Security Directory

E

Efficax.estate

efficax.estate

0

Efficax.estate operates as a small real estate agency specializing in property sales and valuations in the Alicante province of Spain, particularly in areas such as Torrevieja, La Mata, and Punta Prima. The website targets international property buyers and sellers, offering multilingual support and services including free property tours and expert valuations. The business appears to be established around 2020, consistent with the domain's creation date inferred from structured data. Technically, the website is built on WordPress using Elementor and the Houzez theme, providing a modern and responsive user experience with good SEO practices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvements. Overall, the site presents a professional image with clear contact channels via phone and WhatsApp, but would benefit from enhanced privacy and security disclosures to strengthen trust and regulatory compliance.

A

Allfunds Bank S.A.U.

allfunds.com

0

Allfunds Bank S.A.U. operates as a leading B2B WealthTech platform with over 20 years of experience, providing integrated wealth management and fund distribution solutions globally. The company offers a comprehensive digital ecosystem that includes advanced tools for dealing, execution, ESG, compliance, and blockchain technology to transform investment fund environments. Positioned as a market leader with over €1.7 trillion in assets under administration, Allfunds targets fund houses, distributors, and wealth managers worldwide. The website reflects a mature digital infrastructure with modern technologies such as React and Material-UI, hosted on Akamai's CDN for performance and reliability. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

S

Sandoz España

sandozfarma.es

0

Sandoz España operates as a subsidiary of Novartis, focusing on providing pharmaceutical products and healthcare solutions within Spain. The website serves as a corporate portal offering information about the company, its leadership, therapeutic areas, patient commitments, and career opportunities. The site targets healthcare professionals, patients, and potential employees, reflecting a mature enterprise presence in the healthcare sector. Technically, the website is built using modern web technologies including React and Next.js, hosted on Amazee.io infrastructure. It employs Google Tag Manager for analytics and OneTrust for cookie consent management, indicating a commitment to privacy compliance and data governance. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response information are not publicly available, suggesting room for improvement in transparency and security communication. Overall, the website presents a professional and trustworthy digital presence consistent with a large healthcare enterprise. The lack of publicly accessible WHOIS data is due to .es domain registry policies and does not detract from the site's legitimacy. Strategic recommendations include publishing detailed security policies, implementing a security.txt file, and enhancing accessibility to further strengthen trust and compliance.

X

Xpeer Medical education

xpeer.app

0

Xpeer Medical education is a Spain-based company providing accredited medical education videos accessible globally through a mobile app and online platform. It holds unique accreditation by the European Union of Medical Specialists (UEMS), offering free courses in multiple languages and specialties to healthcare professionals worldwide. The platform supports continuing medical education (CME/CPD) credits and serves a community of over 100,000 users across 40 countries. The business model includes free access for individuals and tailored business solutions for organizations seeking to distribute accredited content. Technically, the website is built on WordPress with Elementor, leveraging modern analytics tools such as Google Analytics and PostHog, and implements Google reCAPTCHA Enterprise for bot protection. The site is mobile-optimized, SEO-friendly, and includes cookie consent mechanisms compliant with GDPR. Performance is moderate with good accessibility and professional design. From a security perspective, the site enforces HTTPS, uses multiple security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy and incident response contact information, and does not publish a vulnerability disclosure program. Overall, the security posture is strong but could be enhanced with additional transparency and formal policies. The overall risk assessment is low, with no signs of malicious activity or vulnerabilities. Strategic recommendations include publishing a security policy, establishing incident response contacts, and implementing a vulnerability disclosure program to further enhance trust and compliance.

I

Indianwebs

indianwebs.com

0

Indianwebs is a well-established digital agency based in Spain, specializing in web design, SEO, and online marketing services. With over 20 years of experience and a strong presence in Barcelona and Madrid, the company positions itself as a leader in the national market. Their service offerings include web design, social media management, search engine positioning, online advertising, hosting, and domain registration. The website is professionally designed, mobile-optimized, and integrates modern analytics and marketing tools such as Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS and reCAPTCHA implemented, though there is room for improvement in security headers and explicit security policies. Privacy compliance is basic with a cookie consent mechanism but lacks a visible privacy policy and terms of service. Overall, the website reflects a credible and professional business with a strong technical foundation and good market positioning.

V

Vilatrans Empresa de Distribución y Logística

vilatrans.com

0

Vilatrans Empresa de Distribución y Logística is a medium-sized Spanish logistics and distribution company with over 25 years of experience. The company specializes in full load transportation and associated logistics services, leveraging satellite tracking technology and holding necessary administrative authorizations for special transport across Spain. Their website reflects a professional and consistent brand presence, targeting businesses requiring reliable logistics solutions. Technically, the site is built on WordPress with the Divi theme and uses common plugins such as Yoast SEO and Contact Form 7, hosted on Amazon AWS infrastructure. The website is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks DNSSEC and security headers, and does not publish explicit security or incident response policies. Privacy compliance is partial, with a cookie policy and consent mechanism present but no privacy policy page found. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The site is free from WAF blocking or content restrictions and contains no adult or questionable content.

A

Asociación de Fabricantes Españoles de Paneles Sándwich

afepp.com

0

The Asociación de Fabricantes Españoles de Paneles Sándwich (AFEPP) is an industry association representing Spanish manufacturers of sandwich panels. The website serves as an informational and promotional platform targeting manufacturers and stakeholders within Spain's manufacturing sector. The site is built on WordPress using the Colibri page builder and integrates marketing and analytics tools such as HubSpot and Google Analytics. It features a cookie consent mechanism compliant with GDPR principles but lacks a dedicated privacy policy and terms of service pages. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the professional appearance of the website. Security posture is moderate with HTTPS enabled but no detected security headers or published security policies. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.

H

Hiansa

hiansa.com

0

Hiansa is a Spanish manufacturing company specializing in the production and distribution of steel sandwich panels and profiled sheets, serving industrial, commercial, and architectural sectors. With over 40 years of experience, it holds a strong market position supported by technical expertise and a broad product catalog. The company is part of GRUPO HIEMESA and a member of the Asociación de Fabricantes Españoles de Paneles Sándwich, reinforcing its industry credibility. Technically, the website is built on WordPress with modern JavaScript libraries and integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and Smartlook. Privacy compliance is well addressed with a comprehensive cookie policy and consent mechanism. Security posture is good with HTTPS and no visible vulnerabilities, though security headers and incident response information are lacking. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the overall business presence and content quality indicate a legitimate and professional operation.

S

SteelMed

steelmed.com

0

SteelMed is a medium-sized Spanish company specializing in the sale and distribution of industrial steel sheeting and coils, offering custom cutting services for various industrial sectors including automotive, construction, and renewable energies. It operates as part of the Hiemesa Group, a well-established steel sector conglomerate. The website demonstrates a professional digital presence with comprehensive product information, certifications, and contact details. Technically, the site uses modern web technologies such as Bootstrap and jQuery, with responsive design and integration of Google services like Maps and reCAPTCHA. Security posture is moderate, with some best practices observed but lacking visible security headers and explicit incident response contacts. Privacy compliance is strong, with clear policies and cookie consent mechanisms. The absence of WHOIS data raises some concerns about domain registration legitimacy, but the overall business credibility and trust indicators are high. Strategic recommendations include enhancing security headers, verifying SSL configuration, and improving incident response transparency.

N

new-hiemed

hiemed.com

0

Hierros del Mediterráneo (new-hiemed) is a medium-sized Spanish company specializing in steel sector services including distribution, transformation, panel sandwich supply, and industrial supplies. The company positions itself as a leader in the Mediterranean steel market, targeting business customers and professionals. The website is built on WordPress with Elementor and includes modern features such as structured data, cookie consent, and GDPR compliance. Security posture is generally good with HTTPS and reCAPTCHA in use, but lacks explicit security headers and a published security policy. WHOIS data is missing or unavailable, which slightly reduces trust but the website content and business presence appear professional and legitimate. Overall, the site demonstrates good digital maturity with room for improvement in security transparency and technical optimizations.

Grupo Hiemesa is a leading Spanish group specializing in the manufacturing, transformation, commercialization, and distribution of steel products. Established in 1962, it has grown to become a major player in the steel sector in Spain, serving various industrial markets with a comprehensive range of services including distribution, steel profiling, sandwich panel manufacturing, and export. The company operates multiple subsidiaries and maintains a strong presence in Iberia and neighboring regions. Technically, the website employs modern web technologies such as Bootstrap 3.0, jQuery, and Google Maps API, offering a responsive and content-rich user experience. Security posture is adequate with HTTPS enabled and secure forms, though improvements in security headers and incident response documentation are recommended. Privacy compliance is supported by clear privacy and cookie policies, though an active cookie consent mechanism is absent. Overall, the site reflects a professional and trustworthy business with room for enhanced security and compliance maturity.

I

IFEMA MADRID

ifema.es

0

IFEMA MADRID is a leading Spanish operator and one of the most important in Europe within the international circuit of the fair and congress industry. The organization specializes in creating relationships between people, brands, and experiences through a wide range of events including leisure, tourism, art, fashion, technology, motor, education, employment, and gastronomy. Their market position is strong as a large entity serving businesses, professionals, and the general public interested in events in Madrid and Europe. Technically, the website employs modern tracking and marketing technologies such as Google Tag Manager, Google Analytics, Visual Website Optimizer, and OneTrust for cookie consent, reflecting a mature digital infrastructure. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though the absence of a public security policy or incident response contact is noted. WHOIS data is restricted by the Spanish registry policy, which is typical and not suspicious. Overall, the website is trustworthy, compliant with GDPR, and safe for general audiences.

P

Power Electronics S.L.

power-electronics.com

0

Power Electronics S.L. is a well-established multinational company specializing in renewable energy solutions, including solar inverters, energy storage systems, electric mobility charging infrastructure, and industrial drives. The company holds a strong market position as a global benchmark in these sectors, with a focus on sustainable and clean energy technologies. Their website reflects a professional and comprehensive digital presence, targeting industry professionals and business clients worldwide. Technically, the site is built on modern frameworks such as Next.js and React, hosted likely on AWS infrastructure, and optimized for performance and mobile use. Security posture is solid with HTTPS enforced and domain protections in place, though improvements in DNSSEC and security headers are recommended. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website and domain data indicate a legitimate, trustworthy, and mature business with a high level of professionalism and digital maturity.

T

Thomann

thomann.es

0

Thomann is a leading European e-commerce retailer specializing in musical instruments, studio equipment, lighting, and PA systems. The website www.thomann.es serves the Spanish market with a comprehensive catalog and strong customer service offerings, including repair and maintenance. The company positions itself as the largest music store in Europe, targeting musicians and music enthusiasts ranging from amateurs to professionals. The business model is focused on online retail with localized shops across multiple European countries, supported by a robust digital infrastructure. Technically, the website employs modern JavaScript frameworks, Google Tag Manager for analytics, and Turnstile CAPTCHA for bot protection. The site is responsive, accessible, and optimized for SEO, reflecting a mature digital presence. Security measures include HTTPS enforcement, comprehensive security headers, and cookie consent mechanisms aligned with GDPR requirements. However, explicit incident response and vulnerability disclosure policies are not publicly available. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear policies and consent mechanisms. The absence of direct contact emails or phone numbers in the visible content suggests a preference for contact via forms and service pages, which is common in large e-commerce platforms. Overall, the site demonstrates high professionalism, trustworthiness, and a user-friendly experience. Strategically, Thomann should consider publishing explicit incident response contacts and a vulnerability disclosure policy to enhance transparency and trust. Continuous monitoring of third-party scripts and tracking tools is recommended to maintain privacy compliance and security standards.

E

Eurener

eurener.com

0

Eurener is a Spanish photovoltaic module manufacturer specializing in high-quality, durable solar panels primarily targeting the European residential and commercial markets. The company emphasizes sustainability, advanced solar technologies, and premium design, supported by industry certifications and awards such as the TOP Brand seal and Ecovadis platinum medal. The website is built on WordPress with Elementor, featuring modern web technologies and multilingual support, providing a professional user experience with good navigation and mobile optimization. Security posture is adequate with HTTPS and domain registration protections, but lacks advanced DNS security and explicit security policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the website reflects a credible and established business with room for improvement in privacy and security transparency.

C

Casino Noticias

casinonoticias.com

0

Casino Noticias is a Spanish-language online media platform specializing in news and insights related to the gambling and casino industry. The website offers articles on industry events, marketing trends, innovation, and corporate social responsibility, targeting professionals and enthusiasts within the sector. The business is relatively new, founded in 2024, and operates as a niche media outlet with a focus on delivering relevant and timely content to its audience. Technically, the website is built on WordPress and hosted on WordPress.com, leveraging modern Gutenberg blocks and Jetpack plugins. It uses Google Analytics for visitor tracking and employs HTTPS for secure communications. The site demonstrates good mobile optimization and accessibility features, although navigation clarity could be improved. Performance is moderate, consistent with typical WordPress.com hosted sites. From a security perspective, the site benefits from HTTPS and domain status protections but lacks DNSSEC and explicit security headers such as Content-Security-Policy or X-Frame-Options. There is no visible privacy policy, cookie consent mechanism, or terms of service, which are critical for GDPR compliance and user trust. No contact information or incident response channels are provided, limiting transparency. The domain registration is consistent with the business profile, showing no suspicious patterns. Overall, Casino Noticias presents a professional and focused media presence with good technical foundations but requires improvements in privacy compliance, security best practices, and contact transparency to enhance trust and regulatory adherence.

elEconomista.es is a prominent Spanish-language online news portal specializing in economic, financial, stock market, and business news. It serves a broad Spanish-speaking audience interested in national and international economic developments, market data, and related sectors such as technology and health. The website is professionally designed with a consistent brand identity and offers comprehensive content that positions it as a leader in its niche. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and advanced ad management tools like Prebid.js and Amazon Ads, ensuring a robust digital infrastructure. The presence of cookie consent mechanisms and HTTPS indicates a commitment to privacy and security best practices. Security posture is solid with no evident vulnerabilities or blocking mechanisms, although some security headers could be improved. Overall, the site is trustworthy and well-maintained, though the lack of accessible WHOIS data slightly limits domain trust verification.

Multiestetica.com is a leading online community and platform focused on plastic surgery and aesthetic medicine, primarily serving Spanish-speaking users. The website offers comprehensive services including doctor directories, patient experiences, treatment information, and educational articles. It positions itself as a trusted resource with verified doctors and patient satisfaction indicators. Technically, the site employs a modern analytics and marketing stack including Google Analytics, Facebook Pixel, TikTok Analytics, Amplitude, Hotjar, and New Relic for performance monitoring. The site is well-optimized for SEO and mobile devices, with good design and navigation clarity. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is robust, featuring GDPR-compliant cookie consent mechanisms and a detailed cookie policy. However, the absence of WHOIS domain registration data raises some concerns about domain legitimacy and transparency. Overall, the site is professional, trustworthy, and safe for general audiences, but would benefit from enhanced business transparency and security disclosures.

C

Coface

coface.es

0

Coface is a well-established global credit insurance company with over 75 years of experience, offering a broad range of financial risk management services including credit insurance, commercial information, debt collection, and political risk insurance. The company targets businesses seeking to protect themselves from financial risks related to credit and trade. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, indicating a high level of digital maturity. Technically, the site uses modern frameworks and consent management tools, ensuring compliance with privacy regulations such as GDPR. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly found. Overall, the site is trustworthy, professional, and compliant, supporting Coface's market position as a leader in financial risk services.

B

Bonos de Casino

bonosdecasino.net

0

BonosDeCasino.net is a Spanish-language online platform specializing in providing comprehensive information, reviews, and listings of online casino bonuses, promotions, and guides targeted primarily at the Spanish market. The site positions itself as a trusted repository with over 20 years of industry experience, focusing on helping users find the best casino bonuses and understand terms and conditions for safe and responsible gambling. The business model is primarily affiliate marketing combined with informational content, supported by detailed casino reviews and guides. Technically, the website is built on WordPress with modern SEO and performance optimizations, including structured data and lazy loading. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enabled and no obvious vulnerabilities, though some security headers and cookie consent mechanisms could be improved. Privacy compliance is adequate with a clear privacy policy and responsible gaming information, but lacks explicit cookie consent and terms of service pages. Overall, the domain registration is consistent and transparent, though the domain is newly created, which may indicate a recent launch or rebranding. The site is safe for adult users interested in gambling content and does not contain explicit adult material. Strategic recommendations include enhancing security headers, adding cookie consent, publishing terms of service, and providing vulnerability disclosure information to improve trust and compliance.

S

Solunion

solunion.com

0

Solunion is a well-established Spanish company specializing in credit insurance and surety bonds, serving businesses that require risk management solutions. The company is a joint venture between MAPFRE and Allianz Trade (Euler Hermes), positioning it strongly in the finance and insurance sectors. The website reflects a professional and business-oriented approach, targeting corporate clients in Spain and Latin America. The digital infrastructure is based on WordPress with Elementor, enhanced by modern marketing and analytics tools such as Google Tag Manager and LinkedIn Insight. The site is mobile-optimized and SEO-friendly, supporting good user experience and accessibility. Security posture is solid with HTTPS, security headers, and no evident vulnerabilities, although DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, Solunion's online presence is credible, secure, and professionally maintained.

C

CSL Behring

cslbehring.es

0

CSL Behring España is a healthcare-focused biopharmaceutical company specializing in innovative therapies for rare and serious diseases. The website presents a professional and well-structured digital presence, targeting patients, healthcare professionals, and stakeholders in Spain. The company emphasizes corporate responsibility, patient community involvement, and research and development as core aspects of its business model. The site is branded consistently with the global CSL Behring identity, reflecting its position as a global leader in its sector. Technically, the website employs modern technologies including Google Tag Manager for analytics, OneTrust for cookie consent management, and Brightcove for media playback. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured navigation. However, explicit CMS or hosting provider details are not discernible from the provided data. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating a baseline compliance with privacy regulations such as GDPR. However, no explicit security headers were detected, and no published security or incident response policies were found. The WHOIS data is restricted by the .es registry policies, which is typical and does not raise immediate concerns. Overall, the security posture is moderate but could be improved with additional headers and transparency. The overall risk assessment is low, with recommendations to enhance privacy policy visibility, security header implementation, and contact information clarity to improve trust and compliance. The website is suitable for its audience and business purpose, with no indications of malicious or suspicious activity.

Q

Qualentum

qualentum.com

0

Qualentum is a Spanish company specializing in accelerating digital talent through apprenticeship and internship programs, primarily targeting junior tech and digital profiles. It operates as part of the Proeduca group and collaborates with educational institutions such as UNIR and corporate partners like VASS. The website is well-structured, professionally designed, and optimized for SEO, providing clear information about its services and target audiences. However, the absence of WHOIS registration data raises some concerns about domain legitimacy, although the business presence and content suggest a legitimate operation. Technically, the website is built on WordPress using modern tools like Elementor and Yoast SEO, with Google Tag Manager integrated for analytics. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS enabled and no obvious vulnerabilities, but lacks some security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the website presents a professional and trustworthy front for a medium-sized education and technology business, but improvements in transparency, privacy compliance, and domain registration clarity are recommended to enhance trust and security.

A

AFS Intercultura

afs-intercultura.org

0

AFS Intercultura is a well-established non-profit organization based in Spain, dedicated to promoting intercultural learning through study abroad programs, host family hosting, and volunteer opportunities. The organization operates globally with presence in 98 countries and offers immersive cultural exchange experiences primarily targeting students, families, and volunteers. Their website reflects a professional and comprehensive digital presence with rich content, clear navigation, and strong branding consistency. Technically, the site is built on WordPress with modern integrations such as Google Tag Manager, Google Analytics, and reCAPTCHA, ensuring both functionality and security. Privacy and cookie policies are clearly presented with consent mechanisms, demonstrating GDPR compliance. Security posture is solid with HTTPS and secure form handling, though some security headers could be improved. Overall, the website is trustworthy, user-friendly, and aligns well with the organization's mission and audience.

Q

Qualentum

edix.com

0

Qualentum is a Spanish company specializing in accelerating digital talent through apprenticeship-style programs that combine practical learning with paid work. It operates as part of the Proeduca group and targets both junior technology candidates and companies seeking to develop tech talent. The website is professionally designed using WordPress and Elementor, with good SEO and structured data implementation. However, the absence of WHOIS data raises questions about domain registration legitimacy. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the site is safe, professional, and focused on education and technology talent development.

S

Solarwatt

solarwatt.es

0

Solarwatt is a European solar energy provider specializing in photovoltaic panels, solar batteries, and energy management systems, targeting residential and commercial customers primarily in Spain and other European countries. The website is professionally designed using the Neos CMS platform with a modern PHP framework, supporting multiple languages and integrating advanced cookie consent mechanisms to comply with GDPR. The technical infrastructure includes Google Tag Manager and Cookiebot for analytics and privacy management, indicating a mature digital presence. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response policies are absent. Overall, the site demonstrates a solid business and technical foundation with room for improvement in privacy transparency and security documentation.

A

Associacio Catalana de Municipis i Comarques

acm.cat

0

The website acm.cat represents the Associació Catalana de Municipis i Comarques, a regional government association in Catalonia, Spain, founded in 2006. It serves as a platform to provide information, training, consulting, and communication services to municipalities and local government entities. The site is professionally designed using WordPress CMS with common plugins such as Yoast SEO and Cookiebot for privacy compliance. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and DNSSEC. No explicit privacy policy or terms of service pages were detected, though cookie consent is present and GDPR compliant. Contact information is primarily via embedded forms, with no direct emails or phone numbers found. Overall, the domain registration data is consistent and supports the legitimacy of the organization. The site is safe for general audiences and maintains a good level of professionalism and trustworthiness.

U

UGT Catalunya

ugt.cat

0

UGT Catalunya is a regional labor union organization based in Catalonia, Spain, focused on advocating for workers' rights and social welfare. The website serves as an information portal for union members and the general public, providing updates on labor rights and union activities. The organization maintains a consistent brand presence and active social media channels, reinforcing its position as a key player in the regional labor movement. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder, LayerSlider, Yoast SEO, and WP Rocket, indicating a modern and maintainable infrastructure. The site is secured with HTTPS and includes essential security headers, contributing to a good security posture. Performance and mobile optimization are adequate, though accessibility features could be improved. Security-wise, the site demonstrates good practices with HTTPS and security headers but lacks explicit privacy policies, terms of service, and incident response contacts, which are important for compliance and trust. No vulnerabilities or suspicious activities were detected in the content or scripts. The WHOIS data is privacy protected, which is typical for non-profit organizations. Overall, the website is professional, trustworthy, and serves its audience well. Strategic improvements in privacy disclosures and incident response transparency would enhance compliance and user trust.

C

CCOO CAT

ccoo.cat

0

CCOO CAT is a leading labor union in Catalonia, Spain, dedicated to protecting and improving workers' rights and conditions. With a large membership base and extensive representation, it offers services including advice, training, collective agreement information, and member discounts. The website is professionally designed, mobile-optimized, and rich in relevant content, targeting workers and union members in Catalonia. Technically, it is built on WordPress with modern plugins and tracking tools, maintaining good SEO and accessibility standards. Security posture is solid with HTTPS and some security plugins, though it lacks explicit security headers and incident response contacts. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. The absence of WHOIS registration data is a transparency concern but does not detract significantly from the site's legitimacy. Overall, the site is trustworthy, professional, and well-maintained.

A

Academia Saint-Gobain

academiasaint-gobain.es

0

Academia Saint-Gobain is an educational platform offering specialized courses designed as a formative journey to enhance knowledge and skills. The website is professionally designed, leveraging WordPress CMS and integrates GDPR-compliant cookie consent mechanisms. It targets professionals and learners seeking structured training programs, positioning itself as a niche educational service under the Saint-Gobain brand umbrella. Technically, the site uses modern web technologies including Google Tag Manager for analytics and Ultimate Member for user management, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and privacy compliance evident, though additional security headers could enhance protection. The absence of WHOIS data limits domain registration insights, but the overall digital presence and branding suggest legitimacy and trustworthiness.

Chryso España is a specialized provider of chemical additives and solutions for the construction industry, focusing on improving concrete and building materials. The company operates primarily in Spain and is part of the larger Sika AG group, positioning itself as a reputable player in the manufacturing sector. The website reflects a professional B2B business model targeting construction professionals and concrete producers. Technically, the site is built on WordPress with modern JavaScript libraries and integrates analytics tools such as HubSpot and Google Tag Manager, indicating a mature digital presence. Security-wise, the site enforces HTTPS, employs standard security headers, and implements GDPR-compliant privacy and cookie policies, although it lacks a dedicated security policy or incident response page. Overall, the website is trustworthy, well-structured, and safe for general audiences, with no signs of blocking or WAF interference.

D

Distriplac

distriplac.com

0

Distriplac is a Spanish company specializing in the distribution of construction materials, particularly for interior conditioning, drywall, and ceilings. The company positions itself as a leader in its niche market, targeting construction professionals and contractors. The website is built on the Magento e-commerce platform, leveraging modern JavaScript libraries such as RequireJS and jQuery, and integrates analytics and user behavior tracking tools like Google Tag Manager and Hotjar. A cookie consent mechanism is implemented via Cookiebot, indicating attention to privacy compliance. Security posture is generally good with HTTPS enabled, but lacks some security headers and explicit security policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, though the website itself appears professional and trustworthy. Overall, the site demonstrates moderate digital maturity with room for improvement in security and compliance documentation.

I

Incusa

incusa.es

0

Incusa is a medium-sized manufacturing company specializing in the extraction and commercialization of high-purity feldspar and silica sand, serving industrial sectors such as ceramics, glass, foundry, and construction. The company operates internationally, distributing products in over 20 countries and is a subsidiary of the Saint-Gobain Group, indicating a strong market position and reputable backing. The website reflects a professional digital presence built on WordPress with Elementor, optimized for SEO and mobile responsiveness. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks explicit privacy and security policy pages and security headers, which are recommended for compliance and enhanced protection. Overall, the website is trustworthy and well-structured, supporting the company's industrial business model and international reach.

Saint-Gobain Weber España operates as a leading provider of industrial mortars and construction solutions in Spain, specializing in products such as ceramic tile adhesives, thermal insulation systems (SATE), continuous flooring, and technical mortars. The company is part of the global Saint-Gobain group, which enhances its market position and trustworthiness. The website is professionally designed, content-rich, and targets construction professionals, architects, and contractors with comprehensive product information, tools, and services. Technically, the site is built on Drupal CMS, employs modern analytics and consent management tools, and is optimized for mobile and accessibility. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though additional security headers could improve defenses. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. WHOIS data is privacy protected but domain registration details and website content align with a legitimate, active business. Overall, the site demonstrates a mature digital presence suitable for a large enterprise in the manufacturing and construction sector.

P

Paneles ACH

panelesach.com

0

Paneles ACH is a Spanish manufacturing company specializing in metal sandwich panels with rock wool, offering acoustic and fire protection solutions. The company positions itself as a leader in its sector, targeting industrial and construction markets. The website is professionally designed using WordPress and Elementor, with multilingual support and cookie consent mechanisms in place. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is strong with HTTPS and security headers, but lacks explicit security policies and incident response contacts. Privacy compliance is partial, with cookie consent but no visible privacy policy or terms of service pages.

A

Acord Comú del empleats públics de l'Administració Local de Catalunya

acordcomu2015.com

0

The website 'Acord Comú del empleats públics de l'Administració Local de Catalunya' serves as an informational portal for public employees of local government entities in Catalonia with populations under 20,000. It provides content related to employment agreements and local administration labor conditions. The site is built on the Wix platform, leveraging Wix Thunderbolt framework and standard web technologies. While the site is accessible and presents relevant content, it lacks critical privacy and contact information, which impacts user trust and compliance. Security posture is moderate with HTTPS enabled but missing security headers and policies. The absence of WHOIS data raises concerns about domain legitimacy and ownership transparency, which should be addressed to improve trustworthiness and credibility.

F

Fundación Parentes

fundacionparentes.org

0

Fundación Parentes is a Spanish non-profit organization founded in 2019 focused on promoting equal opportunities through education, social cooperation, and cultural initiatives. The organization operates internationally with a network of educational entities and partners, offering consulting, training, and development projects aimed at vulnerable populations and educational institutions. The website is professionally designed using WordPress with modern SEO and performance optimizations, reflecting a mature digital presence. Security posture is good with HTTPS and some security headers, though improvements are recommended such as enabling DNSSEC and adding CSP and HSTS headers. Privacy compliance is limited due to the absence of a clear privacy policy and terms of service, though a cookie consent mechanism is implemented. Overall, the website is trustworthy and well-positioned in its sector but would benefit from enhanced transparency and security practices.

W

Witzenmann Española S.A.

witzenmann.es

0

Witzenmann Española S.A. is a large manufacturing company specializing in flexible metal elements, including flexible metal hoses, expansion joints, bellows, pipe supports, and automotive and aerospace components. The company operates globally with a strong presence in multiple countries and offers tailored engineering solutions for various industrial sectors such as automotive, aerospace, energy, and building technology. Their website reflects a professional and comprehensive digital presence with multilingual support and detailed product and solution offerings. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and integrates a consent management platform (Usercentrics) and Google Tag Manager for analytics and tracking. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. However, some security headers are not explicitly detected, and there is no visible security.txt or vulnerability disclosure page. Security posture is moderate to good, with HTTPS enforced and cookie consent mechanisms in place. The absence of explicit security policies or incident response contacts is a minor gap. No vulnerabilities or suspicious content were detected. The WHOIS data is unavailable due to registry restrictions, but the website's professionalism and global footprint strongly indicate legitimacy. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations. Strategic recommendations include enhancing security headers, publishing explicit security policies, and adding vulnerability disclosure information to further improve trust and security posture.

U

Universitat Pompeu Fabra

upf.edu

0

Universitat Pompeu Fabra (UPF) is a well-established public university based in Barcelona, Spain, founded in 1990. The website presents a comprehensive digital presence with detailed information about academic programs, research activities, and university services targeting students, researchers, alumni, and other stakeholders. The site uses modern web technologies including Liferay CMS, React, and Usercentrics for privacy compliance, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and content security policies, although explicit security policies and incident response contacts are not published. The absence of WHOIS data for the www.upf.edu subdomain is a notable anomaly but does not detract from the overall legitimacy of the site. Strategic recommendations include enhancing security transparency and verifying domain registration details.

P

Pimec

pimec.org

0

Pimec is a well-established association representing micro, small, and medium enterprises in Catalonia, Spain. Founded in 2001, it serves as a regional SME representative organization providing support and advocacy for its members. The website is professionally designed using WordPress CMS and includes multilingual support and SEO optimization. The technical infrastructure includes modern plugins and Cloudflare DNS services, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, though there is room for improvement in security headers and published security policies. The domain registration is consistent and trustworthy, reflecting the organization's long-standing presence. Overall, the website is a credible and professional platform for SME representation in Catalonia.

C

Cambra de Comerç de Terrassa

cambraterrassa.org

0

Cambra de Comerç de Terrassa is a regional chamber of commerce focused on supporting economic development and business growth in the Terrassa region of Spain. The website presents a professional and consistent brand image, offering business support services and entrepreneurial development initiatives. The target audience primarily includes local businesses and entrepreneurs seeking economic development assistance. The business model revolves around providing services and support to foster regional economic growth. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, supplemented by WooCommerce for e-commerce capabilities. It integrates several analytics and marketing tools including Matomo, Google Tag Manager, Hotjar, and LinkedIn Insight. The site is hosted by Entorno Digital, S.A., with a domain registered since 2005, indicating a mature and stable online presence. Performance and mobile optimization are good, with basic accessibility and SEO optimizations in place. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, alongside a GDPR-compliant cookie consent mechanism. However, explicit security headers and a published security policy or incident response contact are absent, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with no explicit privacy policy or terms of service found in the analyzed content. Overall, the website is trustworthy and professional, with a solid business credibility score. The main risks relate to the absence of explicit security policies and limited contact information. Strategic recommendations include enhancing security headers, publishing a security and privacy policy, and providing clear contact channels for security incidents to improve trust and compliance.

C

Cambra de Comerç de Barcelona

cambrabcn.org

0

Cambra de Comerç de Barcelona is a well-established chamber of commerce serving the business community in Barcelona and Catalonia. Founded in 2001, it operates as a non-profit organization providing business support, training, networking, and advocacy services. The website reflects a professional and consistent brand image targeting local businesses and entrepreneurs. The organization maintains a strong market position as a key regional business entity. Technically, the website is built on WordPress with modern plugins such as Gravity Forms, WooCommerce, and Yoast SEO, indicating a mature digital infrastructure. The site is moderately performant, mobile-optimized, and includes standard SEO and accessibility features. Hosting is provided by Nominalia Internet SL, a reputable registrar and hosting provider. From a security perspective, the site enforces HTTPS, uses security headers, and integrates Google reCAPTCHA to protect forms. However, DNSSEC is not enabled, and there is no publicly available security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy, professional, and secure with minor areas for improvement in security transparency and DNS security. The domain registration data supports the legitimacy and long-standing presence of the organization.

The Major Cities Public Finance Project website serves as an academic and governmental platform focused on the comparative study of financing major cities internationally. It is affiliated with reputable institutions such as Fundació Carles Pi i Sunyer, the Barcelona City Council, and Universitat Pompeu Fabra, indicating a non-profit research orientation. The site provides informational content and an interactive map (using deprecated Flash technology) to support its mission of fostering information exchange among participating cities. Technically, the website is basic and outdated, relying on legacy Flash content and lacking modern web development practices such as mobile responsiveness and accessibility features. There is no evidence of HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating low digital maturity and compliance with current web standards. From a security perspective, the site shows weaknesses including the use of deprecated technologies and absence of visible security best practices. The malformed WHOIS data limits the ability to verify domain legitimacy fully, although the external links to credible institutions lend some trust. No contact information or incident response channels are provided, which reduces transparency and user trust. Overall, the website is functional for informational purposes but requires significant modernization and security improvements to meet current standards and enhance trustworthiness.

S

Saint-Gobain España

saint-gobain.es

0

Saint-Gobain España operates as the Spanish branch of the global Saint-Gobain group, specializing in manufacturing and distributing construction materials and sustainable building solutions. The website reflects a mature enterprise with a strong focus on sustainability, innovation, and market leadership in Spain. The digital presence is professional, well-structured, and optimized for multiple devices, targeting construction professionals and stakeholders interested in sustainable construction. Technically, the website is built on Drupal 10, leveraging modern analytics and tracking tools such as Google Tag Manager and Microsoft Clarity. The site employs HTTPS and cookie consent mechanisms, indicating compliance with privacy regulations like GDPR. However, explicit security headers and a published security policy are absent, representing an area for improvement. Security posture is solid with no evident vulnerabilities or exposed sensitive data, but the lack of incident response contact information and vulnerability disclosure mechanisms suggests room for enhancement in security transparency and readiness. Overall, the website is trustworthy, with strong brand consistency and multiple trust signals including official social media accounts and comprehensive privacy policies. Recommendations include adding security headers, publishing a security policy and incident response contacts, and implementing a vulnerability disclosure program to further strengthen security posture and stakeholder trust.

F

Fundació Carles Pi i Sunyer d'estudis autonòmics i locals

pisunyer.org

0

Fundació Carles Pi i Sunyer d'estudis autonòmics i locals is a well-established non-profit academic foundation focused on research and promotion of knowledge in local government and autonomous communities in Spain. Founded in 1986, it serves an audience of academics, researchers, and local government professionals through research projects, publications, and archival resources. The website reflects a consistent and professional brand with clear navigation and relevant content primarily in Catalan. Technically, the site uses legacy technologies such as jQuery 1.10.2 and Google reCAPTCHA for form security. Hosting and DNS are managed through reputable providers, but the absence of DNSSEC and outdated libraries present moderate technical risks. The site is moderately optimized for mobile and accessibility, with good SEO practices. Security posture is moderate with HTTPS enforced and clientTransferProhibited domain status, but lacks modern security headers and uses an outdated JavaScript library with known vulnerabilities. No formal security or incident response policies are published. Privacy compliance is basic with a privacy/legal notice present but no cookie consent mechanism detected. Overall, the website is trustworthy and professional but would benefit from technical and security updates to improve resilience and compliance. Strategic improvements in security headers, library updates, and privacy mechanisms are recommended to enhance the security posture and user trust.

F

Federació de Municipis de Catalunya

fmc.cat

0

Federació de Municipis de Catalunya is a well-established non-profit association founded in 2006, representing municipalities and local entities in Catalonia, Spain. The organization focuses on defending and promoting local autonomy, providing training, information, and various services to its members. The website reflects a professional and consistent brand image with clear contact information and active social media presence, positioning it as a trusted regional federation in the government sector. Technically, the website is built on ASP.NET with modern front-end technologies including Bootstrap 5 and jQuery. It uses Google Analytics for visitor tracking and implements a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and demonstrates good SEO and accessibility basics, although some improvements in security headers and accessibility could be made. From a security perspective, the site uses HTTPS with a good SSL configuration and avoids exposing sensitive data. However, it lacks explicit security policies and incident response contact information. The WHOIS data confirms the domain's legitimacy and consistency with the organization's claims, enhancing trustworthiness. Overall, the website is secure, compliant, and professionally maintained, suitable for its target audience of local government entities. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen its security posture and user experience.

B

Brand Corner

brandcorner.es

0

Brand Corner is a family-owned industrial group established in 1987 with a broad international presence. The company operates across multiple sectors including lighting, furniture, construction, sanitary materials, gas and petroleum, packaging, small appliances, security closures, and plastic injection. The website reflects a professional corporate identity with clear branding and links to multiple subsidiary companies, indicating a diversified business model and established market position in manufacturing and industrial sectors. Technically, the website is built on WordPress using modern plugins such as Elementor and Slider Revolution, with GDPR compliance implemented via a cookie consent plugin. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The lack of public WHOIS data is due to registrar restrictions common for .es domains and does not detract significantly from trustworthiness. Overall, Brand Corner presents a mature digital presence with good privacy compliance and a clear business focus. The absence of phone contact and security policy pages are minor gaps. The website is safe for general audiences and does not contain adult or questionable content.

A

AdgravityGroup S.L

neural.one

0

Neural.ONE is a small technology company based in Spain, operated by AdgravityGroup S.L, specializing in AI-powered marketing attribution solutions. Their website presents a professional and consistent brand image focused on delivering real-time marketing insights to optimize campaign ROI. The company targets marketing professionals and businesses seeking advanced attribution analytics. Technically, the website is built on the Squarespace platform, leveraging modern web technologies including Google reCAPTCHA for bot protection and Google Fonts for typography. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is strong with HTTPS and HSTS enabled, though DNSSEC is not configured. Privacy compliance is basic, with a cookie policy and consent mechanism present but lacking a published privacy policy or terms of service. No direct contact information or incident response details are publicly available, which limits transparency. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

F

Falck España

falck.es

0

Falck España operates as a regional branch of the Falck Group, specializing in healthcare, emergency, and safety services. The website reflects a professional presence with a focus on user experience and compliance with cookie consent regulations. The technical infrastructure leverages modern technologies such as Microsoft ASP.NET, Citrix, Azure Application Insights, and Google Tag Manager, indicating a mature digital environment. Security posture is adequate with HTTPS and monitoring tools in place, though improvements in security headers and explicit privacy policies are recommended. The absence of accessible WHOIS data limits full domain legitimacy assessment, but the website content and linked domains support a trustworthy business identity.

C

C.O.P.C.A. Consorci De Promocio Comercial De Catalunya

een.cat

0

Enterprise Europe Network Catalunya is a regional branch of the EU's Enterprise Europe Network, providing comprehensive business support services to SMEs, startups, and scaleups in Catalonia. The organization offers a wide range of services including innovation support, internationalization assistance, and access to European funding programs. The website reflects a professional and consistent brand aligned with the European Commission's network objectives. Technically, the site is built on the Liferay CMS platform, leveraging modern web technologies and frameworks such as Bootstrap and jQuery, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and consent management implemented, although some security headers could be improved and a formal security policy is absent. Overall, the domain registration data aligns well with the business entity, supporting legitimacy and trustworthiness.