CONTINUOUS INTERNET TELEMETRY24H DRIFT516 material changesacross 460 domains · -142 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT2 domains switched issuing CA24hNOW3,058 curated domains not answering+229 vs yesterdayERRORS20,430 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED56,213 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT516 material changesacross 460 domains · -142 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT2 domains switched issuing CA24hNOW3,058 curated domains not answering+229 vs yesterdayERRORS20,430 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED56,213 throttled or blocked our scanner429 rate-limit / 403 bot-block

visir.is

Observed Jul 18, 2026, 13:11 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onLjosleidarinn ehf
Email bySalesforce
Secured byDigiCert
Also usesGoogle Search ConsoleFacebook/Meta
6 subdomains · tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat visir.is actually stands on - every host below is a signed observation
visir.is
A / AAAA
185.21.17.244185.21.16.110185.21.16.109185.21.17.247+2 more
Ljosleidarinn ehfserves the site
NS
ns1.c.isns0.c.isns2.c.is
c.isanswers its DNS
MX
spamvorn.internet.is
Salesforcereceives its email
TLS
*.visir.is
DigiCert Incissued its certificate

DNS Records

A 6

  • 185.21.17.244
  • 185.21.16.110
  • 185.21.16.109
  • 185.21.17.247
  • 185.21.17.249
  • 185.21.17.248

MX 1

  • 10spamvorn.internet.is

TXT 10

  • _c6iddu7akysyggcvnt8zf1ord12gnej
  • l963tx4k62yjdg1g93xgb3ckly4rkz5z
  • google-site-verification=PpaR6kPXSoDdjVXGB22fWtIbH5jFj0AKVul3q2ve3KI
  • google-site-verification=-pB6rSeFRw50Raf3JxQa6_QnwBB_NlrSJWojEFQ8Omg
  • facebook-domain-verification=5wsmwcm70ednfhid864mksq74lbjrb
  • v=spf1 mx ip4:213.176.128.0/24 ip4:193.4.194.0/24 a:c.is include:_spf.vist.is include:_spf.salesforce.com -all
  • google-site-verification=MrBGD9N768Xfgz7dHtg1Ogj_Ra3pKtUW_RwkRdP5rVA
  • google-site-verification=ZHL8C08RR7tckgi2KTDdw7dPrfYaxFAiVOmwqK0CP94
  • _sxrs07bpp3fpq0ulftvt81zhaohe0nl
  • v=DMARC1; p=none; rua=mailto:dmarc@visir.is; ruf=mailto:dmarc@visir.is;

NS 3

  • ns1.c.is
  • ns0.c.is
  • ns2.c.is

SOA 1

  • ns0.c.is hostmaster.visir.is

TLS Certificates (2)

Common NameIssuerExpires
*.visir.is C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 Fri, 26 Feb 2027 23:59:59 +0000
DigiCert Global G2 TLS RSA SHA256 2020 CA1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Sat, 29 Mar 2031 23:59:59 +0000

Subdomains (6)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for visir.is. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for visir.is <a href="https://domaindrift.io/t/visir.is"> <img src="https://domaindrift.io/badge/visir.is.svg" width="300" height="64" alt="DomainDrift signed observations for visir.is"> </a>

Ed25519 Receipt

Receipt ID
b16eecb6-8552-408b-8143-ab7407972c19
Output Hash
75c805664ea2e075fd787bf5b743c08e8d80ee57575c7b142051bc2f9f5a71ea
Signature
ed25519:b0b9a3063f66546ff639eb9d462b9f1e1866c9d4e4fe3be9883e4476e1c139b95012e1e16aa9500878c6391309009728820587db8c76f14f99a1b3368d02ec02
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser