Cybersecurity Rating
by ImmuniWeb® CyberScore™

Hostname	URL	Grade	Tested on
xpeng.com	https://www.xpeng.com/	C	November 5th, 2026 22:38
www.xpeng.com	https://www.xpeng.com/	C	November 5th, 2026 22:39
qa-fi.xpeng.com	https://qa-fi.xpeng.com/	A	November 5th, 2026 22:39
store.xpeng.com	https://www.xpeng.com/	C	November 5th, 2026 22:39
dev-fi.xpeng.com	https://dev-fi.xpeng.com/	A+	November 5th, 2026 22:40

Show 11 More

Website Privacy Rating | Overview

The total number of subdomains is capped at 50.

Hostname	URL	Grade	Tested on
xpeng.com	https://www.xpeng.com/	F	November 5th, 2026 23:17
www.xpeng.com	https://www.xpeng.com/	F	November 5th, 2026 23:17
qa-fi.xpeng.com	https://qa-fi.xpeng.com/	B+	November 5th, 2026 23:17
store.xpeng.com	https://www.xpeng.com/	F	November 5th, 2026 23:17
dev-fi.xpeng.com	https://dev-fi.xpeng.com/	B	November 5th, 2026 23:17

Show 11 More

The total number of subdomains is capped at 50.

Hostname	URL	Protocol	Grade	Tested on
xpeng.com	https://xpeng.com 163.181.60.203:443	HTTPS	A-	November 5th, 2026 22:31
www.xpeng.com	https://www.xpeng.com 163.181.60.204:443	HTTPS	A-	November 5th, 2026 22:39
qa-fi.xpeng.com	https://qa-fi.xpeng.com 150.171.110.20:443	HTTPS	A+	November 5th, 2026 22:38
store.xpeng.com	https://store.xpeng.com 8.220.70.172:443	HTTPS	B	November 5th, 2026 22:40
dev-fi.xpeng.com	https://dev-fi.xpeng.com 150.171.110.20:443	HTTPS	A+	November 5th, 2026 22:38

Show 11 More

Hostname	Grade	Tested on
xpeng.com	C+	November 5th, 2026 22:31

Email Server Security Report
A total of 8 email servers were analyzed. 8 email servers not tested as ports 25, 465 and 587 are closed. PTR records were misconfigured on 8 of 8 servers.
Email SSL/TLS Encryption Report
SSL/TLS security testing could not be completed for the analyzed email servers.
Email Server DNS Security Report
SPF is not set, DKIM is set properly, and DMARC is set properly. MTA-STS is not configured for this domain. A and MX DNS records are unsigned.
Email Server Black and Spam Lists Report
No email servers were found on blacklists.

No vibe-coded or AI-created code patterns detected across 16 websites.
No leaks of AI tokens or other AI-related and sensitive data detected on the Dark Web.
No leaks of AI tokens or other AI-related and sensitive data detected across 16 websites.

Hostname	Tested on
xpeng.com	November 5th, 2026 22:29

Dark Web Exposure Report
A total of 3 dark web incidents detected, containing 3 mentions of the domain. 2 out of 3 incidents originate from Compromised Databases. Mentions in Leaked Databases represent the most common source of compromised information, accounting for 2 of the 3 detected domain mentions on the Dark Web.
Unprotected Cloud Storage Report
A total of 1 bucket detected across 1 cloud storage provider: 1 bucket was detected in Amazon S3.
Phishing Websites Report
36 potential phishing URLs detected. Example hostnames: xpeng-id.com and xpeng-indonesia.com; the full list is available in the detailed report.
Cybersquatting Domains Report
87 potential cybersquatting domains detected. Example domains: xnpeg.com, xpeng.win and xpeng-events.com; additional cybersquatting domains are available in the detailed report.
Typosquatting Domains Report
6 potential typosquatting domains detected. Example domains: xpengv.com, yxpeng.com and cxpeng.com; additional typosquatting domains are available in the detailed report.
Fake Accounts in Social Media Report
24 squatted social network accounts detected across 4 social networks. Most affected social networks include Reddit with 9 accounts including @xpeng2015 and @xpenggg, GitHub with 8 accounts including @xpeng2026 and @xpengac and YouTube with 4 accounts including @xpeng2000 and @xpengbh; the full list is available in the detailed report.

Share this report:

Take Your Security Ratings to the Next Level