Security Directory

P

Privacy service provided by Withheld for Privacy ehf

corru.observer

59

The website corru.observer is a niche interactive narrative experience centered around speculative technology and immersive storytelling. It does not represent a traditional business but rather a creative project supported by a community of active supporters and merchandise sales. The technical infrastructure relies on modern JavaScript libraries and Cloudflare hosting, providing moderate performance and good mobile optimization. Security posture is basic with HTTPS enforced and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy and cookie policies are absent, and no contact or business information is provided, limiting compliance and trust indicators. Overall, the site is functional and engaging for its target audience but would benefit from improved privacy and security disclosures.

The website transgendersurgeri.es serves as a personal archive platform titled "Lexi's Archive" that hosts various directories and files intended for private use. It employs a password-protected mechanism to restrict downloads, indicating a focus on controlled access rather than public business operations. The site lacks any business branding, contact information, or commercial content, positioning it as a personal or small group resource rather than a commercial entity. Technically, the site is built with basic HTML, CSS, and JavaScript, utilizing the Fira Mono font and a third-party analytics script from lea.pet. The design is minimalistic with basic mobile responsiveness and limited SEO optimization. No CMS or advanced frameworks are detected. The site does not display any privacy or cookie policies, nor does it provide contact or legal information, which limits its compliance posture. From a security perspective, the site uses a numeric key-based password protection for downloads and sets cookies with SameSite=Strict attributes, which is a positive practice. However, there is no visible enforcement of HTTPS or security headers, and no privacy or cookie consent mechanisms are present. The WHOIS data is inaccessible due to Red.es restrictions, preventing verification of domain registration details and reducing trustworthiness. No WAF or blocking mechanisms are detected, and the content is accessible without challenge. Overall, the site scores low on business credibility and privacy compliance, with moderate technical implementation and security posture. It is safe in terms of content, containing no adult or explicit material. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding contact information, and enhancing security headers to improve trust and compliance.

P

Private by Design, LLC

lea.pet

59

The website lea.pet is a personal instance of the Sharkey social platform, designed for a small community of friends. It operates under the domain registered to Private by Design, LLC, a US-based organization. The site offers social networking services with a focus on personal and community content sharing. The business model is niche and community-oriented, with no commercial or enterprise scale indications. The technical infrastructure uses modern web technologies including JavaScript and CSS, with a custom theme and no detected CMS. Hosting details are not explicit, and the domain uses suspicious name servers which may pose security concerns. The site is accessible without WAF or blocking mechanisms and shows moderate performance and mobile optimization. Security posture is average with no DNSSEC and missing security headers, and privacy compliance is weak due to lack of privacy and cookie policies. The site contains adult-themed content and links, targeting a mature audience without age verification. Overall, the site is functional but has notable security and compliance gaps that should be addressed to improve trust and safety.

Arcane Sorrows is a personal website operated by an individual known as mossweaver, presenting a cozy, artistic corner of the internet focused on personal interests and curated content. The site is small-scale, non-commercial, and currently under construction with limited content. The target audience appears to be general internet users interested in personal blogs, art, and niche communities. Technically, the site is built with basic HTML, CSS, and JavaScript, hosted on Hover's infrastructure, and includes external scripts for a webring widget. The site lacks advanced frameworks or CMS platforms and shows basic mobile optimization and accessibility. Security posture is minimal with no DNSSEC, no security headers, and no visible HTTPS enforcement details. Privacy and compliance policies are absent, and no contact or incident response information is provided. The domain registration is consistent with the site's personal nature and shows no suspicious patterns. Overall, the site is safe for general audiences but lacks professional security and compliance features.

A

Akseli Lahtinen

akselmo.dev

48

The website akselmo.dev is a personal blog authored by Akseli Lahtinen, focusing on topics such as gaming, game development, free and open source software (FOSS), and programming. It serves a niche audience of gamers, developers, and open source enthusiasts. The blog has a consistent and professional presentation with a rich archive of posts dating back to 2016, indicating a well-established presence in its domain. The business model is primarily content sharing without commercial transactions or services. Technically, the site is built with standard web technologies (HTML, CSS, JavaScript) and uses Goat Counter for privacy-respecting analytics. The site appears to be hosted on Hetzner, inferred from blog content, and is likely a static or custom-built blog without a CMS. The site is performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS and does not expose sensitive data or forms. However, no explicit security headers were detected, and no privacy or cookie policies are present, which are areas for improvement. The domain registration data is consistent with the website content and author identity, supporting high legitimacy and trustworthiness. Overall, the site is low risk with good content quality and technical implementation but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

D

dragon.style

dragon.style

58

Dragon.style is a small, niche Mastodon instance focused on providing a decentralized social media platform for a queer-friendly community. It is administered by an individual known as Gracious Anthracite, emphasizing a moderated, safe, and ad-free environment. The website serves as an about page detailing community rules, contact information, and donation options, reflecting a non-commercial, community-supported business model. Technically, the site runs Mastodon version 4.0.15, hosted on DigitalOcean, with a standard modern web stack including JavaScript and CSS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR-specific features. Overall, the site is trustworthy and professional for its scope but could improve security and privacy practices.

E

eldritch.cafe

eldritch.cafe

59

Eldritch.cafe operates as an independent Mastodon instance providing decentralized social media services primarily targeting queer, feminist, and anarchist communities, with a focus on French-speaking users. The platform emphasizes community moderation, inclusivity, and amplifying marginalized voices. It maintains a small but active user base and is hosted by Fedi Monster in France. The website content is bilingual and includes detailed moderation guidelines, credits, and legal notices consistent with French law. Technically, the site runs on a Glitch-soc fork of Mastodon, leveraging modern web technologies such as React and JavaScript. The infrastructure is moderately performant and mobile-optimized, though accessibility and SEO features are basic. Hosting and domain registration are consistent and legitimate, with HTTPS enabled and domain transfer protections in place. However, DNSSEC is not enabled, and security headers are absent, indicating room for improvement in security hardening. From a security perspective, the instance enforces clear community rules prohibiting hateful conduct, harassment, misinformation, and illegal content. While no explicit security policy or incident response contacts are published, the moderation team is transparent and active. Privacy compliance is adequate with a privacy policy present, but the absence of a cookie consent mechanism is a minor gap. No vulnerabilities or suspicious patterns were detected in the analysis. Overall, eldritch.cafe presents a trustworthy, community-driven social media platform with a solid technical foundation and clear governance. Strategic enhancements in security headers, cookie consent, and incident response transparency would further strengthen its security posture and compliance standing.

V

VSCodium

vscodium.com

54

VSCodium is a community-driven open source project that provides freely-licensed binaries of Microsoft's VS Code editor without telemetry or proprietary licensing. It targets developers and programmers who prefer open source software with privacy considerations. The website offers comprehensive installation instructions across multiple platforms and package managers, emphasizing ease of access to MIT-licensed VS Code binaries. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and external libraries like AnchorJS and Font Awesome, hosted with Cloudflare DNS services. The site is well-structured, mobile-optimized, and fast loading, with good SEO practices but lacks some accessibility features. Security-wise, the project demonstrates good practices by disabling telemetry and signing Windows binaries, but the website itself lacks explicit security headers, privacy policies, and incident response information, which are areas for improvement. Overall, the domain registration is consistent and transparent, supporting the legitimacy of the project. The site contains no adult or questionable content and is safe for general audiences.

M

My Abandonware

myabandonware.com

61

My Abandonware is a niche website offering a comprehensive database of over 35,000 abandonware video games spanning from 1965 to 2014. It targets retro gaming enthusiasts and nostalgia seekers by providing free downloads of classic games along with detailed metadata, screenshots, user comments, and ratings. The site operates on an ad-supported model with optional user accounts for enhanced experience. Technically, the website employs modern web technologies including JavaScript, CSS3, and uses multiple third-party ad and analytics services with GDPR-compliant consent management. Hosting is supported by Fastly CDN ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security policies and incident response information are absent. The WHOIS data is unavailable, which slightly reduces trust but the active content-rich site and social media presence support legitimacy. Overall, the site is well-positioned in its niche with good content quality and user engagement features.

T

The Khronos Group, Inc.

opengl.org

70

The Khronos Group operates the official OpenGL website, providing authoritative resources, documentation, and news for the OpenGL graphics API. The organization is well-established with a domain registered since 1997, reflecting its long-standing presence in the graphics technology industry. The website targets developers and technology professionals seeking high-performance graphics standards and related tools. Technically, the site employs modern web technologies including HTML5, CSS, JavaScript, and integrates Google Analytics and Tag Manager for tracking and search functionality. Hosting is provided by DigitalOcean, ensuring reliable infrastructure. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism despite use of tracking scripts. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and serves as a key resource hub for the graphics development community.

RARLAB operates the official website for WinRAR, a widely used file archiving software supporting RAR and ZIP formats. The company, win.rar GmbH, has a long-standing presence since 2002 and offers software downloads, licensing, and partner programs. The website is professionally designed with clear navigation and provides essential information about the product and purchasing options. Technically, the site uses jQuery and standard web technologies with basic mobile optimization and accessibility. Security posture is moderate with cookie consent implemented but lacks visible security headers and explicit HTTPS verification. WHOIS data is unavailable, which slightly reduces trust but is common for software vendors. Overall, the site is safe, trustworthy, and serves a general audience without any adult or questionable content.

X

X Corp.

pepsi.zip

11

X.com, formerly known as Twitter, is a leading global social media platform specializing in microblogging and social networking services. Owned by X Corp., the platform offers a range of services including advertising and subscription-based features, targeting a broad general audience worldwide. The website demonstrates a mature digital infrastructure with modern web technologies such as React and GraphQL, optimized for performance and mobile responsiveness. Security is robust with HTTPS enforcement, comprehensive security headers, and bot mitigation technologies integrated. Privacy policies and terms of service are clearly linked and comprehensive, reflecting compliance with GDPR and other regulations. However, explicit security policies and incident response contacts are not publicly disclosed, representing an area for improvement. Overall, the platform maintains a high level of trustworthiness and professionalism, supported by a long-established domain and consistent branding.

X

xkcd: Geologic Periods

xkcd.com

9

xkcd.com is a popular webcomic site delivering humor and intellectual content centered on romance, sarcasm, math, and language. The site targets a general audience interested in science and technology humor and maintains a consistent brand presence with active social media channels. The business model primarily revolves around content publishing, newsletter distribution, and book sales. Technically, the site uses standard web technologies (HTML, CSS, JavaScript) with moderate performance and basic mobile optimization. Security posture is moderate but lacks advanced security headers and visible privacy or cookie policies, which could be improved to enhance user trust and compliance. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy and security measures.

C

CSL Computer Service Langenbach GmbH d/b/a joker.com

modarchive.org

9

The Mod Archive is a well-established niche media platform hosting one of the world's largest collections of music modules, serving musicians, demoscene enthusiasts, and casual visitors. The site offers a community-driven model with user accounts, module uploads, favorites, and forums, supported by donations and hosted by SceneSat. The platform has a consistent brand and a long history dating back to 1996, with the domain registered since 2004. Technically, the website uses basic web technologies including HTML, CSS, JavaScript, and jQuery, with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS implied but lacking DNSSEC and security headers, and no visible advanced security policies or incident response contacts. Privacy compliance is limited, with no cookie consent or explicit GDPR compliance indicators. Overall, the site is trustworthy and functional but would benefit from enhanced security and privacy measures.

G

Giorgio Maone

noscript.net

10

NoScript.net is the official website for the NoScript Security Suite, a free and open-source browser extension that enhances user security by blocking malicious scripts and allowing trusted content only. The project is well-established since 2005 and is integrated into the Tor Browser, positioning it as a trusted tool in the privacy and security software market. The website targets privacy-conscious users and security experts seeking enhanced browser protection. The business model is donation-based, emphasizing free software principles. Technically, the website is built with standard web technologies (HTML, CSS, JavaScript) and supports multiple major browsers. The site is well-structured, mobile-optimized, and accessible, with good SEO practices. However, some modern security enhancements like DNSSEC are not enabled, and no explicit security headers were detected in the provided data. The site does not appear to use any CMS or complex frameworks, reflecting a lightweight and focused technical infrastructure. From a security perspective, the website promotes strong security practices through its product, including script blocking and anti-XSS protections. However, the site itself lacks published privacy, cookie, or security policies, and no contact information or vulnerability disclosure mechanisms are provided. DNSSEC absence and missing security headers represent minor security gaps. Overall, the security posture is good but could be improved with better transparency and technical hardening. The overall risk assessment is low given the nature of the site and its content. Strategic recommendations include publishing privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear contact and vulnerability disclosure information to enhance trust and compliance.

The website doubledouble.top serves as a simple region selection landing page directing users to USA or Europe subdomains. It lacks substantive business information, contact details, or policy documents, indicating a minimal online presence likely for a small or new business. The domain is privacy protected and registered in Saint Kitts and Nevis, which is common for privacy but reduces transparency. Technically, the site uses modern web standards with a clean, mobile-optimized design and is hosted behind Cloudflare, providing basic performance and security benefits. However, the absence of DNSSEC, security headers, and privacy or cookie policies indicates room for improvement in security and compliance. No analytics or advertising scripts were detected, suggesting minimal tracking or marketing activity. Overall, the site is safe with no adult or questionable content but lacks trust signals and business credibility.

Open Camera is a small-scale, open source software project focused on providing an advanced camera application for Android devices. The website serves primarily as an informational and download portal, featuring detailed descriptions of app features, licensing, and links to source code repositories. The business model is based on free software distribution with revenue generated through website advertising. The target audience is Android users seeking enhanced camera functionality beyond stock apps. Technically, the website is a static site hosted by 123-Reg Limited, utilizing standard web technologies such as HTML, CSS, and JavaScript. It integrates Google services including Analytics, Tag Manager, and Adsense for tracking and monetization. The site is mobile-optimized with a basic but functional design and navigation structure. However, it lacks advanced CMS features and some modern security headers. From a security perspective, the site uses HTTPS (implied by domain and Google services usage) and implements cookie consent with anonymized IP tracking for analytics, indicating some privacy awareness. However, no explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are present. The absence of security headers and contact information for security incidents suggests room for improvement in security posture. Overall, the website is trustworthy and professionally maintained for its niche purpose but would benefit from enhanced security practices and clearer privacy compliance documentation. The domain registration data supports legitimacy with consistent and long-term ownership.

B

brr

brr.fyi

9

The website brr.fyi is a personal blog focused on observations and anecdotes related to US Antarctic infrastructure, specifically McMurdo Station and Amundsen-Scott South Pole Station. It targets USAP support staff and enthusiasts interested in Antarctic life. The business model is content sharing through blog posts with subscription options, positioning itself as a niche informational resource. The site is small in scale, founded in 2022, and maintains consistent branding and good content quality. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript with Ionicons for icons. It features a responsive design with a dark mode toggle and basic accessibility features. Hosting details are limited but the domain is registered via Amazon Registrar with privacy protection. Performance is moderate with good SEO practices including meta tags and structured data. From a security perspective, the site uses HTTPS and has domain status protections but lacks DNSSEC and security headers such as CSP or HSTS. No privacy, cookie, or terms policies are present, indicating compliance gaps. No analytics or advertising scripts are detected, suggesting minimal user tracking. The domain registration is privacy protected, which is appropriate for a personal blog, and no suspicious patterns are found. Overall, the site is safe, professional, and trustworthy for its niche audience but would benefit from improved privacy and security policies to enhance compliance and user trust.

C

Chitter

chitter.xyz

63

Chitter.xyz is an independent Mastodon-based decentralized social network fostering a friendly and inclusive community. It operates as a small-scale social platform within the fediverse, emphasizing community moderation and user etiquette to promote kindness and accessibility. The platform is transparent about its hosting and data locations, relying on reputable providers such as Hetzner and AWS for DNS and storage services. The website content is well-structured, with clear descriptions of staff, community guidelines, and support mechanisms via Patreon and Liberapay.

P

Private by Design, LLC

snug.moe

58

Snugly Moe Moe is a small, niche federated social platform instance targeting general users interested in social networking within the 'snuggly beings' community. The website uses modern web technologies including Vue.js and Cloudflare DNS services, providing a moderate level of performance and basic mobile optimization. The domain is registered to Private by Design, LLC in the US, consistent with the website's content and target audience. Security posture is moderate with HTTPS enabled and domain status protections in place, but lacks DNSSEC and security headers which could improve resilience against attacks. Privacy and cookie policies are absent, and no contact or incident response information is provided, which limits compliance and transparency. Overall, the website is safe for general audiences and does not contain adult or explicit content.

P

Private by Design, LLC

moth.monster

60

moth.monster is a small personal and creative website operated by Private by Design, LLC, based in the US. The site features a blog, projects, art portfolio, an online shop, and contact information, targeting a general audience interested in creative content and merchandise. The business model appears to be content sharing combined with merchandise sales through an external shop platform. The website is modest in scale and positioned as a niche personal digital presence rather than a commercial enterprise. Technically, the website is built with standard HTML, CSS, and JavaScript without any detected CMS or advanced frameworks. Hosting and DNS services are provided by Porkbun, LLC. The site shows basic mobile optimization and SEO features but lacks advanced accessibility and performance enhancements. No analytics or advertising technologies are detected, indicating minimal user tracking and a privacy-conscious approach. From a security perspective, the domain is privacy protected and has domain status flags that prevent unauthorized transfers or deletions, which is positive. However, DNSSEC is not enabled, and no security headers are detected, which are areas for improvement. The site lacks privacy and cookie policies, vulnerability disclosure information, and incident response contacts, indicating gaps in compliance and security transparency. No WAF or blocking mechanisms are present, and the content is safe for general audiences. Overall, moth.monster is a modest, privacy-conscious personal website with basic technical and security posture. Strategic improvements in security headers, privacy compliance, and vulnerability disclosure would enhance trust and resilience. The site is low risk but would benefit from formalizing privacy and security practices to align with best practices.

S

The Barkzone

sugrstrz.com

56

SugrStrz.com is a personal website and blog maintained by an individual gamer and technology enthusiast. The site focuses on sharing personal interests including gaming, music, and social media engagement. It serves a niche audience of gaming and retro game fans as well as followers of the owner's social profiles. The business model is non-commercial, primarily a hobby/personal branding platform with no direct revenue streams or commercial services. The website is hosted on Neocities with DNS managed by Cloudflare and domain registration through GoDaddy, reflecting a modest but stable technical infrastructure. The site uses basic HTML, CSS, and JavaScript with some outdated elements such as the deprecated marquee tag, indicating room for modernization. Security posture is basic with no DNSSEC enabled and no visible security headers or HTTPS enforcement in the HTML content, though the domain registration status includes protective flags. Privacy and cookie policies are absent, and no contact or incident response information is provided, limiting compliance and trust signals. Overall, the site is safe for general audiences with no adult content detected. Recommendations include improving security configurations, adding privacy and cookie policies, and enhancing mobile and accessibility features to improve user experience and compliance.

D

Digital Privacy Corporation

keithhacks.cyou

55

The website keithhacks.cyou is a personal site operated by an individual known as ~keith, who identifies as a queer, trans, cyberpunk anarchist with interests in technology, privacy, and the furry community. The site serves as a hub for personal content, hosting various public services including a Git server, IRC, XMPP, and a Tor mirror, reflecting a strong commitment to privacy and alternative internet culture. The domain is registered to Digital Privacy Corporation in the US, consistent with the site's privacy-focused ethos. Technically, the site is hosted on DigitalOcean and built with standard web technologies including HTML5, CSS (Sass), and JavaScript. The site is mobile-optimized with clear navigation and moderate performance. However, it lacks advanced frameworks or CMS platforms and does not implement DNSSEC or security headers, which are recommended for enhanced security. From a security perspective, the site enforces HTTPS and publishes a PGP key for secure communication, which are positive indicators. However, the absence of DNSSEC, security headers, privacy policies, and incident response information indicates room for improvement in security posture and compliance. No tracking or analytics scripts are present, aligning with the site's privacy values. Overall, the site is a niche personal project with moderate technical maturity and a privacy-conscious approach. Strategic improvements in security headers, DNSSEC, and privacy compliance would enhance trust and security. The site is safe for general audiences with no adult or explicit content detected.

P

Privacy service provided by Withheld for Privacy ehf

catgirl.global

55

The website catgirl.global appears to be a small, personal or niche project centered around the 'Sharkey' platform and related technology. The site content is minimal, primarily serving as a front for a Misskey instance or similar social platform, with a focus on a user named 'maya' and their activities. The domain is very new, registered in July 2024, and uses privacy protection services, indicating a small or personal scale operation without extensive business infrastructure. Technically, the site uses modern JavaScript frameworks and tools such as Vite and Phosphor Icons, but the content and SEO optimization are basic. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers. Privacy and cookie policies are absent, and no incident response or vulnerability disclosure information is provided, which limits compliance and trust. Overall, the site is accessible without WAF or blocking mechanisms and contains safe content suitable for general audiences.

F

fawnover.fun

fawnover.fun

45

fawnover.fun is a personal website operated by an individual named June, focusing on sharing media reviews, personal art, and social engagement across various platforms including Fediverse, Twitter, YouTube, Bluesky, Twitch, and Git.gay. The site features artistic SVG graphics and interactive elements such as theme switching and audio playback, reflecting a creative and personal brand. The domain is newly registered in December 2024 and uses privacy protection services, consistent with a personal blog rather than a commercial enterprise. Technically, the site is hosted behind Cloudflare DNS with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies. No analytics or tracking scripts are detected, indicating a privacy-conscious approach.

B

besties

pages.gay

38

pages.gay is a small technology startup offering a niche service for hosting static websites quickly and easily, tightly integrated with the git.gay source code repository platform. The service targets developers and users who want to deploy static sites with minimal setup, leveraging open source software and git repositories. The website is modern, built with SvelteKit, and uses Cloudflare for DNS hosting, providing fast performance and good mobile optimization. However, the site lacks formal privacy, cookie, and terms of service policies, and does not provide contact information, which limits trust and compliance. Security posture is decent with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. No analytics or advertising tools are present, indicating minimal user tracking.

Astrid.tech is a personal technology blog and project showcase website maintained by Astrid Yu. The site focuses on topics such as networking, homelab setups, programming languages, and various tech projects. It is a niche site targeting technology enthusiasts and readers interested in detailed technical content. The website is built using a custom Rust-based static site generator CMS called Seams and hosts static assets on Backblaze B2. The site is fast, mobile-optimized, and uses modern web technologies including JavaScript and CSS. Google Analytics is employed for visitor tracking, but no visible cookie consent mechanism is present. Security posture is moderate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal security policies. The domain is privacy protected, registered in 2020, which aligns with the site's personal nature and recent content updates. Overall, the site is trustworthy and professional but would benefit from improved privacy compliance and security best practices.

T

Theia Bähr, Games

teamakes.games

59

Theia Bähr, operating under the brand 'tea makes games', is a small indie game developer based in Germany specializing in experimental and artistic games. The website serves as a professional portfolio showcasing a variety of free and commercial games, including the 2024 commercial release 'The Elision Effect'. The business targets niche audiences interested in contemplative, surreal, and atmospheric gaming experiences. The company leverages platforms such as Steam and itch.io for distribution and uses PayPal for payment processing. Technically, the website is well-constructed with modern HTML5, CSS3, and JavaScript, hosted on Cloudflare infrastructure ensuring good performance and availability. The site is mobile-optimized and accessible with good SEO practices.

C

crimew.gay

crimew.gay

57

crimew.gay is a small, community-driven Fediverse instance operated by an individual named Maia. It provides a social networking platform based on the Pleroma software, targeting users interested in a curated and moderated federated social experience. The instance emphasizes active moderation and federation policies to maintain community standards. Technically, the site uses modern web technologies and is mobile optimized, though it lacks some advanced security headers and privacy compliance features. The domain is relatively new, registered in 2022 with privacy protection, which is appropriate for this type of community service. Security posture is moderate with HTTPS enabled but could be improved with DNSSEC and additional headers. Overall, the site is functional and trustworthy but would benefit from enhanced privacy policies and contact transparency.

The website arch.dog is a personal, playful blog and project showcase owned by Gabriel Simmer, based in Great Britain. It features a dog-themed persona with links to social media, personal projects, and a community of related sites. The site is small-scale and targets a general audience interested in creative and personal content. Technically, the site is built with standard HTML, CSS, and JavaScript, hosted via Cloudflare DNS, but lacks advanced frameworks or CMS. Performance and mobile optimization are moderate to good, with basic accessibility and SEO features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. No privacy or cookie policies are present, and no contact information or incident response details are provided, limiting compliance and trust signals. Overall, the site is legitimate and safe, but could improve in security and privacy transparency.

The website vea.st is a small-scale technical project focused on providing a browser-based virtual machine experience using technologies such as libv86 and JavaScript. It targets a niche audience interested in retro computing or browser virtualization. The site also fosters community engagement through a webring linking multiple related and partner sites. The technical infrastructure leverages Cloudflare for DNS and bot protection, including the use of Turnstile CAPTCHA, and hosts custom JavaScript libraries for VM functionality and playful UI elements like Browser-Ponies. However, the site lacks standard business and compliance features such as privacy policies, cookie consent mechanisms, and contact information, which limits its professionalism and trustworthiness. Security posture is basic with HTTPS enabled but missing important security headers and incident response details.

Keybase, owned by Zoom Video Communications, Inc., is a secure messaging and file-sharing platform that leverages public key cryptography to provide end-to-end encryption for individuals, families, communities, and companies. The service is available across multiple platforms including desktop and mobile operating systems, emphasizing privacy and security without reliance on third-party tracking or advertising. The website content is professionally designed, clear, and focused on promoting secure communication and file sharing with features such as exploding messages and team collaboration. Technically, the site uses modern web technologies and is hosted on AWS infrastructure, with DNS managed via Amazon's DNS services. Security posture is strong with HTTPS enforced, CSRF protections, and domain registration protections, though DNSSEC is not enabled and some security headers are not explicitly confirmed. Privacy compliance is robust with clear privacy and terms of service documentation, but no cookie consent mechanism is present, likely due to minimal cookie usage. No contact emails or phone numbers are publicly listed, which may limit direct user support visibility. Overall, the site is trustworthy, secure, and well-positioned in the technology sector as a privacy-focused communication tool.

T

The Fox Nexus

fox.nexus

67

The Fox Nexus operates as a small independent Mastodon social media instance, providing a federated platform for users interested in the fediverse. The website offers basic services typical of Mastodon servers, including user registration (currently closed), login, and content exploration. The platform targets users familiar with decentralized social networking and positions itself as a niche community for 'foxes'. Technically, the site runs Mastodon version 4.4.0-alpha.4+chuckya, leveraging modern web technologies such as JavaScript, SVG, and CSS with integrity checks on scripts and stylesheets, ensuring a moderate level of technical maturity and performance. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, though it lacks advanced security headers and explicit incident response policies. Privacy compliance is basic, with privacy and terms of service pages present but no cookie consent mechanism or GDPR-specific disclosures. Overall, the site is safe, professional, and trustworthy for its intended audience but could benefit from enhanced security and privacy features.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which serves as a local offline or error display within the Chrome browser, including embedded code for the Chrome Dino game. There is no accessible external website content, business information, or user-facing services. The page is not a public website but an internal browser resource. Consequently, no business description, market position, or services can be identified. The technical infrastructure is limited to embedded JavaScript and canvas-based game code typical of the Chrome Dino offline game. Security posture cannot be fully assessed due to lack of external hosting or HTTPS context. Privacy and compliance policies are absent, as expected for an internal error page. Overall, this is not a commercial or public-facing website, and risk assessment is minimal but limited by lack of external content.

The website k4m1.net is a personal blog focused on technology topics including software, firmware, hardware projects, mathematics, and cryptography. It serves a niche audience of technology enthusiasts and hobbyists interested in deep technical content. The site is small scale and newly established in late 2023, with a consistent and clear branding approach. Technically, the site uses standard HTML, CSS, and JavaScript without a CMS, hosted likely via netcup.net based on DNS information. Performance and mobile optimization are good, though accessibility and SEO are basic. Security posture is moderate with HTTPS enabled but lacking advanced security headers and DNSSEC. No forms or sensitive data collection are present, reducing risk. Privacy compliance is basic with a privacy policy page but no cookie consent mechanism. Business credibility is moderate given the personal nature and clear author attribution. Overall, the site is safe, trustworthy, and well maintained for its scope.

The website 'theresnotime.co.uk' serves as a personal professional portfolio for Sammy Fox, a software engineer affiliated with the Wikimedia Foundation and Wikimedia UK. The site showcases professional roles, projects, open source contributions, and social profiles, targeting a general audience interested in technology and open source communities. The business model is individual-centric, focusing on personal branding and community engagement rather than commercial services. Technically, the website employs modern web standards including HTML5, CSS, JavaScript, and JSON-LD structured data. It integrates privacy-respecting analytics tools such as PiratePX and GoatCounter, and is hosted likely by Mythic Beasts. The site is mobile-optimized with good performance and SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS and demonstrates good practices such as PGP key publication for identity verification. However, it lacks explicit security headers, privacy and cookie policies, and vulnerability disclosure mechanisms. No forms collect sensitive data, reducing attack surface. The WHOIS data is unavailable due to a domain naming rules error from Nominet UK, which raises some concerns but the website content and affiliations suggest legitimacy. Overall, the website is trustworthy and professionally maintained, but improvements in privacy compliance and security headers are recommended to enhance user trust and regulatory adherence.

S

scalar.dev

beampipe.io

54

Beampipe.io is a privacy-focused web analytics SaaS platform offering a simple, cookie-free alternative to Google Analytics. Founded in 2020 and sponsored by scalar.dev, it targets small to medium website owners who prioritize privacy and compliance with regulations such as GDPR, PECR, and CCPA. The platform provides a real-time analytics dashboard, Slack integration, goal tracking, and API access with a free tier for up to 10k monthly page views and paid plans for higher usage. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content. Technically, it uses modern web technologies including React and Next.js, delivering fast performance and good SEO. Security posture is strong with HTTPS enforced and privacy by design, though some security headers and policies could be improved. The WHOIS data shows privacy protection consistent with a legitimate small tech business. Overall, the site demonstrates a mature digital presence with a strong emphasis on privacy and user trust.

Indeed is a globally recognized employment-related search engine and recruitment platform, connecting job seekers with employers. The website is a subdomain of indeed.com, targeting primarily UK users. The platform offers services such as job search, company reviews, salary information, resume uploads, and employer job postings. It operates under the parent company Recruit Holdings Co., Ltd., positioning itself as a leading player in the online recruitment industry. Technically, the site is protected by Cloudflare's security infrastructure, including Turnstile CAPTCHA, which currently blocks full content access. This indicates a mature security posture aimed at mitigating automated threats and bots. However, this protection limits the ability to fully assess the website's technical implementation, performance, and content quality. From a security perspective, the presence of Cloudflare WAF and CAPTCHA is a strong defense mechanism. Yet, the lack of visible security headers, privacy policies, and contact information on the challenge page restricts a comprehensive security and compliance evaluation. The WHOIS data for the subdomain is unavailable, which is typical for subdomains managed under a parent domain, but this limits domain legitimacy verification. Overall, the site is safe for general audiences, with no adult or explicit content detected. The blocking by Cloudflare reduces the AI scoring significantly, and strategic recommendations include improving transparency of policies and ensuring accessibility beyond security challenges for better user experience and compliance.

Y

Yacht

yacht.nl

71

Yacht is a professional recruitment and staffing company operating under Randstad Groep Nederland, targeting professionals seeking career advancement and organizations requiring specialized talent. The website offers comprehensive vacancy listings, traineeships, freelance assignments, and HR services, positioning itself as a key player in the Dutch recruitment market. Technically, the site employs modern tracking and analytics tools including Google Analytics, Google Tag Manager, and Recaptcha Enterprise, with a custom frontend framework. The site is mobile optimized and demonstrates good SEO and accessibility practices. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. Overall, the domain registration aligns well with the business identity, supporting legitimacy and trustworthiness.

The website 'theresnotime.co.uk' serves as a personal professional portfolio and blog for Sammy Fox, a software engineer affiliated with the Wikimedia Foundation. The site targets a general audience interested in technology, open source, and community engagement, showcasing professional projects, social profiles, and personal interests. The business model is individual-centric, focusing on personal branding and community contributions rather than commercial services. Technically, the site employs modern web standards including HTML5, CSS3, JavaScript, and JSON-LD structured data. It references technologies such as Python, Node.js, and PHP through linked projects and packages. Hosting appears to be provided by Mythic Beasts, and the site uses HTTPS with strong SSL configuration. Performance and mobile optimization are good, though accessibility features are basic. SEO is well addressed through meta tags and structured data. From a security perspective, the site benefits from HTTPS and publishes a public PGP key, indicating a commitment to secure communications. However, no explicit security headers were detected, and there is no cookie consent mechanism despite the use of tracking pixels. The WHOIS data is unavailable due to domain naming rules violations, which raises questions about domain registration legitimacy but does not directly impact the website's content quality or security posture. Overall, the website is professional, trustworthy, and safe for general audiences. The main risks relate to privacy compliance and domain registration transparency. Strategic recommendations include implementing security headers, adding a cookie consent mechanism, publishing security and incident response policies, and clarifying domain registration status to enhance trust.

G

Grat10berg

grat.gay

46

The website grat.gay is a personal Vtuber content hub created by an individual known as Grat10berg. It serves as a portfolio and social gateway featuring original characters, art galleries, social media links, and commission information. The site is hosted on Neocities and uses Cloudflare DNS, indicating a small-scale personal project rather than a commercial enterprise. The technical infrastructure is basic but functional, leveraging standard web technologies such as HTML5, CSS3, JavaScript, and SVG graphics. The site includes interactive elements like a guestbook and a chat feature, although the chat is noted as unfinished. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, and no contact emails or phone numbers are provided, limiting compliance and trust signals. Overall, the site is safe for general audiences and does not contain adult or explicit content.

5

5225225

5snb.club

62

5snb.club is a personal blog and creative site maintained by an entity identified as 5225225. The site focuses on sharing technical, artistic, and security-related content, targeting a general technical and creative audience. It operates as a niche personal publishing platform with community engagement through webrings and related links. The website is built using the Zola static site generator, delivering content primarily through static HTML, CSS, and JavaScript, with no detected dynamic forms or tracking mechanisms. The site demonstrates good content quality and consistent branding, though it lacks advanced SEO and accessibility features. Security posture is moderate, with no HTTPS or security headers explicitly detected in the provided content, but no sensitive data exposure or vulnerabilities are evident. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanisms. Business credibility is limited due to the absence of contact information or formal business details, consistent with a personal blog. Overall, the site is safe, trustworthy, and well-maintained for its intended purpose.

P

Private by Design, LLC

zvava.org

47

zvava.org is a personal website and wiki maintained by an individual named Sophia (Sophie). The site serves as a digital brain-out-on-a-table, hosting a variety of personal projects, thoughts, and curated content spanning software, hardware, music, internet culture, and art. It targets a niche audience interested in open source, privacy, and internet subcultures. The business model is primarily personal/hobbyist with donation support. The domain is registered with a privacy-focused entity in the US, consistent with the site's privacy-conscious ethos. Technically, the site uses standard HTML5, CSS3, and JavaScript without major frameworks or CMS. The design is good with clear navigation and mobile optimization. Performance is moderate, and accessibility is basic. No analytics or advertising scripts are present, indicating minimal user tracking. However, the site lacks privacy and cookie policies, security headers, and DNSSEC, which are areas for improvement. From a security perspective, the domain is protected against unauthorized deletion and transfer, but DNSSEC is not enabled. No security headers were detected, and no forms collect user data, reducing attack surface. The site does not provide a security policy or incident response contacts, limiting transparency. Overall, the security posture is moderate but could be enhanced with standard best practices. The overall risk is low given the personal nature and limited data collection, but compliance gaps exist. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and publishing a security.txt file. These steps would improve trust, compliance, and security posture.

I

Immediate

immediate.co.uk

59

Immediate is a well-established UK media company operating since 1996, managing iconic consumer brands such as Radio Times, Good Food, and BBC Gardeners’ World Magazine. The company delivers content across multiple channels including print, digital, video, podcasts, and live events, reaching over 21 million UK adults monthly. Their business model focuses on trusted content and diversified media offerings under the parent company Burda. Technically, the website uses modern frameworks like Nuxt.js and Tailwind CSS, hosted likely on WP Engine, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and terms pages are missing, representing compliance gaps. The domain registration data is consistent and supports the legitimacy of the business. Overall, Immediate presents a professional, trustworthy online presence with room for improvement in privacy disclosures and security transparency.

J

Joey Hess

joeyh.name

53

The website joeyh.name is a personal technical portfolio and blog belonging to Joey Hess, a free software developer and technologist. The site features a variety of personal and technical content including blog posts, code repositories, talks, and podcasts. The business model is primarily personal branding and knowledge sharing, targeting a general audience interested in technology and free software. The site is positioned as an individual contributor's platform rather than a commercial enterprise. Technically, the site is built using the ikiwiki static site generator, with a simple HTML, CSS, and JavaScript stack. Hosting is under a domain registered with Gandi SAS, a reputable registrar. The site shows moderate performance and basic mobile optimization. SEO and accessibility are basic but functional. No advanced analytics or tracking technologies are detected, indicating a privacy-conscious approach. From a security perspective, the domain status clientTransferProhibited is a positive indicator against unauthorized domain transfers. However, the site lacks security headers, privacy and cookie policies, and vulnerability disclosure mechanisms. No HTTPS status was explicitly detected in the provided data, so SSL configuration is unknown. The site does not appear to use any WAF or security challenge mechanisms, and no vulnerabilities or suspicious patterns were found. Overall, the site is safe, trustworthy, and professionally maintained as a personal technical resource. The main risks relate to lack of formal privacy and security policies, which could be improved to enhance compliance and user trust.

The website www3.lobi-teamsport.de is a parked domain with minimal content primarily consisting of advertising scripts and placeholders. There is no clear business description, contact information, or services offered. The site uses multiple third-party ad and tracking scripts, including Google Adsense and Youseasky, but lacks privacy or cookie consent mechanisms. Technically, the site uses standard HTML and JavaScript with Cloudfront CDN hosting but does not enforce HTTPS or implement security headers. The overall security posture is weak, with no visible compliance to GDPR or other privacy regulations. Business credibility is low due to lack of verifiable information and registrant transparency. The domain WHOIS data indicates use of generic redirect name servers typical for parked domains, further reducing trust. The site is accessible without WAF or security challenges but offers limited value or trustworthiness to users.

S

Sportastic

sportastic.com

60

Sportastic is an Austrian e-commerce retailer specializing in sports equipment for schools, clubs, and leisure activities. The company offers a wide range of over 3,500 sports articles and emphasizes full-service consultation, partnering with public institutions such as BBG and various ministries. The website is professionally designed, mobile-optimized, and provides comprehensive legal and privacy documentation, reflecting a mature digital presence. Technically, the site employs modern JavaScript libraries and integrates multiple marketing and analytics tools including Google Tag Manager, Bing Ads, Mouseflow, and Doofinder search. While the site is performant and well-structured, there is no explicit evidence of advanced security headers or a published security policy, which could be improved. The cookie consent mechanism is robust and GDPR compliant, indicating good privacy practices. Security posture is moderate; HTTPS is used, and CSRF tokens are present, but the absence of WHOIS domain registration data raises concerns about domain legitimacy. No WAF or blocking mechanisms were detected, and the site content is safe for general audiences. Overall, the site scores well on content quality and privacy compliance but should address domain registration transparency and enhance security headers. Strategic recommendations include verifying domain registration details, implementing comprehensive security headers, publishing a security policy and incident response contacts, and auditing third-party scripts regularly to mitigate vulnerabilities.

U

Upmind

upmind.app

57

Upmind is a technology company focused on providing developer documentation and resources, likely through a SaaS platform or API documentation hosting service. The website analyzed is a documentation subdomain hosted on ReadMe.io, which serves as a platform for technical documentation. The specific page requested is not found (404 error), limiting content availability for analysis. The site uses modern web technologies including React and integrates multiple analytics and customer engagement tools such as Google Tag Manager, Amplitude, FullStory, and Intercom. Security posture is moderate with HTTPS enforced but lacks security headers and privacy policies on the analyzed page. No contact or business information is present on this page, reducing business credibility and privacy compliance scores. Overall, the site appears to be a legitimate technical documentation resource but the analyzed page is an error page, limiting full assessment.

G

GoodFirms

goodfirms.co

68

GoodFirms is a reputable B2B review and rating platform that helps businesses and buyers identify and select trusted service providers across various technology and marketing sectors. The platform offers extensive listings of software development, web and app development, design, marketing, and emerging technology companies, supported by over 70,000 verified user reviews. The website is professionally designed with clear navigation and is optimized for mobile devices, providing a seamless user experience for its target B2B audience. From a technical perspective, GoodFirms employs modern web standards including HTML5, CSS3, and JavaScript, with performance optimizations such as lazy loading images and responsive design. The site uses HTTPS with valid SSL certificates and includes security measures like CSRF tokens, although additional security headers could enhance its posture. Privacy and cookie policies are comprehensive and indicate GDPR compliance, reflecting a mature approach to data protection. Security-wise, the platform demonstrates good practices with encrypted communications and no visible vulnerabilities or exposed sensitive data. However, the absence of a public security policy, incident response contacts, or a security.txt file suggests room for improvement in transparency and readiness. The WHOIS data is fully redacted, typical for privacy protection, and does not raise immediate concerns given the professional nature of the site. Overall, GoodFirms presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing incident response information, and maintaining transparency around data protection to further build trust and compliance.

R

RebelMouse

rebelmouse.com

74

RebelMouse is a technology company specializing in a composable digital experience platform (DXP) and content management system (CMS) designed for modern digital publishers and content creators. Founded in 2012, the company offers a combination of technology, consultation, and creative agency services to help clients optimize organic reach, user engagement, and monetization. The website demonstrates a mature digital presence with extensive use of modern web technologies, analytics, and tracking tools, reflecting a high level of digital maturity. Security posture is strong with HTTPS and service workers, though explicit security headers and policies could be improved. The absence of WHOIS data reduces transparency but is likely due to privacy protection. Overall, the website is professional, trustworthy, and well-optimized for performance and SEO.