CONTINUOUS INTERNET TELEMETRY24H DRIFT8,843 material changesacross 8,688 domains · last 24h · +9 vs yesterdayDNS DRIFT277 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT54 domains switched email providertop destination outlook.comCERT DRIFT72 domains switched issuing CA24h · -1 vs yesterday

antivir.com

Observed Jul 25, 2026, 23:04 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Not responding
Signed observation on record.
majestic
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat antivir.com actually stands on - every host below is a signed observation
antivir.com
A / AAAA
52.58.28.12
unattributedserves the site
NS
edns109.ultradns.bizedns109.ultradns.comedns109.ultradns.netedns109.ultradns.org
ultradns.biz + ultradns.com + moreanswers its DNS
MX
mx19a.antispameurope.commx19b.antispameurope.commx19c.antispameurope.commx19d.antispameurope.com
antispameurope.comreceives its email

DNS Records

A 1

  • 52.58.28.12

MX 4

  • 10mx19a.antispameurope.com
  • 20mx19b.antispameurope.com
  • 30mx19c.antispameurope.com
  • 40mx19d.antispameurope.com

TXT 2

  • v=spf1 redirect=_spf.avira.com
  • v=DMARC1; p=quarantine; rua=mailto:postmaster@avira.com,mailto:dmarc_agg@vali.email; ruf=mailto:postmaster@avira.com; rf=afrf; pct=100

NS 4

  • edns109.ultradns.biz
  • edns109.ultradns.com
  • edns109.ultradns.net
  • edns109.ultradns.org

SOA 1

  • edns109.ultradns.com domains.nortonlifelock.com

CAA 9

  • iodef "mailto:ca@avira.com"
  • issue "awstrust.com"
  • issue "digicert.com"
  • issue "letsencrypt.org"
  • issue "sectigo.com"
  • issuewild "awstrust.com"
  • issuewild "digicert.com"
  • issuewild "letsencrypt.org"
  • issuewild "sectigo.com"

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for antivir.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for antivir.com <a href="https://domaindrift.io/t/antivir.com"> <img src="https://domaindrift.io/badge/antivir.com.svg" width="300" height="64" alt="DomainDrift signed observations for antivir.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_30ed0c9f8c004070
Output Hash
ba8172d17ccc2dbc80ba5b8a74fea9c77c95c79952121a763386ba55509670ed
Signature
ed25519:7c6d5868d8edaef63e3d510c96f507b9623bc570357fd177dd8e7d4af99cf08d190d6f1c8d483f5b38c098c02c07b97121a0217733e91b2bd776a21eb3f5ec08
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser