Is xingruiguoji.com Safe? Security Analysis for 广东星芮生物科技有限公司
Check if xingruiguoji.com is a scam or legitimate. Free security scan and reviews.
AI Summary
广东星芮生物科技有限公司是一家专注于化妆品OEM/ODM/OBM代加工的制造企业，拥有22年行业经验，服务超过2600个品牌。公司总部位于广州，工厂位于佛山国家级高新科技园，具备国际认证资质（GMPC、ISO22716），并拥有丰富的植物护肤研发资源和现代化生产线。网站内容丰富，涵盖主营业务、产品展示、新闻资讯及联系方式，面向化妆品品牌商及客户，提供一站式定制服务。技术架构基于HTML5、CSS3、JavaScript及UIkit框架，支持PC及移动端访问，整体性能和用户体验良好。
Detected Technologies
🧠AI Business Intelligence
Technology stack, business insights, and market analysis powered by AI.
Business Intelligence
Market & Strategic Analysis
公司市场定位为国内领先的化妆品OEM代加工厂，具备强大的研发和生产能力，结合植物护肤新科技及国际认证，形成差异化竞争优势。业务模式涵盖OEM、ODM、OBM及品牌营销，目标客户为化妆品品牌商及创业者。通过丰富的产品线和多渠道营销，保持市场活跃度。合作伙伴包括阿里巴巴店铺、搜狐新闻平台及主流社交媒体，显示良好的生态合作关系。公司规模中等，具备较强的行业影响力和品牌信誉。
Extracted Contact Information
Marketing Intelligence Data
Email Addresses (1)
Phone Numbers (1)
Physical Addresses (1)
Security Posture Analysis
Comprehensive Security Assessment
网站启用HTTPS，未检测到明显安全漏洞，表单具备基础验证，未发现敏感信息泄露。缺少安全相关HTTP头部配置及安全政策披露，未提供漏洞披露或安全联系方式，隐私及Cookie政策缺失，存在合规风险。WHOIS信息缺失，域名注册信息不透明，降低信任度。建议加强安全头配置，完善隐私合规文档，建立安全事件响应机制，提升整体安全成熟度。
Strategic Recommendations
Priority Actions for Security Improvement
完善网站隐私政策和Cookie政策，明确用户数据处理流程，提升合规性。
✨Observations
AI-powered comprehensive website and business analysis.
AI-Enhanced Website Analysis
Business Insights
广东星芮生物科技有限公司
星芮国际服务化妆品行业22年，提供专业化妆品OEM/ODM代加工服务。代加工产品包括网红爆款化妆品、面膜、护肤品以及大健康养生等多种化妆品，针对不同的客户，提供个性化的产品配方、生产及策划一站式服务。
good
consistent
Technical Stack
moderate
good
basic
good
Security Assessment
- HTTPS usage implied (site uses https URL)
- No exposed sensitive data in HTML
- Form inputs with validation attributes
Analytics & Tracking
Advertising & Marketing
Website Quality Assessment
Key Observations
Website is fully accessible with rich content in Chinese language.
🛡️Security Headers
HTTP security headers analysis and recommendations.
Security Headers
HTTP security headers analysis
Missing Strict-Transport-Security header
HIGHForces HTTPS connections
Missing Content-Security-Policy header
HIGHControls resources the browser is allowed to load
Missing Referrer-Policy header
LOWControls referrer information sent with requests
Missing Permissions-Policy header
MEDIUMControls browser features and APIs
👤GDPR Compliance
Privacy and data protection assessment under GDPR regulations.
GDPR Compliance
Privacy and data protection assessment
No Privacy Policy found
HIGHGDPR requires a clear and accessible privacy policy
No Cookie Policy found
HIGHGDPR requires clear information about cookie usage
No Cookie Consent Banner found
HIGHGDPR requires explicit consent for non-essential cookies
GDPR Compliance Analysis
🛡️NIS2 Compliance
Network & Information Security Directive compliance assessment.
NIS2 Compliance
Network & Information Security Directive
No information security framework found
HIGHNIS2 requires documented cybersecurity and information security measures
No vulnerability disclosure policy
MEDIUMNIS2 encourages coordinated vulnerability disclosure
No security policy documentation found
HIGHNIS2 requires documented cybersecurity governance and risk management
No incident response procedures found
HIGHNIS2 requires documented incident response and business continuity plans
No business continuity planning found
MEDIUMNIS2 emphasizes operational resilience and business continuity
No security contact information
HIGHNIS2 requires clear incident reporting channels
No vulnerability reporting mechanism
MEDIUMClear vulnerability reporting supports coordinated disclosure
No NIS2 reference found
LOWConsider explicitly mentioning NIS2 compliance efforts
Critical sector without clear security compliance
HIGHDetected sectors: transport, digital
📧Email Security
SPF, DKIM, and DMARC validation and email security assessment.
Email Security
SPF, DKIM, and DMARC validation
No SPF record found
HIGHSPF helps prevent email spoofing
No MX records found
MEDIUMDomain cannot receive email without MX records
No DKIM record found
MEDIUMDKIM adds cryptographic signatures to emails
No BIMI Record
LOWBIMI displays brand logos in email clients
No MTA-STS Policy
MEDIUMMTA-STS enforces TLS for email delivery
No TLS-RPT Record
LOWTLS-RPT provides reporting for email TLS issues
No email authentication configured
CRITICALDomain is vulnerable to email spoofing
🏆SSL/TLS Security
Certificate validity and encryption analysis.
SSL/TLS Security
Certificate validity and encryption analysis
SSL Certificate Expires Soon
HIGHSSL certificate expires in 18 days
Mixed Content Detected
MEDIUM15 resources loaded over insecure HTTP
Partial SSL/TLS Assessment
LOWCompleted 2 of 4 security checks due to time constraints
Certificate Details
OCSP Status
📊DNS Health
DNS configuration and security assessment.
DNS Health
DNS configuration and security assessment
No MX Records
LOWDomain cannot receive email without MX records
DNSSEC Not Enabled
MEDIUMDNSSEC is not configured for this domain
CAA Records Not Configured
LOWCertificate Authority Authorization (CAA) records not found
Domain Transfer Lock Not Enabled
MEDIUMDomain can be transferred without authorization
Domain Delete Lock Not Enabled
LOWDomain can be deleted without additional verification
No DMARC Record
MEDIUMDMARC policy not configured
Domain Registration Details
- •No domain protection locks enabled
DNS Records
DNSSEC Status
⚡Network Security
Port scanning and network exposure analysis.
Network Security
Port scanning and network exposure analysis
Good Network Security Posture
LOWNo unnecessary services detected on common risky ports
🔧Technical Analysis
Detailed technical findings and analysis from AI assessment.
Technical Analysis
Comprehensive security assessment findings