Security Directory

Resupply is a decentralized stablecoin protocol that enables users to supply crvUSD or frxUSD stablecoins to lending markets such as Curve Lend or Fraxlend and borrow reUSD stablecoins against those positions. The protocol aims to maximize yield for DeFi users by allowing collateralized borrowing with minimal volatility risk, supported by an insurance pool to safeguard the protocol. It is positioned as a niche player in the DeFi stablecoin lending space with partnerships from established projects like Convex and Yearn. The website is built on modern web technologies including Next.js and Material-UI, with integrations for popular Web3 wallets, indicating a mature technical infrastructure. Security posture is strong with HTTPS and peer-reviewed smart contracts, though explicit security policies and headers could be improved. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the platform presents a professional and trustworthy front with moderate business credibility and technical maturity.

Erista Group operates a niche technology business focused on video game preservation by providing high-bandwidth solutions and a high-performance content delivery network tailored for video game enthusiasts and archivists worldwide. The company offers specialized services such as the hShop 3DS content archive and Myrient, which preserves video game history. Founded in 2020 and registered under 1337 Services LLC in Saint Kitts and Nevis, the business maintains a small but focused market presence. Technically, the website is built with standard HTML, CSS, and JavaScript, hosted behind Cloudflare DNS and CDN services. The site demonstrates moderate performance and basic mobile optimization but lacks advanced frameworks or CMS platforms. SEO practices are adequately implemented with proper meta tags and Open Graph data, though accessibility features are basic. From a security perspective, the domain benefits from clientTransferProhibited status to prevent unauthorized transfers but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. No HTTPS or SSL configuration details were explicitly found in the provided data, and no incident response or vulnerability disclosure policies are published. Privacy and cookie policies are absent, indicating gaps in compliance and user data protection. Overall, the website is functional and professional with good content relevance and navigation clarity but requires improvements in privacy compliance, security best practices, and transparency to enhance trustworthiness and reduce risk.

1

1337 Services LLC

bloat.cat

0

bloat.cat is a niche technology website operated by 1337 Services LLC, offering a wide range of free, privacy-friendly public service frontends and tools. The site targets privacy-conscious users seeking alternatives to mainstream services, providing multiple instances of various frontends and utilities such as search engines, note-taking apps, and file sharing. The website is relatively new, founded in late 2023, and hosted on Njalla, a privacy-focused hosting provider, aligning with its privacy-centric mission. Technically, the website is a static HTML/CSS site with multiple subdomains hosting different services. The site demonstrates basic mobile optimization and accessibility but lacks advanced frameworks or CMS. Performance is moderate, and SEO is basic with standard meta tags. No analytics or tracking scripts were detected, indicating a minimal user tracking approach. From a security perspective, the domain uses HTTPS and has domain status flags to prevent unauthorized transfers and updates, but lacks DNSSEC and visible security headers. No privacy policy, cookie policy, or terms of service are present, which limits privacy compliance. No contact or incident response information is provided, reducing transparency. The WHOIS data is consistent and transparent, enhancing legitimacy. Overall, bloat.cat presents a trustworthy, privacy-focused service platform with room for improvement in security best practices and privacy compliance. Strategic enhancements in policy disclosures, security headers, and DNS security would strengthen its posture and user trust.

N

Njalla Okta LLC

poridge.club

0

Poridge Club is a small technology-focused project offering a suite of privacy-centric and ethical internet services, including federated social networking, private email, voice communication, and video conferencing. The platform emphasizes free speech and user data protection, positioning itself as an alternative to mainstream corporate services. The website is primarily in Russian and targets users seeking privacy and freedom online. Technically, the site is built with standard web technologies and hosted on privacy-focused infrastructure provided by Njalla. While the site is well-structured and content-rich, it lacks some compliance features such as cookie consent and visible contact information. Security posture is moderate, with domain protections in place but missing DNSSEC and security headers. Overall, the site is trustworthy and legitimate but could improve in security and compliance aspects.

The website cqql.site is a personal technical blog operated by an individual or small entity registered as Njalla Okta LLC in Saint Kitts and Nevis. The site focuses on technology-related content including hacking tutorials, generative art, CTF writeups, and queer/trans community resources. It serves a niche audience of technology enthusiasts and members of the queer/trans community interested in technical topics. The business model is content publishing and community engagement without evident commercial transactions. The domain is newly registered in May 2024 with privacy protection, consistent with the website's privacy-conscious theme. Technically, the site is a static HTML/CSS site hosted via Njalla, a privacy-focused hosting provider. The site is basic but functional with good content relevance and navigation clarity. Mobile optimization and accessibility are basic but adequate. No CMS or advanced frameworks are detected. Performance is likely fast due to static content delivery. SEO and metadata are minimal but present. From a security perspective, the site lacks HTTPS enforcement information and security headers in the provided data, which lowers its security posture. No privacy or cookie policies are present, indicating limited compliance with privacy regulations. No forms or data collection mechanisms are detected, reducing exposure to input-based vulnerabilities. The domain registration is legitimate and consistent with the website content and operator profile. No WAF or blocking mechanisms are detected. Overall, the site is a safe, niche personal blog with moderate trustworthiness but could improve security and privacy compliance. Strategic recommendations include implementing HTTPS with HSTS, adding security headers, publishing privacy and cookie policies, and establishing vulnerability disclosure and incident response information to enhance trust and security posture.

The website doubledouble.top serves as a simple region selection landing page directing users to USA or Europe subdomains. It lacks substantive business information, contact details, or policy documents, indicating a minimal online presence likely for a small or new business. The domain is privacy protected and registered in Saint Kitts and Nevis, which is common for privacy but reduces transparency. Technically, the site uses modern web standards with a clean, mobile-optimized design and is hosted behind Cloudflare, providing basic performance and security benefits. However, the absence of DNSSEC, security headers, and privacy or cookie policies indicates room for improvement in security and compliance. No analytics or advertising scripts were detected, suggesting minimal tracking or marketing activity. Overall, the site is safe with no adult or questionable content but lacks trust signals and business credibility.

The website meli-email.org represents a small technology project operated by 1337 Services LLC, focused on delivering a terminal-based email client named meli. The project targets terminal users and developers seeking a modern, extensible mail client with support for various email protocols and storage formats. The business model revolves around open source software distribution with downloadable binaries and source code repositories. The website is hosted on privacy-conscious infrastructure (Njalla) and provides clear navigation and relevant technical content, including installation instructions and screenshots. From a technical perspective, the site uses modern web technologies such as Rust for the client software, WebAssembly for an online demo, and standard HTML5 and CSS for the website. The site supports multiple Unix-like platforms and provides source code access via a dedicated git repository. Performance and mobile optimization are moderate, with basic accessibility and SEO features. Security posture is limited; the site lacks published privacy, cookie, or security policies, and no security headers were detected. The domain uses HTTPS but DNSSEC is not enabled. No contact information or incident response channels are provided, limiting transparency and trust. WHOIS data is public and consistent with the project timeline, indicating legitimacy but no strong business presence. Overall, the website is functional and informative for its niche audience but lacks formal privacy and security compliance measures. Strategic improvements in policy publication, security headers, and contact transparency would enhance trust and compliance.

The website meli-email.org represents an open source terminal-based email client project named 'meli'. The project is developed and maintained by 1337 Services LLC, a small technology entity registered in Saint Kitts and Nevis. The website provides comprehensive information about the software, including installation instructions, source code repository links, screenshots, and announcements. The target audience is primarily terminal users and developers seeking a modern, extensible mail client. The business model is community-driven open source software distribution with downloadable binaries and source code. Technically, the website is built with modern web standards including HTML5, CSS3, SVG, and leverages Rust and WebAssembly for the software itself. It supports multiple platforms such as Debian, macOS, NetBSD, OpenBSD, and Nix. Hosting is via Njalla, a privacy-focused provider. The site performs well with good content quality and basic mobile optimization. However, accessibility and SEO optimizations are basic. From a security perspective, the site uses HTTPS with a good SSL configuration and domain registration protections like clientTransferProhibited status. However, DNSSEC is not enabled, and no security headers are detected. There is no published privacy policy, cookie policy, or incident response information, which limits privacy compliance and security transparency. No contact emails or phone numbers are provided, reducing direct communication channels. Overall, the website is trustworthy and professional within its niche but lacks formal privacy and security policy disclosures. Strategic improvements in security headers, privacy compliance, and contact information publication would enhance trust and compliance. The domain registration is consistent with the project age and business type, supporting legitimacy.

The website tmpfiles.org offers a straightforward temporary file hosting service allowing users to upload files up to 100 MB with automatic deletion after 60 minutes. The service targets general users needing ephemeral file sharing without account creation or long-term storage. The business operates under Njalla Okta LLC, registered in Saint Kitts and Nevis since 2015, indicating a stable domain age appropriate for the service maturity. The website's market position is niche, focusing on privacy-conscious temporary file hosting. Technically, the website uses basic web technologies including Google Analytics and Google Tag Manager for tracking, and Google Fonts for typography. Hosting appears to be managed via Njalla's infrastructure. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No CMS or major frameworks are detected, indicating a lightweight custom implementation. From a security perspective, the site uses HTTPS (implied by Google Analytics scripts loaded over HTTPS), but no DNSSEC is enabled and no security headers are detected in the provided data. The domain has transfer and update prohibitions set, which is positive. However, the absence of privacy and cookie policies, lack of contact or incident response information, and moderate user tracking without consent mechanisms represent compliance and security gaps. Overall, the website is functional and serves its purpose but requires improvements in privacy compliance, security hardening, and transparency to enhance trustworthiness and regulatory adherence. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, adding security headers, and providing clear contact channels for security incidents.

The website teenlovers.top is a minimal redirect page that forwards visitors to an external adult-themed forum (tnlovers.al) focused on amateur teen content. The site itself contains no substantive content, no privacy or cookie policies, no contact information, and no security features beyond basic HTML and CSS. The domain WHOIS data is privacy protected and shows an anomalous future creation date, which raises concerns about legitimacy and transparency. The technical infrastructure is minimal, with Cloudflare DNS used but no DNSSEC enabled and no visible SSL configuration on the landing page. Security posture is weak, with no security headers or compliance indicators present. Overall, the site appears to serve as a simple redirect to adult content without adequate compliance or security measures.

The website zooskool.pet operates as a niche adult content platform specializing in bestiality and zoophilia videos and images. It offers free downloads and links to related adult sites, targeting an adults-only audience. The business model appears to be content aggregation and distribution without transparent commercial operations or clear business legitimacy. Technically, the site runs on WordPress with common web technologies and is hosted behind Cloudflare DNS, but lacks advanced security headers and privacy policies. The domain is recently registered with privacy protection, which reduces trust and raises concerns about legitimacy. Security posture is weak with no incident response or compliance information. Overall, the site presents significant legal and ethical risks due to its explicit and illegal content nature.

N

Njalla Okta LLC

animalsexclub.org

0

AnimalSexClub.org is an adult content website specializing in bestiality and zoophilia media, including videos, pictures, and magazines. The site targets an adult audience interested in niche and illegal adult content. The business operates under a privacy-focused domain registration with Njalla Okta LLC, a known privacy registrar, and uses WordPress as its CMS platform with common plugins such as Yoast SEO and Bootstrap for styling. The website's technical infrastructure is moderate but lacks advanced security measures and privacy compliance features. Security posture is weak due to missing security headers, absence of privacy and cookie policies, and no incident response contacts. The domain is newly registered in 2024, consistent with the recent content updates. The site links extensively to other adult and suspicious domains, indicating a network of related adult content sites. Overall, the site presents significant legal and ethical risks due to its content and lacks transparency and compliance with privacy and security best practices.

Teenfolder.link operates as an adult content aggregator specializing in explicit teen pornography, offering direct download links to videos and pictures sourced from various external sites. The business model relies on indexing and linking rather than hosting content directly. The site targets an adults-only audience interested in niche adult content. The domain is recently registered and uses privacy protection services, indicating an intent to remain anonymous. Technically, the site is built on WordPress with basic performance and mobile optimization. Security posture is weak, lacking DNSSEC, security headers, and privacy policies. No verified contact or incident response information is provided, increasing risk. The site extensively uses affiliate links and tracking pixels without user consent, reflecting poor privacy compliance.

X

XCandid – Girls Want To Be Seen

xcandid.top

0

The website appears to be a newly registered adult content platform with minimal publicly available business information. It uses WordPress with plugins oriented towards media display and social interaction but lacks fundamental compliance and transparency features such as privacy policies, cookie consent, or contact details. The domain is registered with privacy protection in Saint Kitts and Nevis, a known offshore jurisdiction, which combined with the new registration date, reduces trustworthiness. Technically, the site uses standard web technologies but lacks advanced security headers and DNSSEC, indicating a basic security posture. Overall, the site presents significant risks from a security and compliance perspective, especially given the adult content nature without age verification or GDPR compliance.

The website kittygirls.link operates as an adult content affiliate and redirect hub, primarily linking to explicit and illegal adult content sites. The business behind the domain is registered under Njalla Okta LLC, a privacy-focused entity based in Saint Kitts and Nevis, indicating an intent to obscure ownership. The domain is very new, created in December 2024, and lacks any privacy or cookie policies, contact information, or business transparency. Technically, the site is basic HTML with some JavaScript for pop-up ads and uses Cloudflare DNS but lacks DNSSEC and security headers. The site is accessible without WAF or security challenges but exhibits poor design, user experience, and SEO. Security posture is minimal with no advanced protections. The content is explicitly adult and includes references to illegal content such as rape and bestiality, making it NSFW and high risk. Overall, the site scores very low on trust, security, and compliance metrics.

The website lolikon.link operates as an adult content forum specializing in hentai, loli, and shotacon genres, providing a platform for sharing explicit images, videos, and comics. It targets an adults-only audience and functions primarily as a niche community forum with user registration required to access main content. The business is relatively new, founded in 2023, and registered under Njalla Okta LLC, a privacy-focused registrar based in Saint Kitts and Nevis. The site leverages MyBB forum software and uses Cloudflare for DNS services, with jQuery libraries for frontend interactions. Despite basic technical infrastructure, the site lacks advanced security headers and comprehensive privacy or cookie policies, which impacts its overall security and compliance posture.

W

WordPress Blog

xvideoszoofilia.blog

0

The website 'Xvideos Zoofilia' operates as a niche adult content aggregator specializing in zoophilia videos, providing free access to explicit and illegal content primarily targeting Portuguese-speaking adults. The business model relies heavily on advertising revenue through multiple ad networks and tracking services. The site uses WordPress CMS with common web technologies such as Bootstrap and jQuery, hosted behind Cloudflare DNS but with no advanced security headers or policies evident. The domain is relatively new, registered in 2022, with privacy protection enabled, and the registrant's country does not align with the website's language or target audience, raising legitimacy concerns. No privacy, cookie, or terms of service policies are present, and no contact or security incident response information is provided, indicating poor compliance and transparency. The site exhibits basic SEO optimization but lacks professionalism and trustworthiness due to the nature of its content and lack of security best practices.

Undress AI Tools operates a niche adult-oriented AI platform that enables users to generate realistic nude images from photos using advanced AI technologies such as Stable Diffusion and GANs. The platform offers multiple AI-powered features including undressing images, face swapping, anime-style transformations, and video generation, targeting adult users interested in AI-generated NSFW content. The business model is freemium with subscription tiers and in-app gem purchases, supported by a privacy-focused approach including automatic deletion of user images within 48 hours and an age verification gate. Technically, the site uses modern web frameworks like Next.js and React, hosted behind Cloudflare DNS and CDN services, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks explicit security headers and published security policies. Privacy compliance is supported by a comprehensive privacy policy and data deletion practices, though cookie consent mechanisms are absent. WHOIS data indicates recent domain registration with privacy protection typical for adult content sites. Overall, the site is functional, professional, and moderately trustworthy but could improve security transparency and privacy controls.