vakio.ru
Observed Aug 2, 2026, 17:41 UTC (9h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.
DomainDrift asked this domain for a TXT record at a name nobody registers, and got an answer back. A domain that answers a name that was never created is answering names in general, and that is wildcard DNS.
Wildcard DNS clusters around domain parking, dynamic DNS and catch-all hosting. It is also a real attack surface: if every invented hostname resolves, then a hostname an attacker invents resolves too, which is the ground state for subdomain takeover and for phishing hosted under a name that looks legitimate.
This is evidence of wildcard behaviour, not a proven fact. It rests on one control name: a domain could legitimately serve a TXT record at exactly that name for an unrelated reason, and a wildcard that answers address records but not TXT records would not be caught here at all. What this reading is and is not.
DNS Records
A 1
92.53.96.187
MX 3
15mx1.timeweb.ru20mx2.timeweb.ru10mx.yandex.net
TXT 6
yandex-verification: f93fb88c953b3913-site-verification=p4ocIf0AEfTqtrIzXD8jSxP5dg8_a5SjmGXiXjH283cv=DKIM1; k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCocu8jq4hz181fCswpz2v/2kDIKeHDxEeDmiI7FWD5MfHV+PGK9AOXiyt2y8+juQRLfDbVUYJZO6tSikpWNfESavvMtiEdlB9v8xEYeJWnmNQUmhTt6oPr81mbxZqMRCaNmyEVAVBbNy8fayBFsJEpkyADkktqOYZUbJ5rB9ReIQIDAQABv=spf1 include:spf.unisender.com include:_spf.yandex.net ~allgoogle-site-verification=p4ocIf0AEfTqtrIzXD8jSxP5dg8_a5SjmGXiXjH283c_globalsign-domain-verification=YUd3GRWNTZwPhrzhDyBBeRsxBjDCzs9N3sSlYg6Qkd
NS 4
ns2.timeweb.runs4.timeweb.orgns3.timeweb.orgns1.timeweb.ru
SOA 1
ns1.timeweb.ru dns.timeweb.ru
MCP_RECORDS 1
v=spf1 include:_spf.timeweb.ru ~all
DMARC_RECORDS 1
v=spf1 include:_spf.timeweb.ru ~all
BIMI_RECORDS 1
v=spf1 include:_spf.timeweb.ru ~all
MTA_STS_RECORDS 1
v=spf1 include:_spf.timeweb.ru ~all
TLS Certificates (3)
| Common Name | Issuer | Expires |
|---|---|---|
*.vakio.ru |
C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R3 DV TLS CA 2020 | Sun, 03 Jan 2027 15:50:25 +0000 |
GlobalSign GCC R3 DV TLS CA 2020 |
2.5.4.11=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign | Sun, 18 Mar 2029 00:00:00 +0000 |
GlobalSign |
2.5.4.11=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign | Sun, 18 Mar 2029 10:00:00 +0000 |
Subdomains (0)
None observed.
Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.
Verify this receiptEd25519 Receipt
- Receipt ID
rcpt_0f9450262dffe20e- Output Hash
ddcb1b2e11899173aeca4a25327391720360fe9f27c8423bbc36a773fd7411b2- Signature
ed25519:9f2218d5ab2ce2b26173ea3f95ae47a237ea3bbf94b2ba4bccb501abb8eba54c26e15dab3cd03875615c11dede36764ccb8d578311161b8124578b415747c10e- Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9- Parent
(genesis)- Plane
- fast