CONTINUOUS INTERNET TELEMETRY24H DRIFT13,565 material changesacross 13,085 domains · 24h to ~70m ago · -27,295 vs yesterdayNOW559 curated domains not reachablelast probe, steadySITE ERRORS34,154 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 156,321 sites429 rate-limit / 403 bot-block, a posture signal

v056.ru

Observed Aug 2, 2026, 15:44 UTC (4h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Not responding
Signed observation on record.
tranco
Every line above is a signed observation. Check the math at the bottom of the page.
EVIDENCE OF WILDCARD DNSobserved 2026-08-02 15:44 UTC

DomainDrift asked this domain for a TXT record at a name nobody registers, and got an answer back. A domain that answers a name that was never created is answering names in general, and that is wildcard DNS.

Wildcard DNS clusters around domain parking, dynamic DNS and catch-all hosting. It is also a real attack surface: if every invented hostname resolves, then a hostname an attacker invents resolves too, which is the ground state for subdomain takeover and for phishing hosted under a name that looks legitimate.

This is evidence of wildcard behaviour, not a proven fact. It rests on one control name: a domain could legitimately serve a TXT record at exactly that name for an unrelated reason, and a wildcard that answers address records but not TXT records would not be caught here at all. What this reading is and is not.

INFRASTRUCTURE MAPwhat v056.ru actually stands on - every host below is a signed observation
v056.ru
A / AAAA
176.28.64.180
unattributedserves the site
NS
dns2.mchost.comdns1.mchost.ru
mchost.com + mchost.ruanswers its DNS
MX
mx.yandex.ru
yandex.rureceives its email

DNS Records

A 1

  • 176.28.64.180

MX 1

  • 10mx.yandex.ru

TXT 2

  • v=spf1 redirect=_spf.yandex.ru
  • yandex-verification: 32a62d504594b973

NS 2

  • dns2.mchost.com
  • dns1.mchost.ru

SOA 1

  • dns1.mchost.ru info.mchost.ru

MCP_RECORDS 1

  • yandex-verification: 32a62d504594b973

DMARC_RECORDS 1

  • yandex-verification: 32a62d504594b973

BIMI_RECORDS 1

  • yandex-verification: 32a62d504594b973

MTA_STS_RECORDS 1

  • yandex-verification: 32a62d504594b973

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for v056.ru. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for v056.ru <a href="https://domaindrift.io/t/v056.ru"> <img src="https://domaindrift.io/badge/v056.ru.svg" width="300" height="64" alt="DomainDrift signed observations for v056.ru"> </a>

Ed25519 Receipt

Receipt ID
rcpt_1a6748f5ae6c29c3
Output Hash
4692069dd24baad394e7f55084056b518cb8bd4ad67fa335fcdbad2098387b55
Signature
ed25519:418f659fd3f435931077ff3a0452092afa1c71586175fb2b1080b92694339aff25914d5d97ad14efbfe193153841a5ad20e1d8912d21d8a4e85324720e04e30f
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser