Cybersecurity Rating
by ImmuniWeb® CyberScore™
Get a free cybersecurity, privacy and AI security rating of your company, partners or suppliers
Free online tool with PDF report
- Website Security Rating
- Website Privacy Rating
- Encryption Security Rating
- Email Security Rating
- GenAI Exposure Rating
- Dark Web Exposure
Free online tool with PDF report
63,079 organizations tested
|Provided "as is" without any warranty of any kind
21
tests
running
667
tests
in 24 hours
tests in 24 hours
Error:
Share this report:
Cybersecurity Rating of mastercard.com
Tested on November 6th, 2026 13:01 GMT+0
Website Security:Tests Finished
Website Privacy:Tests Finished
SSL Security:Tests Finished
Email Security:Test Finished
GenAI Exposure:Test Finished
Website Security Rating | Overview
The total number of subdomains is capped at 50.
| Hostname | URL | Grade | Tested on |
|---|---|---|---|
| mastercard.com | https://mastercard.com | N | November 6th, 2026 13:02 |
| www.mastercard.com | https://www.mastercard.com | N | November 6th, 2026 13:05 |
| stage.eportal.cloud.mastercard.com | https://stage.eportal.cloud.mastercard.com/heracles/error-page?heracles_operation=ANY&heracles_result_code=10006&referral_path=%2F&heracles_correlation_id=0.2f24c317.1793970444.803cc55e | A | November 6th, 2026 13:09 |
| local.mastercard.com | https://local.mastercard.com/ | A+ | November 6th, 2026 13:09 |
| stage1.sdg2.mastercard.com | https://stage1.sdg2.mastercard.com/static/public-portal-ui/login-signin-component?cobrandHost=mastercard&allowPasskey=true | C | November 6th, 2026 13:13 |
Show 46 More
Website Privacy Rating | Overview
The total number of subdomains is capped at 50.
| Hostname | URL | Grade | Tested on |
|---|---|---|---|
| mastercard.com | https://www.mastercard.com/ca/en.html | A | November 6th, 2026 13:48 |
| www.mastercard.com | https://www.mastercard.com/ca/en.html | A | November 6th, 2026 13:48 |
| stage.eportal.cloud.mastercard.com | https://stage.eportal.cloud.mastercard.com/heracles/error-page?heracles_operation=ANY&heracles_result_code=10006&referral_path=%2F&heracles_correlation_id=0.2f24c317.1793972943.80fbb18a | A | November 6th, 2026 13:48 |
| local.mastercard.com | https://local.mastercard.com/ | A+ | November 6th, 2026 13:48 |
| stage1.sdg2.mastercard.com | https://stage1.sdg2.mastercard.com | N | November 6th, 2026 13:48 |
Show 46 More
SSL Security Rating | Overview
The total number of subdomains is capped at 50.
| Hostname | URL | Protocol | Grade | Tested on |
|---|---|---|---|---|
| mastercard.com | https://mastercard.com 216.119.218.99:443 | HTTPS | A | November 6th, 2026 13:03 |
| www.mastercard.com | https://www.mastercard.com 184.24.173.153:443 | HTTPS | A | November 6th, 2026 13:03 |
| stage.eportal.cloud.mastercard.com | https://stage.eportal.cloud.mastercard.com 23.48.224.78:443 | HTTPS | A | November 6th, 2026 13:08 |
| local.mastercard.com | https://local.mastercard.com 18.204.162.207:443 | HTTPS | A+ | November 6th, 2026 13:08 |
| stage1.sdg2.mastercard.com | https://stage1.sdg2.mastercard.com 209.64.211.51:443 | HTTPS | A | November 6th, 2026 13:08 |
Show 46 More
Email Security Rating | Overview
| Hostname | Grade | Tested on |
|---|---|---|
| mastercard.com | B- | November 6th, 2026 13:15 |
- Email Server Security ReportA total of 4 email servers were analyzed. Open relay was not detected, SMTP enumeration was not detected, a secure authentication was enforced across all tested servers, and PTR records were properly configured. The average response latency was approximately 0.039s.
- Email SSL/TLS Encryption ReportSSL/TLS security testing was completed for 1 email server. Server grade is F.
- Email Server DNS Security ReportSPF is set properly, DKIM is set properly, and DMARC is set properly. MTA-STS is not configured for this domain. A and MX DNS records are unsigned.
- Email Server Black and Spam Lists ReportNo email servers were found on blacklists.
GenAI Exposure Rating
- No vibe-coded or AI-created code patterns detected across 51 websites.
- No leaks of AI tokens or other AI-related and sensitive data detected on the Dark Web.
- No leaks of AI tokens or other AI-related and sensitive data detected across 51 websites.
Dark Web and Threat Exposure Rating | Overview
| Hostname | Tested on |
|---|---|
| mastercard.com | November 6th, 2026 13:02 |
- Dark Web Exposure ReportNo dark web incidents found.
- Unprotected Cloud Storage ReportA total of 45 buckets detected across 5 cloud storage providers: 28 buckets were detected in Amazon S3; 4 buckets were detected in Azure Storage; 1 bucket was detected in Alibaba Cloud OSS, with additional buckets detected across other providers.
- Phishing Websites Report23 potential phishing URLs detected. Example hostnames: cdqfl.cn and comcast-1-zeta.vercel.app; the full list is available in the detailed report.
- Cybersquatting Domains Report39 potential cybersquatting domains detected. Example domains: bankmastercard.com, mastercardguide.com and mastercarb.com; additional cybersquatting domains are available in the detailed report.
- Typosquatting Domains Report7 potential typosquatting domains detected. Example domains: nmastercard.com, madtercard.com and mastercsrd.com; additional typosquatting domains are available in the detailed report.
- Fake Accounts in Social Media Report170 squatted social network accounts detected across 7 social networks. Most affected social networks include YouTube with 47 accounts including @mastercard2018 and @mastercardcc, Blogspot with 44 accounts including mastercard2018.blogspot.com and mastercard-2019.blogspot.com and Reddit with 31 accounts including @mastercard2000 and @mastercard2003; the full list is available in the detailed report.
Share this report:
