mastera-service.ru

Observed Aug 11, 2026, 06:49 UTC (5d ago). Every field below was attested with an Ed25519 signature at scan time.

This reading of mastera-service.ru was taken 5d ago

mastera-service.ru is on the survey sweep, which works its way across the whole catalog rather than returning to one name on a schedule. Putting mastera-service.ru under watch moves it to the fast lane, where DomainDrift re-checks it about every 5 minutes and signs each reading, so a change becomes a dated event within minutes instead of waiting for the sweep to come round.

Watch mastera-service.ru Watching a domain needs a DRM3 account. The reading above stays free and public either way.
Up right now
Secured byGlobalSign
Also usesGlobalSign
tranco
Every line above is a signed observation. Check the math at the bottom of the page.
EVIDENCE OF WILDCARD DNSobserved 2026-08-16 02:54 UTC

DomainDrift asked this domain for a TXT record at a name nobody registers, and got an answer back. A domain that answers a name that was never created is answering names in general, and that is wildcard DNS.

Wildcard DNS clusters around domain parking, dynamic DNS and catch-all hosting. It is also a real attack surface: if every invented hostname resolves, then a hostname an attacker invents resolves too, which is the ground state for subdomain takeover and for phishing hosted under a name that looks legitimate.

This is evidence of wildcard behaviour, not a proven fact. It rests on one control name: a domain could legitimately serve a TXT record at exactly that name for an unrelated reason, and a wildcard that answers address records but not TXT records would not be caught here at all. What this reading is and is not.

INFRASTRUCTURE MAPwhat mastera-service.ru actually stands on - every host below is a signed observation
mastera-service.ru
A / AAAA
185.165.123.35
unattributedserves the site
NS
ns3-l2.nic.runs4-l2.nic.runs8-l2.nic.runs4-cloud.nic.ru+1 more
nic.ruanswers its DNS
MX
mail.mastera-service.ru
mastera-service.rureceives its email
TLS
*.mastera-service.ru
GlobalSign nv-saissued its certificate

DNS Records

A 1

  • 185.165.123.35

MX 1

  • 10mail.mastera-service.ru

TXT 3

  • 9f6ac21e-cac8-4dc7-bbf3-01394ec2d7f3
  • _globalsign-domain-verification=rAwp00A68lrw2BKI_jRwKhfeXsUFrLPdqyOfBna8c4
  • v=spf1 include:spf.smtp.bz include:smtp.send-box.ru include=_spf.mail.ru +a +mx ~all

NS 5

  • ns3-l2.nic.ru
  • ns4-l2.nic.ru
  • ns8-l2.nic.ru
  • ns4-cloud.nic.ru
  • ns8-cloud.nic.ru

SOA 1

  • ns3-l2.nic.ru dns.nic.ru

MCP_RECORDS 1

  • 9f6ac21e-cac8-4dc7-bbf3-01394ec2d7f3

DMARC_RECORDS 1

  • v=DMARC1; p=quarantine; sp=none; rua=mailto:postmaster@mastera-service.ru

BIMI_RECORDS 1

  • 9f6ac21e-cac8-4dc7-bbf3-01394ec2d7f3

MTA_STS_RECORDS 1

  • 9f6ac21e-cac8-4dc7-bbf3-01394ec2d7f3

TLS Certificates (3)

Common NameIssuerExpires
*.mastera-service.ru C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2025 Sat, 20 Mar 2027 06:14:26 +0000
GlobalSign GCC R6 AlphaSSL CA 2025 2.5.4.11=GlobalSign Root CA - R6, O=GlobalSign, CN=GlobalSign Fri, 21 May 2027 00:00:00 +0000
GlobalSign 2.5.4.11=GlobalSign Root CA - R6, O=GlobalSign, CN=GlobalSign Sun, 10 Dec 2034 00:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt

Ed25519 Receipt

Receipt ID
rcpt_cb3e4ec6882e1d67
Output Hash
6d98bc85ce14ca52f5192abba4a70edf6a82b98f69ac43b3b2ff21cbbaa11384
Signature
ed25519:589a5ddc8bb7624b356af48fa56adaefb6aad34b683a928ce173ed6233a16d8aefcbb0fe352b3619bb07b04016f47f914000f6d5b7541537cfd20eab61d83902
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser
CONTINUOUS INTERNET TELEMETRY24H DRIFT41,169 material changesacross 39,364 domains · 24h to ~80m ago · -390 vs yesterdayROTATION57 domains moved DNS from koaladns.com to magpiedns.com, 55 moved backa rotation loop, not a migration · 24hEMAIL DRIFT3 domains switched email providertop destination alltheemails.comNOW540 curated domains not reachable+45 vs yesterdaySITE ERRORS36,471 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 116,655 sites429 rate-limit / 403 bot-block, a posture signal