Security Directory

T

The International Network for Quality Assurance Agencies in Higher Education (INQAAHE)

inqaahe.org

0

INQAAHE is a globally recognized non-profit network dedicated to quality assurance in higher education, serving over 300 member organizations worldwide. The website reflects a mature digital presence built on WordPress with modern plugins and technologies, offering rich content including membership information, professional development, research, events, and news. The site is well-structured, mobile-optimized, and professionally branded, targeting quality assurance agencies and higher education stakeholders globally. Security posture is solid with HTTPS and secure form handling, though security headers and incident response policies are absent. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks cookie consent mechanisms. WHOIS data is unavailable, limiting domain trust verification, but the website content and contact information support legitimacy. Overall, the site demonstrates a strong professional and educational focus with room for security and privacy enhancements.

R

rapidmail

rapidmail.es

0

rapidmail.es is a professional email marketing SaaS platform focused on newsletters, transactional emails, and marketing automation, targeting businesses and e-commerce operators primarily in Spain and other European markets. The website demonstrates a solid market position with over 80,000 customers and strong trust indicators such as certifications and customer testimonials. The technical infrastructure uses modern web technologies and analytics tools, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks some security headers and formal vulnerability disclosure mechanisms. Privacy compliance is limited by the absence of explicit privacy and cookie policies on the main page. Overall, the site is professional and trustworthy but could improve transparency and security practices.

T

Turismo Asturias

turismoasturias.es

0

Turismo Asturias operates the official regional tourism portal for Asturias, Spain, providing comprehensive information on natural landscapes, cultural heritage, gastronomy, and travel planning. The website targets tourists and visitors interested in exploring Asturias, offering multi-language support and detailed content to facilitate trip organization. Technically, the site is built on the Liferay CMS platform, leveraging modern JavaScript libraries such as jQuery, AUI, and Senna.js for SPA capabilities, with integrations for Google Analytics and Facebook social features. The site demonstrates good mobile optimization and SEO practices, although accessibility could be improved. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and incident response disclosures. WHOIS data confirms domain legitimacy consistent with an official government tourism entity. Overall, the site is professional, trustworthy, and well-positioned to serve its audience effectively.

A

APSL Tech

apsl.net

0

APSL Tech is a Spanish technology company specializing in custom web development using Python, Django, React, and Vue, with a strong focus on cloud systems and AI-driven solutions. As an AWS partner, they provide cloud architecture, data management, AI automation, and agile product development services. Their market position is reinforced by partnerships with notable clients and institutions, and a parent company relationship with Nagarro. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content relevant to their business domain. Technically, the website leverages modern frameworks and cloud platforms, primarily AWS and Google Cloud, with a responsive design optimized for mobile devices. The use of Bootstrap and JavaScript libraries supports a good user experience. Performance is moderate, with room for optimization. Security practices include HTTPS enforcement, CSRF protection, and cookie consent mechanisms, although DNSSEC is not enabled and some security headers could be improved. From a security standpoint, APSL Tech demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Incident response and security policies are documented and accessible. The domain registration is consistent with the business profile, enhancing trustworthiness. Overall, APSL Tech presents a low-risk profile with a professional and secure online presence. Strategic recommendations include enabling DNSSEC, enhancing security headers, and conducting regular security audits to maintain and improve their security posture.

A

Asturias Paraíso Natural Film Commission

filmcommissionasturias.com

0

Asturias Paraíso Natural Film Commission is a regional entity dedicated to facilitating audiovisual production in Asturias, Spain. The website offers comprehensive information on filming locations, permits, professional directories, subsidies, and industry news, targeting audiovisual professionals, property owners, and producers. The site is well-branded and consistent with its official regional government affiliation, although WHOIS data is missing, raising questions about domain registration legitimacy. Technically, the site uses Liferay CMS with modern JavaScript libraries and frameworks, providing a responsive and user-friendly experience. Security posture is strong with HTTPS and security headers, but lacks published security policies and incident response contacts. Privacy compliance is good with cookie consent and GDPR-aligned policies. Overall, the site is professional and trustworthy but would benefit from clarifying domain registration and enhancing security transparency.

E

El Tiempo

eltiempo.es

0

El Tiempo is a prominent weather forecasting website primarily serving Spain and international users with detailed meteorological data and forecasts for over 200,000 cities. The site operates on an advertising-supported model, leveraging multiple ad networks and tracking technologies while implementing consent management via the Didomi SDK. The technical infrastructure includes modern JavaScript frameworks, CDN hosting, and integration with analytics and marketing tools, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements can be made by adding security headers and publishing explicit privacy and security policies. Overall, the website is professional, trustworthy, and well-positioned in the media sector for weather information.

D

Digival.es

digival.es

0

Digival.es is a well-established Spanish technology service provider specializing in domain registration, professional web hosting with SSD NVMe technology, WordPress optimized hosting, VPS servers, professional email solutions, web design, e-commerce development, and SEO services. With 25 years of experience and official accreditation as a .es domain registrar, Digival.es holds a strong market position serving businesses and individuals in Spain. The website is professionally designed, content-rich, and optimized for SEO and mobile devices, reflecting a mature digital presence. The technical infrastructure leverages modern JavaScript libraries, Google Tag Manager, Google Analytics, and live chat support, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and reCAPTCHA integration, though some security headers and explicit security policies are absent. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact channels. Recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen security and compliance.

S

SHOW2BE

show2be.com

0

SHOW2BE is a newly established (2023) Spanish company specializing in global trade fair operations and marketing solutions. The company positions itself as an innovative operator focusing on B2P (Business-to-People) event ecosystems, leveraging creativity, technology, and strategic alliances to serve industries and professionals. The website reflects a professional and modern digital presence with multimedia content, clear navigation, and comprehensive information about services and team members. Technically, the site uses modern JavaScript libraries, Google Tag Manager, Facebook Pixel, and cookie consent management, indicating a mature digital marketing infrastructure. Security posture is adequate with HTTPS and domain protection statuses, but lacks visible security policies or incident response contacts. Privacy compliance is strong with clear cookie and privacy policies. Overall, the website is trustworthy, well-branded, and professionally executed, suitable for its target audience in the trade fair and marketing sectors.

A

AR-PA Turismo cultural

arpaturismocultural.es

0

AR-PA Turismo cultural is a well-established cultural heritage fair organized by the Junta de Castilla y León in Spain, focusing on cultural heritage, innovation, and professional networking. The website is professionally designed using WordPress with Elementor and various plugins, providing a rich user experience with multimedia content and clear navigation. The technical infrastructure is modern and includes SEO and GDPR compliance tools, although a dedicated privacy policy page is not explicitly found. Security posture is good with HTTPS and no visible vulnerabilities, but security headers could be improved. WHOIS data is restricted due to Red.es policies, which is common for .es domains, but the website's content and branding strongly support its legitimacy. Overall, the site is credible, secure, and serves its target audience effectively.

D

DEMO8

mercartes.es

0

Mercartes is a professional event and online platform dedicated to the performing arts and music sectors in Spain. It facilitates networking, business meetings, and sector promotion through an annual event and digital tools such as a professional catalog and private user areas. The website is built on WordPress with a modern theme and plugins, including SEO and cookie consent management. The technical infrastructure is standard for event websites, with multimedia content and mobile optimization. Security posture is adequate with HTTPS and cookie consent, but lacks advanced security headers and explicit privacy policies. No WHOIS data is available due to query restrictions, limiting domain legitimacy assessment. Overall, the site is professional and trustworthy for its target audience.

F

Feria Outlet Valladolid

feriaoutletvalladolid.com

0

Feria Outlet Valladolid is a Spanish event organizer specializing in retail outlet fairs offering discounts up to 80% on major brands. The website serves as an information portal for upcoming events, galleries, and participation details, targeting local consumers interested in discounted shopping experiences. The business is relatively new, founded in 2022, and operates primarily in the retail and hospitality sectors within Spain. Technically, the site is built on WordPress using Elementor, with integration of common web technologies such as jQuery and Bootstrap, and hosted behind Cloudflare DNS services. The site demonstrates good digital maturity with structured data, SEO optimization, and mobile responsiveness. Security posture is adequate with HTTPS enforced and GDPR cookie compliance implemented, though additional security headers and DNSSEC could improve resilience. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though lacking explicit contact emails and terms of service pages.

S

SCOUT AND FILM TEAM S.L.

scoutters.com

0

Scoutters is a specialized SaaS platform launched in 2024, focused on providing cloud-based location scouting and project management tools for the film and production industry. The platform offers AI-powered tagging and search capabilities, enabling users to organize and share location data securely. The company targets location managers, production companies, film commissions, and agencies, positioning itself as a niche player with a collaborative hub to enhance industry synergies. Technically, the website uses modern frameworks like Bootstrap and Django, hosted on AWS, with good mobile optimization and basic accessibility features. Security measures include HTTPS, CSRF protection, and Google reCAPTCHA, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

F

Feria de Valladolid

feriavalladolid.com

0

Feria de Valladolid operates as a regional event venue and organizer based in Valladolid, Spain, hosting a variety of trade fairs, congresses, and public events across multiple sectors including technology, wine, tourism, and sports. The website serves as a comprehensive portal for event information, ticket sales, and venue details, targeting businesses and the general public interested in these events. The company is well-established with a domain age dating back to 1999, indicating a mature presence in the market. Technically, the website is built on WordPress with a modern plugin ecosystem including EventON for event management, Slider Revolution for visual content, and integrations with social media platforms and analytics tools such as Google Analytics and Facebook SDK. The site is hosted with DNS managed by Cloudflare and secured with HTTPS, although DNSSEC is not enabled. Performance and mobile optimization are good, with a professional design and clear navigation. From a security perspective, the site employs HTTPS and has domain transfer protections in place, but lacks advanced security headers and DNSSEC, which are recommended for enhanced security. Privacy compliance is partially addressed with a cookie consent banner, but no explicit privacy policy or terms of service are found on the homepage. Contact information is clearly provided, enhancing business credibility. Overall, Feria de Valladolid presents a professional and trustworthy online presence with room for improvement in security hardening and privacy policy transparency. Strategic enhancements in these areas would strengthen user trust and compliance posture.

P

Production Paradise

productionparadise.com

0

Production Paradise operates as a leading online directory and showcase platform dedicated to commercial creatives in the film, photography, and post-production industries. The website offers curated resources including member directories, spotlight and showcase magazines, image search, and location finder tools, targeting commercial creatives and service providers globally. The business model is subscription-based, providing visibility and marketing opportunities to its members. The company is established since 2003 and appears to be headquartered in Spain, with a medium-sized market presence and a strong brand identity. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Twitter Ads. The site is mobile-optimized with good accessibility and SEO practices. Security measures include HTTPS enforcement and use of Google reCAPTCHA Enterprise, though some security headers are not explicitly present, suggesting room for improvement. From a security perspective, the site demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy verification, which should be addressed to enhance trust. Overall, Production Paradise presents a professional, trustworthy, and well-maintained digital presence with comprehensive content and strong business credibility. Strategic recommendations include improving security headers, verifying domain registration details, and enhancing incident response transparency to further strengthen security and compliance.

Financecommunity ES is a Spanish-language finance and corporate news media platform operated by LC Publishing Group. It targets finance professionals and stakeholders interested in banking, corporate finance, and related sectors. The website offers news, magazine publications, and sector insights, positioning itself as a niche media outlet within the Spanish and Latin American finance community. Technically, the site is built on WordPress using Elementor, with a modern tech stack including jQuery, Bootstrap, and Google Fonts. It employs a GDPR-compliant cookie consent mechanism and integrates Google Analytics for visitor tracking. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The WHOIS data is not publicly accessible due to registry restrictions for .es domains, but the website content and partner links indicate legitimacy. Overall, the site is professional, well-branded, and trustworthy, with good SEO and user experience.

U

Unblockia

unblockia.com

0

Unblockia is a technology company specializing in monetizing adblock traffic for publishers by displaying Acceptable Ads, thereby recovering lost advertising revenue. The company targets both publishers and advertisers, offering a platform that integrates easily with websites and provides reporting dashboards for performance tracking. Their market position is that of a leading solution in the niche of adblock traffic monetization, supported by partnerships with reputable publishers and compliance with industry standards such as the Acceptable Ads Standard and IAB Europe TCF v2.0. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as Swiper.js and Rellax.js for UI effects. It uses Google Analytics for tracking and Cloudflare for DNS services. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and DNSSEC implementation. From a security perspective, the site enforces HTTPS and has domain status protections to prevent unauthorized changes. However, it lacks DNSSEC and explicit security headers, which are recommended for enhanced security. No public security policy or incident response information is available, and no vulnerability disclosure or security.txt file was found. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, Unblockia presents a professional and trustworthy online presence with a clear business focus and good technical implementation. Security posture is adequate but could be improved with additional measures. The site is safe for general audiences and does not contain any adult or questionable content.

Mercedes-Benz España, S.A.U. operates the official Spanish website for Mercedes-Benz, a leading luxury automotive brand. The company offers a wide range of vehicles including sedans, SUVs, coupes, and digital services such as Mercedes me and MB.DRIVE. The website also supports after-sales services and financial products through subsidiaries like Mercedes-Benz Bank AG. The brand holds a strong market position in Spain and globally, targeting general consumers interested in premium vehicles and related services. The website is professionally designed, mobile-optimized, and provides comprehensive legal and privacy information in compliance with GDPR.

The website www.energiarenovable.com is an informational platform focused on renewable energy topics such as solar, wind, hydro, bioenergy, geothermal, and marine energy. It targets a general audience interested in sustainable energy solutions and provides educational content along with news and financing information. The site is managed by a French team based in Spain and monetizes through advertising networks. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, Google Fonts, and integrates Google Adsense and StatCounter for ads and analytics. A consent management platform is implemented to comply with GDPR cookie consent requirements. However, the site lacks explicit privacy policy and terms of service pages, and no direct contact information is provided, which impacts trust and compliance perception. Security posture is basic with no visible security headers and unknown SSL status due to lack of header data. The WHOIS data is unavailable, indicating either an unregistered domain or privacy protection, which reduces domain legitimacy confidence. Overall, the site is functional and safe but requires improvements in transparency, security, and business credibility to enhance trust and compliance.

P

Packhelp

packhelp.es

0

Packhelp is a leading European online platform specializing in custom packaging solutions tailored for businesses of various sizes and industries. The company offers a comprehensive range of services including custom packaging design, wholesale ordering, sourcing, warehousing, and flexible payment options. Their market position is strong, supported by a professional website with excellent content quality, clear navigation, and consistent branding. The platform targets e-commerce businesses, retailers, and other companies seeking sustainable and branded packaging solutions. Technically, the website leverages modern technologies such as Astro framework, WordPress CMS, and integrates advanced analytics and marketing tools including Google Analytics 4, HubSpot, Amplitude, and RudderStack. The site is well optimized for SEO, mobile responsiveness, and accessibility, providing a fast and user-friendly experience.

F

Fundación Cajasol

cajasol.com

0

Fundación Cajasol is a well-established non-profit cultural and social foundation based in Andalucía, Spain, with a domain age of over 17 years. The organization is led by Antonio Pulido and offers a wide range of cultural events, educational workshops, and social initiatives, including financial education programs. The website reflects a strong market position as a cultural reference in the region, targeting a general audience interested in culture and education. Technically, the site is built on WordPress with modern plugins for SEO, GDPR compliance, and security, hosted on Azure DNS infrastructure. The site is well-optimized for mobile and accessibility, with good SEO practices and rich content. Security posture is solid with HTTPS, Wordfence plugin, and cookie consent mechanisms, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and compliant with relevant regulations.

D

DonDominio

dondominio.com

0

DonDominio is a well-established domain registration and web hosting provider founded in 2006 and operated by Soluciones Corporativas IP, SL. The company offers a comprehensive suite of services including domain registration, web hosting, email accounts, and SSL certificates, targeting individuals and businesses seeking to establish an online presence. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content that supports its business model effectively. The company holds reputable certifications such as ICANN accreditation and Sectigo Platinum Partnership, enhancing its market credibility. Technically, the website employs modern web technologies including JavaScript, SVG, and CSS, delivering fast performance and good accessibility. The presence of Matomo analytics indicates a moderate level of user tracking with privacy considerations. Security posture is strong with HTTPS enforced and secure form practices, although visible security headers are lacking. Privacy compliance is supported by a comprehensive privacy policy and terms of service, but the absence of a cookie consent mechanism is a minor gap. From a security perspective, no major vulnerabilities or exposed sensitive data were detected. Incident response contact is available via an abuse policy page, but explicit security policy documentation and data protection officer contacts are missing. The WHOIS data for the domain is unavailable, which is inconsistent with the active and professional website presence, slightly reducing trustworthiness. Overall, the site is safe, professional, and trustworthy with minor areas for improvement in security transparency and privacy mechanisms. Strategic recommendations include implementing security headers, adding cookie consent, publishing a security policy, and clarifying incident response contacts to enhance trust and compliance. The domain WHOIS inconsistency should be investigated to ensure registration transparency and legitimacy.

K

Kia Canarias

kiacanarias.es

0

Kia Canarias is a regional automotive website dedicated to providing information and services related to Kia vehicles in the Canary Islands. The site offers detailed vehicle specifications, financing options, and dealership locations, targeting consumers interested in Kia automobiles within this region. The website demonstrates consistent branding aligned with the Kia corporate identity and uses modern web technologies including Nuxt.js and third-party marketing tools such as SmartSupp Chat and Evergage. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is moderate with HTTPS usage and cookie consent mechanisms in place, but lacks visible security headers and explicit privacy policies in the provided content. WHOIS data could not be retrieved due to query restrictions, but the website appears legitimate and professionally maintained. Overall, Kia Canarias presents a trustworthy and functional online presence for Kia's regional operations in Spain.

F

Fundación La Contienda Dehesa Sostenible

fundacionlacontienda.es

0

Fundación La Contienda Dehesa Sostenible is a Spanish non-profit organization dedicated to the preservation of the Iberian pig and its natural habitat, the dehesa. The foundation operates an innovative sustainable farming model and provides educational, research, and promotional services focused on this sector. The website reflects a regional leader position in sustainable agriculture within the Sierra de Aracena and Picos de Aroche natural park. Technically, the site is built on WordPress using the Divi theme, with modern web technologies and GDPR compliance mechanisms in place. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are lacking. Overall, the website is professional, trustworthy, and content-rich, targeting industry members, researchers, and the general public interested in Iberian pig farming and sustainability.

I

Instituto de Estudios Cajasol

institutocajasol.com

0

Instituto de Estudios Cajasol is a well-established business school based in Sevilla, Spain, offering professional master’s degrees, postgraduate courses, and corporate training primarily targeting professionals and students in Andalucía. The institution has a strong regional presence with a domain registered since 2006, reflecting its longevity and market position. The website is professionally designed, mobile-optimized, and rich in relevant content, supporting a positive user experience and strong SEO performance. Technically, the site leverages WordPress with popular plugins and integrates multiple marketing and analytics tools, including Google Tag Manager and Outbrain, indicating a mature digital marketing strategy. Security posture is good with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers are not explicitly detected. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms in place. Overall, the website demonstrates high business credibility and trustworthiness with clear contact information and consistent branding.

S

Selectra

selectra.es

0

Selectra is a well-established online platform specializing in helping consumers and businesses in Spain save money on utility bills such as electricity, gas, internet, mobile, alarms, insurance, and solar energy. The company positions itself as a trusted advisor with a large user base and multiple service offerings, supported by a professional and user-friendly website. The technical infrastructure is modern, leveraging Drupal CMS, Google Analytics, and other contemporary web technologies, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

C

Cortijo Social Media

cortijosocialmedia.com

0

Cortijo Social Media is a Spanish communication agency established since 1996, offering services including public relations, event organization, audiovisual production, branding, and communication consulting. The website presents a professional image with clear navigation and good content quality, targeting institutions and companies seeking communication support. Technically, the site is built on WordPress with Bootstrap and jQuery, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks security headers and explicit privacy or incident response policies. The absence of WHOIS data and domain registration transparency raises concerns about domain legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

E

Enreda SCA

enreda.coop

0

Enreda SCA is a Spanish cooperative specializing in social transformation through digital participation, OpenData, and product design and development. The company targets public and private institutions seeking to enhance citizen participation, transparency, and sustainability. With over a decade of experience and certification from the Consul Democracy Foundation, Enreda holds a credible market position in the technology and non-profit sectors. Their key services include citizen participation processes, digital participation software, transparency and data visualization, and sustainability consulting. Technically, the website is built using the Eleventy static site generator, leveraging modern JavaScript modules and libraries such as Lunr.js for search and Plausible Analytics for privacy-focused user tracking. Hosting is provided by DigitalOcean, indicating a reliable infrastructure. The site is mobile-optimized with good SEO practices and fast performance, though accessibility features are basic. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks DNSSEC, security headers, and published security policies or incident response contacts, which are areas for improvement. Privacy compliance is limited due to the absence of privacy and cookie policies, which could pose regulatory risks. Overall, the website is professional, trustworthy, and content-rich, but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

F

Fundación Cajasol

fundacioncajasol.com

0

Fundación Cajasol is a well-established non-profit cultural and social foundation based in Andalucía, Spain, founded in 2006. It offers a broad range of cultural events, educational programs, and social initiatives, positioning itself as a key regional player in these sectors. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to a general audience interested in culture and education. Technically, the site is built on WordPress, hosted on Microsoft Azure DNS infrastructure, and employs common security and compliance plugins such as Wordfence and GDPR Cookie Compliance. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness.

T

TPF

tpfingenieria.com

0

TPF is a large, international multidisciplinary engineering consultancy headquartered in Spain, with a presence in over 45 countries through multiple subsidiaries. The company offers a broad range of engineering services including consultancy, design, asset management, project supervision, and quality control, targeting businesses and public sector clients. Their market position is strong, supported by a diversified portfolio and global reach. Technically, the website is built on Drupal 10, uses modern JavaScript libraries such as jQuery and GSAP, and integrates privacy-conscious analytics via Plausible. The site is mobile-optimized and accessible, with good SEO practices. However, some security best practices such as DNSSEC and security headers are missing. Security posture is moderate with HTTPS enabled and no visible vulnerabilities, but lacks explicit security policies and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Overall, the website is professional and trustworthy, but improvements in privacy compliance and security hardening are recommended to enhance user trust and regulatory adherence.

Domstocks is a small Spanish-based technology company specializing in the sale of expired quality domains for SEO and branding purposes. Their website offers a professional and user-friendly platform targeting SEO professionals, domain investors, and digital marketers. The business model focuses on providing fixed-price expired domains with clean histories and SEO metrics, supported by alert services and domain selection assistance. Technically, the website uses legacy JavaScript libraries such as jQuery 1.8.3 and Owl Carousel, with moderate performance and good mobile optimization. Security posture is limited due to lack of security headers, outdated libraries, and absence of privacy and cookie policies. Analytics is minimal, relying on Statcounter. Overall, the site is professional but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

Domstocks is a small technology-focused business specializing in the sale of expired quality domains with SEO value, brandable domains, and exact match domains. The company targets SEO professionals, domain investors, and digital marketers, offering fixed-price domain sales and domain selection services. The website is hosted on DreamHost and uses a basic technology stack including jQuery and Owl Carousel. While the site is accessible and well-structured with good content quality, it lacks key privacy and cookie policies and uses outdated JavaScript libraries, which may pose security risks. No security headers or incident response information are present, and SSL configuration details are not confirmed. Overall, the domain registration data is consistent and legitimate, supporting the business claims. The site uses minimal tracking via Statcounter and does not contain adult or questionable content.

Domstocks.es is a Spanish-based small business specializing in the sale of expired domains with strong SEO metrics, brandable names, and exact match domains (EMD). The company targets digital marketers, SEO professionals, and domain investors seeking quality domains for website creation, PBNs, or link selling. The business model focuses on fixed-price sales without auctions, providing alerts and personalized domain selection services. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technical infrastructure includes legacy JavaScript libraries such as jQuery 1.8.3 and Owl Carousel, with Google Fonts for typography. While the site is mobile-optimized and SEO-friendly, some modernization is recommended.

The website domstocks.asia operates as a specialized platform offering expired domain names primarily for SEO purposes. It targets SEO professionals, website builders, and link sellers, providing a curated selection of domains with good SEO metrics and no spam history. The business model focuses on fixed low pricing without auctions, aiming to serve a broad international clientele, especially in France and Spain. The site content is presented mainly in Chinese with some French, reflecting a multilingual approach to reach diverse markets. Technically, the site uses modern front-end frameworks such as Bootstrap and Material Design Bootstrap, ensuring a responsive and visually appealing user experience. However, the site lacks a CMS indication and detailed hosting information. Security-wise, HTTPS is enabled but lacks advanced security headers and policies, and no incident response or vulnerability disclosure information is provided. The absence of privacy and cookie policies indicates compliance gaps, particularly regarding GDPR. WHOIS data is unavailable due to malformed queries, limiting trust and transparency regarding domain registration details. Overall, the site is functional and professional but requires improvements in security, privacy compliance, and transparency to enhance trust and reduce risk.

M

Meteored

tiempo.com

0

Tiempo.com, operated by Meteored, is a well-established Spanish-language weather information portal offering detailed 14-day forecasts, meteorological news, videos, and weather alerts. The site targets a broad general audience interested in weather updates primarily in Spain and other Spanish-speaking regions. It maintains a strong digital presence with mobile applications across Android, iOS, Huawei, and Windows platforms, and integrates social media channels to engage users. Technically, the website employs modern web technologies including asynchronous JavaScript bundles, Google Tag Manager, header bidding for advertising, and Cloudflare for performance and security. The site is optimized for desktop and mobile devices, with good SEO and accessibility practices. Privacy compliance is robust, featuring GDPR-compliant cookie consent mechanisms and detailed privacy policies. From a security perspective, the site enforces HTTPS and uses standard security practices, though explicit security headers are not fully confirmed. No vulnerabilities or exposed sensitive data were detected in the analyzed content. However, the absence of WHOIS registration data raises concerns about domain registration transparency, which could impact trustworthiness. Overall, Tiempo.com presents a professional and trustworthy weather service with strong content and technical maturity. The main risk lies in the lack of visible domain registration information, which should be addressed to enhance credibility and compliance.

N

NH HOTEL GROUP, S.A.

nh-collection.com

0

NH Collection Hotels, operated by NH HOTEL GROUP, S.A., is a large international hospitality brand offering premium hotel accommodations across more than 100 hotels in 24 countries. The website targets travelers and business customers seeking quality lodging in major cities such as Madrid, Milan, and Barcelona. The business model focuses on direct online bookings, reservation management, and customer loyalty programs. The brand maintains consistent and professional digital presence with multilingual support and clear navigation.

A

Appvizer

appvizer.es

0

Appvizer is a professional media and software comparison platform primarily serving Spanish-speaking business users. It offers AI-driven recommendations to help companies find suitable SaaS tools, supported by expert content and user reviews. The platform is well-positioned in the technology and media sectors, targeting professionals seeking software solutions. Technically, the site uses modern frameworks such as React and Astro, integrates Google Tag Manager and Microsoft Clarity for analytics, and follows good SEO and accessibility practices. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, though WHOIS data is restricted due to .es domain policies. Strategic recommendations include publishing security and incident response policies, adding vulnerability disclosure mechanisms, and enhancing direct contact information for security concerns.

Museoteca is a specialized online platform dedicated to showcasing museums, artists, and featured artworks, primarily targeting art enthusiasts and cultural audiences. The website offers curated content including museum information, artist profiles, and galleries of artworks, supported by interactive features such as search autocomplete and carousel displays. The platform is positioned as a niche cultural information portal with a small business scale and a focus on European and international art institutions. Technically, the website employs a traditional web stack with jQuery, Owl Carousel, FlexSlider, and integrates Google Analytics and Facebook SDK for tracking and social media connectivity. Hosting is provided by Acens Technologies, S.L.U., a Spanish registrar and hosting provider. The site demonstrates moderate performance and basic mobile optimization but lacks advanced accessibility and SEO features. From a security perspective, the site uses HTTPS (assumed), has a cookie consent mechanism, but lacks DNSSEC and security headers, which are recommended for enhanced protection. No explicit security policies or incident response contacts are provided, indicating room for improvement in security maturity. Privacy compliance is basic, with a privacy policy and cookie policy present but lacking detailed GDPR adherence statements. Overall, Museoteca presents a professional and trustworthy online presence with good content quality and business credibility. However, it would benefit from enhanced security practices, improved privacy compliance, and more comprehensive contact information to strengthen user trust and regulatory alignment.

R

Red Española de Ciudades por el Clima

redciudadesclima.es

0

The Red Española de Ciudades por el Clima website serves as an official platform for a Spanish government-affiliated network focused on local climate change policies. It provides resources, news, projects, and events to support municipalities in their climate action efforts. The site is well-branded, professionally designed, and targets local governments and stakeholders interested in environmental policy. Technically, it is built on Drupal 8 with common web libraries and includes modern UI components like Swiper.js and cookie consent management. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks visible advanced security headers and incident response information. The site is fully accessible without WAF or blocking mechanisms, indicating good operational status. Overall, the website is trustworthy and credible, though WHOIS data is unavailable due to query restrictions, which is common for .es domains. Strategic improvements in security headers and incident response disclosures are recommended.

L

Lopesan Hotel Group

lopesan.com

0

Lopesan Hotel Group operates a well-established hospitality business focused on providing hotel and resort accommodations primarily in Spain. The website serves as the official online presence for the group, offering booking capabilities and showcasing their unique destinations and services. The company has a strong market position with a domain age of over 25 years, indicating stability and trustworthiness. Technically, the website leverages modern web technologies including React and Liferay CMS, ensuring a robust and scalable platform. The site is mobile optimized and performs moderately well, with good SEO practices in place. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is partially addressed with a cookie consent mechanism but lacks explicit privacy and terms of service documentation. Overall, the website is professional, trustworthy, and suitable for its target audience of travelers and tourists.

F

Festival de Sevilla

festivalcinesevilla.eu

0

Festival de Sevilla is a well-established European film festival based in Sevilla, Spain, with a strong cultural and media focus. The website serves as a comprehensive platform for festival information, programming, news, and educational initiatives, targeting film enthusiasts, professionals, and the general public. The festival enjoys solid institutional support from government and cultural organizations, enhancing its credibility and market position. Technically, the website is built on Drupal 8, leveraging modern web technologies such as Google Analytics for tracking, AddToAny for social sharing, and lazy loading for performance optimization. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. From a security perspective, the site implements basic privacy compliance with cookie consent and IP anonymization in analytics. However, it lacks advanced security headers, a published security policy, and vulnerability disclosure mechanisms. No blocking or WAF challenges were detected, and no suspicious content was found, indicating a generally secure posture but with room for improvement. Overall, the website is professional, trustworthy, and well-maintained, supporting the festival's mission and audience engagement effectively.

F

Fundación Mary's Meals Spain

marysmeals.es

0

Fundación Mary's Meals Spain is a well-established non-profit organization dedicated to combating chronic child hunger by providing daily nutritious school meals in 16 countries. The organization operates as part of the global Mary's Meals network, recognized internationally and awarded the prestigious Premio Princesa de Asturias de la Concordia 2023. Their business model relies on donations, sponsorships, and volunteer engagement to sustain impactful feeding programs that encourage education and offer hope to impoverished children. Technically, the website is built on Drupal 10, leveraging modern web technologies including Google Tag Manager and Typekit fonts. The site is well-optimized for mobile devices, accessible, and SEO-friendly, providing a professional user experience with clear navigation and comprehensive content. Privacy and cookie policies are robust, with active consent mechanisms ensuring GDPR compliance. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks publicly available security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to query restrictions, but the website's trust signals and transparent contact information support its legitimacy. Overall, the site demonstrates a strong security posture, excellent content quality, and high business credibility. Strategic recommendations include publishing formal security and incident response policies, enhancing security headers, and considering a vulnerability disclosure program to further strengthen trust and compliance.

I

Igalia, S.L.

igalia.com

0

Igalia, S.L. is a Spain-based open source consultancy specializing in innovative software development projects across multiple technology domains including browsers, multimedia, embedded Linux, and compilers. The company holds a strong market position with recognized expertise in WebKit, Chromium/Blink, Firefox, and GNU/Linux solutions, serving a global clientele. Their business model focuses on consultancy and software development services with a medium-sized organizational footprint. Technically, the website employs modern AMP HTML technology, ensuring fast performance and excellent mobile optimization. The site integrates analytics tools such as Piwik and Ahrefs, and demonstrates good SEO and accessibility practices. However, there is room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable libraries. The absence of WHOIS data is a concern for domain legitimacy but is mitigated by the professional and consistent website content and active community engagement. No forms collecting sensitive data were found, reducing privacy risks. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security policies, cookie consent, and domain registration transparency would enhance trust and compliance.

The website www.zaragozaciudad.net serves as an official municipal blog platform for the Ayuntamiento de Zaragoza, targeting local citizens with community engagement and information about city neighborhoods and municipal services. The site provides a directory of citizen blogs categorized by topics and neighborhoods, supporting local communication and participation. The business model is public sector focused, providing a platform for citizen interaction and municipal transparency. The website content is primarily in Spanish and reflects a government entity's communication channel. Technically, the website uses XHTML 1.0 and CSS 2.0 with JavaScript enhancements and integrates Google Analytics and Google Tag Manager for visitor tracking. The design is basic and somewhat dated, with limited mobile optimization and accessibility features. No modern CMS or advanced frameworks are detected. Performance is moderate, and SEO is basic with meta tags present but no advanced structured data or Open Graph tags. From a security perspective, the site uses HTTPS as inferred from script sources but lacks explicit security headers such as CSP or HSTS. No privacy or cookie policies are present, indicating GDPR compliance gaps. The WHOIS data is missing or unavailable, which is inconsistent with the active municipal content and raises concerns about domain legitimacy. No incident response or vulnerability disclosure information is published, and no security best practices beyond basic HTTPS are observed. Overall, the website is functional and serves its public sector purpose but has notable gaps in privacy compliance, security posture, and domain registration transparency. Strategic improvements in security headers, privacy policies, and WHOIS registration clarity are recommended to enhance trust and compliance.

Activa Congresos is a specialized professional congress organizer based in Spain, focusing on the organization of congresses, conventions, incentives, and events primarily in Barcelona and nationwide. The company offers tailored event management services including online events and sustainable event planning. The website reflects a small-sized, regionally focused business with a professional online presence and a clear service offering. Technically, the site is built on WordPress with common plugins and scripts, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and client testimonials support business credibility. Overall, the site is professional and trustworthy but would benefit from enhanced security and compliance measures.

S

Storck

werthers-original.es

0

Werther’s Original España is a regional brand website operated under the parent company Storck, focusing on marketing and presenting their caramel confectionery products to the Spanish market. The site offers product information, brand history, and recipe ideas, targeting general consumers interested in quality caramel sweets. The website is built on TYPO3 CMS with modern JavaScript libraries and includes internationalization support via hreflang tags for multiple countries. Privacy compliance is well addressed with a cookie consent banner and a comprehensive privacy policy. However, direct contact information and explicit security policies are not published, which could be improved. The WHOIS data is unavailable due to query restrictions, but the domain and website content align with the brand's legitimacy. Overall, the site demonstrates good technical maturity and business credibility with moderate security posture.

F

Fundación Bancaria Ibercaja

fundacionibercaja.es

0

Fundación Ibercaja is a well-established non-profit foundation based in Spain, dedicated to fostering social equality, cultural enrichment, educational development, and territorial economic growth. The organization operates multiple centers and offers diverse programs aimed at improving societal welfare and promoting sustainability aligned with the UN Agenda 2030. The website reflects a professional and consistent brand image, supported by comprehensive legal and privacy documentation, and active engagement through social media channels. Technically, the website employs modern web technologies including responsive design frameworks and JavaScript libraries such as Swiper.js and Google Analytics for user tracking and engagement analysis. The site is mobile-optimized and accessible, with good SEO practices evident in metadata and structured content. However, some security headers are not explicitly detected, and no incident response or vulnerability disclosure information is published, which could be improved. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, demonstrating compliance with GDPR requirements. No critical vulnerabilities or exposed sensitive data were found in the analysis. The absence of WHOIS data limits domain trust evaluation, but the overall digital footprint and certifications support legitimacy. Overall, Fundación Ibercaja presents a strong digital presence with a clear mission and trustworthy operations. Strategic enhancements in security transparency and WHOIS data availability would further strengthen its credibility and resilience.

E

European Congress Integrative Medicine Madrid

ecim24madrid.com

0

The website ecim24madrid.com serves as the official platform for the XVI European Congress of Integrative Medicine scheduled in Madrid in 2024. It targets healthcare professionals and researchers interested in integrative medicine, providing detailed event information, speaker profiles, and program schedules. The site is professionally designed and well-branded, reflecting a reputable event organization with international reach. Technically, it is built on WordPress with common plugins for event management and galleries, hosted by Acens Technologies, a known hosting provider. The site uses HTTPS and includes Google Analytics for visitor tracking, but lacks some privacy compliance features such as a cookie consent mechanism. Security posture is moderate with room for improvement in DNS security and security headers. Overall, the site is trustworthy and functional, supporting the event's business goals effectively.

V

VELAE LEGAL GROUP

velaelegalgroup.com

0

VELAE LEGAL GROUP is an established international full-service law firm with offices in Spain and Latin America, providing comprehensive legal services to multinational and middle market clients. The firm leverages over 40 years of combined experience from predecessor firms and is recognized by leading legal directories. The website reflects a professional and consistent brand image with clear service offerings and contact channels. Technically, the site is built on WordPress with modern plugins and SEO tools, offering good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit privacy policies. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site demonstrates strong business credibility but would benefit from enhanced privacy compliance and security best practices.

F

Fundación Estatal para la Formación en el Empleo - Fundae

fundae.es

0

Fundación Estatal para la Formación en el Empleo (Fundae) is a Spanish government-affiliated entity dedicated to supporting and collaborating with the public employment service (SEPE) in the area of workforce training. The organization provides a variety of services including training portals, subsidy management, statistical data publication, and digital competence evaluation aimed at workers and companies across Spain. The website reflects a mature digital presence with multiple language options and a clear focus on accessibility and user experience. Technically, the site is built on the Sitefinity CMS platform and leverages modern web technologies such as jQuery, Bootstrap, and Google Tag Manager. It implements cookie consent mechanisms and integrates third-party analytics and tracking tools like Metricool. The website is mobile-optimized and adheres to accessibility standards, providing a good user experience. From a security perspective, the site uses HTTPS and cookie consent but lacks visible advanced security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable due to query restrictions, but the website's official branding and government affiliation strongly support its legitimacy. Overall, Fundae's website is a professional, secure, and compliant platform that effectively serves its public service mission. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and maintaining regular audits of third-party scripts to further strengthen security posture.