reallyrightstuff.com

Observed Aug 16, 2026, 17:07 UTC (6h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Up right now
Runs onCloudflare
Email byMicrosoft 365
Secured byGoogle Trust Services
Also usesGoogle Search Console
tranco
Every line above is a signed observation. Check the math at the bottom of the page.
EVIDENCE OF WILDCARD DNSobserved 2026-08-16 17:07 UTC

DomainDrift asked this domain for a TXT record at a name nobody registers, and got an answer back. A domain that answers a name that was never created is answering names in general, and that is wildcard DNS.

Wildcard DNS clusters around domain parking, dynamic DNS and catch-all hosting. It is also a real attack surface: if every invented hostname resolves, then a hostname an attacker invents resolves too, which is the ground state for subdomain takeover and for phishing hosted under a name that looks legitimate.

This is evidence of wildcard behaviour, not a proven fact. It rests on one control name: a domain could legitimately serve a TXT record at exactly that name for an unrelated reason, and a wildcard that answers address records but not TXT records would not be caught here at all. What this reading is and is not.

INFRASTRUCTURE MAPwhat reallyrightstuff.com actually stands on - every host below is a signed observation
reallyrightstuff.com
A / AAAA
63.141.128.8
Cloudflareserves the site
NS
ns94.worldnic.comns93.worldnic.com
worldnic.comanswers its DNS
MX
reallyrightstuff-com.mail.protection.outlook.com
Microsoft 365receives its email
TLS
reallyrightstuff.com
Google Trust Servicesissued its certificate

DNS Records

A 1

  • 63.141.128.8

MX 1

  • 10reallyrightstuff-com.mail.protection.outlook.com

TXT 3

  • v=spf1 include:spf.registeredsite.com include:14544033.spf10.hubspotemail.net include:_spf.bigcommerce.com include:spf.protection.outlook.com ip4:168.245.40.53 -all
  • google-site-verification=64VhhInGILp8E_IorNqjXnCgJfOE8XUa5IVGdfTZ_hU
  • google-site-verification=t2qOcDIInQ-TeJocqyVEtJ64sBsz_5-YYkqrktS86ys

NS 2

  • ns94.worldnic.com
  • ns93.worldnic.com

SOA 1

  • NS93.WORLDNIC.com namehost.WORLDNIC.com

SRV 1

  • autodiscover.hostingplatform.com:443 p10

MCP_RECORDS 1

  • MS=ms51684350

DMARC_RECORDS 1

  • v=DMARC1; p=quarantine; rua=mailto:dmarc@reallyrightstuff.com

BIMI_RECORDS 1

  • MS=ms51684350

MTA_STS_RECORDS 1

  • MS=ms51684350

TLS Certificates (3)

Common NameIssuerExpires
reallyrightstuff.com C=US, O=Google Trust Services, CN=WE1 Wed, 14 Oct 2026 19:48:17 +0000
WE1 C=US, O=Google Trust Services LLC, CN=GTS Root R4 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R4 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt

Ed25519 Receipt

Receipt ID
rcpt_c389824c24efe1df
Output Hash
132c1db20bcf9793b81bb34fd0f2d7a13c06a1b33f2137d7fd09b5d32e773a91
Signature
ed25519:bf9bdf6387b5a96e0285acf6359ec4caa8c4a0473365dcdc0fa536b99c8c8012af8adc4ac0f41b200f34dfd385461f0179567513a11322798a748967c4af5503
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser
CONTINUOUS INTERNET TELEMETRY24H DRIFT39,240 material changesacross 37,425 domains · 24h to ~2h ago · -2,319 vs yesterdayROTATION59 domains moved DNS from koaladns.com to magpiedns.com, 59 moved backa rotation loop, not a migration · 24hEMAIL DRIFT3 domains switched email provider24hNOW591 curated domains not reachable+96 vs yesterdaySITE ERRORS35,522 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 116,252 sites429 rate-limit / 403 bot-block, a posture signal