> One of them have to be incorrect, and both have the incentive to lie/embellish.

If it has no impact, they should give him permission to publish the entire list of DNS queries he captured. They won't do that because it gives bad actors hints about their infrastructure.

MasterCard is either lying or ignorant and incompetent.