Skip to main content

Is huashi6.com a Scam? Security Check Results - 广州触站科技有限公司 Reviews

广

Is huashi6.com Safe? Security Analysis for 广州触站科技有限公司

Check if huashi6.com is a scam or legitimate. Free security scan and reviews.

MediaChinamedium
Vue.js 2.6.10Axios 0.18.0Vuex 3.1.2Vue-router 3.1.3Element-UI 2.12.0+4 more
Analyzed 8/4/2025Completed 8:31:26 AM
56
Security Score
MEDIUM RISK

AI Summary

The website www.huashi6.com operates as a Chinese digital platform dedicated to sharing and showcasing original artwork from Pixiv artists and other illustrators, primarily targeting the ACG (Anime, Comics, Games) community. It offers a rich repository of illustrations, artist profiles, articles, and AI-generated artwork, positioning itself as a prominent hub for art enthusiasts and creators in China. The platform supports user engagement through artwork submissions, artist recruitment, and community features, complemented by mobile optimization and an available app for enhanced accessibility. Technically, the site leverages a modern frontend stack centered around Vue.js and Element-UI, supported by analytics tools such as Google Analytics and Baidu Analytics. The infrastructure supports responsive design and moderate performance, with integration of captcha services for security. However, there is room for improvement in accessibility and security headers implementation. From a security and compliance perspective, the site enforces HTTPS and uses captcha to mitigate automated abuse. Nonetheless, it lacks explicit privacy and cookie policies, GDPR compliance indicators, and incident response disclosures, which are critical for comprehensive data protection and user trust. The absence of WHOIS registration data introduces some uncertainty about domain legitimacy, although the presence of Chinese ICP and public security备案 numbers and clear company contact details support its authenticity. Overall, the platform presents a professional and content-rich environment for its target audience but should enhance its privacy compliance and security posture to align with best practices and regulatory requirements.

Detected Technologies

Vue.js 2.6.10Axios 0.18.0Vuex 3.1.2Vue-router 3.1.3Element-UI 2.12.0jQuery 2.2.0Viewer.js 1.3.7Google AnalyticsBaidu Analytics

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

The platform serves a niche market of ACG enthusiasts and original illustrators, focusing on content sharing and community building. Its business model revolves around user-generated content, artist recruitment, and content curation, likely monetized through advertising and possibly premium services or app engagement. The company, Guangzhou Chuzhan Technology Co., Ltd., appears to maintain a medium-sized operation with a strong domestic presence, leveraging partnerships with popular Chinese platforms such as QQ groups and maintaining active social media channels. The site’s competitive advantage lies in its curated content and certified artist network, positioning it as a trusted source for high-quality ACG artwork in China. Growth indicators include frequent content updates, active artist onboarding, and integration of AI-generated art features.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

s*****@huashi6.com

Phone Numbers (1)

223*******

Security Posture Analysis

Comprehensive Security Assessment

The website demonstrates a moderate to good security maturity level with HTTPS enforcement and captcha integration to prevent automated abuse. However, the lack of security headers such as Content-Security-Policy and absence of published security policies or incident response plans indicate gaps in security governance. No visible vulnerabilities or exposed sensitive data were detected in the HTML content. Compliance with Chinese regulatory requirements is evidenced by ICP and public security备案 numbers. The missing privacy and cookie policies, along with no GDPR compliance indicators, highlight potential compliance risks, especially for international users. The domain’s WHOIS data absence reduces trust from a registration standpoint but does not directly imply malicious intent. Overall, the security posture is adequate but requires enhancements in policy transparency and technical security controls.

Strategic Recommendations

Priority Actions for Security Improvement

1

Publish comprehensive privacy and cookie policies with clear user consent mechanisms to improve privacy compliance.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

广州触站科技有限公司

Description:

触站原画师通是国内外P站(Pixiv)画师作品分享、投稿发布及学习交流网站,海量P站(Pixiv)画师作品一手掌握,触站涵盖游戏原画、日系插画、二次元漫画、手绘、动漫、CG绘画等各类画师作品,找画师就上触站!

Key Services:
画师作品分享作品投稿画师入驻资讯发布AI绘画APP下载
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
Vue.js 2.6.10Axios 0.18.0Vuex 3.1.2Vue-router 3.1.3Element-UI 2.12.0jQuery 2.2.0Viewer.js 1.3.7Google AnalyticsBaidu Analytics
Frameworks:
Vue.jsElement-UI
Platforms:
PC WebMobile WebMobile App (downloadable)
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

good

Security Assessment

Security Score:
85/100
Best Practices:
  • HTTPS enforced
  • No exposed sensitive data in HTML
  • Captcha integration (Tencent TCaptcha)
  • No visible vulnerable libraries

Analytics & Tracking

Services:
Google AnalyticsBaidu Analytics
Tracking Level:moderate
Privacy Compliance:basic

Advertising & Marketing

Tracking Pixels:
Baidu Analytics
Marketing Tools:
Baidu Analytics
Transparency Level:basic

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:moderate

Key Observations

1

Website is a Chinese ACG artwork sharing platform focused on Pixiv artists.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

15/100
Score

Missing Strict-Transport-Security header

HIGH

Forces HTTPS connections

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

35/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

Third-party services without privacy policy

HIGH

Detected services: Google Analytics

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: transport, digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

70/100
Score

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 include:spf.mail.qq.com ~all
DNS Lookups:1/10
Policy:~all

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

67/100
Score

Weak Protocols Supported

HIGH

Server supports weak protocols: TLSv1.1

OCSP Stapling Not Enabled

LOW

OCSP stapling improves performance and privacy

Certificate Transparency Not Implemented

LOW

Certificate is not logged in Certificate Transparency logs

Mixed Content Detected

MEDIUM

8 resources loaded over insecure HTTP

Partial SSL/TLS Assessment

LOW

Completed 3 of 4 security checks due to time constraints

Protocol Support

TLSv1.3TLSv1.2TLSv1.1

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

75/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

No DMARC Record

MEDIUM

DMARC policy not configured

DNS Records

A Records:120.25.175.123
Name Servers:
vip3.alidns.comDNS only
vip4.alidns.comDNS only
MX Records:
5: mxbiz1.qq.com
10: mxbiz2.qq.com
SOA:Serial: 2025080107, TTL: 600s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:108ms

SPF Analysis

SPF Record:
v=spf1 include:spf.mail.qq.com ~all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website employs a modern and popular JavaScript framework (Vue.js) combined with Element-UI for UI components, ensuring a responsive and interactive user experience. The use of Axios, Vuex, and Vue-router indicates a well-structured single-page application architecture. Integration of analytics from Google and Baidu supports data-driven insights. The site preloads critical CSS and JS assets for performance optimization. However, the absence of a detected CMS suggests a custom-built solution, which may require dedicated maintenance. Performance is moderate, with room for improvement in loading speed and accessibility compliance. The hosting provider is not explicitly identified from the data. Overall, the technical infrastructure is solid but could benefit from enhanced security configurations and accessibility improvements.
Analyze Another Website