veteransunited.com
Observed Aug 2, 2026, 20:21 UTC (12h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.
DomainDrift asked this domain for a TXT record at a name nobody registers, and got an answer back. A domain that answers a name that was never created is answering names in general, and that is wildcard DNS.
Wildcard DNS clusters around domain parking, dynamic DNS and catch-all hosting. It is also a real attack surface: if every invented hostname resolves, then a hostname an attacker invents resolves too, which is the ground state for subdomain takeover and for phishing hosted under a name that looks legitimate.
This is evidence of wildcard behaviour, not a proven fact. It rests on one control name: a domain could legitimately serve a TXT record at exactly that name for an unrelated reason, and a wildcard that answers address records but not TXT records would not be caught here at all. What this reading is and is not.
DNS Records
A 4
3.168.102.483.168.102.353.168.102.1193.168.102.59
MX 2
10mxa-001f8101.gslb.pphosted.com10mxb-001f8101.gslb.pphosted.com
TXT 96
1002395818px4r70jftg71s95fxgsy166s88hr4r1ZmkpdpQLUS0EF7L953gcSmwLk1ZCQx2ZcbPrrfxWTiqgRmVxqapNqzojYaT+vAC6RtMGdJoBTW82nHagkRTWQ==4d70bq1vrrhxsmbc58bmj5cbs6022czh50dzb08b6qjyvzzrvhvfbwympz14q63n74qyw298p7226s8w2dzk0z7t5qmqqs3r78163cphw3ldzstzkj3c48xgjx85sdn39zy68shcxtv6dz05zqtj768d9br72pg8MS=ms93626369_06wsy2pzje3n4ofr8x5kp5z19ee2k7h
NS 4
ns-1109.awsdns-10.orgns-1699.awsdns-20.co.ukns-425.awsdns-53.comns-866.awsdns-44.net
SOA 1
ns-1109.awsdns-10.org awsdns-hostmaster.amazon.com
SRV 4
expe2.veteransunited.com:5061 p10pcl01expe01.veteransunited.com:5061 p10pcl01expe02.veteransunited.com:5061 p10west.exch027.serverdata.net:443 p0
CAA 4
issue "amazon.com"issue "digicert.com"issue "pki.goog"issuewild "digicert.com"
MCP_RECORDS 8
18px4r70jftg71s95fxgsy166s88hr4r4d70bq1vrrhxsmbc58bmj5cbs6022czh50dzb08b6qjyvzzrvhvfbwympz14q63nb8tmwsry1ryvsd9mz9k9d52gcgzz0ngsgoogle-site-verification=A9Kfinv-dPrikUNcqqL4u6eo5ih6qkXJC8YGfjS6Xv0mtgc0fpbwb0jx9kz0pb6lyxzf1fv2kz1vnl3vppzrkr0fx1l0yt1qlfz3v4jshcsxsyrwc5d31vsr0v0q6gp6r4lf45p0nk2
DMARC_RECORDS 1
v=DMARC1; p=reject; sp=reject; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;fo=1
BIMI_RECORDS 1
v=BIMI1; l=https://vmc.digicert.com/49349d0a-d9d2-479f-ae04-ca4c65f45bef.svg; a=https://vmc.digicert.com/49349d0a-d9d2-479f-ae04-ca4c65f45bef.pem
MTA_STS_RECORDS 8
18px4r70jftg71s95fxgsy166s88hr4r4d70bq1vrrhxsmbc58bmj5cbs6022czh50dzb08b6qjyvzzrvhvfbwympz14q63nb8tmwsry1ryvsd9mz9k9d52gcgzz0ngsgoogle-site-verification=A9Kfinv-dPrikUNcqqL4u6eo5ih6qkXJC8YGfjS6Xv0mtgc0fpbwb0jx9kz0pb6lyxzf1fv2kz1vnl3vppzrkr0fx1l0yt1qlfz3v4jshcsxsyrwc5d31vsr0v0q6gp6r4lf45p0nk2
TLS Certificates (3)
| Common Name | Issuer | Expires |
|---|---|---|
veteransunited.com |
C=US, O=Amazon, CN=Amazon RSA 2048 M04 | Fri, 23 Oct 2026 23:59:59 +0000 |
Amazon RSA 2048 M04 |
C=US, O=Amazon, CN=Amazon Root CA 1 | Fri, 23 Aug 2030 22:26:35 +0000 |
Amazon Root CA 1 |
C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 | Thu, 31 Dec 2037 01:00:00 +0000 |
Subdomains (0)
None observed.
Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.
Verify this receiptEd25519 Receipt
- Receipt ID
rcpt_7b852ffea1e93128- Output Hash
96d532e00b3a30d1e5be294bb0837cadfc6e02639afd7867dd10dfb294a274a4- Signature
ed25519:dbdf2ca46199e4f6ff053f26b10fde3985a6dad45adc64c626b7dfc16c0347f681a37cc95c5a1ab467611ac135e915bc727e63adaeb106b54b5a3704603e7201- Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9- Parent
(genesis)- Plane
- fast