CONTINUOUS INTERNET TELEMETRY24H DRIFT2,861 material changesacross 2,519 domains · -537 vs yesterdayDNS DRIFT21 domains changed DNS providertop destination cloudflare.com · -6 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination reyrey.com · -2 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,307 curated domains not answering-6,411 vs yesterdayERRORS10,966 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,861 material changesacross 2,519 domains · -537 vs yesterdayDNS DRIFT21 domains changed DNS providertop destination cloudflare.com · -6 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination reyrey.com · -2 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,307 curated domains not answering-6,411 vs yesterdayERRORS10,966 responded with an errorlast probe · 5xx / 404 / 429 / 403

mercer.com

Observed 2026-07-13T05:00:39.809Z (4h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byProofpoint
Also usesGoogle Search Console
8 subdomains · tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat mercer.com actually stands on - every host below is a signed observation
mercer.com
A / AAAA
75.2.75.6599.83.175.37
Cloudflareserves the site
NS
ns01.mmc.comns05.mmc.comns04.mmc.comns03.mmc.com
mmc.comanswers its DNS
MX
mxb-001b7601.gslb.pphosted.commxa-001b7601.gslb.pphosted.com
Proofpointreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.mercer.com:443/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time176 ms
DNS resolutionNOERROR
Redirect chain
https://www.mercer.com:443/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 75.2.75.65
  • 99.83.175.37

MX 2

  • 5mxb-001b7601.gslb.pphosted.com
  • 5mxa-001b7601.gslb.pphosted.com

TXT 35

  • anthropic-domain-verification-ve1vdn=37euwGvFhVrJWYHhdH3dJ1CaR
  • anthropic-domain-verification-fdpphm=DjzFeRZs6A5ujtjeWIYonKyP0
  • amazonses:aCiVRigeZlgNHWmXXV22GYsbKu1vhHTlilAqWXnmNXw=
  • MS=ms17691168
  • google-site-verification=EQJp9e00oXQcI7fi1XD8OAhryUqjHPWLu_Hkr105puQ
  • 00D9h000004Jx0T=1TB9h0000000085
  • Sendinblue-code:d3a0c8711febd69626dd0c139864a102
  • jamf-site-verification=lX4LjyZurtQaQy5tpmfrVg
  • amazonses:qivjIz0fRIG1keT1RS0mwNx6GxOBkYlzqWII/R9Oy5E=
  • f2BI4sb/+goMm1VxoHtnWklA59gvAUtvlXMk4MIigdIdnGDSqTbMDq1730gBpYQSohBNQGkyM5nfZG36tfD5eA==

NS 4

  • ns01.mmc.com
  • ns05.mmc.com
  • ns04.mmc.com
  • ns03.mmc.com

SOA 1

  • usash15-02dns01.mrshmc.com internet.services.marsh.com

TLS Certificates (0)

None.

Subdomains (8)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for mercer.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for mercer.com <a href="https://domaindrift.io/t/mercer.com"> <img src="https://domaindrift.io/badge/mercer.com.svg" width="300" height="64" alt="DomainDrift signed observations for mercer.com"> </a>

Ed25519 Receipt

Receipt ID
63d3d63e-316e-4483-a597-579766e054e9
Output Hash
25e712a9f940c0e6c1b2096a9ea7e7698bfd344e3e3f814b3a9578a88c3b4e4b
Signature
ed25519:78d8c79dfae5139da6484a464c7e1c06d148b009aa75b7bb051ecbdc379145fec6709f13ce38184ebc04658a33f47968ecf050605574569a95a75daad6cf300d
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser