en
Mắt Bão Commerce
Nền tảng Thương mại Điện tử hiện đại, linh hoạt và tối ưu hiệu suất
IndustryOriginGlobal rankRank in Vietnam
Updated at The score and grade reflect the result recorded at scan time. Review each check and its evidence for the full context.
This report summarizes the security observations recorded for www.matbao.net at scan time. Review each check and its evidence for the full context.
At assessment time, CyStack did not find www.matbao.net or related infrastructure on any scam, phishing, or malware warning list after checking 5 online reputation sources. This result reflects external observations; it does not guarantee absolute safety or verify the organization’s legal status or reputation.
Check whether the website uses a secure connection and whether its HTTPS certificate remains valid.
Data sources
CyStack compiles scan results from its internal cybersecurity monitoring systems, including CyStack VulnScan and CyStack Threat Intelligence, together with publicly available Internet data. The assessment only observes and analyzes information already available; it does not attempt unauthorized access, test passwords, send exploit code, or change or disrupt the assessed system.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the enterprise.
These 3 failed checks or warnings have the greatest impact on the result for www.matbao.net.
Why it matters
DMARC lets the domain owner tell receiving services what to do when the visible From address is not verified by SPF or DKIM. Without DMARC, attackers have more opportunity to impersonate the domain in phishing email.
What to do
Publish a DMARC record at _dmarc, begin by collecting reports, and confirm that legitimate senders pass before applying a blocking policy.
References
Why it matters
Content Security Policy (CSP) limits where scripts, styles, frames, and other browser content may come from. A strong policy reduces the impact if an attacker manages to inject content into a page.
What to do
Define only the sources the application needs, test the policy before activating it, and avoid broad wildcard (*) rules, unsafe-inline, and unsafe-eval where possible.
Evidence and check scope
Why it matters
HTTP Strict Transport Security (HSTS) tells a browser to use HTTPS automatically on future visits. This reduces the chance that a visitor is downgraded to an unencrypted connection.
What to do
After confirming that every required page works over HTTPS, send the Strict-Transport-Security header on all HTTPS responses.
Evidence and check scope
Identify website protection and check whether public IPs appear on warning lists.
AWS| Hosting or network provider | DroneBL | Mailspike | PSBL | SpamCop | blocklist.de | Spamhaus |
|---|---|---|---|---|---|---|
| 13.249.231.15 | Not listed | Not listed | Not listed | Not listed | Not listed | Unavailable |
Check domain and email settings that help prevent brand impersonation.
References
| 13.249.231.31 |
| Not listed |
| Not listed |
| Not listed |
| Not listed |
| Not listed |
| Unavailable |
| 13.249.231.81 | Not listed | Not listed | Not listed | Not listed | Not listed | Unavailable |
| 13.249.231.96 | Not listed | Not listed | Not listed | Not listed | Not listed | Unavailable |
Recently completed assessments, prioritizing websites with a similar sector, country or security grade for easier comparison.
Vietnam
