mersinc.org

.org crawl

First seen 2026-05-06 · Last seen 2026-05-13 · ok HTTP/1.1 200 8901 ms crawled 2026-05-13

US · 104.16.135.236 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: MERSCORP Holdings, Inc.
Language: en

Technology

CDN: Cloudflare
CMS: Gatsby

Analytics

Google Tag Manager

Third-party hosts loaded (3)

www.ice.com×3
mortgagetech.ice.com×1
www.googletagmanager.com×1

Social

Contact

Phone

8006466377

Registration

Registrar

MarkMonitor Inc.

Created

1995-12-23

Expires

2027-12-22 582 days left

Updated

2025-11-25

Name servers

edns1.ultradns.org
dns1.p03.nsone.net
dns2.p03.nsone.net
dns3.p03.nsone.net
dns4.p03.nsone.net
edns1.ultradns.biz
edns1.ultradns.net
edns1.ultradns.com

DNS records live

NS

dns1.p03.nsone.net
dns2.p03.nsone.net
dns3.p03.nsone.net
dns4.p03.nsone.net
edns1.ultradns.biz
edns1.ultradns.com
edns1.ultradns.net
edns1.ultradns.org

MX

10 mxa-001f3604.gslb.pphosted.com
10 mxb-001f3604.gslb.pphosted.com

TXT

MS=ms52756658
8ygbs8p25h4ddd04fmgmgjvmtps7x7mh
_8whqna331jx3xqsgwu9rdwff15x0id1

Email authentication strong

SPF: v=spf1 include:ice.com -all
strict (-all)
DMARC: v=DMARC1; p=reject; rua=mailto:dmarc-reports@ice.com; ruf=mailto:dmarc-forensics@ice.com; fo=1;
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-10-24 to 2026-11-25

Expires in 190 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.mersinc.org/index

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' *;style-src 'self' 'unsafe-inline' *;img-src 'self' data: blob: *;font-src 'self' data: *;connect-src 'self' *;media-src 'self' blob: *;frame-ancestors 'self' *.intcx.net *.paragonrels.com *.sigmacomputing.com *.bkfsconnect.com *.bkfstest.com *.opraplan.com *.theice.com *.ice.com *.nyse.com *.kcgbondpoint.com *.icedataservices.com *.appspace.com *.appspaceusercontent.com;frame-src *;worker-src 'self' blob: *;object-src 'self' *;manifest-src 'self' *;form-action 'self' https://*.theice.com https://*.intcx.net https://*.ice.com https://*.nyse.com https://*.kcgbondpoint.com https://*.icedataservices.com https://*.eloqua.com https://*.salesforce.com;upgrade-insecure-requests;base-uri 'self';script-src-attr 'none'
strict-transport-security: max-age=16070400