, Fur Affinity presents a mature content platform with a solid technical foundation but could improve transparency and security practices.

Eniko Fox's website is a personal blog centered on software development, game development, and technology hobby projects. The site serves as a platform to share technical articles, promote indie games, and engage with a technology-savvy audience. The business model is primarily content-driven with monetization through donation platforms such as Ko-fi and Patreon. The site maintains a niche presence with a consistent brand and active social media engagement across Mastodon, Bluesky, YouTube, GitHub, and Twitch. Technically, the website is built using the Publii static site CMS, leveraging modern web technologies including HTML5, CSS, JavaScript, and libraries like Prism.js and DOMPurify for code highlighting and security. The site is performant, mobile-optimized, and SEO-friendly, though accessibility is basic. Security posture is moderate with HTTPS enforced and use of sanitization libraries, but lacks important security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional for a personal blog but could improve in compliance and security transparency.

P

Privacy service provided by Withheld for Privacy ehf

deerz.one

45

The website deerz.one is a personal site operated by an individual known as ida deerz, focusing on creative outputs such as music, blog posts, and technical resources. The site serves a niche audience interested in music production, web development, and personal insights. The business model is primarily content sharing and community engagement without commercial sales directly on the site. The domain is relatively new, registered in April 2024, and uses privacy protection services, which aligns with the personal nature of the site. Technically, the site is built on a custom content management system called Deer Text Format, utilizing standard web technologies including HTML, CSS, JavaScript, and PHP. Hosting is provided by DreamHost, and the site is served over HTTPS with a moderate performance profile. Mobile optimization and accessibility are basic but functional. SEO practices are minimal but present. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers such as Content-Security-Policy. There are no visible vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, as well as incident response information, indicates room for improvement in compliance and security posture. Overall, the site is safe, trustworthy, and well-maintained for a personal project, but it lacks formal privacy and security documentation. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and providing incident response contacts to enhance trust and compliance.

S

stage7

stage7.net

49

Stage7.net is a personal website operated by an individual known as stage7, a Spain-based web developer and part-time demoscener. The site serves as a portfolio and blog sharing personal interests including demoscene productions, music, downloads, and zines. The website targets a niche audience interested in demoscene culture and related hobbies. The business model is primarily personal content sharing without commercial transactions or services. Technically, the site is lightweight, JavaScript-free, and hosted by DreamHost, LLC. It uses basic HTML5 and CSS3 technologies with no detected CMS or advanced frameworks. The site is mobile-optimized at a basic level and features good SEO practices through meta tags and Open Graph data. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. No cookie or tracking mechanisms are present, aligning with the site's privacy-conscious design. No formal privacy compliance beyond a basic privacy policy is evident. Overall, the site is trustworthy and professional for a personal project but could improve security and compliance documentation. Recommendations include enabling DNSSEC, adding security headers, and implementing cookie consent if cookies are introduced.