Security Directory

A

Arctic Adventures

adventures.is

0

Arctic Adventures is a well-established Icelandic adventure and activity tour operator founded in 2006, specializing in ecotourism and environmentally friendly trips across Iceland. The company targets tourists seeking group tours and unique Icelandic holiday experiences. The website reflects a professional and consistent brand image with good content quality and clear navigation, supporting its market position as a reputable tour operator in Iceland. The business model focuses on providing activity-based tours emphasizing sustainability and adventure tourism.

F

FlexApp

flexapp.ai

0

FlexApp is a technology startup founded in 2025, offering an AI-powered platform that generates production-ready React Native mobile app code from user-described app ideas. Positioned as a no-code alternative for mobile app development, it targets developers, entrepreneurs, and businesses seeking rapid app creation. The website is professionally designed with modern UI/UX and good mobile optimization, reflecting a mature digital presence for a young company. The technical infrastructure leverages Next.js, React, Expo, and integrates analytics tools like Google Analytics and PostHog, hosted behind Cloudflare DNS services. Security posture is solid with HTTPS and domain transfer protection, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is basic with privacy and terms pages present but lacking cookie consent mechanisms. Overall, the site demonstrates a good balance of business credibility and technical sophistication, suitable for its market niche.

A

Affonso

affonso.io

0

Affonso is a newly founded SaaS company (2024) specializing in affiliate marketing software tailored for SaaS businesses. The platform offers an easy-to-use, scalable solution to launch and manage affiliate programs with integrations to popular payment providers like Stripe. Positioned as a cost-effective and technically advanced solution, Affonso targets subscription-based SaaS, one-time purchase software vendors, and multi-product businesses. The website demonstrates strong digital maturity with a modern tech stack (Next.js, React) and fast, mobile-optimized performance. Security posture is solid with HTTPS, security headers, and privacy protection, though it lacks explicit security policies and incident response contacts. Privacy compliance is good with a comprehensive privacy policy but could improve cookie consent mechanisms. Overall, Affonso presents a professional, trustworthy online presence with clear business focus and growth potential.

Fast-chat.io is a recently registered technology domain (October 2022) with minimal web presence. The website content is extremely sparse, containing only a single heading 'Fast chat' and no additional metadata, policies, or contact information. The domain is privacy protected via a service based in Iceland, which is common for small startups but reduces transparency. Hosting is provided by Cloudflare with HTTPS enabled, but no DNSSEC or security headers are configured. The lack of privacy and cookie policies, absence of contact or incident response information, and minimal content significantly limit the website's trustworthiness and compliance posture. Overall, the site appears to be in an early development or placeholder state with limited business or security maturity.

The website carcel.co is currently inaccessible due to a Cloudflare robot challenge security page that blocks direct access to its content. This challenge page is designed to verify that visitors are legitimate users and not automated bots. As a result, no meaningful business or contact information is available on the site. The domain is registered through NameCheap with privacy protection enabled, and uses Cloudflare DNS services. The lack of visible privacy policies, cookie consent mechanisms, or terms of service indicates low privacy compliance. The technical infrastructure relies heavily on JavaScript for the captcha challenge, with no SEO or accessibility features detected. Overall, the site’s security posture is limited to the WAF challenge, with no additional security headers or best practices evident. Due to the blocking mechanism, a full security and business analysis is not possible at this time.

The website www.icelandair.com is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha, which blocks direct access to the site's content. This prevents extraction of meaningful metadata, business information, or security policies. The domain WHOIS data is unavailable, indicating either the domain is not registered, privacy protected, or there is a misconfiguration. Icelandair is a well-known airline company based in Iceland, providing passenger and cargo air transportation services. However, the lack of accessible website content and missing WHOIS data significantly limits the ability to assess the company's digital presence and security posture. The technical infrastructure relies on Cloudflare for security and content delivery, but no further technology stack details are available. Security posture cannot be fully evaluated due to blocked content, but the presence of a WAF indicates some level of protection. Overall, the risk assessment is elevated due to lack of transparency and accessibility, and strategic recommendations focus on improving website accessibility, transparency, and security disclosures.

P

Privacy service provided by Withheld for Privacy ehf

llamahub.ai

0

Llama Hub is a specialized technology platform providing a comprehensive hub of integrations for LlamaIndex, including data loaders, agent tools, vector databases, and large language models (LLMs). The platform targets developers and organizations building retrieval-augmented generation (RAG) applications, offering modular utilities to connect LLMs with diverse data sources. The business operates as a small, community-driven entity with a focus on open source contributions via GitHub. Technically, the website is built using modern JavaScript frameworks such as React and Next.js, hosted on Vercel, and demonstrates good design and mobile optimization. However, it lacks some advanced accessibility features and comprehensive SEO optimizations. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy compliance is minimal, with no visible privacy or cookie policies or consent mechanisms, and no contact information is provided for incident response or data protection officers. Overall, the site is functional and professional but would benefit from improved privacy and security practices to enhance trust and compliance.

I

iconists

iconists.co

0

Iconists is a specialized design studio focused on creating custom icon systems tailored to brand personalities. Founded in 2021, the studio is led by experienced designers Andreas Storm and Martin David, leveraging over a decade of combined experience. Their market position is niche, targeting brands and product teams seeking distinctive iconography to enhance their visual identity. The website reflects a professional and modern digital presence built on the Framer platform, incorporating SVG graphics and Google Tag Manager for analytics. Security posture is adequate with HTTPS enabled and domain transfer protection, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy and well-designed but could enhance compliance and security transparency.

A

Astrit

astrit.co

0

Astrit.co is a personal portfolio and blog website representing the work and digital presence of an individual named Astrit. The site primarily targets designers, developers, and followers interested in Astrit's creative and technical work. The business model is centered on personal branding and content sharing, with a niche market position. The website is built on WordPress and hosted on Vercel, utilizing standard web technologies such as jQuery and custom JavaScript. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features and comprehensive SEO optimization. Security posture is basic, with no detected security headers or privacy policies, and the domain uses privacy protection services typical for personal sites. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

D

DigiMart

digimart.shop

0

DigiMart is a newly established e-commerce retailer specializing in a wide range of electronics, household appliances, tools, and generators. The website offers a broad product catalog targeting consumers primarily in the Baltic region, with multilingual support for English, Latvian, and Lithuanian. The business model is focused on online retail with direct sales and customer support. Technically, the website is built on the EcomCart.eu platform, leveraging modern web technologies including Google Tag Manager and Facebook Pixel for analytics and marketing. Hosting and DNS services are provided by reputable providers such as Cloudflare and Namecheap. Security posture is solid with HTTPS enforced and domain transfer protection enabled, although there is room for improvement in DNSSEC adoption and security headers. Privacy compliance is addressed with visible privacy and cookie policies and an opt-in consent mechanism. Overall, DigiMart presents a professional and trustworthy online presence consistent with a medium-sized e-commerce business.

G

GenAI Fund

genaifund.ai

0

GenAI Fund is a newly established investment fund (founded 2024) focused on AI-first technology companies in Southeast Asia. The fund emphasizes early-stage investments and supports startups through accelerator programs, innovation grants, and ecosystem enablement initiatives. Their market position as the first AI-focused fund in ASEAN is supported by partnerships with industry leaders and media features. Technically, the website is built on WordPress with modern plugins and SEO tools, hosted behind Cloudflare DNS, and uses HTTPS. However, DNSSEC is not enabled and security headers are missing, indicating room for security improvements. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the security posture is moderate with no critical vulnerabilities detected. Strategic recommendations include enhancing privacy compliance, implementing security headers, and publishing security policies to improve trust and compliance.

The website madanyu.org is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block page, which prevents access to any substantive content. The domain is very young, registered in October 2024, and uses privacy protection services for WHOIS data, which obscures registrant details. No business information, contact details, or policies are publicly available on the site. Technically, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security deficiency. The DNS is managed via Cloudflare, but the absence of a valid certificate and enabled TLS protocols severely impacts security posture. Overall, the site appears to be in an early or unestablished state with minimal digital maturity and poor security hygiene.

K

Kolibri

kolibri.is

0

Kolibri is a small Icelandic digital design and development agency offering comprehensive services including web and app solutions, product development, and optimization. The company presents a professional portfolio showcasing notable projects, targeting businesses and organizations seeking digital transformation. The website is built on modern web technologies such as Webflow and uses Cloudflare for hosting and CDN services, indicating a moderate level of digital maturity. However, the absence of a valid SSL certificate is a critical security flaw that undermines user trust and data protection. Additionally, the lack of privacy and cookie policies suggests compliance gaps with GDPR and related regulations. Overall, while the business demonstrates professionalism and a clear market position, urgent improvements in security and privacy compliance are necessary to enhance trust and protect users.

The website at ota.is currently presents an empty and minimal web presence with no visible content, metadata, or business information. The domain is registered and DNS records are configured correctly, but the absence of an SSL certificate and HTTPS support significantly undermines the site's security posture. There are no privacy or cookie policies, no contact information, and no visible business or security policies, indicating a very low level of digital maturity and professionalism. The site performance is slow, and no modern web technologies or analytics tools are detected. Overall, the website lacks essential elements for trust, security, and user engagement, which poses a risk to visitors and potential business credibility.

E

EasyDMARC Inc.

easydmarc.asia

0

EasyDMARC Inc. operates a comprehensive SaaS platform focused on email security, specializing in DMARC, SPF, DKIM, and BIMI services to protect organizations from email spoofing and phishing. The company has established itself as a leader in the email authentication space, securing over 175,000 domains globally and serving a diverse clientele including enterprises and MSPs. Their business model combines managed services, free tools, and educational resources to facilitate DMARC adoption and compliance. Technically, the website is well-developed with modern frameworks and extensive analytics integration, hosted on Cloudflare for performance and security. However, a critical security gap exists due to the lack of a valid SSL certificate and HTTPS support on the easydmarc.asia domain, which undermines secure communications and user trust. The company maintains strong DNS and email authentication configurations, including a strict DMARC reject policy, and demonstrates good privacy compliance with GDPR-aligned policies and cookie consent mechanisms. Overall, EasyDMARC presents a professional and trustworthy digital presence but should urgently address SSL/TLS deficiencies to enhance security posture.

RHnet (Rannsókna og háskólanet Íslands hf.) is an Icelandic company founded in 2001 to provide high-speed network connectivity for universities and research institutions in Iceland. It connects these institutions to international research and education networks such as NORDUnet, facilitating academic collaboration and data exchange. The website primarily serves as an informational portal about RHnet's services, network status, and related academic events. The target audience includes academic and research organizations within Iceland. Technically, the website is a simple static HTML and CSS site with minimal resources and moderate load times. It lacks modern web technologies, CMS, or advanced frameworks. Mobile optimization and accessibility are basic, and SEO features are minimal. The site does not use HTTPS, which is a significant technical and security shortcoming. From a security perspective, the site has no valid SSL certificate, no HTTPS support, and lacks security headers such as HSTS or Content-Security-Policy. There are no detected vulnerabilities like Heartbleed or POODLE, but the absence of HTTPS and security headers exposes users to risks. No privacy or cookie policies are present, and no contact or incident response information is provided, indicating low privacy compliance and security maturity. Overall, RHnet's website provides essential information about the organization but falls short in security and privacy best practices. The lack of HTTPS and security policies are critical issues that should be addressed to improve trust and compliance. The domain registration data aligns well with the organization's profile, supporting legitimacy. Strategic improvements in security posture and privacy compliance are recommended to enhance the website's professionalism and user trust.

C

Creditinfo

creditinfo.is

0

Creditinfo is a leading Icelandic company specializing in the provision of financial and business information services, including credit scoring, business data, and media monitoring. The company targets both individuals and businesses in Iceland, offering subscription-based and service-oriented products to support informed decision-making. The website reflects a mature and professional business with a clear market position and a comprehensive range of services. Technically, the site is built on Webflow and integrates modern marketing and analytics tools such as Google Tag Manager, Cookiebot, and Weglot for multilingual support. However, the website suffers from a critical security deficiency due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy and cookie policies are well-presented and GDPR compliant, with active consent mechanisms. Overall, while the business credibility and content quality are strong, the security posture requires urgent improvement to protect user data and maintain trust.

P

Privacy service provided by Withheld for Privacy ehf

linkjago.me

0

Link Jago is a small, technology-focused business offering a free and open source URL shortening service with features such as custom domains, link management, statistics, and API access. The service targets users and developers seeking an alternative to proprietary URL shorteners, positioning itself as a niche open source solution. The website is built using modern web technologies including Next.js and React, hosted behind Cloudflare DNS, and integrates Google reCAPTCHA for bot protection. However, the site suffers from slow load times and lacks a valid SSL/TLS certificate, resulting in no HTTPS support which is a critical security concern. Security headers are minimal, with only HSTS enabled, and no DMARC or DNSSEC records are present. Privacy compliance is weak, with no privacy or cookie policies found, and no contact or incident response information provided. The domain is registered with privacy protection, which is reasonable for a small open source project but reduces transparency. Overall, the site demonstrates moderate professionalism and technical maturity but requires significant improvements in security and privacy compliance to enhance trust and protect users.

P

Privacy service provided by Withheld for Privacy ehf

mikale.me

0

Mikale is a small technology company operating a free and open source URL shortening service. The website offers core services such as URL shortening with custom domains and link statistics, targeting developers and users needing link management solutions. The business is relatively new, founded in 2023, and uses modern web technologies including Next.js and React, hosted behind Cloudflare. The site is accessible and well-structured with good design and user experience, but lacks formal privacy, cookie, and terms of service policies, as well as explicit contact information. Security posture is weak due to the absence of a valid SSL/TLS certificate and lack of HTTPS, which is a critical issue for user trust and data protection. The domain is privacy protected, which is common for small tech projects, and shows no signs of suspicious activity or subdomain takeover vulnerabilities.

A

Advania

advania.is

0

The website demonstrates a generally secure network and email environment with strong SSL/TLS and network security scores. However, significant gaps exist in security headers, GDPR compliance, and NIS2 regulatory adherence, exposing the business to legal, reputational, and operational risks. Missing critical headers like Content-Security-Policy increase susceptibility to client-side attacks. The absence of a privacy policy, cookie policy, and consent mechanisms severely undermines GDPR compliance, risking regulatory penalties. Additionally, lacking documented information security frameworks, incident response, and business continuity plans impairs the organization's readiness to handle cyber incidents. Overall, while technical defenses at the network layer are robust, governance and compliance weaknesses present serious business vulnerabilities. Immediate remediation is recommended to mitigate potential data breaches, regulatory fines, and operational disruptions.

This website has 4 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.