Cybersecurity Rating
by ImmuniWeb® CyberScore™

Get a free cybersecurity, privacy and AI security rating of your company, partners or suppliers
Free online tool with PDF report
  • Website Security Rating
  • Website Privacy Rating
  • Encryption Security Rating
  • Email Security Rating
  • GenAI Exposure Rating
  • Dark Web Exposure
Free online tool with PDF report
63,079 organizations tested
|Provided "as is" without any warranty of any kind
21
tests
running
667
tests
in 24 hours
tests in 24 hours

Error:

Share this report:

Cybersecurity Rating of carmax.com

Website Security Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLGradeTested on
carmax.comhttps://carmax.comNNovember 6th, 2026 20:55
www.carmax.comhttps://www.carmax.comNNovember 6th, 2026 20:55
caf-customer-exp-service-dev.carmax.comhttps://caf-customer-exp-service-dev.carmax.com/swagger/index.htmlCNovember 6th, 2026 21:00
reviews-qa-east-service.carmax.comhttps://reviews-qa-east-service.carmax.com/CNovember 6th, 2026 21:00
finance-depot-gateway-qa.carmax.comhttps://finance-depot-gateway-qa.carmax.com/C+November 6th, 2026 20:59
Show 46 More

Website Privacy Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLGradeTested on
carmax.comhttps://www.carmax.com/FNovember 6th, 2026 21:24
www.carmax.comhttps://www.carmax.com/FNovember 6th, 2026 21:23
caf-customer-exp-service-dev.carmax.comhttps://caf-customer-exp-service-dev.carmax.com/swagger/index.htmlA+November 6th, 2026 21:23
reviews-qa-east-service.carmax.comhttps://reviews-qa-east-service.carmax.com/A+November 6th, 2026 21:23
finance-depot-gateway-qa.carmax.comhttps://finance-depot-gateway-qa.carmax.com/A+November 6th, 2026 21:23
Show 46 More

SSL Security Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLProtocolGradeTested on
carmax.comhttps://carmax.com
23.209.57.35:443
HTTPSANovember 6th, 2026 20:56
www.carmax.comhttps://www.carmax.com
23.60.177.64:443
HTTPSA+November 6th, 2026 20:57
caf-customer-exp-service-dev.carmax.comhttps://caf-customer-exp-service-dev.carmax.com
150.171.110.20:443
HTTPSA+November 6th, 2026 20:59
reviews-qa-east-service.carmax.comhttps://reviews-qa-east-service.carmax.com
13.82.101.179:443
HTTPSBNovember 6th, 2026 20:59
finance-depot-gateway-qa.carmax.comhttps://finance-depot-gateway-qa.carmax.com
20.49.104.8:443
HTTPSA-November 6th, 2026 21:00
Show 46 More

Email Security Rating | Overview

Back to Top
HostnameGradeTested on
carmax.comB-November 6th, 2026 20:59
  • Email Server Security Report
    A total of 2 email servers were analyzed. Open relay was not detected, SMTP enumeration was not detected, a secure authentication was enforced across all tested servers, and PTR records were properly configured. The average response latency was approximately 0.048s.
  • Email SSL/TLS Encryption Report
    SSL/TLS security testing was completed for 1 email server. Server grade is F.
  • Email Server DNS Security Report
    SPF is set with issues, DKIM is not set, and DMARC is set properly. MTA-STS is not configured for this domain.
  • Email Server Black and Spam Lists Report
    No email servers were found on blacklists.

GenAI Exposure Rating

Back to Top
  • No vibe-coded or AI-created code patterns detected across 51 websites.
  • No leaks of AI tokens or other AI-related and sensitive data detected on the Dark Web.
  • No leaks of AI tokens or other AI-related and sensitive data detected across 51 websites.

Dark Web and Threat Exposure Rating | Overview

Back to Top
HostnameTested on
carmax.comNovember 6th, 2026 20:55
  • Dark Web Exposure Report
    A total of 649 dark web incidents detected, containing 16584 mentions of the domain. 547 out of 649 incidents originate from Compromised Databases. Out of all detected Compromised Credentials, 1765 are considered to be of High risk. Mentions in Leaked Databases represent the most common source of compromised information, accounting for 14996 of the 16584 detected domain mentions on the Dark Web.
  • Unprotected Cloud Storage Report
    A total of 6 buckets detected across 2 cloud storage providers: 3 buckets were detected in Amazon S3; 3 buckets were detected in Google Cloud Storage.
  • Phishing Websites Report
    13 potential phishing URLs detected. Example hostnames: adoring-wing-d193d1.netlify.app and carmax-carmax.blogspot.com; the full list is available in the detailed report.
  • Cybersquatting Domains Report
    81 potential cybersquatting domains detected. Example domains: carmaxtechnologies.com, carmax-hr.com and karmaks.com; additional cybersquatting domains are available in the detailed report.
  • Typosquatting Domains Report
    18 potential typosquatting domains detected. Example domains: cqrmax.com, caqrmax.com and fcarmax.com; additional typosquatting domains are available in the detailed report.
  • Fake Accounts in Social Media Report
    63 squatted social network accounts detected across 6 social networks. Most affected social networks include YouTube with 22 accounts including @carmax2008 and @carmax2011, Reddit with 20 accounts including @carmax2000 and @carmaxim and GitHub with 9 accounts including @carmaxdm and @carmaxqa; the full list is available in the detailed report.
Share this report:

Upgrade to ImmuniWeb® AI Platform