Cybersecurity Rating
by ImmuniWeb® CyberScore™

Get a free cybersecurity, privacy and AI security rating of your company, partners or suppliers
Free online tool with PDF report
  • Website Security Rating
  • Website Privacy Rating
  • Encryption Security Rating
  • Email Security Rating
  • GenAI Exposure Rating
  • Dark Web Exposure
Free online tool with PDF report
63,079 organizations tested
|Provided "as is" without any warranty of any kind
21
tests
running
670
tests
in 24 hours
tests in 24 hours

Error:

Share this report:

Cybersecurity Rating of mercor.com

Website Security Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLGradeTested on
mercor.comhttps://www.mercor.com/ANovember 5th, 2026 18:47
www.mercor.comhttps://www.mercor.com/ANovember 5th, 2026 18:47
api.studio.mercor.comhttps://api.studio.mercor.com/B-November 5th, 2026 18:53
coil.mercor.comhttps://coil.mercor.com/B-November 5th, 2026 18:53
delivery-api.mercor.comhttps://delivery-api.mercor.com/C+November 5th, 2026 18:53
Show 38 More

Website Privacy Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLGradeTested on
mercor.comhttps://www.mercor.com/BNovember 5th, 2026 19:42
www.mercor.comhttps://www.mercor.com/BNovember 5th, 2026 19:42
api.studio.mercor.comhttps://api.studio.mercor.com/ANovember 5th, 2026 19:42
coil.mercor.comhttps://coil.mercor.com/ANovember 5th, 2026 19:42
delivery-api.mercor.comhttps://delivery-api.mercor.com/A+November 5th, 2026 19:43
Show 38 More

SSL Security Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLProtocolGradeTested on
mercor.comhttps://mercor.com
34.194.223.40:443
HTTPSA+November 5th, 2026 18:46
www.mercor.comhttps://www.mercor.com
104.18.27.26:443
HTTPSANovember 5th, 2026 18:46
api.studio.mercor.comhttps://api.studio.mercor.com
104.18.26.26:443
HTTPSANovember 5th, 2026 18:53
coil.mercor.comhttps://coil.mercor.com
104.18.26.26:443
HTTPSANovember 5th, 2026 18:54
delivery-api.mercor.comhttps://delivery-api.mercor.com
32.200.190.255:443
HTTPSB-November 5th, 2026 18:54
Show 38 More

Email Security Rating | Overview

Back to Top
HostnameGradeTested on
mercor.comA-November 5th, 2026 18:46
  • Email Server Security Report
    A total of 5 email servers were analyzed. Open relay was not detected, SMTP enumeration was not detected, a secure authentication was enforced across all tested servers, and PTR records were properly configured. The average response latency was approximately 0.041s.
  • Email SSL/TLS Encryption Report
    SSL/TLS security testing was completed for 5 email servers. Server grade is B.
  • Email Server DNS Security Report
    SPF is set properly, DKIM is set properly, and DMARC is set properly. MTA-STS is not configured for this domain. A and MX DNS records are unsigned.
  • Email Server Black and Spam Lists Report
    No email servers were found on blacklists.

GenAI Exposure Rating

Back to Top
  • No vibe-coded or AI-created code patterns detected across 43 websites.
  • No leaks of AI tokens or other AI-related and sensitive data detected on the Dark Web.
  • No leaks of AI tokens or other AI-related and sensitive data detected across 43 websites.

Dark Web and Threat Exposure Rating | Overview

Back to Top
HostnameTested on
mercor.comNovember 5th, 2026 18:45
  • Dark Web Exposure Report
    No dark web incidents found.
  • Unprotected Cloud Storage Report
    A total of 1 bucket detected across 1 cloud storage provider: 1 bucket was detected in Google Cloud Storage.
  • Phishing Websites Report
    9 potential phishing URLs detected. Example hostnames: mercor.ch and mercor.dk; the full list is available in the detailed report.
  • Cybersquatting Domains Report
    62 potential cybersquatting domains detected. Example domains: lercor.com, mercor-research.com and nereor.com; additional cybersquatting domains are available in the detailed report.
  • Typosquatting Domains Report
    16 potential typosquatting domains detected. Example domains: m3rcor.com, merocr.com and merrcor.com; additional typosquatting domains are available in the detailed report.
  • Fake Accounts in Social Media Report
    4 squatted social network accounts detected across 2 social networks. Most affected social networks include Reddit with 3 accounts including @mercorly and @mercore and YouTube with 1 account including @mercorai; the full list is available in the detailed report.
Share this report:

Upgrade to ImmuniWeb® AI Platform