nicb.org

Last scanned 18h ago; the signed record is unchanged since 12d ago. Every field below carries an Ed25519 signature from that last reading. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Up right now
Runs onCloudflare
Email byMimecast
Secured byGoogle Trust Services
Also usesMicrosoft 365AnthropicAppleAtlassianDropboxSlack
IPv6 · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
DRIFT

Steady. No change on record for nicb.org in the last day; this reading matches the one before it. The steady record is signed like every other reading. Watch it to catch the next move the moment it lands.

SIGNED-OUT VIEW Provider names, posture and counts are shown. The record values - every DNS answer, each subdomain hostname, raw TXT, IPs, cert names and WHOIS - are the product. Sign in for the full signed record, or use the API with a key.

DNS records 20

A3AAAA3NS2MX2TXT9SOA1

TLS certificates 3

Issued byGoogle Trust Services, GlobalSign
ExpiresThu, 24 Se (32d)
Certificate nameswithheld

Subdomains 0

None observed.

WILDCARD DNSobserved 2026-08-22 03:43 UTC

DomainDrift asked this domain for one hostname that nobody ever registered, and it answered. A domain that answers invented hostnames is running wildcard DNS. It is common and usually deliberate. A SaaS platform gives every customer a subdomain this way. How the check works

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt
Ed25519 receiptthe raw cryptographic proof
Receipt ID
rcpt_9a4e98478574f731
Output Hash
5688990af34318421f8b2f46894ada8d32bf7693b848149e51e538bafe3267cc
Signature
ed25519:65ed9c49e47669a1fbd1d1a9c8c1a703b694ba9ad1a09c61f3dfc53ed0a5540a9c32a7e1c0956d2bb8a378edca2227eba9df5d61f81d8306ad1d462bd946a90c
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
CONTINUOUS INTERNET TELEMETRY24H DRIFTat least 27,483 material changesacross 16,090+ domains · 24h to ~9h ago · a floor, 15h of 24 walkedROTATION55 domains moved DNS from magpiedns.com to koaladns.com, 50 moved backa rotation loop, not a migration · 24hEMAIL DRIFT3 domains switched email provider24hCERT DRIFT1 domains switched issuing CA24hREGISTRAR DRIFT2 changed registrar24hNOW247 curated domains not reachable+38 vs yesterdaySITE ERRORS17,833 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 79,277 sites429 rate-limit / 403 bot-block, a posture signal