Security Directory

O

ohai.is

ohai.is

0

ohai.is is a small Iceland-based technology service provider offering a suite of decentralized and privacy-focused public internet services including Mastodon social media, Matrix messaging, collaborative markdown editing, encrypted pastebin, polls, recipe management, ad removal, and a game server community. The website is professionally designed with clear navigation and consistent branding, targeting general internet users interested in privacy and decentralized platforms. Technically, the site uses standard HTML5 and CSS with hosting provided by fnoco.eu, showing moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, and no cookie consent mechanism is implemented. The domain registration is consistent with the business age and shows no suspicious patterns, supporting legitimacy. Overall, the site is trustworthy and functional but could improve in security and privacy compliance areas.

A

AJ Vörulistinn

ajvorulistinn.is

0

AJ Vörulistinn is a well-established Icelandic branch of the AJ Group, specializing in office, school, warehouse, and industrial furniture and solutions. The company has a strong market presence across Europe with over 45 years of experience. Their website offers a comprehensive e-commerce platform with a wide range of products, targeting businesses and institutions seeking ergonomic and functional workplace furnishings. Technically, the site employs modern web technologies, including JavaScript frameworks, Google Tag Manager, and cookie consent tools, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS and Content Security Policy in place, though additional security headers and published security policies could enhance trust. Overall, the site is professional, trustworthy, and well-optimized for its audience.

R

Rannís

erasmusplus.is

0

The website www.erasmusplus.is serves as the official Icelandic portal for the Erasmus+ program and the European Solidarity Corps, managed by Rannís, the Icelandic Centre for Research. It provides comprehensive information, news, and resources related to education, youth, and solidarity projects under the EU framework. The site targets students, educators, and youth organizations in Iceland, offering guidance on applications and program participation. The business model is government-funded, focusing on information dissemination and support rather than commercial activities. Technically, the site is built on the Eplica CMS platform, a specialized Icelandic content management system, and uses common web technologies such as jQuery, Google Analytics, and Google Tag Manager. The site is mobile-optimized with good accessibility and SEO practices, though performance is moderate. Hosting appears to be provided by Hugsmiðjan ehf., a known Icelandic hosting provider. From a security perspective, the site enforces HTTPS and anonymizes IP addresses in analytics, but lacks visible security headers and a cookie consent mechanism, which are areas for improvement. No vulnerabilities or sensitive data exposures were detected. The absence of WHOIS data for the domain reduces trust from a domain registration standpoint, though the website content and contact information strongly indicate an official and legitimate entity. Overall, the site is professional, trustworthy, and safe for general audiences, but could enhance privacy compliance and security posture by adding cookie consent, security headers, and publishing security policies.

R

Rannsóknamiðstöð Íslands

rannis.is

0

Rannís, the Icelandic Centre for Research, is a government-affiliated institution dedicated to supporting research, innovation, education, and culture in Iceland. It acts as a central funding and coordination body, providing grants and facilitating international cooperation. The website reflects a well-established organization with a clear mission and target audience including researchers, educational institutions, and cultural entities. The site is professionally designed, well-structured, and provides comprehensive information about its services and activities. Technically, the website uses the Eplica CMS platform, integrates modern JavaScript libraries, and employs Google Analytics and Tag Manager for user tracking with privacy considerations such as IP anonymization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. Contact information is clearly provided, including official emails, phone numbers, and physical address, along with social media presence on major platforms. Overall, the site demonstrates a mature digital presence suitable for a government research institution.

G

GI rannsóknir ehf.

gallup.is

0

Gallup á Íslandi (GI rannsóknir ehf.) is a well-established Icelandic market research and information company specializing in public opinion polling, media analysis, and advisory services. The website serves as a platform to present survey results, news, and services primarily targeting Icelandic businesses, media, and the general public. The company holds a reputable position in the Icelandic market research sector, evidenced by its ESOMAR membership and comprehensive service offerings. Technically, the website employs modern JavaScript libraries such as jQuery and integrates Google Tag Manager for analytics, indicating a mature digital infrastructure. The site is mobile-optimized with good accessibility and SEO practices, providing a positive user experience. Security-wise, the site enforces HTTPS and displays cookie consent mechanisms, but lacks some advanced security headers and public incident response policies. Overall, the site is professional, trustworthy, and compliant with GDPR, though WHOIS data is unavailable likely due to registry policies rather than malicious intent.

E

Eimskip

eimskip.com

0

Eimskip is a prominent Icelandic transportation company specializing in freight forwarding and logistics services across the North Atlantic and globally. The company offers a comprehensive range of services including liner shipping, warehousing, global forwarding by sea, air, and road, trucking, terminal operations, and customs handling. Their market position is strong in the North Atlantic region with a global network and subsidiaries such as Ship-log Thailand and Faroe Ship. The website reflects a professional and consistent brand image with detailed business and investor information. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, CookieHub for cookie consent, and client-side libraries like htmx and hyperscript. The site is mobile-optimized, accessible, and SEO-friendly with proper meta tags and structured navigation. Performance is moderate with good user experience and fast loading images. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern, potentially indicating privacy protection or registration inconsistencies, which slightly lowers the trust score. Overall, the website is safe, professional, and business-focused with no adult or questionable content. The main risk lies in the incomplete WHOIS information, which should be investigated further to confirm domain legitimacy. Strategic recommendations include enhancing security headers, publishing incident response contacts, and implementing a security.txt file for vulnerability disclosures.

J

Já hf.

ja.is

0

Já hf. operates the website ja.is, a leading Icelandic local search and e-commerce platform established in 2002. The site facilitates connections between people and businesses in Iceland, offering product listings, advertising services, and mobile applications for iOS and Android. The company maintains a strong market position as a trusted local directory and marketplace. Technically, the website employs modern frameworks such as Vue.js, integrates advanced analytics and monitoring tools including Google Analytics, Segment, and New Relic, and uses Amazon AWS Cloudfront for hosting and CDN services. The site is well-optimized for performance and mobile devices, with good SEO and accessibility features. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and integrates security monitoring, though it could improve by enabling DNSSEC and adding explicit security headers. Privacy compliance is robust with clear policies and consent banners. Overall, the website demonstrates a mature digital presence with high trustworthiness and professional business credibility.

V

Forsíða - Vísir

visir.is

0

Vísir.is is a leading Icelandic news and media website offering a broad range of content including news, sports, TV clips, radio streaming, podcasts, real estate, and job listings. The site targets a general Icelandic audience and serves as a primary source of news and entertainment in the region. The business model is primarily advertising-driven, supported by integrated ad placements and third-party marketing tools. The website demonstrates consistent branding and professional content quality, positioning it as a trusted media outlet in Iceland. Technically, the site employs modern JavaScript libraries and asynchronous loading techniques to enhance user experience and performance. It integrates analytics and marketing tools such as Google Tag Manager, Chartbeat, Hotjar, and CookieHub for tracking and cookie consent management. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks some recommended security headers and a published security.txt file. The absence of WHOIS data for the domain reduces transparency but does not detract significantly from the site's legitimacy given its professional presentation and content. Overall, Vísir.is is a mature, well-established media platform with moderate technical sophistication and a good security posture, though improvements in privacy compliance and security best practices are recommended.

S

SÝN

auglysingar.is

0

SÝN is a leading Icelandic media company specializing in multi-channel advertising services including television, radio, online, and podcast platforms. The company leverages decades of experience to provide comprehensive advertising solutions tailored to Icelandic businesses and individuals. Their website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site employs modern JavaScript frameworks and integrates Google Tag Manager and analytics tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers and vulnerability disclosure policies suggests room for improvement. The lack of WHOIS data reduces domain trustworthiness, but the overall business credibility and content quality remain high. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to strengthen trust and compliance.

Ó

ÓB Bensín / Olís

ob.is

0

ÓB Bensín operates a network of fuel stations across Iceland, providing fuel sales and customer engagement through a dedicated mobile app. The company is positioned as a key player in the Icelandic energy retail sector, leveraging digital tools to enhance customer experience. The website is built on modern web technologies including React and Next.js, integrated with Prismic CMS for content management. Tracking and marketing tools such as Google Analytics and Facebook Pixel are employed to monitor user engagement and support marketing efforts. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit privacy and security policies are not published. Overall, the site is professional, accessible, and trustworthy, serving a general audience with safe content.

O

Origo ehf.

origo.is

0

Origo ehf. is a leading Icelandic technology and IT services company focused on delivering innovative solutions and services to businesses of all sizes. Their offerings include secure hosting, energy solutions, digital transformation, business and HR software, user support, and Microsoft-based solutions. The company positions itself as a trusted partner in technology, emphasizing continuous development to help clients excel. The website reflects a mature digital presence with modern technologies such as React, Next.js, and Vercel hosting, ensuring fast performance and excellent mobile optimization. Security is well addressed with HTTPS, security headers, and privacy compliance, including GDPR-aligned policies and cookie consent mechanisms. Despite the absence of WHOIS data, the website's professionalism, certifications, and trust signals strongly indicate a legitimate and established business. Overall, Origo demonstrates a robust security posture, comprehensive service offerings, and a high level of digital maturity.

E

Eimskip

eimskip.is

0

Eimskip is a leading Icelandic shipping and logistics company specializing in transportation services across the North Atlantic region. The company offers a broad range of services including import/export shipping, container and breakbulk transport, domestic trucking, warehousing, and customs documentation. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive service information targeting both businesses and individual customers. Technically, the site employs modern web technologies such as Google Tag Manager, CookieHub for consent management, and Microsoft Omnichannel for live chat support, indicating a commitment to user engagement and data privacy. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, Eimskip's website demonstrates a solid balance of business credibility, technical implementation, and privacy compliance.

Sjóvá-Almennar tryggingar hf. is a well-established Icelandic insurance company founded in 1918, offering a comprehensive range of personal and business insurance products. The company holds a leading market position in Iceland, evidenced by its consistent top ranking in customer satisfaction surveys over the past eight years. Their website reflects a professional and customer-focused approach, providing easy access to services such as claims reporting and roadside assistance. The target audience includes Icelandic individuals and businesses seeking reliable insurance solutions. Technically, the website is built on modern frameworks like Next.js and React, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policy and incident response information are not publicly available. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a credible digital presence for the company.

O

Olís ehf

olis.is

0

Olís ehf is a well-established Icelandic company founded in 1927, operating primarily in the energy, transportation, and retail sectors. The company provides fuel distribution, vehicle services, and convenience retail across Iceland, positioning itself as a market leader with a strong brand presence. The website reflects this maturity with professional design, clear navigation, and comprehensive content tailored to both individual consumers and corporate clients. The promotion of a mobile app indicates a focus on digital engagement and customer convenience. Technically, the website is built on modern frameworks such as Next.js and uses Prismic CMS, ensuring a scalable and maintainable infrastructure. Integration with Google Tag Manager and CookieHub shows attention to analytics and privacy compliance. The site is mobile-optimized and performs moderately well, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and includes key security headers, demonstrating good baseline security hygiene. However, the absence of a public security policy, incident response information, and vulnerability disclosure mechanisms suggests room for improvement in transparency and readiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional, supporting a large, credible business. The lack of WHOIS data for the domain reduces trust slightly but does not outweigh the positive indicators. Strategic recommendations include publishing security policies, enhancing accessibility, and formalizing incident response disclosures to strengthen security posture and compliance.

S

Sýn

vodafone.is

0

Sýn is a prominent Icelandic telecommunications and media company offering a comprehensive suite of services including internet, television, mobile and fixed phone services, and advertising solutions across multiple platforms. The company holds a strong market position in Iceland, serving both residential and business customers with bundled packages and media content. The website reflects a professional and consistent brand image, targeting Icelandic consumers and businesses with localized content and multiple service offerings. Technically, the site is built on modern web technologies such as React and Next.js, with integrations for analytics and user behavior tracking via Google Tag Manager and Hotjar. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policy and incident response information are not publicly detailed. Privacy and cookie policies are present and appear comprehensive, indicating good compliance with GDPR. The absence of WHOIS data limits full domain trust analysis, but the overall digital presence and certifications support legitimacy. Strategic recommendations include enhancing public security policy disclosures, improving accessibility, and maintaining regular security audits.

P

Privacy service provided by Withheld for Privacy ehf

vidstack.io

0

Vidstack.io is a technology company specializing in providing UI components and hooks for building customizable, accessible media players on the web. Their product targets web developers and media integrators seeking robust and flexible media player solutions. The company operates primarily in the technology sector with a focus on open source and developer tools. The website demonstrates a modern technical infrastructure leveraging React, Astro, Tailwind CSS, and Cloudflare DNS services, indicating a mature digital presence with good performance and accessibility standards. Security posture is solid with HTTPS enabled and no exposed sensitive data, though there is room for improvement in DNS security and published security policies. Privacy compliance is currently weak due to the absence of privacy and cookie policies. Overall, the site is professional, trustworthy, and well-designed, but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

I

Icelandic Association for Search and Rescue

rescue.is

0

The Icelandic Association for Search and Rescue operates the website www.rescue.is to promote the Rescue 2026 international search and rescue conference held in Reykjavik, Iceland. The organization is a non-profit entity focused on emergency response and rescue operations. The website serves as an information hub for conference details, sponsors, and testimonials, targeting professionals in the search and rescue sector and related government agencies. The business model centers on event organization and community engagement within the emergency services domain. Technically, the website is built on ASP.NET WebForms with a legacy jQuery version and integrates modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site uses HTTPS and embeds multimedia content via Vimeo. While the site is mobile-optimized and has good navigation, some technical debt is evident due to older JavaScript libraries and lack of advanced security headers. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML. However, it lacks explicit security headers and a published privacy policy or incident response information, which are important for compliance and trust. The cookie policy with consent is present, indicating some level of privacy awareness. No WHOIS data was available, which slightly reduces trust but may be due to Icelandic domain registry policies. Overall, the website is professional, trustworthy, and serves its informational purpose well. Strategic improvements in privacy documentation, security headers, and updating legacy libraries would enhance its security posture and compliance standing.

S

Slysavarnafélagið Landsbjörg

flugeldar.is

0

Slysavarnafélagið Landsbjörg operates the website flugeldar.is as a platform to provide information about fireworks sales, safety guidelines, and rescue services in Iceland. The organization is a well-established non-profit entity focused on public safety and community support. The website serves as an informational and awareness tool, targeting the Icelandic public, especially around the fireworks season. Technically, the site is built on modern frameworks such as Next.js and uses Prismic CMS for content management, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and published policies. The absence of WHOIS data for the domain is a notable concern but does not outweigh the legitimacy signals from the content and external references. Overall, the site is professional, trustworthy, and well-maintained.

S

Slysavarnafélagið Landsbjörg

icesar.com

0

The Icelandic association for search, rescue & injury prevention, known as Slysavarnafélagið Landsbjörg, operates as a nonprofit organization dedicated to saving lives and preventing accidents in Iceland. The organization relies heavily on volunteer efforts and donations, positioning itself as a key player in Iceland's emergency response and safety ecosystem. The website reflects this mission with clear calls for support and detailed information about their activities and sponsors. Technically, the website is built on modern frameworks such as Next.js and Prismic CMS, ensuring a responsive and accessible user experience. The presence of Google Tag Manager and CookieHub indicates a moderate level of digital maturity with some privacy compliance mechanisms in place. Security-wise, the site enforces HTTPS and uses cookie consent but lacks advanced security headers and published security policies, which could be improved to enhance trust and compliance. The absence of WHOIS data reduces transparency but does not necessarily indicate illegitimacy given the organization's public presence and sponsorships. Overall, the site is professional and trustworthy but could benefit from enhanced security and privacy disclosures.

UNICEF Iceland operates as a national branch of the global UNICEF organization, focusing on children's rights and welfare advocacy within Iceland and internationally. The website presents a professional and consistent brand image aligned with UNICEF's global identity, targeting the general public interested in child welfare. Technically, the site is built using modern frameworks such as React and Gatsby, ensuring a good user experience and mobile optimization. However, the absence of WHOIS data for the domain www.unicef.is raises concerns about domain registration transparency, which impacts trustworthiness. Security posture is moderate with no evident security headers or policies, and privacy compliance is low due to missing privacy and cookie policies. Overall, the site is safe, accessible, and informative but would benefit from improved transparency and security practices.

S

Slysavarnafélagið Landsbjörg

landsbjorg.is

0

Slysavarnafélagið Landsbjörg is a prominent Icelandic non-profit organization dedicated to rescue operations, safety education, and community support. The organization operates nationally with a strong volunteer base and is supported through donations, sponsorships, and an integrated e-commerce platform offering branded safety products. The website reflects a professional and well-structured digital presence, targeting Icelandic residents, volunteers, and donors. It effectively communicates its mission and services with clear navigation and rich content. Technically, the site leverages modern frameworks such as Next.js and integrates Shopify for online sales, ensuring a responsive and performant user experience. Security measures are robust, including HTTPS enforcement and security headers, though the absence of a public security policy and incident response page suggests room for improvement. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site presents a trustworthy and credible front for the organization, though WHOIS data is unavailable, likely due to privacy protections common in Icelandic domains.

F

Formspark

submit-form.com

0

Formspark is a technology-focused SaaS company founded in 2018, providing a backend service that connects web forms to email and other integrations without requiring users to manage servers or databases. The company targets agencies, freelancers, developers, and marketing teams, positioning itself as a reliable and easy-to-use form backend solution trusted by over 20,000 companies. The website is professionally designed with excellent content quality and clear navigation, supporting multiple languages and integrations with popular platforms such as Slack, Zapier, and various spam protection services. Technically, the website leverages modern frameworks including Next.js and React, hosted on AWS infrastructure. It demonstrates good performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS enforced, secure form handling, and multiple anti-spam protections, although some security headers are not explicitly detected and DNSSEC is not enabled. Privacy compliance is good with a comprehensive privacy policy and GDPR page, but lacks a cookie consent mechanism. Overall, the security maturity is solid for a small SaaS provider, with no visible vulnerabilities or suspicious patterns. The domain registration is privacy protected but consistent with the business profile and age. Contact information is available via email and support forms, with active social media presence. No critical issues were found, and the website is safe for general audiences. Strategic recommendations include implementing security headers, enabling DNSSEC, publishing a formal security policy and vulnerability disclosure program, and adding cookie consent to enhance privacy compliance and trust.

S

Takk

styrkja.is

0

The website www.styrkja.is serves as a donation platform focused on supporting a wide range of charitable and social causes within Iceland. It aggregates multiple non-profit organizations, providing users with the ability to make monthly contributions to causes such as child welfare, health, environment, and human rights. The platform positions itself as a trusted intermediary facilitating philanthropy in the Icelandic market. Technically, the site is built using modern web technologies including the Gatsby React framework, and integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and CookieHub for cookie consent management. The website demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. WHOIS data for the domain is not publicly available, which is typical for Icelandic domains, but the site content and external references support its legitimacy. Overall, the site is professionally designed and trustworthy, with room for improvement in security transparency and privacy policy publication.

M

MS félag Íslands

msfelag.is

0

MS félag Íslands is a non-profit organization dedicated to supporting individuals affected by Multiple Sclerosis in Iceland. The website serves as a comprehensive resource offering educational materials, support services, publications, and community engagement opportunities. It targets patients, families, healthcare professionals, and the Icelandic public interested in MS-related information and support. The organization appears well-established within its niche, providing a broad range of services and information online. Technically, the website is built on the Moya CMS framework and utilizes modern web technologies including jQuery, Google Tag Manager, and Facebook SDK for analytics and social media integration. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site enforces HTTPS and uses asynchronous loading of third-party scripts, which is positive. However, the absence of visible security headers and lack of a published privacy or cookie policy indicate gaps in compliance and security best practices. The missing WHOIS data for the domain reduces trust from a domain registration standpoint, though the website content itself appears legitimate and professional. Overall, the website is a valuable resource for its community but should enhance its privacy disclosures, security headers, and domain registration transparency to improve trust and compliance.

L

Ljósmæðrafélag Íslands

ljosmaedrafelag.is

0

Ljósmæðrafélag Íslands is a professional association dedicated to midwives in Iceland, providing comprehensive support and services to both practicing midwives and midwifery students. The organization focuses on labor issues, professional development, and member benefits, positioning itself as a key national entity in the healthcare sector for maternal care. The website is well-structured, professionally designed, and serves as a central hub for information, news, and resources relevant to its members and the public. Technically, the site leverages modern web technologies including Next.js and Prismic CMS, ensuring a responsive and accessible user experience. Security measures such as HTTPS and appropriate security headers are in place, contributing to a strong security posture. However, the absence of explicit incident response contacts and vulnerability disclosure policies suggests areas for improvement in transparency and security readiness. Overall, the site reflects a mature digital presence aligned with the organization's professional and non-profit nature.

V

Veðurstofa Íslands

vedur.is

0

Veðurstofa Íslands is the official Icelandic Meteorological Office providing authoritative weather forecasts, earthquake monitoring, avalanche warnings, and hydrological data for Iceland. It serves a broad audience including the general public, government agencies, and researchers. The website is well-branded, content-rich, and professionally maintained, reflecting its government agency status. Technically, the site uses the Eplica CMS platform with legacy jQuery and integrates analytics tools such as Google Analytics and Siteimprove. While the site is functional and informative, some technical modernization is recommended, especially updating JavaScript libraries and enhancing security headers. Security posture is moderate with HTTPS in use but lacks explicit security policies and incident response contacts. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, the domain and WHOIS data confirm a trustworthy and long-established entity. Strategic improvements in security and technical modernization would enhance the site's resilience and user trust.

L

LiveSession

livesession.io

0

LiveSession is a mature SaaS company founded in 2017, offering an all-in-one product analytics platform designed for product teams including managers, designers, developers, and marketers. The platform combines qualitative and quantitative analytics such as session replays, funnels, heatmaps, and developer tools to provide comprehensive user behavior insights. The company positions itself strongly in the technology sector with a medium-sized business footprint and a consistent, professional web presence. Technically, the website is built on Webflow with integrations to major analytics and marketing tools like Google Analytics, Facebook Pixel, Bing Ads, and Intercom, demonstrating a modern and well-maintained digital infrastructure. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and privacy-first features like content anonymization. However, explicit security policies and incident response contacts are not prominently published, representing an area for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR and CCPA standards, with a high AI-assessed quality score of 87.

The website roasted.design is currently a parked domain landing page primarily serving advertisements and search widgets. There is no substantive business content or contact information available, indicating that the domain is not actively used for a commercial or organizational website. The domain was registered recently in 2024 but is currently expired, which raises concerns about its operational status and legitimacy. The site uses multiple third-party advertising and tracking scripts, mainly from Google and ParkLogic, but lacks privacy and cookie compliance mechanisms. Technically, the site is basic with moderate performance and minimal mobile optimization. Security posture is weak due to lack of HTTPS enforcement, missing security headers, and expired domain status. Overall, the site presents low trustworthiness and minimal business credibility.

P

Pushkeen AI

pushkeen.ai

0

Pushkeen AI operates a specialized online platform that curates and showcases the best push notification patterns from iOS mobile applications. The website serves marketers, app developers, and startups seeking inspiration to improve user engagement and growth through push notifications. Positioned as a niche leader, Pushkeen AI offers a comprehensive library of notifications, an app icon finder tool, and a request submission feature, supporting its content curation business model. The company appears to be a small, technology-focused startup founded in 2023, with domain registration privacy protection consistent with early-stage tech ventures. Technically, the website is built on modern web technologies including React and Next.js, hosted on Vercel, and uses Supabase for image storage. It integrates Plausible Analytics for user tracking and Stripe for donations. The site demonstrates good performance, mobile optimization, and SEO practices, though accessibility features are basic. No CMS is detected, indicating a custom-built solution. From a security perspective, the site enforces HTTPS and uses domain transfer protection. However, it lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies are published, and no explicit consent mechanisms are present, indicating compliance gaps. No vulnerability disclosures or incident response contacts are found. The WHOIS data shows privacy protection but is consistent with a legitimate small tech business. Overall, Pushkeen AI presents a professional and trustworthy platform with good technical implementation but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence. Strategic recommendations include publishing privacy and cookie policies, implementing cookie consent, enabling DNSSEC, adding security headers, and establishing vulnerability disclosure channels.

The website yum.design is currently a parked domain with no active business content or services. It primarily serves advertising and search functionality, leveraging third-party ad networks such as Google Adsense and ParkLogic. The domain registration is privacy-protected and was recently expired, which raises concerns about its operational status and legitimacy. There is no visible business information, contact details, or security policies beyond a basic privacy policy linked via a popup. Technically, the site uses standard HTML and JavaScript with embedded ad scripts but lacks modern security practices such as HTTPS enforcement and security headers. Overall, the site presents low trustworthiness and minimal business presence.

VideoTranslator is a newly founded (2025) technology company specializing in AI-powered translation services, including video, document, and image translation. The platform supports over 130 languages and offers advanced features such as perfect lip-sync, voice cloning, and format preservation. Positioned as a leading all-in-one AI translation SaaS, it targets content creators, businesses, and enterprises seeking professional multilingual content solutions. The website demonstrates a high level of digital maturity with modern technologies like Next.js and Cloudflare DNS, ensuring fast performance and excellent mobile optimization. Security is a priority, with compliance to GDPR and SOC 2 standards and bank-grade encryption, although some privacy compliance aspects like cookie consent could be improved. Overall, the platform presents a trustworthy and professional service with a clear business model and strong market positioning.

ChatImg is a technology company specializing in AI-powered image generation, editing, and enhancement tools. It offers a diverse set of AI models including Flux 1.1 Pro, GPT-4o, and Recraft V3, targeting creators, designers, marketers, and businesses globally. The platform boasts over 2 million users and partnerships with major companies such as Apple and Microsoft, positioning itself as a leading player in the AI creative tools market. Technically, ChatImg leverages modern web technologies including Next.js and React, hosted and secured via Cloudflare infrastructure, ensuring fast performance and mobile optimization. The website is professionally designed with clear navigation and comprehensive content, including detailed FAQs and user testimonials that enhance trust and credibility. Security-wise, the site enforces HTTPS, uses domain transfer locks, and employs privacy protection for WHOIS data, though it lacks explicit published security policies or incident response contacts. Privacy compliance is strong with clear privacy and cookie policies, though a cookie consent mechanism is absent. Overall, ChatImg presents a mature, secure, and user-friendly platform with room for improvement in transparency around security and cookie consent.

RandomUser.me is a niche technology service providing a free, open-source API for generating random user data, including profile photos and personal information placeholders. The service targets developers and software engineers who need realistic dummy data for testing and development purposes. The website is well established, with a domain age since 2013, and maintains a consistent brand presence with open-source transparency and active social media engagement. The business model relies on sponsorships, donations, and advertising revenue via Google Adsense. Technically, the site uses modern JavaScript, jQuery, and integrates Google Analytics and Adsense for tracking and monetization. Hosting and DNS services are provided via Cloudflare, ensuring good performance and availability. The site is mobile optimized and provides clear API usage instructions, though accessibility features are basic. No CMS or major frameworks are detected, indicating a lightweight custom implementation. From a security perspective, the site enforces HTTPS and uses WHOIS privacy protection appropriately. However, it lacks visible security headers such as CSP or HSTS, and does not publish a privacy policy or cookie consent mechanism, which are compliance gaps. No incident response or vulnerability disclosure information is provided, limiting transparency for security issues. The site does not expose sensitive data or show signs of vulnerabilities in the provided content. Overall, RandomUser.me is a credible and useful developer tool with moderate security posture and some compliance shortcomings. Strategic improvements in privacy documentation, security headers, and incident response transparency would enhance trust and compliance. The site is safe for general audiences and does not contain adult or questionable content.

Vidgo AI is a newly established technology startup specializing in AI-powered creative tools including video, image, and music generation. The platform integrates multiple advanced AI models such as Kling AI, Runway, Luma AI, and Hailuo AI to provide users with a comprehensive suite of creative capabilities. Positioned as an all-in-one solution, Vidgo AI targets content creators and digital artists seeking fast, high-quality AI media generation with a strong emphasis on user privacy and data security. The business model follows a freemium SaaS approach with free and premium subscription tiers. Technically, the website is built on modern frameworks like Next.js and React, hosted with Cloudflare DNS and CDN services, and incorporates third-party services such as Google Adsense for advertising and Microsoft Clarity for analytics. The site is well-optimized for performance, mobile responsiveness, and SEO, delivering a professional user experience. Privacy is prioritized with a comprehensive privacy policy and no data collection from user-generated content, although cookie consent mechanisms are absent. From a security perspective, Vidgo AI enforces HTTPS, employs standard security headers, and maintains domain transfer protections. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. The domain is newly registered with privacy protection, consistent with a startup profile, and shows no suspicious WHOIS patterns. Overall, Vidgo AI presents a credible, professional, and privacy-conscious AI creative platform with room for improvement in compliance transparency and security communication. Strategic enhancements in cookie consent, security policy publication, and incident response readiness would strengthen its security posture and user trust.

V

Veo3Video

veo3video.me

0

Veo3Video is a technology-focused SaaS company specializing in AI-powered video generation, particularly targeting viral video creation with ASMR and TikTok-ready formats. The platform offers subscription plans with varying credits and features, positioning itself as a cost-effective alternative to Google API video generation services. The business targets content creators and marketers seeking quick and affordable video production solutions. Technically, the website leverages modern web technologies including React, Google Identity Services for authentication, and Stripe for payment processing, hosted behind Cloudflare DNS services. The site demonstrates good design quality, mobile optimization, and SEO practices, although some accessibility features are basic. Security posture is strong with HTTPS enforced and domain transfer protection, but lacks visible security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

NanoImg.io is a technology company specializing in AI-powered image and video editing tools, prominently featuring their flagship Nano Banana AI Image Editor. Positioned as a market leader in 2025, the platform offers fast, professional-quality image generation and editing services targeting creative professionals, marketers, and enterprises. Their business model revolves around SaaS offerings with free and enterprise plans, including API access and batch processing capabilities. The company leverages modern web technologies and cloud infrastructure to deliver a performant and mobile-optimized user experience. However, the website lacks explicit privacy and cookie policies, which impacts privacy compliance scores. Security posture is generally good with HTTPS and domain transfer protections, but could be improved with DNSSEC and security headers. Overall, NanoImg.io presents a professional and trustworthy platform with room for enhanced compliance and security transparency.

P

Privacy service provided by Withheld for Privacy ehf

8b.io

0

8b.io is a technology company providing a SaaS platform that enables social media users to create a single landing page containing multiple links, commonly known as a 'link in bio' page. The service targets a broad audience including artists, content creators, businesses, bloggers, and activists, helping them consolidate their social media presence and promote content effectively. The company appears to be established since 2014 and operates with a small business profile. The website is professionally designed with good user experience and mobile optimization, leveraging modern frontend technologies such as Bootstrap and Mobirise, and integrates popular analytics and marketing tools like Google Analytics and Facebook Pixel. From a technical perspective, the website uses Cloudflare DNS and serves content over HTTPS, though no advanced security headers were detected in the provided data. The site lacks visible privacy, cookie, or terms of service policies, which impacts its privacy compliance score. No contact emails or phone numbers are provided, limiting direct communication channels. The WHOIS data shows privacy protection for the registrant, which is common and justified for this business type, with a domain age consistent with an established service. Security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in publishing privacy and cookie policies, implementing security headers, and providing incident response contacts. The website content is safe for general audiences with no adult or questionable content. Overall, the site demonstrates a solid business and technical foundation but requires enhancements in privacy compliance and security transparency to improve trust and regulatory adherence.

The domain triend.io currently hosts a placeholder 'Site Not Found' page with no substantive content or business information. The website is built using Framer and served via Cloudflare DNS, but lacks any privacy, cookie, or terms of service policies, as well as contact details or forms. The domain is privacy protected and was registered in 2022, indicating a relatively new or inactive web presence. Due to the absence of meaningful content, the website's technical maturity and security posture cannot be properly assessed. No security headers or HTTPS details are available, and no analytics or tracking technologies are detected. Overall, the site presents a low trust profile and minimal digital footprint.

T

TourDesk

tourdesk.com

0

TourDesk is a well-established Icelandic company founded in 2013, providing a comprehensive tour booking software platform tailored for hotels, guesthouses, and hostels. Their solution enables front desk staff to efficiently book tours and earn commissions, while also offering guests a self-service sales portal. The company is positioned as a trusted partner in the hospitality industry, evidenced by endorsements from major brands such as Hertz and Radisson Blu. Technically, the website is modern, fast, and mobile-optimized, leveraging Cloudflare for security and performance, Google Analytics for insights, and CookieHub for consent management. Security posture is strong with HTTPS enforced and bot management cookies in place, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the site demonstrates professionalism, trustworthiness, and compliance with privacy regulations.

A

Air Reviews

airreviews.io

0

Air Reviews is a technology startup founded in 2023, offering a SaaS platform focused on helping e-commerce businesses, particularly Shopify merchants, leverage customer reviews to improve learning and conversion rates. The website is built on WordPress using Elementor and integrates with Shopify via an app link. The technical infrastructure is modern but basic, with Cloudflare DNS and HTTPS enabled, though lacking DNSSEC and security headers. The security posture is moderate with room for improvement in policy transparency and security best practices. Privacy and cookie policies are absent, which impacts compliance and trust. Overall, the business appears legitimate but early-stage, with a need to enhance privacy compliance and security disclosures.

A

Alfreð

alfred.is

0

Alfreð.is is the largest job search platform in Iceland, providing a comprehensive service for job seekers and employers to browse and apply for jobs via web and app. The platform offers hundreds of new job listings weekly and additional services such as courses. The website is well-branded and targets the Icelandic employment market. Technically, the site uses modern frameworks like React and Next.js, hosted behind Cloudflare with CDN and image optimization via Imgix. Analytics and marketing tools include Hotjar, Google Tag Manager, and Bing Ads. Security posture is adequate with HTTPS and Cloudflare DNS but lacks advanced security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and functional but could improve transparency and security practices.

H

Hekla hf.

gwmora.is

0

ORA GWM is a business focused on electric vehicles, specifically promoting the ORA 03 model in Iceland. The company appears to be associated with Hekla hf., a medium-sized entity operating in the energy and transportation sectors. The website provides detailed product information, media content, and contact details, targeting consumers interested in sustainable electric mobility solutions. Technically, the site is built on the Moya CMS platform and uses standard web technologies including jQuery and Google Fonts. The site is mobile-optimized and uses HTTPS, but some technical aspects such as outdated libraries and missing security headers could be improved. Security posture is moderate with no visible vulnerabilities, but privacy compliance is lacking due to absence of privacy and cookie policies. WHOIS data is missing, which reduces domain trustworthiness, but the professional presentation and contact information support legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

M

Mitsubishi-motors á Íslandi

mitsubishi.is

0

Mitsubishi-motors á Íslandi operates as the official Mitsubishi dealership in Iceland, offering sales and servicing of Mitsubishi vehicles, including the popular Outlander PHEV plug-in hybrid. The website targets Icelandic consumers interested in new and used Mitsubishi cars, providing detailed product information, warranty details, and test drive booking options. The business model is focused on automotive retail and after-sales services, positioning itself as a trusted local representative of the Mitsubishi brand. Technically, the website is built on the Duda platform, leveraging modern web technologies such as service workers, HTTPS, and multiple analytics and tracking tools. The site is well-optimized for mobile and desktop users, with good navigation and content quality. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks some security headers and formal privacy and cookie policies. The absence of WHOIS data for the domain is a concern for domain legitimacy, but the professional presentation and consistent branding mitigate some risk. Overall, the site is functional, professional, and trustworthy for its intended audience, but improvements in privacy compliance and domain registration transparency are recommended.

S

Skoda Ísland

skoda.is

0

Skoda Ísland operates as the official ŠKODA importer and dealer in Iceland, providing a comprehensive range of automotive services including new and used car sales, financing, and after-sales support. The website presents a professional and well-structured digital presence, targeting Icelandic consumers and businesses interested in ŠKODA vehicles. The company leverages modern web technologies such as React and Bootstrap, hosted on reliable CDN platforms, ensuring a responsive and user-friendly experience across devices. Security posture is strong with HTTPS enforced and no exposed sensitive data, though there is room for improvement in implementing security headers and cookie consent mechanisms. The absence of WHOIS data for the queried subdomain is a minor concern but does not detract significantly from the overall legitimacy, given the strong branding and consistent contact information. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and verifying domain registration details to bolster trust.

A

Audi

audi.is

0

The website www.audi.is is the official Audi brand portal for Iceland, providing information on Audi vehicles, services, and brand engagement tailored to the Icelandic market. It serves as a regional digital presence for Audi, showcasing new and used cars, financing options, service centers, and MyAudi support. The site is professionally designed with consistent branding and modern web technologies, including Adobe Experience Manager headless CMS and Audi's proprietary feature apps. It integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel, alongside a cookie consent mechanism to comply with privacy regulations. Security posture is strong with HTTPS enforced and standard security practices observed, though explicit security policies and contact information for incident response are not publicly visible. WHOIS data is unavailable, likely due to privacy protection, but the site’s content and branding strongly indicate legitimacy. Overall, the site is a well-maintained, secure, and user-friendly platform for Audi customers and prospects in Iceland.

E

elink.io

elink.io

0

elink.io is a technology SaaS company specializing in content curation tools that enable users to save and edit web links and transform them into email newsletters, webpages, social bio links, and more. The platform targets a broad audience including marketing, sales, education, and remote teams, positioning itself as a comprehensive content creation solution. The website is professionally designed using modern web technologies such as Webflow, Google Analytics, and AWS hosting, reflecting a mature digital infrastructure. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, and no explicit privacy or cookie policies were found in the analyzed content. Overall, the website is safe, professional, and trustworthy, though improvements in privacy compliance and security best practices are recommended.

H

Hekla

hekla.is

0

Hekla hf. is a prominent Icelandic automotive dealership representing major brands such as Volkswagen, Mitsubishi, Audi, Skoda, and Ora. The company offers a comprehensive range of services including new and used car sales, vehicle servicing, parts and accessories sales, and electric vehicle charging solutions. Their digital presence includes an e-commerce platform and customer portals, reflecting a mature digital infrastructure. The website is well-structured, mobile-optimized, and integrates multiple marketing and analytics tools, indicating a strong digital marketing strategy. However, the absence of publicly available WHOIS data and explicit privacy and terms of service pages slightly detracts from the overall trustworthiness and compliance posture. Security practices are generally sound with HTTPS enforced and no obvious vulnerabilities, but improvements in security headers and incident response disclosures are recommended.

V

Volkswagen

volkswagen.is

0

Volkswagen á Íslandi operates as the official authorized dealer and service provider for Volkswagen vehicles in Iceland, offering new and used cars, financing, warranty, parts, and service. The website is well-branded with consistent Volkswagen identity and targets Icelandic consumers interested in Volkswagen products. The technical infrastructure leverages modern web technologies including React, Adobe Helix, and advanced JavaScript security guards to ensure a secure and performant user experience. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. Security posture is strong with HTTPS and script guards, though explicit security and incident response policies are not publicly available. The absence of WHOIS data reduces domain registration trust but the website content and branding strongly support legitimacy. Overall, the site is professional, secure, and user-friendly, serving as a reliable digital presence for Volkswagen in Iceland.

S

Schindler Ísland

schindler.is

0

Schindler Ísland is the Icelandic branch of the global Schindler Group, specializing in the design, manufacture, installation, and maintenance of elevators, escalators, and moving walks. The website targets businesses and property owners in Iceland seeking reliable vertical and horizontal transportation solutions. The company leverages Swiss design principles and offers a comprehensive product portfolio including passenger and freight elevators, escalators, and modernization packages. The site is well-branded, professionally designed, and provides multi-language support with Icelandic as the primary language. The business model focuses on B2B and B2C sales and maintenance services, positioning Schindler as a market leader in transportation solutions within Iceland.

D

DUX

dux.is

0

DUX is a well-established Icelandic company specializing in premium beds and furniture, with a history spanning over 90 years. The website reflects a mature retail business focused on sustainable comfort and advanced sleep technology. The company targets consumers seeking high-quality sleep solutions and furniture. The site is professionally designed, mobile-optimized, and integrates modern analytics and cookie consent tools, indicating a good level of digital maturity. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though the absence of explicit privacy and terms of service pages is a compliance gap. The lack of WHOIS data reduces domain trustworthiness but does not detract significantly from the professional presentation. Overall, the site is credible and safe for general audiences.