biobix.be

Observed Aug 16, 2026, 06:39 UTC (3h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain
Not responding
Runs onCloudflare
Secured byLet's Encrypt
98 subdomains · domcop
Every line above is a signed observation. Check the math at the bottom of the page.
EVIDENCE OF WILDCARD DNSobserved 2026-08-16 06:39 UTC

DomainDrift asked this domain for a TXT record at a name nobody registers, and got an answer back. A domain that answers a name that was never created is answering names in general, and that is wildcard DNS.

Wildcard DNS clusters around domain parking, dynamic DNS and catch-all hosting. It is also a real attack surface: if every invented hostname resolves, then a hostname an attacker invents resolves too, which is the ground state for subdomain takeover and for phishing hosted under a name that looks legitimate.

This is evidence of wildcard behaviour, not a proven fact. It rests on one control name: a domain could legitimately serve a TXT record at exactly that name for an unrelated reason, and a wildcard that answers address records but not TXT records would not be caught here at all. What this reading is and is not.

INFRASTRUCTURE MAPwhat biobix.be actually stands on - every host below is a signed observation
biobix.be
A / AAAA
209.17.116.163
Cloudflareserves the site
NS
ns2.dnsbycomodo.netns1.dnsbycomodo.net
dnsbycomodo.netanswers its DNS
MX
mailserver.biobix.be
biobix.bereceives its email
TLS
biobix.be
Let's Encryptissued its certificate

HTTPS probe

server_error Server error (5xx) 526 Server Error
HTTP status526
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time78 ms
DNS resolutionNOERROR
What this reading means

The site answered with a 5xx, so the edge and TLS are working and the application behind them is not.

It does NOT mean the domain or its DNS is misconfigured - the request got all the way to an application to fail there.

What produces this, in rough order of how often
  • The origin is erroring or mid-deploy.
  • An upstream in front of the origin cannot reach it.

These are the known causes, not a diagnosis of this domain. We recorded that nothing answered; we did not measure why.

MCP This domain advertises an AI service endpoint at _mcp._tcp.
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y78dHZj1YeRXXVvWob2OaKynO8/lQIDAQAB;

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 209.17.116.163

MX 1

  • 5mailserver.biobix.be

TXT 3

  • v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y78dHZj1YeRXXVvWob2OaKynO8/lQIDAQAB;
  • v=DKIM1; (detected)
  • v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y78dHZj1YeRXXVvWob2OaKynO8/lQIDAQAB;

NS 2

  • ns2.dnsbycomodo.net
  • ns1.dnsbycomodo.net

SOA 1

  • ns1.dnsbycomodo.net admin.dns.com

TLS Certificates (0)

None.

Subdomains (98)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt

Ed25519 Receipt

Receipt ID
rcpt_28d6d2aa956e3d03
Output Hash
3ed396254f9fe2161d924f909ccca17d858fad45c7c35f360a01985621433264
Signature
ed25519:6ac8de6d477fb08c843208711b30635849bed42a06153f131636f55dfa7c609f59882ff3ff3de80f9235ef79938f67e06b59f78a409d6348878c50aad2fa4f0f
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser
CONTINUOUS INTERNET TELEMETRY24H DRIFT42,791 material changesacross 40,851 domains · last 24h · +1,232 vs yesterdayDNS DRIFT87 domains changed DNS providertop destination koaladns.com · +5 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination alltheemails.comNOW551 curated domains not reachable+56 vs yesterdaySITE ERRORS36,473 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 116,533 sites429 rate-limit / 403 bot-block, a posture signal