Skip to main content

Is zrjysb.com a Scam? Security Check Results - 上海中人教育设备有限公司 Reviews

Is zrjysb.com Safe? Security Analysis for 上海中人教育设备有限公司

Check if zrjysb.com is a scam or legitimate. Free security scan and reviews.

EducationChinamedium
HTMLCSSJavaScriptjQuery
Analyzed 8/4/2025Completed 2:41:03 AM
39
Security Score
HIGH RISK

AI Summary

上海中人教育设备有限公司 operates a website focused on manufacturing and selling educational and training equipment, including transparent hydraulic experimental platforms, elevator simulation models, and various vocational training devices. The company positions itself as a reputable player in the education and manufacturing sectors with a history dating back to 2006 and holds ISO9001—2000 certification. The website content is comprehensive in product offerings and educational solutions, targeting educational institutions and vocational training centers primarily in China. Technically, the website uses basic web technologies such as HTML, CSS, and jQuery, with moderate performance and basic mobile optimization. However, there is no evidence of modern CMS or advanced frameworks. SEO and accessibility are basic but functional. The site lacks privacy and cookie policies, and no contact emails or phone numbers are explicitly provided, limiting user engagement and trust. From a security perspective, the site does not show evidence of HTTPS enforcement or security headers, which is a concern. The WHOIS data is missing or unavailable, which is inconsistent with the active website presence and raises questions about domain legitimacy. No incident response or vulnerability disclosure information is provided, and privacy compliance is minimal. Overall, the site is functional and content-rich but requires significant improvements in security posture, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

Detected Technologies

HTMLCSSJavaScriptjQuery

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

The company targets the education and vocational training market with a product portfolio that includes hydraulic, electrical, mechanical, and automation training equipment. Their business model is manufacturing and direct sales, supplemented by educational consulting and training room construction solutions. The presence of an ISO certification and ICP license indicates regulatory compliance and quality focus. The website links to a related domain suggesting a broader digital presence. However, the lack of WHOIS data and minimal contact information may hinder customer trust and business growth. The company appears medium-sized with a stable market position in China’s educational equipment sector.

Extracted Contact Information

Marketing Intelligence Data

Physical Addresses (1)

Security Posture Analysis

Comprehensive Security Assessment

The security maturity level is low to moderate. The absence of HTTPS confirmation and security headers exposes the site to potential interception and attacks. No privacy or cookie policies indicate non-compliance with modern data protection regulations such as GDPR. The missing WHOIS data is a critical red flag for domain legitimacy. No visible vulnerabilities or malware were detected in the content, but the lack of incident response channels and vulnerability disclosure mechanisms suggests limited preparedness for security incidents. The site should prioritize implementing HTTPS, security headers, privacy policies, and transparent domain registration to improve security posture.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement HTTPS with a valid SSL/TLS certificate and enforce secure connections site-wide.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

上海中人教育设备有限公司

Description:

上海中人教育设备有限公司是专业从事教学设备生产的企业。自主生产透明液压实验台,仿真电梯模型,教学设备,模型,教育装备,现代制冷与空调系统实训设备等。2006年时企业已通过ISO9001—2000国际质量管理体系认证.

Key Services:
教学设备生产教学模型研发教学设备销售实训室建设方案
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
HTMLCSSJavaScriptjQuery
Performance:

moderate

Mobile:

basic

Accessibility:

basic

SEO:

basic

Security Assessment

Security Score:
40/100

Analytics & Tracking

Services:
Baidu Analytics
Tracking Level:moderate
Privacy Compliance:poor

Advertising & Marketing

Transparency Level:poor

Website Quality Assessment

Design Quality:basic
User Experience:basic
Content Relevance:good
Navigation Clarity:good
Professionalism:basic
Trustworthiness:moderate

Key Observations

1

Website is fully accessible with rich content in Chinese language focused on educational and training equipment.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

15/100
Score

Missing Strict-Transport-Security header

HIGH

Forces HTTPS connections

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

50/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
phone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: transport, digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

65/100
Score

No DMARC record found

HIGH

DMARC provides email authentication and reporting

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
DMARC Details
Policy:none
MTA-STS Details

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

52/100
Score

Weak Protocols Supported

HIGH

Server supports weak protocols: TLSv1.1

OCSP Stapling Not Enabled

LOW

OCSP stapling improves performance and privacy

Certificate Transparency Not Implemented

LOW

Certificate is not logged in Certificate Transparency logs

SSL Certificate Expires Soon

HIGH

SSL certificate expires in 26 days

Mixed Content Detected

MEDIUM

7 resources loaded over insecure HTTP

Partial SSL/TLS Assessment

LOW

Completed 3 of 4 security checks due to time constraints

Protocol Support

TLSv1.3TLSv1.2TLSv1.1

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

70/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

Domain Transfer Lock Not Enabled

MEDIUM

Domain can be transferred without authorization

Domain Delete Lock Not Enabled

LOW

Domain can be deleted without additional verification

Domain Registration Details

Domain Age
13 years(mature)
Expiry Risk
none(1640 days)
Protection Level
noneDNSSEC OFF
Suspicious Indicators Detected
  • No domain protection locks enabled

DNS Records

A Records:39.104.106.97
Name Servers:
dns27.hichina.com
dns28.hichina.com
SOA:Serial: 2025042409, TTL: 600s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:320ms

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

0/100
Score

Critical Service Exposed: RDP

CRITICAL

Port 3389 (RDP) is publicly accessible - RDP - Remote Desktop, prime ransomware target

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on a simple technology stack using HTML, CSS, and jQuery without modern frameworks or CMS detected. Performance is moderate with basic mobile optimization and accessibility features. SEO is basic but includes meta keywords and descriptions. The site lacks advanced technical features such as structured data (JSON-LD), Open Graph tags, or modern JavaScript frameworks. There is no evidence of server-side technologies or hosting provider details. The site could benefit from modernization to improve performance, mobile responsiveness, and SEO.
Analyze Another Website