Security Directory

A

Andrea Contino

gwtf.it

55

The website contino.com is a personal weblog operated by Andrea Contino, focusing on communication, gaming, technology, and lifestyle topics. It serves a niche audience interested in personal reflections and commentary on these subjects. The site has been active since 2009, supported by a domain registered since 1997, indicating a stable and long-term presence. The business model is non-commercial, with no advertising or paid content, emphasizing personal expression and community engagement. Technically, the website is built with standard HTML, CSS, and JavaScript, without reliance on major CMS platforms or frameworks. The site demonstrates good mobile optimization and SEO practices but lacks advanced accessibility features. Hosting and DNS services are managed by Porkbun LLC, with domain security measures such as clientDeleteProhibited and clientTransferProhibited status enabled, though DNSSEC is not implemented. From a security perspective, the site uses HTTPS (implied by URLs), but no explicit security headers or incident response policies are published. There is no privacy or cookie policy, which is a compliance gap especially under GDPR. No analytics or tracking technologies are detected, indicating minimal user tracking and good privacy by default. The domain registration data aligns well with the website content, supporting legitimacy and trustworthiness. Overall, the website is a well-maintained personal blog with good content quality and moderate technical implementation. Security and privacy compliance could be improved by adding relevant policies and security headers. The site poses low risk and is safe for general audiences.

J

Jarrod Blundy

heydingus.net

51

HeyDingus is a personal blog operated by Jarrod Blundy, focusing on technology, outdoor activities, and curated internet content. The site serves a niche audience of technology enthusiasts and outdoor lovers, offering blog posts, shortcuts, and digital products. The business model is primarily content-driven with monetization through tips, affiliate marketing, and a small store. The website is well-branded, professionally designed, and regularly updated, reflecting a small but engaged community presence. Technically, the website is hosted on Blot.im, leveraging a simple but effective tech stack including HTML5, CSS, JavaScript, and integrations with Micro.blog and Carbon Ads. The site is mobile-optimized and performs well, with fast loading times and good SEO practices. Accessibility is basic but functional. The site uses HTTPS with a strong SSL configuration, though it lacks DNSSEC and some recommended security headers. From a security perspective, the site demonstrates good baseline practices such as HTTPS enforcement and domain transfer/update protections. However, it lacks explicit privacy and cookie policies, security.txt files, and vulnerability disclosure mechanisms, which are important for compliance and transparency. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the website content and shows no suspicious patterns. Overall, HeyDingus is a trustworthy, well-maintained personal blog with solid technical foundations but could improve its privacy compliance and security posture by adding formal policies and security headers. The risk level is low, but enhancements in compliance and security best practices are recommended to maintain trust and meet evolving standards.

N

Numeric Citizen Space

numericcitizen.me

48

Numeric Citizen Space is a personal technology blog operated by an individual contributor focused on Apple products, software, apps, photography, and personal stories. The site targets Apple enthusiasts, digital nomads, and technology readers, offering regularly updated articles and a subscription-based newsletter model. The business model is content-driven with donation support and subscription options. Technically, the website is built on the Ghost CMS platform, hosted and DNS managed by Cloudflare, and uses modern web technologies including JavaScript and CSS. The site is mobile-optimized, fast-loading, and includes privacy-focused analytics services such as Plausible and Cloudflare Web Analytics. Security posture is good with HTTPS enforced and domain transfer protection, but lacks some security headers and DNSSEC. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve compliance and security transparency.

M

Maxwell Omdal

dizzard.net

59

The website dizzard.net is a personal portfolio and blog belonging to Maxwell Omdal, focusing on maker culture, woodworking, resource sharing, and technology projects. It serves as a platform to showcase articles and projects, targeting makers, hobbyists, and technology enthusiasts. The site is well designed with good navigation and mobile optimization, providing relevant and quality content for its niche audience. Technically, the site uses modern technologies such as Tailwind CSS, Font Awesome, and GoatCounter analytics, hosted with a reputable registrar and DNS provider. Security posture is adequate with HTTPS enabled and domain protections like clientDeleteProhibited, but lacks DNSSEC and security headers. Privacy compliance is minimal with no privacy or cookie policies present. Overall, the site is safe, trustworthy, and professional but could improve in privacy and security policy transparency.

Luke’s Wild Website is a personal portfolio and blog site operated by Luke Harris, a developer and designer based in Chicago. The site serves as a platform for sharing blog posts, notes, and personal insights, targeting a general audience interested in technology and personal content. The website is built on the Ghost CMS platform, utilizing modern web technologies such as HTML5, CSS3, and JavaScript, with a clean and consistent design that supports good user experience and mobile optimization. However, the site lacks explicit contact information, privacy policies, and security headers, which impacts its overall trustworthiness and compliance posture. From a technical perspective, the website demonstrates moderate performance and good SEO optimization but lacks advanced security configurations such as HTTPS enforcement and security headers. The absence of WHOIS registration data raises concerns about domain legitimacy, although the site content appears genuine and updated recently. No advertising or analytics services are detected, indicating minimal user tracking and a privacy-conscious approach, albeit without formal policies. Security posture is currently weak due to missing HTTPS confirmation, lack of security headers, and no visible incident response or data protection policies. The site does not expose sensitive data or show signs of vulnerabilities but would benefit from implementing standard security best practices and publishing privacy and cookie policies to improve compliance and user trust. Overall, the website is functional and professional for a personal blog but requires improvements in security and compliance to enhance credibility and protect visitors.

B

Ben Werdmuller

werd.io

57

Werd I/O is an independent media and blogging platform authored by Ben Werdmuller, focusing on topics at the intersection of technology, media, and democracy. The website operates on a reader-supported subscription model, providing thoughtful essays and articles to a general audience interested in societal and technological issues. The market position is niche but credible, with a small but engaged audience. The business is small-sized, US-based, and founded in 2013, reflecting a mature presence in independent digital media. Technically, the site is built on the Ghost CMS platform, leveraging modern web technologies including JavaScript, CSS, and Cloudflare DNS services. The site demonstrates good performance, mobile optimization, and SEO practices. However, accessibility is basic and could be improved. The technical infrastructure is modern and well-maintained, supporting a smooth user experience. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited status on the domain, indicating domain transfer protection. However, DNSSEC is not enabled, and no security headers are detected, which are areas for improvement. There is no visible privacy or cookie policy, nor incident response or vulnerability disclosure information, which impacts compliance and trust. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, adding security headers, and providing incident response contacts to improve user trust and regulatory compliance.

Ivan Moreale's website is a personal portfolio showcasing graphic design services with a casual and informal tone. The site targets a general audience interested in creative design work, emphasizing personal branding rather than corporate presence. The business model appears to be freelance or individual service provision with a niche market position. The website is minimalistic, with limited content and contact information, primarily an email and Instagram link. Technically, the site is built with basic HTML, CSS, and JavaScript without any detected CMS or frameworks. Hosting is managed via Hover, a common domain and DNS provider. The site shows moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. No analytics or tracking technologies are present, indicating minimal data collection. From a security perspective, the site lacks critical security headers and does not indicate HTTPS enforcement explicitly. DNSSEC is not enabled, and no privacy or cookie policies are published, which impacts compliance posture. The WHOIS data shows a stable domain registration with appropriate protections against unauthorized transfers, consistent with a legitimate personal brand site. No vulnerabilities or incident response information is available. Overall, the website presents a low-risk profile but would benefit from improved security practices, privacy compliance, and richer content to enhance trust and professionalism.

M

Mike Walsh

elmikewalsh.com

61

The website elmikewalsh.com serves as a personal portfolio and blog for Mike Walsh, a front-end web designer, developer, and translator based in Villarrica, Chile. The site highlights his skills, writings, and professional presence with links to his GitHub, Medium, and Mastodon profiles. The business model is that of an individual professional showcasing services and content to a general audience interested in technology, politics, humor, and life. The site is well-structured, visually consistent, and optimized for mobile devices, reflecting a good level of digital maturity for a personal brand. Technically, the website is built using modern web standards including HTML5, CSS3, JavaScript, and JSON-LD structured data for SEO. It uses a static site generator (Publii), which contributes to fast loading times and good performance. The site is served over HTTPS with a valid SSL certificate, and minimal external scripts are used, primarily for analytics via Cloudflare Insights. Accessibility and SEO optimizations are present but could be enhanced further. From a security perspective, the site enforces HTTPS and does not expose sensitive data or use vulnerable libraries. However, it lacks explicit security headers and does not provide privacy, cookie, or terms of service policies, which are important for compliance and user trust. No contact information for security incidents or vulnerability disclosure mechanisms are present. The WHOIS data is unavailable or the domain is unregistered, which raises concerns about domain legitimacy and trustworthiness. Overall, the website is professional and safe for general audiences but would benefit from improved privacy compliance, clearer domain registration information, and enhanced security practices. Strategic recommendations include publishing privacy and cookie policies, adding security headers, providing contact channels for incident response, and implementing a vulnerability disclosure policy to strengthen trust and compliance.

R

Rosalind Croad

rosalindcroad.com

52

Rosalind Croad is a BAFTA-nominated producer and entrepreneur specializing in coaching overwhelmed entrepreneurs to optimize their time and upscale their businesses. The website showcases her background as co-founder and COO of Affiliate World, a successful international online marketing events company, and highlights her current focus on creative projects, workshops, and one-day intensives. The business targets creative solopreneurs and tech companies, offering services centered on time management and positive social impact. Technically, the website is built on the Cargo Collective platform using modern web technologies such as HTML5, CSS3, JavaScript, and jQuery, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible contact information, which may affect trust and regulatory adherence. Overall, the website is professional and trustworthy but would benefit from enhanced security and compliance measures.

Skyhold.org is a personal website operated by C Jackdaw, a writer and witch, serving as a platform for creative expression, personal blogging, and resource sharing. The site targets a niche audience interested in writing, witchcraft, solarpunk, ADHD, and related topics. It is a small-scale, non-commercial site with regular content updates and a modest but consistent brand presence. The business entity behind the domain is Private by Design, LLC, a US-based organization, which aligns with the website's personal and creative nature. Technically, the site is hand-coded with standard HTML, CSS, and JavaScript, leveraging modern IndieWeb protocols such as IndieAuth and Webmention. Analytics are implemented via privacy-conscious services like GoatCounter and Tinylytics, reflecting a minimal user tracking approach. The site demonstrates good mobile optimization and basic accessibility but lacks advanced SEO and security headers. Hosting details are not explicit, but DNS indicates use of messagingengine.com name servers, possibly related to email hosting. From a security perspective, the site uses HTTPS and has domain status protections against unauthorized transfer or deletion. However, it lacks DNSSEC and common security headers, which are recommended to enhance security posture. No privacy or cookie policies are present, indicating compliance gaps. No forms or input fields are present, reducing attack surface but also limiting user interaction. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is low given the personal nature and limited business impact of the site. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and considering a security.txt file for vulnerability disclosure. These steps would improve trust, compliance, and security without significant overhead.

F

fLaMEd fury

flamedfury.com

55

fLaMEd fury is a personal website and blog operated by an individual known as fLaMEd, focusing on web culture, personal interests, and collections such as books and records. The site serves as a digital diary and a curated index of various personal content, targeting a general audience interested in web and personal storytelling. The website is small-scale and niche, with a consistent brand and good content quality. Technically, the site is built using modern web standards and the Eleventy static site generator, hosted with Cloudflare as registrar and DNS provider. The site demonstrates good performance, mobile optimization, and accessibility, with no detected tracking or advertising scripts, reflecting a privacy-conscious approach. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, and does not publish formal security or incident response policies. Overall, the site is trustworthy and well-maintained but could improve privacy compliance and security posture by adding cookie consent and security policies.

M

Matt Stein

mattstein.com

59

Matt Stein's website serves as a personal portfolio and blog showcasing his work as a web designer, developer, and writer based in Bend, Oregon. The site is well-structured, featuring curated writings and recent posts, targeting a general audience interested in technology and personal insights. The business model is that of a personal brand, with no commercial storefront but with links to social media and donation platforms such as Ko-fi. The domain is well-established, created in 2004, indicating a mature online presence. Technically, the site is built using modern technologies including Astro framework and JavaScript, hosted via Cloudflare infrastructure. It demonstrates excellent mobile optimization, good accessibility, and SEO practices. The use of Umami analytics reflects a privacy-conscious approach to user tracking. The site loads quickly and is free from broken elements or errors. From a security perspective, the website enforces HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and important security headers such as Content-Security-Policy. There are no visible vulnerabilities or exposed sensitive data. Privacy and cookie policies are absent, which is a compliance gap. Incident response and vulnerability disclosure mechanisms are not present. Overall, the website is trustworthy, professional, and safe for general audiences. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and providing incident response contacts to enhance security posture and compliance.

The website '𓆱 softlandings' appears to be a personal or thematic blog with dated posts and minimal business or commercial content. It does not present clear business information, contact details, or commercial services, indicating a small-scale or individual operation. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript without detectable CMS or advanced frameworks. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is weak due to absence of HTTPS confirmation, security headers, and privacy policies. The WHOIS data is malformed and provides no registrar or registrant information, limiting trust and verification. Overall, the site is safe for general audiences but lacks professional business and security maturity.

The website chrishannah.me is a personal blog and portfolio site maintained by Chris Hannah. It features a variety of content including essays, technical articles, photography, and personal updates. The site targets a general audience interested in technology, programming, and personal storytelling. The business model is primarily content publishing for personal branding and sharing knowledge. The site is small-scale and has been active since 2016, with consistent content updates and a clear personal identity. Technically, the site is well-structured with modern HTML5 and CSS3 standards, uses JavaScript libraries such as Highlight.js for code syntax highlighting, and Lightbox.js for image display. Hosting is via Vercel DNS, indicating a modern and performant infrastructure. The site is mobile-optimized and has good navigation clarity, although accessibility features are basic. SEO optimization is present but could be improved. From a security perspective, the site enforces HTTPS with good SSL configuration and has domain transfer protections enabled. However, it lacks DNSSEC and security headers such as Content Security Policy or HSTS. There are no published privacy or cookie policies, nor a security.txt or vulnerability disclosure page, which are areas for improvement. Analytics are minimal and privacy-respecting, using Tinylytics with no aggressive tracking. Overall, the site is trustworthy and professional for a personal blog but has gaps in privacy compliance and security best practices. Strategic recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and publishing a vulnerability disclosure policy to enhance trust and compliance.

Feadin.eu is a personal blog maintained by Paolo, an EU citizen and IT professional with interests in film and personal opinions. The site serves as a platform for sharing weekly film-related posts, lists, and links. It targets a general audience interested in cinema and personal reflections. The business model is non-commercial, focusing on content sharing rather than monetization or services. The website is built using the Hugo static site generator with the PaperMod theme, indicating a modern, lightweight technical infrastructure. The site is moderately optimized for mobile and SEO, with basic accessibility features. Security posture is minimal, lacking standard security headers and privacy policies, which presents compliance and trust challenges. No contact or business information is provided, limiting business credibility. Overall, the site is safe and suitable for general audiences but would benefit from enhanced security and privacy compliance measures.

T

Tangible Life

tangiblelife.net

49

Tangible Life is a personal blog established in 2021 that publishes reflective and experiential content focused on lifestyle, technology, and personal growth. The site targets readers interested in the IndieWeb community and thoughtful living. It operates as a small-scale personal publishing platform without commercial transactions or extensive business infrastructure. Technically, the website uses a simple tech stack including HTML5, CSS, JavaScript with jQuery and Galleria.js, and is likely hosted on Blot.im, a platform for personal blogs. The site demonstrates good design quality, mobile optimization, and clear navigation, though accessibility and SEO optimizations are basic. Security posture is moderate with HTTPS implied but lacking DNSSEC and security headers. No privacy or cookie policies are present, indicating compliance gaps. Analytics usage is minimal via Tinylytics, with no forms or personal data collection evident. The domain registration is consistent and appropriate for the site’s age and content, registered with Porkbun LLC since 2021 with no privacy protection. Overall, the website is trustworthy as a personal blog but would benefit from improved security and privacy compliance.

N

nix webring

nixwebr.ing

54

The website 'nixwebr.ing' serves as a community-driven webring platform focused on Nix and NixOS enthusiasts. It provides a curated list of member websites, many linking to their NixOS configuration repositories, fostering collaboration and sharing within the niche technical community. The site operates on an open contribution model via pull requests, emphasizing transparency and community involvement. Technically, the site is built with standard HTML, CSS, and JavaScript, featuring a clean and responsive design with fast performance and basic accessibility. It uses HTTPS and includes Plausible Analytics for privacy-conscious visitor tracking. However, it lacks formal privacy, cookie, and terms of service policies, and does not provide direct contact emails or phone numbers, relying instead on external profile links for contact. Security posture is generally good with HTTPS and minimal external scripts, but could be improved by adding security headers and formal security policies. Overall, the site is trustworthy and safe, with no adult or questionable content detected.

W

William Harrison

wdh.gg

67

William Harrison's website is a personal portfolio showcasing his skills as a full-stack developer based in Australia. The site highlights his experience in multiple programming languages and his involvement in various open source and volunteer projects. The business model is centered around personal branding and project contributions, targeting developers and technology enthusiasts. The website is hosted on Cloudflare Pages and uses modern web technologies including HTML5, CSS3, JavaScript, and Cloudflare's Turnstile captcha for form security. The site is well-optimized for mobile devices and SEO, with a professional design and clear navigation. Security posture is solid with HTTPS enforced and captcha protection on forms, though it lacks some security headers and formal policies. No privacy or cookie policies are present, which impacts compliance scores. Overall, the domain registration aligns well with the website content, indicating legitimacy and trustworthiness.

C

Cyprezz LLC.

planetminecraft.com

64

Planet Minecraft is a well-established community platform dedicated to Minecraft players and content creators worldwide. Operating since 2010 under Cyprezz LLC., it offers a wide range of user-generated content including maps, skins, mods, texture packs, and data packs. The site fosters social interaction through forums, groups, and content jams, positioning itself as a leading fan community in the Minecraft ecosystem. Its business model relies on community engagement and advertising revenue, supported by a large active user base exceeding 5 million members. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and ad networks like Google Adsense and Venatus. It is mobile-optimized and implements HTTPS with good security practices such as CSRF tokens. However, it lacks some advanced security headers and explicit cookie consent mechanisms, which are important for GDPR compliance. The site integrates multiple analytics and tracking services, reflecting a moderate level of user tracking typical for community platforms. From a security perspective, the site demonstrates a solid posture with encrypted connections and no visible vulnerabilities or exposed sensitive data. The absence of a security.txt file and dedicated incident response contacts suggests room for improvement in vulnerability disclosure and incident management. The WHOIS data is unavailable, possibly due to privacy protection or query issues, which slightly reduces trust but is mitigated by the site's long history and consistent branding. Overall, Planet Minecraft presents a trustworthy, family-friendly environment with high-quality content and good technical implementation. Strategic enhancements in privacy compliance, security transparency, and WHOIS data availability would further strengthen its risk profile and user trust.

B

Bitwarden, Inc.

bitwarden.com

85

Bitwarden, Inc. operates a leading open source password management platform trusted by millions globally, serving individuals, families, businesses, and enterprises. Their product suite includes password management, secrets management, passwordless authentication, and developer tools, positioning them strongly in the cybersecurity technology market. The company emphasizes transparency, security, and compliance, supported by certifications such as SOC 2 and ISO 27001. Their business model is primarily SaaS with free and paid tiers, including self-hosting options for enterprises. Technically, Bitwarden employs a modern React-based web platform, leveraging Cloudflare for hosting and CDN services, and integrates analytics tools like Google Tag Manager and Plausible Analytics. The website demonstrates excellent performance, mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. Security posture is robust, with enforced HTTPS, comprehensive security headers, a bug bounty program, and regular compliance audits. However, DNSSEC is not enabled, and a security.txt file is absent, representing areas for improvement. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact information is available primarily via contact forms, with no explicit phone numbers or emails disclosed. Overall, Bitwarden presents a high-trust, professional, and secure online presence with minimal risk. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing incident response transparency to further strengthen their security and compliance posture.

P

Pixelfed

pixelfed.social

61

Pixelfed.social is the original and main instance of the decentralized photo sharing social media platform Pixelfed, operated by the lead developer known as @dansup. The platform offers a federated social media experience focusing on photo posts, albums, filters, and video support, targeting general users interested in privacy-respecting social media alternatives. The website is professionally designed with good content quality and clear navigation, supporting mobile optimization and modern web technologies such as Vue.js and Plyr media player. Hosting and DNS are managed by Cloudflare, ensuring reliable performance and security. The domain is well-established since 2018, consistent with the business history. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and some security headers. There is no explicit public security or incident response policy, and no cookie consent mechanism was detected, which may impact GDPR compliance. The platform enforces community rules prohibiting hate speech, harassment, explicit content, and illegal activities, contributing to a safe user environment. Overall, the security posture is good but could be improved with enhanced policies and technical controls. The business model centers on providing a decentralized, federated photo sharing service with a strong community focus. The site maintains transparency with contact email and clear rules but lacks some formal compliance disclosures. The platform is positioned as a privacy-conscious alternative to mainstream social media, appealing to users valuing decentralization and open-source principles. Strategic recommendations include implementing cookie consent, enabling DNSSEC, publishing security policies, and adding security headers to strengthen trust and compliance.

P

PrivacyGuardian.org llc

sakurajima.moe

63

Sakurajima.moe is a specialized Mastodon server catering to the Anime, Manga, and Japanese media fandom and content creator community. It offers a decentralized social media platform with enhanced moderation, custom features, and integration with related platforms such as Misskey/Sharkey and forums. The server emphasizes a safe, inclusive, and non-toxic environment, supported by a small but active user base and funded through donations. Technically, it leverages a customized Mastodon Glitch fork, hosted on ReliableSite with media storage on Linode, and employs Elasticsearch and Meilisearch for search capabilities. Security practices include daily backups, strict moderation policies, and domain transfer protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is partial, with a comprehensive privacy policy but no cookie consent mechanism. Overall, the site demonstrates a mature and professional approach to community management and technical infrastructure, suitable for its niche audience.

J

Jason Cameron

jasoncameron.dev

64

Jason Cameron's website is a professional personal portfolio showcasing his expertise in backend web development, scalable systems, DevOps, and cybersecurity. The site highlights his contributions to major open source projects and organizations, positioning him as a credible and skilled developer with a focus on security and automation defenses. The portfolio targets developers, technology professionals, and organizations seeking expertise in these areas. Technically, the site is built with modern frameworks like SvelteKit, uses Golang and other technologies for projects, and demonstrates good performance and mobile optimization. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks explicit security headers and formal privacy or cookie policies. Overall, the site is trustworthy and professional but could improve compliance and security posture by adding relevant policies and contact information.

L

Linktree Pty Ltd

bento.me

60

Bento.me is a technology platform owned by Linktree Pty Ltd, specializing in providing creatives and content creators with rich, customizable link-in-bio pages that aggregate various content types such as videos, podcasts, newsletters, and paid products. The platform positions itself as a modern, beautiful alternative to traditional link-in-bio services, targeting a niche market of digital creators seeking to showcase and monetize their content in one place. The website demonstrates a good level of digital maturity, leveraging modern web technologies including Webflow CMS, Cloudflare DNS, and advanced analytics tools like PostHog and Segment. Mobile optimization and user experience are well addressed, with a professional design and clear navigation. However, the site lacks explicit privacy and cookie policies, which is a notable compliance gap. Security posture is generally good with HTTPS enforced and domain registration protections in place, but the absence of DNSSEC and security headers suggests room for improvement. Overall, Bento.me presents a credible and trustworthy business with a solid technical foundation but should enhance privacy compliance and security best practices to strengthen its risk profile.

D

Dracula Team

draculatheme.com

66

Dracula Theme is a well-established open source project providing a popular dark color scheme for over 300 applications, primarily targeting developers and programmers. The website showcases a professional design with clear branding and a strong community presence, evidenced by a highly starred GitHub repository. The business model includes free theme offerings alongside a premium Dracula PRO product sold via a partner store. Technically, the site leverages modern web technologies such as Next.js and React, with good performance and mobile optimization. Security posture is strong with HTTPS and multiple security headers implemented, though the absence of explicit privacy and cookie policies, as well as contact information for security incidents, represents compliance gaps. Overall, the site is trustworthy and professional but could improve privacy compliance and incident response transparency.

R

RippleUI | TailwindCSS Components

ripple-ui.com

54

RippleUI is a small technology business offering a comprehensive collection of reusable Tailwind CSS components designed to streamline modern interface design. The website serves developers and UI designers by providing easy-to-integrate UI components, thorough documentation, and community support via Discord and GitHub. The business operates primarily through open-source distribution channels such as npm and CDN links, positioning itself as a niche provider within the Tailwind CSS ecosystem. Technically, the website is built on a modern stack including Next.js and React, with excellent mobile optimization and fast performance. The site demonstrates good SEO and accessibility practices, contributing to a professional user experience. Security posture is moderate; HTTPS is implied, but security headers and explicit policies are absent. The lack of WHOIS registration data and absence of privacy and cookie policies represent compliance and trust gaps. Overall, the site is professional and trustworthy in content but would benefit from improved transparency and security disclosures.

C

Casting Call Club

castingcall.club

68

Casting Call Club is a well-established online platform that facilitates collaboration among creative professionals such as voice actors, streamers, audio engineers, artists, writers, and musicians. It offers services including talent discovery, project collaboration, role management, and portfolio showcasing. The platform targets both professionals and beginners globally, boasting a large user base and significant monthly activity. Technically, the website employs modern web technologies including JavaScript frameworks, Google Analytics, Stripe for payments, and a consent management platform, hosted on a CDN for performance. The design is professional, mobile-optimized, and accessible, providing a positive user experience. Security-wise, the site enforces HTTPS and uses CSRF tokens, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a consent mechanism but no clearly linked privacy or terms pages. WHOIS data is unavailable, likely due to privacy protection, which is common for such platforms. Overall, the site is legitimate and trustworthy but could improve transparency and security practices.

3

32-Bit Cafe

32bit.cafe

46

32-Bit Cafe is a small, community-driven platform focused on revitalizing the personal web through self-expression and creativity. It serves a niche audience of website hobbyists and professionals who seek alternatives to mainstream social media, offering various free services such as email, collaborative documents, RSS aggregation, and community forums. The website is well-structured with good navigation and content relevance, supporting a positive user experience for its target audience. Technically, the site uses standard web technologies (HTML, CSS, JavaScript) without reliance on major CMS or frameworks, indicating a lightweight and straightforward infrastructure. Security posture is moderate; while HTTPS is implied, no security headers or DNSSEC are enabled, and no cookie consent mechanism is present. The domain is privacy protected, which aligns with the community's ethos and non-commercial nature. Overall, the site is safe, trustworthy, and professionally maintained but could improve in security and privacy compliance aspects.

lojban.io is a specialized educational platform dedicated to the study and promotion of the constructed language Lojban. It offers free and open-source resources including courses, learning decks, and community engagement via a Discord server. The website targets language enthusiasts and learners interested in logical and constructed languages, positioning itself as a niche educational resource with a small but active user base. The platform is relatively young, established in 2020, and maintains a consistent brand and content quality with regular updates and community involvement. Technically, the website employs modern web technologies such as Bootstrap for styling, Font Awesome for icons, and integrates Google Analytics and Tag Manager for user tracking. It also supports Progressive Web App features, enhancing user experience across devices. Hosting and DNS services are managed via Cloudflare, providing performance and security benefits. The site demonstrates moderate performance and good mobile optimization but lacks some advanced accessibility features. From a security perspective, the site uses HTTPS with a good SSL configuration and has domain transfer protections in place. However, it lacks DNSSEC and important security headers like Content-Security-Policy and X-Frame-Options, which are recommended to enhance security posture. Privacy compliance is limited due to the absence of privacy and cookie policies, which is a notable gap given the use of tracking technologies. No incident response or vulnerability disclosure mechanisms are present. Overall, lojban.io presents a trustworthy and professional educational resource with a solid technical foundation but would benefit from improved privacy compliance and enhanced security headers. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and establishing a vulnerability disclosure process to strengthen trust and compliance.

F

Finĉjejo

fincxjejo.com

62

The website fincxjejo.com is a personal site dedicated to sharing ideas, projects, and creations related to the Esperanto language by an individual named Fingtam (Finĉjo). It serves as a cultural and educational platform targeting Esperanto learners and enthusiasts. The site is hosted on Google Sites, leveraging Google's infrastructure and technologies such as Google Fonts and APIs. The content is primarily textual with links to social media channels including YouTube and Facebook. The site lacks formal business structure and operates as a small-scale personal project without commercial intent. From a technical perspective, the site is built on a modern, stable platform (Google Sites) ensuring reliable hosting and HTTPS security. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. No custom frameworks or CMS beyond Google Sites are used. The absence of security headers beyond HTTPS is noted, and no forms or interactive data collection mechanisms are present. Security posture is adequate for a personal site with HTTPS enforced, but the lack of additional security headers and absence of privacy or terms of service pages indicate room for improvement. The WHOIS data is unavailable, raising concerns about domain registration legitimacy, although the site content and hosting platform suggest no malicious intent. Privacy compliance is minimal, with only a cookie consent banner present. Overall, the site is low risk but would benefit from improved transparency regarding domain registration, privacy policies, and enhanced security practices. Strategic recommendations include adding privacy and terms pages, implementing security headers, and clarifying domain registration status to improve trustworthiness.

P

Private by Design, LLC

lipukule.org

58

Lipukule.org is a niche cultural and linguistic website dedicated to the toki pona language and related content. It provides articles and posts that explore various themes in toki pona, targeting enthusiasts and learners of this constructed language. The website operates under the ownership of Private by Design, LLC, a US-based entity, with domain registration consistent with the site's scale and focus. The business model centers on content publication and community engagement via Discord and Telegram channels, without evident commercial transactions or e-commerce features. Technically, the website is built using the modern SvelteKit framework with JavaScript and CSS, delivering a good user experience with responsive design and clear navigation. Performance is moderate, and accessibility is basic but functional. No major technical debt or outdated technologies were detected. However, the site lacks advanced SEO optimization and accessibility features. From a security perspective, the site uses HTTPS but lacks security headers and published security policies. No privacy or cookie policies are present, and no contact information is provided, which limits compliance with GDPR and other privacy regulations. No vulnerability disclosure or incident response information is available. The domain registration is transparent and consistent with the website's purpose, supporting legitimacy. Overall, the website is safe, with no adult or explicit content detected. The content quality and business credibility are good, but privacy compliance and security posture need improvement. Strategic recommendations include implementing privacy and cookie policies, adding security headers, publishing a vulnerability disclosure policy, and enhancing accessibility and SEO.

P

Privacy service provided by Withheld for Privacy ehf

wikipesija.org

41

Wikipesija is a niche community-driven wiki platform focused on the toki pona language, providing an open content knowledge base for speakers and learners. The website operates on the MediaWiki platform and hosts over 3,000 pages, emphasizing educational and cultural content. The technical infrastructure is basic but functional, with moderate performance and limited mobile optimization. Security posture is minimal, lacking advanced security headers and published policies, and the domain uses privacy protection services typical for small community projects. Overall, the site is safe, trustworthy, and serves a specialized audience with no commercial intent or advertising.

L

lipu Linku

linku.la

63

The website 'lipu Linku' is an interactive online dictionary dedicated to the Toki Pona language, a constructed minimalist language. It serves a niche audience of language learners and enthusiasts by providing searchable word definitions, etymologies, and language tools. The site is relatively new, having been launched in late 2022, and is positioned as a free educational resource without commercial or advertising elements. Technically, the site is built using modern web technologies including the SvelteKit framework and is hosted with Cloudflare DNS services, ensuring good performance and mobile responsiveness. However, the site lacks some standard compliance and security features such as privacy and cookie policies, security headers, and DNSSEC, which could be improved to enhance trust and security posture. The domain registration is consistent with the website's purpose and shows no suspicious patterns, but the absence of contact information and compliance documentation limits business credibility. Overall, the site is functional, well-designed, and safe for general audiences but would benefit from enhanced privacy, security, and contact transparency.

The website 'lipamanka.gay' is a personal site primarily focused on sharing essays, stories, and linguistic resources related to the creator's interests. It is a small-scale, niche site without commercial intent or business contact information. The site is hosted likely on GitHub Pages with domain registration through NameCheap, protected by privacy services. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript, with minimal external dependencies. Analytics are implemented via GoatCounter, providing lightweight user tracking without aggressive data collection. From a security perspective, the site uses HTTPS and has domain transfer protection enabled, but lacks DNSSEC and security headers, which could be improved to enhance security posture. There are no privacy or cookie policies, nor terms of service, which limits compliance with GDPR and other privacy regulations. No contact or incident response information is provided, reducing transparency and trustworthiness from a security standpoint. Overall, the site is safe for general audiences, containing no adult or explicit content. The domain registration is recent and privacy protected, appropriate for a personal website. The lack of business information and policies limits the site's credibility and compliance maturity. Strategic improvements in security headers, privacy disclosures, and contact transparency would enhance trust and compliance.

The website ap5.dev is a personal professional portfolio and blog belonging to Anna Kudriavtsev, focusing on computing systems design and software development with an emphasis on correctness and maintainability. The site positions itself as a personal brand rather than a commercial business, targeting a general audience interested in technology and software development. The business model is primarily informational and portfolio-based, with links to a resume and GitHub repository. Technically, the website uses standard modern web technologies including HTML5, CSS3, and JavaScript, with external resources such as Google Fonts and a chat widget from cactus.chat. The site is moderately optimized for mobile and SEO, with good design quality and clear navigation. However, no CMS or hosting provider details are evident, and performance is moderate. From a security perspective, the site uses HTTPS and does not expose forms or sensitive data, but lacks explicit security headers and formal privacy or cookie policies. No vulnerability disclosure or incident response information is provided. The domain registration is privacy protected, which is appropriate for a personal site. Overall, the security posture is adequate but could be improved with additional headers and compliance documentation. The overall risk is low given the nature of the site, but strategic recommendations include implementing privacy and cookie policies, adding security headers, and providing vulnerability disclosure information to enhance trust and compliance.

P

pona.la: a domain for Toki Pona

pona.la

59

pona.la is a niche community website dedicated to hosting and curating projects related to the constructed language Toki Pona. It serves as a hub for educational resources, community news, cultural events, and creative contests, targeting enthusiasts and speakers of Toki Pona. The site leverages modern web technologies such as the Astro framework and uses privacy-conscious analytics via GoatCounter. The domain is relatively new, registered in 2022, and shows consistent registration data with no suspicious indicators. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the website is safe, well-structured, and serves its community effectively, though improvements in compliance and security practices are recommended.

K

Kitty Cat

kitty.social

57

Kitty.social is a niche social networking platform focused on cat enthusiasts, including neko and furry communities, operating within the fediverse ecosystem. The platform offers a cozy, community-driven space for users to share content and interact, leveraging the Misskey software framework. The business model centers on providing a specialized social experience rather than commercial services, targeting a small but dedicated audience. Technically, the website employs modern JavaScript tooling with Vite and Misskey 2025.2.1, ensuring a contemporary and responsive user experience. The site uses HTTPS with reCAPTCHA integration to prevent bot registrations, and media proxying enhances user privacy. However, some standard security headers are missing, and no privacy or cookie policies are published, which limits compliance maturity. From a security perspective, the platform demonstrates good baseline practices such as HTTPS enforcement and bot mitigation but lacks comprehensive security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of privacy and cookie policies is a notable compliance gap, especially for GDPR considerations. Overall, Kitty.social presents a well-implemented niche social platform with good technical foundations and a safe content environment. To enhance trust and compliance, the site should publish privacy and cookie policies, implement security headers, and provide incident response information. These steps will improve user confidence and regulatory adherence.

E

EasyStore

easy.co

67

EasyStore is a mature SaaS platform specializing in unified customer experience (UCX) solutions for retail and ecommerce merchants. The company offers a comprehensive suite of services including online stores, point of sale systems, marketplace integrations, live selling, payment gateways, and loyalty programs. Their platform supports multi-channel selling and customer engagement through mobile and brand apps, unified inbox, and broadcast messaging. The website demonstrates strong digital maturity with extensive use of modern analytics, marketing, and customer engagement technologies. Security posture is good with HTTPS and reCAPTCHA usage, though explicit security headers and privacy policies are not visible in the provided content. WHOIS data is privacy protected, which is common for commercial platforms, but limits transparency. Overall, EasyStore presents as a professional, trustworthy, and well-positioned player in the ecommerce technology sector.

P

Pilloid.com

pilloid.com

62

Pilloid.com is a Russian-based online pharmacy specializing in the sale of pharmaceutical drugs with international shipping primarily targeting customers in North America and Europe. The website offers a wide range of authentic medical products and supplements, leveraging the PrestaShop e-commerce platform. The business is relatively young, established in 2018, and maintains a consistent brand presence with clear contact information and a structured product catalog. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and Tawk.to for live chat support, hosted behind Cloudflare DNS services. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC, and no explicit security or incident response policies are published. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is functional, professional, and trustworthy but could improve in security and privacy compliance areas.

H

healthyareastore

healthyareastore.com

59

healthyareastore.com is a newly established e-commerce website launched in early 2024, specializing in health and beauty products including makeup, skin care, hair care, and nutritional supplements. The site targets general consumers interested in improving their health and wellbeing through quality products. The business operates primarily online with a straightforward retail model and a focus on product variety within the health and beauty niche. The website is hosted on the edit.site platform and uses modern web technologies including JavaScript and REST APIs to deliver content and e-commerce functionality. The design is professional and mobile-optimized, providing a good user experience with clear navigation and calls to action. Security posture is basic but adequate with HTTPS enabled and domain transfer protection in place, though DNSSEC is not enabled and security headers are absent. Privacy compliance is addressed through a cookie consent mechanism and a privacy policy page, but terms of service and incident response policies are missing. Contact information is limited to an email address and a subscription form, with no phone or physical address provided. Overall, the site presents a moderate risk profile with room for improvement in security, compliance, and business credibility indicators.

4

4NRX Ltd

4nrx-uk.md

60

4NRX Ltd operates an established online pharmacy website, 4nrx-uk.md, providing competitively priced pharmaceutical products including brand name and generic drugs. The business targets UK and international customers seeking convenient online purchase and home delivery of medicines. The website features a broad product catalog, company news, and customer support via contact forms and live chat, reflecting a mature e-commerce healthcare business. Technically, the site uses standard web technologies including JavaScript, Google Analytics, Google Tag Manager, and a live chat widget, with a custom or unknown CMS. The site is moderately optimized for performance and mobile use, with good SEO practices but basic accessibility features. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks important security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. WHOIS data confirms the domain is long-established since 1999, with registrant information consistent with the business claims, supporting legitimacy. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and security hardening.

The website 'noololly.studio' is a personal portfolio site primarily showcasing a software project named 'Uno'. The site is minimalistic and informal, targeting a general audience likely familiar with the site owner. The business model is non-commercial, focusing on personal project display rather than a formal business offering. The domain registration data is inconsistent, showing a future creation date which undermines trust and raises questions about data accuracy or legitimacy. Technically, the site uses basic HTML, CSS, and minimal JavaScript with no detected CMS or advanced frameworks. Hosting appears to be via Name.com based on WHOIS data. Security posture is weak with no security headers, no DNSSEC, and no privacy or cookie policies. No contact information or incident response details are provided, limiting trust and compliance. Overall, the site is low risk but lacks professional security and privacy practices.

M

mooncell07

mooncell07.me

56

Mooncell07 is a personal website and blog operated by an individual known as nova/mooncell07, focusing on web development learning, emulator development, network programming, gaming, and visual novels. The site serves as a platform to share open source projects and personal posts, targeting technology enthusiasts and developers. The website is built using modern frontend technology SvelteKit and hosted by Hostinger with privacy-protected domain registration, reflecting a small-scale personal project rather than a commercial enterprise. Technically, the site demonstrates a modern tech stack with good mobile optimization and basic SEO, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS and domain transfer protection but lacks DNSSEC and security headers, and no formal privacy or cookie policies are published. Overall, the site is safe, trustworthy, and professional for its intended personal use, but lacks formal compliance and security documentation typical of commercial sites.

Z

aman/home

zeffo.me

56

The website zeffo.me is a personal portfolio site owned by an individual named Aman, primarily showcasing programming projects and animal rehabilitation efforts. The site is small-scale and targets a general audience interested in technology and personal hobbies. It is hosted on Cloudflare and built using the modern SvelteKit framework, indicating a moderate level of technical maturity. The website design is good with clear navigation and mobile optimization, but lacks formal business and compliance documentation such as privacy or cookie policies. Security posture is adequate with HTTPS enabled and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is safe, trustworthy, and professionally presented for a personal project, but lacks formal compliance and security policies expected in business contexts.

The website pontushenriksson.com represents a personal portfolio for an individual web developer and programmer named Pontus Henriksson. The site is currently under development with a legacy site linked for reference. The business model is focused on showcasing skills and previous work to attract freelance or contract opportunities. The target audience includes potential clients or employers seeking web development and design services. The website is hosted on Cloudflare Pages and uses basic modern web technologies such as HTML5, CSS3, and JavaScript. The design is responsive and user-friendly, though content is minimal and lacks comprehensive business or contact information. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers, which are recommended to enhance protection. No privacy, cookie, or terms of service policies are present, indicating limited compliance with GDPR or other privacy regulations. No contact emails, phone numbers, or social media links are provided, reducing business credibility and user trust. Analytics are implemented via Cloudflare Pages Analytics with minimal user tracking. Overall, the website is safe with no adult or questionable content detected. The domain registration is consistent with the website's new status and shows no suspicious patterns. The security posture is moderate but can be improved by adding security headers and privacy policies. The site’s technical implementation is adequate for a personal portfolio but lacks advanced SEO and accessibility features. Strategic recommendations include implementing privacy and cookie policies, adding security headers, providing clear contact information, enabling DNSSEC, and enhancing SEO and accessibility to improve user trust and compliance.

J

JoubaMety

joubamety.com

54

JoubaMety is a personal website representing Jan Rašnovský, a content creator and developer specializing in Minecraft machinima, video production, and programming. The site serves as a portfolio and community hub, linking to various social media and community platforms. The business operates as a small personal brand targeting Minecraft and machinima enthusiasts as well as programming communities. Technically, the website is well-constructed using modern CSS frameworks like Tailwind CSS and Ripple UI, with JavaScript enhancements and Cloudflare DNS. Performance and mobile optimization are good, and SEO practices are adequately implemented. Security posture is decent with HTTPS and domain transfer protection, but lacks DNSSEC and security headers. Privacy and compliance policies are absent, representing a compliance gap. Overall, the site is trustworthy and safe for general audiences.

L

lighttigerXIV - About

lighttigerxiv.dev

56

The website lighttigerxiv.dev is a personal portfolio site for Afonso Fonseca, a young developer from Portugal. It serves primarily as a showcase for his programming projects, open source contributions, and professional CV. The site targets a general audience interested in technology and programming, with a focus on personal branding rather than commercial business operations. Technically, the site is built using modern web technologies including SvelteKit and Google Fonts, delivering a fast and mobile-optimized experience. However, it lacks explicit privacy, cookie, and security policies, which are important for compliance and trust. Security posture is moderate with HTTPS implied but no detected security headers or incident response information. Overall, the site is safe, professional, and trustworthy but could improve in privacy compliance and security best practices.

R

Robin Roses

robinroses.xyz

56

Robin Roses is a personal website serving as an internet garden for sharing ideas, blog posts, and documentation related to software development, aesthetics, and nature-inspired projects. The site targets individuals interested in neovim, nix, rust, UI design, and minimalism. It operates as a small-scale personal brand with open-source projects and content sharing as its core offerings. Technically, the site is built using modern static site generation tools like Zola and reproducible build systems like Nix, hosted behind Cloudflare DNS and CDN services. The site demonstrates good performance, mobile optimization, and basic accessibility, but lacks advanced SEO and comprehensive privacy compliance features. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers. No privacy or cookie policies are published, and no contact or incident response information is provided, limiting compliance and trust. Overall, the site is safe, professional, and well-structured but would benefit from enhanced security and privacy practices.

I

is-a.dev - Free subdomains for developers

is-a.dev

61

The website is-a.dev offers a free subdomain registration service targeted primarily at developers. It enables users to obtain free `.is-a.dev` subdomains by following instructions hosted on a GitHub repository. The service is positioned as a niche developer tool with a small-scale operation founded in 2020. The website content is clear, relevant, and professionally presented with consistent branding and a focus on developer engagement through GitHub and Discord communities. From a technical perspective, the site uses modern web technologies including HTML5, CSS3, JavaScript, and is hosted behind Cloudflare, ensuring fast performance and good mobile optimization. The presence of Carbon Ads and Cloudflare Insights indicates minimal advertising and analytics usage, with a low level of user tracking. SEO and accessibility are adequately addressed, though accessibility is basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security headers and formal privacy or cookie policies, which are important for compliance and trust. Incident response is partially addressed via a GitHub abuse reporting mechanism, but no dedicated security contact or vulnerability disclosure policy is present. Overall, the website is trustworthy and functional with a good balance of usability and security for its scope. The main risks relate to privacy compliance and formal security governance, which could be improved to enhance user trust and regulatory adherence.

H

H4LO

h4lo.ca

56

H4LO.ca is a personal portfolio website created and maintained by an individual developer named H4LO. The site serves as a showcase for projects, an online storefront, and a code repository linked via GitHub. The business model is personal branding and project demonstration, targeting a general audience interested in technology and development. The website is relatively new, founded in 2024, and positions itself as a niche personal brand rather than a commercial enterprise. The content is concise, well-structured, and professionally presented with consistent branding and clear navigation.