marsh.com

Observed 2026-07-13T00:19:15.034956197+00:00 (7m ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onAmazon

Email byProofpoint

Secured bySectigo

Also usesDocuSignGoogle Search ConsoleAtlassian

46 subdomains · fortune_500

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat marsh.com actually stands on - every host below is a signed observation

marsh.com

A / AAAA

75.2.75.6599.83.175.37

Amazonserves the site

ns01.mmc.comns03.mmc.comns04.mmc.comns05.mmc.com

mmc.comanswers its DNS

mxa-001b7601.gslb.pphosted.commxb-001b7601.gslb.pphosted.com

Proofpointreceives its email

TLS

www.marsh.com

Sectigo Limitedissued its certificate

DNS Records

A 2

75.2.75.65
99.83.175.37

MX 2

5mxa-001b7601.gslb.pphosted.com
5mxb-001b7601.gslb.pphosted.com

TXT 65

MS=ms20058834
_acme-challenge.iristxtebQtSd_0g9awFZfq08mQob3f2ivG_wjF3zckjjuvt_A
_acme-challenge.icargoTXTTCCfiWC65eaAdRnCNMIMHkvUVzEg8JVRliiswcMoWSM
_acme-challenge.uat-iristxtQcfGK1TFZNKC-HjnierP1kJuPs4gODuLxjZbE94n9pw
_acme-challenge.uat-icargotxtHIyDnzuYZRNj3XdoJBxjlszUy5z3n8YJ91usjx1oRPo
_acme-challenge.icargo-ssrsTXTeRHBM9aPNsa6b58XriX7wDZuyx4teXSd_fJqjzstWnU
00D1a000000YrcS=1TBa70000000ANZ
00D9h000004Jx0T=1TB9h000000006T
00DDJ000000AHAT=1TBOg00000001aP
00DDn000002nia8=1TBOd00000000ZV

NS 4

ns01.mmc.com
ns03.mmc.com
ns04.mmc.com
ns05.mmc.com

SOA 1

usash15-02dns01.mrshmc.com internet.services.marsh.com

TLS Certificates (2)

Common Name	Issuer	Expires
`www.marsh.com`	C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R36	Wed, 13 Jan 2027 23:59:59 +0000
`Sectigo Public Server Authentication CA OV R36`	C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46	Fri, 21 Mar 2036 23:59:59 +0000

Subdomains (46)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what Connor observes and signs for marsh.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/marsh.com">
  <img src="https://domaindrift.io/badge/marsh.com.svg"
       width="300" height="64" alt="Connor signed observations for marsh.com">
</a>

Ed25519 Receipt

Receipt ID: 58b8ac5b-6d34-45eb-9e6f-e213b8b8a6aa
Output Hash: f01151c17198a2c491e395a4ccac59d7598cd981bb64317996cbebbb12928090
Signature: ed25519:e96189d9e82ccf4b9e377e50ce1910db4f6efa8591f572e77f3d7b0ecb6235d13f7932825bd361d049f8279af3d09dfd02aef2ae43e88764ec61e5f31239eb07
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/marsh.com