Skip to main content

Is simonplcdcs.com a Scam? Security Check Results - 漳州风云电气设备有限公司 Reviews

漳

Is simonplcdcs.com Safe? Security Analysis for 漳州风云电气设备有限公司

https://simonplcdcs.com

Check if simonplcdcs.com is a scam or legitimate. Free security scan and reviews.

EnergyChinasmall
jQuery 1.9.1JavaScriptHTML5CSS3
Analyzed 8/3/2025Completed 11:07:22 PM
46
Security Score
HIGH RISK

AI Summary

漳州风云电气设备有限公司是一家专注于工业自动化设备及备件供应的企业，主要经营DCS控制系统、PLC系统及机器人系统的备件，涵盖多个国际知名品牌。公司拥有11年行业经验，业务覆盖中国多个区域，定位为区域性工业自动化配件供应商。网站内容丰富，主要面向工业自动化设备采购商和相关企业，提供多品牌工业零部件销售服务。技术基础较为传统，采用较老版本的jQuery和标准HTML/CSS，网站性能和移动优化处于基础水平。安全方面，网站启用了HTTPS，但缺乏关键安全头和隐私合规政策，存在一定的安全和合规风险。WHOIS信息缺失，影响域名信任度。整体风险适中，建议加强安全配置和合规建设以提升信任度和用户体验。

Detected Technologies

jQuery 1.9.1JavaScriptHTML5CSS3

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

该公司通过展示多家合作品牌和相关合作网站，构建了较为广泛的合作网络，增强了市场竞争力。业务模式以工业自动化设备备件供应为核心，目标客户为工业制造和能源行业的设备采购商。网站内容专业且针对性强，体现出一定的市场定位和客户服务能力。缺乏公开的隐私政策和安全声明可能影响部分客户的信任。公司通过电话和邮箱提供直接联系渠道，支持客户咨询和售后服务。整体业务模式稳健，但需提升数字化合规和安全管理水平以适应更严格的行业要求。

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

g*****@gmail.com

Phone Numbers (1)

+8615359******

Physical Addresses (1)

福建省漳州市龙文区朝阳北路1号办公楼205室

Security Posture Analysis

Comprehensive Security Assessment

网站启用了HTTPS，保证了基础的传输安全，但未检测到常见的安全HTTP头如Content-Security-Policy、X-Frame-Options等，存在潜在的安全风险。网站使用的jQuery版本较旧，可能存在已知漏洞。表单设计包含CSRF令牌，体现一定的安全意识。缺少隐私政策和Cookie政策，可能导致合规风险。未发现安全事件响应或漏洞披露相关信息，表明安全管理体系尚不完善。建议加强安全头配置，更新依赖库，完善隐私合规文档，并建立安全事件响应流程。

Strategic Recommendations

Priority Actions for Security Improvement

1

部署并配置关键安全HTTP头，如Content-Security-Policy、X-Frame-Options和X-Content-Type-Options。

✨Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

漳州风云电气设备有限公司

Description:

漳州风云主营DCS控制系统备件，PLC系统备件及机器人系统备件，优势品牌包括Allen Bradley、BentlyNevada、ABB、Emerson Ovation、Honeywell DCS、Siemens等，提供各种进口工业零部件。

Key Services:
DCS控制系统备件供应PLC系统备件供应机器人系统备件供应多品牌工业零部件销售
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
jQuery 1.9.1JavaScriptHTML5CSS3
Performance:

moderate

Mobile:

basic

Accessibility:

basic

SEO:

basic

Security Assessment

Security Score:
60/100
Best Practices:
  • HTTPS usage assumed (URL is https)
  • Form includes CSRF token

Analytics & Tracking

Tracking Level:minimal
Privacy Compliance:poor

Advertising & Marketing

Tracking Pixels:
Baidu IDM pixel
Transparency Level:basic

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:moderate

Key Observations

1

Website is fully accessible with rich content in Chinese language.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

25/100
Score

Weak Strict-Transport-Security configuration

LOW

Current value: "max-age=15768000"

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

50/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

60/100
Score

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

No email authentication configured

CRITICAL

Domain is vulnerable to email spoofing

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

62/100
Score

Weak Protocols Supported

HIGH

Server supports weak protocols: TLSv1.1

OCSP Stapling Not Enabled

LOW

OCSP stapling improves performance and privacy

Certificate Transparency Not Implemented

LOW

Certificate is not logged in Certificate Transparency logs

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 34 days

Mixed Content Detected

MEDIUM

4 resources loaded over insecure HTTP

Partial SSL/TLS Assessment

LOW

Completed 3 of 4 security checks due to time constraints

Protocol Support

TLSv1.3TLSv1.2TLSv1.1

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

60/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

Domain Transfer Lock Not Enabled

MEDIUM

Domain can be transferred without authorization

Domain Delete Lock Not Enabled

LOW

Domain can be deleted without additional verification

No DMARC Record

MEDIUM

DMARC policy not configured

Domain Registration Details

Domain Age
2 years(established)
Expiry Risk
medium(72 days)
Protection Level
noneDNSSEC OFF
Suspicious Indicators Detected
  • •No domain protection locks enabled

DNS Records

A Records:120.26.15.94
Name Servers:
dns10.hichina.com
dns9.hichina.com
SOA:Serial: 2025032613, TTL: 600s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:522ms

⚡Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

40/100
Score

Service Exposed: SSH

MEDIUM

Port 22 (SSH) is publicly accessible - SSH - Secure but can be brute-forced

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

网站基于传统的HTML、CSS和JavaScript技术构建，使用了较老版本的jQuery库，未见现代前端框架或响应式设计技术。CMS为eyoucms，支持内容管理和动态内容展示。网站性能表现中等，加载速度适中但移动端优化有限。SEO基础设置存在，包含meta描述和关键词，但缺少结构化数据和Open Graph标签。安全配置不足，缺少关键安全头和现代安全机制。技术栈稳定但存在升级和现代化改进空间，建议引入更现代的前端技术和安全最佳实践。
Analyze Another Website