Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/avast.com
Generated: Fri, 13 Nov 2026 15:38:21 GMT
Target Website: avast.com
Overall Trust Score: 92/100 (Trusted)
Is avast.com safe?
Very Likely Safe
No major red flags found. This looks like a legitimate, established website.
Popular site · #321 worldwideChecked Nov 13, 2026
92
Trust score
Why: Main reasons: domain registered 29+ years ago; not flagged by Google Safe Browsing; popular website — ranked #321 worldwide. Minor issues: site returned HTTP 403; missing HSTS.
Identity & Age100/100
Impersonation Risk100/100
Red Flags100/100
Transparency70/100
Security77/100
Email100/100
Positive highlights
- Domain registered 29+ years agoLong-established domains are far less likely to be disposable scams.
- Not flagged by Google Safe BrowsingNo malware, phishing, or unwanted-software match in Google's live threat database.
- HTTPS is enforcedAll redirects stayed on HTTPS. Traffic is encrypted end-to-end.
- Valid SSL / TLS certificate activeIssued by C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R36, valid for 119 remaining days.
- Popular website — ranked #321 worldwideListed in the Tranco top 1 million websites. Scam sites are almost never this popular.
- No impersonation patterns detectedDomain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
- Not listed on URLhaus malware blocklist
- Not present in PhishStats phishing feed
- DMARC published (quarantine)
- No scam-correlated language found on the home pageNo crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
Negative highlights
- Site returned HTTP 403The server is reachable but did not return a success status.
- Missing HSTSTells browsers to only use HTTPS for this domain.
- Missing Content Security PolicyRestricts which scripts and resources the page can load.
Note: Registered via MarkMonitor Inc..
Note: 1 technologies detected. Cloudflare
Note: Policy pages could not be checked. The site showed our scanner a bot-check or short page, so privacy, terms and contact pages were not verified. This is common for large sites and is not counted against them.
Key facts about avast.com
- Website
- avast.com
- Popularity
- #321 worldwide (Tranco top 1M)
- Domain created
- Oct 6, 1997 (29.1 years old)
- Domain expires
- Sep 20, 2030
- Registrar
- MarkMonitor Inc.
- Owner details
- Public in WHOIS
- IP address
- 23.222.125.95
- Hosting / CDN
- Cloudflare
- SSL certificate
- Sectigo Limited · valid until Mar 12, 2027
- Email security
- SPF ✓ · DMARC ✓ (quarantine)
- Threat blocklists
- Not listed (clean)
- Technology
- Cloudflare
Summary
92/100 — trusted. Long-established domain (29.1 years old), clean threat reputation, no impersonation patterns.
No malware/phishing on feedsGood reputationHTTPS enabled
Full technical report
Domain Information
Registration timeline, age calculation, registrar details, and ICANN status.
Verified
- Registrar Name
- MarkMonitor Inc.
- Creation Date
- October 6, 1997 (29.1 years ago)
- Last Updated
- December 9, 2022
- Registry Expiry Date
- September 20, 2030
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited
ICANN Status Badges
client delete prohibitedclient transfer prohibitedclient update prohibited
Domain registered 29+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
HTTP Headers & Security
Full HTTP response headers, HSTS, Content Security Policy (CSP), and security baselines.
Warning
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-OptionsMissing
X-Content-Type-OptionsMissing
Referrer-PolicyMissing
Permissions-PolicyMissing
Recommended Missing Headers
missing: HSTSmissing: Content Security Policymissing: X-Frame-Optionsmissing: X-Content-Type-Optionsmissing: Referrer Policymissing: Permissions Policy
All Response Headers (11)
cf-cache-status: DYNAMIC cf-ray: a59edced3a0f3564-CMH connection: close content-length: 365 content-type: text/html date: Fri, 13 Nov 2026 15:38:21 GMT expires: Fri, 13 Nov 2026 15:38:21 GMT mime-version: 1.0 server: cloudflare server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1794584301798_388937164_193702066_24_13181_14_37_15";dur=1 set-cookie: AKA_A2=A; expires=Fri, 13-Nov-2026 16:38:21 GMT; path=/; domain=avast.com; secure; HttpOnly
Missing HSTS
Tells browsers to only use HTTPS for this domain.
-4
Missing Content Security Policy
Restricts which scripts and resources the page can load.
-4
Missing X-Frame-Options
Prevents clickjacking by disallowing framing.
-3
Missing X-Content-Type-Options
Blocks MIME-sniffing browser attacks.
-2
Missing Referrer Policy
Controls what referrer information is sent with requests.
-2
Missing Permissions Policy
Restricts access to powerful browser features (camera, mic, etc.).
-2
DNS Records
Encrypted DoH resolution: A, AAAA, MX mail servers, authoritative NS, and TXT verification.
Resolved
- IPv4 Addresses (A)
- 23.222.125.95
- IPv6 Addresses (AAAA)
- 2600:1407:e800:580::21c7, 2600:1407:e800:590::21c7
- Mail Servers (MX)
- avast-com.mail.protection.outlook.com (Priority: 0)
- Authoritative Nameservers (NS)
- a26-67.akam.net, a13-65.akam.net, a6-67.akam.net, a20-66.akam.net, a11-66.akam.net, a1-182.akam.net
- TXT Records Found
- 14 TXT verification records
A Records (IPv4)
23.222.125.95
TXT Verification Records
segment-site-verification=intxU1LpjrdINW7QHilYM6C9blznrTdI
_n3mjdpzgvu3opnmknj83rg5ji782y4w
MS=ms87582564
google-site-verification=9KZgt0QBAQTOnPP6NKOGigeO-vW176OMT9yjzS7fZD8
v=spf1 redirect=spfc.avast.com
google-site-verification=iGnE-HdPoFw1rbSBbllQkT1qrXCwnQfOE1qoe50U9QY
knowbe4-site-verification=482fcbc151a32d4f6ba2feaebc35407e
apple-domain-verification=1kYfASdchMq7OLKO
google-site-verification=k82twljI92zx21IOUUAFZRhI1H9SYuCQ0Sl-yvWhgkk
google-site-verification=8_D4sFKVTwzXbD0Cn5IKiko_fdjkwfkE9ugaAp_DE0M
google-site-verification=0uAqsuocfiKUuALLUDkgZUjTqojKVv14OO-K15mdmuQ
google-site-verification=tHW5WI8bNL1PvDNkvFl7Mm74YmLIzf3Hr90j7mGOVBQ
site24x7-signals-domain-verification=d265eba98d152d1c9dafc5b3f5044af8
security-notifications=soc@avast.com
3 address record(s) resolved
+4
IPv6 (AAAA) available
Modern dual-stack setup.
+2
6 authoritative nameservers
+2
WHOIS & Identity Lookup
Domain ownership status, registry lifecycle, nameservers, and privacy redaction.
Found
- Registrable Domain
- avast.com
- Registrar Organization
- MarkMonitor Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited
- Delegated Authoritative Nameservers
- a1-182.akam.net, a11-66.akam.net, a13-65.akam.net, a20-66.akam.net, a26-67.akam.net, a6-67.akam.net
- Registration Lifecycle
- Registered: 1997 → Expires: 2030
Nameservers (NS)
a1-182.akam.neta11-66.akam.neta13-65.akam.neta20-66.akam.neta26-67.akam.neta6-67.akam.net
Domain registered 29+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Email Security & Deliverability
SPF record validation, DMARC policy enforcement, DKIM selectors, and MX reputation.
Protected
- SPF Record
- v=spf1 redirect=spfc.avast.com
- DMARC Policy Mode
- Policy: QUARANTINE
- DMARC Raw Record
- v=DMARC1; p=quarantine; sp=none; rua=mailto:dmarc_agg@vali.email; ruf=mailto:dmarcruf@avast.com; adkim=r; aspf=r; ri=86400; fo=1; pct=100
- DKIM Selectors Detected
- google, selector1, selector2
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (quarantine)
+4
DKIM configured (google, selector1, selector2)
+3
Threat Intelligence & Blocklists
Multi-source malware feeds (URLhaus), phishing checks (PhishStats, Safe Browsing), and typosquats.
Clean
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Clean / Verified
- Root Domain Label
- avast
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- No recognized brand impersonation
- Typosquatting Risk
- Clean
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Technology Stack & Metadata
Detected CMS, JavaScript frameworks, analytics tags, CDN providers, and page metadata.
Detected
Detected Technologies by Category
cdn
Cloudflare
Page Metadata & Fingerprint
- HTML Title
- Access Denied
- Meta Description
- —
- Document Language
- en
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width
- Generator Software
- —
1 technologies detected
Cloudflare
Page Performance & Compression
Server response time, content payload size, Brotli/Gzip compression, and caching rules.
476ms
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/2
Binary framing, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
HTTP/2
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 476 ms
- Payload Body Size
- 0.4 KB
- Compression Status
- Uncompressed
- Cache Directives
- Standard caching rules
No findings.
AI Content Safety & Red Flags
High-pressure language, payment gateway safety, disposable domain analysis, and deceptive tactics.
Safe
AI Content Evaluation
92/100 — trusted. Long-established domain (29.1 years old), clean threat reputation, no impersonation patterns. Main reasons: domain registered 29+ years ago; not flagged by Google Safe Browsing; popular website — ranked #321 worldwide. Minor issues: site returned HTTP 403; missing HSTS.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 287 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6
Server & Hosting Infrastructure
Primary IP address, web server software, CDN edge network, and redirect hop chain.
cloudflare
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 23.222.125.95
- HTTP Status Code
- 403 OK
- Final Landing Destination
- https://www.avast.com/
- Redirect Hop Count
- 1 hop
Redirect Hop Chain
- 1.https://avast.com/ → https://www.avast.com/
Site returned HTTP 403
The server is reachable but did not return a success status.
-6
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
SSL / TLS Certificate
Active Certificate Authority, Common Name, validity period, expiration countdown, and SANs.
Secure
- Certificate Authority (Issuer)
- C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R36
- Subject Common Name (CN)
- b2b.avast.com
- Validity Period
- 119 days remaining (Expires: 2027-03-12T23:59:59Z)
- Subject Alternative Names (SANs)
- 40 domains protected
- Certificates Logged (CT)
- 100 certs recorded
Subject Alternative Names (Sample)
b2b.avast.comblockmaster.avast.combusinesshelp-stage.avast.combusinesshelp.avast.combusinesshub-dev-dm.avast.combusinesshub-dev.avast.combusinesshub-stage.avast.combusinesshub-test.avast.combusinesshub.avast.comcareers.avast.comemupdate.avast.comemupdate2.avast.comfirefoxextension.avast.comfoundation-forms.avast.comfree-business.avast.comget.avast.comgift.avast.comiframe.avast.comipmcdn.avast.comjobs.avast.comm.avast.comm5.avast.commedallia.avast.commobile-campaigns.avast.comnadace.avast.comnuistatic.avast.comone.avast.comonlinescan.avast.compamcdn.avast.compamcdnstaging.avast.comparking.avast.compasswords-cdn.avast.comrh-data.avast.coms-emupdate.avast.coms-emupdate2.avast.coms-install.avcdn.nets-installs.avast.coms-uupdate.avast.coms-uupdate2.avast.comsafeprice-filter.avast.com+20 more
Valid SSL / TLS certificate active
Issued by C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R36, valid for 119 remaining days.
+10
Content & Transparency Policies
Linked privacy policy, terms of service, about page, social channels, and published contacts.
Warning
Key Legal & Transparency Pages
privacy PageNot linked
terms PageNot linked
contact PageNot linked
about PageNot linked
refund PageNot linked
shipping PageNot linked
cookies PageNot linked
- Published Phone Numbers
- 1794584301
Policy pages could not be checked
The site showed our scanner a bot-check or short page, so privacy, terms and contact pages were not verified. This is common for large sites and is not counted against them.
Robots.txt & Sitemap Discoverability
Search engine crawler directives, indexability, and declared XML sitemaps.
Present
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- https://www.avast.com/sitemap_index.xml
- Disallow Rules Count
- 3 rules
View Raw robots.txt
User-agent: * Disallow: Disallow: /search-results* Sitemap: https://www.avast.com/sitemap_index.xml User-agent: PerplexityBot Disallow: /*&rut= User-agent: OAI-SearchBot Allow: / User-agent: ChatGPT-User Allow: / User-agent: GPTBot Allow: / User-agent: Perplexity-User Allow: / User-agent: PerplexityBot Allow: / User-agent: Claude-User Allow: / User-agent: ClaudeBot Allow: / Content-Signal: ai-train=yes, search=yes, ai-input=yes
robots.txt published
+2
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
30
This scan
Sources Checked
19
Live security feeds
Scan Duration
5.97s
Full live scan
Last Scan
11/13/2026
Live timestamp
Overall Risk
Low Risk
User reviews of avast.com
No reviews yet. Be the first to share your experience.