Security Directory

P

Private by Design, LLC

derg.rest

43

The website derg.rest is a personal site representing an aspiring master electrician named Tom Darsonian based in Michigan, USA. The site serves primarily as a personal portfolio or presence with minimal content focused on personal interests and updates. The business is small-scale and newly established, as indicated by the domain registration date in early 2024. The site lacks formal business contact information, privacy policies, and terms of service, which limits its professional and compliance posture. Technically, the site is simple, built with basic HTML and CSS, and uses Cloudflare for DNS services. There is no evidence of a CMS or advanced frameworks. Mobile optimization and accessibility are basic but functional. Performance is moderate with no visible errors or broken elements. However, security measures are minimal; no security headers or DNSSEC are enabled, and HTTPS enforcement is not confirmed from the data provided. From a security perspective, the domain registration is consistent and legitimate with appropriate domain status protections. The absence of privacy and cookie policies, contact information, and security headers reduces the overall security and privacy compliance score. No vulnerabilities or malicious content were detected. The site content is safe for general audiences with no adult or explicit material. Overall, the site scores moderately on AI evaluation, with strengths in business credibility due to consistent WHOIS data and weaknesses in privacy compliance and security posture. Strategic improvements in security headers, privacy policies, and contact information would enhance trust and compliance.

J

JamSharp

jamsharp.net

57

JamSharp.net is a personal website serving as a blog and project portfolio for the individual or entity known as JamSharp. The site aggregates blog posts, social media links, and open source projects primarily hosted on GitHub. The business model is personal branding and content sharing within the technology sector, targeting a general audience interested in software development and related topics. The website is relatively new, with the domain registered in 2022, and is hosted on Cloudflare with modern web technologies such as SvelteKit, indicating a moderate level of digital maturity. From a technical perspective, the site uses a modern JavaScript framework (SvelteKit) and benefits from Cloudflare's DNS and hosting services, providing good performance and HTTPS security. The site is mobile optimized and has basic accessibility and SEO features. However, it lacks advanced security headers and DNSSEC, which could be improved to enhance security posture. Security-wise, the website enforces HTTPS and has domain transfer protections but lacks published privacy, cookie, or security policies. No forms or data collection mechanisms are present, reducing attack surface but also limiting user engagement features. No vulnerability disclosure or incident response information is provided, which is a gap for security transparency. Overall, the security posture is moderate but could be improved with better policy disclosures and security headers. The overall risk assessment is low given the site's personal and informational nature, but strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, adding security headers, and establishing a vulnerability disclosure process to improve trust and compliance.

Y

Yiff.Life

yiff.life

65

Yiff.Life is a small, independent Mastodon instance focused on serving the furry and LGBTQA+ communities. It operates as a non-commercial, donation-supported platform with a clear community orientation. The instance is administered by an individual known as 'Sky @ WHY2025' and features contributions from known artists. Technically, the platform runs on a dedicated Hetzner cloud VM, uses a Glitch-Soc fork of Mastodon, and leverages modern web technologies including React and ES modules. The infrastructure includes daily backups and CDN hosting, indicating a reasonable level of operational maturity. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is accessible, well-structured, and serves a niche adult audience with moderate trustworthiness.

B

skull's blog

brutecat.com

59

The website brutecat.com is a personal cybersecurity research blog titled "skull's blog" that publishes technical articles focused on hacking techniques, vulnerability disclosures, and security research related to Google and YouTube user data. It targets security researchers, hackers, and tech enthusiasts interested in advanced security topics. The business model is content publishing without commercial or e-commerce elements, positioning it as a niche blog in the cybersecurity domain. Technically, the site is built using modern web technologies including SvelteKit and is hosted on Cloudflare Pages, ensuring fast performance and excellent mobile optimization. The domain is registered with Cloudflare, Inc. with a long 10-year expiry, indicating commitment to the domain. The site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers, which are recommended for enhanced security. From a security posture perspective, the site enforces HTTPS and has domain transfer protection but lacks published privacy, cookie, or security policies, and no contact or incident response information is provided. Minimal tracking is present via Cloudflare analytics. No vulnerabilities or malware indicators were found, but the absence of DNSSEC and security headers are notable gaps. Overall, brutecat.com is a technically sound, niche cybersecurity blog with good content quality and performance but limited privacy and security policy disclosures. Strategic improvements include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and publishing incident response contacts to enhance trust and compliance.

R

Restart

titaniumbot.me

58

Titanium is an open source multipurpose Discord bot launched in late 2024, offering a wide range of features including image manipulation, server statistics, Spotify integration, and quote generation. The website serves as a professional landing page targeting Discord users and server administrators, emphasizing ease of use and privacy. Technically, the site is built with modern frameworks like SvelteKit, hosted behind Cloudflare, and optimized for performance and mobile devices. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and explicit security policies. Privacy compliance is partial with privacy and terms pages present but missing cookie consent mechanisms and contact information. Overall, the site is trustworthy and well-positioned for its niche but could improve transparency and security practices.

TwitterDB is a small technology project focused on aggregating and providing historical data on Twitter tags and hashtags. The website offers search and statistical analysis of over 96 million unique tags and 20 million hashtags, processing more than 1.8 billion tweets over approximately one year. However, the project is archived and no longer updated due to changes in Twitter's API, with all data frozen as of April 1, 2023. The site targets researchers, social media analysts, and data enthusiasts interested in Twitter trends. Technically, the website is built using Angular 12, hosted by Hetzner Online GmbH, and uses Cloudflare DNS without DNSSEC. The site has moderate performance and basic mobile optimization. SEO and accessibility are basic, with no advanced compliance or security headers detected. No privacy or cookie policies are present, and no contact or incident response information is provided, limiting transparency and compliance. From a security perspective, the site lacks DNSSEC, security headers, and visible incident response contacts. The SSL configuration is unknown but presumed present due to Cloudflare DNS usage. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent and legitimate, with domain registration dating back to 2021, matching the site's operational timeline. Overall, the website scores moderately on business credibility and technical implementation but scores low on privacy compliance and security posture. The absence of privacy policies and contact information, combined with minimal security controls, suggests areas for improvement. The site content is safe for general audiences, with no adult or explicit material detected.

P

Privacy service provided by Withheld for Privacy ehf

booklify.me

54

Booklify.me is a technology startup offering a digital bookshelf platform that enables users to scan, collect, and share their book collections easily. The service integrates a companion app for barcode scanning and automatically organizes books by series. The platform targets book enthusiasts and collectors, providing a free account model to manage personal libraries and share them with friends or keep them private. The website is built on modern Angular technology with Material Design components, hosted behind Cloudflare DNS services, and includes a tracking script from u.cd0.eu for analytics. Privacy and terms of service pages are present, indicating basic compliance with data protection regulations. However, no cookie consent mechanism or detailed security policies are published on the site.

The website sandcat.lol is a personal hobbyist site owned by an individual named Tom, who shares interests in technology, gaming, and personal computer hardware. The site serves as a personal blog and contact point primarily via Discord. The content is basic and targeted at general internet users interested in tech and gaming. The domain is newly registered in December 2024 and uses privacy protection services, which is typical for personal websites. Technically, the site uses standard HTML, CSS, and JavaScript with Cloudflare DNS but lacks advanced security headers and privacy policies. No forms or data collection mechanisms are present, and no analytics or advertising scripts are detected. The site is accessible without WAF or security challenges and contains no adult or explicit content, making it safe for general audiences.

The website 'Niko's Webpage' is a personal hobbyist site created by an individual named Niko, focusing on interests such as IT, coding, computing, radio, gaming, and programming projects. The site serves as a personal portfolio and social hub linking to various related hobbyist and friend sites. The domain is very new, registered in August 2024, and consistent with the personal nature of the content. The site does not represent a commercial business entity and lacks formal business information or contact details. Technically, the website is built with basic HTML and CSS, hosted behind Cloudflare DNS but without advanced security headers or CMS frameworks. The site has moderate performance and basic mobile optimization but lacks SEO and accessibility enhancements. No analytics or advertising technologies are detected, indicating minimal tracking or marketing efforts. From a security perspective, the site lacks privacy and cookie policies, security headers, and vulnerability disclosure mechanisms. The domain does not use DNSSEC, and SSL/TLS configuration details are not provided, which may indicate basic or incomplete HTTPS implementation. No forms or data collection points are present, reducing attack surface but also limiting user interaction. Overall, the website is safe for general audiences, with no adult or explicit content. The risk profile is low given the personal nature and limited functionality, but improvements in security posture and privacy compliance are recommended to enhance trust and protection.

P

Private by Design, LLC

critters.gay

61

Critters.gay is a niche social media platform targeting the 'critters' community, offering a small, focused alternative to mainstream social media. The platform is built on the Sharkey software and hosted with Cloudflare DNS services, reflecting a modern but minimalistic technical infrastructure. The website content is accessible and well-branded, with consistent theming and a clear community focus. However, it lacks formal privacy and cookie policies, which are important for compliance and user trust. Security posture is moderate, with domain registration protections in place but missing DNSSEC and security headers. Overall, the site is safe for general audiences and does not contain adult or explicit content.

SEMICON Taiwan is a premier semiconductor industry exhibition and event platform held in Taipei, Taiwan. It serves as a global hub for semiconductor professionals, companies, and technology leaders to collaborate, showcase innovations, and discuss key industry trends. The event attracts over 1,100 companies and 100,000 professionals, emphasizing Taiwan's strategic role in the semiconductor supply chain. The website is professionally designed using Drupal CMS, optimized for mobile, and integrates modern tracking and marketing tools such as Google Tag Manager and HubSpot. Security posture is solid with HTTPS and domain protections, though some security headers and explicit policies could be improved. Privacy and cookie policies exist but are basic, with GDPR compliance not explicitly stated. Overall, the site reflects a mature, credible business with strong industry positioning and digital presence.

A

Accomplice

accomplice.co

60

Accomplice is a specialized venture capital firm and contemporary family office focused on high conviction investments in technology startups. The firm has a strong market position, evidenced by its involvement in the early stages of numerous successful companies such as AngelList, DraftKings, and Patreon. Their business model centers on concentrated, patient investments and includes initiatives like Accomplice Blockchain and the Spearhead operator-angel movement. The website reflects a professional and consistent brand image targeting investors and entrepreneurs in the technology sector. Technically, the website is built on the PageCloud platform, utilizing jQuery and hosted with Cloudflare DNS services. The site is mobile optimized and performs moderately well, though it lacks advanced SEO and accessibility features. The absence of DNSSEC and security headers indicates room for improvement in technical security hardening. From a security perspective, the site uses HTTPS and has domain transfer locks in place, which are positive indicators. However, it lacks visible security policies, incident response information, and vulnerability disclosure mechanisms. No privacy or cookie policies were found, which is a compliance gap. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website presents a low risk profile with a solid business credibility but requires enhancements in privacy compliance and security best practices to improve trust and regulatory adherence. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and publishing incident response and vulnerability disclosure information.

P

Private by Design, LLC

rez.bio

54

rez.bio is a small, informal personal or community website operated under the privacy-focused registrant Private by Design, LLC. The site features playful content including ASCII art, friend links, and a Discord user link, but lacks formal business descriptions or commercial services. Technically, the site is built using the modern SvelteKit framework and uses Cloudflare for DNS, indicating a contemporary but minimal infrastructure. Security posture is basic with no DNSSEC or security headers detected, and no privacy or cookie policies published, which limits compliance and trust. Overall, the site is safe with no adult or explicit content, but lacks business credibility and formal security or privacy measures.

‹

‹div›RIOTS

divriots.com

9

‹div›RIOTS is a small technology company specializing in the development of innovative Figma plugins designed to enhance design workflows. Their product suite includes a variety of plugins that convert HTML, PDFs, images, and other formats into Figma designs, as well as tools for removing backgrounds, upscaling images, and more. The company targets designers and developers who use Figma as their primary design tool. The website reflects a professional and modern digital presence with a focus on showcasing their plugin offerings. Technically, the website is built using modern web technologies including Astro framework, JavaScript, and CSS, with hosting and DNS services provided by Cloudflare and domain registration via Squarespace. The site includes minimal tracking via Fathom Analytics and uses Sendinblue for form submissions. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site uses HTTPS and has domain status protections to prevent unauthorized changes. However, DNSSEC is not enabled, and no security headers or vulnerability disclosure policies are present. Privacy and cookie policies are absent, indicating gaps in compliance with GDPR and related regulations. No direct contact information or incident response contacts are provided. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security best practices, and clearer contact and policy disclosures to improve user trust and regulatory adherence.

B

Bundlephobia | Size of npm dependencies

bundlephobia.com

53

Bundlephobia is a specialized web service launched in 2017 that helps JavaScript developers and frontend engineers analyze the size and performance impact of npm packages before integrating them into their projects. The website provides tools to measure package size, composition, and exports, including a beta feature to scan package.json files. It occupies a niche market position focused on frontend bundle optimization and is supported by open source community trust signals such as GitHub sponsorship and transparent hosting credits. Technically, the site is built on modern frameworks like Next.js and React, hosted on DigitalOcean, and uses Amplitude for analytics and Sentry for error monitoring, indicating a mature digital infrastructure with good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements are needed in DNSSEC, security headers, and formal privacy and cookie policies. Overall, the site is professional, trustworthy, and safe for general audiences, but lacks explicit contact and compliance documentation which slightly reduces its privacy compliance score.

N

New Vector Ltd

riot.im

77

Element.io is a leading secure collaboration and messaging platform built on the open Matrix protocol. Founded in 2011 and operated by New Vector Ltd, the company offers end-to-end encrypted communication solutions that emphasize data sovereignty and interoperability. Their offerings include the Element App for users and the Element Server Suite for backend customization, targeting enterprises, governments, and organizations requiring secure real-time communication. The website reflects a mature, professional digital presence with comprehensive content and multilingual support. Technically, the site uses modern web technologies, is mobile-optimized, and integrates marketing and analytics tools such as HubSpot. Security posture is strong, supported by industry certifications like ISO/IEC 27001:2022 and Cyber Essentials Plus, though DNSSEC is not enabled. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Element.io demonstrates high business credibility and trustworthiness.

P

Private by Design, LLC

critter.cafe

66

Critter Cafe is a small, independent social media platform operating a Mastodon instance aimed at users seeking an alternative to mainstream social media. It offers a cozy, decentralized environment with features such as extended post lengths, custom profile fields, and poll options. The platform is self-hosted on private hardware, emphasizing user privacy and community engagement without algorithms or advertising. The domain is registered to Private by Design, LLC in the US, consistent with the website's claims and recent launch in 2024. Technically, the site uses modern open-source Mastodon software forks and Cloudflare DNS, with good mobile optimization and basic accessibility. Security posture is solid with HTTPS and domain status protections, though DNSSEC is not enabled and security headers are absent. Privacy compliance is partial, with a privacy policy present but no cookie consent or terms of service. Overall, the site is trustworthy and well-positioned within its niche, but could improve security and compliance practices.

The website timedout.uk is a personal site operated by an individual known as 'nex', focusing on cybersecurity interests, programming skills, and casual gaming. It serves as a personal blog and portfolio with links to various social and gaming profiles. The site does not represent a commercial business entity and lacks formal business information or contact details. Technically, the site is built with standard HTML and CSS, hosted likely on a Linux-based VPS environment with Cloudflare as the domain registrar. The site is accessible without any WAF or security challenges and uses HTTPS with DNSSEC enabled, indicating a good baseline security posture. However, the absence of privacy, cookie, or terms of service policies and lack of contact information limits its privacy compliance and business credibility. The WHOIS data shows an anomalous domain creation date set in the future, which raises questions about domain registration legitimacy but does not directly impact the site's content or security. Overall, the site is safe for general audiences and provides a moderate level of technical and security maturity.

L

Lilly Schramm

eps-dev.de

49

EPS-DEV is a personal portfolio website of Lilly Schramm, a young German full-stack developer showcasing her projects including Booklify, TwitterDB, and a Tor relay service. The site targets developers and tech enthusiasts interested in open source and free internet initiatives. The business model is primarily personal branding and project demonstration with open source contributions. Technically, the site is built with Angular 16.2.0, uses modern CSS frameworks like Tailwind, and is hosted with Cloudflare DNS. The site is performant, mobile optimized, and uses minimal tracking via Umami analytics. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks security headers and formal policies. Overall, the site is trustworthy and professional but would benefit from adding privacy, cookie, and security policies to improve compliance and user trust.

S

home - sylvie.lol

sylvie.lol

57

Sylvie.lol is a personal portfolio and blog website belonging to Sylvia (aka sylvxa), a full-stack software developer and programming enthusiast. The site serves as a platform to share programming knowledge, open source projects, and personal interests such as speedrunning and cats. It targets a niche audience of developers and tech hobbyists. The website is newly created in 2024 and reflects a small-scale personal brand rather than a corporate entity. Technically, the website uses standard modern web technologies including HTML5, CSS3, and JavaScript, with Cloudflare providing DNS and likely CDN services. The site is well-structured with good mobile optimization and SEO meta tags. However, it lacks advanced frameworks or CMS platforms, indicating a lightweight and custom-built approach. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers such as Content-Security-Policy. There are no visible forms or data collection mechanisms, reducing attack surface but also limiting user interaction. Privacy and cookie policies are absent, which is a compliance gap. No incident response or vulnerability disclosure information is provided. Overall, sylvie.lol is a safe, well-maintained personal website with moderate trustworthiness. To improve, the owner should consider adding privacy and cookie policies, security headers, and contact information to enhance compliance and user trust.

L

Lonaasan

lona.moe

53

Lona.moe is a personal website belonging to Lonaasan, a 22-year-old software engineer from Germany. The site serves as a portfolio and community hub featuring programming projects, blog content, photography, and social links. It targets a general audience interested in cats, blahaj, and programming. The website is small scale, with a niche market position focused on personal branding and community engagement. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript, with Cloudflare DNS hosting. The site is mobile optimized and accessible, with good SEO practices. However, DNSSEC is not enabled, and no advanced security headers are detected. The site uses a minimal tracking script (umami) for analytics, indicating a low level of user tracking. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers. There is a potential XSS vulnerability in the citation block due to unsanitized HTML content. No privacy or cookie policies are present, which impacts compliance. The domain registration is privacy protected but consistent with the personal nature of the site. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is low given the personal and non-commercial nature of the site, but improvements in security headers, privacy policies, and content sanitization are recommended to enhance trust and compliance.

P

Private by Design, LLC

funtimes909.xyz

61

The website funtimes909.xyz is a personal site operated by Amy, an 18-year-old technology and privacy enthusiast. The site serves as a platform to share personal interests, projects, and contact information, targeting a niche audience of tech and privacy advocates. The business model is non-commercial, focusing on hobbyist and community engagement with open source and privacy tools. The domain is registered under a privacy protection service, consistent with the personal and privacy-focused nature of the site. Technically, the site is built with basic HTML and CSS, hosted behind Cloudflare DNS services, and uses HTTPS for secure communication. The site lacks advanced frameworks or CMS and has moderate performance and basic mobile optimization. SEO and accessibility features are minimal but functional. No analytics or tracking scripts are present, reflecting a strong privacy orientation. From a security perspective, the site benefits from HTTPS and domain transfer protections but lacks security headers and formal policies such as privacy or cookie policies. No vulnerability disclosure or incident response information is provided. The absence of these elements suggests room for improvement in security posture and compliance. Overall, the site is safe, trustworthy, and suitable for general audiences. The risk level is low given the personal nature and limited scope of the site. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and establishing vulnerability disclosure mechanisms to enhance trust and security maturity.

D

Dhanush Rambhatla

rambhat.la

57

The website rambhat.la is a personal portfolio and blog site for Dhanush Rambhatla, a software developer and content creator known as @TheOnlyWayUp. The site showcases various software projects, technical blog posts, and provides links to social media and code repositories. The target audience includes developers and technology enthusiasts interested in programming and software development. The business model is centered on personal branding and sharing knowledge through project demos and blog content. Technically, the site is built using modern frameworks such as SvelteKit and FastAPI, with hosting infrastructure leveraging Cloudflare DNS. The site is well-optimized for mobile and SEO, with fast performance and good accessibility. Security posture is adequate with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but could improve in compliance and security best practices.

P

Private by Design, LLC

damcraft.de

58

Lina.sh is a personal website of Lina, an 18-year-old developer from Germany, known for her work exposing wrongful ISP domain blocking in Germany. The site serves as a portfolio, blog, and community hub with donation support and secure communication via PGP. The business model is primarily personal branding and community engagement, targeting developers and privacy-conscious users. The domain is registered under Private by Design, LLC in the US, consistent with the website's privacy-focused ethos. Technically, the site is built with clean HTML and CSS without JavaScript, emphasizing privacy and performance. It uses Cloudflare DNS but lacks DNSSEC. The site is mobile optimized and accessible, with fast performance and basic SEO. No CMS or analytics tools are detected, reflecting a minimalist and privacy-first approach. Security posture is solid with HTTPS enforced and domain status protections, but lacks advanced security headers and incident response information. No privacy or cookie policies are published, representing compliance gaps. No tracking or advertising scripts are present, enhancing user privacy. Overall, the site is trustworthy and professional for a personal developer portfolio, but could improve compliance and security transparency. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, publishing security.txt, and enhancing security headers.

C

Call me by my gender

callmebymygender.top

54

The website 'Call me by my gender' is a small educational platform focused on promoting respectful and inclusive language regarding gender identity. It provides detailed explanations on why certain terms like “female” or “male” can be problematic and offers alternatives for respectful communication. The site targets a general audience interested in gender inclusivity and language sensitivity. The business model is informational without commercial transactions or services. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and Google Fonts. It is hosted with DNS services provided by Cloudflare and uses Plausible Analytics for privacy-conscious visitor tracking. The site is mobile optimized with good SEO practices but lacks advanced accessibility features. Performance is moderate with no CMS detected. From a security perspective, the site uses HTTPS and has domain transfer protections enabled. However, it lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options, which are recommended for enhanced security. There are no privacy or cookie policies present, representing compliance gaps. The domain registration is recent (2023) and privacy protected, which is reasonable for this type of small educational site. Overall, the website is safe, professional, and trustworthy for its niche educational purpose. Key recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and considering a vulnerability disclosure policy to improve security posture and compliance.

K

Kolektyw „Rada Języka Neutralnego”

transcember.net

61

The website 'Transcember' is a newly launched non-profit initiative by the Kolektyw „Rada Języka Neutralnego” focused on raising awareness about transgender health issues in Poland. It aims to address gaps in healthcare access, discrimination, and promote safe and reimbursed transition-related medical treatments. The site provides educational content, references reputable LGBTQ+ organizations, and encourages community engagement through sharing experiences and spreading awareness. Technically, the site is built on modern frameworks like Nuxt.js and Bootstrap, hosted with Cloudflare DNS, and optimized for mobile devices with good performance and accessibility. Security posture is decent with HTTPS and domain transfer protection, but lacks DNSSEC and some security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but should improve compliance and security practices to enhance user trust and legal adherence.

C

codecalm

tabler.io

66

Tabler is a well-established open source project and commercial provider of responsive HTML admin templates and UI kits based on Bootstrap 5. The company, codecalm, founded in 2018 and based in France, offers a rich set of UI components, layouts, icons, and illustrations targeting developers and designers building web applications and dashboards. The website demonstrates a high level of technical maturity, leveraging modern frameworks such as Next.js and Bootstrap 5, and integrates multiple analytics platforms for user insights. Security posture is solid with HTTPS enforced and domain registration protections in place, though some improvements in security headers and privacy compliance (notably cookie consent) are recommended. Overall, the site is professional, trustworthy, and well-positioned in the UI kit market.

P

Private by Design, LLC

shuga.co

63

Shuga.co is a personal portfolio website representing an individual named Shuga, who is a developer, graphic designer, and video editor. The site showcases various projects, blog posts, and social media presence, targeting developers and tech enthusiasts. The business model is primarily personal branding and open source project sharing, with a small-scale operation based in the US. The website is well-structured with good content quality and consistent branding. Technically, it uses standard web technologies including HTML5, CSS3, FontAwesome, and Google Fonts, hosted with Cloudflare DNS and registered via Porkbun. Performance and mobile optimization are good, though accessibility and SEO are basic. Security posture is moderate with HTTPS implied but lacks DNSSEC and security headers. Privacy compliance is minimal with a basic privacy policy but no cookie consent mechanism. Overall, the domain registration is consistent and trustworthy, with no suspicious patterns detected. The site is safe for general audiences with no adult or questionable content.

D

Discord Previews

discordpreviews.com

59

DiscordPreviews.com is a small niche informational website launched in 2022 that provides early looks at new Discord experiments, features, and changes. It targets Discord users and enthusiasts interested in staying ahead of platform updates. The site uses the modern Astro framework and is hosted via Cloudflare, ensuring good performance and mobile optimization. The technical infrastructure is modern and well-implemented, with HTTPS enforced and a Content-Security-Policy header present, though DNSSEC is not enabled. Security posture is solid but could be improved with additional headers and policies. The site lacks privacy, cookie, and terms of service policies, and no contact information is provided, which impacts compliance and business credibility scores.

The website deltarune.com serves as the official portal for the indie game DELTARUNE, created by Toby Fox. It provides information about the game available on multiple platforms including Nintendo Switch, PC/Mac, and PlayStation. The site offers direct links to purchase or download the game, soundtrack, and merchandise, targeting gamers and fans of the UNDERTALE series. The business model revolves around digital sales and merchandising with a strong niche market presence and a dedicated fanbase. Technically, the site is a modern, fast-loading static website using Bridgetown framework and Cloudflare DNS services, optimized for mobile and desktop with good SEO and accessibility features. Security posture is solid with HTTPS and domain transfer protections, though some improvements like DNSSEC and security headers could be made. Privacy compliance is basic with a privacy policy linked externally but lacks cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, reflecting a small but reputable indie game business.

L

Le collectif du « Conseil du Langage Neutre »

pronoms.fr

30

Pronoms.fr is a French-based, volunteer-driven, open-source project focused on promoting inclusive and non-binary language through examples of personal pronouns and neutral language usage. It offers users the ability to create and share personalized pronoun cards, supports multiple languages, and fosters community engagement through social media and a dedicated queer calendar. The project is positioned as a niche educational and social inclusion resource within the LGBTQ+ community and language activism space. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, with integration of Shopify for e-commerce functionalities. It leverages Cloudflare for DNS and possibly CDN services, uses Google Fonts and Font Awesome for UI, and employs Plausible Analytics for privacy-respecting visitor tracking. The site is well-optimized for mobile devices, accessible, and SEO-friendly, reflecting a mature digital infrastructure for a small community project. From a security perspective, Pronoms.fr enforces HTTPS, implements key security headers, and avoids exposing sensitive data. However, it lacks a visible cookie consent mechanism and formal security or incident response policies, which are recommended for compliance and transparency. No vulnerabilities or suspicious activities were detected, indicating a strong security posture for its scale. Overall, Pronoms.fr presents a trustworthy, professional, and community-oriented platform with excellent content quality and technical implementation. Strategic improvements in privacy compliance and formal security documentation would further enhance its credibility and user trust.

R

Ráðið fyri nevtralt mál

fornovn.fo

58

fornøvn.fo is a community-driven, open-source platform dedicated to providing resources and information about non-binary and gender-neutral pronouns and language, primarily targeting the Faroese-speaking community. The project is managed by the collective 'Ráðið fyri nevtralt mál' and offers multilingual support through related domains. It serves as an educational and advocacy tool promoting freedom, respect, and inclusion in language use. The website features personal pronoun cards, a gender-neutral dictionary, cultural text sources, and community engagement tools.

K

Konsilio pri Neŭtrala Lingvo

pronomejo.net

10

Pronomejo.net is a volunteer-driven, open-source project dedicated to promoting gender-neutral and non-binary language through multilingual pronoun resources and personal pronoun cards. The project is positioned as a niche leader in inclusive language tools, targeting individuals interested in gender inclusivity, linguists, and the LGBTQ+ community. The website offers community engagement, terminology resources, and a public API, supported by a small but active team. Technically, the site is built on modern frameworks like Nuxt.js and Vue.js, hosted with reputable DNS and registrar services, and integrates Shopify for merchandise. The site demonstrates good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and explicit security headers are not visible. Privacy compliance is generally good with a privacy policy and terms of service present, but lacks a cookie consent mechanism despite using analytics. Contact information is provided via multiple company emails and social media channels. Overall, the site is trustworthy, professional, and serves its community well.

D

Das „Rat für neutrale Sprache“ Kollektiv

pronomen.net

10

Pronomen.net is a community-driven, multilingual platform dedicated to providing information and resources about non-binary and gender-neutral language, focusing on pronouns and inclusive communication. The website serves a niche audience interested in gender inclusivity and offers tools such as pronoun cards, cultural examples, and a queer calendar. It operates as a non-profit public source project supported by volunteers and offers merchandising to support its activities. Technically, the site is built on modern frameworks like Nuxt.js and Vue.js, hosted with Cloudflare DNS and uses Shopify's Buy SDK for merchandising. The site is well-optimized for mobile and accessibility, with good SEO practices and fast performance. Security-wise, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and some security headers. Privacy compliance is good with a clear privacy policy and GDPR adherence, though no cookie consent mechanism is present despite using Plausible Analytics. Contact information is available via multiple company emails, and the project maintains an active presence on Mastodon, Bluesky, Discord, and GitLab. Overall, the site is trustworthy, professional, and serves its community well, though it could improve security headers and cookie consent to enhance compliance and security posture.

K

Kweak.org - Main

kweak.org

63

Kweak.org is a personal website operated by an individual known as Shakalitsa. The site hosts a variety of content including file storage, media such as music and videos, software downloads for Android and Windows, pictures, Minecraft skins, and community features like a guest book and blog. The website targets general internet users interested in personal and miscellaneous content sharing. The business model is non-commercial and primarily serves as a personal project or hobby site. The domain is relatively new, registered in late 2022, and uses privacy protection services, which is consistent with the nature of the site. Technically, the website uses standard HTML, CSS, and JavaScript with Cloudflare DNS services and NameCheap as the registrar. The site is moderately optimized with basic mobile responsiveness and accessibility. No advanced frameworks or CMS platforms are detected. Performance is moderate with no significant technical issues noted. However, the site lacks modern security headers and DNSSEC is not enabled, which could be improved. From a security perspective, the site uses HTTPS and has domain transfer protections enabled. There are no visible vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, security headers, and contact information reduces the overall security posture and compliance level. No incident response or vulnerability disclosure information is provided. The site does not use analytics or tracking technologies, which limits privacy concerns but also reduces business intelligence capabilities. Overall, the website is a small-scale personal project with basic technical and security implementations. It is safe for general audiences with no adult or explicit content. Strategic recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and providing contact and incident response information to improve trust and compliance.

M

motionarium.

motionarium.top

55

The website motionarium.top is a personal hobby portfolio site created by an individual named Брокля from Russia, focusing on UI/UX design and website layout as a hobby. The site showcases various versions of personal projects and links to social media and code repositories. It is a small-scale, non-commercial site with no evident business operations or commercial intent. Technically, the site is a simple static HTML/CSS/JavaScript implementation hosted with DNS services via Cloudflare and registered through Dynadot LLC with privacy protection. The site lacks advanced frameworks or CMS and shows basic mobile optimization and accessibility. No analytics or advertising technologies are detected, indicating minimal tracking and data collection. From a security perspective, the site does not present advanced security features such as security headers or DNSSEC, and no privacy or cookie policies are provided. The domain is privacy protected, which is appropriate for a personal hobby site. No vulnerabilities or malicious content are detected, but the security posture is basic. Overall, the site is safe and functional as a personal portfolio but lacks professional business and compliance features. Strategic recommendations include adding privacy and cookie policies, improving security headers and HTTPS enforcement, and providing contact information to enhance trust and compliance.

The website myslivets.com serves as a personal portfolio and content hub for Daniel Myslivets, a young content creator focused on technology, photography, and digital media. The site highlights his YouTube channel, photography hobby, short video content, and contributions to open-source social network design. The business model is personal branding with a niche audience primarily interested in technology and creative content. The website is small-scale and consistent with a personal brand rather than a corporate entity. Technically, the site is built with standard HTML, CSS, and JavaScript, leveraging Cloudflare for DNS and analytics. The site performs well with good mobile optimization and basic SEO. However, it lacks advanced security headers and privacy compliance mechanisms such as privacy and cookie policies. Analytics usage is moderate with custom and Cloudflare tracking scripts but without clear user consent. From a security perspective, the site uses HTTPS and has domain status protections but does not enable DNSSEC or implement security headers. There are no visible vulnerabilities or exposed sensitive data. The absence of privacy policies and cookie consent represents a compliance gap. The WHOIS data is consistent with the website content, showing a recently registered domain appropriate for the personal brand timeline. Overall, the site is safe, professional, and trustworthy for general audiences but would benefit from improved privacy compliance and enhanced security headers. Strategic recommendations include enabling DNSSEC, adding privacy and cookie policies, implementing security headers, and publishing a security.txt file to improve transparency and security posture.

L

Lisikpng.com

lisikpng.com

59

Lisikpng.com appears to be a small personal or hobbyist website created in 2022, with minimal content welcoming visitors and linking to nostalgic computing resources. The site lacks formal business information, contact details, and privacy or security policies, indicating it is not a commercial or enterprise-level operation. The technical infrastructure is basic, utilizing standard HTML and CSS with Google Fonts and Cloudflare DNS services, but lacks advanced frameworks or CMS platforms. Security posture is minimal with no DNSSEC enabled and no visible security headers or policies. There are no forms or data collection mechanisms, reducing privacy risks but also limiting user engagement. Overall, the site is safe for general audiences but lacks professional and compliance features expected in business websites.

The website bam.moe is a minimalistic site with no substantive content or business information. The domain is registered through a privacy protection service, Private by Design, LLC, based in the US, with a creation date in 2020. The site appears to be static and decorative, featuring multiple CSS stylesheets and SVG graphics but lacking textual content, contact details, or any business description. There are no forms, external links, or social media profiles present. The technical infrastructure includes Cloudflare DNS but no DNSSEC or security headers are detected from the provided data. No HTTPS status was confirmed, and no analytics or tracking scripts are present. From a security perspective, the site lacks fundamental security best practices such as visible HTTPS enforcement, security headers, and privacy or cookie policies. The absence of contact information and incident response channels further reduces transparency and trustworthiness. The domain registration privacy protection is common for small or personal projects but without business context, it lowers legitimacy. Overall, the site scores low on content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategically, the site requires significant improvements in content provision, transparency, and security to be considered trustworthy or business-ready. Adding clear business information, contact details, privacy and cookie policies, and implementing HTTPS with security headers would greatly enhance its posture. Without these, the site remains minimal and of limited business value.

The website nyam.my is a personal site representing an individual who identifies as a catgirl and transit advocate based in Seattle, WA. The site focuses on personal interests including cybersecurity, education, and information technology, with no commercial or business services offered. The site has a modest market position as a niche personal blog and social presence with links to social media and friend sites. Technically, the site is simple, built with basic HTML and CSS, hosted behind Cloudflare DNS but lacks advanced security features such as DNSSEC and security headers. The site is mobile optimized and performs moderately well but has limited SEO and accessibility features. Security posture is basic with domain registration protections but no published security policies or incident response information. Privacy compliance is minimal with no privacy or cookie policies present. Overall, the site is safe for general audiences with no adult or explicit content detected. The domain registration is recent and consistent with the personal nature of the site, with no suspicious indicators. Strategic recommendations include improving security headers, enabling DNSSEC, and publishing privacy and security policies to enhance trust and compliance.

J

jiktim

jikt.im

54

jiktim is a small, international group of developers focused on creating software, utilities, and apps with a hacker culture identity. Their website is built using Jekyll and hosted with Cloudflare DNS services, reflecting a lightweight static site approach. The site content is minimal but consistent with their niche audience of developers and technology enthusiasts. Social media presence is leveraged for community engagement, with multiple Twitter and GitHub profiles linked. Security posture is basic, with no evident security headers or policies, and privacy compliance is lacking due to absence of privacy and cookie policies. The domain registration aligns with the claimed founding year and shows no suspicious patterns, supporting legitimacy. Overall, the site is functional but lacks professional polish and comprehensive compliance or security measures.

LavaTech operates a public XMPP server under the domain a3.pm, providing a compliant and moderated messaging platform with features such as multi-user chat, OMEMO encryption, and audio/video call support. The service targets XMPP users seeking a reliable and privacy-conscious communication server. The business model is based on free public access with controlled registration to maintain moderation and service quality. The domain is stable and appropriately aged, supporting the legitimacy of the service. Technically, the website uses ejabberd 23.04 as the XMPP server software and Cloudflare for DNS services, indicating a modern and reliable infrastructure. The presence of converse.js allows browser-based chat access. However, the website's technical implementation is basic with limited SEO, accessibility, and mobile optimization features. No CMS or advanced frameworks are detected. From a security perspective, the site demonstrates good practices such as disabling in-band registration to reduce abuse and providing clear contact channels for complaints and support. However, it lacks formal security policies, vulnerability disclosure mechanisms, and explicit security headers, which are areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and serves a niche community effectively but would benefit from enhanced security and privacy documentation, improved technical features, and formalized policies to strengthen compliance and user trust.

H

Hugo Blox

hugoblox.com

57

Hugo Blox is an open source, no-code website builder platform launched in 2023, targeting technical creators, researchers, and marketers who want to build websites, landing pages, and online courses with ease and flexibility. Positioned as the best open source website builder for 2024, it boasts a strong community with over 250,000 users and 10,000+ GitHub stars. The platform emphasizes privacy, ownership of content, and ease of use without coding knowledge. Technically, the website leverages modern frameworks such as Hugo, Astro, and Tailwind CSS, hosted with Cloudflare DNS and CDN services, and integrates popular analytics and advertising tools like Google Analytics and Bing Ads. Security posture is good with HTTPS and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Overall, the site is professional, trustworthy, and technically sound but should improve privacy disclosures and security policies to enhance compliance and user trust.

A

Anders G. Jørgensen

mcsrvstat.us

68

Minecraft Server Status is a niche technology service providing quick and reliable information about Minecraft servers, supporting both Java and Bedrock editions. The website is operated by Anders G. Jørgensen, based in Denmark, with a domain registered since 2015, indicating a stable and mature service. The business model is ad-free and supported by donations, targeting Minecraft players and server administrators seeking server status information and API access. Technically, the website uses modern frontend technologies including Bootstrap 5 and Cloudflare for DNS and CDN services, ensuring good performance, mobile optimization, and accessibility. The site is well-structured with clear navigation and a professional design, although it lacks some compliance documentation such as privacy and cookie policies. From a security perspective, the domain benefits from Cloudflare's infrastructure and has domain transfer protections enabled. However, DNSSEC is not enabled, and no explicit security headers were detected in the provided data. There is no published incident response or vulnerability disclosure information, which could be improved to enhance trust and compliance. Overall, the website is functional, trustworthy, and well-positioned within its niche but would benefit from enhanced privacy compliance, security headers, and contact transparency to improve its security posture and user trust.

M

MarioMasta64

mariomasta64.me

51

The website mariomasta64.me is a personal or hobbyist platform primarily focused on hosting various downloadable resources and information related to gaming consoles, software hacks, and miscellaneous technology content. It targets a niche audience of technology enthusiasts and gamers interested in console hacking and software tools. The site is modest in scale and does not present itself as a commercial business. Technically, the site uses basic HTML and CSS with JSON-LD structured data for social media links and site structure. It is hosted with NameCheap as registrar and uses Cloudflare for DNS services, but lacks DNSSEC and no HTTPS status was confirmed from the data provided. Security posture is minimal with no evident security headers or privacy policies, and no forms or data collection mechanisms are present. The site is accessible without WAF or blocking mechanisms. Overall, the site is functional but basic, with limited privacy and security compliance. Strategic improvements in HTTPS implementation, security headers, and privacy policies would enhance trust and compliance.

W

wingio

wingio.xyz

58

The website wingio.xyz is a personal portfolio site of a 22-year-old Android developer named Wing. The site showcases the developer's skills, projects, and social media presence, primarily targeting fellow developers and tech enthusiasts. The business model is personal branding and open source project promotion, with a niche market position as an individual developer portfolio. The site is technically modern, built with Astro and Svelte frameworks, and hosted with Cloudflare DNS services. It demonstrates good performance and mobile optimization but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled and domain locks in place, but lacks DNSSEC and security headers. Privacy compliance is minimal, with no privacy or cookie policies present. Contact information is limited to an email address. Overall, the site is trustworthy for its purpose but could improve in privacy and security transparency.

The website aagaming.me is a personal hobby developer portfolio primarily focused on reverse engineering projects. The site owner, known as 'aa', showcases various projects and references work on decky.xyz, indicating a niche presence within the developer and reverse engineering community. The business model is informal and hobbyist, with no commercial or enterprise scale operations evident. The site targets hobby developers and technology enthusiasts interested in reverse engineering and software development. Technically, the website is built using the Astro framework and utilizes Cloudflare for DNS services. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. There are no detected CMS platforms or third-party analytics or advertising tools, indicating a lightweight and privacy-conscious setup. From a security perspective, the site lacks critical security headers and does not enable DNSSEC, which could improve domain security. No privacy or cookie policies are present, and no contact or incident response information is provided, limiting compliance with GDPR and other privacy regulations. The domain is privacy protected via a service in Iceland, which is consistent with the personal nature of the site. Overall, the security posture is basic with room for improvement. The overall risk is low given the non-commercial nature and safe content, but the site would benefit from adding privacy policies, security headers, and contact information to enhance trust and compliance. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing privacy and cookie policies, and providing clear contact and incident response details.

P

Private by Design, LLC

lewisakura.moe

71

The website lewisakura.moe is a personal site belonging to Lewis, a young software engineer and aspiring content creator specializing in backend development and game development on platforms such as Roblox. The site serves as a portfolio and contact point, showcasing various projects and placements, both paid and volunteer. The business model is primarily freelance and team-based development with future plans for content creation as a VTuber. The site targets technology enthusiasts and potential collaborators. Technically, the site is built using the Astro framework, leveraging modern web technologies and hosted with Cloudflare DNS services. It is well optimized for performance and mobile devices, with good SEO metadata and clear navigation. No CMS or analytics tools are detected, indicating a lightweight and privacy-conscious approach. From a security perspective, the site uses HTTPS and has domain transfer and deletion protections enabled. However, DNSSEC is not enabled, and no security headers are detected, which are areas for improvement. No privacy or cookie policies are published, which impacts compliance posture. Contact information is clearly provided via email and Discord, but no formal incident response or security policies are present. Overall, the site is safe, professional, and trustworthy for its intended personal and freelance use. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and considering incident response documentation to enhance security and compliance.

D

Diamondburned

libdb.so

44

The website libdb.so is a personal portfolio site for Diamond, a software engineer at Google with over five years of experience. The site highlights her passion for open source, showcases her projects, professional experience, and provides multiple social media and contact links. The site is well-structured, visually appealing, and optimized for performance and mobile devices, reflecting a high level of technical maturity. Security-wise, the site uses HTTPS and Cloudflare DNS but lacks explicit security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the site presents a trustworthy and professional image but would benefit from enhanced privacy compliance and security best practices to align with industry standards.

env.fail is a small, US-based information security blog operated by Private by Design, LLC. The site features multiple contributors who publish content focused on web security and infosec topics. The business model centers on content publishing aimed at security professionals and enthusiasts. The website is relatively new, with domain registration in March 2024, consistent with the recent blog post dates. Technically, the website uses standard web technologies including HTML5, CSS, and JavaScript, with Cloudflare providing DNS services. The site appears to be custom-built or uses an unknown CMS. Performance and mobile optimization are moderate to good, though accessibility and SEO optimizations are basic. No advanced frameworks or analytics services are detected. From a security perspective, the site benefits from HTTPS and domain status protections but lacks DNSSEC and security headers. There are no visible vulnerabilities or exposed sensitive data. However, the absence of privacy, cookie, and terms of service policies, as well as contact information and vulnerability disclosure mechanisms, indicates room for improvement in compliance and incident response readiness. Overall, the website is professional and relevant to its niche audience but would benefit from enhanced security practices and compliance documentation to improve trust and legal standing.