shop.app
Observed Sep 4, 2026, 23:32 UTC (just now). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.
Cloudflare
Google Workspace
Google Search Console
Have I Been Pwned
Pinterest
Yahoo
Microsoft 365- 23m agoReachability changed (HTTP 200 → HTTP 403)
- 25m agoReachability changed (HTTP 403 → HTTP 200)
Watch it to get the next change the moment it lands.
HTTPS probe
A security layer answered instead of the site. That is a working defence doing its job, and we record it as its own state rather than as a failure.
It does NOT mean the site is down or misconfigured. It also does not mean we were treated as hostile - most rules of this kind refuse every non-browser client alike.
- A WAF or bot-management rule refuses non-browser user agents by default.
- Automated traffic from datacenter networks is challenged as a matter of policy.
These are the known causes, not a diagnosis of this domain. We recorded that nothing answered; we did not measure why.
Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".
DNS records 23
TLS certificates 0
None.
Subdomains 28
28 subdomain hostnames observed and signed - the list itself is part of the paid record.
Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.
Verify this receiptEd25519 receiptthe raw cryptographic proof
- Receipt ID
rcpt_8d86182a669b0fdd- Output Hash
fbb9494b335cfe218ef2b5ec29b9ac8e70b48cf44b0a67e7430a2e60956011d8- Signature
ed25519:eb070592b7b289037277eb8fab84a532f95267fe0e42b965a1b36a0e30209a248f2fd724eb4fe864657942aca8cb41ce968929c89f97317952cee7b3612a4d03- Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff- Parent
(genesis)- Plane
- fast