merckmanuals.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 3090 ms crawled 2026-05-18

US · 166.117.53.172 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: The Trusted Provider of Medical Information since 1899
Description: The Merck Manuals are the global standard in medical reference for Doctors, Students & Consumers - since 1899.
Language: en-us
Canonical: https://www.merckmanuals.com

Open Graph

url: https://www.merckmanuals.com/
title: The Trusted Provider of Medical Information since 1899
site name: Merck Manuals

Technology

CDN: Amazon CloudFront
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (3)

edge.sitecorecloud.io×18
www.googletagmanager.com×2
www.msdmanuals.com×1

Social

Registration

Registrar

MarkMonitor Inc.

Created

2000-02-16

Expires

2028-02-16 637 days left

Updated

2026-01-15

Name servers

dns1.p03.nsone.net
dns2.p03.nsone.net
dns3.p03.nsone.net
dns4.p03.nsone.net
ns01.msddns.com
ns02.msddns.com
ns03.msddns.com
ns04.msddns.com

DNS records live

NS

dns1.p03.nsone.net
dns2.p03.nsone.net
dns3.p03.nsone.net
dns4.p03.nsone.net
ns01.msddns.com
ns02.msddns.com
ns03.msddns.com
ns04.msddns.com

TXT

Show 5 TXT records

MS=ms79134086
YLTgwCZhCT2Zty_kX9y5jsrKfI25KyDZoNg_nDMZy4E
facebook-domain-verification=b9xccepqmc7hbxtsbpt83dk6wb8inf
google-site-verification=YLTgwCZhCT2Zty_kX9y5jsrKfI25KyDZoNg_nDMZy4E
google-site-verification=z3f91tBhNW1CHTQGJL1YFbkR982996VQ3Ez07cGUkgc

Email authentication no MX

SPF: v=spf1 -all
strict (-all)
DMARC: v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:dcm_rua_reports@merck.com; ruf=mailto:dcm_ruf_reports@merck.com
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2025-12-09 to 2026-12-10

Expires in 204 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.merckmanuals.com/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' https://apps.sitecore.net *; img-src 'self' data: *; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com *; font-src 'self' 'unsafe-inline' https://fonts.gstatic.com *; upgrade-insecure-requests; block-all-mixed-content;
strict-transport-security: max-age=63072000; includeSubDomains; preload