Skip to main content

Is guandata.com a Scam? Security Check Results - 杭州观远数据有限公司 Reviews

guandata.com favicon

Is guandata.com Safe? Security Analysis for 杭州观远数据有限公司

Check if guandata.com is a scam or legitimate. Free security scan and reviews.

TechnologyChinalarge
ReactNext.jsAlibaba CDNOSS (Alibaba Cloud Object Storage)CSS Modules+1 more
Analyzed 8/2/2025Completed 5:49:11 AM
57
Security Score
MEDIUM RISK

AI Summary

杭州观远数据有限公司 operates a professional and comprehensive website offering a modern BI platform and intelligent data analysis solutions. The company positions itself as a leading provider of one-stop BI software and services in China, targeting large enterprises and growth companies across multiple industries including retail, finance, manufacturing, and internet sectors. Their product suite includes BI tools, metrics management, chat-based BI, data flow platforms, and various data visualization and analysis modules. The website is well-structured, visually appealing, and rich in content, demonstrating a mature digital presence hosted on Alibaba Cloud infrastructure with modern web technologies such as Next.js and React. From a security perspective, the site uses HTTPS and shows no signs of exposed sensitive data or vulnerable libraries. However, it lacks explicit security headers and published security policies or incident response contacts, which are recommended for enhanced trust and compliance. Privacy compliance is partial; a comprehensive privacy policy is present, but no cookie consent mechanism is detected, which may affect GDPR adherence. The absence of WHOIS data for the domain is a notable concern, as it reduces domain registration transparency and trustworthiness despite the professional business presentation. Overall, the website demonstrates a strong business and technical foundation with good user experience and content quality. The main risk lies in the missing WHOIS registration data, which should be investigated further to confirm domain legitimacy. Strategic improvements in security policy transparency and privacy compliance would enhance the company's trust profile and regulatory alignment.

Detected Technologies

ReactNext.jsAlibaba CDNOSS (Alibaba Cloud Object Storage)CSS ModulesJavaScript ES6+

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

Guandata is positioned as a key player in the Chinese BI software market, offering a broad range of products and industry-specific solutions. Their business model focuses on software licensing combined with value-added services such as training, support, and ecosystem partnerships. The company targets enterprise clients, including large groups and growing companies, with a focus on enabling data-driven decision-making and agile business operations. Their partnership ecosystem includes a community platform and a partner program to expand market reach. The presence of high-profile clients like Unilever and Yuanqi Senlin underscores their market credibility. The company emphasizes ease of use, scalability, and scenario-based analytics to differentiate from competitors. Revenue streams likely include software sales, subscriptions, consulting, and training services.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

h*****@guandata.com

Phone Numbers (1)

400*******

Security Posture Analysis

Comprehensive Security Assessment

The website's security posture is generally good with HTTPS enforced and no visible security flaws in the frontend code. However, the lack of security headers such as Content-Security-Policy and absence of published security or incident response policies indicate room for improvement. No vulnerability disclosure or security.txt files were found, which are best practices for mature security programs. Privacy compliance is partial; while a privacy policy exists, cookie consent mechanisms are missing, potentially exposing the company to regulatory risks under GDPR or similar frameworks. The missing WHOIS data is a significant trust gap, as domain registration transparency is a key factor in assessing legitimacy and preventing phishing or fraud. Overall, the security maturity appears moderate but could be enhanced by adopting more comprehensive policies and technical controls.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement and enforce security headers such as Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options to improve protection against common web attacks.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

杭州观远数据有限公司

Description:

观远数据是一家专注于提供一站式智能分析平台与服务的现代化BI系统供应商,致力于让业务用起来的现代化BI。提供BI软件、自助BI、BI报表可视化、企业级BI、BI解决方案、移动BI、AI应用和可视化素材等服务。

Key Services:
观远BI观远Metrics观远ChatBI观远DataFlow数据接入数据准备可视化分析智能洞察数据门户移动轻应用
Content Quality:

excellent

Branding:

consistent

Technical Stack

Technologies:
ReactNext.jsAlibaba CDNOSS (Alibaba Cloud Object Storage)CSS ModulesJavaScript ES6+
Frameworks:
Next.js
Platforms:
Web
Performance:

fast

Mobile:

good

Accessibility:

good

SEO:

good

Security Assessment

Security Score:
85/100
Best Practices:
  • HTTPS enforced (implied by URLs)
  • No exposed sensitive data in HTML
  • No visible vulnerable libraries

Analytics & Tracking

Tracking Level:minimal
Privacy Compliance:basic

Advertising & Marketing

Transparency Level:basic

Website Quality Assessment

Design Quality:excellent
User Experience:excellent
Content Relevance:excellent
Navigation Clarity:excellent
Professionalism:excellent
Trustworthiness:high

Key Observations

1

Website is fully accessible with rich content and professional design.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

15/100
Score

Missing Strict-Transport-Security header

HIGH

Forces HTTPS connections

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

53/100
Score

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

No Data Protection Officer mentioned

LOW

Large organizations may need to designate a DPO under GDPR

Privacy policy may not be GDPR compliant

MEDIUM

Privacy policy lacks explicit GDPR compliance elements

GDPR Compliance Analysis

Privacy Policy85% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: transport, digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

70/100
Score

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 include:spf.qiye.aliyun.com -all
DNS Lookups:1/10
Policy:-all

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

77/100
Score

Weak Protocols Supported

HIGH

Server supports weak protocols: TLSv1.1

OCSP Stapling Not Enabled

LOW

OCSP stapling improves performance and privacy

Certificate Transparency Not Implemented

LOW

Certificate is not logged in Certificate Transparency logs

Partial SSL/TLS Assessment

LOW

Completed 3 of 4 security checks due to time constraints

Protocol Support

TLSv1.3TLSv1.2TLSv1.1

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

60/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

Domain Transfer Lock Not Enabled

MEDIUM

Domain can be transferred without authorization

Domain Delete Lock Not Enabled

LOW

Domain can be deleted without additional verification

No DMARC Record

MEDIUM

DMARC policy not configured

Domain Registration Details

Domain Age
10 years(mature)
Expiry Risk
none(757 days)
Protection Level
noneDNSSEC OFF
Suspicious Indicators Detected
  • No domain protection locks enabled

DNS Records

A Records:52.130.199.141
Name Servers:
dns10.hichina.com
dns9.hichina.com
MX Records:
15: mx3.qiye.aliyun.com
5: mx1.qiye.aliyun.com
10: mx2.qiye.aliyun.com
SOA:Serial: 2025042409, TTL: 600s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:552ms

SPF Analysis

SPF Record:
v=spf1 include:spf.qiye.aliyun.com -all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built using modern web technologies including React and Next.js, hosted on Alibaba Cloud's OSS CDN infrastructure, ensuring fast content delivery and scalability. The site uses CSS modules for styling and loads multiple external font resources from Alibaba's CDN. The performance is fast with good mobile optimization and accessibility features. SEO is well addressed with appropriate meta tags and structured navigation. No CMS is explicitly detected, indicating a custom or framework-based solution. The technical stack is modern and well-maintained, supporting a professional user experience. There is no evidence of legacy or vulnerable libraries in the frontend code. Overall, the technical implementation supports the business goals effectively with minimal technical debt.
Analyze Another Website