WILDCARD_FALSE_POSITIVE

error

A wildcard record is answering for this name, so the specific record was never actually added.

Something is wrong and mail or certificates are affected.

How we know

wildcard.test
A wildcard answers every name, so a naive existence check passes for a customer who configured nothing. Behavioural detection path.
wildcard-signed.test
Same failure, authoritative detection path: RRSIG Labels is smaller than the queried name's label count. Signed with alg 13.