Indonesia security reports

K

Kementerian Pariwisata dan Ekonomi Kreatif Republik Indonesia

kemenparekraf.id

43

The website represents the official online presence of the Kementerian Pariwisata dan Ekonomi Kreatif Republik Indonesia, a government ministry responsible for tourism and creative economy policy formulation and implementation in Indonesia. The site provides news, organizational information, and program details targeting the general public and government stakeholders. Technically, the site is built on WordPress with a modern tech stack including Bootstrap and jQuery, hosted with Cloudflare DNS services. The website is mobile optimized and SEO friendly but lacks privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. WHOIS data shows inconsistencies such as a future domain creation date and registrant being a registrar company, which slightly reduces trustworthiness. Overall, the site is professional, content-rich, and trustworthy as a government resource but would benefit from improved privacy compliance and security hardening.

S

Syiah Kuala Indonesia

syiahkuala.id

52

Syiah Kuala Indonesia operates as a small-scale informational and educational platform focused on Islamic knowledge, moderate preaching, and community empowerment within Indonesia. The website serves as a content hub inspired by the legacy of a prominent Nusantara Islamic scholar, targeting a general Indonesian audience interested in religious and cultural development. Technically, the site is built on WordPress with modern plugins like Yoast SEO and uses Cloudflare DNS for hosting and security. The site demonstrates good design quality, mobile responsiveness, and SEO optimization but lacks critical privacy and cookie policies, as well as explicit contact information, which impacts compliance and trust. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Overall, the domain registration is consistent and legitimate, matching the website's recent launch and content timeline.

S

Sahaalah Indonesia

sahaalah.id

54

Sahaalah Indonesia operates a niche halal tourism website offering syariah-compliant travel packages and comfortable bus transportation primarily targeting Muslim families, schools, and communities in Indonesia. The website is built on WordPress with standard SEO optimizations and uses Cloudflare DNS services. The digital maturity is moderate with good content quality and mobile optimization but lacks advanced security configurations and privacy compliance features. Security posture is basic with HTTPS enabled but missing DNSSEC and security headers. No privacy or cookie policies are published, and no direct contact information is provided, which limits trust and compliance. The domain is newly registered in 2025, consistent with the website's content timeline, but WHOIS registrant data shows the registrar as registrant, which is common but slightly reduces trust.

K

Kantor Kesehatan Pelabuhan

kkpsurabaya.id

45

Kantor Kesehatan Pelabuhan Surabaya operates as a government health authority providing essential health and quarantine services at the main port of Surabaya, Indonesia. The website serves as an informational portal detailing their mission to monitor health conditions of passengers, crew, and goods to prevent infectious disease spread. The site targets the general public and stakeholders involved in port health and safety. Technically, the website is built on WordPress with common plugins such as Yoast SEO and jQuery, hosted behind Cloudflare DNS but lacks DNSSEC. The site is moderately optimized for performance and mobile use, with good SEO practices but basic accessibility features. Security posture is adequate with HTTPS enabled but lacks security headers and DNSSEC, and no privacy or cookie policies are present, indicating compliance gaps. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the domain registration is legitimate and consistent with the website's purpose and content timeline. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and security.

I

InversiSumut – Wadah Informasi dan Berita Sumut

inversisumut.id

52

InversiSumut is a newly established Indonesian regional news platform focused on providing comprehensive information and updates about investment, economy, and business developments in Sumatera Utara. The website targets local business actors, investors, and the general public interested in regional economic growth. Technically, the site is built on WordPress with common plugins such as Yoast SEO and uses Cloudflare for DNS and likely CDN services. The site demonstrates good content quality and user experience with a mobile-optimized design and clear navigation. However, the domain is very new, which may affect perceived trustworthiness. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. No contact information or incident response details are published, limiting transparency. Overall, the site is functional and relevant but requires improvements in security and compliance to enhance trust and resilience.

P

PPDBPekanbaru Informasi Lengkap dan Terpercaya PPDB Pekanbaru

ppdbpekanbaru.id

51

PPDBPekanbaru.id is an educational information portal focused on providing comprehensive and trustworthy updates about the Penerimaan Peserta Didik Baru (PPDB) or new student admissions in Pekanbaru, Indonesia. The website offers schedules, requirements, tips, and official announcements to facilitate the school registration process for parents and students. The site targets the local educational community and operates as a small-scale information service provider. Technically, the website is built on WordPress CMS, utilizing jQuery and the Yoast SEO plugin for optimization. It employs Cloudflare DNS services and enforces HTTPS for secure communication. The site demonstrates good mobile optimization and basic accessibility features, with a moderate performance profile. However, it lacks advanced security headers and DNSSEC, which could enhance its security posture. From a security perspective, the website maintains a basic level of security with HTTPS enabled but lacks privacy and cookie policies, security incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data indicates a very recent domain registration with limited registrant information, which slightly reduces trustworthiness. No signs of WAF blocking or adult content were detected, and the site appears safe for general audiences. Overall, PPDBPekanbaru.id is a functional and moderately secure educational portal with room for improvement in privacy compliance, security best practices, and transparency. Strategic enhancements in these areas would strengthen its credibility and user trust.

P

PT. Sebelas Cipta Mandiri

diskanpalembang.com

54

The website diskanpalembang.com serves as the official online presence of the Dinas Peternakan dan Kesehatan Hewan Kota Palembang, a government department responsible for livestock and animal health services in Palembang, Indonesia. It provides public information, news, galleries, videos, and event updates targeted at local citizens, peternak (farmers), and government stakeholders. The site is positioned as a trusted government resource with a focus on community engagement and education. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Swiper, and Slick Carousel, ensuring a responsive and user-friendly experience. Hosting and DNS services are managed via Cloudflare, providing performance and security benefits. However, the site lacks some advanced security headers and DNSSEC, which are recommended for enhanced protection. The domain registration data shows inconsistencies, with a recent creation date and registrar that do not fully align with the official government nature of the site, which may warrant further verification. From a security perspective, HTTPS is properly implemented, and Google reCAPTCHA is used to protect forms, but the absence of privacy and cookie policies indicates compliance gaps with data protection regulations such as GDPR. No incident response or security policy information is published, limiting transparency. Overall, the site demonstrates a moderate security posture but would benefit from improvements in policy disclosures and technical security controls. The overall risk assessment suggests the website is a legitimate government resource with good content quality and user experience but has room for improvement in privacy compliance and domain registration transparency. Strategic recommendations include publishing privacy and cookie policies, enabling DNSSEC, adding security headers, and clarifying domain ownership to enhance trust and compliance.

P

PT. Sebelas Cipta Mandiri

diskanlut-riau.com

54

The website represents the official online presence of the Dinas Peternakan dan Kesehatan Hewan Provinsi Riau, a government agency responsible for livestock and animal health services in Riau Province, Indonesia. It provides public service information, educational content, event updates, and multimedia resources targeting local farmers, government stakeholders, and the general public. The site is branded consistently with official logos and partner affiliations, reinforcing its government legitimacy. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, Swiper, and Slick Carousel, hosted behind Cloudflare DNS services. It uses HTTPS with a valid SSL certificate and integrates Google Analytics and ShareThis for tracking and social sharing. Mobile optimization and navigation are good, though accessibility features are basic. However, the site lacks DNSSEC and security headers, which are recommended for enhanced security. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA on forms, but does not publish security policies or incident response contacts. The WHOIS data shows inconsistencies, notably a future domain creation date, which raises questions about domain registration legitimacy despite the site's apparent authenticity. No WAF or blocking mechanisms are detected, and no adult or questionable content is present. Overall, the website is a functional and professional government portal with moderate technical maturity and some compliance gaps, particularly in privacy and security policy disclosures. Strategic improvements in DNS security, security headers, and privacy compliance would enhance trust and resilience.

P

PT. Sebelas Cipta Mandiri

disnakbengkulu.id

51

The website disnakbengkulu.id serves as the official online presence of the Dinas Peternakan dan Kesehatan Hewan (Department of Livestock and Animal Health) of Bengkulu Province, Indonesia. It provides public information, news, galleries, videos, and contact details related to livestock and animal health services. The site targets local farmers, government stakeholders, and the general public interested in livestock development and animal health in the region. The business model is government service-oriented, focusing on information dissemination and public engagement. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Swiper, Slick Carousel, and Google services such as reCAPTCHA and Analytics. It is hosted behind Cloudflare DNS, ensuring good availability and performance. The site is mobile-optimized with a clear navigation structure and good content quality, although accessibility features are basic. From a security perspective, the site uses HTTPS and Google reCAPTCHA for form protection, but lacks DNSSEC and important security headers. There is no visible security policy or incident response information, and no vulnerability disclosure mechanism. Privacy compliance is weak, with no privacy or cookie policies present. Contact information is clearly provided, enhancing business credibility. Overall, the website is a functional and professional government portal with moderate security and privacy posture. Strategic improvements in security headers, DNSSEC, and privacy policies would enhance trust and compliance.

P

PT. Sebelas Cipta Mandiri

disnaksubang.id

51

The website disnaksubang.id serves as the official online presence for the Dinas Peternakan dan Kesehatan Hewan Kabupaten Subang, a government agency responsible for livestock and animal health services in Kabupaten Subang, Indonesia. It provides public information, educational content, event updates, and multimedia galleries targeted at local farmers, government stakeholders, and the general public. The site is positioned as a trusted government resource with consistent branding and relevant content. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Swiper, and Google services such as reCAPTCHA and Tag Manager. It is hosted behind Cloudflare DNS but lacks DNSSEC and advanced security headers. The site is mobile optimized with good navigation and content quality, though it does not appear to use a common CMS. Performance is moderate with room for improvement. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but it lacks explicit security policies, incident response contacts, and privacy or cookie policies, indicating compliance gaps. The WHOIS data reveals a domain registration inconsistency with a commercial registrar and a future creation date, which raises some legitimacy concerns despite the official government content. Overall, the website is functional and trustworthy for its intended audience but would benefit from enhanced security practices, privacy compliance, and clearer domain registration alignment to strengthen its credibility and reduce risk.

P

PT. Sebelas Cipta Mandiri

disnakpalembang.id

52

The website disnakpalembang.id serves as the official online presence for the Dinas Peternakan dan Kesehatan Hewan (Department of Livestock and Animal Health) of Kota Palembang, Indonesia. It provides public information, news, event galleries, videos, and contact channels aimed at supporting livestock farmers and the general public. The site is positioned as a government service platform with a focus on animal health and livestock development in the region. The business model is primarily informational and service-oriented, targeting local citizens and stakeholders in the agricultural sector. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Font Awesome, and various JavaScript plugins for UI enhancements. It is hosted behind Cloudflare DNS services, ensuring reliable availability and basic security. The site is mobile responsive and offers a good user experience with clear navigation and relevant content. However, no explicit CMS was detected, and SEO optimization is basic. From a security perspective, the site uses HTTPS and Google reCAPTCHA for form protection, but lacks DNSSEC and important security headers such as CSP and HSTS. There is no published security policy or incident response contact, which limits transparency and readiness for security incidents. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the website is trustworthy and professional, with clear business credibility and good content quality. The main risks relate to privacy compliance and security best practices, which should be addressed to enhance user trust and regulatory adherence.

P

PT. Sebelas Cipta Mandiri

disnakblitar.id

52

The website disnakblitar.id serves as the official online presence for the Dinas Peternakan dan Kesehatan Hewan Kabupaten Blitar, a government agency responsible for livestock and animal health in Kabupaten Blitar, Indonesia. The site provides public information, educational content, event updates, and contact details to support local farmers and stakeholders. The business model is focused on public service and information dissemination, targeting the general public and agricultural community. The site is relatively new, launched in 2025, and reflects a consistent government branding and messaging. Technically, the website employs modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for UI and interactivity. It is hosted behind Cloudflare, ensuring good performance and security at the network level. The site is mobile responsive and has a moderate performance profile. SEO and accessibility are basic but functional. However, there is no explicit CMS detected, and some technical improvements could enhance security and compliance. From a security perspective, the site uses HTTPS and Google reCAPTCHA to protect forms, and the domain is protected against unauthorized transfers. However, DNSSEC is not enabled, and no security headers were detected in the provided data, which are areas for improvement. Privacy and cookie policies are absent, which is a compliance gap. No incident response or vulnerability disclosure information is provided, limiting transparency in security matters. Overall, the website is trustworthy and professional, serving its government mandate effectively. The main risks relate to privacy compliance and some technical security hardening. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies, and establishing incident response contacts to enhance trust and compliance.

P

PT. Sebelas Cipta Mandiri

disnakboyolali.id

51

The website disnakboyolali.id serves as the official online presence of the Dinas Peternakan dan Kesehatan Hewan Kabupaten Boyolali, a government entity responsible for livestock and animal health services in Boyolali, Indonesia. It provides public information, educational content, event updates, galleries, and videos targeting local farmers, government stakeholders, and the general public interested in livestock development. The site is branded consistently with government logos and offers clear contact channels including email, phone, and physical address. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, Swiper.js, and Slick Carousel, and integrates Google services including reCAPTCHA and Google Analytics. Hosting and DNS are managed via Cloudflare, enhancing performance and security. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. From a security perspective, HTTPS is enforced and domain status includes clientTransferProhibited, indicating some domain security. However, no explicit security headers were detected, and DNSSEC is not enabled. Privacy and cookie policies are absent, representing compliance gaps. WHOIS data shows inconsistencies, notably a domain creation date set in the future and a registrant organization unrelated to the government entity, which may warrant further verification. Overall, the website is functional, informative, and trustworthy as a government resource, but improvements in privacy compliance, security headers, and WHOIS data accuracy are recommended to enhance trust and security posture.

D

Dinas Sosial Kabupaten Mojokerto

dinsoskabmojokerto.org

56

Dinas Sosial Kabupaten Mojokerto is a government social service agency responsible for assisting the Walikota in social affairs within the Mojokerto Regency, Indonesia. The website provides information about its functions, organizational structure, and recent news updates related to social services. The site targets local citizens and stakeholders interested in social welfare programs. Technically, the website uses a modern front-end stack including Bootstrap, jQuery, and various UI libraries, hosted behind Cloudflare DNS. The site is mobile optimized and presents a professional design with clear navigation. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. The WHOIS data shows inconsistencies with a future domain creation date, which raises trust concerns. No privacy or cookie policies are present, indicating compliance gaps. Overall, the site is functional and informative but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

D

Dinas Sosial Kabupaten Lamongan

dinsosnakertranslamongan.com

56

Dinas Sosial Kabupaten Lamongan is a local government social services agency in Indonesia focused on social rehabilitation, social protection, empowerment, and poverty alleviation. The website serves as an official portal providing information, news, and public service announcements to the community. The agency is relatively small with a staff of 27 civil servants and 17 non-ASN personnel. The website is built using modern frontend technologies such as Bootstrap, jQuery, and various UI libraries, hosted behind Cloudflare DNS services. The site is mobile optimized and provides clear navigation and relevant content for its target audience. However, the domain registration data shows inconsistencies, including a future creation date, which raises questions about domain legitimacy or data accuracy. Security posture is moderate with HTTPS enabled but lacks important security headers and DNSSEC. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the website is functional and professional but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

P

PT Ardh Global Indonesia

berkabarnews.com

54

Berkabarnews.com is an Indonesian regional news website operated by PT Ardh Global Indonesia, founded in 2020. It provides news coverage across multiple categories including politics, economy, lifestyle, and regional news focused on Riau and surrounding areas. The website uses a custom or unknown CMS with a technology stack including jQuery, Google Tag Manager, Google Analytics, and MGID advertising network. The site is hosted behind Cloudflare DNS but lacks advanced security headers and cookie consent mechanisms. While the domain registration is consistent and legitimate, the website could improve its privacy compliance and security posture. Overall, it serves as a basic but functional news portal targeting a general Indonesian audience.

C

Cikpuan Bersama Membangun Komunitas Cikpuan yang Berdaya

cikpuan.id

54

The website 'Cikpuan Bersama Membangun Komunitas Cikpuan yang Berdaya' serves as a government/community information portal focused on social empowerment and public services in Indonesia. It provides detailed articles and resources related to social services, agricultural departments, and community programs, targeting local communities and government stakeholders. The site is built on WordPress with a standard theme and uses Yoast SEO for optimization, indicating a moderate level of digital maturity. The technical infrastructure includes Cloudflare DNS but lacks DNSSEC and explicit security headers, which are areas for improvement. Security posture is adequate with HTTPS enabled but could be enhanced with better header policies and published security policies. The domain WHOIS data shows inconsistencies, notably a future creation date, which raises questions about registration legitimacy. Overall, the website is professional and content-rich but lacks privacy and cookie policies, contact details, and formal security disclosures, which impacts trust and compliance. Strategic recommendations include improving security headers, publishing privacy and incident response policies, and clarifying domain registration details.

R

rakyat45.com

rakyat45.com

50

Rakyat45.com is an Indonesian online news media platform founded in 2020, delivering news content focused on national and regional topics including politics, law, economy, and lifestyle. The website targets the general Indonesian public seeking timely and factual news updates. Technically, the site is built on WordPress with Yoast SEO and Google Site Kit integrations, hosted by CV. Rumahweb Indonesia. The site demonstrates good mobile optimization, SEO practices, and content quality with regularly updated articles and structured data for enhanced search visibility. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for improved security. Privacy compliance is weak due to absence of explicit privacy and cookie policies, although Google Analytics is used with consent denied in certain regions. Contact information is clearly provided, enhancing business credibility. Overall, the site is a legitimate, functional news portal with room for improvement in privacy and security practices.

A

Allnewsterkini.com

allnewsterkini.com

36

Allnewsterkini.com is an Indonesian online news media platform established in 2023, focusing on delivering regional, national, political, sports, and automotive news to a general Indonesian audience. The website operates on a WordPress CMS with a custom Newkarma theme and leverages popular plugins such as Yoast SEO for search engine optimization and Google Analytics for visitor tracking. Hosting is provided by CV. Rumahweb Indonesia, a reputable Indonesian registrar and hosting provider. The site demonstrates consistent branding and regularly updated content, positioning itself as a regional news source with a small but active presence. From a technical perspective, the website uses modern web technologies including responsive design, Google Fonts, and JavaScript libraries for enhanced user experience such as Tiny Slider for carousels. The site is served over HTTPS, ensuring encrypted communication, and employs domain transfer protection. However, DNSSEC is not enabled, and some recommended security headers are not explicitly set, which could be improved to enhance security posture. The site lacks a cookie consent mechanism and terms of service, which are important for privacy compliance, especially under regulations like GDPR. Security-wise, the site shows a moderate security maturity level with HTTPS and domain transfer protection in place but misses advanced security headers and formal vulnerability disclosure mechanisms. No contact information for incident response or data protection officers is provided, limiting transparency in security and privacy management. The absence of cookie policy and consent mechanisms indicates partial compliance with privacy regulations. Overall, Allnewsterkini.com is a functional and professionally presented news website with room for improvement in privacy compliance and security best practices. Strategic enhancements in cookie consent, security headers, and vulnerability disclosure would strengthen trust and regulatory adherence.

P

Playmain

playmain.com

47

Playmain is a small web development duo based in Indonesia, operated by a married couple who focus on crafting quality websites with an emphasis on both aesthetic design and functional code. Their website serves as a personal portfolio and family playground for their creative web design and development projects. The site is simple, with limited content and no advanced interactive features. Technically, the site uses basic web technologies including HTML5, CSS3, JavaScript, Google Fonts, and Google Analytics for tracking. However, there is no evidence of a CMS or advanced frameworks. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. The WHOIS data is missing or indicates the domain is unregistered or expired, which raises concerns about domain legitimacy. Overall, the site is functional but lacks professional security and compliance features.

S

swaraOwa

swaraowa.org

58

swaraOwa is a small non-profit organization dedicated to the conservation of Indonesian gibbons and their habitats. The website serves as an educational and community engagement platform, featuring detailed blog posts, field stories, and conservation updates. It targets conservationists, researchers, local communities, and donors interested in biodiversity preservation. Technically, the site is built on WordPress and hosted via Cloudflare, using standard web technologies and Google Analytics for tracking. While the site is accessible and content-rich, it lacks formal privacy and cookie policies, and runs an outdated WordPress version, which poses security risks. The security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. Overall, the site demonstrates a good level of professionalism and trustworthiness but would benefit from improved privacy compliance and security hardening.

T

The Kukang Rescue Program, z.s.

kukang.org

52

The Kukang Rescue Program is a small non-profit organization founded in 2014 focused on the conservation of endangered slow lorises in Sumatra, Indonesia. The organization operates through community engagement, education, anti-poaching efforts, and sustainable farming projects such as the Kukang Coffee initiative. It maintains partnerships with multiple zoos and conservation groups, enhancing its credibility and reach. The website reflects a professional and consistent brand image with clear messaging targeted at conservationists, donors, and local communities. Technically, the website is built on Joomla CMS using the Helix Ultimate framework, incorporating modern libraries like jQuery and Bootstrap. It features multimedia content including embedded YouTube videos and responsive design optimized for mobile devices. While performance is moderate, the site lacks some advanced accessibility features and security headers, which could be improved. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, the absence of security headers and privacy/cookie policies indicates room for enhancement in compliance and security posture. The WHOIS data is incomplete, which slightly reduces domain trustworthiness, but the website's content quality and partner ecosystem provide strong trust signals. Overall, the site is a credible and well-maintained platform for wildlife conservation awareness, though it would benefit from improved privacy compliance and security best practices to strengthen its risk profile and user trust.

The website www.dpr.go.id represents the official Indonesian House of Representatives, a key government legislative institution. However, the website content is currently inaccessible due to a Web Application Firewall (WAF) or security mechanism, likely provided by Akamai's edgesuite.net service. This blocking prevents access to any substantive content, metadata, or contact information, limiting the ability to perform a full technical and security analysis. The domain registration data confirms the legitimacy and consistency of the site as a government entity in Indonesia. Due to the blocked content, the website's technical infrastructure, security posture, and compliance status cannot be fully evaluated. The site does not contain any adult or questionable content and is safe from a content safety perspective.

EtIndonesia is a media website focused on delivering news and inspirational content primarily to an Indonesian audience. The site covers a broad range of topics including news, family, mysteries, videos, health, and science. The business operates as a content publisher with a small-sized footprint, founded in 2019 and registered under CV. Rumahweb Indonesia. The website uses WordPress CMS with several tagDiv plugins and integrates Google Analytics and AdSense for analytics and monetization. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. No explicit contact information or incident response details are published, which may impact trust and user confidence.

EtIndonesia is an Indonesian media website focused on delivering news, inspirational stories, and video content primarily to an Indonesian-speaking audience. The site covers a broad range of topics including national and international news, family, mystery, health, and science. The business model appears to be online media publishing monetized through advertising, notably Google AdSense. The website uses WordPress CMS with several tagDiv plugins and integrates Google Analytics for user tracking. Hosting and DNS are managed via Cloudflare, providing some security and performance benefits. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. No contact or incident response information is published, limiting transparency. Overall, the site is functional, mobile-optimized, and professionally designed but would benefit from enhanced security and privacy compliance measures.

K

Krista Exhibitions

interpharma-indonesia.com

46

Indonesia Pharmaceutical Expo (IPEX) is a well-established event organized by Krista Exhibitions, focusing on the pharmaceutical industry and related sectors in Indonesia. The website serves as a platform for event information, exhibitor and visitor registration, and partnership details. The business model centers on event management and trade show facilitation, targeting pharmaceutical manufacturers, suppliers, and industry professionals. The domain age and WHOIS data support the legitimacy and maturity of the business. Technically, the website uses modern JavaScript libraries and frameworks such as Bootstrap, jQuery, and Owl Carousel, hosted on AWS infrastructure, providing a moderate performance and good mobile optimization. However, the site lacks a visible CMS and advanced accessibility features. Security posture is moderate with HTTPS enabled but missing critical security headers and no published privacy or cookie policies, indicating compliance gaps. No incident response or vulnerability disclosure information is provided. Overall, the website is professional and functional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

M

Mudation.com

mudation.com

53

Mudation.com is a small Indonesian media platform focused on providing a space for young people to express their writing talents and foster reading interest. The website operates on WordPress with a moderate technical infrastructure including Cloudflare DNS and uses common SEO and advertising tools. The content is accessible, well-structured, and targeted primarily at Indonesian youth. However, the WHOIS data shows inconsistencies, with the domain registration date set in the future and registered by a domain backorder service, which raises questions about the domain's legitimacy and continuity. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the site is functional and safe but would benefit from improved security practices and clearer business legitimacy indicators.

K

Kambojabet

yoanderoeck.com

7

Kambojabet operates as an online gaming and betting platform primarily targeting the Indonesian market, offering various gambling services including live casino, sports betting, slots, and poker. The website positions itself as a leading and legally recognized service in Indonesia, with a focus on small-stake betting. Technically, the site uses standard web technologies with Cloudflare DNS but lacks advanced security configurations such as DNSSEC and security headers. The site is mobile-optimized and includes structured data for SEO and social media integration. Security posture is weak due to missing policies, lack of security headers, and suspicious WHOIS data. Overall, the site presents moderate risk due to gambling content and questionable domain legitimacy.

The website www.pawduketreats.com/retail-order-form/ presents itself as an e-commerce platform promoting an online slot gaming application named WASLOT, targeting the Indonesian market. It offers bonus promotions and claims a high user rating with numerous reviews. The site is built on or heavily integrated with the Etsy platform, utilizing various modern JavaScript libraries and tracking tools such as Google Tag Manager, Bing Ads, and Sentry for error monitoring. However, the absence of WHOIS registration data and domain legitimacy concerns reduce overall trust. The site lacks visible privacy, cookie, or terms of service policies, which impacts compliance and user trust. Security headers are not detected, and no explicit company contact information is provided, limiting transparency. Overall, the site appears functional but has significant gaps in security posture and compliance.

The website at crunch.id is currently inaccessible to the public, presenting a 403 Forbidden error page that blocks access to any meaningful content. The domain is registered through an Indonesian registrar, PT Jagat Informasi Solusi, with a creation date in 2021, indicating a relatively new domain consistent with a small or startup business. The hosting provider is SiteGround, a reputable hosting company. However, the lack of accessible content, absence of privacy and cookie policies, and no visible contact or business information severely limit the ability to assess the business or technical maturity of the site. The technical infrastructure appears minimal with basic HTML and CSS and no advanced frameworks or analytics detected. Security posture is weak due to missing security headers and no DNSSEC, although domain status flags provide some protection against hijacking. Overall, the site appears to be either under development, restricted, or improperly configured for public access.

P

Prinsh | Tips & Tricks Seputar Teknologi

prinsh.com

69

Prinsh.com is a technology-focused blog primarily targeting Indonesian-speaking audiences, offering tutorials, tips, and hacking-related content. The website is built on the Blogger platform, hosted by Google, and employs HTTPS for secure communication. The content is well-structured with good SEO practices and mobile optimization, making it accessible and user-friendly for its target audience. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security headers are minimal, and there is a lack of formal privacy, terms of service, and contact information pages, which impacts the overall trust and compliance posture. Advertising is managed through Google Adsense, with no advanced tracking or analytics detected beyond this.

RRQ88 operates as an online gambling affiliate site focused on promoting slot games and related services primarily targeting the Indonesian market. The website claims to be a leading and trusted source for slot gaming links and live RTP updates, positioning itself as a top player in the local gambling affiliate niche. The business model revolves around providing access and information to slot game players, leveraging affiliate marketing and VIP access offerings. The site content and branding are basic but moderately consistent, with a strong emphasis on gambling-related keywords and user reviews indicating high engagement.

Kalibrr is a well-established online job search platform primarily serving the Indonesian and Southeast Asian markets. It offers AI-powered job matching and a comprehensive job listing service accessible via web and mobile applications. The platform targets job seekers and employers, providing a professional and user-friendly interface with verified business trust indicators. Technically, the website leverages modern frameworks such as Next.js and React, with integrations for analytics and tracking via Google Tag Manager and Blitz Llama. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Security-wise, the platform enforces HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal security or incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, Kalibrr presents a trustworthy and professional online presence with room for improvement in privacy and security transparency.

P

PECELBET

friendili.com

60

PECELBET operates as an Indonesian gambling affiliate website specializing in slot games, particularly promoting the 'Pragmatic' provider. The site positions itself as a trusted and official link for slot gaming with a focus on easy deposits via QRIS. The business model appears to be affiliate/referral based, targeting mature audiences interested in online gambling. Technically, the website leverages common marketing and analytics tools such as Google Tag Manager, Datadog, and Rollbar, hosted on infrastructure involving GoDaddy and Cloudflare DNS. However, the site lacks critical privacy and cookie policies, and no security headers were detected, indicating gaps in compliance and security best practices. The domain is mature, registered since 2013, consistent with the business's claimed longevity. Overall, the site demonstrates basic content quality and moderate technical implementation but falls short in privacy compliance and security posture.

P

Privacy service provided by Withheld for Privacy ehf

totomacaupools.club

52

The website totomacaupools.club operates as an online platform providing live lottery results and streaming services primarily for Toto Macau 4D and 5D games. It targets a mature audience interested in lottery and gambling activities, with content mainly in Chinese and Indonesian languages. The business model revolves around delivering real-time lottery information and related tools such as number generators and result checkers. The site appears to be a niche player in the online lottery results market, with a small-scale operation founded in 2017. From a technical perspective, the site uses a standard technology stack including jQuery, Bootstrap, and Google Analytics for tracking. Hosting and DNS services are provided via Cloudflare, but the site lacks advanced security configurations such as DNSSEC and security headers. The website is moderately optimized for mobile devices and has basic SEO and accessibility features. Performance is average with no significant technical debt visible. Security posture is moderate but with notable gaps. The site uses HTTPS but lacks important security headers and DNSSEC. There is no visible privacy or cookie policy, and no contact or incident response information is provided, which reduces compliance and trustworthiness. The domain is privacy-protected, which is common for gambling-related sites but reduces transparency. No WAF or blocking mechanisms were detected, and the content is fully accessible. Overall, the site presents moderate risk due to limited transparency, lack of compliance documentation, and missing security best practices. Strategic improvements in security headers, privacy compliance, and contact information would enhance trust and reduce risk.

P

Prediksi BUNTOGEL – Situs prediksi togel online dan Live draw sydney lotto, sgp, hk lotto

prediksibuntogel.com

32

The website prediksibuntogel1.online operates as an Indonesian language online lottery prediction and live draw results platform, targeting lottery and gambling enthusiasts. It offers services such as lottery result updates, predictions, live draw information, and affiliate links to gambling applications. The site uses WordPress CMS with common frontend libraries and is hosted via Namecheap. While the site is functional and mobile-optimized, it lacks critical privacy and security policies, and the WHOIS data is suspicious with a future creation date, undermining trust. Security posture is basic with HTTPS enabled but missing important security headers and DNSSEC. Contact information is limited to a phone number and Telegram links, with no official company emails or physical addresses provided.

B

BUNTOGEL

baeyprime.com

50

BUNTOGEL is an Indonesian online gambling platform specializing in lottery (togel), slot games, and live casino offerings. It positions itself as a trusted and large-scale operator with jackpots up to 10 million IDR for 4D lottery games. The platform targets adult users interested in online gambling within Indonesia, providing a variety of games and a referral program. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Owl Carousel, and integrates analytics and marketing tools such as Google Analytics and Facebook Pixel. The site is hosted with Cloudflare DNS and secured with HTTPS, but lacks DNSSEC and some advanced security headers. Security posture is moderate with some best practices observed, but privacy compliance is weak due to missing privacy and cookie policies. The domain WHOIS data is minimal and shows an unusual future creation date, which slightly impacts trust. Overall, the site is functional and professionally designed but requires improvements in privacy, security disclosures, and transparency to enhance trust and compliance.

C

CONGOR4D

congor4d.online

57

Congor4D is an Indonesian online slot gambling platform positioning itself as one of the largest and best in the local market. The website offers slot gaming services targeting Indonesian players, with content primarily in Indonesian language. The business model revolves around online gambling, which is a regulated and mature content sector. Technically, the website uses standard HTML5 and JavaScript with extensive Alibaba analytics and tracking scripts, hosted with DNS services via Cloudflare. However, the domain WHOIS data is suspicious due to a future creation date and lack of registrant information, which raises concerns about legitimacy. Security posture is basic with no DNSSEC and no visible security policies or contact information. Privacy compliance is poor with no privacy or cookie policies found. Overall, the website is accessible but lacks transparency and trust indicators.

The website RTP SLOT BUNTOGEL provides RTP statistics and slot game pattern information primarily targeting Indonesian online slot players. It serves as an informational and referral platform linking to external gambling sites. The technical infrastructure uses common frontend libraries such as Bootstrap, Swiper.js, and Animate.css, hosted on DigitalOcean Spaces CDN. However, the site lacks advanced SEO, accessibility, and security features. The security posture is weak with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are present. WHOIS data is unavailable due to unsupported TLD WHOIS, reducing trust and transparency. Overall, the site is functional but basic, with significant gaps in security and compliance.

T

Triple AHAY4D

aaahcitygames.com

52

The website domainvvippoint.com operates as an Indonesian online gambling platform primarily focused on providing RTP (Return to Player) information for slot games, lottery predictions, and related betting services. It targets adult users interested in online slot gambling and lottery games, offering a one-stop betting experience with multiple linked partner sites. The site uses modern web technologies including AMP and Bootstrap frameworks, and integrates Google Analytics for user tracking. However, it lacks critical privacy and cookie policies, and does not provide verified contact emails or phone numbers, relying mainly on Telegram and Facebook groups for user contact. The WHOIS data shows a suspicious future domain creation date, which raises concerns about the legitimacy of the domain registration information. Security practices are basic with HTTPS enabled but no DNSSEC or advanced security headers detected. Overall, the site presents moderate content quality and technical implementation but falls short in privacy compliance and business credibility.

A

AGENPAY

agenpay.com

52

Agenpay is an Indonesian online gambling affiliate platform that provides a curated list of trusted online gambling agents, including slot, togel, live casino, and sports betting. The website positions itself as the number one trusted agent listing in Indonesia, targeting adult Indonesian users interested in online gambling. The business model revolves around affiliate marketing by directing users to partner gambling sites for registration and play. Technically, the website is built on WordPress with Bootstrap and uses common libraries such as jQuery, Font Awesome, and WOWSlider. It leverages Cloudflare for DNS and hosting infrastructure and integrates Google Tag Manager and Google Analytics for tracking and analytics. Security posture is basic with no advanced security headers or DNSSEC enabled, and no visible incident response or vulnerability disclosure mechanisms. Privacy compliance is minimal with a basic privacy policy but no cookie consent mechanism. Overall, the site is functional but lacks professional polish and advanced security and privacy features.

P

PT. Dekoruma Inovasi Lestari

dekoruma.com

59

Dekoruma is a prominent Indonesian e-commerce platform specializing in Japandi style furniture, interior design services, and property sales. The company positions itself as a leading retailer in its niche, offering a wide range of products and professional design services tailored to modern living spaces. The website demonstrates a strong market presence with extensive product categories, exclusive brands, and active social media engagement. Technically, the platform leverages modern web technologies including React and integrates multiple analytics and marketing tools to optimize user engagement and business insights. Security posture is solid with HTTPS enforcement and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is partial, with a comprehensive privacy policy but lacking cookie consent mechanisms. Overall, Dekoruma presents a professional and trustworthy online presence with minor areas for enhancement in privacy and security practices.

H

Hellostore

hellostore.id

61

Hellostore is an official Apple authorized reseller operating an e-commerce platform targeting consumers in Indonesia. The website offers a wide range of Apple products including iPhones, iPads, Macs, Apple Watches, and accessories with official warranty and free shipping. The business model focuses on retail sales and distribution of Apple products, positioning itself as a trusted local partner for Apple customers. The site leverages Shopify as its platform, utilizing modern web technologies and a responsive design to provide a good user experience across devices. Technical infrastructure is robust with fast loading times and integration of security features such as HTTPS and hCaptcha for form protection. However, explicit privacy and cookie policies are not found in the provided content, which is a gap in compliance and transparency. Security posture is generally strong but could be improved by adding explicit security headers and publishing a security policy. Overall, the website is professional and trustworthy, with moderate tracking and advertising practices typical for e-commerce sites.

B

blibliOMG

blibliomg.com

45

Blibli Omnichannel Mobility Group (blibliOMG) is a large Indonesian company focused on retail, distribution, and enterprise & education services, aiming to be an industry leader by leveraging technology and customer-centric products. The website is professionally designed using WordPress with Elementor and includes multiple language support and SEO optimizations. The technical infrastructure is modern, hosted on AWS with a good SSL configuration, but lacks DNSSEC and security headers. Security posture is moderate with HTTPS enabled and domain locks in place, but missing explicit security policies and incident response contacts. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and trustworthy but would benefit from enhanced security and compliance transparency.

A

asian4d

solusiasain.com

56

Asian4D operates as a crypto investment and online gambling platform primarily targeting Indonesian users. The platform offers a variety of gambling services including Togel, Slots, Live Casino, Sports betting, and interactive games, alongside crypto investment opportunities. The website is designed with a moderate level of professionalism, supporting both desktop and mobile users with responsive design and clear navigation. The business is relatively new, with domain registration in 2025, consistent with the site's founding year. Social media and chat integrations enhance user engagement, although direct company contact details are limited to forms and social channels. Technically, the site employs modern web technologies such as Bootstrap and jQuery, integrates multiple tracking and marketing tools including Google Analytics, Facebook Pixel, and PushEngage, and uses Cloudflare DNS services. Performance is moderate with good mobile optimization. However, the absence of DNSSEC and some security headers, along with multiple Facebook Pixel IDs, indicate areas for security and privacy improvement. From a security perspective, the site uses HTTPS and implements CAPTCHA on login and registration forms, which are positive controls. However, there is no published security policy or incident response contact, and cookie consent mechanisms are lacking despite cookie policy presence. These gaps reduce privacy compliance and security posture scores. The domain registration is transparent and consistent with the business claims, enhancing legitimacy. Overall, Asian4D presents a moderately trustworthy platform with good technical implementation but requires enhancements in security policies, privacy compliance, and transparency to improve user trust and regulatory adherence.

A

asian4d

asian4dnanas.com

55

Asian4D is an Indonesian-focused online platform offering crypto investment and various gambling services including Togel, Slots, Live Casino, Sports betting, and more. The platform targets mature users interested in digital asset investment and online gambling. The website is moderately mature with a good design and mobile optimization, leveraging modern technologies such as Bootstrap, jQuery, and multiple marketing and tracking tools. Security posture is adequate with HTTPS and domain transfer protection but lacks advanced DNSSEC and security headers. Privacy compliance is basic with privacy and cookie policies present but no explicit GDPR adherence or incident response information. The domain WHOIS data raises concerns due to a future creation date, which may indicate data errors or recent registration, impacting trust. Overall, the platform operates in a high-risk sector with moderate technical and business credibility.

A

asian4d

asian4dhope.com

56

Asian4D is an Indonesian-focused online platform offering crypto investment and various gambling services including lottery (Togel), slots, live casino, sports betting, and arcade games. The platform targets mature users interested in digital asset investment and online gambling. Technically, the site uses modern frontend technologies such as Bootstrap and jQuery, integrates multiple marketing and tracking tools including Google Analytics and Facebook Pixel, and is hosted behind Cloudflare DNS. Security measures include HTTPS and captcha verification on forms, but lack advanced DNS security and visible security headers. The domain WHOIS data shows inconsistencies with a future creation date, raising legitimacy concerns. Overall, the platform demonstrates moderate digital maturity but requires improvements in security posture and transparency.

G

GELUTBET

geluthslot.com

49

GELUTBET operates an Indonesian online gambling platform specializing in slot games and lottery markets, targeting adult users. The website promotes itself as a trusted number one online gambling site in Indonesia, offering various bonuses and cashback promotions. The technical infrastructure includes standard web technologies such as HTML5, CSS3, JavaScript, jQuery, Bootstrap, and integrates Google Analytics, Google Tag Manager, and LiveChat for user engagement and tracking. Hosting appears to be on a VPS or cloud provider with Cloudflare DNS but lacks advanced security configurations such as DNSSEC and security headers. Security posture is weak, with visible PHP warnings indicating poor error handling and potential information leakage. Privacy compliance is minimal, with no privacy or cookie policies found. The domain WHOIS data is suspicious due to a future creation date and lack of registrant transparency, undermining trust. Overall, the site presents moderate technical maturity but poor security and compliance readiness.

A

AAAH GROUP

gratisaaah.com

51

The website gratisaaah.com operates as an Indonesian online gambling platform specializing in togel and slot games. It positions itself as a leading and trusted site in Indonesia offering betting services, bonuses, and minigames. The technical infrastructure includes standard web technologies such as HTML5, CSS3, JavaScript with jQuery, Bootstrap framework, and tracking tools like Google Analytics and Google Optimize. The site uses Cloudflare DNS but lacks advanced security headers and DNSSEC, indicating a basic security posture. The domain WHOIS data is suspicious due to a future creation date, which undermines trust and raises legitimacy concerns. No privacy, cookie, or terms of service policies are present, and no contact information is provided, which further impacts compliance and credibility. The content is adult-oriented gambling, restricted to adults only.

T

Triple AHAY4D

aaahvippoint.com

51

The website aaahvippoint.com operates as an Indonesian online gambling platform specializing in slot games, lottery, and togel predictions. It positions itself as a trusted source for RTP (Return to Player) data and gambling-related services, targeting adult users interested in online betting. The site leverages modern web technologies including AMP and Bootstrap to deliver a responsive user experience, with integration of Google Analytics for visitor tracking. However, the site lacks critical privacy and cookie policies, and does not provide direct contact emails or phone numbers, relying instead on Telegram groups for customer service. The domain WHOIS data is inconsistent, showing a future creation date which raises legitimacy concerns. Security practices are basic with HTTPS enabled but missing DNSSEC and security headers.