Skip to main content

Is qxbsk.com a Scam? Security Check Results - 汽修帮手资料库 Reviews

qxbsk.com favicon

Is qxbsk.com Safe? Security Analysis for 汽修帮手资料库

Check if qxbsk.com is a scam or legitimate. Free security scan and reviews.

TransportationChinamedium
BootstrapFont AwesomejQueryOwl CarouselMagnific Popup+1 more
Analyzed 8/3/2025Completed 7:40:19 PM
45
Security Score
HIGH RISK

AI Summary

汽修帮手资料库 operates a professional online automotive repair data platform targeting automotive technicians and enthusiasts primarily in China. The website offers a comprehensive and frequently updated database of repair manuals, wiring diagrams, maintenance guides, and training materials for over 6000 vehicle models globally. Their business model is subscription-based with multiple membership tiers providing access to premium content and services such as rare data retrieval and dedicated customer support. The platform supports multi-device access including mobile, tablet, PC, and WeChat mini program integration, enhancing user convenience and engagement. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various UI libraries to deliver a responsive and user-friendly experience. The site is HTTPS enabled and integrates Baidu Analytics for user tracking. However, it lacks some advanced security headers and privacy compliance features such as privacy and cookie policies, which are critical for GDPR and other regulations. The absence of WHOIS data for the domain raises concerns about transparency and trustworthiness, although the site content and structure indicate a legitimate business operation. From a security perspective, the site demonstrates basic good practices like HTTPS usage and no visible vulnerabilities or exposed sensitive data. Yet, it lacks formal security policies, incident response contacts, and vulnerability disclosure mechanisms. The overall risk is moderate, with recommendations to enhance security headers, implement privacy and cookie policies, and improve WHOIS transparency to boost trust. Overall, the platform is a valuable resource in the automotive repair sector with a solid technical foundation but requires improvements in privacy compliance and domain registration transparency to strengthen its security posture and business credibility.

Detected Technologies

BootstrapFont AwesomejQueryOwl CarouselMagnific PopupParsley.js

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

汽修帮手资料库 positions itself as a specialized provider of automotive repair data with a strong focus on Chinese and global vehicle models. Its competitive advantage lies in frequent data updates, extensive model coverage, and multi-platform accessibility including a WeChat mini program. Revenue is generated through tiered membership subscriptions offering varying levels of access and services. The target customers are automotive repair professionals and enthusiasts seeking reliable and up-to-date repair information. The presence of partner links and a dedicated customer support system indicates an established ecosystem. Growth potential exists through expanding membership base and enhancing digital services. However, the lack of public WHOIS data and privacy policies may hinder trust among privacy-conscious users and international clients.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

1*****@qq.com

Phone Numbers (1)

166*******

Security Posture Analysis

Comprehensive Security Assessment

The website maintains a basic security maturity level with HTTPS enabled and no apparent exposure of sensitive data or vulnerable libraries. However, it lacks critical security headers such as Content Security Policy, HSTS, and X-Frame-Options which are standard best practices. There is no visible privacy policy or cookie consent mechanism, indicating compliance gaps with GDPR and similar regulations. Incident response readiness is unclear due to absence of security contact information or vulnerability disclosure policy. The domain WHOIS data is missing, which reduces transparency and trust. Overall, while no immediate vulnerabilities are detected, the site should enhance its security framework and compliance posture to mitigate risks and improve user trust.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement comprehensive privacy and cookie policies with clear user consent mechanisms to ensure regulatory compliance.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

汽修帮手资料库

Description:

汽修帮手资料库,在线汽车维修资料库,提供更全更专业更新频率更快的汽车维修资料网站,覆盖全球车型的维修手册、保养手册、拆装资料、大修扭力、正时校对、电路图、针脚定义、保险盒图解等各类维修资料在线查询阅读

Key Services:
汽车维修资料库在线阅读培训资料会员服务代找稀缺资料专属交流群及客服
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
BootstrapFont AwesomejQueryOwl CarouselMagnific PopupParsley.js
Platforms:
WebMobile (responsive design)WeChat Mini Program (via QR code)
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

good

Security Assessment

Security Score:
75/100
Best Practices:
  • HTTPS enabled
  • No exposed sensitive data in HTML
  • No visible vulnerable libraries

Analytics & Tracking

Services:
Baidu Analytics
Tracking Level:moderate
Privacy Compliance:poor

Advertising & Marketing

Tracking Pixels:
Baidu Analytics
Marketing Tools:
Baidu Analytics
Transparency Level:basic

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:moderate

Key Observations

1

Website is fully accessible with rich content.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

30/100
Score

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

50/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: transport, digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

40/100
Score

No SPF record found

HIGH

SPF helps prevent email spoofing

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

No email authentication configured

CRITICAL

Domain is vulnerable to email spoofing

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

85/100
Score

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 78 days

Mixed Content Detected

MEDIUM

5 resources loaded over insecure HTTP

Partial SSL/TLS Assessment

LOW

Completed 2 of 4 security checks due to time constraints

Certificate Details

Subject:www.qxbsk.com
Issuer:R11
Valid Until:10/21/2025 (78 days)
SANs:qxbsk.com, www.qxbsk.com

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

75/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

No DMARC Record

MEDIUM

DMARC policy not configured

DNS Records

A Records:182.131.4.207
Name Servers:
ns3.diymysite.comDNS only
ns4.diymysite.comDNS only
SOA:Serial: 2025042003, TTL: 3600s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:429ms

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

0/100
Score

High-Risk Service Exposed: FTP

HIGH

Port 21 (FTP) is publicly accessible - FTP - Often unencrypted file transfer

Critical Service Exposed: MySQL

CRITICAL

Port 3306 (MySQL) is publicly accessible - MySQL - Database server

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on a modern front-end stack using Bootstrap for responsive design, Font Awesome for icons, and jQuery-based plugins such as Owl Carousel and Magnific Popup for interactive UI elements. It supports multi-platform access including mobile and WeChat mini program integration. The site loads moderately fast with optimized assets but could benefit from further performance tuning. No CMS is explicitly detected, suggesting a custom or proprietary backend. SEO is supported through meta tags and structured navigation. However, the site lacks advanced accessibility features and some security best practices. Technical debt appears low but improvements in security and privacy compliance are needed to align with industry standards.
Analyze Another Website