A little exploring.
TelegramGitHub

BUILT WITH CARE

Small surface.
Clear boundaries.

Updated .

Simple by design

This website is static HTML, CSS, JavaScript and local media, hosted on GitHub Pages. Browsing does not require an account, a password, a bot or a backend service. Contact links open Telegram or your email application. No form submissions, CAPTCHA requests or profile synchronization are processed here.

Fonts and visual assets are served with the site. Repository checks validate the build, local links, public metadata and basic secret patterns. Credentials and private information must never be committed to the public repository.

Practical limits

Third-party websites you open have their own availability and security practices. The website does not control messages after they enter an email or Telegram conversation. A link opening successfully does not confirm that a message has been delivered.

GitHub Pages does not expose arbitrary per-site response-header configuration. This source sets a referrer policy, but does not claim a custom HTTP Content Security Policy, Permissions Policy or other proxy-level protection is active. No additional proxy service is required by this version.

Report a vulnerability privately

Email wizard@wizardloop.com with the affected URL, a short description and safe reproduction steps. You can also contact me on Telegram to arrange a private report.

Please do not publish credentials, personal information or exploit details in a public issue. Use your own test data and avoid disruption. There is no promised response time or paid bounty program.

The website source is available for review. Access to that source does not authorize testing third-party infrastructure.