marksandspencer.com
CM&S | Marks & Spencer | Fashion, Home, Beauty, Food & Gifts
Last scanned 7 h agoCompare with another site →
Built with
- Frontend framework
- Next.js
Overview
- Status
- alive
- Registered
- not looked up yet
- First seen here
- 2026-09-21
- Security grade
- C (70/100, from headers & TLS)
- Privacy score
- 90/100 (0 third-party script hosts, 0 tracking/marketing services)
- Hosting
- unknown
- Linked to from
- 13 other sites seen so far
What to fix
- Add X-Content-Type-Options
Header: X-Content-Type-Options: nosniff - Add a Referrer-Policy
Header: Referrer-Policy: strict-origin-when-cross-origin - Mark cookies Secure and HttpOnly
At least one cookie is sent without these flags, exposing it to interception or scripts.
Security & email signals
- ✓ HTTPS
- ✓ HSTS
- ✓ Content-Security-Policy
- ✗ X-Content-Type-Options
- ✓ X-Frame-Options
- ✗ Referrer-Policy
- ✗ Permissions-Policy
- ✓ SPF record
- ✓ DMARC record
- ✗ DKIM record
- ✗ Cookies set securely
- ✓ Has real content (not an empty shell)
- ✓ Valid TLS certificate
Recent changes
- 2026-09-22: TLS expiry changed from "2026-11-30" to "2026-11-30"
Badge
Show this site's security grade in a README or footer:
<a href="https://webtelemetry.dev/site/marksandspencer.com"><img src="https://webtelemetry.dev/badge/marksandspencer.com.svg" alt="Security grade"></a>
Generated automatically from passive, publicly observable data. Think something here is wrong or want this profile removed? See /bot. Machine-readable: JSON.