CONTINUOUS INTERNET TELEMETRY24H DRIFTat least 33,164 material changesacross 32,594+ domains · 24h to ~5h ago · a floor, 19h of 24 walkedNOW566 curated domains not reachablelast probe, steadySITE ERRORS34,433 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 156,712 sites429 rate-limit / 403 bot-block, a posture signal

virusav.com

Observed Jul 26, 2026, 22:28 UTC (7d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Up right now
Email byProtonMail
Secured byLet's Encrypt
7 subdomains · domcop
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat virusav.com actually stands on - every host below is a signed observation
virusav.com
A / AAAA
212.71.253.173
unattributedserves the site
NS
ns1.linode.comns2.linode.comns5.linode.comns4.linode.com+1 more
linode.comanswers its DNS
MX
mail.protonmail.ch
ProtonMailreceives its email
TLS
virusav.com
Let's Encryptissued its certificate

DNS Records

A 1

  • 212.71.253.173

MX 1

  • 10mail.protonmail.ch

TXT 2

  • protonmail-verification=04d0748fa0bdce9d5dc25f16bdaf195cb8b6da68
  • v=spf1 include:_spf.protonmail.ch mx ~all

NS 5

  • ns1.linode.com
  • ns2.linode.com
  • ns5.linode.com
  • ns4.linode.com
  • ns3.linode.com

SOA 1

  • ns1.linode.com keito.virusav.com

TLS Certificates (3)

Common NameIssuerExpires
virusav.com C=US, O=Let's Encrypt, CN=YR1 Sun, 11 Oct 2026 05:45:01 +0000
YR1 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (7)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for virusav.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for virusav.com <a href="https://domaindrift.io/t/virusav.com"> <img src="https://domaindrift.io/badge/virusav.com.svg" width="300" height="64" alt="DomainDrift signed observations for virusav.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_7f6ec8232d29ce30
Output Hash
ff94ab56f3cef28fa95c8df3dfa947c4e3fe1fce9098f44ead5ebc74d576b76b
Signature
ed25519:709237350137c89b230306cb9c51bbf9305c2c5ee77d2aa339a44091513b7ecff1a19e35e91a6dcda799429af7f7b53eaa2b9ec296c59b2a17e51dd0169e7f0b
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser