zuavra.net

Observed Aug 2, 2026, 17:11 UTC (2h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Not responding

Signed observation on record.

domcop

Every line above is a signed observation. Check the math at the bottom of the page.

EVIDENCE OF WILDCARD DNSobserved 2026-08-02 17:11 UTC

DomainDrift asked this domain for a TXT record at a name nobody registers, and got an answer back. A domain that answers a name that was never created is answering names in general, and that is wildcard DNS.

Wildcard DNS clusters around domain parking, dynamic DNS and catch-all hosting. It is also a real attack surface: if every invented hostname resolves, then a hostname an attacker invents resolves too, which is the ground state for subdomain takeover and for phishing hosted under a name that looks legitimate.

This is evidence of wildcard behaviour, not a proven fact. It rests on one control name: a domain could legitimately serve a TXT record at exactly that name for an unrelated reason, and a wildcard that answers address records but not TXT records would not be caught here at all. What this reading is and is not.

INFRASTRUCTURE MAPwhat zuavra.net actually stands on - every host below is a signed observation

zuavra.net

ns1.desec.ions2.desec.org

desec.io + desec.organswers its DNS

DNS Records

MX 1

TXT 1

v=spf1 -all

NS 2

ns1.desec.io
ns2.desec.org

SOA 1

get.desec.io get.desec.io

CAA 1

issue "letsencrypt.org"

MCP_RECORDS 1

v=spf1 -all

DMARC_RECORDS 1

v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s

BIMI_RECORDS 1

v=spf1 -all

MTA_STS_RECORDS 1

v=spf1 -all

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for zuavra.net. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/zuavra.net">
  <img src="https://domaindrift.io/badge/zuavra.net.svg"
       width="300" height="64" alt="DomainDrift signed observations for zuavra.net">
</a>

Ed25519 Receipt

Receipt ID: rcpt_ca451a100d32edbd
Output Hash: d26a111f68686fab8e2d81260ba2eadbf3cb79279f3bed31d064fcb875b603e0
Signature: ed25519:7e36e11834bba01457490d86744823154b8d7e9c797febeaf18196040514a5024dc9d260c28b8d9cc117dbba8823826a449baace7f8020649578b9a676ceab04
Public Key: ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/zuavra.net