Cybersecurity Rating
by ImmuniWeb® CyberScore™

Get a free cybersecurity, privacy and AI security rating of your company, partners or suppliers
Free online tool with PDF report
  • Website Security Rating
  • Website Privacy Rating
  • Encryption Security Rating
  • Email Security Rating
  • GenAI Exposure Rating
  • Dark Web Exposure
Free online tool with PDF report
63,079 organizations tested
|Provided "as is" without any warranty of any kind
21
tests
running
667
tests
in 24 hours
tests in 24 hours

Error:

Share this report:

Cybersecurity Rating of marksandspencer.com

Website
Security Rating: B+
Website
Privacy Rating: B+
SSL
Security Rating: A-
Email
Security Rating: A
GenAI
Exposure Rating: A+
Tested on November 6th, 2026 22:31 GMT+0
Website Security:Tests Finished
Website Privacy:Tests Finished
SSL Security:Tests Finished
Email Security:Test Finished
GenAI Exposure:Test Finished

Website Security Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLGradeTested on
cs.sit1.marksandspencer.comhttps://login.microsoftonline.com/bd5c6713-7399-4b31-be79-78f2d078e543/oauth2/v2.0/authorize?client_id=66be038e-34d2-4200-87e6-301c9f3e64f4&nonce=hd4fl6s9&redirect_uri=https://cs.sit1.marksandspencer.com/oidc/callback&response_type=code&scope=openid+emailANovember 6th, 2026 22:39
commerce-api.sit2.marksandspencer.comhttps://login.microsoftonline.com/bd5c6713-7399-4b31-be79-78f2d078e543/oauth2/v2.0/authorize?client_id=66be038e-34d2-4200-87e6-301c9f3e64f4&nonce=yqcfdfio&redirect_uri=https://commerce-api.sit2.marksandspencer.com/oidc/callback&response_type=code&scope=openid+emailANovember 6th, 2026 22:39
store.sit2.marksandspencer.comhttps://login.microsoftonline.com/bd5c6713-7399-4b31-be79-78f2d078e543/oauth2/v2.0/authorize?client_id=66be038e-34d2-4200-87e6-301c9f3e64f4&nonce=4fkn29bg&redirect_uri=https://store.sit2.marksandspencer.com/oidc/callback&response_type=code&scope=openid+emailANovember 6th, 2026 22:40
store.sit1.marksandspencer.comhttps://login.microsoftonline.com/bd5c6713-7399-4b31-be79-78f2d078e543/oauth2/v2.0/authorize?client_id=66be038e-34d2-4200-87e6-301c9f3e64f4&nonce=v23tyhgd&redirect_uri=https://store.sit1.marksandspencer.com/oidc/callback&response_type=code&scope=openid+emailANovember 6th, 2026 22:40
commerce-api.stagecheck.marksandspencer.comhttps://login.microsoftonline.com/bd5c6713-7399-4b31-be79-78f2d078e543/oauth2/v2.0/authorize?client_id=66be038e-34d2-4200-87e6-301c9f3e64f4&nonce=8053jwiq&redirect_uri=https://commerce-api.stagecheck.marksandspencer.com/oidc/callback&response_type=code&scope=openid+emailANovember 6th, 2026 22:45
Show 46 More

Website Privacy Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLGradeTested on
marksandspencer.comhttps://www.marksandspencer.com/BNovember 6th, 2026 22:54
www.marksandspencer.comhttps://www.marksandspencer.com/BNovember 6th, 2026 22:53
cs.sit1.marksandspencer.comhttps://cs.sit1.marksandspencer.comNNovember 6th, 2026 22:53
commerce-api.sit2.marksandspencer.comhttps://commerce-api.sit2.marksandspencer.comNNovember 6th, 2026 22:54
store.sit2.marksandspencer.comhttps://store.sit2.marksandspencer.comNNovember 6th, 2026 22:53
ImmuniWeb DiscoveryFull visibility of your vulnerable IT assets
with ImmuniWeb® Discovery
Show 46 More

SSL Security Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLProtocolGradeTested on
marksandspencer.comhttps://marksandspencer.com
23.48.8.81:443		HTTPSANovember 6th, 2026 22:35
www.marksandspencer.comhttps://www.marksandspencer.com
23.60.176.87:443		HTTPSANovember 6th, 2026 22:34
cs.sit1.marksandspencer.comhttps://cs.sit1.marksandspencer.com
23.58.180.227:443		HTTPSANovember 6th, 2026 22:39
commerce-api.sit2.marksandspencer.comhttps://commerce-api.sit2.marksandspencer.com
23.58.180.227:443		HTTPSANovember 6th, 2026 22:39
store.sit2.marksandspencer.comhttps://store.sit2.marksandspencer.com
23.58.180.227:443		HTTPSANovember 6th, 2026 22:38
Show 46 More

Email Security Rating | Overview

Back to Top
HostnameGradeTested on
marksandspencer.comANovember 6th, 2026 22:34
  • Email Server Security Report
    A total of 4 email servers were analyzed. Open relay was not detected, SMTP enumeration was not detected, a secure authentication was enforced across all tested servers, and PTR records were properly configured. The average response latency was approximately 0.081s.
  • Email SSL/TLS Encryption Report
    SSL/TLS security testing was completed for 4 email servers. Server grade is B+.
  • Email Server DNS Security Report
    SPF is set properly, DKIM is set properly, and DMARC is set properly. MTA-STS is not configured for this domain. A and MX DNS records are unsigned.
  • Email Server Black and Spam Lists Report
    No email servers were found on blacklists.
ImmuniWeb DiscoveryFull visibility of your vulnerable IT assets
with ImmuniWeb® Discovery

GenAI Exposure Rating

Back to Top
  • No vibe-coded or AI-created code patterns detected across 51 websites.
  • No leaks of AI tokens or other AI-related and sensitive data detected on the Dark Web.
  • No leaks of AI tokens or other AI-related and sensitive data detected across 51 websites.

Dark Web and Threat Exposure Rating | Overview

Back to Top
HostnameTested on
marksandspencer.comNovember 6th, 2026 22:32
  • Dark Web Exposure Report
    No dark web incidents found.
  • Unprotected Cloud Storage Report
    A total of 6 buckets detected across 3 cloud storage providers: 2 buckets were detected in Amazon S3; 2 buckets were detected in Azure Storage; 2 buckets were detected in Google Cloud Storage.
  • Phishing Websites Report
    7 potential phishing URLs detected. Example hostnames: marksandspencer.ae and marksandspencer.com.kw; the full list is available in the detailed report.
  • Cybersquatting Domains Report
    18 potential cybersquatting domains detected. Example domains: marksandspencersurvey.com, marksandspenser.com and marksandspencershop.com; additional cybersquatting domains are available in the detailed report.
  • Typosquatting Domains Report
    4 potential typosquatting domains detected. Example domains: marksandspencr.com, marksandspecner.com and marksandapencer.com; additional typosquatting domains are available in the detailed report.
  • Fake Accounts in Social Media Report
    24 squatted social network accounts detected across 4 social networks. Most affected social networks include YouTube with 11 accounts including @marksandspencer2007 and @marksandspencerfr, Blogspot with 6 accounts including marksandspencerbank.blogspot.com and marksandspencerjobs.blogspot.com and Reddit with 4 accounts including @marksandspenceruk and @marksandspencer6; the full list is available in the detailed report.
ImmuniWeb DiscoveryFull visibility of your stolen data
with ImmuniWeb® Discovery
Share this report:

Upgrade to ImmuniWeb® AI Platform

Take Your Security Ratings to the Next Level
Continuous Threat Exposure Management
Continuous Threat
Exposure Management
with ImmuniWeb® Discovery
Web Application Penetration Testing
Web Application
Penetration Testing
with ImmuniWeb® On-Demand
Continuous Web Scanning and Penetration Testing
Continuous Web Scanning
and Penetration Testing
with ImmuniWeb® Continuous
FREE DEMO
Corporate Datasheet [PDF]