web30s.vn

Thiết Kế Website

P.A Việt Nam - Web30s cung cấp giải pháp vượt trội trong thiết kế website, website trọn gói, website đa ngành nghề, website theo mẫu tiện lợi, nhanh chóng.

Built with

Backend

PHP

Generator tag

Thiết Kế Website

Also detected

Libraries

jQuery

Infrastructure

Apache

Third-party services

Facebook Pixel · Google Analytics · Google Tag Manager

Overview

Status

alive

Registered

unknown (this domain's registry doesn't publish it via RDAP)

First seen here

2026-09-22

Security grade

F (30/100, from headers & TLS)

Privacy score

48/100 (3 third-party script hosts, 3 tracking/marketing services)

Hosting

SUPERDATA-VN · AS45544 · Vietnam

Server header

Apache

Response time

648 ms to first byte, measured from our crawler

TLS certificate

Let's Encrypt · TLSv1.3 · expires 2026-10-12

Language

vi-vn

Mobile-ready

yes (viewport meta tag)

Linked to from

24 other sites seen so far

Loads scripts from

Third-party domains this page pulls JavaScript or iframes from. Each one can see who visits.

What to fix

1. Add Strict-Transport-Security
   Header: Strict-Transport-Security: max-age=31536000; includeSubDomains
2. Add a Content-Security-Policy
   Limits which scripts can run, and is the main defense against XSS. Start with Content-Security-Policy-Report-Only to test.
3. Add X-Content-Type-Options
   Header: X-Content-Type-Options: nosniff
4. Prevent clickjacking
   Header: X-Frame-Options: DENY (or a CSP frame-ancestors directive).
5. Add a Referrer-Policy
   Header: Referrer-Policy: strict-origin-when-cross-origin
6. Mark cookies Secure and HttpOnly
   At least one cookie is sent without these flags, exposing it to interception or scripts.

Security & email signals

• ✓ HTTPS
• ✗ HSTS
• ✗ Content-Security-Policy
• ✗ X-Content-Type-Options
• ✗ X-Frame-Options
• ✗ Referrer-Policy
• ✗ Permissions-Policy
• ✓ SPF record
• ✓ DMARC record
• ✗ DKIM record
• ✗ Cookies set securely
• ✓ Has real content (not an empty shell)
• ✓ Valid TLS certificate

Badge

Show this site's security grade in a README or footer:

<a href="https://webtelemetry.dev/site/web30s.vn"><img src="https://webtelemetry.dev/badge/web30s.vn.svg" alt="Security grade"></a>

Generated automatically from passive, publicly observable data. Think something here is wrong or want this profile removed? See /bot. Machine-readable: JSON.