Cybersecurity Rating
by ImmuniWeb® CyberScore™

Get a free cybersecurity, privacy and AI security rating of your company, partners or suppliers
Free online tool with PDF report
  • Website Security Rating
  • Website Privacy Rating
  • Encryption Security Rating
  • Email Security Rating
  • GenAI Exposure Rating
  • Dark Web Exposure
Free online tool with PDF report
63,079 organizations tested
|Provided "as is" without any warranty of any kind
21
tests
running
669
tests
in 24 hours
tests in 24 hours

Error:

Share this report:

Cybersecurity Rating of jpmorganchase.com

Website Security Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLGradeTested on
jpmorganchase.comhttps://www.jpmorganchase.com/A+November 6th, 2026 12:33
www.jpmorganchase.comhttps://www.jpmorganchase.com/ANovember 6th, 2026 12:38
dcmp-portal.jpmorganchase.comhttps://authe-ent.jpmorgan.com/as/authorization.oauth2?resource=JPMC:URI:RS-43947-UserArea-PROD&client_id=A_JPMC_CT_DEFERREDCOMPENSATION_PROD_115731&redirect_uri=https://dcmp-portal.jpmorganchase.com/api/adfs/login&response_type=code&response_mode=query&state=bnJ5Z0Y3YkU3MkVqb0JBeDg5UnA1eVVBRXZmTzdnc3RLTG53dEFCYnJHUG5qbm9odlZhWVF1Q3ZzLzZLNXdmWnhkbFdrS3lRZ3FaMEp5QnJRRHlrTnk5cW4vdStGQmFXKzFrWmJ3ajQrWGxJOWdxUDd4SllRK2lCM1J6akNoQUZnUFVyK2U3amF4UnJ5VTg3TWdZb2FNQ0IyTkVjV2RnUWl2Z3pVRGVEbVVGSlEyeFdpdEVXQnN2ay8xS3BRNGQyTkI5VmhCUnBQbVlocnJDckpjODhGeUFiUEw5Q2x1anNQUTQrYjhKbTFQWXRkV3RibHBkQWh3c2N6QkxSam01RVlTeWVaOS9yTkF2TER2TnA4QjZQaVdJQS9jeUNHQzRMYVU0MEQ3SG5GMVE0VGkwTzdyMD0%3D&X-JPM-SEAL-ID=112507&aud=JPMC:URI:RS-43947-UserArea-PROD&lob=ct&acr_values=AAL1&scope=openid%20naw&code_challenge=5aJhrMHdLKaCbcgQv2BjVhtvPfR9SWanR5OVMJqFMK0&code_challenge_method=S256A+November 6th, 2026 12:38
vendor-paperwork-ndc.jpmorganchase.comhttps://vendor-paperwork-ndc.jpmorganchase.com/A+November 6th, 2026 12:37
evs.jpmorganchase.comhttps://evs.jpmorganchase.com/CNovember 6th, 2026 12:37
Show 46 More

SSL Security Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLProtocolGradeTested on
jpmorganchase.comhttps://jpmorganchase.com
146.143.134.109:443
HTTPSANovember 6th, 2026 12:31
www.jpmorganchase.comhttps://www.jpmorganchase.com
23.200.88.82:443
HTTPSA+November 6th, 2026 12:31
dcmp-portal.jpmorganchase.comhttps://dcmp-portal.jpmorganchase.com
16.61.199.177:443
HTTPSA+November 6th, 2026 12:37
vendor-paperwork-ndc.jpmorganchase.comhttps://vendor-paperwork-ndc.jpmorganchase.com
146.143.198.190:443
HTTPSANovember 6th, 2026 12:37
evs.jpmorganchase.comhttps://evs.jpmorganchase.com
100.31.228.58:443
HTTPSA+November 6th, 2026 12:37
Show 46 More

Email Security Rating | Overview

Back to Top
HostnameGradeTested on
jpmorganchase.comANovember 6th, 2026 12:30
  • Email Server Security Report
    A total of 3 email servers were analyzed. 3 email servers not tested as ports 25, 465 and 587 are closed. PTR records appear to be properly configured.
  • Email SSL/TLS Encryption Report
    SSL/TLS security testing could not be completed for the analyzed email servers.
  • Email Server DNS Security Report
    SPF is set properly, DKIM is not set, and DMARC is set properly. MTA-STS is not configured for this domain. A DNS records are unsigned, while MX records were not found.
  • Email Server Black and Spam Lists Report
    2 of 3 email servers were listed on one or more blacklists, with up to 1 blacklist listing detected for a single server.

GenAI Exposure Rating

Back to Top
  • No vibe-coded or AI-created code patterns detected across 51 websites.
  • No leaks of AI tokens or other AI-related and sensitive data detected on the Dark Web.
  • No leaks of AI tokens or other AI-related and sensitive data detected across 51 websites.

Dark Web and Threat Exposure Rating | Overview

Back to Top
HostnameTested on
jpmorganchase.comNovember 6th, 2026 12:30
  • Dark Web Exposure Report
    No dark web incidents found.
  • Unprotected Cloud Storage Report
    A total of 47 buckets detected across 3 cloud storage providers: 28 buckets were detected in Amazon S3; 2 buckets were detected in Azure Storage; 17 buckets were detected in Google Cloud Storage.
  • Phishing Websites Report
    11 potential phishing URLs detected. Example hostnames: chase-acess.vercel.app and go.sniply.site; the full list is available in the detailed report.
  • Cybersquatting Domains Report
    14 potential cybersquatting domains detected. Example domains: jpmorganchase.si, jpmorganchaselegal.com and jpmorganchasec.com; additional cybersquatting domains are available in the detailed report.
  • Typosquatting Domains Report
    4 potential typosquatting domains detected. Example domains: jpmorgachase.com, jpmmorganchase.com and jpmorganchsae.com; additional typosquatting domains are available in the detailed report.
  • Fake Accounts in Social Media Report
    22 squatted social network accounts detected across 6 social networks. Most affected social networks include WordPress with 9 accounts including jpmorganchaseblog.wordpress.com and jpmorganchaselogin.wordpress.com, Reddit with 4 accounts including @jpmorganchaseco and @jpmorganchase_biz and Blogspot with 3 accounts including jpmorganchasebank.blogspot.com and jpmorganchasefraud.blogspot.com; the full list is available in the detailed report.
Share this report:

Upgrade to ImmuniWeb® AI Platform