anomaly.ltd

Observed Jul 27, 2026, 23:27 UTC (12h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Runs onCloudflare

Email byGoogle Workspace

Secured byGoogle Trust Services

Also usesGoogle Search Console

domcop

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat anomaly.ltd actually stands on - every host below is a signed observation

anomaly.ltd

A / AAAA

216.24.57.1

Cloudflareserves the site

ns2.hover.comns1.hover.com

hover.comanswers its DNS

alt2.aspmx.l.google.comalt4.aspmx.l.google.comalt3.aspmx.l.google.comaspmx.l.google.com+1 more

Google Workspacereceives its email

TLS

anomaly.ltd

Google Trust Servicesissued its certificate

DNS Records

A 1

216.24.57.1

MX 5

5alt2.aspmx.l.google.com
10alt4.aspmx.l.google.com
10alt3.aspmx.l.google.com
1aspmx.l.google.com
5alt1.aspmx.l.google.com

TXT 5

oneleet-domain-verification-10fd80c5-5945-4b3c-93f5-004392c80b55
google-site-verification=4-3lT4xVky51EcbAyFXMXXrvhCd0V7m-m9GOACEl6wA
google-site-verification=L6IyiwuTf8aDV_c3o1If7nAZJHevqeFmeIKDCpWs3d8
v=spf1 include:_spf.google.com include:_spf.googlemail.com ~all
v=DMARC1; p=reject; rua=mailto:postmaster@anomaly.ltd, mailto:dmarc@anomaly.ltd; pct=100; adkim=s; aspf=s

NS 2

ns2.hover.com
ns1.hover.com

SOA 1

ns1.hover.com dnsmaster.hover.com

TLS Certificates (3)

Common Name	Issuer	Expires
`anomaly.ltd`	C=US, O=Google Trust Services, CN=WE1	Wed, 30 Sep 2026 02:11:58 +0000
`WE1`	C=US, O=Google Trust Services LLC, CN=GTS Root R4	Tue, 20 Feb 2029 14:00:00 +0000
`GTS Root R4`	C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA	Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for anomaly.ltd. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/anomaly.ltd">
  <img src="https://domaindrift.io/badge/anomaly.ltd.svg"
       width="300" height="64" alt="DomainDrift signed observations for anomaly.ltd">
</a>

Ed25519 Receipt

Receipt ID: rcpt_26c4509df23a1c26
Output Hash: 47fbea5a51d1498456733eaa5dc4249295e31795c34e6bccd241a4ed0d8bda11
Signature: ed25519:8945db17b69e302e4876705cce287c9f960c9dcb96c58d26cf913359ce6fb3bc2211135b472bd7dc164fdf5059719dea6dbd98a5bb2768716c04423b510d0700
Public Key: ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/anomaly.ltd