CONTINUOUS INTERNET TELEMETRY24H DRIFT2,559 material changesacross 2,379 domains · +1,137 vs yesterdayDNS DRIFT14 domains changed DNS providertop destination alidns.com · -7 vs yesterdayEMAIL DRIFT9 domains switched email providertop destination google.com · +4 vs yesterdayCERT DRIFT46 domains switched issuing CA24h · +46 vs yesterdayNOW518 curated domains not answering-192 vs yesterdayERRORS3,777 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED11,170 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT2,559 material changesacross 2,379 domains · +1,137 vs yesterdayDNS DRIFT14 domains changed DNS providertop destination alidns.com · -7 vs yesterdayEMAIL DRIFT9 domains switched email providertop destination google.com · +4 vs yesterdayCERT DRIFT46 domains switched issuing CA24h · +46 vs yesterdayNOW518 curated domains not answering-192 vs yesterdayERRORS3,777 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED11,170 throttled or blocked our scanner429 rate-limit / 403 bot-block

mercusys.com

Observed 2026-07-17T15:29:11.657094057+00:00 (1d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Email byMicrosoft 365
Secured byAmazon
Also usesGoogle Search Console
IPv6 · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat mercusys.com actually stands on - every host below is a signed observation
mercusys.com
A / AAAA
3.167.56.943.167.56.523.167.56.443.167.56.124+8 more
2600serves the site
NS
ns-1200.awsdns-22.orgns-166.awsdns-20.comns-1678.awsdns-17.co.ukns-867.awsdns-44.net
awsdns-22.org + awsdns-20.com + moreanswers its DNS
MX
mercusys-com.mail.protection.outlook.com
Microsoft 365receives its email
TLS
*.mercusys.com
Amazonissued its certificate

DNS Records

A 4

  • 3.167.56.94
  • 3.167.56.52
  • 3.167.56.44
  • 3.167.56.124

AAAA 8

  • 2600:9000:27c5:2e00:1c:ae8e:6300:93a1
  • 2600:9000:27c5:7400:1c:ae8e:6300:93a1
  • 2600:9000:27c5:5200:1c:ae8e:6300:93a1
  • 2600:9000:27c5:7c00:1c:ae8e:6300:93a1
  • 2600:9000:27c5:3c00:1c:ae8e:6300:93a1
  • 2600:9000:27c5:3400:1c:ae8e:6300:93a1
  • 2600:9000:27c5:d400:1c:ae8e:6300:93a1
  • 2600:9000:27c5:4000:1c:ae8e:6300:93a1

MX 1

  • 1mercusys-com.mail.protection.outlook.com

TXT 3

  • google-site-verification=SSQ0axtT2ety0IZm2pkQmwBspV8XANj5xDSrmEPwOV0
  • v=spf1 include:spf.protection.outlook.com -all
  • v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@vali.email

NS 4

  • ns-1200.awsdns-22.org
  • ns-166.awsdns-20.com
  • ns-1678.awsdns-17.co.uk
  • ns-867.awsdns-44.net

SOA 1

  • ns-1200.awsdns-22.org awsdns-hostmaster.amazon.com

TLS Certificates (3)

Common NameIssuerExpires
*.mercusys.com C=US, O=Amazon, CN=Amazon RSA 2048 M04 Tue, 24 Nov 2026 23:59:59 +0000
Amazon RSA 2048 M04 C=US, O=Amazon, CN=Amazon Root CA 1 Fri, 23 Aug 2030 22:26:35 +0000
Amazon Root CA 1 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for mercusys.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for mercusys.com <a href="https://domaindrift.io/t/mercusys.com"> <img src="https://domaindrift.io/badge/mercusys.com.svg" width="300" height="64" alt="DomainDrift signed observations for mercusys.com"> </a>

Ed25519 Receipt

Receipt ID
d303f416-1ddb-4c09-98c4-658bd1259f0b
Output Hash
9bfa5464a0b61fc2bedab3672245af76194c60565ef7b4a1d8a7d3e7dfe3e273
Signature
ed25519:5abc07315ea5c804de5fab80ab6c31bcdfa10e1a26102298072336185ef191504b7e2f03baf954bfda4a717192a168015194b8e4188cff256f47d7f50a4d6a01
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser