Cybersecurity Rating
by ImmuniWeb® CyberScore™

Get a free cybersecurity, privacy and AI security rating of your company, partners or suppliers
Free online tool with PDF report
  • Website Security Rating
  • Website Privacy Rating
  • Encryption Security Rating
  • Email Security Rating
  • GenAI Exposure Rating
  • Dark Web Exposure
Free online tool with PDF report
63,079 organizations tested
|Provided "as is" without any warranty of any kind
21
tests
running
667
tests
in 24 hours
tests in 24 hours

Error:

Share this report:

Cybersecurity Rating of sephora.com

Website Security Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLGradeTested on
sephora.comhttps://www.sephora.com/?country_switch=ca&lang=frA+November 6th, 2026 23:32
www.sephora.comhttps://www.sephora.com/ca/fr/?country_switch=ca&lang=frA+November 6th, 2026 23:43
login.sephora.comhttps://login.sephora.com/oauth2/v1/authorize?client_id=okta.2b1959c8-bcc0-56eb-a589-cfcfb7422f26&code_challenge=WTtdNAbiE-b-wX9aeW71vS5Hr8HJtMj4TylcEIp6AD0&code_challenge_method=S256&nonce=AKrcKaHnp6alvZI5NairHOXFCs9JKKMqa8pceWPgCDtD2Bdd7vLkdjLiZ4wrOd3H&redirect_uri=https%3A%2F%2Flogin.sephora.com%2Fenduser%2Fcallback&response_type=code&state=jYtVzGt47s9lRqxsS4jKLOxI88JrOkKSEpdDvYEjXM7SIf4jUO9o2AxxcYKVXOuy&scope=openid%20profile%20email%20okta.users.read.self%20okta.users.manage.self%20okta.internal.enduser.read%20okta.internal.enduser.manage%20okta.enduser.dashboard.read%20okta.enduser.dashboard.manage%20okta.myAccount.sessions.manage%20okta.internal.navigation.enduser.readANovember 6th, 2026 23:26
newsroom.sephora.comhttps://newsroom.sephora.com/CNovember 6th, 2026 23:28
smetrics.sephora.comhttps://smetrics.sephora.com/ANovember 6th, 2026 23:31
Show 46 More

SSL Security Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLProtocolGradeTested on
sephora.comhttps://sephora.com
23.39.212.161:443
HTTPSANovember 6th, 2026 23:15
www.sephora.comhttps://www.sephora.com
23.39.212.161:443
HTTPSANovember 6th, 2026 23:24
login.sephora.comhttps://login.sephora.com
3.33.238.178:443
HTTPSB+November 6th, 2026 23:23
newsroom.sephora.comhttps://newsroom.sephora.com
44.231.237.152:443
HTTPSA+November 6th, 2026 23:23
smetrics.sephora.comhttps://smetrics.sephora.com
63.140.38.213:443
HTTPSANovember 6th, 2026 23:23
Show 46 More

Email Security Rating | Overview

Back to Top
HostnameGradeTested on
sephora.comC+November 6th, 2026 23:17
  • Email Server Security Report
    A total of 2 email servers were analyzed. Open relay was not detected, SMTP enumeration was not detected, a secure authentication was enforced across all tested servers, and PTR records were properly configured. The average response latency was approximately 0.08s.
  • Email SSL/TLS Encryption Report
    SSL/TLS security testing could not be completed for the analyzed email servers.
  • Email Server DNS Security Report
    SPF is set with issues, DKIM is set properly, and DMARC is set properly. MTA-STS is not configured for this domain. A and MX DNS records are unsigned.
  • Email Server Black and Spam Lists Report
    No email servers were found on blacklists.

GenAI Exposure Rating

Back to Top
  • No vibe-coded or AI-created code patterns detected across 51 websites.
  • No leaks of AI tokens or other AI-related and sensitive data detected on the Dark Web.
  • No leaks of AI tokens or other AI-related and sensitive data detected across 49 websites.

Dark Web and Threat Exposure Rating | Overview

Back to Top
HostnameTested on
sephora.comNovember 6th, 2026 23:21
  • Dark Web Exposure Report
    A total of 391 dark web incidents detected, containing 7285 mentions of the domain. 349 out of 391 incidents originate from Compromised Databases. Out of all detected Compromised Credentials, 61 are considered to be of High risk. Mentions in Leaked Databases represent the most common source of compromised information, accounting for 7171 of the 7285 detected domain mentions on the Dark Web.
  • Unprotected Cloud Storage Report
    A total of 30 buckets detected across 5 cloud storage providers, including 1 public bucket and containing 67 publicly accessible files: 14 buckets were detected in Amazon S3, including 1 public bucket and containing 67 publicly accessible files; 6 buckets were detected in Azure Storage; 1 bucket was detected in Alibaba Cloud OSS, with additional buckets detected across other providers.
  • Phishing Websites Report
    No potential phishing websites found.
  • Cybersquatting Domains Report
    126 potential cybersquatting domains detected. Example domains: sephoradevelopment.com, sephora-qatar.com and sephora-shop.com; additional cybersquatting domains are available in the detailed report.
  • Typosquatting Domains Report
    16 potential typosquatting domains detected. Example domains: yephora.com, sephofa.com and ssephora.com; additional typosquatting domains are available in the detailed report.
  • Fake Accounts in Social Media Report
    228 squatted social network accounts detected across 7 social networks. Most affected social networks include YouTube with 81 accounts including @sephora2001 and @sephora2004, Reddit with 46 accounts including @sephora2000 and @sephora2008 and Blogspot with 43 accounts including sephora2017.blogspot.com and sephora2020.blogspot.com; the full list is available in the detailed report.
Share this report:

Upgrade to ImmuniWeb® AI Platform