Skip to main content

Is nutemail.com a Scam? Security Check Results - 深圳千刻网络科技有限公司 Reviews

nutemail.com favicon

Is nutemail.com Safe? Security Analysis for 深圳千刻网络科技有限公司

Check if nutemail.com is a scam or legitimate. Free security scan and reviews.

TechnologyChinasmall
Bootstrap 4jQuery 3.5.1Slick SliderMagnific PopupMaterial Design Icons
Analyzed 8/2/2025Completed 12:39:54 PM
55
Security Score
MEDIUM RISK

AI Summary

NutEmail is a Chinese-based personal email service provider operated by Shenzhen Qianke Network Technology Co., Ltd. The company offers cloud-based email solutions emphasizing mobile accessibility, strong anti-spam and anti-virus capabilities, distributed cluster architecture for data redundancy, and bank-grade cloud data security. Their target audience includes individual users and small to micro enterprises seeking efficient and secure email management. The website presents a professional image with clear service descriptions, team introductions, and customer testimonials, positioning NutEmail as an emerging player in the cloud email service market. Technically, the website leverages modern frontend technologies such as Bootstrap 4, jQuery, and slick sliders, ensuring a responsive and user-friendly experience. However, there is no evidence of a CMS or backend platform disclosed. Performance is moderate with good mobile optimization but lacks advanced SEO and accessibility features. The site uses a secure POST method for its contact form but lacks visible anti-spam mechanisms. From a security perspective, the absence of WHOIS data for the domain raises concerns about domain legitimacy and ownership transparency. No privacy or cookie policies are present, and no security headers or HTTPS status information is available, indicating potential compliance and security gaps. While the site content is safe and business-focused, the lack of explicit security and privacy measures reduces overall trustworthiness. Overall, NutEmail demonstrates a solid business concept and technical foundation but requires improvements in domain registration transparency, security best practices, and privacy compliance to enhance its credibility and reduce risk exposure.

Detected Technologies

Bootstrap 4jQuery 3.5.1Slick SliderMagnific PopupMaterial Design Icons

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

NutEmail operates in the technology sector, specifically cloud-based personal email services. The company leverages a SaaS business model targeting individual and small business users in China. Their competitive advantage lies in mobile integration, distributed data storage, and strong anti-spam and anti-virus features. The company maintains a broad partnership ecosystem as evidenced by numerous linked domains in their footer, suggesting collaboration with related service providers. Revenue streams likely include subscription fees for email services and potential value-added features such as shared cloud storage. Growth indicators include a professional website with customer testimonials and a team with diverse expertise. However, the lack of transparent domain registration and privacy policies may hinder trust and market expansion. Strategic partnerships and enhanced compliance could improve market position.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

q*****@qq.com

Security Posture Analysis

Comprehensive Security Assessment

The current security posture of NutEmail's website is moderate but with notable deficiencies. The site uses a secure POST method for its contact form, which is positive, but lacks visible HTTPS confirmation and security headers such as Content-Security-Policy or X-Frame-Options. The absence of WHOIS data for the domain is a significant red flag, impacting trust and raising questions about domain ownership. No privacy or cookie policies are present, indicating potential GDPR and other regulatory compliance gaps. There is no evidence of incident response or vulnerability disclosure mechanisms. Overall, while the site content and services emphasize security features, the web presence itself requires enhancements in security best practices, transparency, and compliance to reduce risk and improve user trust.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement HTTPS with a valid SSL/TLS certificate and verify secure configuration.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

深圳千刻网络科技有限公司

Description:

坚果邮箱是为客户提供的电子邮箱服务,支持手机移动性,方便随时收发邮件,提供一站式多邮箱管理,分类分组标签式管理。提供强力反垃圾反病毒、分布式集群架构和云端数据安全服务。

Key Services:
反垃圾邮件和反病毒分布式集群架构邮件存储云端数据安全与备份
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
Bootstrap 4jQuery 3.5.1Slick SliderMagnific PopupMaterial Design Icons
Frameworks:
Bootstrap
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

basic

Security Assessment

Security Score:
50/100
Best Practices:
  • Secure contact form with POST method

Analytics & Tracking

Tracking Level:minimal
Privacy Compliance:poor

Advertising & Marketing

Transparency Level:poor

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:moderate

Key Observations

1

Website is fully accessible and not blocked by WAF or security mechanisms.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

30/100
Score

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

50/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: transport, banking, digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

60/100
Score

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

No email authentication configured

CRITICAL

Domain is vulnerable to email spoofing

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

72/100
Score

Weak Protocols Supported

HIGH

Server supports weak protocols: TLSv1.1

OCSP Stapling Not Enabled

LOW

OCSP stapling improves performance and privacy

Certificate Transparency Not Implemented

LOW

Certificate is not logged in Certificate Transparency logs

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 86 days

Partial SSL/TLS Assessment

LOW

Completed 3 of 4 security checks due to time constraints

Protocol Support

TLSv1.2TLSv1.3TLSv1.1

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

60/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

Domain Transfer Lock Not Enabled

MEDIUM

Domain can be transferred without authorization

Domain Delete Lock Not Enabled

LOW

Domain can be deleted without additional verification

No DMARC Record

MEDIUM

DMARC policy not configured

Domain Registration Details

Domain Age
3 years(established)
Expiry Risk
low(262 days)
Protection Level
noneDNSSEC OFF
Suspicious Indicators Detected
  • No domain protection locks enabled

DNS Records

A Records:8.217.95.98
Name Servers:
ns5.diymysite.com
ns6.diymysite.com
MX Records:
10: mail.rvto.cn

DNSSEC Status

DNSSEC Not Enabled

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built using Bootstrap 4 and jQuery 3.5.1, with additional libraries like Slick Slider and Magnific Popup for UI enhancements. The frontend is responsive and mobile-optimized, providing a good user experience. However, there is no indication of a backend CMS or hosting provider. Performance is moderate with no advanced SEO or accessibility features detected. The contact form uses POST method but lacks visible anti-spam or CAPTCHA protections. The site links to numerous external partner domains, indicating a broad ecosystem but no direct integration with analytics or tracking services. Technical risks include lack of HTTPS confirmation and missing security headers, which could expose users to interception or attacks. Modernization opportunities include adding security best practices, improving SEO, and enhancing accessibility.
Analyze Another Website