Other
Yes, zara.com is generally trustworthy with a score of 92. However, there are some points of concern you should consider.
Zara.com is the official website of the well-known fashion brand Zara, but no homepage content could be retrieved.
Verisite checked zara.com on July 3, 2026 and gave it a trust score of 92/100. Out of 92 checks, 66 passed, with 14 warning(s) and 12 failed check(s).
92
/100
Trust Score
Excellent
Score incl. subdomains: 89/100
10
Passed
1
Warning
2
Failed
Security Headers
Checks HTTP security headers and cookie security configuration.
Many security headers are missing. This website is vulnerable to common attacks.
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
No exposed sensitive files or directories found.
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
No suspicious content detected on the page.
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
Valid SSL certificate found (expires 2026-11-07).
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
This domain has been registered since 1997-05-29.
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
No tracking cookies or third-party trackers detected.
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
Some business data is missing or could not be verified.
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
No reviews or trust seal found.
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
This domain was not found on any known fraud or phishing lists.
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
No outdated or vulnerable software detected.
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
Email authentication is well configured with SPF, DKIM and/or DMARC.
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
Network configuration is secure and well optimized.
DNS & Server
Checks DNS records, server information and hosting details.
DNS records are properly configured.
Security Headers
Checks HTTP security headers and cookie security configuration.
18/100
Many security headers are missing. This website is vulnerable to common attacks.
- Domain
- zara.com
- Cookies
-
- Total: 1
- Issues: ak_bmsc: missing Secure flag, ak_bmsc: missing SameSite attribute
- Secure cookies: 0
- Insecure cookies: 1
- HSTS max-age
- 31536000
- Missing headers
- Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy
- HSTS preload
- Yes
- Used browser fallback
- No
- Referrer-Policy
- No
- X-Frame-Options
- No
- HSTS includes subdomains
- Yes
- Permissions-Policy
- No
- X-Content-Type-Options
- No
- Content-Security-Policy
- No
- Strict-Transport-Security
- Yes
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
100/100
No outdated or vulnerable software detected.
- Detected CMS
-
- Name:
- Slug:
- Version:
- Detected: No
- Confidence: none
- Domain
- zara.com
- JavaScript libraries
- Pages scanned
- 2
- Vulnerable libraries
- Server technology
-
- Server:
- Powered by:
- X generator:
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
100/100
No exposed sensitive files or directories found.
- Domain
- zara.com
- Exposures
- Robots.txt analysis
-
- Exists: No
- Interesting paths:
- Paths checked
- 18
- Exposures found
- 0
- Directory listing enabled
- No
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
72/100
Email authentication is well configured with SPF, DKIM and/or DMARC.
- SPF
-
- Exists: Yes
- Policy: hardfail
- Record: v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all
- Mechanisms: include:%{ir}.%{v}.%{d}.spf.has.pphosted.com, all
- Policy label: checks.email_spf_hardfail
- Authorized senders: Proofpoint
- DKIM
-
- Found: No
- Selectors:
- DMARC
-
- Exists: Yes
- Policy: reject
- Record: v=DMARC1; p=reject;fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
- Percentage:
- Policy label: checks.email_dmarc_reject
- Has reporting: Yes
- Subdomain policy:
- Domain
- zara.com
- Authorized senders
- Proofpoint
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
100/100
This domain has been registered since 1997-05-29.
- Domain
- zara.com
- Registrar
- Nom-iq Ltd. dba COM LAUDE
- Registered
- 1997-05-29
- Age (days)
- 10627
- Expires
- 2034-05-28
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
100/100
No tracking cookies or third-party trackers detected.
- Domain
- zara.com
- Detected trackers
- Pages scanned
- 2
- Total cookies
- 1
- Third-party trackers found
- 0
- Tracking cookies
- Consent mechanism detected
- No
- Tracking cookies found
- 0
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
100/100
Network configuration is secure and well optimized.
- Domain
- zara.com
- Open ports
- HTTP version
- HTTP/2
- Mixed content domains
- Pages scanned
- 1
- Redirect chain
- http://zara.com, https://www.zara.com/
- HTTP/2 support
- Yes
- HTTP/3 support
- Yes
- Open ports found
- 0
- Redirect loop detected
- No
- Mixed content resources
- 0
- Redirect chain length
- 1
- HTTP redirects to HTTPS
- Yes
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
100/100
No suspicious content detected on the page.
- Domain
- zara.com
- Cryptominer scripts
- Pages scanned
- 2
- External form domains
- External script sources
- Obfuscation patterns
- 0
- Cryptominers detected
- 0
- Suspicious iframe details
- External form targets
- 0
- Obfuscated code patterns
- External script domains
- 0
- Suspicious iframes
- 0
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
50/100
Some business data is missing or could not be verified.
- Domain
- zara.com
- Email address present
- No
- Phone number present
- No
- Terms and conditions present
- No
- Chamber of Commerce number found
- No
- VAT number found
- No
- Physical address present
- No
- Pages scanned
- 2
- Return policy present
- No
- Privacy policy present
- No
- Contact details found
- 0
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
10/100
No reviews or trust seal found.
- Domain
- zara.com
- Kiyoh trust seal found
- No
- Trust seal present
- No
- Review sources
- Trustpilot page
- https://www.trustpilot.com/review/zara.com
- Trustpilot profile found
- No
- WebwinkelKeur trust seal found
- No
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
100/100
This domain was not found on any known fraud or phishing lists.
- Checked domain
- zara.com
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
100/100
Valid SSL certificate found (expires 2026-11-07).
- Expiry date
- 2026-11-07
- Issuer
- DigiCert Inc
- Subject
- zara.com
- Valid until
- 2026-11-08
- Valid from
- 2026-04-23
- TLS version
- TLSv1.3
- Serial number
- 09AA0E745709885FF8BD1D393FBF0523
DNS & Server
Checks DNS records, server information and hosting details.
95/100
DNS records are properly configured.
- IP Address
- 95.101.234.94
- SPF record
- Yes
- IPv6 support
- Yes
- DMARC record
- Yes
- DNSSEC
- No
- MX Records
- mxa-005d4502.gslb.pphosted.com, mxb-005d4502.gslb.pphosted.com
- Nameservers
- dns1.p01.nsone.net, dns2.p01.nsone.net, dns3.p01.nsone.net, a5-64.akam.net, a11-64.akam.net, a1-253.akam.net
- Reverse DNS
- a95-101-234-94.deploy.static.akamaitechnologies.com
- IP Addresses
- 95.101.234.94, 95.101.234.92, 95.101.234.69, 95.101.234.73, 95.101.234.75, 95.101.234.77, 95.101.234.74, 95.101.234.87
- IPv6 Addresses
- 2a02:26f0:3500:b::5c7b:68a9, 2a02:26f0:3500:b::5c7b:6896
Discovered subdomains (1)
About this website
Zara.com is the online store for the fashion brand Zara. The website offers a wide range of fashion products, but unfortunately, no specific homepage content could be retrieved. This may affect the user experience.
Key facts about zara.com include that the site has an SSL certificate, but there are also some shortcomings. For instance, it failed to implement security headers, which poses a risk to users. However, the technology and privacy aspects of the site are rated positively.
What our scores mean for you
The failure of security headers means there is a concrete risk that user data may be intercepted. This can be particularly problematic when entering personal information or payment details. Additionally, there are concerns regarding the reviews, which also scored poorly, indicating a lack of transparency or customer satisfaction.
Score evolution
There is no previous score available for zara.com as this is the first assessment.
What this means
Verisite is an independent platform that conducts automated trust checks on websites. For you as a visitor, this score indicates that zara.com is generally trustworthy, but you should be cautious when sharing personal data. For the company itself, this score may impact customer perception and their willingness to make purchases.
Frequently asked questions
Does zara.com have a valid SSL certificate?
Yes, zara.com has a valid SSL certificate, ensuring a secure connection.
Has zara.com ever been reported for fraud?
No external red flags or evidence of fraud have been found for zara.com.
What are the risks of using zara.com?
The site has issues with security headers and reviews, which may indicate potential risks.
How old is the domain zara.com?
The domain zara.com is registered and has a good age, contributing to its trustworthiness.
What does it mean that there is a warning for business data?
A warning for business data means there is a partial issue that may affect trust.
Are there issues with the technology of zara.com?
No, the technology of zara.com scored highly and is well-rated.