au.norton.com - URL scan, 24 Aug 2026
MalwareAnalyzer by Cyble scanned au.norton.com and returned a unknown verdict (score -12). The page resolved to 2.18.224.179 on Akamai Technologies in US. 69 domains and 2 IPs were contacted. 3 malware samples communicate with this URL (Revell). The request followed 1 redirect before landing. This is a point-in-time observation from 24 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://www.norton.com/ - Domain: au.norton.com · IP: 2.18.224.179 · AS20940 · US
- Server: HarperDB
- Page title: Norton AntiVirus, Privacy, Identity, & Advanced Scam Protection
- HTTP status: 200 · text/html; charset=utf-8
- TLS issuer: C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA EV R36 · valid to Sep 27 23: · subject serialNumber=F13833847, jurisdictionC=US, jurisdictionST=Arizona, businessCategory=Private Organization, C=US, ST=Arizona, O=Gen Digital Inc., CN=www.norton.com
- Evidenced operator: Gen Digital Inc.
- Scan tier: fast · observed 2026-08-24 04:57:24 UTC
Redirect chain
https://www.norton.com/https://au.norton.com/
Malware communicating with this URL (3)
These samples were observed contacting or being served from au.norton.com. Each links to its full analysis.
- Revell - referenced ·
3a3f9620d8c14ec52e392a1f200cfafb· first seen 2026-08-24 - Revell - referenced ·
d03de61062a0f18c77a5e2c6e7614680· first seen 2026-08-22 - Revell - referenced ·
dd34316234bb61ae29f7b2012d83f7c3· first seen 2026-08-20
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Contacted infrastructure
- 2.18.224.179 - AS20940 Akamai Technologies (United States)
- 23.198.40.191 - AS16625 Akamai Technologies, Inc. (Australia)
Observed indicators
- au.norton.com
- asia.norton.com
- ar.norton.com
- at.norton.com
- be.norton.com
- be-nl.norton.com
- br.norton.com
- ca.norton.com
- ca-fr.norton.com
- cl.norton.com
- cn.norton.com
- co.norton.com
- cz.norton.com
- dk.norton.com
- fi.norton.com
- fr.norton.com
- de.norton.com
- gr.norton.com
- hk-en.norton.com
- hk.norton.com
Other scans of au.norton.com (5)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 20 Aug 2026 - unknown
Questions about au.norton.com
- Is au.norton.com safe?
- The scan of au.norton.com on 24 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with au.norton.com?
- 3 analysed samples communicate with this URL, including Revell.
- How was au.norton.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of au.norton.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan