CONTINUOUS INTERNET TELEMETRY24H DRIFT756 material changesacross 672 domains · +302 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination seizedservers.com · +12 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination pphosted.com · +2 vs yesterdayNOW2,513 curated domains not answering+298 vs yesterdayERRORS9,729 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,645 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT756 material changesacross 672 domains · +302 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination seizedservers.com · +12 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination pphosted.com · +2 vs yesterdayNOW2,513 curated domains not answering+298 vs yesterdayERRORS9,729 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,645 throttled or blocked our scanner429 rate-limit / 403 bot-block

nortonalto.com

Observed 2026-07-15T16:27:25.700Z (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Runs onCloudflare
Registered withAmazon Registrar, Inc.
tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat nortonalto.com actually stands on - every host below is a signed observation
nortonalto.com
NS
ns-1907.awsdns-46.co.ukns-257.awsdns-32.comns-1321.awsdns-37.orgns-914.awsdns-50.net
awsdns-46.co.uk + awsdns-32.com + moreanswers its DNS

HTTPS probe

server_error Server error (5xx) 530 Server Error
HTTP status530
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time106 ms
DNS resolutionNOERROR

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

NS 4

  • ns-1907.awsdns-46.co.uk
  • ns-257.awsdns-32.com
  • ns-1321.awsdns-37.org
  • ns-914.awsdns-50.net

SOA 1

  • ns-1907.awsdns-46.co.uk awsdns-hostmaster.amazon.com

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for nortonalto.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for nortonalto.com <a href="https://domaindrift.io/t/nortonalto.com"> <img src="https://domaindrift.io/badge/nortonalto.com.svg" width="300" height="64" alt="DomainDrift signed observations for nortonalto.com"> </a>

Ed25519 Receipt

Receipt ID
a5ef70d5-9bae-422c-8cfc-37d583454cf8
Output Hash
a6961db9063570ed906044b5ccb6753304a5abdd66d3cd58a6667a8a0a585011
Signature
ed25519:0312d68150b37c46ece444b710649a60f738d6b4fec6f3b4e19e58fc1cc9288645258cceab61e1576cd2f3480e98aaf81ae6124520f02aa106cd881916273f08
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser