sanador.ro

Observed Aug 16, 2026, 13:53 UTC (20h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Runs onCloudflare

Email byMicrosoft 365

Secured byGoogle Trust Services

Registered withICI - Registrar

Also usesFacebook/MetaGoogle Search ConsoleZoho

IPv6 · tranco

Every line above is a signed observation. Check the math at the bottom of the page.

DRIFT

Steady. No change on record for sanador.ro in the last day; this reading matches the one before it. The steady record is signed like every other reading. Watch it to catch the next move the moment it lands.

INFRASTRUCTURE MAPwhat sanador.ro actually stands on - every host below is a signed observation

sanador.ro

A / AAAA

104.26.6.180104.26.7.180172.67.69.1562606:4700:20::681a:7b4+2 more

Cloudflareserves the site

peyton.ns.cloudflare.comsunny.ns.cloudflare.com

cloudflare.comanswers its DNS

sanador-ro.mail.protection.outlook.com

Microsoft 365receives its email

TLS

sanador.ro

Google Trust Servicesissued its certificate

DNS Records

A 3

104.26.6.180
104.26.7.180
172.67.69.156

AAAA 3

2606:4700:20::681a:7b4
2606:4700:20::ac43:459c
2606:4700:20::681a:6b4

MX 1

10sanador-ro.mail.protection.outlook.com

TXT 10

30514fa7479da1f3f7db0aabc27e4b1f028f60407233c5e0b6d2d7a31151c16
MS=5624C0355CC4423633470C130F8F27D9C2A9E978
MS=ms33215688
MS=ms38925329
brevo-code:0f99936a3a44a1369955a3fab26270ea
facebook-domain-verification=p87qe34m7ry838svd2ukyt58wv9up3
google-site-verification=qr1z3pWwbB0CRW4k_kwuHYfPwA8geHeW54H_lyarrpw
google-site-verification=yJmT0p-2KutUpFa_Ptk_c8MgSbfdgq0SjDbssP_VlL0
v=spf1 include:_spf.mailersend.net include:spf.protection.outlook.com mx ip4:109.166.185.142 ip4:109.166.185.140 -all
zoho-verification=zb97865645.zmverify.zoho.eu

NS 2

peyton.ns.cloudflare.com
sunny.ns.cloudflare.com

SOA 1

peyton.ns.cloudflare.com dns.cloudflare.com

MCP_RECORDS 1

v=spf1 -all

DMARC_RECORDS 1

v=DMARC1; p=quarantine; rua=mailto:dmarc@sanador.ro; ruf=mailto:dmarc@sanador.ro; fo=1;

BIMI_RECORDS 1

v=spf1 -all

MTA_STS_RECORDS 1

v=spf1 -all

TLS Certificates (3)

Common Name	Issuer	Expires
`sanador.ro`	C=US, O=Google Trust Services, CN=WE1	Wed, 11 Nov 2026 13:54:59 +0000
`WE1`	C=US, O=Google Trust Services LLC, CN=GTS Root R4	Tue, 20 Feb 2029 14:00:00 +0000
`GTS Root R4`	C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA	Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

WILDCARD DNSobserved 2026-08-16 13:53 UTC

DomainDrift asked this domain for one hostname that nobody ever registered, and it answered. A domain that answers invented hostnames is running wildcard DNS. It is common and usually deliberate. A SaaS platform gives every customer a subdomain this way. How the check works

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt

Ed25519 Receipt

Receipt ID: rcpt_657ac31355af57b2
Output Hash: 6f1a746ecb3c5fd1a202e8d01e77546e66f29404fd8ea11dd3ba50a67687fc11
Signature: ed25519:2de256f8b3ceeb160a8a4d7546c63fa563508268e1670fa464a24d2fb9a58800adbefbd167910507b9c98d5f7b07b473ec1823f6accb79c58451999b29f78405
Public Key: ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/sanador.ro