Summary of play.mercadolibre.com [Desktop version] Website Security Test
Provided "as is" without any warranty of any kind.
Date/Time:Nov 6th, 2026 22:50 GMT+0
Server IP:3.162.3.31
Reverse DNS:server-3-162-3-31.yul62.r.cloudfront.net
Location:Mount Hope, United States
Version:for desktop
Your final score:
- A
- B
- C
- F
A+
Test Results Summary for play.mercadolibre.com
- 3 third-party web software dependancies were identified, including one outdated dependancy. No known vulnerabilities were detected. No Content Management System (CMS) was identified. The following CMS components, JS-libraries or frameworks were identified: axios, core-js, react. Show details.
- Potential GDPR compliance issues were identified related to Cookie Disclaimer. Show details.
- No obvious PCI DSS compliance issues were detected for Requirements 6.3 and 6.4. Show details.
- Issues were identified with key security header misconfigured Content-Security-Policy. An optional HTTP header may not be properly configured: Content-Security-Policy-Report-Only. Deprecated HTTP headers detected: X-XSS-Protection. Show details.
- Content-Security-Policy is enforced but configuration issues were identified: overly permissive directives, deprecated directives, directive errors. The report-only Content-Security-Policy contains issues: overly permissive directives, deprecated directives, directive errors. Show details.
- 4 cookies detected; _mldataSessionId, _d2id have security or privacy-related configuration issues. Show details.
- No external requests were detected. Show details.
- 1 robots.txt rule and 1 bot protection mechanism detected. No protection detected via User-Agent blocks or meta restrictions. Show details.
- DNS CNAME record detected; DNSSEC signatures are not present. Show details.
Compliance Summary for play.mercadolibre.com
- GDPR Compliance Failed: Potential GDPR compliance issues were identified related to Cookie Disclaimer.
- PCI DSS Compliance Passed: No obvious PCI DSS compliance issues were detected for Requirements 6.3 and 6.4.
- PDF Certificate and Badge
- Web Server Configuration Test
- Web Software Security Test
- GDPR Compliance Test
- PCI DSS Compliance Test
- HTTP Headers Security Test
- Content Security Policy (CSP) Test
- Cookies Privacy and Security Test
- External Content Security Test
- Protection from Data Scraping Test
- DNSSEC Configuration Test


