Is google520.net Safe? Security Analysis for 向前网络-包头外贸网站建设
Check if google520.net is a scam or legitimate. Free security scan and reviews.
AI Summary
向前网络是一家专注于外贸网站建设和Google SEO优化的中国公司，主要服务中小企业和个人用户。公司拥有10年行业经验，提供包括外贸网站建设、推广、Google Ads付费广告、微信SEO关键词排名等多项服务。其市场定位为国内领先的外贸建站和Google SEO源头厂家，拥有丰富的客户案例和较高的客户续费率。技术基础采用WordPress CMS，结合jQuery和Bootstrap等现代前端技术，网站设计注重响应式和用户体验。安全方面，网站未启用DNSSEC，缺少安全头部和隐私政策，存在一定的合规和安全改进空间。整体网站内容专业，导航清晰，适合目标客户群体。建议加强安全配置和隐私合规以提升整体信任度和安全性。
Detected Technologies
🧠AI Business Intelligence
Technology stack, business insights, and market analysis powered by AI.
Business Intelligence
Market & Strategic Analysis
公司通过提供定制化的外贸网站建设和SEO推广服务，满足中国中小企业出海需求，利用Google SEO和付费广告提升客户流量和转化。其业务模式以项目交付和后续推广服务为主，强调源码交付和客户满意度。合作伙伴和外链资源丰富，覆盖多个相关行业和技术领域。公司定位明确，价格合理，注重客户长期合作和续费率。市场竞争力体现在专业技术团队和丰富案例积累。未来发展可通过完善安全合规和扩大服务范围进一步提升市场份额。
Extracted Contact Information
Marketing Intelligence Data
Email Addresses (1)
Phone Numbers (1)
Security Posture Analysis
Comprehensive Security Assessment
当前网站安全成熟度中等，未检测到HTTPS强制或安全头部，DNSSEC未启用，存在潜在DNS安全风险。无公开的安全政策或事件响应流程，缺乏漏洞披露渠道。网站未发现明显敏感信息泄露或已知漏洞，但安全最佳实践未完全落实。建议实施HTTPS强制、添加安全头部、启用DNSSEC，并公开隐私政策和安全联系方式以提升安全文化和合规性。整体安全风险中等，需关注合规和技术加固。
Strategic Recommendations
Priority Actions for Security Improvement
启用HTTPS强制和HSTS头部，确保所有访问安全加密。
✨Observations
AI-powered comprehensive website and business analysis.
AI-Enhanced Website Analysis
Business Insights
向前网络-包头外贸网站建设
包头向前网络外贸网站建设,是专业外贸网站定制设计公司,我们在WordPress开发定制网站建设领域深耕10年,擅长于WordPress外贸网站建设推广等服务,让您通过海外网站建设将独立站品牌销往全球!
good
consistent
Technical Stack
moderate
good
basic
good
Security Assessment
- No DNSSEC enabled
- Domain status OK
Analytics & Tracking
Advertising & Marketing
Website Quality Assessment
Key Observations
Website is fully accessible with rich content in Chinese targeting external trade website building and SEO services.
🛡️Security Headers
HTTP security headers analysis and recommendations.
Security Headers
HTTP security headers analysis
Missing X-Frame-Options header
HIGHPrevents clickjacking attacks
Missing X-Content-Type-Options header
MEDIUMPrevents MIME type sniffing
Missing Content-Security-Policy header
HIGHControls resources the browser is allowed to load
Missing X-XSS-Protection header
MEDIUMLegacy XSS protection (deprecated but still recommended)
Missing Referrer-Policy header
LOWControls referrer information sent with requests
Missing Permissions-Policy header
MEDIUMControls browser features and APIs
👤GDPR Compliance
Privacy and data protection assessment under GDPR regulations.
GDPR Compliance
Privacy and data protection assessment
No Privacy Policy found
HIGHGDPR requires a clear and accessible privacy policy
No Cookie Policy found
HIGHGDPR requires clear information about cookie usage
No Cookie Consent Banner found
HIGHGDPR requires explicit consent for non-essential cookies
GDPR Compliance Analysis
🛡️NIS2 Compliance
Network & Information Security Directive compliance assessment.
NIS2 Compliance
Network & Information Security Directive
No information security framework found
HIGHNIS2 requires documented cybersecurity and information security measures
No vulnerability disclosure policy
MEDIUMNIS2 encourages coordinated vulnerability disclosure
No security policy documentation found
HIGHNIS2 requires documented cybersecurity governance and risk management
No incident response procedures found
HIGHNIS2 requires documented incident response and business continuity plans
No business continuity planning found
MEDIUMNIS2 emphasizes operational resilience and business continuity
No security contact information
HIGHNIS2 requires clear incident reporting channels
No vulnerability reporting mechanism
MEDIUMClear vulnerability reporting supports coordinated disclosure
No NIS2 reference found
LOWConsider explicitly mentioning NIS2 compliance efforts
Critical sector without clear security compliance
HIGHDetected sectors: transport, digital
📧Email Security
SPF, DKIM, and DMARC validation and email security assessment.
Email Security
SPF, DKIM, and DMARC validation
No SPF record found
HIGHSPF helps prevent email spoofing
No DKIM record found
MEDIUMDKIM adds cryptographic signatures to emails
No BIMI Record
LOWBIMI displays brand logos in email clients
No MTA-STS Policy
MEDIUMMTA-STS enforces TLS for email delivery
No TLS-RPT Record
LOWTLS-RPT provides reporting for email TLS issues
No email authentication configured
CRITICALDomain is vulnerable to email spoofing
🏆SSL/TLS Security
Certificate validity and encryption analysis.
SSL/TLS Security
Certificate validity and encryption analysis
Weak Protocols Supported
HIGHServer supports weak protocols: TLSv1.1
OCSP Stapling Not Enabled
LOWOCSP stapling improves performance and privacy
Certificate Transparency Not Implemented
LOWCertificate is not logged in Certificate Transparency logs
SSL Certificate Expires Within 90 Days
MEDIUMSSL certificate expires in 51 days
Mixed Content Detected
MEDIUM12 resources loaded over insecure HTTP
Partial SSL/TLS Assessment
LOWCompleted 3 of 4 security checks due to time constraints
Protocol Support
OCSP Status
📊DNS Health
DNS configuration and security assessment.
DNS Health
DNS configuration and security assessment
DNSSEC Not Enabled
MEDIUMDNSSEC is not configured for this domain
CAA Records Not Configured
LOWCertificate Authority Authorization (CAA) records not found
Domain Transfer Lock Not Enabled
MEDIUMDomain can be transferred without authorization
Domain Delete Lock Not Enabled
LOWDomain can be deleted without additional verification
No DMARC Record
MEDIUMDMARC policy not configured
Domain Registration Details
- •No domain protection locks enabled
DNS Records
DNSSEC Status
⚡Network Security
Port scanning and network exposure analysis.
Network Security
Port scanning and network exposure analysis
High-Risk Service Exposed: FTP
HIGHPort 21 (FTP) is publicly accessible - FTP - Often unencrypted file transfer
🔧Technical Analysis
Detailed technical findings and analysis from AI assessment.
Technical Analysis
Comprehensive security assessment findings