I wonder btw why Verisign didn't catch the "typo's" in their own domains if they think it is that important: ... ;; QUESTION SECTION: ;wwww.verisign.com. IN A

wildcards don't work that way. there are ns rr's in .com for verisign.com, so you get a referral to those servers no matter whether a *.com wildcard exists or not.