Summary of archiveweb.epfl.ch [Desktop version] Website Security Test
Provided "as is" without any warranty of any kind.
Date/Time:Nov 3rd, 2026 18:54 GMT+0
Server IP:128.178.211.3
Reverse DNS:ocp-its-prod-pub.epfl.ch
Location:Lausanne, Switzerland
Version:for desktop
Your final score:
- A
- B
- C
- F
C
It appears that system is not responding or blocking software fingerprinting attempts, performed from the following IP ranges: 192.175.111.224/27, 64.15.129.96/27, 70.38.27.240/28, 72.55.136.144/28. Please whitelist them for successful continuation of the test.
Misconfiguration or weakness
Test Results Summary for archiveweb.epfl.ch
- 1 third-party web software dependancies were identified, including 1 outdated dependancies. A total of 6 known vulnerabilities were detected. No Content Management System (CMS) was identified. One CMS component, JS-library or framework was identified: jquery. Software fingerprinting may be restricted by the system, so the results could be incomplete. Show details.
- Potential GDPR compliance issues were identified related to Website Security. Website Security check may be incomplete because fingerprinting attempts appear to be blocked. Show details.
- The website is non-compliant with PCI DSS Requirement 6.4. The assessment of PCI DSS Requirement 6.3 may be incomplete due to limited software fingerprinting. Show details.
- Issues were identified with key security headers: missing Content-Security-Policy, X-Frame-Options. Optional HTTP headers appear to be properly configured: Server, Referrer-Policy. Show details.
- Content-Security-Policy headers are not present. Show details.
- No cookies were detected. Show details.
- 12 external requests detected; all requests completed successfully. SRI is not used for 5 third-party JavaScript and CSS files. Show details.
- No significant anti-scraping protections were detected. Show details.
- DNS CNAME record detected; DNSSEC signatures are not present. Show details.
Compliance Summary for archiveweb.epfl.ch
- GDPR Compliance Failed: Potential GDPR compliance issues were identified related to Website Security. Website Security check may be incomplete because fingerprinting attempts appear to be blocked.
- PCI DSS Compliance Failed: The website is non-compliant with PCI DSS Requirement 6.4. The assessment of PCI DSS Requirement 6.3 may be incomplete due to limited software fingerprinting.