Security Scan Report: mastercard-refund.co.uk

Redirected to:
https://mastercard-refund.co.uk/lander
Submitted: Oct 6, 2026, 11:13:53 PMCompleted: Oct 6, 2026, 11:15:38 PMpubliccompleted

This website contacted 7 IPs in 3 countries across 4 domains to perform 13 HTTP transactions. The main domain is mastercard-refund.co.uk and was registered 18 years ago.

Submitted URL: https://mastercard-refund.co.uk

Effective URL:

https://mastercard-refund.co.uk/lander
Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Parked GoDaddy lander on mastercard-refund.co.uk, a hostname that trades on the Mastercard trademark. No forms, malware or threat-intel hits today, but the deceptive name warrants caution.

Risk Factors (3)
Deceptive/trademark-bearing hostname implying an official Mastercard refund service
Parked lander page has no legitimate service content to justify the brand name
Unranked domain combined with a major financial brand name
Safety Factors (3)
No credential, login or payment form present (0 forms, 0 password fields, 0 payment fields)
No YARA malware patterns, no network IDS alerts, no Indicators of Compromise matches
Domain is 7+ years old and the page currently serves only a registrar parking lander
Domain age information unavailable

Details

Page Title

Logo-123Reg-Contrastother network

Scan Type

public

Domain Name Analysis

The domain 'mastercard-refund.co.uk' uses the United Kingdom country-code top-level domain (.co.uk). The registrable portion 'mastercard-refund' spans 17 characters split between five vowels and eleven consonants; bonus characters include 1 hyphen. Tokenizing the label suggests 2 words: mastercard, refund. Median word length comes out to 8 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mastercard-refund.co.uk

Page Load Overview

5.07s
Total Load Time
213 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
0
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
713.248.213.45Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
123.207.210.148Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
113.207.108.220Aws · CLOUDMumbai, Maharashtra, India
AS16509Amazon.com, Inc.
123.67.142.207Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
176.223.67.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
123.207.210.143Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
143.205.79.201Aws · CLOUDMumbai, Maharashtra, India
AS16509Amazon.com, Inc.
137--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18F825BB2866A003F4A6647DCD150726E7267A24CFE4B44C4BBDA4D476FA7F3369304AC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:6UNbUwR7Z5EJnpfLODejYqe6PmmX8tOJV3AlNPbPBlkKUfb3RLfcXsXuPg1ZoTzH:xll3EYe9e6umMckrZlW5fcXgj1uTczFE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:18957:KgsKQkCAKgB9wBmIAKCgAGYOTZjACiQrxjJAocIgAuaUAxDC4ABi7BAQiEMAQCIS1ZGC6AUAKBQWFOSAIU0CWQByFIFARQPE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000ffffffffff
Perceptual Hash:f048085ef6f2f352
Difference Hash:31b19c0c0e0e0e0e
Wavelet Hash:000000e7ffe7e7e7
Color Hash:#2d8649

Scan History

Scan history not available

Unable to load historical scan data