HOW.IS
?

How is mastercard.com?

Looks fine risk 0/100

Registered 32 years ago, on no blocklists we checked, valid HTTPS, the site answered 403 in 98 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How mastercard.com looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
403
98 ms
HTTPS
144 d
left on a DigiCert Inc certificate
Age
32 years
registered 1994-07-27
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records4 record types
A216.119.218.99
MX10 mxa-00078002.gslb.pphosted.com
20 mc.smtp.1.mastercard.com
20 mc.smtp.2.mastercard.com
10 mxb-00078002.gslb.pphosted.com
NSa1-29.akam.net
a26-66.akam.net
a9-64.akam.net
a7-67.akam.net
a22-65.akam.net
a18-64.akam.net
TXTbw=4RHf8CdIg7RhxDQ1qZTUqTzyT+brk70yfwKP9yZ99jB6
pardot163061=06ad0741f9d54ea5405da3cfa43f33b64e150ef5c57da443ad300ba004da645b
smartsheet-site-validation=hqDNvixcpGGmDqgXw0IQAQzYiCUZ_NjY
smartsheet-site-validation=rgDcv0UCdWvo-ZFj5FTmmB7ZBXyPgh2E
postman-domain-verification=223f70ad07799f852fceadeac539231b4f3b9f6673f46886dee85558cedf4efaa1ec40c0bb258bdf3caf18b9c8c868d1a6779d89bfe6b7466480c385f508ada3
infoblox-domain-mastery=a79f9cd257e969fb72bb304523072b39bd50dfb6ea7d7f44d8dc7ec8e75a289904
openai-domain-verification=dv-AgiAbBY6ez5xnvM7ql1I50Rm
ms-domain-verification=d733cf48-b051-4ead-b1a4-60ea82523113
google-site-verification=b1ZPa1IquEDz4Xb_3Nb0-UC4DsLRSanTmHZDGqBUiis
8045-3EBB-B5FC-AEF3-14D1-AC67-1088-D900
cisco-ci-domain-verification=cb9ac4c857a6e85ac1bc26518e16a13d039144e81429bc296c03e29c7f431d2
fe9fc289c3ff0af142b6d3bead98a923
postman-domain-verification=33b37ff3a7f216afc8364e6163ec691362aa75dcc1bf51f9711b54f86df9b1a91b0aa76f1993910c5c63228a86ce245429bd8539ade185fab07ddb380ef6bcf3
ZOOM_verify_5iqN50tCRjWyMgQa3G__uQ
google-site-verification=66zwLd8X_8K0nX8NNWXS_zlgqFq1pTfHid8vJzb3lB8
LXqzgspP+p6jZLtCY31SpgFiwCeGy0jFUtv9ju0S65d/MDpaaSokywn2o7CPf0935/d8auKgbI3wn1UEkvtzzA==
_globalsign-domain-verification=eRi2ZQZJ99fAou8jrSC06eUJpasrvj8YgWl21vaW5G
facebook-domain-verification=u4nbx98zpaot2nhzhfju6z24xs6miv
onetrust-domain-verification=a14180ed5e7144f2ba6d02ece082fbd9
google-site-verification=aFpgfHwpIB9wP8vy7ha7XlE_Ie5eniXNrVgTZvb0Y6s
mongodb-site-verification=t5k2LgdLxKWYVewBzPiEu0iTIGKtnlN2
OPddTNoGXuP0t54rWgyL2LZjeyJYVhiX1O6Y5m5MTuOOhv4/1X+1ZwYUex9hKi8FmtIKfUPtvY04tYLhiOTV7w==
Dynatrace-site-verification=5f211e2e-80de-4ed7-9853-54223730fd02__b3bscjmsb302fkh5cvlapjot3b
mongodb-site-verification=rZkQa6gUUHH4Mx4SosnfnglyvIp3rmYv
v=spf1 include:spf.protection.outlook.com include:deliverygateways.mastercard.com include:external.mastercard.com include:external2.mastercard.com include:deliverygateways2.mastercard.com ~all
oE1olhbq9xyXp2ohGw2F
mixpanel-domain-verify=32a3f24d-1ab8-499e-be20-4d90a50e4d0e
56e6a93212e4482d99c84a639d254b67
Dynatrace-site-verification=1a474a54-75e8-40bb-8baf-a80cfdcedfe6__llctt109dvv9ba2hk0cp0sv8e2
adobe-idp-site-verification=9a8affe9f40574b4522d548efd4c0838df83704137a4c4c09b28103e42723a62
ec7f346604f518906d35ef0492709f78
airtable-verification=ac800a6f44c17925f6bd32ea4aa44894
apple-domain-verification=c6W1qeAHSo6DbwVc
atlassian-domain-verification=zXeHVyO9eWog3f6TQIfeFwk1hRniWa0Gylu2ONeHNtbc05S48qY9ad9WEcpSurru
slack-domain-verification=6Tn0MeeJ5y2rwxsCOuttdyaIpBz3r1HG1xKeMDpI
00DA0000000K9eN=1TBUH00000000Mb
onetrust-domain-verification=9faa54187b974ee6a08608d4858d8f7e
google-site-verification=lwih4Ax7Rsyv46SAAckGGGpcxPy9tpc4bYfVt4vstsY
atlassian-domain-verification=CGO8tCXHtiZUBnTJh01TwMadn9aCwpHxamHZVPQBDTG3badn5kEl8/eju6244/QE
atlassian-sending-domain-verification=ad83ad89-ec1d-40ee-b2f0-a352f055841f
docker-verification=4b72827b-32c1-4fe6-a443-2856c0df9a51
bettercomp-verify=04feae4303388a2be1b27b3e55c2a594e1840997c78fe3b4e6b45efdfc84b9ea
mongodb-site-verification=axmDkHlwAGvNsA17D8dPlsIOYgcqtrBz
3a30be93eb45566a90f4e95ee72a089a
jamf-site-verification=C60V1p8G2f3bel6UkdJ9jA
google-gws-recovery-domain-verification=60378709
RegistrationCSC Corporate Domains, Inc.
registrarCSC Corporate Domains, Inc.
registered1994-07-27
expires2027-07-26
last changed2026-07-22
ownerMasterCard International Inc.
nameserversa1-29.akam.net
a18-64.akam.net
a22-65.akam.net
a26-66.akam.net
a7-67.akam.net
a9-64.akam.net
statusclient transfer prohibited
server delete prohibited
server transfer prohibited
server update prohibited
registered 1994-07-27expires 2027-07-26
HTTPS certificate144 days left
validyes
issuerDigiCert Inc
coverswww.mastercard.com, mastercard.com, origin-www.mastercard.com
protocolTLSv1.2
issued 2026-09-09expires 2027-03-26
DNSSECinsecure

Domain is not signed with DNSSEC

. → com → mastercard.com
Email authenticationexcellent
SPFpass v=spf1 include:spf.protection.outlook.com include:deliverygateways.mastercard.com include:external.mastercard.com include:external2.mastercard.com include:deliverygateways2.mastercard.com ~all
DMARCpass policy reject
DKIMfound: k1, s1, s2, mx

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 155/205
Basic Security
10/40missing: DNSSEC Enabled, Nameserver Diversity
Record Security
30/45missing: CAA Records, DKIM Presence
Advanced Security
20/25missing: IPv6 Support
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 5 lookups
SURBL MultidomainURIBL MultidomainSpamCop216.119.218.99Barracuda216.119.218.99UCEPROTECT Level 1216.119.218.99

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=mastercard.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=mastercard.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on mastercard.com. Reference: /llms.txt.

IPv6. IPv6 readiness grade for mastercard.com Does mastercard.com work over IPv6? See the live check on aaaa.bot — website, mail and nameservers, graded A–F.

Watch mastercard.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days