Skip to main content

Is chuhailiqi.com a Scam? Security Check Results - chuhailiqi.com Reviews

C

Is chuhailiqi.com Safe? Security Analysis for 明点跨境-出海利器-出海指南

Check if chuhailiqi.com is a scam or legitimate. Free security scan and reviews.

TechnologyN/asmall
Z-BlogPHP 1.7.4jQuery 2.2.4UEditorPrism.jsFontAwesome
Analyzed 8/2/2025Completed 5:42:55 AM
56
Security Score
MEDIUM RISK

AI Summary

The website www.chuhailiqi.com serves as a specialized content platform focused on cross-border e-commerce, foreign trade software, and related business guides primarily targeting Chinese-speaking users engaged in international trade and marketing. It offers a variety of articles, tutorials, and software recommendations to assist businesses and individuals in navigating the complexities of overseas markets and digital tools. The site is built on the Z-BlogPHP CMS platform and employs standard web technologies including jQuery and Prism.js for enhanced user experience. Technically, the website demonstrates moderate digital maturity with HTTPS enabled and a consistent content structure. However, it lacks advanced security headers and formal privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency, which could impact business credibility and risk assessments. From a security perspective, the site shows no immediate vulnerabilities in the visible content but would benefit from implementing stronger security headers and formalizing privacy and incident response policies. The use of Baidu Analytics indicates moderate user tracking, but privacy compliance is minimal. Overall, the site is functional and content-rich but requires improvements in compliance and security posture to enhance trustworthiness and regulatory adherence. Strategically, verifying domain registration status and adding comprehensive privacy and security policies should be prioritized. Enhancing security headers and providing clear contact and incident response information will further strengthen the site's security culture and user confidence.

Detected Technologies

Z-BlogPHP 1.7.4jQuery 2.2.4UEditorPrism.jsFontAwesome

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

The platform positions itself as an important resource for cross-border trade and foreign trade software users, focusing on content-driven engagement rather than direct product sales. Its competitive advantage lies in detailed, regularly updated guides and tutorials tailored to Chinese exporters and marketers. The business model appears to be content monetization through partnerships and affiliate links to related software and services. The target customers are small to medium-sized enterprises and individual entrepreneurs involved in international trade. The partnership ecosystem includes VPN providers, SaaS platforms, and marketing tools, indicating a collaborative approach to service offerings. Growth indicators include frequent content updates and active user engagement metrics. However, the lack of transparent company registration and contact information may limit trust and expansion opportunities.

Security Posture Analysis

Comprehensive Security Assessment

The website currently exhibits a basic security maturity level with HTTPS enabled and no visible exposure of sensitive data. However, the absence of key security headers such as Content-Security-Policy, X-Frame-Options, and HSTS reduces its defense-in-depth capabilities. There are no visible signs of malware or phishing, but the missing WHOIS data and lack of privacy and cookie policies represent compliance gaps, particularly under GDPR and similar regulations. Incident response readiness is not evident due to missing contact channels for security issues. The security culture appears nascent, with room for improvement in formalizing policies and enhancing technical controls to protect user data and maintain trust.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement comprehensive privacy and cookie policies to improve legal compliance and user trust.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Description:

明点跨境提供出海利器、出海指南、外贸营销软件、跨境电商软件、出海办公软件及外贸管理软件等内容,帮助企业和个人进行跨境电商和外贸业务。

Key Services:
外贸营销软件介绍跨境电商软件资讯出海办公软件推荐外贸管理软件内容出海指南及教程
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
Z-BlogPHP 1.7.4jQuery 2.2.4UEditorPrism.jsFontAwesome
Frameworks:
Z-BlogPHP
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

good

Security Assessment

Security Score:
75/100
Best Practices:
  • HTTPS enforced
  • No exposed sensitive data in HTML
  • Use of external scripts from own domain

Analytics & Tracking

Services:
Baidu Analytics
Tracking Level:moderate
Privacy Compliance:poor

Advertising & Marketing

Tracking Pixels:
Baidu Analytics
Marketing Tools:
Baidu Analytics
Transparency Level:basic

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:moderate

Key Observations

1

Website is fully accessible with rich content in Chinese language focused on cross-border e-commerce and software tools.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

40/100
Score

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

50/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
phone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: transport, digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

40/100
Score

No SPF record found

HIGH

SPF helps prevent email spoofing

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

No email authentication configured

CRITICAL

Domain is vulnerable to email spoofing

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

75/100
Score

SSL Certificate Expires Soon

HIGH

SSL certificate expires in 1 days

Mixed Content Detected

MEDIUM

2 resources loaded over insecure HTTP

Partial SSL/TLS Assessment

LOW

Completed 2 of 4 security checks due to time constraints

Certificate Details

Subject:chuhailiqi.com
Issuer:TrustAsia DV TLS RSA CA 2025
Valid Until:8/3/2025 (1 days)
SANs:chuhailiqi.com, www.chuhailiqi.com

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

70/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

Slow DNS Resolution

LOW

DNS resolution took 1651ms (>1000ms)

No DMARC Record

MEDIUM

DMARC policy not configured

DNS Records

A Records:43.134.100.3
Name Servers:
parabola.dnspod.netDNS only
rowing.dnspod.netDNS only
SOA:Serial: 1741831916, TTL: 180s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:1651ms

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on the Z-BlogPHP CMS version 1.7.4, utilizing jQuery 2.2.4 and Prism.js for syntax highlighting. It loads scripts and styles primarily from its own domain, reducing third-party dependencies. The site is mobile-optimized with responsive meta tags and a clear navigation structure. Performance is moderate, with no evident broken elements or errors. SEO is supported by meta keywords and descriptions, although no Open Graph or JSON-LD structured data was found. Accessibility features are basic but present. Hosting provider details are not discernible from the content. Overall, the technical infrastructure is stable but could benefit from modernization and enhanced security configurations.
Analyze Another Website