Cybersecurity Rating
by ImmuniWeb® CyberScore™

Get a free cybersecurity, privacy and AI security rating of your company, partners or suppliers
Free online tool with PDF report
  • Website Security Rating
  • Website Privacy Rating
  • Encryption Security Rating
  • Email Security Rating
  • GenAI Exposure Rating
  • Dark Web Exposure
Free online tool with PDF report
63,079 organizations tested
|Provided "as is" without any warranty of any kind
19
tests
running
667
tests
in 24 hours
tests in 24 hours

Error:

Share this report:

Cybersecurity Rating of nordstrom.com

Website Security Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLGradeTested on
nordstrom.comhttps://siteclosed.nordstrom.com/invitation.htmlANovember 6th, 2026 22:54
www.nordstrom.comhttps://siteclosed.nordstrom.com/invitation.htmlANovember 6th, 2026 22:55
secure.nordstrom.comhttps://siteclosed.nordstrom.com/invitation.htmlANovember 6th, 2026 22:57
shop.nordstrom.comhttps://siteclosed.nordstrom.com/invitation.htmlANovember 6th, 2026 22:57
www.store.nordstrom.comhttps://siteclosed.nordstrom.com/invitation.htmlANovember 6th, 2026 22:57
Show 46 More

Website Privacy Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLGradeTested on
nordstrom.comhttps://siteclosed.nordstrom.com/invitation.htmlANovember 6th, 2026 23:15
www.nordstrom.comhttps://siteclosed.nordstrom.com/invitation.htmlANovember 6th, 2026 23:15
secure.nordstrom.comhttps://siteclosed.nordstrom.com/invitation.htmlANovember 6th, 2026 23:15
shop.nordstrom.comhttps://siteclosed.nordstrom.com/invitation.htmlANovember 6th, 2026 23:15
www.store.nordstrom.comhttps://siteclosed.nordstrom.com/invitation.htmlANovember 6th, 2026 23:17
Show 46 More

SSL Security Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLProtocolGradeTested on
nordstrom.comhttps://nordstrom.com
151.101.130.132:443
HTTPSA+November 6th, 2026 22:48
www.nordstrom.comhttps://www.nordstrom.com
151.101.138.132:443
HTTPSA+November 6th, 2026 22:48
secure.nordstrom.comhttps://secure.nordstrom.com
151.101.138.132:443
HTTPSA+November 6th, 2026 22:56
shop.nordstrom.comhttps://shop.nordstrom.com
151.101.66.132:443
HTTPSA+November 6th, 2026 22:56
www.store.nordstrom.comhttps://www.store.nordstrom.com
151.101.138.132:443
HTTPSA+November 6th, 2026 22:56
Show 46 More

Email Security Rating | Overview

Back to Top
HostnameGradeTested on
nordstrom.comB-November 6th, 2026 22:53
  • Email Server Security Report
    A total of 2 email servers were analyzed. Open relay was not detected, SMTP enumeration was not detected, a secure authentication was enforced across all tested servers, and PTR records were properly configured. The average response latency was approximately 0.047s.
  • Email SSL/TLS Encryption Report
    SSL/TLS security testing was completed for 1 email server. Server grade is F.
  • Email Server DNS Security Report
    SPF is set with issues, DKIM is set properly, and DMARC is set properly. MTA-STS is not configured for this domain.
  • Email Server Black and Spam Lists Report
    1 of 2 email servers were listed on one or more blacklists, with up to 1 blacklist listing detected for a single server.

GenAI Exposure Rating

Back to Top
  • No vibe-coded or AI-created code patterns detected across 51 websites.
  • No leaks of AI tokens or other AI-related and sensitive data detected on the Dark Web.
  • No leaks of AI tokens or other AI-related and sensitive data detected across 51 websites.

Dark Web and Threat Exposure Rating | Overview

Back to Top
HostnameTested on
nordstrom.comNovember 6th, 2026 22:47
  • Dark Web Exposure Report
    A total of 922 dark web incidents detected, containing 18873 mentions of the domain. 714 out of 922 incidents originate from Compromised Databases. Out of all detected Compromised Credentials, 517 are considered to be of High risk. Mentions in Leaked Databases represent the most common source of compromised information, accounting for 18266 of the 18873 detected domain mentions on the Dark Web.
  • Unprotected Cloud Storage Report
    A total of 14 buckets detected across 3 cloud storage providers, including 1 public bucket and containing 17 publicly accessible files: 12 buckets were detected in Amazon S3, including 1 public bucket and containing 17 publicly accessible files; 1 bucket was detected in Google Cloud Storage; 1 bucket was detected in IBM Cloud Object Storage.
  • Phishing Websites Report
    No potential phishing websites found.
  • Cybersquatting Domains Report
    69 potential cybersquatting domains detected. Example domains: my-nordstrom.com, 1nordstrom.com and nordstromai.com; additional cybersquatting domains are available in the detailed report.
  • Typosquatting Domains Report
    17 potential typosquatting domains detected. Example domains: nordztrom.com, norsstrom.com and nordstreom.com; additional typosquatting domains are available in the detailed report.
  • Fake Accounts in Social Media Report
    144 squatted social network accounts detected across 7 social networks. Most affected social networks include Reddit with 31 accounts including @nordstrom2008 and @nordstrom_2017, GitHub with 26 accounts including @enordstrom and @nordstrom1 and YouTube with 24 accounts including @nordstrom2010 and @nordstromis; the full list is available in the detailed report.
Share this report:

Upgrade to ImmuniWeb® AI Platform