Summary of merchant.canarabank.bank.in [Desktop version] Website Security Test
Provided "as is" without any warranty of any kind.
Date/Time:Nov 6th, 2026 03:21 GMT+0
Server IP:103.129.204.205
Reverse DNS:-
Location:India
Version:for desktop
Your final score:
- A
- B
- C
- F
A
It appears that system is not responding or blocking software fingerprinting attempts, performed from the following IP ranges: 192.175.111.224/27, 64.15.129.96/27, 70.38.27.240/28, 72.55.136.144/28. Please whitelist them for successful continuation of the test.
Misconfiguration or weakness
Test Results Summary for merchant.canarabank.bank.in
- No third-party web software dependancies were identified. Software fingerprinting may be restricted by the system, so the results could be incomplete. Show details.
- Potential GDPR compliance issues were identified related to Privacy Policy, Cookie Disclaimer. Website Security check may be incomplete because fingerprinting attempts appear to be blocked. Show details.
- The website is non-compliant with PCI DSS Requirement 6.4. The assessment of PCI DSS Requirement 6.3 may be incomplete due to limited software fingerprinting. Show details.
- Issues were identified with key security headers: missing X-Frame-Options; misconfigured Content-Security-Policy. Optional HTTP headers appear to be properly configured: Access-Control-Allow-Origin, Permissions-Policy, Referrer-Policy, Cache-Control. Show details.
- Content-Security-Policy is enforced but configuration issues were identified: deprecated directives. A report-only Content-Security-Policy is not present. Show details.
- 3 cookies detected; TS138cbad7027, TS0175c393028 have security or privacy-related configuration issues. Show details.
- No external requests were detected. Show details.
- 1 User-Agent block and 1 bot protection mechanism detected. No protection detected via robots.txt rules or meta restrictions. Show details.
Compliance Summary for merchant.canarabank.bank.in
- GDPR Compliance Failed: Potential GDPR compliance issues were identified related to Privacy Policy, Cookie Disclaimer. Website Security check may be incomplete because fingerprinting attempts appear to be blocked.
- PCI DSS Compliance Failed: The website is non-compliant with PCI DSS Requirement 6.4. The assessment of PCI DSS Requirement 6.3 may be incomplete due to limited software fingerprinting.


