Security Directory

Jahan University is an educational institution based in Afghanistan, offering a range of undergraduate and graduate programs including medical education. The website serves as a portal for academic information, admissions, and research activities. The university positions itself as a leading national academic institution with a focus on teaching, research, and public service. The technical infrastructure is based on a React single-page application hosted behind Cloudflare, providing moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, which impacts compliance and user trust. Overall, the website is functional but could benefit from enhanced security and privacy practices.

A

Afghan Midwives Association

afghanmidwives.org

0

Afghan Midwives Association (AMA) is a well-established non-profit professional association dedicated to strengthening midwifery in Afghanistan. Founded in 2005, AMA advocates for well-trained and empowered midwives and is an active member of the International Confederation of Midwives (ICM). The website reflects a strong market position within Afghanistan's healthcare sector, targeting midwives, healthcare professionals, donors, and partners. Key services include advocacy events, professional development, membership management, and project collaborations with international organizations. Technically, the website is built on WordPress using modern plugins like Elementor and Slider Revolution, providing a good user experience with moderate performance and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

N

NETHUB

nethub.af

0

NETHUB is a privately owned IT consulting and software development company based in Afghanistan, established in 2011. The company offers a broad range of IT services including website development, database/MIS development, domain registration, web hosting, network infrastructure, and CCTV installation. It serves a diverse client base including government agencies, universities, and private businesses, positioning itself as a leading IT service provider in Afghanistan. The website reflects a professional and consistent brand image with clear navigation and responsive design, targeting businesses and organizations seeking IT solutions within Afghanistan. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Font Awesome, and Google Analytics, ensuring a responsive and moderately performant user experience. However, there is room for improvement in accessibility and SEO optimization. The site uses HTTPS and asynchronous loading of analytics scripts but lacks visible security headers and advanced security policies, which could enhance its security posture. From a security perspective, the website demonstrates basic best practices such as HTTPS and secure form submissions but lacks critical elements like security headers and privacy/cookie policies, which are important for compliance and user trust. No vulnerabilities or malicious content were detected, but the absence of privacy and cookie policies indicates compliance gaps, especially regarding GDPR. Contact information is comprehensive and clearly presented, enhancing business credibility. Overall, NETHUB's website is a good representation of a small to medium IT services company in Afghanistan with a solid market presence. To improve, the company should focus on enhancing security headers, implementing privacy and cookie policies, and improving accessibility and SEO. These steps will strengthen trust, compliance, and security posture, supporting sustainable business growth.

G

Ghazanfar Bank

ghazanfarbank.com

0

Ghazanfar Bank is a well-established financial institution in Afghanistan, providing a broad range of banking services including personal and corporate accounts, digital banking, ATM debit cards, loans, and remittance services such as Western Union. The bank has a solid market presence with 15 years of operation, multiple branches, and a recognized position in the SME finance sector. Their website reflects a professional and consistent brand image targeting both individual and corporate customers within Afghanistan. Technically, the website uses modern web technologies including Bootstrap, Google Analytics, and customer support widgets, delivering a good user experience with mobile optimization and multi-language support. Security posture is adequate with HTTPS enforcement and domain transfer protection, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic with visible privacy and cookie policies but lacks explicit GDPR compliance indicators. Overall, the bank demonstrates credible business operations with trustworthy digital presence.

T

TOLOnews

tolonews.com

0

TOLOnews is a well-established Afghan news media organization founded in 2010, providing comprehensive coverage of local and international news, politics, sports, culture, and more. The website targets a general audience interested in Afghanistan and global affairs, offering multilingual content in English, Pashto, and Dari. It operates a professional digital platform built on Drupal 8 CMS, integrating modern analytics and social media tools to enhance user engagement and content delivery. The site is hosted with reputable providers and uses HTTPS with domain locking to ensure security and trustworthiness. Technically, the website demonstrates a mature infrastructure with good performance, mobile optimization, and SEO practices. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is generally good, with HTTPS enforced and domain status protections in place, but DNSSEC is not enabled, representing a minor security gap. No vulnerability disclosure or incident response information is publicly available, which could be improved. Overall, TOLOnews presents a credible and professional news platform with strong business credibility and technical implementation. The main risks relate to privacy compliance and minor DNS security enhancements. Strategic recommendations include publishing comprehensive privacy and cookie policies, enabling DNSSEC, and establishing a vulnerability disclosure mechanism to enhance security transparency and user trust.

T

The Khaama Press News Agency

khaama.com

0

Khaama Press is an independent news agency focused on delivering reliable news from Afghanistan and around the world. It covers a broad range of topics including politics, security, business, refugee issues, and women's rights. The website positions itself as Afghanistan's leading independent news source, targeting a general audience interested in regional and global news. The business model revolves around news reporting and information dissemination, supported by advertising and donations. Technically, the website is built on WordPress with modern web technologies such as jQuery, Google Fonts, and Yoast SEO for search optimization. It uses Google reCAPTCHA for form security and Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, some security headers are missing, and there is no security.txt or vulnerability disclosure page. Privacy compliance is partial, with a privacy policy and terms of use present but lacking a cookie consent mechanism. The WHOIS data is missing, which raises concerns about domain legitimacy, though the website content and social media presence support its credibility. Overall, Khaama Press is a professional and trustworthy news platform with room for improvement in security and privacy compliance. The absence of WHOIS data is a notable risk factor that should be monitored. Strategic recommendations include enhancing security headers, implementing cookie consent, and establishing a vulnerability disclosure process.

P

Pajhwok Afghan News

pajhwok.com

0

Pajhwok Afghan News is Afghanistan’s largest independent news agency, established in 2004, providing news content primarily focused on Afghanistan and regional issues. The website serves a general audience interested in current affairs, offering news in multiple languages including English, Dari, and Pashto. The business model centers on news reporting, fact-checking, and subscription services, positioning Pajhwok as a key media player in Afghanistan. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and integration with Stripe for payments. The site is mobile-optimized and uses common plugins for social sharing and content restriction. Security posture is good with HTTPS enabled and domain locking status, but lacks DNSSEC and some security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional, content-rich, and trustworthy, but could improve compliance and security practices.

M

MIA „Rossiya Segodnya“

sputnik.af

0

Sputnik Afghanistan is a regional news agency delivering the latest news, reports, analyses, and articles about Afghanistan and global affairs in the Dari language. Affiliated with the Russian media agency MIA „Rossiya Segodnya“, it targets Persian-speaking audiences interested in politics, economy, society, and multimedia content. The website features a modern technical infrastructure with multiple analytics and advertising integrations, responsive design, and comprehensive privacy and cookie policies. Contact information including email and phone is clearly provided, enhancing business credibility. Security posture is good with HTTPS and secure forms, though explicit security policies and incident response contacts are absent. Overall, the site presents a professional and trustworthy media outlet with moderate to good compliance and technical maturity.

F

Fuck Stepmom

fuckstepmom.xyz

0

FuckStepMom.xyz is an adult entertainment website specializing in taboo stepmom and stepson themed pornographic videos. The site operates primarily as a streaming platform with affiliate marketing links to partner adult sites. The business model focuses on niche adult content catering to an adults-only audience. Technically, the site uses basic HTML, CSS, and JavaScript without any detected CMS or advanced frameworks. Hosting is provided by Hostry, and the site appears moderately optimized for mobile devices. Security posture is weak, with no DNSSEC, no security headers, and minimal WHOIS registrant information. Privacy and cookie policies are absent, and no analytics or tracking scripts were detected. The domain is newly registered in 2024 with registrant country Afghanistan, which is unusual for this content type and reduces trust. Overall, the site is functional but lacks professional security and privacy practices.

S

Family Sex Taboo

sextaboo.xyz

0

The website sextaboo.xyz operates as an adult entertainment platform specializing in taboo family-themed sexual content, primarily focusing on stepdad-stepdaughter and stepmom-stepson scenarios. It targets an adult-only audience with explicit video content and affiliate marketing links to related adult sites. The business model appears to rely on content streaming and affiliate partnerships within the adult niche market. The domain is newly registered in 2024 with minimal WHOIS transparency and an unusual registrant country (Afghanistan), which may raise some trust concerns. Technically, the site uses standard HTML5, CSS3, and JavaScript with no detected CMS or advanced frameworks. It is hosted by Hostry and is mobile responsive with basic SEO and accessibility features. Performance is moderate, and the site design is functional but basic. No advanced analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS but lacks important security headers and DNSSEC is not enabled. There is no evidence of privacy, cookie, or terms of service policies, which impacts compliance and user trust. The contact information is limited to a single email address. No incident response or security policy information is provided. The WHOIS data shows partial consistency but lacks registrant organization details, which reduces legitimacy. Overall, the site presents moderate technical implementation but poor privacy and security posture. The content is explicit adult material, requiring strict age restrictions and compliance measures which are currently absent. Strategic improvements in security headers, privacy policies, and WHOIS transparency are recommended to enhance trust and compliance.

S

Siblings Sex

siblingsex.xyz

0

Siblingsex.xyz is an adult entertainment website specializing in taboo sibling sexual content, offering a collection of explicit videos and affiliate links to related adult sites. The site targets an adults-only audience interested in niche taboo content. Technically, the site uses basic HTML, CSS, and JavaScript with hosting provided by Hostry. It is mobile responsive but lacks advanced frameworks or CMS. Security posture is weak, with no detected security headers, no DNSSEC, and no privacy or cookie policies, which raises compliance and trust concerns. The WHOIS data shows a recently registered domain with minimal registrant information and a country mismatch, reducing legitimacy. Overall, the site operates in a niche adult media sector with limited transparency and security controls.

M

Mommy Fucked

momfuck.xyz

0

Mommy Fucked is an adult entertainment website specializing in MILF-themed pornographic videos. The site offers streaming content and promotes affiliate partner adult sites. It targets an adult-only audience interested in explicit MILF content. The business model relies on content hosting and affiliate marketing partnerships. Technically, the site uses standard web technologies (HTML5, CSS3, JavaScript) and is hosted by Hostry. The site is mobile responsive but has a basic design and limited SEO and accessibility features. Security posture is weak, with HTTPS enabled but lacking security headers and DNSSEC. Privacy and compliance policies are absent, which is a significant compliance gap. The domain is newly registered in 2024 with minimal WHOIS data, reducing trustworthiness. Overall, the site functions as a niche adult content platform with basic technical implementation and poor compliance and security practices.

T

Asian Teens

teenasian.xyz

0

The website teenasian.xyz operates as an adult entertainment platform specializing in Asian teen pornography. It offers streaming of explicit videos and uses affiliate marketing to redirect users to partner adult sites. The site targets adult viewers interested in this niche content. Technically, the site is built with standard HTML, CSS, and JavaScript, hosted by Hostry, and is mobile responsive with basic SEO and accessibility features. However, it lacks advanced security headers and privacy policies, which are critical for compliance and user trust. The WHOIS data reveals a recently registered domain with minimal registrant information and an unusual country code, which may raise trust concerns. Overall, the site functions adequately for its purpose but falls short in security, privacy, and business transparency.

Y

Young Asian Sex

youngasian.xyz

0

YoungAsian.xyz is an adult entertainment website specializing in explicit pornographic videos featuring young Asian females. The site operates primarily as a content aggregator and affiliate marketing platform linking to various other adult sites. The business model focuses on streaming adult videos and generating revenue through affiliate partnerships. The website is relatively new, founded in 2024, and targets an adult-only audience interested in niche Asian teen content. Technically, the site uses standard HTML5, CSS3, and JavaScript with custom scripts for video previews. It is hosted by Hostry and shows moderate performance with good mobile responsiveness. However, there is no evidence of a CMS or advanced frameworks. SEO and accessibility are basic, with no structured data or Open Graph metadata present. From a security perspective, the site lacks critical security headers and does not indicate HTTPS enforcement. The domain WHOIS data reveals minimal registrant information with an unusual country code (Afghanistan), which raises concerns about transparency and legitimacy. No privacy, cookie, or terms of service policies are provided, indicating poor compliance with data protection regulations. Overall, the site presents significant risks related to privacy, security, and trustworthiness. Strategic improvements are needed in security hardening, compliance documentation, and registrant transparency to enhance credibility and reduce potential vulnerabilities.

R

Roshan

roshan.af

0

The website demonstrates a moderate security posture with no critical vulnerabilities detected; however, multiple high and medium severity issues significantly increase its risk profile. Key deficiencies include missing essential security headers, absence of GDPR compliance mechanisms such as privacy and cookie policies, and lack of comprehensive information security governance aligned with NIS2 directives. These gaps expose the business to legal, reputational, and operational risks, including potential data breaches and regulatory penalties. While email security and underlying SSL/TLS configurations are relatively strong, foundational controls like HSTS and DNSSEC are not fully implemented. The presence of an exposed SSH service further amplifies attack surfaces if not properly managed. Immediate attention to governance policies, regulatory compliance, and core web security headers is critical to safeguard customer trust and ensure business continuity. Overall, the assessment underscores a need for a holistic security strategy integrating technical controls and policy frameworks.