nsa.bg
Last scanned 21h ago; the signed record is unchanged since 11d ago. Every field below carries an Ed25519 signature from that last reading. Catalog observation, re-checked on rotation - watch it for 5-minute checks.
Google Workspace
Let's Encrypt
Microsoft 365
Google Search ConsoleSteady. No change on record for nsa.bg in the last day; this reading matches the one before it. The steady record is signed like every other reading. Watch it to catch the next move the moment it lands.
DNS records 12
TLS certificates 4
Subdomains 1
1 subdomain hostname observed and signed - the list itself is part of the paid record.
DomainDrift asked this domain for one hostname that nobody ever registered, and it answered. A domain that answers invented hostnames is running wildcard DNS. It is common and usually deliberate. A SaaS platform gives every customer a subdomain this way. How the check works
Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.
Verify this receiptEd25519 receiptthe raw cryptographic proof
- Receipt ID
rcpt_aed1be768d8060cc- Output Hash
9e55f0516a3f894ff78c0ca1439e4ff831c42dcaccfad7a40cdec12e393b21e4- Signature
ed25519:dcb114ad1deea544cf4541d82fae6caef25aaff0f6147939e229730adea5958b88743189a9e63c925e0919bfb944909996c39fa837d09bec683398521e8f870c- Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9- Parent
(genesis)- Plane
- fast