Singapore security reports

G

GROWCRAFT PTE. LTD.

seeapi.com

62

SeeAPI operates the Seedance API platform, a cutting-edge AI video generation service that enables developers and creators to build cinematic video workflows using text, image, and video inputs. Positioned as an innovative technology provider, SeeAPI offers multiple Seedance model versions with varying performance and quality tradeoffs, targeting SaaS developers, marketers, and content creators. The platform supports online testing and seamless API integration, emphasizing ease of use and scalability. Technically, the website is built on a modern React and Next.js stack, with integrations such as Stripe for payments and Google Tag Manager for analytics. The site demonstrates excellent design quality, mobile optimization, and SEO practices. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though security headers and cookie consent mechanisms are areas for improvement. WHOIS data for the subdomain is unavailable as expected, but the main domain and company information are consistent and legitimate. Overall, the platform presents a professional and trustworthy service with a strong focus on AI-driven video generation.

M

MIND Technology, Inc.

seamap.com

64

MIND Technology, Inc., operating the Seamap brand, is a well-established company founded in 1987 specializing in the design, manufacture, sale, and repair of proprietary marine technology products for seismic, survey, and offshore industries. The company maintains a global presence with engineering, manufacturing, sales, and support centers in Singapore, the United Kingdom, and Malaysia, enabling 24/7 worldwide customer support. Their product portfolio includes marine exploration solutions, environmental survey data services, maritime security solutions, and comprehensive service and support offerings. The website reflects a professional B2B business model targeting marine and offshore industry professionals and companies. Technically, the website is built on WordPress using Elementor and related plugins, with a modern tech stack including jQuery and Font Awesome. The site is mobile optimized with good SEO and accessibility basics, though some improvements in security headers and cookie consent mechanisms are recommended. Performance is moderate, and the site is hosted under a reputable registrar with HTTPS enabled. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which are recommended for enhanced security. No explicit security or incident response policies are published, and no vulnerability disclosure or data protection officer information is available. The WHOIS data is consistent with the business claims, showing a long domain age and no privacy protection, supporting legitimacy. Overall, the website is professional, trustworthy, and business-focused with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen the company's digital trust and compliance posture.

United Overseas Bank (UOB) is a leading Singapore-based financial institution with a strong regional presence across 19 countries in Asia Pacific, Europe, and North America. The website reflects a mature digital platform offering comprehensive banking services for individuals and businesses, including personal banking, wealth management, corporate banking, and sustainable finance solutions. The bank emphasizes its extensive ASEAN trade network and regional focus, positioning itself as a key player in the financial sector with a long history dating back to 1935. Technically, the website employs a modern technology stack including Bootstrap 4, jQuery, Adobe DTM, and multiple analytics and marketing tools such as Google Analytics, TikTok Pixel, Microsoft Clarity, and Outbrain. The site is mobile-optimized with good SEO and accessibility features, though some accessibility improvements could be made. Security posture is strong with HTTPS enforced and no visible vulnerabilities, complemented by a vulnerability disclosure page and privacy policy indicating compliance with data protection standards. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility. The lack of publicly available WHOIS data is typical for Singapore domains and does not detract from the legitimacy of the site, which is supported by consistent branding, official social media presence, and extensive subsidiary links. The website is safe for general audiences with no adult or questionable content detected.

C

Cloudflare, Inc

wonderchat.io

66

Wonderchat.io is a technology startup focused on providing no-code AI chatbot solutions for websites, leveraging ChatGPT-based automation to enhance customer support and sales analytics. The company targets businesses seeking to automate up to 70% of support queries with custom AI agents, positioning itself as an emerging player in the AI SaaS market. The website is built using modern frameworks like Framer and is hosted via Cloudflare, indicating a contemporary technical infrastructure with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks advanced DNS security features such as DNSSEC and does not publish security or privacy policies. The site integrates multiple analytics and marketing tools, reflecting a data-driven approach to user engagement. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact and security information.

U

Unbound Studios Pte Ltd

playground.game

9

PlayGround is a newly launched next generation gaming platform developed by Unbound Studios Pte Ltd, based in Singapore. The platform offers AI-driven no-code tools enabling users and developers to create, share, and play games across multiple categories including web games, premium titles, and partner games. It also provides a Creator toolset for game development on PC and MacOS, targeting gamers, developers, and content creators. The website is professionally designed with good mobile optimization and clear navigation, reflecting a modern and engaging user experience. Technically, the site uses Vue.js, Tailwind CSS, and Cloudflare DNS, with Google Tag Manager and Twitter Ads integrated for analytics and marketing. Security posture is adequate with HTTPS and domain transfer protection, though DNSSEC is not enabled and security headers are missing. Privacy and cookie policies are absent, indicating compliance gaps. No direct contact information or incident response details are published, which may affect user trust and regulatory compliance. Overall, the domain registration is consistent and legitimate, matching the company identity and launch timeline.

P

Pan Pacific Hotels Group

panpacific.com

78

Pan Pacific Hotels Group operates an international hospitality business offering hotels, resorts, and serviced suites across Asia, Oceania, Europe, and North America. The website presents a professional and well-branded digital presence targeting travelers and business/leisure customers seeking accommodation services. The technical infrastructure leverages Adobe Experience Manager CMS, integrates modern marketing and analytics tools such as Google Tag Manager, Adobe DTM, and AB Tasty, and implements a comprehensive cookie consent mechanism to comply with privacy regulations. Security posture is solid with HTTPS enforced and bot detection cookies in place, though the absence of security headers and explicit privacy policies suggests room for improvement. The WHOIS data is missing or indicates the domain is not registered, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and trustworthy from a user perspective but requires better transparency in domain registration and privacy disclosures.

A

Asia CEO

asiaceosummit.com

60

The Asia CEO Summit website represents a professional event platform focused on convening business leaders and executives in the Asian event industry. The summit promotes economic growth and business collaboration in the region, positioning itself as a premier conference. The technical infrastructure leverages modern JavaScript libraries and a specialized event management platform (SHOWOFF by ASP.events), providing a responsive and accessible user experience. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and cookie consent mechanisms. The absence of WHOIS registration data introduces moderate trust concerns, although the website content and branding appear consistent and professional. Overall, the site is functional and business-focused but would benefit from enhanced privacy compliance and security best practices.

V

Voilaah Digital Agency

voilaah.com

52

Voilaah is a Singapore-based digital agency specializing in UI/UX design and web development, serving startups, enterprises, and government agencies. The company offers a full suite of services including web and mobile app development, custom software solutions, and AI systems integration. With over 12 years of experience and recognition such as the Media Agency of the Year at the Singapore Quality Brand Awards, Voilaah positions itself as a trusted partner in the digital transformation space. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, GSAP animations, and Typekit fonts, delivering a fast, mobile-optimized, and visually engaging user experience. The site is well-structured with clear navigation and professional branding consistency. From a security perspective, the site uses HTTPS and follows several best practices, though it lacks explicit security headers and published privacy or cookie policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a notable concern, impacting domain legitimacy verification. Overall, the website demonstrates strong business credibility and technical maturity but should improve privacy compliance and domain transparency to enhance trust and security posture.

V

Vodien Internet Solutions Pte Ltd

vodien.com

62

Vodien Internet Solutions Pte Ltd is a prominent web hosting and domain registration service provider based in Singapore, serving over 35,000 companies and 210,000 users across Asia. The company offers a broad range of hosting solutions including web hosting, VPS, dedicated servers, email hosting, and online marketing services, supported by 24/7 customer support. Their market position is strong within the regional technology sector, focusing on reliable, high-performance hosting with a customer-centric approach. Technically, the website demonstrates a mature digital infrastructure utilizing modern JavaScript frameworks, extensive analytics and tracking tools such as Google Tag Manager, FullStory, Hotjar, and WebEngage, and a robust cookie consent mechanism compliant with GDPR. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a high level of digital maturity. From a security perspective, the site enforces HTTPS, implements key security headers, and uses consent management tools. However, there is no publicly available dedicated security policy or incident response contact information, which could be improved to enhance transparency and trust. The absence of WHOIS domain registration data is a notable gap, potentially indicating privacy protection or recent registration, which slightly reduces domain trustworthiness. Overall, Vodien presents a professional, trustworthy online presence with comprehensive service offerings and strong technical implementation. Strategic improvements in security transparency and domain registration disclosure would further strengthen their security posture and business credibility.

E

Entdecken Sie Singapur

visitsingapore.com

68

The website www.visitsingapore.com/de_de/ serves as the official tourism portal for Singapore, targeting German-speaking tourists and travelers. It provides comprehensive travel information, event details, and business event resources, positioning itself as a key digital asset for Singapore's tourism promotion. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, it leverages modern web technologies including Adobe Experience Manager, Google Tag Manager, and OneTrust for cookie consent, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and standard best practices, although explicit security headers could be further confirmed. Privacy compliance is well addressed with visible cookie consent and privacy policy in German, aligned with GDPR requirements. The absence of WHOIS data is notable but likely due to registry or query limitations rather than privacy protection or malicious intent. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance suitable for a government-affiliated tourism entity.

N

Northstar Travel Media Singapore Pte Ltd

cruiseworld-indonesia.com

43

CruiseWorld Indonesia is a professional event platform focused on the cruise tourism industry, targeting travel agents and cruise professionals in the Asia-Pacific region. The website presents detailed event information, sponsors, speakers, and multimedia content, reflecting a well-established conference series with a strong regional presence. The business is owned by Northstar Travel Media Singapore Pte Ltd, a reputable media company in the travel sector. Technically, the site is built on WordPress with common plugins and uses Google Analytics and reCAPTCHA for tracking and security. While HTTPS is properly configured, the site lacks DNSSEC and advanced security headers, and no explicit privacy or cookie policies are found, indicating room for compliance improvement. The domain registration data is consistent and transparent, supporting the legitimacy of the business.

N

Northstar Travel Media Singapore Pte Ltd

cruiseworld-india.com

46

CruiseWorld India is a specialized virtual conference platform targeting Indian travel trade professionals interested in the cruise industry. The website serves as an information hub for the 2021 event, featuring industry leaders and sponsors from prominent cruise lines and tourism boards. The business is positioned as a key regional event within the broader CruiseWorld series, supported by Northstar Travel Media Singapore Pte Ltd. Technically, the site is built on WordPress with common plugins like Slider Revolution and Google services for analytics and bot protection. While the site uses HTTPS and reCAPTCHA, it lacks advanced security headers and DNSSEC, indicating room for security improvements. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional and trustworthy but should enhance its compliance and security posture.

N

Northstar Travel Media Singapore Pte Ltd

cruiseworld-hongkong.com

43

CruiseWorld Hong Kong is a professional event website promoting a cruise industry conference organized by Northstar Travel Media Singapore Pte Ltd, a subsidiary of Northstar Travel Group. The site targets cruise industry professionals and travel agencies, offering networking, expert insights, and sponsorship opportunities. The business is positioned as a leading cruise conference in Asia with multiple global editions. Technically, the site is built on WordPress with common plugins and integrates Google services for analytics and security. The site is mobile optimized and has good content quality but lacks privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS and reCAPTCHA but missing DNSSEC and security headers. Overall, the domain registration is consistent and trustworthy, with no blocking or WAF detected.

N

Northstar Travel Media Singapore Pte Ltd

cruiseworld-china.com

43

CruiseWorld China is a professional event website representing a leading cruise industry conference organized by Travel Weekly China and Northstar Travel Group. The site targets cruise professionals and travel agencies in China, offering networking, expert insights, and industry training. The business is well positioned with multiple global event editions and a reputable parent company. Technically, the site is built on WordPress with modern plugins and Google services, hosted on Namecheap infrastructure. Security posture is adequate with HTTPS and reCAPTCHA, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

N

National Association of Travel Agents Singapore

natas.travel

52

The National Association of Travel Agents Singapore (NATAS) operates as a professional non-profit organization representing travel agents and related stakeholders in Singapore. The website serves as a portal for membership services, trade events, tour leader registry, and travel fairs, positioning NATAS as a key industry association with regional affiliations to ASEAN and other travel bodies. The business model focuses on membership engagement, event organization, and industry support, targeting travel professionals and consumers interested in travel fairs. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Matomo analytics, and Google Maps API, delivering a moderately performant and mobile-optimized experience. The site uses custom or unknown CMS technology and integrates several tracking and analytics tools. While the site is well-structured and professionally designed, it lacks some advanced SEO and accessibility features. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible security headers such as CSP or HSTS. No critical vulnerabilities were detected, but improvements in security headers and cookie consent mechanisms are recommended to enhance compliance and protection. Overall, the domain is privacy protected in WHOIS, which is common and justified for this business type. The website content and affiliations indicate legitimacy and moderate trustworthiness. The site scores well in business credibility and content quality but has room for improvement in security posture and privacy compliance.

R

Resorts World at Sentosa Pte. Ltd.

rwsentosa.com

68

Resorts World Sentosa is a premier integrated resort destination in Singapore offering world-class attractions such as Universal Studios Singapore, S.E.A. Aquarium, and Adventure Cove Waterpark, alongside luxury hotels, dining, shopping, and event venues. The website reflects a mature digital presence with a modern React-based tech stack, comprehensive content, and strong branding consistency. Extensive use of analytics and marketing tools indicates a data-driven approach to customer engagement. Security posture is robust with HTTPS and security headers, though the absence of public vulnerability disclosure and incident response contacts suggests room for improvement. The lack of WHOIS data is a notable anomaly but does not detract from the overall legitimacy given the professional site and known social media presence.

M

Momentus Hotels & Resorts

momentushotels.com

66

Momentus Hotels & Resorts operates an upscale hospitality business focused on premier accommodations in Singapore. The website presents a professional and well-structured digital presence with integrated booking capabilities via TravelClick. Marketing and analytics tools such as Google Tag Manager and Facebook Pixel are actively used, indicating a mature digital marketing strategy. However, the absence of WHOIS registration data and lack of visible privacy policy or contact information present gaps in transparency and compliance. The security posture is strong with HTTPS and Content Security Policy implemented, but additional security headers and clearer privacy compliance documentation are recommended. Overall, the website is functional and trustworthy from a user perspective but would benefit from enhanced transparency and compliance documentation to improve business credibility and regulatory adherence.

G

Group Voyagers, Inc

avalonwaterways.asia

66

Avalon Waterways is a well-established river cruise operator specializing in luxury river cruises across Europe and Asia. The company offers Suite Ships® featuring spacious Panorama Suites designed for spectacular views, targeting travelers seeking premium river cruise experiences. The website reflects a professional and consistent brand image aligned with the travel and hospitality industry. Technically, the site employs modern web technologies including Angular framework, Google Tag Manager for analytics, and Osano for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the website enforces HTTPS and uses cookie consent mechanisms, though it lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. WHOIS data is privacy protected, which is typical for this business type, and no suspicious registration patterns were found. Overall, Avalon Waterways presents a trustworthy and professional online presence with room for improvement in security transparency and incident response readiness.

E

eex-asia

eexasia.com

68

EEX Asia operates as a regulated commodity derivatives exchange based in Singapore and is part of the larger EEX group. The website presents a professional and business-focused platform targeting commodity traders and financial institutions in the energy sector. The site is built on the Wix platform, leveraging modern web technologies and includes standard tracking and cookie consent mechanisms. However, the absence of WHOIS registration data raises questions about domain registration transparency. Security posture is generally good with HTTPS enforced and cookie consent implemented, but the lack of security headers and privacy policy pages indicates room for improvement. Overall, the site is accessible and functional but would benefit from enhanced compliance and transparency measures.

N

Northstar Travel Media Singapore Pte Ltd

cruiseworld-asia.com

46

CruiseWorld Asia is a professional event website representing a flagship cruise conference organized by Travel Weekly Asia, targeting travel agents and cruise industry professionals in the Asia Pacific region. The website provides detailed event information, speaker profiles, partner logos, and multimedia content, reflecting a well-established presence since 2017. Technically, the site is built on WordPress with common plugins and integrates Google services for analytics and security (reCAPTCHA). The hosting is via Namecheap, and the domain registration is consistent and stable with no privacy protection, indicating transparency. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy measures.

B

Business Travel Show Asia Pacific

businesstravelshowapac.com

65

Business Travel Show Asia Pacific is a specialized event platform launched in 2025, focusing on connecting corporate travel and meetings professionals in the Asia Pacific region with leading suppliers and experts. The event is presented by the BTN Group, a well-established entity in the business travel industry. The website demonstrates a professional and modern digital presence with comprehensive content, clear navigation, and mobile optimization. Technically, it employs contemporary JavaScript libraries and tracking tools, with a good security posture including HTTPS and cookie consent mechanisms. However, the absence of WHOIS registration data raises concerns about domain legitimacy and registration status, which should be verified to ensure trustworthiness. Overall, the site is well-positioned as a credible event platform but would benefit from clearer public business contact information and enhanced security headers.

The Meetings Show Asia Pacific is a prominent event platform focused on the meetings, incentives, conferences, and exhibitions (MICE) industry in the Asia Pacific region. It offers a comprehensive hosted buyer program, education sessions, and networking opportunities, positioning itself as a leading trade show in this sector. The website is professionally designed, mobile-optimized, and integrates modern web technologies and tracking tools such as Google Tag Manager and Crazy Egg. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The absence of WHOIS data reduces transparency but the business branding and content quality suggest legitimacy. Overall, the site serves its target audience effectively with clear navigation and relevant content.

S

Surbana Jurong

surbanajurong.com

64

SJ Group is a global enterprise specializing in urban development, infrastructure, and managed services, owned by Temasek. The company offers a comprehensive portfolio of services including advisory, planning, design, construction, operations, and integrated solutions such as security and digital technology services. Their market position is strong with a presence in 40 countries and subsidiaries like SMEC, Atelier Ten, and Robert Bird Group. The website reflects a professional and consistent brand image with excellent content quality and SEO optimization. Technically, the website is built on WordPress with modern JavaScript libraries and integrations including HubSpot Analytics, Google Tag Manager, and Weglot for multilingual support. The site is mobile optimized, accessible, and performs moderately well. Security posture is good with HTTPS enforced and secure forms, though some security headers could be improved. Privacy compliance is adequate with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the security posture is strong with no visible vulnerabilities or exposed sensitive data. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for enterprises. The website is trustworthy, professional, and safe for general audiences. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing incident response information.

G

Gumlet Pte. Ltd.

gumlet.com

60

Gumlet Pte. Ltd. is a technology company specializing in AI-powered video hosting, streaming, and image optimization services. Positioned as a modern alternative to established platforms like Mux and Vimeo, Gumlet targets developers, creators, and enterprises seeking high-performance media delivery solutions. The company offers a comprehensive suite of services including DRM-protected video hosting, adaptive streaming, and detailed analytics, supported by a global CDN infrastructure. Gumlet's market presence is reinforced by notable customer case studies and certifications such as SOC2 and ISO, indicating a commitment to security and compliance. Technically, Gumlet employs a modern web stack leveraging React and Next.js frameworks, with media assets hosted on AWS S3 and delivered via CDN for optimal performance. The website demonstrates excellent mobile optimization, accessibility, and SEO practices, contributing to a fast and user-friendly experience. Security measures include HTTPS enforcement, robust security headers, and DRM capabilities for video content, reflecting a mature security posture. While the website provides comprehensive business and contact information, privacy compliance could be enhanced by implementing explicit cookie consent mechanisms and publishing dedicated security and incident response policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the active and professional web presence suggests a legitimate operation. Overall, Gumlet presents a strong digital maturity and business credibility with room for improvement in privacy transparency and domain registration clarity.

Ranger Buddies, operated by Mandai X, is an educational platform focused on empowering children to be heroes for a sustainable future through engaging missions and activities. The platform leverages both physical and digital experiences, supported by wildlife experts and pedagogists, to foster character strengths and environmental awareness among children. The website is well-positioned in the niche education sector, targeting families and schools primarily in Singapore. Technically, the site is built on HubSpot CMS with modern libraries such as UIkit and Font Awesome, and integrates Google Analytics 4 and Facebook Pixel for marketing and analytics. The site is mobile-optimized and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, although DNSSEC is not enabled and security headers are not explicitly detected. No critical vulnerabilities or suspicious content were found. Overall, the domain registration is consistent with the business profile, enhancing trustworthiness.

M

Mandai Park Holdings Pte. Ltd.

mandai.com

71

Mandai Wildlife Reserve is a prominent wildlife and nature destination in Singapore, operated by Mandai Park Holdings Pte. Ltd., a subsidiary of Temasek Holdings. The organization manages multiple wildlife parks and offers diverse services including ticketing, memberships, educational programs, event venues, and accommodations. The website reflects a strong market position with a focus on family and wildlife enthusiasts, supported by comprehensive content and consistent branding. Technically, the site is built on Adobe Experience Manager with modern analytics and marketing tools integrated, providing a good user experience with mobile optimization and accessibility considerations. Security posture is strong with HTTPS, security headers, and secure forms, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though the lack of WHOIS data slightly reduces domain trust. Strategic recommendations include enhancing security transparency and vulnerability disclosure mechanisms.

A

Asian Species Action Partnership | ASAP

speciesonthebrink.org

63

The Asian Species Action Partnership (ASAP) website represents a collaborative non-profit initiative focused on preventing species extinction in Southeast Asia. The platform serves as a hub for over 200 organizations, providing resources, funding opportunities, training, and partnership facilitation to accelerate conservation efforts. The website is professionally designed using the Squarespace CMS, featuring clear navigation and mobile optimization. However, it lacks explicit privacy policies and direct contact information, which are important for trust and compliance. The security posture is strong with HTTPS and HSTS enabled, but could be improved with additional security headers and incident response information.

M

Mandai Nature Fund

mandainature.org

61

Mandai Nature is a Singapore-based conservation organization focused on protecting threatened species, restoring ecosystems, and supporting communities in Southeast Asia. Established in 2020 as the conservation arm of Mandai Wildlife Group and funded by Temasek, it operates as a non-profit entity delivering impact through catalyzing conservation programs, building capacity, and convening partnerships. The website is professionally designed using Adobe Experience Manager, with modern technologies and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, but could be improved by adding explicit security headers and cookie consent mechanisms. Privacy policies are comprehensive and GDPR compliant, though cookie policy and incident response information are lacking. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the website content and external references support legitimacy. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in privacy compliance and security best practices.

Q

QS Quacquarelli Symonds Limited

edudatasummit.com

68

EduData Summit is a globally recognized event organized by QS Quacquarelli Symonds Limited, focusing on the intersection of education and data analytics. The 2025 event is scheduled in Singapore, targeting a professional audience of educators, data scientists, and institutional leaders. The website is built on WordPress with modern plugins and provides comprehensive event information, speaker details, and registration options. The technical infrastructure is solid with Cloudflare DNS and HTTPS, though DNSSEC is not enabled. Privacy and cookie policies are present and GDPR compliant, enhancing trust. Security posture is good but could be improved with additional headers and vulnerability disclosures. Overall, the site reflects a mature digital presence with strong business credibility and moderate technical sophistication.

S

Storck

storck.sg

63

Storck Singapore operates as the local corporate website for the international confectionery company Storck, presenting its brand portfolio, corporate vision, career opportunities, and consumer services. The website targets consumers, potential employees, and business partners within Singapore and the broader region. The business model focuses on manufacturing and retailing confectionery products with a strong brand presence. Technically, the site is built on TYPO3 CMS and employs modern JavaScript libraries, ensuring a responsive and accessible user experience. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities, though security headers and explicit incident response information are lacking. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration status, which should be monitored. Overall, the website is professional and trustworthy but could improve transparency and security documentation.

G

Government Technology Agency

wogaa.sg

66

WOGAA is a Singapore government digital analytics platform operated by the Government Technology Agency. It provides data-driven insights and monitoring services such as web analytics, uptime monitoring, site performance inspection, and user sentiment collection to support 98 government agencies. The platform aims to improve government digital services by leveraging data collected across multiple government websites. Technically, the website uses modern JavaScript frameworks and is hosted on AWS infrastructure with a strong Content-Security-Policy and HTTPS enforcement. However, DNSSEC is not enabled, and some security headers could be improved. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. No contact emails or phone numbers are explicitly listed, which may impact user support. Overall, the site is professional, trustworthy, and well-positioned as a government service platform.

G

Government Technology Agency

gov.sg

76

gov.sg is the official Singapore government portal managed by the Government Technology Agency, providing authoritative information on government policies, initiatives, and public services. The website serves as a central hub for Singapore residents and the general public to access timely updates on national campaigns such as the QuitVape Programme and economic resilience efforts. It holds a strong market position as the primary government communication channel online. Technically, the site leverages modern web technologies including React and Next.js frameworks, hosted on Akamai infrastructure, ensuring fast performance and excellent mobile optimization. The use of multiple analytics and tracking tools like Google Analytics, Microsoft Clarity, and TikTok Pixel indicates a mature digital analytics strategy, balanced with good privacy practices though lacking explicit cookie consent mechanisms. From a security perspective, the website enforces HTTPS with strong SSL configuration and implements key security headers, reflecting a robust security posture. The domain registration data aligns perfectly with the official government ownership, enhancing trustworthiness. However, the absence of a published security policy and incident response contact details suggests room for improvement in transparency and incident readiness. Overall, gov.sg demonstrates a high level of professionalism, trust, and technical maturity, making it a reliable source of government information. Strategic enhancements in privacy compliance and security transparency would further strengthen its position and user trust.

S

Singapore Land Authority

onemap.sg

69

OneMap is a comprehensive government mapping platform operated by the Singapore Land Authority, providing authoritative geographic and property data for Singapore. The website offers a wide range of interactive tools including property queries, land ownership information, transportation routes, drone no-fly zones, and nearby essential services. It serves both the general public and professionals requiring detailed spatial data. The platform is positioned as the official national mapping service, reflecting Singapore's commitment to accessible and accurate geospatial information. Technically, the website employs modern web technologies such as React 18, CesiumJS for 3D mapping, and various JavaScript libraries to deliver an interactive user experience. The site is mobile-optimized and includes accessibility features, though some improvements could be made. Performance is moderate due to the complexity of mapping features. Security is well-considered with HTTPS enforced and several security headers present, but could benefit from enhanced Content Security Policy and explicit cookie consent mechanisms. From a security perspective, the site shows a mature posture with no obvious vulnerabilities or exposed sensitive data. The lack of publicly available WHOIS data is typical for government domains and does not detract from the site's legitimacy. Privacy compliance is basic, with a privacy policy and terms of use available, but no cookie consent banner detected. Overall, the site is trustworthy and professional, reflecting its government ownership and public service mission. Strategically, OneMap is a critical infrastructure component for Singapore's digital government ecosystem, supporting various stakeholders with essential geospatial data. Continued enhancements in privacy compliance and security best practices will further strengthen user trust and regulatory alignment.

K

Kopiti.am

kopiti.am

67

Kopiti.am operates as a niche Mastodon instance providing a decentralized social networking platform primarily for Singaporean users. The platform leverages the open source Mastodon software (version 4.2.17) and offers features such as user profiles, content exploration, and community engagement. The website is professionally designed with consistent branding and good content quality, targeting a small but active user base. Technically, the site employs modern web technologies including React and FontAwesome, is hosted behind Cloudflare, and demonstrates good performance and mobile optimization. Security measures include HTTPS enforcement, security headers, and script integrity checks, contributing to a solid security posture. However, the site lacks visible cookie consent mechanisms, terms of service, and explicit security or incident response policies, which are areas for improvement. Overall, the domain registration is consistent and legitimate, supporting the trustworthiness of the platform.

The website newlaunchguru.sg is currently inaccessible to the public, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain is registered since 2017 under Exabytes Network (Singapore) Pte Ltd and hosted on SiteGround servers. Due to the access restriction, no business information, contact details, or policies are available on the site. The technical infrastructure is minimal with basic HTML and CSS, and no advanced frameworks or CMS detected. Security posture is weak with no DNSSEC and missing security headers, although HTTPS is enabled. Privacy compliance is absent as no privacy or cookie policies are found. Overall, the site appears to be either under maintenance, restricted, or misconfigured, limiting any comprehensive analysis.

J

JadeScape

the-jadescapecondo.com

57

JadeScape is a Singapore-based real estate development project offering residential condominium units in the central region of Bishan. Developed by Qingjian Realty, the website serves as a comprehensive portal for property buyers, providing detailed project information, pricing, floor plans, and appointment booking for showflat visits. The site is professionally designed with good content quality and SEO optimization, targeting property investors and homebuyers in Singapore. Technically, the website is built on WordPress with popular plugins and frameworks, hosted behind Cloudflare DNS, and uses HTTPS for secure communication. Security posture is moderate with room for improvement in DNS security and HTTP headers. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the domain registration details align well with the business claims, indicating legitimacy and trustworthiness.

A

Asia Pacific Lottery Association

asiapacific-lotteries.com

10

Asia Pacific Lottery Association Limited is a non-profit organization serving the lottery industry in the Asia Pacific region. The website provides information about the association's events, news, members, and knowledge sharing initiatives. The site is professionally designed using WordPress with modern plugins and SEO optimization. Security posture is good with HTTPS enabled, but lacks some security headers and published policies. WHOIS data is missing, which raises some concerns about domain legitimacy. Overall, the website is trustworthy and serves its business purpose effectively.

FBJ Corporation is a manufacturing company specializing in ball and roller bearings for automotive, industrial, and agricultural sectors. With over 50 years of industry experience, the company positions itself as a reliable OEM supplier with a global distribution network spanning Asia Pacific, Africa, and the Americas. The website reflects a professional business presence with clear product offerings and certifications such as ISO 9001 and TÜV SÜD PSB ISO Quality Certificate 2016, reinforcing its commitment to quality. Technically, the website employs modern frameworks like Bootstrap and jQuery, providing a responsive and user-friendly experience, though performance is moderate and accessibility is basic. Security posture is average, with HTTPS assumed but lacking important security headers and advanced protections. Privacy compliance is minimal, with no cookie consent mechanisms detected and only a basic privacy policy present. Overall, the website is trustworthy and professional but would benefit from enhanced security and privacy features to align with modern standards.

OpenTable.sg is a regional website of the global OpenTable brand, providing an online platform for restaurant discovery and table reservations primarily targeting consumers in Singapore. The site offers 24/7 booking services and integrates restaurant management software solutions, positioning itself as a leading player in the hospitality reservation industry. The website is professionally designed with excellent content quality and clear navigation, supporting a seamless user experience across devices. Technically, the site employs modern web technologies including React, Google Analytics 4, and OneTrust for privacy compliance, ensuring robust performance and user tracking capabilities. Security posture is strong with HTTPS enforcement, CSP headers, and CSRF tokens, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the domain appears legitimate and consistent with the OpenTable brand, though WHOIS data for the specific .sg subdomain is unavailable, likely due to privacy protection or subdomain usage. Strategic recommendations include enhancing transparency around security policies and incident response to further build user trust.

U

Undertide

duncanleo.me

56

The website www.duncanleo.me is a personal professional portfolio for Duncan Leo, a software engineer based in Singapore. The site highlights his co-founding of Undertide, a development studio, and his current role at Taskade. It showcases various projects and professional experiences, targeting technology professionals, potential clients, and collaborators. The business model centers on software development services and personal branding within the technology sector. The site is well-structured, mobile-optimized, and uses modern technologies such as Hugo, React, and Next.js. From a technical perspective, the site is built with a static site generator (Hugo) and integrates modern web frameworks and languages. It demonstrates good performance, mobile optimization, and accessibility. However, no hosting provider or SSL configuration details were available from the data provided. Security headers are not detected, and no privacy or cookie policies are present, indicating room for improvement in compliance and security posture. Security-wise, the site does not expose sensitive data and shows no visible vulnerabilities. The absence of security headers and privacy policies reduces the overall security and privacy compliance score. WHOIS data is unavailable due to query failure or privacy protection, but the website content is consistent with a legitimate personal professional presence. No suspicious patterns or indicators of malicious activity were found. Overall, the website is professional and trustworthy but would benefit from enhanced security headers, privacy and cookie policies, and incident response information to improve compliance and security posture. The domain WHOIS privacy protection is justified given the personal nature of the site.

M

Mobbin Pte. Ltd.

abtest.design

51

abtest.design is a curated online resource providing a collection of A/B test results from leading apps, aimed at product managers, UX/UI designers, and growth teams. Operated by Mobbin Pte. Ltd., a Singapore-based company founded in 2024, the website leverages Framer technology and Cloudflare infrastructure to deliver a fast, well-designed user experience. The site offers categorized insights into various A/B testing patterns, supporting data-driven product decisions. Technically, the site is modern and performant, with good mobile optimization and SEO practices. However, it lacks formal privacy and cookie policies, which impacts compliance and user trust. Security posture is solid with HTTPS and domain locking, but could be improved by enabling DNSSEC and publishing security policies. Overall, the site is professional and trustworthy but should address privacy compliance gaps.

O

Onesky technology Pte. Ltd.

oneskyapp.com

50

OneSky is a professional localization platform specializing in human translation services for web, mobile apps, and games. The company targets developers and businesses seeking to capture global markets through high-quality, context-aware translations. The website demonstrates a solid market position with notable clients such as Airbnb, Microsoft, and Shopify, indicating strong industry trust and relevance. The business model revolves around a SaaS platform combined with professional translation services, catering primarily to technology sector clients. Technically, the website is built on WordPress and leverages a modern tech stack including jQuery, Bootstrap, and multiple analytics and marketing tools such as Google Analytics, Heap, Facebook Pixel, and HubSpot. The site is mobile-optimized with good SEO practices and moderate performance. However, accessibility features are basic and could be improved. The site uses HTTPS with excellent SSL configuration but lacks explicit security headers, which is a recommended enhancement. From a security perspective, the site shows good practices such as HTTPS enforcement and no visible sensitive data exposure. However, the absence of security headers and lack of incident response or vulnerability disclosure information represent areas for improvement. The WHOIS data is missing or unavailable, which raises transparency concerns but does not necessarily indicate malicious intent given the professional site presentation and active domain status. Overall, the website is professional, trustworthy, and well-positioned in its market niche. The main risks relate to WHOIS transparency and some security best practices gaps. Strategic recommendations include improving WHOIS data transparency, implementing security headers, publishing incident response contacts, and enhancing accessibility compliance to strengthen trust and security posture.

The domain short.sg is registered since 2009 with a reputable Singapore-based registrar. However, the website currently returns a 404 Not Found error page with no accessible content, metadata, or business information. This lack of content prevents any meaningful analysis of the company's business model, services, or compliance posture. Technically, the site uses nginx as the web server but lacks visible security headers or HTTPS information. No privacy or cookie policies are present, and no contact or incident response information is available. The overall security posture is weak due to missing content and lack of visible security controls. The domain registration data is consistent and legitimate, but the website itself is non-functional, which significantly reduces trust and credibility.

R

RE Marketing

remarketz.com

53

RE Marketing is a Singapore-based digital marketing agency specializing in SEO, PPC, conversion optimization, and web design & development services primarily targeting businesses in Southeast Asia. The company positions itself as a leading integrated digital communications agency with a strong focus on enhancing online customer journeys and building connected brands. The website reflects a professional and modern digital presence, leveraging WordPress CMS with popular plugins such as Elementor and Yoast SEO to deliver a responsive and SEO-optimized experience. Multiple client case studies and testimonials reinforce their market credibility. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the active and content-rich website mitigates some risk. Contact mechanisms include phone, email, and multiple web forms secured with Google reCAPTCHA.

M

MyMediTravel

mymeditravel.com

64

MyMediTravel operates as a leading global medical tourism platform, providing a comprehensive service that connects patients with clinics and hospitals worldwide. The website offers extensive information on medical, cosmetic, and dental procedures, including price comparisons and patient reviews, targeting medical tourists seeking affordable healthcare options internationally. The platform emphasizes transparency, rich content, and user-friendly features such as free quotes and direct communication with providers. Technically, the website employs a modern technology stack including Google Analytics, Facebook Pixel, and jQuery UI, ensuring good performance and mobile optimization. The site is secured with HTTPS and implements CSRF tokens in forms, though it lacks some explicit security headers. The presence of structured data and SEO best practices supports good search engine visibility. From a security perspective, the site demonstrates a solid posture with encrypted communications and secure data collection methods. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and ownership transparency. No critical vulnerabilities or exposed sensitive information were detected. Overall, MyMediTravel presents a professional, trustworthy, and content-rich platform with moderate security maturity. Strategic improvements in domain registration transparency and enhanced security headers would further strengthen its risk profile and trustworthiness.

F

FazWaz.sg

fazwaz.sg

64

FazWaz.sg operates as a leading real estate marketplace focused on Singapore and Southeast Asia, offering a comprehensive platform for buying, renting, and selling properties including condos, houses, and villas. The website presents a professional and user-friendly interface with extensive property listings and market data, targeting property buyers, renters, and sellers. Technically, the site employs modern web technologies such as Vue.js, jQuery, and integrates with major analytics and marketing services including Google Analytics, Facebook Pixel, and OneSignal for push notifications. Security posture is solid with HTTPS enforcement and CSRF protection, though some security headers are missing and privacy policies are not explicitly presented. The absence of WHOIS data for the domain www.fazwaz.sg is a notable anomaly, raising concerns about domain registration transparency despite the site's professional appearance and active business presence. Overall, FazWaz.sg is a credible and functional real estate portal with room for improvement in privacy compliance and domain registration transparency.

D

Digital Broker Ventures

dbventures.io

55

Digital Broker Ventures is a Singapore-based technology investment and development company focused on transforming online marketplaces in Southeast Asia. They build and invest in digital platforms across sectors including real estate, healthcare, media, and emerging technologies like NFTs and metaverse land transactions. Their portfolio includes notable partners such as FazWaz Group, MyMediTravel, and Thaiger Media Group, positioning them as a significant regional player with a strong ecosystem approach. Technically, the website is built on WordPress with modern plugins and frameworks such as Yoast SEO, WPBakery, and Slider Revolution. Hosting and DNS services are provided by GoDaddy and Cloudflare respectively, with HTTPS enforced and Google reCAPTCHA implemented for form security. The site demonstrates good mobile optimization and SEO practices but lacks some advanced security headers and DNSSEC. From a security perspective, the site shows a solid baseline with HTTPS and domain registration protections but is missing explicit privacy and cookie policies, which impacts GDPR compliance. No incident response or vulnerability disclosure information is present, indicating room for improvement in transparency and security governance. Overall, the website is professional and trustworthy with a moderate to good security posture. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies with consent mechanisms, and establishing incident response contacts to enhance compliance and trust.

C

Chatty

meetchatty.com

57

Chatty is an AI-driven sales assistant platform designed specifically for Shopify eCommerce stores, aiming to enhance sales through intelligent chatbots that operate 24/7. Positioned as a leading Shopify chat platform with a strong customer base and excellent ratings, Chatty offers product recommendations, customer behavior tracking, and seamless integration with Shopify. The website is built on WordPress with modern UIkit framework and integrates Google Analytics and Tag Manager for marketing insights. Security posture is solid with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is currently lacking due to missing privacy and cookie policies. Overall, the platform demonstrates a mature digital presence with strong business credibility and technical implementation.

G

Global Switch

globalswitch.sg

66

Global Switch is a leading operator of world-class data centres with a strong presence across Europe and Asia-Pacific, including Singapore. The company provides carrier-neutral, highly connected infrastructure tailored for enterprises, AI and HPC customers, and network partners. Their business model focuses on delivering scalable, resilient, and flexible data centre solutions in key global digital hubs. The website reflects a mature digital presence with professional branding, multimedia content, and multi-language support, indicating a global market focus. Technically, the site is built on WordPress with modern plugins and structured data, offering good performance and accessibility. Security posture is adequate with cookie consent and privacy policies in place, though explicit security headers and incident response information are lacking. The absence of WHOIS data due to privacy protection is typical for this business type and does not detract from the site's legitimacy. Overall, the site is professional, trustworthy, and well-positioned in the technology infrastructure sector.

S

Schindler Lifts Singapore

schindler.sg

61

Schindler Lifts Singapore operates a professional and comprehensive website showcasing its leadership in the elevator, escalator, and moving walk industry. The company offers a wide range of products and services including passenger and freight elevators, modernization solutions, digital services, and maintenance. The website targets building owners, facility managers, and urban mobility stakeholders, positioning Schindler as a trusted global brand with a strong presence in Singapore. Technically, the site is built on Adobe Experience Manager with extensive use of modern analytics and marketing tools, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS and a strict Content-Security-Policy, though additional headers could enhance protection. Privacy compliance is well addressed with clear cookie consent and privacy policies. The absence of WHOIS data is likely due to privacy protection, which is justified for this enterprise. Overall, the site reflects a mature digital presence with high trustworthiness and professionalism.