Security Directory

M

McSweeney’s Literary Arts Fund

mcsweeneys.net

54

McSweeney’s Internet Tendency is a well-established nonprofit literary arts publisher based in San Francisco, operating since 1998. The organization offers daily humor content, publishes literary magazines and books, and runs an online store. Their market position is strong within the nonprofit literary media sector, supported by a consistent brand and active audience engagement through multiple channels including social media and Patreon. Technically, the website employs modern JavaScript frameworks, New Relic monitoring, and Google Analytics, indicating a mature digital infrastructure with good performance and mobile optimization. Security posture is solid with HTTPS and secure forms, though there is room for improvement in security headers and published policies. Privacy compliance is moderate, with a privacy policy present but lacking explicit cookie consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences.

T

Themex Studio

themex.studio

57

Themex Studio is a small technology business specializing in the design and sale of premium, minimalistic Ghost CMS themes targeted at writers, bloggers, designers, and solopreneurs. Founded in 2023, the company positions itself as a niche provider offering thoughtfully crafted themes that enhance online presence and writing portfolios. The website demonstrates a high level of professionalism with excellent design quality, clear navigation, and comprehensive content including live demos, documentation, and customer reviews. Technically, the site is built on the Ghost CMS platform, uses modern web technologies, and benefits from Cloudflare DNS services. Performance and mobile optimization are excellent, supporting a positive user experience. Security posture is good with HTTPS enforced and domain transfer protections, though there is room for improvement in security headers and published policies. Privacy compliance is adequate with a clear privacy policy and GDPR considerations, but lacks a cookie consent mechanism. Overall, the business credibility is strong with trust signals such as testimonials and detailed documentation. No critical security or content safety issues were detected.

F

formel-skin.de

formel-skin.de

48

The website www4.formel-skin.de appears to be a parked or placeholder domain with minimal content primarily focused on advertising. There is no clear business description, contact information, or user engagement features. The site uses advertising platforms such as Google AdSense and Bodis to monetize traffic. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript with external ad scripts. No CMS or advanced frameworks are detected. Security posture is weak with no visible security headers or policies, and no evidence of HTTPS configuration was found in the provided data. Privacy compliance is minimal with only a basic privacy policy and no cookie consent mechanism. Overall, the site lacks business credibility and trust indicators, and the domain registration data suggests it is a redirect or parked domain without clear ownership details.

A

Aleksey Cherenkevich

roundnsquare.club

55

Round & Square is a specialized online platform launched in 2023 by Aleksey Cherenkevich, designed to help vinyl record collectors manage their collections and wishlists with ease and aesthetic appeal. The service offers features such as importing from Discogs, custom tagging, smart search, personal stats, and community-driven curated lists, positioning itself as a niche player in the music collector's digital space. The website is well-branded, consistent, and targets vinyl enthusiasts globally with a focus on user experience and community engagement. Technically, the site is hosted on DigitalOcean, uses modern web technologies including PWA support, and integrates Yandex.Metrika for analytics with privacy considerations. Security posture is solid with HTTPS enforced and domain protections in place, though some improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the platform demonstrates a good balance of business credibility, technical maturity, and user-focused design.

D

Discogs

discogs.com

76

Discogs operates as the world's largest online music database and marketplace, founded in 2000. It serves music collectors and enthusiasts by providing a comprehensive platform to discover, buy, and sell music in various physical formats such as vinyl and CDs. The website demonstrates a mature digital presence with modern technologies including React, Google Analytics, and Cloudflare services, ensuring a responsive and performant user experience. Privacy compliance is well addressed through visible cookie consent mechanisms and a comprehensive privacy policy. Security posture is strong with HTTPS enforced and CAPTCHA protections on forms, though explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS data for the domain introduces some uncertainty in domain legitimacy, but the professional presentation and consistent branding support a high trust level overall.

M

Martin Magni

martinmagni.com

45

Martin Magni's website serves as a portfolio and promotional platform for an indie game developer with a history dating back to 2010. The site highlights multiple games available on popular platforms such as Google Play, Apple App Store, Poki, and Fancade, indicating a well-established presence in the indie gaming market. The business model revolves around game development and distribution, targeting gamers across mobile and web platforms. The website content is well-structured and visually appealing, showcasing game art and videos effectively. From a technical perspective, the site employs modern web technologies including HTML5, CSS3, and JavaScript, with optimized media content for performance and mobile responsiveness. However, the site lacks advanced frameworks or CMS indications and does not appear to use analytics or tracking services. Hosting is inferred to be via NameCheap, consistent with WHOIS data. Security posture is minimal; no security headers or explicit HTTPS enforcement details are visible in the provided data. The absence of privacy, cookie, and terms of service policies indicates compliance gaps, particularly regarding GDPR and data protection standards. No contact information or incident response channels are provided, limiting user trust and support avenues. Overall, the site is safe and appropriate for general audiences, with no adult or questionable content detected.

The website toucharcade.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) security challenge page that requires human verification via Turnstile captcha. This prevents access to the actual website content, limiting the ability to analyze business, security, and compliance details. The domain is registered since 2007 with NameCheap, Inc., indicating a mature and likely legitimate website. The use of Cloudflare services suggests a focus on security and performance. However, no privacy policies, contact information, or business details are visible in the provided content. The security posture is partially observable through the presence of Cloudflare protection but lacks visible security headers or policies in the HTML. Overall, the site is protected by modern security mechanisms but cannot be fully assessed due to access restrictions.

P

The world's number one mobile and handheld videogame website | Pocket Gamer

pocketgamer.co.uk

62

PocketGamer.com is a well-established media website specializing in mobile and handheld videogame news, reviews, guides, and recommendations since 2005. It targets mobile gamers and enthusiasts with a broad range of content including game reviews, redeem codes, tips, and hardware reviews. The site maintains a professional and consistent brand presence with frequent content updates and a strong social media footprint. Technically, the website uses modern web technologies including Google Fonts, Google Tag Manager, DoubleClick advertising, and various ad and tracking SDKs. Hosting appears to be managed via Steelserve. Security posture is moderate with HTTPS usage but lacks visible security headers and explicit privacy or cookie policies in the provided content. WHOIS data is unavailable, which slightly impacts trust but the site’s content quality and network of partner sites support its legitimacy. Overall, the site is a credible resource in the mobile gaming media sector with room for improvement in privacy compliance and security transparency.

A

Autobedrijf de Pijper

autobedrijfdepijper.nl

41

Autobedrijf de Pijper is a well-established automotive dealership and service provider based in the Netherlands, founded in 2009. The company offers a broad range of used cars for sale and lease, vehicle maintenance services, and emphasizes customer trust through Bosch Car Service certification and positive customer reviews. Their digital presence is professional, with a modern website that supports online appointment scheduling and showcases their inventory effectively. Technically, the website uses modern web technologies, is mobile optimized, and employs HTTPS with DNSSEC for security. However, the absence of privacy and cookie policies indicates a compliance gap with GDPR requirements. Security posture is solid with HTTPS and reCAPTCHA integration, but lacks publicly available security policies or incident response information. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency.

C

Coach van het Jaar

coachvanhetjaar.nl

61

Coach van het Jaar is a Dutch online fantasy football game focused on the Eredivisie league, allowing users to create virtual teams and compete based on real player performances. The website presents a professional and engaging platform with clear calls to action, user onboarding, and community features such as subleagues and prizes. Technically, the site uses modern JavaScript libraries, analytics tools like PostHog and Google Tag Manager, and is hosted on a specialized platform (osso.io). The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and CSRF protection on forms, though it lacks visible security headers and published security policies. Privacy compliance is partially addressed with privacy and cookie policies present but no explicit cookie consent mechanism. Overall, the domain registration data aligns well with the business, indicating legitimacy and trustworthiness.

1

123 Magazijninrichting

123magazijninrichting.nl

63

123 Magazijninrichting is a Netherlands-based medium-sized retail company specializing in warehouse and office furnishing solutions. Their website offers a broad range of products including shelving, workbenches, mezzanine floors, safety articles, and office furniture, targeting businesses and professionals seeking tailored warehouse setups. The company positions itself as a recognized supplier with direct stock availability, supporting a business model focused on e-commerce retail. Technically, the website is built on Magento with modern JavaScript frameworks such as Alpine.js, and integrates multiple marketing and analytics tools including Google Tag Manager, Microsoft Clarity, and Facebook Pixel. The site is secured with HTTPS and DNSSEC, indicating good security hygiene. However, the absence of explicit privacy and cookie policies, as well as security incident response information, suggests gaps in compliance and transparency. Overall, the website is professional, well-structured, and trustworthy, but could improve in privacy compliance and security communication.

K

Kippers Rijssen

kippersrijssen.nl

36

Kippers Rijssen is a Netherlands-based retailer specializing in the sale of machines and tools for professional customers. The company operates both an online e-commerce platform and a physical showroom, emphasizing same-day shipping and a broad product assortment. The website is built using modern JavaScript frameworks such as Vue.js and Nuxt.js, integrating third-party services for analytics and customer engagement. The technical infrastructure reflects a moderate to good level of digital maturity with responsive design and SEO optimization. Security posture is solid with HTTPS enforced and no visible sensitive data exposure; however, the absence of explicit security headers and formal security policies indicates room for improvement. Privacy compliance is basic, with a cookie consent mechanism present but lacking detailed privacy and terms of service documentation. Overall, the website presents a professional and trustworthy front for the business, supported by consistent WHOIS data and legitimate domain registration.

S

Snowboards.nl

snowboards.nl

70

Snowboards.nl is a well-established e-commerce retailer specializing in snowboards and related equipment, operating since 2009 with a strong market position in the Netherlands. The company offers both online sales and physical stores, targeting snowboard enthusiasts primarily in the Dutch and broader European markets. The website is built on Magento with modern frontend technologies such as Alpine.js and integrates marketing and analytics tools like Google Tag Manager and Feedback Company widgets. The site demonstrates good SEO practices and a consistent brand presence. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks explicit security headers and formal security policies. No blocking or WAF mechanisms interfere with content accessibility, and no suspicious or malicious content is detected.

G

GMI installatietechniek

gminstallatie.com

59

GMI installatietechniek is a Dutch company specializing in the design, installation, maintenance, and management of electrical installations across retail, luxury housing, utility, and industrial sectors. The company targets businesses and clients within the Netherlands, positioning itself as a niche regional service provider. The website is professionally designed using the Wix platform, featuring structured data for local business identification and contact information, enhancing its digital presence. Technically, the site leverages Wix's Thunderbolt framework and standard web technologies, offering moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS and includes scripts to harden fetch and XHR requests, but lacks visible security headers and formal privacy or cookie policies, indicating areas for improvement. The absence of WHOIS registration data raises legitimacy concerns, although the professional presentation and consistent business information partially mitigate this risk. Overall, the site demonstrates a moderate security posture and digital maturity but requires enhancements in compliance and transparency to strengthen trust and regulatory adherence.

Webri.ng is a niche technology platform that enables creators to host and manage webrings without the need to maintain their own infrastructure. It offers a free, fully managed service with a simple control panel for webring administrators. The platform targets small web creators and communities interested in interconnected web rings. Technically, the website is built with basic HTML, CSS, and JavaScript, showing moderate performance and good mobile optimization. However, there is no evidence of advanced frameworks or CMS usage. Security posture is weak due to lack of visible security headers, privacy policies, and unclear SSL status. No incident response or vulnerability disclosure mechanisms are published. Overall, the site is functional and relevant to its niche but lacks formal security and privacy compliance documentation.

F

Fabryka jaboli

fabrykajabo.li

59

Fabryka jaboli is a small personal and community-focused website primarily hosting various self-maintained services by an individual named Nomza. The site offers a blog, IRC, federated social instance, and links to member pages, targeting a Polish-speaking general audience interested in niche community services. The business model is informal and self-hosted, with no commercial or enterprise positioning. Technically, the website is built with basic HTML, CSS, and JavaScript without any detected CMS or advanced frameworks. Hosting appears to be provided by Hetzner, inferred from footer text. The site has moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. From a security perspective, the site lacks critical security headers, privacy policies, cookie consent mechanisms, and contact information for incident response or data protection. No analytics or tracking scripts were detected, indicating minimal user tracking. The domain uses privacy protection for WHOIS data, which is appropriate for a small personal site. No vulnerabilities or suspicious patterns were identified, but security posture is minimal. Overall, the website is safe for general audiences but lacks formal compliance and security best practices. Strategic improvements in privacy, security headers, and contact transparency would enhance trust and compliance.

A

Aftermarket.pl Limited

gejuchowo.pl

67

Aftermarket.pl Limited operates the largest domain marketplace in Poland, offering domain sales, auctions, and related internet services such as hosting, mail, SSL certificates, and website creation tools. The platform targets domain buyers and sellers, internet entrepreneurs, and businesses seeking domain assets. The website is professionally designed with good navigation, mobile optimization, and clear business offerings. Technically, the site uses modern JavaScript libraries, integrates with Facebook and Google services, and employs HTTPS with CSRF protections on forms. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Security posture is adequate but could be improved by adding explicit security headers and enhanced accessibility features. WHOIS data for the domain aftermarket.pl is unavailable, likely due to privacy protection or registry delay, which slightly reduces trust but does not significantly impact the platform's credibility. Overall, the site is trustworthy, professional, and well-positioned in the domain marketplace industry.

L

19. Sesja Linuksowa

linuksowa.pl

54

Sesja Linuksowa is the largest Linux and Open Source conference in Poland, focused on promoting free software and the latest trends in GNU/Linux systems. The event is free and attracts IT professionals and enthusiasts from across the country. The website presents a professional and modern interface built with Next.js and Chakra UI, featuring detailed speaker profiles, agenda, and event information. However, the lack of WHOIS data and absence of privacy and cookie policies indicate areas for improvement in transparency and compliance. Security posture is moderate with HTTPS implied but missing explicit security headers and incident response contacts. Overall, the site is trustworthy and well-designed but would benefit from enhanced privacy and security disclosures.

H

Hello.cv

hello.cv

54

Hello.cv is a technology company specializing in AI-powered resume and profile building services, offering users the ability to create professional resumes hosted on custom .cv domains. The platform targets job seekers, professionals, and students aiming to enhance their online visibility and career prospects. The business operates primarily as a SaaS platform with integrations to major OAuth providers such as LinkedIn, Google, Microsoft, and GitHub, facilitating seamless user authentication and onboarding. The company maintains a niche market position focused on personal branding and career development.

P

Private by Design, LLC

sortable.co

56

Sortable.co is a small US-based technology company operating a distraction-free news reader service that aggregates RSS feeds and delivers email digests. The service emphasizes privacy by charging users instead of relying on ads or data selling. The website is built using modern web technologies, primarily Framer, and employs privacy-friendly analytics via plausible.io. While the site is professionally designed and offers a clear value proposition, it lacks visible privacy, cookie, and terms of service policies, as well as contact information, which impacts its privacy compliance and business credibility scores. Security posture is moderate with domain protections in place but missing advanced security headers and DNSSEC. Overall, the site is accessible without WAF or blocking mechanisms and presents safe content suitable for a general audience.

Proven.lol is a technology-focused website offering digital asset ownership proofs, allowing users to claim and verify ownership of various online profiles and web pages without the use of cryptocurrency. The service targets general internet users seeking simple and fun ways to demonstrate digital identity ownership. The website features a clean and consistent design with good content relevance and user experience, supported by HTTPS and CDN-hosted resources for moderate performance and good mobile optimization. However, the site lacks formal privacy, cookie, and terms of service policies, as well as explicit contact information and security policies, which limits its compliance and trustworthiness from a regulatory and security perspective. The WHOIS data is consistent and supports the legitimacy of the domain and service. Overall, the website presents a niche service with a moderate security posture and room for improvement in privacy compliance and security best practices.

N

Neatnik

discourse.lol

46

omg.lol is a small technology company operated by Neatnik, providing a modern authentication platform focused on passwordless sign-in using passkeys. The website demonstrates a commitment to modern security practices by integrating Passage authentication technology, enabling users to sign in securely without passwords or 2FA codes. The platform targets general users seeking secure and convenient login experiences. Technically, the site uses modern JavaScript and CSS, is mobile optimized, and hosted on a CDN for performance. However, some security best practices such as explicit security headers and cookie consent mechanisms are missing or not visible in the provided data. The domain uses privacy protection in WHOIS, which is common and justified for this business type. Overall, the site is professional and trustworthy but could improve privacy compliance and security posture.

M

Monks

media-monks.com

82

Monks is a global content, data, media, and technology powerhouse focused on accelerating growth through marketing and technology solutions. The company offers a broad range of services including brand marketing, digital advertising, creative content production, and technology services. Their market position is that of a large, professional service provider targeting businesses seeking integrated marketing and technology solutions. Technically, the website is built on Drupal CMS and employs modern web technologies such as Lottie animations and multiple analytics platforms including Google Tag Manager, mParticle, and Zaius. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and implements cookie consent via OneTrust, but lacks explicit security headers and published privacy or terms of service pages, which are important for compliance and trust. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy. Overall, the website is professional and functional but would benefit from improved transparency and security practices.

The website allpurposem.at is a personal portfolio site for Matías, a cross-platform engine programmer with a passion for Linux and C++. The site showcases a variety of game development projects, blog posts, and personal background information, targeting an audience of game developers, programmers, and technology enthusiasts. The business model is primarily personal branding and project showcasing, with a strong emphasis on open source software and community contributions. The site is well-positioned as a niche personal brand within the technology and game development sector.

K

Functional programming and javascript

korolr.dev

55

The website korolr.dev is a small-scale personal or technical blog focused on functional programming and JavaScript. It provides educational content primarily targeting developers and programming enthusiasts interested in these topics. The site has a simple structure with minimal content and no evident commercial or business operations. Technically, the site uses basic web technologies including HTML5, CSS, JavaScript, and jQuery, with Google Fonts for typography. There is no evidence of a CMS or advanced frameworks. The site appears to be moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is weak or unknown due to lack of HTTPS information and absence of security headers or policies. No privacy, cookie, or terms of service policies are present, and no contact or business information is provided, limiting trust and compliance. Overall, the site is safe for general audiences with no adult or questionable content detected.

T

The Radicle Team

radicle.xyz

57

Radicle.xyz is a technology-focused website representing an open source, decentralized platform for peer-to-peer code collaboration built on Git. The platform emphasizes sovereignty, autonomy, and security for developers, offering tools such as a CLI, web interface, and a desktop client. The website positions itself as a niche alternative to centralized code hosting services, targeting developers and open source contributors who value data ownership and censorship resistance. The business operates under the Radicle Team, with a domain registered since 2018 and privacy protection enabled, consistent with its open source and privacy-conscious ethos. Technically, the website is well-implemented with modern HTML5, CSS3, and JavaScript, hosted behind Cloudflare DNS services. It uses privacy-respecting analytics (Plausible) and provides a fast, accessible, and mobile-optimized user experience. The site lacks some advanced security headers and DNSSEC is not enabled, but HTTPS is enforced, and no sensitive data exposure is detected. The absence of privacy and cookie policies is a compliance gap, as is the lack of a vulnerability disclosure or security policy. From a security posture perspective, the site demonstrates good practices such as cryptographic verification of data and decentralized infrastructure principles. However, improvements are recommended in publishing formal security policies, enabling DNSSEC, and adding explicit security headers. No critical vulnerabilities or suspicious indicators were found. Overall, the site is trustworthy, professional, and safe for general audiences. The overall risk is low, but the site should address compliance and security policy gaps to enhance trust and regulatory adherence. Strategic recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and publishing a vulnerability disclosure policy to strengthen security posture and user confidence.

The website jappie.dev is a personal portfolio site belonging to an individual known as Jappie3, who focuses on Linux, particularly NixOS, DevOps technologies, and custom keyboard projects. The site serves as a showcase for various open source projects and technical interests, targeting a niche audience of Linux enthusiasts and developers. The content is well structured, with clear descriptions of projects and links to code repositories, but lacks formal business or corporate information. Technically, the site uses modern web standards including HTML5, CSS3, and JavaScript, with a custom font and a privacy-respecting analytics service (Plausible). The site is mobile responsive and performs well, though accessibility features are basic. No CMS or hosting provider details are evident. Security headers and HTTPS status are not confirmed from the data provided, but no forms or user input fields reduce attack surface. From a security perspective, the site shows good practices by not exposing sensitive data or using vulnerable libraries. However, the absence of security headers and privacy policies indicates room for improvement in compliance and security posture. No incident response or vulnerability disclosure mechanisms are present. The site does not appear to be blocked or protected by a WAF, allowing full content access. Overall, jappie.dev is a well-maintained personal technical site with moderate trustworthiness and good content quality. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and providing clearer contact information to enhance credibility and compliance.

O

orangc

orangc.net

59

The website orangc.net is a personal portfolio and project showcase for an individual developer named orangc, based in Riyadh, Saudi Arabia. The site highlights open source projects, personal notes, and social media presence, targeting a general audience interested in technology and open source software. The business model is that of a personal brand and developer portfolio with a small scale and focused content. Technically, the site is well implemented using modern web technologies, hosted on Cloudflare Pages, and optimized for performance and mobile devices. Security posture is good with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but could improve compliance and security practices. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, and implementing security headers to enhance security and compliance.

N

NotAShelf

notashelf.dev

65

NotAShelf is a personal technical blog and project showcase primarily focused on Linux, Nix, NixOS, and system administration topics. The site targets technology enthusiasts and professionals interested in these areas, offering blog posts and links to open source projects. The website is built using modern static site generation technology (Astro) and employs privacy-conscious analytics (Plausible). The design is professional, mobile-optimized, and provides a good user experience with clear navigation. Security posture is solid with HTTPS enforced, but lacks some security headers and formal incident response or security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the site is trustworthy and safe for general audiences.

P

Private by Design, LLC

poz.pet

55

The website poz.pet is a personal site operated by an individual known as poz, registered under Private by Design, LLC in the US. The site focuses on personal interests including Linux userspace, programming, gaming, and science fiction literature. It serves as a personal blog and hobby platform without commercial intent or transactional services. The technical infrastructure is simple, using standard HTML, CSS, and JavaScript, with Plausible Analytics for minimal user tracking. The site is hosted with Porkbun LLC as the registrar and DNS provider. Security posture is basic, with no advanced security headers or policies detected, and DNSSEC is not enabled. Privacy and cookie policies are absent, indicating low privacy compliance. The domain is newly registered in December 2024, consistent with the site's content and purpose. Overall, the site is accessible, safe, and trustworthy but lacks formal security and privacy controls.

P

Private by Design, LLC

codi.link

61

codi.link is a web-based live editor platform focused on HTML, CSS, and JavaScript, providing users with real-time code editing and preview capabilities. The service targets web developers, learners, and programmers seeking an interactive playground for front-end development. The platform leverages modern web technologies including the Monaco Editor and is hosted with DNS services managed by Cloudflare. The domain is registered to Private by Design, LLC, a US-based entity, with a registration date in 2021, indicating a relatively new but legitimate business operation. The website content is professional, well-structured, and designed for ease of use, although it lacks explicit privacy and cookie policies.

’t Spant-Heemstede is a small Dutch company specializing in custom-designed and handcrafted furniture and interior paneling. Their website clearly targets both private individuals and businesses seeking bespoke interior solutions. The company emphasizes craftsmanship and personalized design, positioning itself as a niche local manufacturer with a focus on quality and customer satisfaction. The website content is well-structured and professionally presented, supporting their market position effectively. Technically, the website is built on WordPress using WPBakery Page Builder, incorporating modern web technologies such as HTTPS and Google reCAPTCHA for form security. The site demonstrates good mobile optimization and basic accessibility features, although there is room for improvement in performance and advanced SEO practices. The absence of cookie consent mechanisms and some security headers indicates partial compliance with privacy and security best practices. From a security perspective, the site benefits from HTTPS encryption and anti-bot measures but lacks comprehensive security headers and explicit incident response policies. No vulnerabilities or suspicious activities were detected in the analysis. WHOIS data aligns well with the business claims, showing transparent and consistent registration information, which supports the legitimacy of the domain. Overall, the website presents a moderate risk profile with good business credibility and technical implementation but could enhance privacy compliance and security posture to better protect user data and build trust.

V

VerzekeringsPlatform | schadeverzekeringen voor particulieren

verzekeringsplatform.nl

53

The website www.verzekeringsplatform.nl appears to be a small-scale insurance platform built using the Wix website builder. The site content is minimal with no visible privacy, cookie, or terms of service policies, and lacks contact information such as emails, phone numbers, or physical addresses. The technical infrastructure relies on Wix's standard scripts and hosting, with HTTPS enabled but missing important security headers. The site shows basic mobile optimization and limited SEO and accessibility features. Security posture is weak due to missing headers and lack of incident response or security policies. Overall, the site presents a low level of business credibility and privacy compliance, limiting trustworthiness and user confidence.

W

Wagenhof

wagenhof.nl

54

Wagenhof.nl is a Dutch real estate one-stop-shop website established since 2002, offering property-related services to the Dutch market. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern CMS with SEO optimization. The site implements cookie consent via Cookiebot and uses Google Tag Manager and Hotjar for analytics and user behavior tracking. However, it lacks explicit privacy policy and terms of service pages, and no direct contact information is found in the HTML content. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

C

Cavallaro Napoli

cavallaronapoli.com

69

Cavallaro Napoli operates an official e-commerce webshop specializing in fashion apparel for men and women. The site offers a professional shopping experience with features such as fast delivery, pay afterwards options, and a 30-day return policy. The brand targets fashion-conscious consumers primarily in the Netherlands and surrounding regions. The website is built on Magento, leveraging modern web technologies and integrates multiple marketing and analytics tools including Google Analytics, Hotjar, and Cookiebot for privacy compliance. Technically, the site demonstrates a mature digital infrastructure with HTTPS enforced, cookie consent mechanisms, and anti-CSRF protections. However, explicit security headers and detailed security policies are not evident. The site uses extensive third-party tracking and marketing services, indicating a robust marketing strategy but also raising privacy considerations. From a security perspective, the site is well-configured with SSL and cookie consent but lacks visible incident response or vulnerability disclosure information. The absence of WHOIS data for the domain is a notable concern, suggesting potential registration or privacy issues that warrant further investigation. Overall, Cavallaro Napoli presents a professional and trustworthy online retail presence with good technical and security foundations but would benefit from enhanced transparency in privacy policies, terms of service, and domain registration details.

M

Martin Magni

mekorama.com

48

Mekorama is an indie mobile puzzle game developed by Martin Magni, offering a unique experience with mechanical dioramas and user-generated content via QR codes. The game is available across multiple platforms including iOS, Android, Nintendo Switch, PlayStation, Xbox, and web browsers, positioning it as a niche but well-regarded title in the indie gaming market. The website provides rich content about the game, including links to app stores, console versions, and social media channels, but lacks formal business contact details and privacy-related policies. Technically, the website uses standard web technologies such as HTML5, CSS, and JavaScript, with Google Adsense for monetization and Google Fonts for typography. The site is mobile-optimized and has good SEO practices but lacks advanced security headers and explicit privacy or cookie policies. No forms are present, reducing attack surface but also limiting user interaction on the site. From a security perspective, the site uses HTTPS, but no additional security headers were detected in the provided data. The absence of privacy and cookie policies indicates potential compliance gaps with GDPR and other privacy regulations. The WHOIS data is unavailable, which reduces trust slightly but is not uncommon for small indie projects. No vulnerabilities or malicious content were detected, and the content is safe for general audiences. Overall, Mekorama's website is professionally presented with good content quality and business credibility for an indie game. However, improvements in privacy compliance, security headers, and WHOIS transparency are recommended to enhance trust and regulatory adherence.

P

Poki

poki.com

69

Poki is a well-established online gaming platform founded in 2001, offering a wide variety of free-to-play games accessible via web browsers on desktop and mobile devices. The platform emphasizes instant play without downloads or logins, targeting a broad general audience including families and casual gamers. Poki maintains a strong market position with over 90 million monthly users worldwide and collaborates with game developers by sharing advertising revenue. Technically, the site leverages modern web technologies including React and CDN services, ensuring fast performance and excellent mobile optimization. Security practices are robust with HTTPS enforcement, domain protection statuses, and security headers, though DNSSEC is not enabled. Privacy compliance is strong with comprehensive policies and consent mechanisms, reflecting a commitment to user data protection. However, explicit security policies and incident response contacts are not publicly detailed, and no vulnerability disclosure program is evident. Overall, Poki presents a professional, trustworthy, and user-friendly gaming environment with a solid security posture and compliance framework.

F

Fidlerówna

fidlerowna.com

51

The website www.fidlerowna.com is a personal portfolio site for Joasia Fidler-Wieruszewska, a Polish brand designer, art director, and illustrator based in Berlin. The site showcases her creative work and services including brand design, art direction, illustration, creative direction, exhibition design, and campaigns. The website is built on the Framer platform and hosted via framerusercontent.com, indicating a modern and visually oriented technical infrastructure. The site is mobile optimized and presents a professional design with clear navigation and relevant content for creative professionals and potential clients. Security posture is basic with no advanced security headers detected and no privacy or cookie policies present, which could be improved to enhance compliance and trust. The domain WHOIS data is unavailable, raising questions about domain registration legitimacy, but the site content itself is professional and safe. Overall, the website scores moderately on content quality, technical implementation, and business credibility but lacks in privacy compliance and security best practices.

P

Piet Terheyden

oni-icons.com

40

Oni Icons is a small technology-focused business founded in 2021 by Piet Terheyden, offering customizable icon packs primarily targeting designers and mobile users who want to personalize their iPhone and Android home screens. The website provides vector icon packs with easy color customization and instructions for use, positioning itself as a niche provider in the design tools market. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, jQuery, and integrates privacy-conscious analytics via Plausible. The site is mobile optimized with good navigation and professional design, though accessibility features are basic. Security posture is moderate with HTTPS enforced and domain registration protections in place, but lacks DNSSEC and security headers. Privacy compliance is limited, with no cookie consent mechanism and only a basic privacy policy present. Overall, the site is legitimate and functional but could improve in security and privacy transparency.

P

POOL

pool.day

50

The website pool.day is a small technology-focused web application designed to allow users to save anything with a screenshot. The site is built using the Framer platform and integrates plausible.io for analytics, indicating a modern but lightweight technical infrastructure. The content is minimal but functional, targeting a general audience interested in productivity tools. The website lacks comprehensive privacy, cookie, and terms of service policies, and no contact or security policy information is provided, which limits its compliance posture and business transparency. Security features such as HTTP security headers are absent, and the domain registration is privacy protected, which is common for small projects but reduces trust signals. Overall, the site presents a basic but clean user experience with moderate technical maturity.

P

Private by Design, LLC

spinoff.studio

51

Spinoff Studio is a small, independent product studio founded by Maxime Junique and Piet Terheyden, based in Berlin. The company focuses on crafting delightful product experiences, offering design and development services primarily targeted at startups and product teams. The website reflects a professional and modern digital presence built using the Framer platform, showcasing the founders and their projects with clear branding and social media integration. The business model is service-oriented, emphasizing bespoke product creation and collaboration.

N

Neatnik

cache.lol

49

omg.lol is a small technology company operated by Neatnik, offering personalized web addresses, profile pages, and email forwarding services with a strong focus on privacy and community engagement. Their market position is niche, targeting individuals and small communities seeking a fun and private web presence. The business model is subscription-based with a transparent flat annual fee, emphasizing simplicity and user control. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and SVG graphics, delivering a fast and mobile-optimized user experience. The integration with Fastmail for email sending enhances their service offering. Security posture is solid with HTTPS enforced and privacy-respecting practices, though there is room for improvement in security headers and formal policies. Overall, the site is professional, trustworthy, and well-aligned with its stated mission.

D

Domains By Proxy, LLC

cactus.chat

62

Cactus Comments is an open source federated comment system built on the Matrix protocol, targeting web developers and website owners who want decentralized, privacy-respecting comment functionality. The project is small and community-funded, with source code openly available under LGPLv3 and AGPLv3 licenses. The website is professionally designed with good content quality and clear navigation, reflecting a mature open source project. Technically, it uses modern web standards and is hosted on Hetzner, a reputable provider. However, there are gaps in privacy compliance and security policies, with no visible privacy or cookie policies and no incident response information published. The security posture is moderate, with HTTPS implied but no explicit security headers detected. Overall, the domain registration is privacy protected but consistent with the nature of the project, and no suspicious patterns were found.

W

Wasona: a crash course in Toki Pona

wasona.com

54

Wasona.com is an educational website dedicated to teaching the constructed language Toki Pona through a structured, multi-part course. The site offers lessons, exercises, and community links, targeting language learners and enthusiasts interested in this niche language. The business model appears to be community-supported and open source, with content dual-licensed under Creative Commons and source code available on GitHub. The website is newly launched in 2024 and hosted on infrastructure associated with Amazon Registrar, Inc., likely AWS. Technically, the site uses modern static site generation technology (Astro v5.7.10), Google Fonts, and minimal JavaScript for theme toggling and analytics via GoatCounter. The site is fast, mobile-optimized, and accessible with good SEO practices. However, it lacks CMS and advanced hosting platforms, reflecting a lightweight, static content approach. From a security perspective, the site uses HTTPS and professional DNS hosting but lacks DNSSEC and security headers such as Content-Security-Policy or Strict-Transport-Security. No forms or sensitive data collection mechanisms are present, reducing attack surface. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. No incident response or vulnerability disclosure information is provided. Overall, the site is low risk with a focus on educational content and minimal tracking. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and publishing a vulnerability disclosure policy to enhance trust and compliance.

L

Language Creation Society

fiatlingua.org

52

Fiat Lingua is an educational and archival website dedicated to constructed language (conlang) articles, operated by the Language Creation Society, a US-based organization. The site serves a niche audience of linguists, conlang enthusiasts, and scholars by providing professionally authored content and downloadable resources. The business model is non-commercial, focusing on community and educational value rather than direct monetization. The website is built on WordPress and hosted by DreamHost, leveraging modern web technologies and providing a generally good user experience with clear navigation and mobile optimization. However, the site lacks explicit privacy and cookie policies, which impacts compliance and user trust. Security posture is solid with HTTPS enabled and domain transfer protections, but could be improved by enabling DNSSEC and adding security headers. No contact information or incident response details are provided, limiting direct communication channels. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures.

M

Matt Rutherford

mattrutherford.co.uk

58

Matt Rutherford operates a personal brand website focused on sharing weekly insights and tips related to career growth, personal development, and clarity in work and life. The site offers a newsletter subscription, blog articles, and various tools and resources aimed at individuals seeking to improve their professional and personal lives. The business model centers on content publishing and coaching services, positioning Matt Rutherford as a thought leader in this niche. The website is professionally designed, well-branded, and consistently updated with relevant content, targeting a general audience interested in self-improvement and career success. Technically, the website is built on the Ghost CMS platform, leveraging modern web technologies including JavaScript, CSS, and HTML5. It integrates third-party services such as Plausible Analytics for privacy-focused tracking and Ghostboard for engagement metrics. The site demonstrates good performance, mobile optimization, and SEO practices, although some security headers are missing. The use of structured data (JSON-LD) enhances search engine understanding and visibility. From a security perspective, the site enforces HTTPS and uses secure forms for newsletter subscription. However, it lacks explicit privacy and cookie policies, security.txt files, and incident response contact information, which are important for compliance and trust. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS lookup for the domain failed due to a naming rules error, which is unusual but the site is live and functional, indicating legitimacy despite the lack of WHOIS transparency. Overall, the website presents a low-risk profile with strong content quality and business credibility but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

R

reaper | Minimalist • Open Source Enthusiast • Programmer

reaper.is

59

The website reaper.is is a personal portfolio site of a seasoned developer from India with over 8 years of experience in web development, tooling, automation, and parsers. The site emphasizes open source contributions and simplicity in design and content. The target audience is primarily developers and open source enthusiasts. The business model is individual personal branding and showcasing projects rather than commercial services. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and Highlight.js for code syntax highlighting. External dependencies are minimal and performance is moderate with good mobile optimization. Security posture is basic with no detected security headers or policies, and no HTTPS status provided in the data. Privacy and cookie policies are absent, and no contact or incident response information is available, limiting compliance and transparency. The domain WHOIS data is consistent with the website content and shows a legitimate registration without privacy protection. Overall, the site is safe, professional, and trustworthy but could improve in security and compliance aspects.

L

Leon Mika

lmika.org

55

The website lmika.org is a personal blog and portfolio site for Leon Mika, a software developer and occasional music writer based in Melbourne, Australia. The site features blog posts, photos, and links to various technology and personal interest sites. It is built using the Hugo static site generator and hosted on the Micro.blog platform, indicating a modern and lightweight technical infrastructure. The site includes JavaScript enhancements such as a service worker and lightbox functionality for images, and uses minimal third-party analytics via tinylytics.app. From a security perspective, the site uses HTTPS and registers a service worker, but lacks advanced security headers and does not have visible privacy or cookie policies, nor contact information for security incidents or data protection officers. The domain is privacy protected via Contact Privacy Inc., which is typical for personal sites, and the domain age aligns with the site's content history. No vulnerabilities or suspicious patterns were detected in the content or technical setup. Overall, the site presents a good level of content quality, technical implementation, and business credibility for a personal blog, but falls short on privacy compliance and security best practices. There is no evidence of adult or unsafe content, and the site is fully accessible without WAF or blocking mechanisms.

L

Lou Plummer

amerpie.lol

55

Amerpie.lol is a personal blog operated by Lou Plummer, focusing on topics such as technology (especially Mac-related), hiking, photography, music, and personal reflections. The site is hosted on the Micro.blog platform and uses a static site generator (Hugo), reflecting a modern and lightweight technical infrastructure. The blog targets general internet users interested in personal stories and cultural content, with no evident commercial or e-commerce activities. The domain is relatively new, registered in early 2024, and uses privacy protection services, which is appropriate for a personal blog.

S

Sebastian De Deyne

sebastiandedeyne.com

62

sebastiandedeyne.com is a personal professional blog and portfolio site of Sebastian De Deyne, a web developer and designer. The site features a rich collection of blog posts focused on web development, programming, design, and related technology topics. It targets developers, designers, and tech enthusiasts, positioning itself as a trusted source of knowledge and inspiration in the web technology niche. The business model is primarily content-driven personal branding and knowledge sharing. The domain has been active since 2013, reflecting a mature and stable online presence.