videotesty.pl

Observed Aug 2, 2026, 11:51 UTC (2h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Email byGoogle Workspace

Secured byAmazon

1 subdomain · tranco

Every line above is a signed observation. Check the math at the bottom of the page.

EVIDENCE OF WILDCARD DNSobserved 2026-08-02 11:51 UTC

DomainDrift asked this domain for a TXT record at a name nobody registers, and got an answer back. A domain that answers a name that was never created is answering names in general, and that is wildcard DNS.

Wildcard DNS clusters around domain parking, dynamic DNS and catch-all hosting. It is also a real attack surface: if every invented hostname resolves, then a hostname an attacker invents resolves too, which is the ground state for subdomain takeover and for phishing hosted under a name that looks legitimate.

This is evidence of wildcard behaviour, not a proven fact. It rests on one control name: a domain could legitimately serve a TXT record at exactly that name for an unrelated reason, and a wildcard that answers address records but not TXT records would not be caught here at all. What this reading is and is not.

INFRASTRUCTURE MAPwhat videotesty.pl actually stands on - every host below is a signed observation

videotesty.pl

A / AAAA

3.170.3.773.170.3.433.170.3.1193.170.3.56

unattributedserves the site

ns-1487.awsdns-57.orgns-1779.awsdns-30.co.ukns-37.awsdns-04.comns-842.awsdns-41.net

awsdns-57.org + awsdns-30.co.uk + moreanswers its DNS

alt1.aspmx.l.google.comalt2.aspmx.l.google.comaspmx2.googlemail.comaspmx3.googlemail.com+3 more

Google Workspacereceives its email

TLS

www.videotesty.pl

Amazonissued its certificate

DNS Records

A 4

3.170.3.77
3.170.3.43
3.170.3.119
3.170.3.56

MX 7

20alt1.aspmx.l.google.com
20alt2.aspmx.l.google.com
30aspmx2.googlemail.com
30aspmx3.googlemail.com
30aspmx4.googlemail.com
30aspmx5.googlemail.com
30mail.videotesty.pl

TXT 1

v=spf1 include:_spf.google.com ~all

NS 4

ns-1487.awsdns-57.org
ns-1779.awsdns-30.co.uk
ns-37.awsdns-04.com
ns-842.awsdns-41.net

SOA 1

ns-1487.awsdns-57.org awsdns-hostmaster.amazon.com

MCP_RECORDS 1

v=spf1 include:_spf.google.com ~all

DMARC_RECORDS 1

v=spf1 include:_spf.google.com ~all

BIMI_RECORDS 1

v=spf1 include:_spf.google.com ~all

MTA_STS_RECORDS 1

v=spf1 include:_spf.google.com ~all

TLS Certificates (3)

Common Name	Issuer	Expires
`www.videotesty.pl`	C=US, O=Amazon, CN=Amazon RSA 2048 M01	Tue, 15 Dec 2026 23:59:59 +0000
`Amazon RSA 2048 M01`	C=US, O=Amazon, CN=Amazon Root CA 1	Fri, 23 Aug 2030 22:21:28 +0000
`Amazon Root CA 1`	C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2	Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (1)

www.videotesty.pl

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for videotesty.pl. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/videotesty.pl">
  <img src="https://domaindrift.io/badge/videotesty.pl.svg"
       width="300" height="64" alt="DomainDrift signed observations for videotesty.pl">
</a>

Ed25519 Receipt

Receipt ID: rcpt_2f788a175ff3e75f
Output Hash: 44f42d39524da73f1dedf26392da3066390fd9edcaed7aa459d1ad3b577028f7
Signature: ed25519:c191bef2cbbc1a73462dcc7af91a4f16ae3dec1d9c8dbd18861c7ce2009681b81557a9cc814df4d127cb877dc881613c956c357c2b37eef6759bd86fba8a8902
Public Key: ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/videotesty.pl