Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/avast
Generated: Tue, 20 Oct 2026 12:47:19 GMT
Target Website: avast.com
Overall Trust Score: 86/100 (Trusted)
avast.com
Trusted
Scanned: Oct 20, 12:47 PMTRUST SCORE
86
CONFIDENT
Low Risk
86/100
TRUST SCORE
CONFIDENT
Low Risk
SAFETY
65/100
65/100
TRANSPARENCY
15/100
15/100
DOMAIN RISK
LowLow Tier
LowRisk
SSL SECURITY
100/100
100/100
PAYMENT RISK
NoNo Risk
NoRisk
VERDICT
Trusted
Trusted
AI Security Summary
86/100 — trusted. Long-established domain (29.0 years old), clean threat reputation, no impersonation patterns. Verdict driven by: no privacy policy found; no terms of service found; no contact page found — worth extra caution before trusting.
No malware/phishing on feedsGood reputationHTTPS enabled
HTTPS & SSL
SecureSecure
C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R36
Threat Status
CleanClean
No blacklists or malware
Domain Age
29.0 years29.0 years
Registered 10/6/1997
Reputation
High TrustHigh Trust
Based on 65+ verified signals
IP & Server
23.200.225.11523.200.225.115
cloudflare
Email Security
ProtectedProtected
SPF, DMARC, MX active
Performance
70 / 10070 / 100
Standard speed
Redirects
1 Hop1 Hop
Redirect chain analyzed
Top Priority RecommendationAction Needed
Site returned HTTP 403
The server is reachable but did not return a success status.
Why it matters
Addressing this signal prevents trust downgrades and potential security risks.
View Glossary GuidePositive Signals
- HTTPS is enforced
- Served through Cloudflare
- 3 address record(s) resolved
- IPv6 (AAAA) available
- 6 authoritative nameservers
- Domain registered 29+ years ago
- Owner information disclosed
- Valid SSL / TLS certificate active
Warnings
- Site returned HTTP 403
- Missing HSTS
- Missing Content Security Policy
- No mobile viewport meta tag
- No privacy policy found
- No terms of service found
- No contact page found
Critical Issues
No critical issues found
Domain passes all high-risk checks
- Registrar Name
- MarkMonitor Inc.
- Creation Date
- October 6, 1997 (29.0 years ago)
- Last Updated
- December 9, 2022
- Registry Expiry Date
- September 20, 2030
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited
ICANN Status Badges
client delete prohibitedclient transfer prohibitedclient update prohibited
Domain registered 29+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-OptionsMissing
X-Content-Type-OptionsMissing
Referrer-PolicyMissing
Permissions-PolicyMissing
Recommended Missing Headers
missing: HSTSmissing: Content Security Policymissing: X-Frame-Optionsmissing: X-Content-Type-Optionsmissing: Referrer Policymissing: Permissions Policy
All Response Headers (11)
Missing HSTS
Tells browsers to only use HTTPS for this domain.
-4
Missing Content Security Policy
Restricts which scripts and resources the page can load.
-4
Missing X-Frame-Options
Prevents clickjacking by disallowing framing.
-3
Missing X-Content-Type-Options
Blocks MIME-sniffing browser attacks.
-2
Missing Referrer Policy
Controls what referrer information is sent with requests.
-2
Missing Permissions Policy
Restricts access to powerful browser features (camera, mic, etc.).
-2
- IPv4 Addresses (A)
- 23.200.225.115
- IPv6 Addresses (AAAA)
- 2600:1407:3c00:1486::21c7, 2600:1407:3c00:1482::21c7
- Mail Servers (MX)
- avast-com.mail.protection.outlook.com (Priority: 0)
- Authoritative Nameservers (NS)
- a11-66.akam.net, a1-182.akam.net, a26-67.akam.net, a13-65.akam.net, a20-66.akam.net, a6-67.akam.net
- TXT Records Found
- 14 TXT verification records
A Records (IPv4)
23.200.225.115
TXT Verification Records
MS=ms87582564
apple-domain-verification=1kYfASdchMq7OLKO
google-site-verification=9KZgt0QBAQTOnPP6NKOGigeO-vW176OMT9yjzS7fZD8
knowbe4-site-verification=482fcbc151a32d4f6ba2feaebc35407e
site24x7-signals-domain-verification=d265eba98d152d1c9dafc5b3f5044af8
google-site-verification=iGnE-HdPoFw1rbSBbllQkT1qrXCwnQfOE1qoe50U9QY
_n3mjdpzgvu3opnmknj83rg5ji782y4w
segment-site-verification=intxU1LpjrdINW7QHilYM6C9blznrTdI
security-notifications=soc@avast.com
v=spf1 redirect=spfc.avast.com
google-site-verification=8_D4sFKVTwzXbD0Cn5IKiko_fdjkwfkE9ugaAp_DE0M
google-site-verification=tHW5WI8bNL1PvDNkvFl7Mm74YmLIzf3Hr90j7mGOVBQ
google-site-verification=0uAqsuocfiKUuALLUDkgZUjTqojKVv14OO-K15mdmuQ
google-site-verification=k82twljI92zx21IOUUAFZRhI1H9SYuCQ0Sl-yvWhgkk
3 address record(s) resolved
+4
IPv6 (AAAA) available
Modern dual-stack setup.
+2
6 authoritative nameservers
+2
- Registrable Domain
- avast.com
- Registrar Organization
- MarkMonitor Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited
- Delegated Authoritative Nameservers
- a1-182.akam.net, a11-66.akam.net, a13-65.akam.net, a20-66.akam.net, a26-67.akam.net, a6-67.akam.net
- Registration Lifecycle
- Registered: 1997 → Expires: 2030
Nameservers (NS)
a1-182.akam.neta11-66.akam.neta13-65.akam.neta20-66.akam.neta26-67.akam.neta6-67.akam.net
Domain registered 29+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
- SPF Record
- v=spf1 redirect=spfc.avast.com
- DMARC Policy Mode
- Policy: QUARANTINE
- DMARC Raw Record
- v=DMARC1; p=quarantine; sp=none; rua=mailto:dmarc_agg@vali.email; ruf=mailto:dmarcruf@avast.com; adkim=r; aspf=r; ri=86400; fo=1; pct=100
- DKIM Selectors Detected
- google, selector1, selector2
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (quarantine)
+4
DKIM configured (google, selector1, selector2)
+3
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Not checked
- Root Domain Label
- avast
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- No recognized brand impersonation
- Typosquatting Risk
- Clean
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Detected Technologies by Category
cdn
Cloudflare
Page Metadata & Fingerprint
- HTML Title
- Access Denied
- Meta Description
- —
- Document Language
- en
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width
- Generator Software
- —
1 technologies detected
Cloudflare
No mobile viewport meta tag
The page won't render correctly on phones without a viewport tag.
-3
Missing meta description
-2
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/2
Binary framing, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
HTTP/2
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 909 ms
- Payload Body Size
- 0.4 KB
- Compression Status
- Uncompressed
- Cache Directives
- Standard caching rules
No findings.
AI Content Evaluation
86/100 — trusted. Long-established domain (29.0 years old), clean threat reputation, no impersonation patterns. Verdict driven by: no privacy policy found; no terms of service found; no contact page found — worth extra caution before trusting.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 287 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 23.200.225.115
- HTTP Status Code
- 403 OK
- Final Landing Destination
- https://www.avast.com/
- Redirect Hop Count
- 1 hop
Redirect Hop Chain
- 1.https://avast.com/ → https://www.avast.com/
Site returned HTTP 403
The server is reachable but did not return a success status.
-6
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
- Certificate Authority (Issuer)
- C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R36
- Subject Common Name (CN)
- blockmaster-stage.ff.avast.com
- Validity Period
- 122 days remaining (Expires: 2027-02-19T23:59:59Z)
- Subject Alternative Names (SANs)
- 40 domains protected
- Certificates Logged (CT)
- 100 certs recorded
Subject Alternative Names (Sample)
blockmaster-stage.ff.avast.comblockmaster.ff.avast.commanage-extint.avg.commanage-int.avg.commanage-int.norton.commanage.norton.commobilesecurity-int.norton.commobilesecurity.norton.commy-extint.norton.commy-int.norton.commy.norton.commyaccount-extint.avast.commyaccount-extint.avira.commyaccount-int.avast.commyaccount-int.avira.commyaccount.avast.comone.norton.comwebapps-extint.avast.comwebapps-extint.avg.comwebapps-extint.avira.com+20 more
Valid SSL / TLS certificate active
Issued by C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R36, valid for 122 remaining days.
+10
Key Legal & Transparency Pages
privacy PageNot linked
terms PageNot linked
contact PageNot linked
about PageNot linked
refund PageNot linked
shipping PageNot linked
cookies PageNot linked
- Published Phone Numbers
- 1792500440
No privacy policy found
Legally required in most jurisdictions. Its absence is a real red flag.
-4
No terms of service found
Reputable sites usually publish a terms of service.
-4
No contact page found
Reputable sites usually publish a contact page.
-4
No about page found
Reputable sites usually publish a about page.
-3
No refund/return policy found
Reputable sites usually publish a refund/return policy.
-3
No cookie policy found
Reputable sites usually publish a cookie policy.
-2
Phone number published
+2
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- https://www.avast.com/sitemap_index.xml
- Disallow Rules Count
- 3 rules
View Raw robots.txt
User-agent: * Disallow: Disallow: /search-results* Sitemap: https://www.avast.com/sitemap_index.xml User-agent: PerplexityBot Disallow: /*&rut= User-agent: OAI-SearchBot Allow: / User-agent: ChatGPT-User Allow: / User-agent: GPTBot Allow: / User-agent: Perplexity-User Allow: / User-agent: PerplexityBot Allow: / User-agent: Claude-User Allow: / User-agent: ClaudeBot Allow: / Content-Signal: ai-train=yes, search=yes, ai-input=yes
robots.txt published
+2
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
36
This scan
Sources Checked
18
Live security feeds
Scan Duration
2.61s
Ultra-fast
Last Scan
10/20/2026
Live timestamp
Overall Risk
Low Risk