willis.com

Observed 2026-07-13T00:19:38.676109804+00:00 (11h ago). Every field below was attested with an Ed25519 signature at scan time.

Guarded by a firewall

Runs onAmazon

Email byMicrosoft 365

Secured byLet's Encrypt

Also usesGoogle Search Console

push_legacy

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat willis.com actually stands on - every host below is a signed observation

willis.com

A / AAAA

64.239.109.1

Amazonserves the site

ha2.markmonitor.zoneha3.markmonitor.zoneha4.markmonitor.zoneha1.markmonitor.zone

markmonitor.zoneanswers its DNS

willistowerswatson-com.mail.protection.outlook.com

Microsoft 365receives its email

TLS

willis.com

Let's Encryptissued its certificate

DNS Records

A 1

64.239.109.1

MX 1

10willistowerswatson-com.mail.protection.outlook.com

TXT 32

MS=ms22364466
MS=ms69488898
e2ma-verification=k0vab
p207r2700x15cz784rs08bs78rpb1969
a02e0935-98f9-457a-a94f-f656573535af
6Be74tzbfAWB_-wTuJ2v61uP0jGcHEYA9pHEERYn7Wo
v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
webexdomainverification.=35bb1f62-bbe7-4527-a14f-e184869f372f
anthropic-domain-verification-mynezd=VszLainKrNqLGN77cdGMElvYp
globalsign-domain-verification=3ED1E3FDEE9A8B2A9050A68ABFF8C7B6

NS 4

ha2.markmonitor.zone
ha3.markmonitor.zone
ha4.markmonitor.zone
ha1.markmonitor.zone

SOA 1

ha1.markmonitor.zone hostmaster.markmonitor.com

CAA 4

issue "letsencrypt.org"
issue "globalsign.com"
issue "amazonaws.com"
issue "digicert.com"

TLS Certificates (2)

Common Name	Issuer	Expires
`willis.com`	C=US, O=Let's Encrypt, CN=R12	Tue, 25 Aug 2026 09:36:29 +0000
`R12`	C=US, O=Internet Security Research Group, CN=ISRG Root X1	Fri, 12 Mar 2027 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for willis.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/willis.com">
  <img src="https://domaindrift.io/badge/willis.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for willis.com">
</a>

Ed25519 Receipt

Receipt ID: be34ab38-c591-4812-a482-dfddb817183e
Output Hash: 2bf70e3d9edab0655d9fbd34f180215c34aef153c474462f3cdd630a56a5affd
Signature: ed25519:a21d1abbf52b7e2381c2664bed43b5ce80d9e7c5931c842ce35829b45818e7ad71b89c9c99e6b38d500f7669ff6235736b29982f873592f06d761a29a3ae5102
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/willis.com