echoechozulu··on Using a catch-all domain is a mistakeI do this and my biggest regret is that I cannot easily check haveibeenpwned.com to find out if any of the accounts have been breached.