mercerandsons.com

.com crawl

First seen 2026-04-14 · Last seen 2026-05-12 · ok HTTP/1.1 200 3555 ms crawled 2026-05-08

CA · 23.227.38.65 · AS13335 Cloudflare, Inc.

Reputation 94/100 dmarc monitor-only

ecommerce

HTML metadata

Title: Mercer & Sons | Traditional Button-down Straight Collar Shirts – Mercer&Sons
Description: Discover Mercer and Sons premium men's shirts: classic oxfords and dress shirts in 100% Pima cotton. Features include button-down and straight collars, generous cuts, and single-needle stitching. Enjoy exceptional comfort with full roll collars and traditional looks. Find hard-to-find sizes, various styles, and custom.
Language: en
Canonical: https://mercerandsons.com/

Open Graph

url: https://mercerandsons.com/
title: Mercer & Sons | Traditional Button-down Straight Collar Shirts
site name: Mercer&Sons
description: Discover Mercer and Sons premium men's shirts: classic oxfords and dress shirts in 100% Pima cotton. Features include button-down and straight collars, generous cuts, and single-needle stitching. Enjoy exceptional comfort with full roll collars and traditional looks. Find hard-to-find sizes, various styles, and custom.

Technology

CDN: Cloudflare
CMS: Shopify

Third-party hosts loaded (5)

cdn.shopify.com×7
cdnjs.cloudflare.com×3
ajax.googleapis.com×1
cdn1.stamped.io×1
monorail-edge.shopifysvc.com×1

Social

Registration

Registrar

Cloudflare, Inc.

Created

1998-12-17

Expires

2027-03-18 301 days left

Updated

2026-02-16

Name servers

rihana.ns.cloudflare.com
zod.ns.cloudflare.com

DNS records live

NS

rihana.ns.cloudflare.com
zod.ns.cloudflare.com

MX

0 mercerandsons-com.mail.protection.outlook.com

Verified for

Google
Microsoft 365

Email authentication partial

SPF: v=spf1 include:spf.protection.outlook.com -all
strict (-all)
DMARC: v=DMARC1; p=none;
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

from 2026-05-07 to 2026-08-05

Expires in 76 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://mercerandsons.com/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

short HSTS max-age
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: block-all-mixed-content; frame-ancestors *; upgrade-insecure-requests;
strict-transport-security: max-age=7889238