en
CMC Telecom | Comprehensive Service Provider - CMC Telecom | Comprehensive Service Provider
CMC Telecom | Comprehensive Service Provider
IndustryOriginGlobal rankRank in Vietnam
Updated at The score and grade reflect the result recorded at scan time. Review each check and its evidence for the full context.
This report summarizes the security observations recorded for cmctelecom.vn at scan time. Review each check and its evidence for the full context.
At assessment time, CyStack did not find cmctelecom.vn or related infrastructure on any scam, phishing, or malware warning list after checking 5 online reputation sources. This result reflects external observations; it does not guarantee absolute safety or verify the organization’s legal status or reputation.
Addresses, servers and services that are visible from the Internet.
Data sources
CyStack compiles scan results from its internal cybersecurity monitoring systems, including CyStack VulnScan and CyStack Threat Intelligence, together with publicly available Internet data. The assessment only observes and analyzes information already available; it does not attempt unauthorized access, test passwords, send exploit code, or change or disrupt the assessed system.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the enterprise.
These 3 failed checks or warnings have the greatest impact on the result for cmctelecom.vn.
Why it matters
Content Security Policy (CSP) limits where scripts, styles, frames, and other browser content may come from. A strong policy reduces the impact if an attacker manages to inject content into a page.
What to do
Define only the sources the application needs, test the policy before activating it, and avoid broad wildcard (*) rules, unsafe-inline, and unsafe-eval where possible.
Evidence and check scope
References
Why it matters
A policy of quarantine or reject tells receiving services to move suspicious mail to spam or refuse it. A monitoring-only policy (p=none) records the problem but does not ask receivers to stop spoofed mail.
What to do
After every legitimate sender passes DMARC, move gradually to quarantine and then reject, covering 100% of messages.
Evidence and check scope
Why it matters
Without the nosniff setting, a browser may guess a file's type and treat harmless-looking content as executable code. This can turn an incorrect Content-Type into a security issue.
What to do
Send X-Content-Type-Options: nosniff on every response and return an accurate Content-Type.
Evidence and check scope
Each public IP is grouped with its open services, identified products and any CVEs that may apply to the observed version.
101.99.57.75static.cmcti.vn
nginxnginxVersion not visible2402:5300:406:7::2c8No open service was observed on this address in the ports checked.
References
References
BootstrapG
Google AnalyticsG
Google Tag Manager+13BootstrapUI FrameworksVersion not visibleBootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.comGoogle AnalyticsAnalyticsVersion not visibleGoogle Analytics is a free web analytics service that tracks and reports website traffic.
google.com/analyticsGoogle Tag ManagerTag ManagersVersion not visibleGoogle Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.
www.google.com/tagmanager
HSTSSecurityVersion not visibleHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org/rfc/rfc6797#section-6.1
jQueryJavaScript LibrariesVersion not visiblejQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.comjQuery MigrateJavaScript Libraries1.4.1Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.
github.com/jquery/jquery-migrate
ModernizrJavaScript LibrariesVersion not visibleModernizr is a JavaScript library that detects the features available in a user's browser.
modernizr.com
MySQLDatabasesVersion not visibleMySQL is an open-source relational database management system.
mysql.com
NginxReverse Proxies · Web ServersVersion not visibleNginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org/en
PHPProgramming LanguagesVersion not visiblePHP is a general-purpose scripting language used for web development.
php.net
PolylangTranslation · WordPress PluginsVersion not visiblePolylang is a WordPress plugin which allows you to create multilingual WordPress site.
wordpress.org/plugins/polylang
SwiperJavaScript LibrariesVersion not visibleSwiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.
swiperjs.com
WordPressBlogs · CMSVersion not visibleWordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.
wordpress.org
WOWJavaScript Frameworks · JavaScript Graphics · Web FrameworksVersion not visibleReveal CSS animation as you scroll down a page.
www.delac.io/WOW
Yoast SEOSEO · WordPress Plugins11.5Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.
yoast.com/wordpress/plugins/seo
CmcWordpress Theme5.2.2Recently completed assessments, prioritizing websites with a similar sector, country or security grade for easier comparison.
Vietnam
