zolta.pl
Observed Aug 2, 2026, 08:06 UTC (23h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.
DomainDrift asked this domain for a TXT record at a name nobody registers, and got an answer back. A domain that answers a name that was never created is answering names in general, and that is wildcard DNS.
Wildcard DNS clusters around domain parking, dynamic DNS and catch-all hosting. It is also a real attack surface: if every invented hostname resolves, then a hostname an attacker invents resolves too, which is the ground state for subdomain takeover and for phishing hosted under a name that looks legitimate.
This is evidence of wildcard behaviour, not a proven fact. It rests on one control name: a domain could legitimately serve a TXT record at exactly that name for an unrelated reason, and a wildcard that answers address records but not TXT records would not be caught here at all. What this reading is and is not.
DNS Records
A 1
193.160.66.195
MX 1
10zolta.home.pl
TXT 7
google-site-verification=65aHCO6LmpYSQjxNiYKxvZ1CWZXX5vQ0b3irbZ_5YQsMS=ms84710696google-site-verification=EqXDOjRUCHhmRHmpEhJ_XiIxv7tbV0v5Ch36vM5QXJMgoogle-site-verification=emWAwk4HWy_MqfVku4fDOQipt69tGEkoGWrp1tQ0GdYgoogle-site-verification=KqV6cs6PtdpJTD--yVRQYpJjB3M7QIv9KL3fiU-q7fIv=spf1 a mx include:_spf.google.com ~allk=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4Y439HiOB+wS0yMMQB9puEjzMFJ1pslzgXqeUbV+vKLEkWga2QAREFw8e/bS1CqgGKxUAnD6HWG466hqqIMdOxfcYmE4UiBK14ksbTQYp5F3sKkpECEjvmTIXQ/shwFH6NC/ymQEzHKt32yO1G0cS5MS7S1AwhHrj3BpzoQVchwIDAQAB
NS 3
dns3.home.pldns2.home.pldns.home.pl
SOA 1
dns.home.pl admin.home.pl
MCP_RECORDS 7
google-site-verification=EqXDOjRUCHhmRHmpEhJ_XiIxv7tbV0v5Ch36vM5QXJMgoogle-site-verification=emWAwk4HWy_MqfVku4fDOQipt69tGEkoGWrp1tQ0GdYgoogle-site-verification=65aHCO6LmpYSQjxNiYKxvZ1CWZXX5vQ0b3irbZ_5YQsgoogle-site-verification=KqV6cs6PtdpJTD--yVRQYpJjB3M7QIv9KL3fiU-q7fIk=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4Y439HiOB+wS0yMMQB9puEjzMFJ1pslzgXqeUbV+vKLEkWga2QAREFw8e/bS1CqgGKxUAnD6HWG466hqqIMdOxfcYmE4UiBK14ksbTQYp5F3sKkpECEjvmTIXQ/shwFH6NC/ymQEzHKt32yO1G0cS5MS7S1AwhHrj3BpzoQVchwIDAQABv=spf1 a mx include:_spf.google.com ~allMS=ms84710696
DMARC_RECORDS 1
v=DMARC1; p=quarantine; rua=mailto:admin@zolta.pl; ruf=mailto:admin@zolta.pl; aspf=r; adkim=r; fo=1
BIMI_RECORDS 7
google-site-verification=65aHCO6LmpYSQjxNiYKxvZ1CWZXX5vQ0b3irbZ_5YQsMS=ms84710696google-site-verification=EqXDOjRUCHhmRHmpEhJ_XiIxv7tbV0v5Ch36vM5QXJMgoogle-site-verification=emWAwk4HWy_MqfVku4fDOQipt69tGEkoGWrp1tQ0GdYgoogle-site-verification=KqV6cs6PtdpJTD--yVRQYpJjB3M7QIv9KL3fiU-q7fIv=spf1 a mx include:_spf.google.com ~allk=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4Y439HiOB+wS0yMMQB9puEjzMFJ1pslzgXqeUbV+vKLEkWga2QAREFw8e/bS1CqgGKxUAnD6HWG466hqqIMdOxfcYmE4UiBK14ksbTQYp5F3sKkpECEjvmTIXQ/shwFH6NC/ymQEzHKt32yO1G0cS5MS7S1AwhHrj3BpzoQVchwIDAQAB
MTA_STS_RECORDS 7
google-site-verification=65aHCO6LmpYSQjxNiYKxvZ1CWZXX5vQ0b3irbZ_5YQsMS=ms84710696google-site-verification=EqXDOjRUCHhmRHmpEhJ_XiIxv7tbV0v5Ch36vM5QXJMgoogle-site-verification=emWAwk4HWy_MqfVku4fDOQipt69tGEkoGWrp1tQ0GdYgoogle-site-verification=KqV6cs6PtdpJTD--yVRQYpJjB3M7QIv9KL3fiU-q7fIv=spf1 a mx include:_spf.google.com ~allk=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4Y439HiOB+wS0yMMQB9puEjzMFJ1pslzgXqeUbV+vKLEkWga2QAREFw8e/bS1CqgGKxUAnD6HWG466hqqIMdOxfcYmE4UiBK14ksbTQYp5F3sKkpECEjvmTIXQ/shwFH6NC/ymQEzHKt32yO1G0cS5MS7S1AwhHrj3BpzoQVchwIDAQAB
TLS Certificates (4)
| Common Name | Issuer | Expires |
|---|---|---|
zolta.pl |
C=US, O=Let's Encrypt, CN=YE1 | Tue, 22 Sep 2026 03:34:48 +0000 |
YE1 |
C=US, O=ISRG, CN=Root YE | Sat, 02 Sep 2028 23:59:59 +0000 |
Root YE |
C=US, O=Internet Security Research Group, CN=ISRG Root X2 | Thu, 02 Sep 2032 23:59:59 +0000 |
ISRG Root X2 |
C=US, O=Internet Security Research Group, CN=ISRG Root X1 | Thu, 02 Sep 2032 23:59:59 +0000 |
Subdomains (1)
Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.
Verify this receiptEd25519 Receipt
- Receipt ID
rcpt_08d3b3d256d4054a- Output Hash
f04ec90168e39d81c1b3fab8051892b931f45ffa723488a32ac96a9c98a23e96- Signature
ed25519:64361349c5244434afeb1679fcdfe8d32e1b3837cf2e67f52dedc9cb131fb97768c42c695235e82fc1ec36856baa9575e693eda7d5d0dfe20a494d7016a1c40b- Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9- Parent
(genesis)- Plane
- fast