https://baomoi.com/

Scan ID:: 7b952688-7f3f-45a9-9d38-6ad1a8eece71Finished
Submitted URL:: https://baomoi.com/
Report Finished:: Feb 5, 2025, 16:34:16

Risks · 0 found

Practices that may pose security risks

Security Headers · 0 found

HTTP response headers that can harden the security of a web application

Name	Value	Support	Info
Strict-Transport-Security	—	Good	Declare that a website is only accessible over a secure connection (HTTPS). Click to learn more...
X-Frame-Options	—	Good	Indicate whether a browser should be allowed to render a page in a <frame>, <iframe>, <embed> or <object>. Click to learn more...
X-Content-Type-Options	—	Good	Indicate that the MIME types advertised in the Content-Type headers should be followed and not be changed. Click to learn more...
Content-Security-Policy	—	Good	Control resources the user agent is allowed to load for a given page. Click to learn more...
Referrer-Policy	—	Good	Control how much referrer information should be included with requests. Click to learn more...
Clear-Site-Data	—	Good	Control the data stored by a client browser for their origins. Click to learn more...
X-Permitted-Cross-Domain-Policies	—	Good	Control whether a web client such as Adobe Flash Player or Adobe Acrobat has permission to handle data across domains. Click to learn more...
Permissions-Policy	—	New	Allow and deny the use of browser features in a document or iframe. Click to learn more...
Cross-Origin-Embedder-Policy	—	New	Configure embedding cross-origin resources into the document. Click to learn more...
Cross-Origin-Opener-Policy	—	New	Ensure a top-level document does not share a browsing context group with cross-origin documents. Click to learn more...
Cross-Origin-Resource-Policy	—	New	Request that the browser blocks no-cors cross-origin/cross-site requests to the given resource. Click to learn more...
X-XSS-Protection	—	Deprecated	Deprecated. Stops pages from loading when they detect reflected cross-site scripting (XSS) attacks. Click to learn more...
Feature-Policy	—	Deprecated	Deprecated. Replaced by the Permissions-Policy header. Click to learn more...
Expect-CT	—	Deprecated	Deprecated. Opt in to reporting and/or enforcement of Certificate Transparency requirements. Click to learn more...
Public-Key-Pins	—	Deprecated	Deprecated. Allows HTTPS websites to resist impersonation by attackers using mis-issued or otherwise fraudulent certificates. Click to learn more...

Security Violations · 1 found

Requests or resources offending security policies

Violation	Type	Info
Resource https://baomoi.com/ Description Access to XMLHttpRequest at 'https://hb.gammaplatform.com/adx/request?wid=1500458483&zid=1508490235&hb=pbjs&bidid=281077397030eb&urf=https%3A%2F%2Fbaomoi.com%2F' from origin 'https://baomoi.com' has been blocked by CORS policy: The value of the 'Access-Control-Allow-Credentials' header in the response is '' which must be 'true' when the request's credentials mode is 'include'. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute.	Cross-Origin Resource Sharing	Controls which external origins are allowed load resources. Click to learn more...

Certificates · 16 found

SSL/TLS Certificates enable websites to encrypt transactions between the client and the server and provide server identity verification

Subject	Issue date	Expiry date
baomoi.com	Jan 15, 2025, 00:00:00	Jan 23, 2026, 23:59:59
*.bmcdn.me	Mar 13, 2024, 00:00:00	Mar 23, 2025, 23:59:59
*.zalo.me	Jul 2, 2024, 00:00:00	Jul 12, 2025, 23:59:59
*.zadn.vn	Mar 21, 2024, 00:00:00	Mar 21, 2025, 23:59:59
*.zdn.vn	Jul 8, 2024, 00:00:00	Jul 17, 2025, 23:59:59
*.zascdn.me	Oct 21, 2024, 00:00:00	Oct 27, 2025, 23:59:59
*.api.adtimaserver.vn	Apr 22, 2024, 00:00:00	Apr 21, 2025, 23:59:59
*.google-analytics.com	Jan 20, 2025, 08:36:04	Apr 14, 2025, 08:36:03
baochinhphu.vn	Jan 2, 2025, 09:31:06	Feb 3, 2026, 09:31:05
*.g.doubleclick.net	Jan 20, 2025, 08:36:04	Apr 14, 2025, 08:36:03