Security Directory

G

GitLab

sc07.dev

57

The website is a self-hosted GitLab instance under the domain sc07.dev, primarily serving as a platform for hosting and exploring open source projects related to the Fediverse and Canvas technologies. It leverages the GitLab platform's capabilities to provide project collaboration and CI/CD catalog integration. The target audience includes developers and open source contributors interested in decentralized social networking and related software. The business model is focused on providing a self-managed GitLab environment rather than a commercial offering. Technically, the site uses modern web technologies including JavaScript, Webpack, Tailwind CSS, and Bootstrap, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are absent. Privacy compliance is weak due to the lack of privacy and cookie policies and no consent mechanisms. Overall, the site is functional and professional but lacks formal compliance and contact transparency.

sc07 LLC is a small creative and technology group operating a portfolio of projects and services primarily focused on federated social platforms and community tools. Their website serves as a hub linking to various projects such as Fediverse Events, toast.ooo (Lemmy), grants.cafe (Mastodon), aftermath.gg (Matrix), and others, indicating a niche market position within the open-source and federated social ecosystem. The company appears to be established since 2018, though the domain sc07.com was registered recently in 2023, suggesting a possible rebranding or expansion. Technically, the website is built using modern web technologies including Next.js and React, with good mobile optimization and a clean, consistent design. Hosting is provided by highway.host, which also manages their DNS. The site lacks advanced SEO and accessibility features but maintains a moderate performance profile. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS with a valid SSL configuration and domain registration protections such as clientDeleteProhibited and clientTransferProhibited status flags. However, it lacks security headers and DNSSEC, and there are no published privacy, cookie, or security policies, which are compliance gaps. No incident response or vulnerability disclosure information is available, limiting transparency in security management. Overall, sc07.com presents as a legitimate, small-scale technology and creative group with a focus on federated social projects. The absence of privacy and security policies and contact details reduces trust and compliance posture. Strategic improvements in these areas would enhance their security maturity and business credibility.

A

Autonomous non-profit organization (ANO) "TV-Novosti"

swentr.site

66

RT (Russia Today) is a Russian state-funded international news channel broadcasting 24/7 in English. It provides news, video content, and analysis from a Russian perspective to a global audience. The website is professionally designed with good content quality and consistent branding, targeting a general audience interested in international news with a focus on Russia and related geopolitical topics. Technically, the site uses modern web technologies including lazy loading, SVG icons, and integrates Yandex analytics and advertising services, indicating a mature digital infrastructure with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no explicit privacy or cookie policies were found, indicating compliance gaps. Overall, the site is legitimate and consistent with its stated identity, but improvements in privacy compliance and security best practices are recommended.

P

Privacy protection service - whoisproxy.ru

rtdoc.tv

52

RT.DOC is a Russian-based online streaming platform specializing in documentary films and series from around the world. Launched in 2024, it offers free access to high-quality documentary content covering history, culture, science, sports, and politics. The platform supports user registration for personalized features such as watchlists and ratings, and provides multi-language support including Russian, English, and Chinese. Technically, the site employs modern web technologies including video.js for streaming, service workers for PWA capabilities, and Swiper.js for interactive UI elements. The site is hosted under a Russian registrar with privacy-protected WHOIS data, consistent with its regional focus.

А

Автономная некоммерческая организация «ТВ-Новости»

arteldoc.com

50

ARTel.doc is a Russian-language documentary film platform operated by the Autonomous Non-Commercial Organization "TV-Novosti", which also runs the RT Documentary channel. The platform offers a variety of services including an international documentary film festival, an online cinema for documentary films, an online school for documentary filmmaking, and a documentary film competition. The target audience includes documentary film enthusiasts and aspiring filmmakers. The platform is positioned as a niche media resource with educational and cultural offerings linked to RT Documentary's brand. Technically, the website uses modern web technologies such as lazy loading, WebP images, and integrates social media and tracking pixels from VK and Mail.ru. The hosting appears to be Russian-based with domain name servers linked to Megafon. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and visible security headers. Privacy and cookie policies are absent, which impacts compliance. Overall, the website is professionally designed with good user experience and moderate trustworthiness.

Faustball Westerstetten is a local sports club website dedicated to the Faustball division of TSV Westerstetten in Germany. The site provides information about teams, match results, training schedules, event calendars, and news updates targeted at community members and sports enthusiasts. The business model is community-focused, offering informational and engagement services without commercial transactions. The website is hosted by Hetzner and built with basic HTML, CSS, and JavaScript, featuring a mobile-responsive design and clear navigation. However, it lacks advanced technical frameworks or CMS platforms. Security posture is minimal with no detected security headers or privacy policies, and the SSL status is unknown, indicating potential risks. There are no signs of tracking or advertising, reflecting a privacy-conscious but basic implementation. Overall, the site is functional and trustworthy for its purpose but requires improvements in security and compliance to meet modern standards.

Openports.pl is a niche technical website dedicated to providing an indexed readme and categorized listing of OpenBSD ports. It targets OpenBSD users, developers, and system administrators seeking detailed information about available software packages. The site is modest in scale and serves primarily as an informational resource rather than a commercial business. Technically, the website is built using standard web technologies including HTML5, CSS, JavaScript with jQuery, and is powered by the Perl Dancer framework. The site demonstrates basic mobile optimization and accessibility but lacks advanced SEO and performance enhancements. Security posture is minimal with no visible security headers or published policies, though the domain benefits from DNSSEC and a reputable registrar. No privacy or cookie policies are present, and no contact or incident response information is provided, which limits trust and compliance. Overall, the site is safe for general audiences and does not contain any adult or questionable content.

P

pkgsrc.se | The NetBSD package collection

pkgsrc.se

43

pkgsrc.se is a specialized website providing a web interface to browse and search the NetBSD pkgsrc package collection. It serves primarily developers and system administrators who use NetBSD and its package management system. The site offers package details, updates, and maintainer information, positioning itself as a niche technical resource within the open source community. The domain is well-established since 2005, indicating a mature presence in its domain. Technically, the website uses basic HTML, CSS, and JavaScript without modern frameworks or CMS. The site is hosted with DNS nameservers under core.io domains and registered via 1 Api GmbH. Performance and mobile optimization are basic, with limited accessibility features. The site uses HTTPS links but lacks explicit security headers and advanced SEO or analytics tools. From a security perspective, the site shows moderate maturity. HTTPS is used, and no exposed sensitive data or vulnerable libraries were detected. However, the absence of DNSSEC, security headers, privacy policies, cookie consent mechanisms, and incident response information indicates room for improvement. No WAF or blocking mechanisms were detected, and the content is safe for general audiences. Overall, pkgsrc.se is a functional and legitimate technical resource with a solid domain history but would benefit from enhanced security practices, privacy compliance, and modern technical improvements to increase trust and user experience.

J

Joey Hess

ikiwiki.info

52

Ikiwiki.info is the official website for ikiwiki, an open source wiki compiler and static site generator developed primarily by Joey Hess. The site provides documentation, downloads, and community resources for users and developers interested in flexible wiki and static site solutions. The business operates as a small, niche open source project targeting developers and technical users. The website is simple and functional, focusing on content delivery rather than commercial services. Technically, the site uses basic HTML, CSS, and JavaScript without heavy frameworks or CMS platforms. The domain is well aged and registered consistently with the project lead, indicating legitimacy. However, the site lacks modern security headers, explicit HTTPS confirmation, and privacy or cookie policies, which lowers its security and privacy posture. No advertising or tracking mechanisms are detected, reflecting a privacy-conscious approach. Overall, the site is trustworthy but could improve in security and compliance documentation.

SlackBuilds.org is a well-established community-driven project founded in 2006 that provides SlackBuild scripts for Slackware Linux users to automate software package building. It serves a niche audience of Linux system administrators and enthusiasts who prefer building packages from source with trusted scripts. The website is simple and functional, focusing on content delivery without commercial distractions or heavy tracking. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript without modern frameworks or CMS. Performance and mobile optimization are moderate to basic, reflecting the site's utilitarian design. Security posture is modest; while domain registration uses privacy protection and domain status locks, the site lacks DNSSEC, security headers, and published security policies. Privacy compliance is minimal, with no visible privacy or cookie policies. Overall, the site is trustworthy and credible within its community but could improve security and privacy transparency.

The MacPorts Project is a well-established open-source community initiative focused on providing an easy-to-use system for compiling, installing, and upgrading open-source software on macOS. It offers a command-line driven software package under a BSD license and maintains a large repository of software ports targeting modern macOS versions including Apple Silicon. The project is community-driven, with active development and participation in programs like Google Summer of Code, indicating a strong engagement with the open-source ecosystem. Technically, the website uses standard web technologies including HTML5, CSS, and the MooTools JavaScript framework. The site is moderately optimized for performance and accessibility, with good content quality and clear navigation. However, it lacks modern security headers and explicit HTTPS enforcement information, which could be improved. The absence of analytics and tracking scripts suggests a privacy-conscious approach. From a security perspective, the site shows no immediate vulnerabilities or exposed sensitive data but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data is unavailable, likely due to privacy protection, which is common and justified for community projects. Overall, the domain and website appear legitimate and trustworthy. Strategically, the project should focus on enhancing its security posture by implementing security headers, publishing a security policy, and improving privacy compliance with explicit cookie and privacy policies. These steps will strengthen trust and align with best practices for open-source community projects.

T

this happy shop

this-happy.shop

65

This Happy Shop is a small e-commerce retail business operating via a Shopify-hosted online store. The website uses the Shopify Dawn theme and standard Shopify infrastructure, indicating a modern but basic digital presence. The business appears to be recently founded in 2022, with domain registration consistent with the business profile. The site offers a contact form for customer inquiries but lacks explicit privacy, cookie, or terms of service policies, which are important for compliance and trust. Technically, the site is functional with HTTPS enabled but lacks advanced security headers and DNSSEC, representing areas for improvement. Analytics and marketing tools are implemented via Shopify's native pixels and scripts, with moderate user tracking. Overall, the website is safe for general audiences and presents a basic but legitimate e-commerce storefront.

X

XS4ALL

xs4all.nl

69

XS4ALL is a well-established Dutch telecommunications provider offering internet, television, and telephony services with a strong emphasis on secure and reliable connectivity. The company has a history spanning over 25 years and operates as a subsidiary of KPN, a major telecom operator in the Netherlands. The website reflects this integration, directing new subscriptions and services through KPN's platforms while maintaining XS4ALL's brand identity and customer service focus. The target audience primarily consists of Dutch consumers and small businesses seeking high-quality internet and communication services. Technically, the website is built with modern HTML5, CSS3, and JavaScript, optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS enforced and a Content-Security-Policy header, though additional security headers and explicit security policies could enhance trust. Privacy compliance is addressed with clear links to privacy and cookie policies, though no active cookie consent mechanism is present. Overall, the site is professional, trustworthy, and accessible without any blocking or WAF interference.

U

Unencumbered by Facts – Taking unsubstantiation to new levels

unencumberedbyfacts.com

59

Unencumbered by Facts is a personal technology blog primarily focused on open source webmail client development and related software topics. The site is authored by Jason Munro and hosted on WordPress.com, leveraging standard WordPress technologies such as PHP, JavaScript, and CSS. The blog features detailed posts about software projects, personal anecdotes, and technical insights, targeting developers and technology enthusiasts interested in open source email clients and related protocols. The website has a consistent branding and good content quality, though it lacks formal business contact information and privacy policies.

The domain presscoder.com currently serves a 404 Not Found error page with no active business content. The page content indicates that the domain is hosted by Admiral, a service provider specializing in copyright access control and privacy compliance for digital publishers. The service supports GDPR compliance and subscription management but does not provide direct business or contact information on this domain. Technically, the site is hosted on Google Cloud Platform with AWS DNS servers and uses HTTPS with frequent certificate rotation, indicating a secure hosting environment. However, the lack of security headers and absence of a cookie consent mechanism reduce the overall security posture. The domain registration is consistent and legitimate with no privacy protection, registered via NameCheap in 2022. Overall, the site is minimally functional and does not provide direct business engagement or user interaction features.

M

Metacritic

metacritic.com

67

Metacritic is a well-established media review aggregation platform that consolidates reviews for movies, TV shows, games, and music from leading critics. It is recognized for its unique METASCORES system that provides users with quick insights into critical reception. The platform targets a general audience interested in entertainment media and operates primarily in the United States. Technically, the website leverages modern JavaScript frameworks such as Nuxt.js and integrates third-party services for analytics and cookie consent management, indicating a mature digital infrastructure. The site demonstrates good performance and mobile optimization, with a professional design and clear navigation enhancing user experience. Security-wise, the site enforces HTTPS, employs cookie consent mechanisms, and does not expose sensitive data, reflecting a solid security posture. However, explicit privacy and terms of service documents are not detected in the provided content, and no direct contact information is visible, which are areas for improvement. Overall, the domain registration data aligns well with the business identity, supporting the site's legitimacy and trustworthiness.

H

Hookshot Media Ltd

timeextension.com

67

Time Extension is a UK-based niche media website specializing in retro gaming news, reviews, and features. Owned by Hookshot Media Ltd, it serves a dedicated audience of retro gaming enthusiasts with high-quality content and a comprehensive game database. The site demonstrates a mature digital infrastructure with a custom CMS, modern JavaScript libraries, and strong SEO practices. Security posture is solid with HTTPS enforcement and GDPR-compliant consent mechanisms, though some security headers could be improved. Advertising is integrated via multiple reputable ad networks, balanced with privacy considerations. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

H

Hookshot Media Ltd

hookshot.media

64

Hookshot Media Ltd is a UK-based digital media company specializing in publishing popular video game content through multiple well-known brands including Nintendo Life, Push Square, Pure Xbox, Time Extension, and Nintendo News. The company targets a global audience of video game enthusiasts and operates as a medium-sized business with a strong market position in the gaming media sector. Their business model focuses on content creation, community engagement, and digital publishing across multiple platforms. Technically, the website is built on a custom CMS (dgpCMS) using PHP and JavaScript, hosted via Cloudflare DNS services. The site demonstrates modern web practices including responsive design, fast performance, and SEO optimization. Google Analytics is used for visitor tracking, and the site employs HTTPS with good SSL configuration. However, DNSSEC is not enabled, and some security headers are not explicitly detected. From a security perspective, the website follows good practices such as HTTPS enforcement and domain transfer protection. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is partially addressed with published privacy and cookie policies, though no explicit cookie consent mechanism is present. Incident response and security policy information are not published, representing an area for improvement. Overall, Hookshot Media presents a professional, trustworthy, and well-maintained digital presence with strong business credibility. Strategic recommendations include enhancing security headers, enabling DNSSEC, implementing cookie consent mechanisms, and publishing security and incident response policies to improve compliance and trust further.

4

44 Bytes Ltd

44bytes.net

62

44 Bytes Ltd is a UK-based small technology company specializing in secure managed web hosting, internet security services, innovative web design, and comprehensive website management. The company targets businesses seeking reliable and secure internet services, positioning itself as a niche provider with a focus on intelligent and secure solutions. The website content is professional and clearly communicates the company's offerings and contact information, supporting its market presence. Technically, the website employs modern web technologies including Google Fonts, Google Analytics, and Plausible Analytics for performance and user tracking. The site is mobile-optimized with good accessibility and SEO practices, although no CMS or hosting provider details are explicitly identified. Performance is moderate with room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable libraries. However, the absence of security headers, incident response policies, and vulnerability disclosure mechanisms indicates a moderate security posture. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional business presentation. Overall, the website is trustworthy and professional but would benefit from enhanced transparency in domain registration, improved security headers, and explicit privacy and incident response policies to strengthen its security and compliance posture.

I

IBTimes LLC

ibtimes.com

76

International Business Times (IBTimes LLC) is a prominent media organization specializing in business and financial news from the United States and globally. Founded in 2006, it holds a strong market position as a leading provider of timely and relevant news content targeting a general audience interested in business, finance, technology, stock markets, personal finance, and politics. The website demonstrates a professional and consistent brand presence with comprehensive content and active social media engagement. From a technical perspective, the website employs a modern technology stack including JavaScript frameworks, Google Tag Manager, and multiple analytics and advertising platforms such as Chartbeat and Quantcast. The site is mobile-optimized with good SEO practices and basic accessibility features, delivering moderate performance. Security measures are robust, with HTTPS enforced and multiple security headers implemented, alongside a consent management platform to comply with GDPR and other privacy regulations. Security posture is strong with no evident vulnerabilities or exposed sensitive data. However, the absence of explicit incident response contacts and vulnerability disclosure policies suggests areas for improvement. The WHOIS data for the domain is unavailable, which is unusual for a major media site and slightly impacts trustworthiness, though the website's content and corporate information support its legitimacy. Overall, IBTimes.com presents a secure, professional, and user-friendly platform with comprehensive business news coverage. Strategic recommendations include publishing clear incident response and vulnerability disclosure information, enhancing accessibility, and maintaining regular audits of third-party scripts to sustain security and compliance.

I

IBTimes LLC

myibtimes.com

75

International Business Times (IBTimes LLC) is a well-established media company founded in 2006, specializing in business and financial news from the US and globally. The website serves a broad audience interested in business, finance, technology, stock markets, personal finance, and politics. It maintains a strong market position as a leading provider of business news with a professional and consistent brand presence. The company leverages multiple digital marketing and analytics technologies to optimize user engagement and advertising revenue. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Tag Manager, Chartbeat, Quantcast, and Prebid.js for advertising. It uses HTTPS with good SSL configuration and implements a consent management platform to comply with GDPR and other privacy regulations. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and secure cookie flags but lacks explicit security headers like CSP and HSTS. There is no publicly available incident response or vulnerability disclosure information, which could be improved to enhance trust. The absence of WHOIS domain registration data is a concern, potentially indicating privacy protection or registration inconsistencies, which slightly lowers the overall trust score. Overall, IBTimes.com is a professional and credible news platform with a solid technical foundation and privacy compliance efforts. Strategic improvements in security headers, incident response transparency, and domain registration clarity are recommended to strengthen its security posture and trustworthiness.

Illuna-minetest.tk operates as a niche community gaming website providing dedicated Minetest servers with custom mods and texture packs. The business targets Minetest players seeking a unique and advanced gaming experience, supported by a small but experienced team since 2014. The website reflects a community-driven model with emphasis on server reliability and custom content. Technically, the site is built using modern frontend technologies including Bootstrap, jQuery, and the Zola static site generator, delivering a responsive and user-friendly experience. Performance is moderate with good mobile optimization and SEO practices. Security posture is adequate with HTTPS usage and no exposed sensitive data, but lacks explicit security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices. Overall, the domain registration data supports the legitimacy and maturity of the business. The site is safe for general audiences with no adult or questionable content detected.

The website lemmy-meter.info provides a technical monitoring dashboard for Lemmy instances, leveraging Grafana technology. It targets technical users and administrators interested in instance health metrics. The domain is recently registered in 2023 and hosted with German name servers, while the registrant is located in Canada. The site is functional but lacks comprehensive privacy, cookie, and terms of service policies, as well as contact and incident response information. Technically, it uses modern React and Grafana frameworks but has basic SEO, accessibility, and performance optimizations. Security posture is moderate with HTTPS likely enabled but missing security headers and DNSSEC. Overall, the site is safe with no adult or questionable content detected.

U

USA.gov

firstgov.gov

70

USA.gov is the official U.S. government web portal designed to provide citizens and residents with easy access to government benefits, services, and information. It serves as a centralized hub for a wide range of topics including passports, Social Security, taxes, voting, and more. The website is operated under the U.S. General Services Administration, reinforcing its authoritative position as a trusted government resource. The site targets the general public seeking reliable government information and assistance.

50501.chat is a Lemmy-based federated social platform dedicated to a nationwide political activism movement called 50501, which organizes protests across all 50 US states to uphold the Constitution and oppose perceived executive overreach. The platform provides community forums, resource repositories, and event promotion tools to support activists. The site is relatively new, founded in 2025, and targets politically engaged Americans interested in grassroots activism. Technically, the site leverages modern open-source federated social software (Lemmy) with Bootstrap for UI, hosted with a reputable registrar and DNS providers. Security posture is good with HTTPS and clientTransferProhibited domain status, but lacks DNSSEC and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional, content-rich, and safe for general audiences, but could improve transparency and security documentation.

A

Archive.today

archive.md

56

Archive.md is a web archiving service that allows users to create permanent snapshots of webpages, ensuring content remains accessible even if the original page is removed or changed. The service targets general internet users who require reliable webpage preservation, offering both text and graphical copies along with short, stable URLs. The website is positioned as a niche player in the web archiving space with a small but focused operation founded in 2018. Technically, the site uses standard web technologies including HTML5, JavaScript, JSON-LD structured data, and supports OpenSearch and RSS feeds. The infrastructure appears moderate in performance with basic mobile and accessibility features. The site uses HTTPS and includes some tracking via Google Analytics and mail.ru scripts, but lacks advanced security headers and comprehensive privacy or cookie policies. From a security perspective, the site enforces HTTPS and disables active scripts on archived pages to reduce risk. However, it lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious content were detected. The overall security posture is moderate but could be improved by adding security headers and formal policies. Overall, archive.md is a functional and trustworthy web archiving platform with room for improvement in privacy compliance and security best practices. Strategic recommendations include publishing privacy and cookie policies, enhancing security headers, and providing clear incident response information to strengthen user trust and regulatory compliance.

A

Archive.today

archive.today

56

Archive.ph (also known as archive.today) is a web archiving service that allows users to create permanent snapshots of webpages, preserving both text and graphical content. The service ensures that archived pages remain accessible even if the original content is removed or altered. It targets general internet users who want to preserve web content for reference or evidence. The website provides search functionality for archived snapshots and offers a simple interface for submitting URLs to archive. Technically, the website uses standard web technologies including HTML5, JavaScript, JSON-LD structured data, and supports OpenSearch and RSS feeds. The site is served over HTTPS, ensuring secure connections. However, mobile optimization and accessibility features are basic, and no major web frameworks or CMS platforms are detected. Performance is moderate, with some use of third-party scripts for analytics and advertising. From a security perspective, the site employs HTTPS and disables active scripts on archived pages to prevent malware risks. However, it lacks visible security headers such as Content-Security-Policy and does not publish privacy or cookie policies, which are important for GDPR compliance. Contact information is limited to a webmaster email and contact forms. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency. Overall, archive.ph is a niche but valuable service with moderate technical maturity and security posture. To enhance trust and compliance, the site should implement and publish privacy and cookie policies, improve security headers, and provide clearer incident response channels. These steps will strengthen user confidence and regulatory compliance while maintaining its core archival functionality.

The domain aspire.net is a long-registered domain since 1996 but currently hosts only a parked domain placeholder page indicating 'Under Construction - Coming Soon!'. The website lacks any substantive business content, contact information, or compliance policies. The technical infrastructure relies on basic JavaScript and external scripts from Google Adsense and Sedo Parking, indicating monetization through domain parking rather than active business operations. No CMS or modern frameworks are detected, and the site shows minimal SEO or accessibility features. Security posture is weak with no evidence of HTTPS or security headers, and no privacy or cookie policies are present, indicating non-compliance with GDPR or other privacy regulations. Overall, the site appears inactive or in a pre-launch state with low trustworthiness and business credibility.

P

Park City

park-city.club

52

Park City is a small, community-driven internet platform focused on fostering social connection and creativity among its members. The website offers user profiles, FTP and Gemini protocol access, and previously hosted forums and a radio service, which are currently offline or discontinued. The site emphasizes inclusivity and a relaxed approach to online engagement, targeting users seeking a niche social community rather than commercial services. Technically, the site is built with basic HTML, CSS, and JavaScript, hosted on DigitalOcean, and uses NameCheap as the registrar with privacy protection enabled. The site is mobile-optimized with a moderate performance profile but lacks advanced technical frameworks or CMS integration. Security posture is basic, with no DNSSEC, security headers, or published security policies, and no visible HTTPS enforcement details. Privacy compliance is minimal, with no privacy or cookie policies found, and no GDPR indicators. Overall, the site is functional and trustworthy for its niche but would benefit from improved security and compliance measures.

P

prx

si3t.ch

42

The website si3t.ch is a personal digital space hosted by an individual known as 'prx'. It serves as a repository for documentation, code, tools, and miscellaneous content aimed at digital travelers and enthusiasts interested in self-hosting and privacy. The site also offers community interaction via an XMPP chat and is accessible through a TOR hidden service, emphasizing privacy and anonymity. The business model is non-commercial and hobbyist in nature, with a small-scale operation based in Switzerland. Technically, the site uses basic HTML, CSS, and JavaScript with Atom feeds and XMPP integration. It is self-hosted at home, with moderate performance and basic mobile optimization. No CMS or advanced frameworks are detected. The site lacks formal privacy, cookie, or terms of service policies and does not appear to use analytics or advertising, reflecting a privacy-conscious approach. From a security perspective, the site shows limited security measures in the HTML content, with no detected security headers or HTTPS/SSL information. The use of a TOR hidden service is a positive privacy feature. However, the absence of security policies, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement. No critical vulnerabilities or adult content were detected. Overall, the site is a safe, small personal project with moderate trustworthiness but limited formal security and privacy compliance. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and establishing a vulnerability disclosure process to enhance security posture and user trust.

J

Jae Lo Presti

jae.moe

66

Jae's Website is a personal site belonging to Jae Lo Presti, a technical artist and content creator based in Helsinki, Finland. The site serves as a portfolio and blog platform showcasing Jae's work in 3D art, VR game development, and mentorship activities on platforms like Resonite. The website targets a general audience interested in technical artistry and virtual worlds. The business model is primarily personal branding and content sharing without commercial transactions. Technically, the website is built with standard HTML, CSS, and JavaScript, including the highlight.js library for code highlighting. It is hosted on the 777.tf domain and appears to be self-managed or hosted by a small provider. The site is well-structured, mobile-optimized, and performs well with good SEO and accessibility features. However, it lacks advanced security headers and formal privacy or cookie policies. From a security perspective, the site uses HTTPS but does not implement common security headers or GDPR compliance mechanisms. No vulnerabilities or exposed sensitive data were detected. The WHOIS data shows the domain is registered to a private person, consistent with the personal nature of the site, and the domain age aligns with the site's content timeline. No WAF or blocking mechanisms are present, allowing full content access. Overall, the site is trustworthy and professional for a personal portfolio but would benefit from adding privacy and cookie policies, security headers, and vulnerability disclosure information to improve compliance and security posture.

F

FileZilla

filezilla-project.org

74

FileZilla is a well-established open source software project providing free FTP client and server solutions, with an additional paid Pro offering supporting cloud storage protocols. The website is professionally designed, with clear navigation and relevant content targeting IT professionals and end users needing reliable file transfer tools. The technical infrastructure is based on standard web technologies with active development and recent security updates, reflecting a mature digital presence. Security posture is solid with HTTPS usage and participation in a bug bounty program, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

oppen.digital is a newly registered domain (June 2024) owned by Virtua Drug Ltd, a Hungarian company. The website presents a minimalistic interface focused on digital technology themes such as Open Source Software, Digital Innovation Research, and Digital Technology Solutions. The primary content is an embedded Google-powered search iframe and advertising via Google Adsense, indicating a business model reliant on digital advertising revenue. The site lacks detailed business descriptions, contact information, or comprehensive privacy and security policies, which limits its professional presentation and trustworthiness. Technically, the website uses standard HTML, CSS, and JavaScript with integration of Google advertising scripts. The site is moderately optimized for mobile but lacks advanced SEO and accessibility features. No CMS or advanced frameworks are detected. Security posture is weak due to absence of security headers, lack of DNSSEC, and no visible HTTPS enforcement details. Privacy compliance is minimal with only a basic privacy policy page and no cookie consent mechanism despite active ad tracking scripts. From a security perspective, the site shows no signs of WAF or blocking mechanisms and no critical vulnerabilities are evident from the content. However, the lack of security best practices and privacy compliance measures poses risks for user data protection and regulatory adherence. The WHOIS data is transparent and consistent with the website's business sector and country, supporting legitimacy but reflecting a very new business. Overall, oppen.digital appears to be an early-stage digital advertising or information platform with basic technical implementation and limited business credibility signals. Strategic improvements in security, privacy compliance, and content richness are recommended to enhance trust and operational maturity.

S

skyjake (@[email protected]) - skyjake.fi

skyjake.fi

56

The website skyjake.fi hosts a personal Mastodon instance operated by an individual known as 'skyjake'. The site serves as a social platform within the fediverse, focusing on personal and technical content related to software projects such as Gemini protocol applications and the Doomsday Engine. The domain has been registered since 2010, indicating a long-term personal project. The site is small-scale, targeting a niche audience interested in open-source and federated social networking. Technically, the site runs Mastodon version 4.3.8, uses modern web technologies including JavaScript and SVG, and is hosted under a Finnish registrar. The site is mobile-optimized and provides a good user experience with clear navigation and consistent branding. Security posture is solid with HTTPS enabled and no obvious vulnerabilities, though it lacks advanced security headers and published security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Overall, the site is trustworthy and well-maintained for a personal project, with no signs of malicious activity or suspicious registrations.

The website sourceforge.net is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct content access. As a result, no direct business content, policies, or contact information could be extracted or analyzed. The domain is long-established, created in 1999, and registered via GoDaddy.com, LLC, with domain status flags indicating strong protection against unauthorized changes. The presence of Cloudflare security mechanisms suggests a focus on protecting the site from automated abuse or attacks. However, this also limits the ability to assess the website's content quality, privacy compliance, or security posture in detail. The overall risk assessment is low for malicious activity but incomplete for detailed security or compliance evaluation due to access restrictions.

C

Cypht

cypht.org

61

Cypht is an open source webmail client designed to aggregate multiple email accounts and RSS feeds into a single, modular interface. It targets users such as ISPs, schools, businesses, and individuals seeking a lightweight and flexible email solution. The website presents clear information about the product's features, modular architecture, and open source licensing, supported by an active GitHub repository and community chat on Gitter. Technically, the site is built using PHP and JavaScript with Bootstrap and jQuery for frontend components, and uses the Cecil static site generator for content management. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Security-wise, the site encourages responsible vulnerability disclosure but lacks formal policies and contact details, and does not implement common security headers. WHOIS data is unavailable, likely due to privacy protection, but the domain appears legitimate based on content and community presence. Overall, the site scores well on content quality and business credibility but has room for improvement in privacy compliance and security posture.

C

Claws Mail - The user-friendly, lightweight, and fast e-mail client

claws-mail.org

56

Claws Mail is an established open source email client project founded in 2006, offering a lightweight, fast, and user-friendly email and news reading experience based on GTK+. The website provides detailed descriptions of the software's features, plugins, and user documentation, targeting both new and experienced users seeking a robust email client alternative. Technically, the site is simple with basic JavaScript and CSS, hosted by Gandi SAS, and shows moderate performance and basic mobile optimization. Security posture is moderate with domain transfer protection but lacks DNSSEC and security headers. No privacy or cookie policies are published, and no contact or incident response information is provided, which limits compliance and transparency. Overall, the site is trustworthy and legitimate but could improve in security and privacy compliance.

H

Hikosoft

hiko.link

47

HIKO Software is a small Taiwan-based company specializing in a Shopify social login app designed to simplify user authentication for e-commerce merchants. The website serves as a marketing platform built on WordPress, showcasing the app's features and linking to the Shopify app store and a demo site. The technical infrastructure is modern and stable, leveraging AWS hosting and HTTPS encryption, with a clean and responsive design optimized for mobile users. However, the site lacks some privacy compliance features such as a cookie policy and consent mechanism, and does not provide explicit contact information or security policies. The WHOIS data is consistent with the business profile, indicating legitimacy and domain age appropriate for the company's founding date in 2020. Overall, the website demonstrates a moderate security posture with room for improvement in security headers and privacy compliance.

L

Linux Handbook

linuxhandbook.com

71

Linux Handbook is an independent, reader-supported online publication specializing in Linux command line, server management, self-hosting, DevOps, and cloud learning. Established in 2017, it serves a niche audience of Linux users, IT professionals, and DevOps engineers by providing educational content and tutorials. The website leverages modern web technologies including the Ghost CMS platform and integrates multiple advertising and analytics services to support its business model. The site demonstrates good technical maturity with HTTPS enforcement, structured data markup, and mobile optimization. However, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security posture is generally good with standard protections, though DNSSEC is not enabled, representing a minor security gap. Overall, the site is professional, trustworthy, and well-positioned within its niche, but could improve privacy compliance and security transparency.

P

Privacy service provided by Withheld for Privacy ehf

itsfoss.community

55

It's FOSS Community is a specialized online forum dedicated to desktop Linux users and readers of the It's FOSS website. Established in 2017, it serves as a niche community platform for Linux enthusiasts to share knowledge, seek help, and discuss open source technologies. The platform is powered by Discourse, a modern forum software, and hosted via NameCheap with domain privacy protection enabled. The community is active with a variety of topics ranging from Linux distributions to hardware and software troubleshooting. The business model centers around community engagement and content sharing rather than direct commercial sales.

R

Rumble

rumble.com

63

Rumble is a well-established video hosting and streaming platform founded in 1998, serving content creators and viewers seeking an alternative to mainstream video services. The platform offers video hosting, streaming, and monetization services, positioning itself as a media company with a focus on free speech and creator empowerment. Technically, the website is hosted on Amazon AWS infrastructure and uses modern web technologies including JavaScript and web fonts. Facebook Pixel is used for analytics and tracking, indicating moderate user tracking practices. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers, and does not publish security or privacy policies on the main page. The absence of privacy and cookie policies and contact information reduces privacy compliance and business transparency scores. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security disclosures.

A

ANO “TV-Novosti”

gw2ru.com

65

Gateway to Russia is a media and educational platform focused on Russian language learning, culture, history, travel, and lifestyle. It is presented as a project by ANO “TV-Novosti” with financial support from the Russian Ministry of Digital Development, Communications, and Mass Media. The website offers free content including articles, videos, and language courses targeting a global audience interested in Russia. The site is professionally designed with consistent branding and a clear navigation structure, supporting multiple languages and social media presence.

P

Privacy protection service - whoisproxy.ru

arteldoc.tv

52

RT.DOC is a Russian-based online streaming platform specializing in documentary films and series from around the world. The platform offers free access to high-quality documentary content covering history, culture, science, sports, and politics, targeting a general audience interested in educational and cultural media. It supports multiple languages including Russian, English, and Chinese, enhancing accessibility for a broader user base. The business model centers on free streaming with optional user registration to enable personalized features such as watchlists and ratings. The platform is relatively new, with domain registration in May 2024, indicating a recent market entry.

M

mCloud doo

rt.rs

62

RT Balkan is a Serbian language news media website operated by mCloud doo, established in 2012. It provides daily updated news content focused on Serbia, the Balkan region, and global events, including live TV streaming and program schedules. The website leverages modern web technologies such as React and lazy loading for performance optimization. It maintains an active presence on major social media platforms including Instagram, Telegram, Facebook, Twitter, and TikTok, enhancing its reach and engagement. The domain registration details align well with the website's regional focus, indicating legitimacy and consistency.

北

北京衮雪科技有限公司

x-mol.com

57

X-MOL is a Chinese academic platform focused on chemistry and related scientific disciplines, providing a comprehensive suite of services including paper search, industry news, global mentor listings, and research group tools. The platform targets researchers, academics, and students, positioning itself as a leading resource in the Chinese scientific community. The business operates under Beijing Gunxue Technology Co., Ltd., established in 2014, and maintains a medium-sized presence with consistent branding and professional content. Technically, the website employs modern front-end technologies such as Bootstrap, RequireJS, and Font Awesome, ensuring a responsive and user-friendly experience. SEO practices are well implemented, and the site is mobile-optimized. However, accessibility features are basic and could be improved. The site uses HTTPS with good SSL configuration but lacks important security headers, which could be enhanced to improve security posture. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies indicates compliance gaps, especially regarding GDPR and data protection regulations. WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency, although the website content and business information appear legitimate. Overall, the site is professional, content-rich, and trustworthy for its target audience but would benefit from improved privacy compliance, enhanced security headers, and clearer domain registration transparency to strengthen its security and trustworthiness.

S

Space

space.com

74

Space.com is a well-established online media platform specializing in space exploration, astronomy, and related scientific news. It serves a broad audience of space enthusiasts and the general public interested in space science. The website offers news articles, videos, product reviews, and educational content, positioning itself as a leading source in its niche. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager, and a CDN infrastructure provided by Future plc, ensuring fast performance and excellent mobile optimization. Security-wise, the site enforces HTTPS and likely uses standard security headers, but lacks publicly available detailed security policies or incident response contacts. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's legitimacy given its strong brand presence and professional operation. Overall, Space.com demonstrates a mature digital presence with good security posture and privacy compliance, though improvements in transparency around security and contact information are recommended.

M

midwest.social - A lemmy server for, but not limited to, leftists in the Midwest USA

midwest.social

61

Midwest.social is a small, community-driven Lemmy instance targeting leftist users primarily in the US Midwest. It offers a federated social platform with integrated Matrix chat rooms and a focus on moderated, rule-based discussions. The platform has grown organically since its founding in 2021 and maintains a niche position within the broader Lemmy ecosystem. Technically, it employs modern web technologies including Bootstrap and JavaScript, hosted on a VPS with domain registration via NameCheap and privacy protection enabled. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the site is safe for general audiences and maintains a moderate level of professionalism and trustworthiness.

F

Fedecan non-profit organization

pixelfed.ca

59

Pixelfed.ca is a Canadian-hosted, non-profit managed instance of the Pixelfed federated image sharing platform. It offers an ethical alternative to centralized social media platforms by enabling decentralized photo sharing with features such as photo posts, albums, filters, collections, and federation support. The platform targets a general audience and is managed by the Fedecan non-profit organization, emphasizing privacy and community standards. Technically, the website uses modern web technologies including JavaScript frameworks (Vue.js implied), Plyr media player, and Cloudflare DNS services. The site is well-structured with good mobile optimization and SEO practices, though some security headers and DNSSEC are not enabled. The platform supports federation and mobile app integration but does not currently support stories or video content. From a security perspective, the site enforces HTTPS and has no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is basic with privacy and terms pages present but no cookie consent mechanism. The domain registration is privacy protected but consistent with the business claims and is registered with a reputable Canadian registrar. Overall, Pixelfed.ca presents a trustworthy, well-maintained platform with a clear ethical stance and community guidelines. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance its security posture and user trust.

K

kavin

feddit.rocks

45

Feddit.rocks is a small, community-driven Lemmy instance within the Fediverse ecosystem, powered by the kavin.rocks verse. It offers a platform for open and respectful discussions on a wide range of topics including technology, privacy, programming humor, and European buying initiatives. The platform emphasizes moderation, community rules, and supports federation with captcha-enabled registration to prevent abuse. The business model relies on donations via cryptocurrency and Liberapay, targeting users interested in decentralized social networking and privacy-conscious communities. Technically, the website is built on the Lemmy open-source platform, hosted and registered through Cloudflare, Inc. It uses HTTPS with a valid SSL certificate, ensuring secure communications. The site is mobile optimized and includes basic SEO metadata, but lacks advanced security headers and privacy policies. The technical infrastructure is modern and adequate for its community-focused purpose, though there is room for improvement in security hardening and privacy compliance. From a security perspective, the site enforces HTTPS and uses captcha with hard difficulty for registrations, which helps mitigate automated abuse. However, the absence of DNSSEC and security headers like Content-Security-Policy or X-Frame-Options represents potential vulnerabilities. No direct contact or incident response information is published, limiting transparency in security management. The domain registration is transparent and consistent with the website's claims, supporting legitimacy. Overall, Feddit.rocks presents a trustworthy and functional community platform with good content quality and technical implementation. To enhance trust and compliance, it should publish privacy and cookie policies, implement security headers, and provide clear contact information. These improvements would strengthen its security posture and user confidence.

P

programming.dev

programming.dev

71

programming.dev is a volunteer-run federated social platform hosting a collection of programming communities and related technical topics. It serves software engineers, hackers, roboticists, and enthusiasts by providing forums, microblogging, git hosting, and chat integrations. The platform leverages modern federated technologies such as ActivityPub and Lemmy, offering multiple frontends for accessibility and user preference. Security posture is strong with HTTPS, security headers, and moderation policies, though privacy compliance could be improved by adding cookie consent mechanisms and explicit security policies. Overall, the site is trustworthy, well-maintained, and focused on fostering a safe and collaborative environment for programmers.