virtualkeypad.com
Observed Aug 2, 2026, 13:06 UTC (12h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.
DomainDrift asked this domain for a TXT record at a name nobody registers, and got an answer back. A domain that answers a name that was never created is answering names in general, and that is wildcard DNS.
Wildcard DNS clusters around domain parking, dynamic DNS and catch-all hosting. It is also a real attack surface: if every invented hostname resolves, then a hostname an attacker invents resolves too, which is the ground state for subdomain takeover and for phishing hosted under a name that looks legitimate.
This is evidence of wildcard behaviour, not a proven fact. It rests on one control name: a domain could legitimately serve a TXT record at exactly that name for an unrelated reason, and a wildcard that answers address records but not TXT records would not be caught here at all. What this reading is and is not.
DNS Records
A 1
104.153.193.146
MX 1
0sendgrid.net
TXT 2
_0gq2wlt55lqf2q0iodnnlzivp8034zkv=spf1 include:sendgrid.net ip4:198.37.158.46 ~all
NS 5
ns1.dnsmadeeasy.comns0.dnsmadeeasy.comns4.dnsmadeeasy.comns3.dnsmadeeasy.comns2.dnsmadeeasy.com
SOA 1
ns0.dnsmadeeasy.com dns.dnsmadeeasy.com
MCP_RECORDS 3
5ybk24gc72wh183w8n4nvm4kcvgqp80vgm02dff4295k7q7f7rllvzh6xk9qpw3bzzl4hqn4bnpslzbjlzkv9c0gr31xd47w
DMARC_RECORDS 1
v=DMARC1; p=none; rua=mailto:6114241ed6e6e@ag.dmarcly.com; ruf=mailto:6114241ed6e6e@fo.dmarcly.com; sp=quarantine; pct=100; fo=0;
BIMI_RECORDS 3
5ybk24gc72wh183w8n4nvm4kcvgqp80vzzl4hqn4bnpslzbjlzkv9c0gr31xd47wgm02dff4295k7q7f7rllvzh6xk9qpw3b
MTA_STS_RECORDS 3
zzl4hqn4bnpslzbjlzkv9c0gr31xd47w5ybk24gc72wh183w8n4nvm4kcvgqp80vgm02dff4295k7q7f7rllvzh6xk9qpw3b
TLS Certificates (3)
| Common Name | Issuer | Expires |
|---|---|---|
*.virtualkeypad.com |
C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Fri, 26 Mar 2027 23:59:59 +0000 |
DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 | Sat, 29 Mar 2031 23:59:59 +0000 |
DigiCert Global Root G2 |
C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 | Fri, 15 Jan 2038 12:00:00 +0000 |
Subdomains (1)
Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.
Verify this receiptEd25519 Receipt
- Receipt ID
rcpt_2522bb1481087853- Output Hash
2ceaae582a3dddb186b698ca75539c8ebd4a790b7df64e9fc09d4fbcf125869e- Signature
ed25519:ff606d083bf76c0ca76580f48bc9540c43e5077caac8109d7091b8b47eb64433e6a4d8959431974aaee24b081a8274a994dd398f9096212a1f8b99bb94dce200- Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9- Parent
(genesis)- Plane
- fast