Summary of travel.aircanada.com [Desktop version] Website Security Test
Provided "as is" without any warranty of any kind.
Date/Time:Nov 5th, 2026 15:44 GMT+0
Server IP:23.192.49.222
Reverse DNS:a23-192-49-222.deploy.static.akamaitechnologies.com
Location:Toronto, Canada
Version:for desktop
Your final score:
- A
- B
- C
- F
C
Test Results Summary for travel.aircanada.com
- 5 third-party web software dependancies were identified, including 4 outdated dependancies. A total of 8 known vulnerabilities were detected. No Content Management System (CMS) was identified. The following CMS components, JS-libraries or frameworks were identified: jquery, jquery-cookie, jquery-ui, and others. Show details.
- Potential GDPR compliance issues were identified related to Privacy Policy, Website Security. Show details.
- The website is compliant with PCI DSS Requirement 6.4, while being non-compliant with Requirement 6.3. Show details.
- Issues were identified with key security header missing Content-Security-Policy. An optional HTTP header may not be properly configured: X-Powered-By. Deprecated HTTP headers detected: X-XSS-Protection. Show details.
- Content-Security-Policy headers are not present. Show details.
- 10 cookies detected; _abck, bm_lso, RT, bm_sz, bm_so, JSESSIONID, dtCookie have security or privacy-related configuration issues. Show details.
- 11 external requests detected; all requests completed successfully. SRI is not used for 7 third-party JavaScript and CSS files. Show details.
- No significant anti-scraping protections were detected. Show details.
- DNS CNAME record detected; DNSSEC signatures are not present. Show details.
Compliance Summary for travel.aircanada.com
- GDPR Compliance Failed: Potential GDPR compliance issues were identified related to Privacy Policy, Website Security.
- PCI DSS Compliance Failed: The website is compliant with PCI DSS Requirement 6.4, while being non-compliant with Requirement 6.3.
