kampc.be
Observed Aug 16, 2026, 16:33 UTC (38m ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.
HubSpot
Let's Encrypt
Microsoft 365DomainDrift asked this domain for a TXT record at a name nobody registers, and got an answer back. A domain that answers a name that was never created is answering names in general, and that is wildcard DNS.
Wildcard DNS clusters around domain parking, dynamic DNS and catch-all hosting. It is also a real attack surface: if every invented hostname resolves, then a hostname an attacker invents resolves too, which is the ground state for subdomain takeover and for phishing hosted under a name that looks legitimate.
This is evidence of wildcard behaviour, not a proven fact. It rests on one control name: a domain could legitimately serve a TXT record at exactly that name for an unrelated reason, and a wildcard that answers address records but not TXT records would not be caught here at all. What this reading is and is not.
DNS Records
A 1
188.208.37.0
AAAA 1
2a00:1c98:1000:12a4:0:3:ab35:9b5f
MX 2
10d338290.a.ess.de.barracudanetworks.com10d338290.b.ess.de.barracudanetworks.com
TXT 8
MS=ms55151449include:customers.clickdimensions.com0ed1fe018a49fbe4f640294e2883bb86fb3eb6d480HARICA-WxLHIeepHH6z66wJ1utd365mktkey=iETlOLfkvXf0QCAHlx9enbMgINpuIGQw4jQIyZo74swxv=spf1 ip4:213.181.53.220 ip4:213.181.53.221 include:spf.ess.de.barracudanetworks.com include:_spf.createsend.com include:spf.protection.outlook.com include:procurios.cloud include:spf.facilitator.e2e.be include:145439271.spf02.hubspotemail.net ~allP0R4O00328DemonstrationofdomaincontrolforDigiCertorder#___________,Validatione-mail:igor.spitters@provincieantwerpen.be
NS 3
ns.provant.bens.cipal.bens2.cipal.be
SOA 1
ns.provant.be please_set_email.absolutely.nowhere
MCP_RECORDS 8
P0R4O00328v=spf1 ip4:213.181.53.220 ip4:213.181.53.221 include:spf.ess.de.barracudanetworks.com include:_spf.createsend.com include:spf.protection.outlook.com include:procurios.cloud include:spf.facilitator.e2e.be include:145439271.spf02.hubspotemail.net ~allinclude:customers.clickdimensions.comHARICA-WxLHIeepHH6z66wJ1ut0ed1fe018a49fbe4f640294e2883bb86fb3eb6d480d365mktkey=iETlOLfkvXf0QCAHlx9enbMgINpuIGQw4jQIyZo74swxMS=ms55151449DemonstrationofdomaincontrolforDigiCertorder#___________,Validatione-mail:igor.spitters@provincieantwerpen.be
DMARC_RECORDS 1
v=DMARC1;p=none;rua=mailto:dmarc@jt71jmq0.uriports.com,mailto:rua+kampc.be@dmarc.barracudanetworks.com;ruf=mailto:dmarc@jt71jmq0.uriports.com,mailto:ruf+kampc.be@dmarc.barracudanetworks.com;rf=afrf;fo=1;adkim=r;aspf=r
BIMI_RECORDS 8
include:customers.clickdimensions.comP0R4O00328v=spf1 ip4:213.181.53.220 ip4:213.181.53.221 include:spf.ess.de.barracudanetworks.com include:_spf.createsend.com include:spf.protection.outlook.com include:procurios.cloud include:spf.facilitator.e2e.be include:145439271.spf02.hubspotemail.net ~alld365mktkey=iETlOLfkvXf0QCAHlx9enbMgINpuIGQw4jQIyZo74swx0ed1fe018a49fbe4f640294e2883bb86fb3eb6d480HARICA-WxLHIeepHH6z66wJ1utDemonstrationofdomaincontrolforDigiCertorder#___________,Validatione-mail:igor.spitters@provincieantwerpen.beMS=ms55151449
MTA_STS_RECORDS 8
MS=ms55151449include:customers.clickdimensions.comP0R4O00328v=spf1 ip4:213.181.53.220 ip4:213.181.53.221 include:spf.ess.de.barracudanetworks.com include:_spf.createsend.com include:spf.protection.outlook.com include:procurios.cloud include:spf.facilitator.e2e.be include:145439271.spf02.hubspotemail.net ~alld365mktkey=iETlOLfkvXf0QCAHlx9enbMgINpuIGQw4jQIyZo74swx0ed1fe018a49fbe4f640294e2883bb86fb3eb6d480HARICA-WxLHIeepHH6z66wJ1utDemonstrationofdomaincontrolforDigiCertorder#___________,Validatione-mail:igor.spitters@provincieantwerpen.be
TLS Certificates (3)
| Common Name | Issuer | Expires |
|---|---|---|
kamweb.live.statik.be |
C=US, O=Let's Encrypt, CN=YR1 | Wed, 16 Sep 2026 18:11:37 +0000 |
YR1 |
C=US, O=ISRG, CN=Root YR | Sat, 02 Sep 2028 23:59:59 +0000 |
Root YR |
C=US, O=Internet Security Research Group, CN=ISRG Root X1 | Thu, 02 Sep 2032 23:59:59 +0000 |
Subdomains (1)
Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.
Verify this receiptEd25519 Receipt
- Receipt ID
rcpt_48bbd5ad9aa9a6e8- Output Hash
f7bf076407717ce0eb1a7d7b1f24201e313b2bf4e6a70a06d199e9b76e29b9f1- Signature
ed25519:9aa44f3952635c3e10ccec98d3b93d5f0231cc106c0ff22133c7f3a0ed6e5d265834b7c2a044ce471337d92263f448f79caddf38f203fec11f34cde3537c5e04- Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9- Parent
(genesis)- Plane
- fast