Skip to main content

Is yongsheng-packing.com a Scam? Security Check Results - 常州永盛新材料装备股份有限公司 Reviews

yongsheng-packing.com favicon

Is yongsheng-packing.com Safe? Security Analysis for 常州永盛新材料装备股份有限公司

Check if yongsheng-packing.com is a scam or legitimate. Free security scan and reviews.

ManufacturingChinamedium
jQuery 1.8.3Bootstrap CSSSwiper.jsLayer.jsBaidu Analytics+1 more
Analyzed 8/3/2025Completed 5:30:16 PM
64
Security Score
MEDIUM RISK

AI Summary

常州永盛新材料装备股份有限公司 is a medium-sized Chinese manufacturing company specializing in the design and production of coating machines, slitting machines, rewinding machines, and cutting machines primarily for industrial applications such as adhesive tapes and films. Established in 1992, the company positions itself as a leading domestic supplier with a comprehensive product range and a strong focus on quality and customer service. The website reflects a professional business presence with detailed product showcases and company information, targeting industrial clients and equipment buyers. Technically, the website employs a traditional tech stack including jQuery 1.8.3, Bootstrap, and Swiper.js, with Baidu Analytics for tracking. The site is mobile optimized and offers a good user experience, though some technologies are outdated which may pose security risks. SEO and accessibility are basic but functional. No CMS is explicitly identified, suggesting a custom or proprietary platform. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks modern security headers and uses an outdated JavaScript library version. There are no visible privacy or cookie policies, nor incident response or security policy disclosures, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the website is legitimate and trustworthy with a moderate security posture. Strategic improvements in updating libraries, adding privacy and cookie policies, and enhancing security headers would strengthen compliance and security. The company’s domain registration details align well with its business claims, supporting its legitimacy.

Detected Technologies

jQuery 1.8.3Bootstrap CSSSwiper.jsLayer.jsBaidu AnalyticsRequireJS

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

The company operates in the manufacturing sector, focusing on industrial machinery for coating and slitting applications. Its competitive advantages include a long operational history since 1992, a broad product portfolio, and a strong technical team. The business model centers on manufacturing and direct sales with after-sales support. The website indicates a focus on domestic and possibly international industrial clients. The presence of multiple partner domains in the footer suggests an established partnership ecosystem. Growth indicators include ongoing product development and a comprehensive product showcase. The company emphasizes quality, innovation, and customer service as key differentiators.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (2)

s*****@yongsheng-packing.com
e*****@yongsheng-packing.com

Phone Numbers (1)

051*******

Security Posture Analysis

Comprehensive Security Assessment

The current security maturity level is moderate. The use of HTTPS and absence of exposed sensitive data are positive indicators. However, the use of an outdated jQuery version (1.8.3) introduces potential vulnerabilities. The lack of security headers such as Content-Security-Policy and X-Frame-Options reduces defense-in-depth. No formal security policies, incident response contacts, or vulnerability disclosure mechanisms are present, which limits transparency and preparedness. Compliance with GDPR or similar regulations is not evident due to missing privacy and cookie policies. The security culture appears basic, with room for improvement in formalizing security practices and policies.

Strategic Recommendations

Priority Actions for Security Improvement

1

Update all JavaScript libraries, especially jQuery, to current secure versions to mitigate known vulnerabilities.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

常州永盛新材料装备股份有限公司

Description:

常州永盛新材料股份有限公司是涂布机和分切机生产厂家,主要生产热熔胶涂布机、离型膜涂布机、不干胶涂布机、涂布试验机、不干胶分切机等产品。公司专注设计、制造涂布、复合、分切、包装系列设备,拥有丰富的研发和制造经验,产品质量可靠,售后服务及时优质。

Key Services:
design and manufacture of coating machinesproduction of slitting machinesmanufacture of rewinding and cutting machinesafter-sales service and support
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
jQuery 1.8.3Bootstrap CSSSwiper.jsLayer.jsBaidu AnalyticsRequireJS
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

basic

Security Assessment

Security Score:
65/100
Best Practices:
  • HTTPS enabled
  • No visible exposed sensitive data
  • Use of analytics scripts with async loading

Analytics & Tracking

Services:
Baidu AnalyticsOneAll
Tracking Level:moderate
Privacy Compliance:poor

Advertising & Marketing

Tracking Pixels:
Baidu Analytics
Marketing Tools:
Baidu AnalyticsOneAll social login/statistics
Transparency Level:basic

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:moderate

Key Observations

1

Website is fully accessible with no blocking or WAF challenges.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

80/100
Score

Weak Referrer-Policy configuration

LOW

Current value: "unsafe-url"

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

50/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: transport, digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

60/100
Score

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

No email authentication configured

CRITICAL

Domain is vulnerable to email spoofing

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

67/100
Score

Weak Protocols Supported

HIGH

Server supports weak protocols: TLSv1.1

Certificate Transparency Not Implemented

LOW

Certificate is not logged in Certificate Transparency logs

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 36 days

Mixed Content Detected

MEDIUM

10 resources loaded over insecure HTTP

Partial SSL/TLS Assessment

LOW

Completed 3 of 4 security checks due to time constraints

Protocol Support

TLSv1.3TLSv1.2TLSv1.1

OCSP Status

OCSP Stapling Enabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

75/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

No DMARC Record

MEDIUM

DMARC policy not configured

DNS Records

A Records:60.247.152.80
Name Servers:
ns1.dns-diy.comDNS only
ns2.dns-diy.comDNS only
ns3.dns-diy.comDNS only
ns4.dns-diy.comDNS only
MX Records:
20: mx.corpease.net

DNSSEC Status

DNSSEC Not Enabled

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website uses a traditional but somewhat outdated technology stack including jQuery 1.8.3 and Bootstrap CSS. It employs Swiper.js for interactive elements and Layer.js for UI components. Baidu Analytics and OneAll services are used for tracking and social login. The site is mobile optimized with responsive design and uses RequireJS for modular JavaScript loading. Performance is moderate with no major issues detected. The CMS appears custom or proprietary, with no popular CMS identified. Technical debt is indicated by outdated libraries and lack of modern security headers. Opportunities exist to modernize the stack, improve accessibility, and enhance SEO.
Analyze Another Website