Skip to main content

Is qfzl.com a Scam? Security Check Results - 浙江青风环境股份有限公司 Reviews

qfzl.com favicon

Is qfzl.com Safe? Security Analysis for 浙江青风环境股份有限公司

https://qfzl.com

Check if qfzl.com is a scam or legitimate. Free security scan and reviews.

ManufacturingChinamedium
HTML5CSS3JavaScriptjQuerySwiper.js+4 more
Analyzed 8/3/2025Completed 5:24:38 PM
66
Security Score
MEDIUM RISK

AI Summary

浙江青风环境股份有限公司是一家专注于工农业制冷制热行业的制造企业，提供风冷、水冷、螺杆式、磁悬浮等多种冷水机组产品，广泛应用于工业、农业、模具、食用菌及水产养殖等领域。公司拥有国家级专精特新“小巨人”荣誉、省级博士后工作站及企业研究院，业务覆盖全球，市场地位稳固。网站内容丰富，设计专业，体现了较高的数字化成熟度和技术实力。技术栈包括现代前端技术和3D可视化，用户体验良好，移动端优化到位。安全方面，网站使用HTTPS并包含CSRF防护，但缺少安全头和隐私政策，存在改进空间。WHOIS信息缺失降低了域名信任度，建议核实域名注册状态。整体风险适中，建议加强隐私合规和安全防护措施。

Detected Technologies

HTML5CSS3JavaScriptjQuerySwiper.jsThree.jsTWEEN.jsOrbitControlsLenis (smooth scrolling)

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

公司定位为制造与销售冷水机设备的专业企业，业务模式涵盖研发、生产、销售及工程安装服务，目标客户为工业和农业领域。其竞争优势在于专精特新技术、丰富的专利储备及全球业务布局。网站展示了多样化产品线和行业解决方案，反映出公司对市场需求的深入理解和定制化能力。合作伙伴和友情链接显示其行业生态圈活跃。缺乏公开的隐私政策和安全披露是潜在的合规风险。

Extracted Contact Information

Marketing Intelligence Data

Phone Numbers (2)

400*******
057*******

Security Posture Analysis

Comprehensive Security Assessment

当前安全成熟度中等，网站启用HTTPS且含有CSRF令牌，表明基础安全措施到位。缺少安全相关HTTP头（如CSP、HSTS）和隐私政策，可能导致安全风险和合规问题。无明显漏洞或恶意代码，但第三方脚本需定期审查。无安全事件响应或漏洞披露渠道，建议建立完善的安全管理体系以提升安全文化和应急响应能力。

Strategic Recommendations

Priority Actions for Security Improvement

1

完善网站隐私政策和Cookie政策，确保符合GDPR及相关法规。

✨Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

浙江青风环境股份有限公司

Description:

浙江青风环境股份有限公司专注于工农业制冷制热行业，集研发、生产、销售、工程设计安装及售后服务于一体，提供风冷、水冷、螺杆式、磁悬浮等冷水机组，应用于工业、农业、模具、食用菌、水产养殖等领域。

Key Services:
冷水机组制造环境系统解决方案工程设计安装售后服务
Content Quality:

excellent

Branding:

consistent

Technical Stack

Technologies:
HTML5CSS3JavaScriptjQuerySwiper.jsThree.jsTWEEN.jsOrbitControlsLenis (smooth scrolling)
Frameworks:
fullPage.js
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

good

Security Assessment

Security Score:
65/100
Best Practices:
  • Use of HTTPS (implied by https URLs)
  • CSRF token present in meta tag
  • Form submission via AJAX with token

Analytics & Tracking

Services:
Baidu Analytics
Tracking Level:moderate
Privacy Compliance:poor

Advertising & Marketing

Tracking Pixels:
Baidu Analytics (hm.baidu.com)
Marketing Tools:
Baidu Analytics
Transparency Level:basic

Website Quality Assessment

Design Quality:excellent
User Experience:excellent
Content Relevance:excellent
Navigation Clarity:excellent
Professionalism:excellent
Trustworthiness:high

Key Observations

1

Website is fully accessible with rich content in Chinese language.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

65/100
Score

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Weak Referrer-Policy configuration

LOW

Current value: "origin"

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

50/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
phone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: transport, digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

85/100
Score

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 include:spf.163.com -all
DNS Lookups:1/10
Policy:-all
DKIM Selectors Found
Selector:default(1296-bit rsa)
DMARC Details
Policy:quarantine
Aggregate Reports:dmarc_report@qiye.163.com
Forensic Reports:dmarc@qiye.163.com

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

67/100
Score

Weak Protocols Supported

HIGH

Server supports weak protocols: TLSv1.1

OCSP Stapling Not Enabled

LOW

OCSP stapling improves performance and privacy

Certificate Transparency Not Implemented

LOW

Certificate is not logged in Certificate Transparency logs

Mixed Content Detected

MEDIUM

9 resources loaded over insecure HTTP

Partial SSL/TLS Assessment

LOW

Completed 3 of 4 security checks due to time constraints

Protocol Support

TLSv1.3TLSv1.2TLSv1.1

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

85/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

DNS Records

A Records:47.89.29.157
Name Servers:
dns25.hichina.comDNS only
dns26.hichina.comDNS only
MX Records:
5: hzmx01.mxmail.netease.com
10: hzmx02.mxmail.netease.com

DNSSEC Status

DNSSEC Not Enabled

SPF Analysis

SPF Record:
v=spf1 include:spf.163.com -all

⚡Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

网站采用现代前端技术栈，包括HTML5、CSS3、JavaScript及多种流行库如Swiper.js和Three.js，支持丰富的交互和3D效果。使用fullPage.js实现页面滚动效果，提升用户体验。移动端适配良好，SEO基础完善。性能表现中等，部分动画和视频可能影响加载速度。无明显技术债务，建议优化安全配置和隐私合规以提升整体技术成熟度。
Analyze Another Website