CONTINUOUS INTERNET TELEMETRY24H DRIFT5,762 material changesacross 5,364 domains · 24h to ~20m ago · -3,001 vs yesterdayNOW560 curated domains not reachablelast probe, steadySITE ERRORS34,304 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 156,289 sites429 rate-limit / 403 bot-block, a posture signalMOVERokta.comNo mail routes in the latest observation

e-isbn.pl

Observed Aug 3, 2026, 00:25 UTC (3h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Not responding
Email byMicrosoft 365
domcop
Every line above is a signed observation. Check the math at the bottom of the page.
EVIDENCE OF WILDCARD DNSobserved 2026-08-03 00:25 UTC

DomainDrift asked this domain for a TXT record at a name nobody registers, and got an answer back. A domain that answers a name that was never created is answering names in general, and that is wildcard DNS.

Wildcard DNS clusters around domain parking, dynamic DNS and catch-all hosting. It is also a real attack surface: if every invented hostname resolves, then a hostname an attacker invents resolves too, which is the ground state for subdomain takeover and for phishing hosted under a name that looks legitimate.

This is evidence of wildcard behaviour, not a proven fact. It rests on one control name: a domain could legitimately serve a TXT record at exactly that name for an unrelated reason, and a wildcard that answers address records but not TXT records would not be caught here at all. What this reading is and is not.

INFRASTRUCTURE MAPwhat e-isbn.pl actually stands on - every host below is a signed observation
e-isbn.pl
A / AAAA
91.238.85.17
unattributedserves the site
NS
dns3.home.pldns.home.pldns2.home.pl
home.planswers its DNS
MX
eisbn-pl0c.mail.protection.outlook.com
Microsoft 365receives its email

DNS Records

A 1

  • 91.238.85.17

MX 1

  • 10eisbn-pl0c.mail.protection.outlook.com

TXT 2

  • mojecertpl-site-verification-mWng1yOxgdlo2GPQ3o9DqBFjH3kR15He
  • v=spf1 mx ip4:91.238.85.110 ip4:91.238.85.132 ip4:185.233.160.138 ip4:216.147.218.9 ip4:216.147.218.8 include:spf.protection.outlook.com include:send360.pl include:spf-eu.exlibrisgroup.com ~all

NS 3

  • dns3.home.pl
  • dns.home.pl
  • dns2.home.pl

SOA 1

  • dns.home.pl admin.home.pl

MCP_RECORDS 2

  • v=spf1 mx ip4:91.238.85.110 ip4:91.238.85.132 ip4:185.233.160.138 ip4:216.147.218.9 ip4:216.147.218.8 include:spf.protection.outlook.com include:send360.pl include:spf-eu.exlibrisgroup.com ~all
  • mojecertpl-site-verification-mWng1yOxgdlo2GPQ3o9DqBFjH3kR15He

DMARC_RECORDS 1

  • v=DMARC1; p=none; sp=none; adkim=s; aspf=s; rua=mailto:dmarc@bn.org.pl; ruf=mailto:dmarc@bn.org.pl; fo=0:1:d:s;

BIMI_RECORDS 2

  • v=spf1 mx ip4:91.238.85.110 ip4:91.238.85.132 ip4:185.233.160.138 ip4:216.147.218.9 ip4:216.147.218.8 include:spf.protection.outlook.com include:send360.pl include:spf-eu.exlibrisgroup.com ~all
  • mojecertpl-site-verification-mWng1yOxgdlo2GPQ3o9DqBFjH3kR15He

MTA_STS_RECORDS 2

  • mojecertpl-site-verification-mWng1yOxgdlo2GPQ3o9DqBFjH3kR15He
  • v=spf1 mx ip4:91.238.85.110 ip4:91.238.85.132 ip4:185.233.160.138 ip4:216.147.218.9 ip4:216.147.218.8 include:spf.protection.outlook.com include:send360.pl include:spf-eu.exlibrisgroup.com ~all

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Ed25519 Receipt

Receipt ID
rcpt_6cb140200ad4ad3c
Output Hash
592d1e188f1f50a4e86a855914eb9186cf2f2b78678456d95c15d85cf0d49f59
Signature
ed25519:0cfb1e86ea0ea18e0f9fb4eed85bbb8518954b336a9f18554b005859e97f6f7ca4f91f2257f3ee315575301e32e0a8037993b63d9d4df293ab4e6ac271f47e0a
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser