CONTINUOUS INTERNET TELEMETRY24H DRIFT420 material changesacross 380 domains · -238 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT2 domains switched issuing CA24hNOW3,248 curated domains not answering+419 vs yesterdayERRORS21,534 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED59,964 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT420 material changesacross 380 domains · -238 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT2 domains switched issuing CA24hNOW3,248 curated domains not answering+419 vs yesterdayERRORS21,534 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED59,964 throttled or blocked our scanner429 rate-limit / 403 bot-block

marsh.com

Observed Jul 18, 2026, 12:08 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onAmazon
Email byProofpoint
Secured bySectigo
Registered withMarkMonitor Inc.
Also usesDocuSignGoogle Search ConsoleAtlassian
46 subdomains · fortune_500
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat marsh.com actually stands on - every host below is a signed observation
marsh.com
A / AAAA
75.2.75.6599.83.175.37
Amazonserves the site
NS
ns01.mmc.comns03.mmc.comns04.mmc.comns05.mmc.com
mmc.comanswers its DNS
MX
mxa-001b7601.gslb.pphosted.commxb-001b7601.gslb.pphosted.com
Proofpointreceives its email
TLS
www.marsh.com
Sectigo Limitedissued its certificate

DNS Records

A 2

  • 75.2.75.65
  • 99.83.175.37

MX 2

  • 5mxa-001b7601.gslb.pphosted.com
  • 5mxb-001b7601.gslb.pphosted.com

TXT 65

  • MS=ms20058834
  • _acme-challenge.iristxtebQtSd_0g9awFZfq08mQob3f2ivG_wjF3zckjjuvt_A
  • _acme-challenge.icargoTXTTCCfiWC65eaAdRnCNMIMHkvUVzEg8JVRliiswcMoWSM
  • _acme-challenge.uat-iristxtQcfGK1TFZNKC-HjnierP1kJuPs4gODuLxjZbE94n9pw
  • _acme-challenge.uat-icargotxtHIyDnzuYZRNj3XdoJBxjlszUy5z3n8YJ91usjx1oRPo
  • _acme-challenge.icargo-ssrsTXTeRHBM9aPNsa6b58XriX7wDZuyx4teXSd_fJqjzstWnU
  • 00D1a000000YrcS=1TBa70000000ANZ
  • 00D9h000004Jx0T=1TB9h000000006T
  • 00DDJ000000AHAT=1TBOg00000001aP
  • 00DDn000002nia8=1TBOd00000000ZV

NS 4

  • ns01.mmc.com
  • ns03.mmc.com
  • ns04.mmc.com
  • ns05.mmc.com

SOA 1

  • usash15-02dns01.mrshmc.com internet.services.marsh.com

TLS Certificates (2)

Common NameIssuerExpires
www.marsh.com C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R36 Wed, 13 Jan 2027 23:59:59 +0000
Sectigo Public Server Authentication CA OV R36 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 Fri, 21 Mar 2036 23:59:59 +0000

Subdomains (46)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for marsh.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for marsh.com <a href="https://domaindrift.io/t/marsh.com"> <img src="https://domaindrift.io/badge/marsh.com.svg" width="300" height="64" alt="DomainDrift signed observations for marsh.com"> </a>

Ed25519 Receipt

Receipt ID
7e00cac4-d123-4c90-be30-0c5026f3ce29
Output Hash
2ce98af6b7315ab0e2123b5d38419cf4a4ff51cfebc919a45a73244457864ee6
Signature
ed25519:ea58fdff7147c8c3223b9557c64ca84e119d2fedd0977315457530ac729d947045ed9ad2861abc2b11bec957bd5bdb5d447e47e8fcfad86f24cc296720bf3400
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser