When you land on dadrian.io, you're looking at the personal homepage of David Adrian, a security researcher and co-founder of Censys. It's not a store, a service, or anything that asks for your data — it's a simple portfolio and blog. For a site like this, the trust signals are straightforward and positive. The domain was registered in 2016 and has been continuously active, which is a strong indicator of a genuine long-term presence. The technical setup is well above average: a valid SSL certificate, enforced HTTPS, and modern browser protections that prevent common web attacks. The owner's identity is public — he lists his background at Google, his PhD from the University of Michigan, and his podcast. While the domain does expire in about a month, that's a routine renewal matter, not a reason to question legitimacy. So is dadrian.io a scam? Not at all. It's exactly what it appears to be: a legitimate personal site from a real person in the security industry.
In plain English
This is David Adrian's personal website, and everything about it lines up with what you'd expect from a real person in the security field. The domain is nearly a decade old, the technical setup is solid, and there's no sign of shady behavior. The only thing to keep an eye on is the domain expiration coming up in a month, but that's a renewal issue, not a scam indicator.
Where the score comes from
Rock-solid security setup for a personal site: a valid certificate, modern encryption, and all standard browser protections in place. No blacklists or malware flags, which is exactly what you'd expect from a security researcher's own domain.
The domain is nine years old and registered through Cloudflare, which is fine for a personal blog. The WHOIS is hidden, but that's normal for individuals. The expiry date is only 31 days out, which means the owner needs to renew soon, but it's not a red flag by itself.
No blacklist history, no Google Safe Browsing warnings. The site has been around nearly a decade, and the owner is a known figure in security. It's not a high-traffic site, but that's expected for a personal page.
There's a proper about page with the owner's full background, social media links, and a blog. The homepage lacks a dedicated contact form or email, but for someone who lists their Twitter and has a public persona, that's not unusual.
The site includes both a privacy policy and terms of service, which is more than most personal blogs bother with. Since it's not selling anything or collecting payment, these are optional, so having them is a positive sign.
Hosted on Cloudflare with fast load times, email authentication set up, and a proper sitemap. DNSSEC isn't enabled, but that's common for personal sites and not a concern here.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →