master-online.com
Observed Aug 16, 2026, 09:49 UTC (10h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.
Microsoft 365
Google Search Console
GlobalSignDomainDrift asked this domain for a TXT record at a name nobody registers, and got an answer back. A domain that answers a name that was never created is answering names in general, and that is wildcard DNS.
Wildcard DNS clusters around domain parking, dynamic DNS and catch-all hosting. It is also a real attack surface: if every invented hostname resolves, then a hostname an attacker invents resolves too, which is the ground state for subdomain takeover and for phishing hosted under a name that looks legitimate.
This is evidence of wildcard behaviour, not a proven fact. It rests on one control name: a domain could legitimately serve a TXT record at exactly that name for an unrelated reason, and a wildcard that answers address records but not TXT records would not be caught here at all. What this reading is and is not.
DNS Records
MX 2
0masteronline-com01e.mail.protection.outlook.com10mx.sendgrid.net
TXT 7
MS=ms749463075nIMsOpYPYRJBKgd9BESW/m6RSXqVucwsAltY+21V4g=mjvDdSzyITaovCjtKurXC0hK5VBWfZeFPnLgA7ji52g=google-site-verification=xmVd98ldYevj_aui5r7j9qy5fnUMpkI38hG-in95jEA_globalsign-domain-verification=mFDlNZcOUaBtJfXa5CgUH3gQtpUChhzguiFADi7tmospf2.0/pra mx ptr ip4:86.58.164.130 mx:mail.master-online.com ip4:86.58.164.141 ip4:81.19.224.68v=spf1 mx ptr ip4:86.58.164.130 ip4:86.58.164.141 ip4:81.19.224.68 ip4:50.31.47.109 ip4:108.166.46.157 include:sendgrid.net -all
NS 2
dns1.cscdns.netdns2.cscdns.net
SOA 1
dns1.cscdns.net hostmaster.cscdns.net
MCP_RECORDS 1
v=spf1 redirect=master-online.com
DMARC_RECORDS 1
v=DMARC1; p=reject; rua=mailto:6731ae2d65ec7@ag.dmarcly.com; ruf=mailto:6731ae2d65ec7@fo.dmarcly.com; sp=none; fo=0;
BIMI_RECORDS 1
v=spf1 redirect=master-online.com
MTA_STS_RECORDS 1
v=spf1 redirect=master-online.com
TLS Certificates (0)
None.
Subdomains (0)
None observed.
Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.
Verify this receiptEd25519 Receipt
- Receipt ID
rcpt_72ffea975ce9ddd8- Output Hash
634c3b8e50b366476a10298d83b4655666df74c10356a01c97934f0dca4b1450- Signature
ed25519:2e6ca04d88c3bd36244811afd8b5470d8c0fe79e291e1076a37adb53eabc127263e0c8b97ec5c6a6eed6c6768da049ad0c58038c1ef1259bed0016c9ef0c960c- Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9- Parent
(genesis)- Plane
- fast