zikoko.com
Observed Aug 2, 2026, 20:56 UTC (8h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.
DomainDrift asked this domain for a TXT record at a name nobody registers, and got an answer back. A domain that answers a name that was never created is answering names in general, and that is wildcard DNS.
Wildcard DNS clusters around domain parking, dynamic DNS and catch-all hosting. It is also a real attack surface: if every invented hostname resolves, then a hostname an attacker invents resolves too, which is the ground state for subdomain takeover and for phishing hosted under a name that looks legitimate.
This is evidence of wildcard behaviour, not a proven fact. It rests on one control name: a domain could legitimately serve a TXT record at exactly that name for an unrelated reason, and a wildcard that answers address records but not TXT records would not be caught here at all. What this reading is and is not.
DNS Records
A 4
13.32.241.5413.32.241.3713.32.241.7913.32.241.11
AAAA 8
2600:9000:244d:6600:17:899c:7c80:93a12600:9000:244d:f600:17:899c:7c80:93a12600:9000:244d:8400:17:899c:7c80:93a12600:9000:244d:7200:17:899c:7c80:93a12600:9000:244d:8c00:17:899c:7c80:93a12600:9000:244d:8200:17:899c:7c80:93a12600:9000:244d:c00:17:899c:7c80:93a12600:9000:244d:3600:17:899c:7c80:93a1
MX 1
10mx.hover.com.cust.hostedemail.com
TXT 1
pinterest-site-verification=22e73fd20f5efedff546f6de0ebf4849
NS 4
ns-1496.awsdns-59.orgns-1652.awsdns-14.co.ukns-387.awsdns-48.comns-832.awsdns-40.net
SOA 1
ns-832.awsdns-40.net awsdns-hostmaster.amazon.com
MCP_RECORDS 1
pinterest-site-verification=22e73fd20f5efedff546f6de0ebf4849
DMARC_RECORDS 1
pinterest-site-verification=22e73fd20f5efedff546f6de0ebf4849
BIMI_RECORDS 1
pinterest-site-verification=22e73fd20f5efedff546f6de0ebf4849
MTA_STS_RECORDS 1
pinterest-site-verification=22e73fd20f5efedff546f6de0ebf4849
TLS Certificates (3)
| Common Name | Issuer | Expires |
|---|---|---|
techcabal.com |
C=US, O=Amazon, CN=Amazon RSA 2048 M04 | Sun, 07 Mar 2027 23:59:59 +0000 |
Amazon RSA 2048 M04 |
C=US, O=Amazon, CN=Amazon Root CA 1 | Fri, 23 Aug 2030 22:26:35 +0000 |
Amazon Root CA 1 |
C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 | Thu, 31 Dec 2037 01:00:00 +0000 |
Subdomains (2)
Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.
Verify this receiptEd25519 Receipt
- Receipt ID
rcpt_fb667cd296128a4d- Output Hash
f617bb856004c5557a100fed90423cd9159c3c4a33b5315151f50347a75f15e4- Signature
ed25519:98d7784bbaac2a0c25de27485b452f2479170221997c536d9fbf2254d8967c3eb78676e5cca34e9611c6e1c0f008c3dd9de419dbbfb0fac0a604b76c42774d0f- Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9- Parent
(genesis)- Plane
- fast