CONTINUOUS INTERNET TELEMETRY24H DRIFT1,112 material changesacross 976 domains · +658 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination parity.domains · +21 vs yesterdayEMAIL DRIFT7 domains switched email providertop destination pphosted.com · +5 vs yesterdayNOW278 curated domains not answering-1,937 vs yesterdayERRORS2,180 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,231 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,112 material changesacross 976 domains · +658 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination parity.domains · +21 vs yesterdayEMAIL DRIFT7 domains switched email providertop destination pphosted.com · +5 vs yesterdayNOW278 curated domains not answering-1,937 vs yesterdayERRORS2,180 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,231 throttled or blocked our scanner429 rate-limit / 403 bot-block

divar.ir

Observed 2026-07-17T13:43:57.933084133+00:00 (3h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onHezardastan Unit Cloud Computing PJSC
Email byZoho Mail
Secured byAsseco Data Systems S.A.
Also usesGoogle Search Console
tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat divar.ir actually stands on - every host below is a signed observation
divar.ir
A / AAAA
185.166.104.6185.166.104.7
Hezardastan Unit Cloud Computing PJSCserves the site
NS
d.ns.sotoon53.comns.sotoon53.com
sotoon53.comanswers its DNS
MX
mx2.zoho.eumx.zoho.eumx3.zoho.eu
Zoho Mailreceives its email
TLS
*.divar.ir
Asseco Data Systems S.A.issued its certificate

DNS Records

A 2

  • 185.166.104.6
  • 185.166.104.7

MX 3

  • 20mx2.zoho.eu
  • 10mx.zoho.eu
  • 50mx3.zoho.eu

TXT 6

  • 2f8934cc5fd860c61cb8f4a283ca02475c0f24f65a728d8d6bfbe7d8dbcbd36
  • google-site-verification=N9LRrQzciI9xUF4F_HAB4_sNhUBksmbSjBD5zXBRD7A
  • v=spf1 include:zohomail.eu include:eu.zeptomail.net include:zoho.eu ~all
  • 96a6dc6d9a2d8a9b3b62ea6958e61d07.cdn.edge.sotoon.ir
  • 92d0f9d1eb7e30a30a00d323f3a86f9251d182413f6dbfb48a99f647c3b6581
  • v=DMARC1; p=none; rua=mailto:dmarc@divar.ir; ruf=mailto:dmarc@divar.ir; sp=none; adkim=r; aspf=r

NS 2

  • d.ns.sotoon53.com
  • ns.sotoon53.com

SOA 1

  • d.ns.sotoon53.com mehran.cafebazaar.ir

SRV 1

  • msync.zoho.eu:443 p0

TLS Certificates (4)

Common NameIssuerExpires
*.divar.ir C=PL, O=Asseco Data Systems S.A., CN=Certum DV TLS G2 R39 CA Tue, 01 Dec 2026 12:32:17 +0000
Certum DV TLS G2 R39 CA C=PL, O=Asseco Data Systems S.A., 2.5.4.11=Certum Certification Authority, CN=Certum Trusted Root CA Sun, 05 Jun 2039 07:41:22 +0000
Certum Trusted Root CA C=PL, O=Unizeto Technologies S.A., 2.5.4.11=Certum Certification Authority, CN=Certum Trusted Network CA Tue, 19 Sep 2028 10:00:00 +0000
Certum Trusted Network CA C=PL, O=Unizeto Technologies S.A., 2.5.4.11=Certum Certification Authority, CN=Certum Trusted Network CA Mon, 31 Dec 2029 12:07:37 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for divar.ir. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for divar.ir <a href="https://domaindrift.io/t/divar.ir"> <img src="https://domaindrift.io/badge/divar.ir.svg" width="300" height="64" alt="DomainDrift signed observations for divar.ir"> </a>

Ed25519 Receipt

Receipt ID
be9e08c3-3ef1-43b9-af07-237db2c901cd
Output Hash
964ea96f1201b42f54bd4e1b2487c313515c06b3c112b46c6c8f4e1ac119c93b
Signature
ed25519:8e05e4b6e73f9db10bc47c2533e101127f3c300a156dd045ca58fd44c22448d888d8a697448d52749fd6ae0ade8d35f4a0ba7eba625bfd2fab6aefc235b24402
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser