CONTINUOUS INTERNET TELEMETRY24H DRIFT8,843 material changesacross 8,688 domains · last 24h · +9 vs yesterdayDNS DRIFT277 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT54 domains switched email providertop destination outlook.comCERT DRIFT72 domains switched issuing CA24h · -1 vs yesterdayNOW546 curated domains not reachablelast probe, steadySITE ERRORS33,941 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 147,632 sites429 rate-limit / 403 bot-block, a posture signal

recovered.org

Observed Jul 27, 2026, 14:54 UTC (11h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain
INFRASTRUCTURE MAPwhat recovered.org actually stands on - every host below is a signed observation
recovered.org
A / AAAA
172.67.71.17104.26.10.82104.26.11.822606:4700:20::681a:b52+2 more
2606serves the site
NS
kim.ns.cloudflare.comnoah.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.commxa.eu.mailgun.org+3 more
google.com + mailgun.orgreceives its email
TLS
recovered.org
Google Trust Servicesissued its certificate

DNS Records

A 3

  • 172.67.71.17
  • 104.26.10.82
  • 104.26.11.82

AAAA 3

  • 2606:4700:20::681a:b52
  • 2606:4700:20::681a:a52
  • 2606:4700:20::ac43:4711

MX 7

  • 1aspmx.l.google.com
  • 10alt3.aspmx.l.google.com
  • 10alt4.aspmx.l.google.com
  • 10mxa.eu.mailgun.org
  • 10mxb.eu.mailgun.org
  • 5alt1.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com

TXT 5

  • google-site-verification=083kN9PMDGuxJ3e1hpdiFbl9qWCDDmqfhhB1Zj37_1I
  • google-site-verification=0rpXezxammd94gWuNNMTPIwpPscPspUDX1UdVFSxs1s
  • google-site-verification=1pCb-ceUGdZ8Llgzqm_oTi5oyr7cZ3Gxy282weS3-k4
  • v=spf1 include:_spf.google.com include:mailgun.org include:one.zoho.eu include:eu.zcsend.net -all
  • v=DMARC1; p=none; rua=mailto:james.wittams@gmail.com,mailto:james@jseo.com,mailto:ben@jseo.com

NS 2

  • kim.ns.cloudflare.com
  • noah.ns.cloudflare.com

SOA 1

  • kim.ns.cloudflare.com dns.cloudflare.com

CAA 10

  • issue "comodoca.com"
  • issue "digicert.com; cansignhttpexchanges=yes"
  • issue "letsencrypt.org"
  • issue "pki.goog; cansignhttpexchanges=yes"
  • issue "ssl.com"
  • issuewild "comodoca.com"
  • issuewild "digicert.com; cansignhttpexchanges=yes"
  • issuewild "letsencrypt.org"
  • issuewild "pki.goog; cansignhttpexchanges=yes"
  • issuewild "ssl.com"

TLS Certificates (3)

Common NameIssuerExpires
recovered.org C=US, O=Google Trust Services, CN=WE1 Tue, 29 Sep 2026 22:32:20 +0000
WE1 C=US, O=Google Trust Services LLC, CN=GTS Root R4 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R4 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for recovered.org. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for recovered.org <a href="https://domaindrift.io/t/recovered.org"> <img src="https://domaindrift.io/badge/recovered.org.svg" width="300" height="64" alt="DomainDrift signed observations for recovered.org"> </a>

Ed25519 Receipt

Receipt ID
rcpt_3899215c559b8f84
Output Hash
2eb941edad7253479bb0f6a30cd119afab72ae50de3385b532dbc55683ee06ed
Signature
ed25519:b119868797ea453f0485e3f03e0bec755427c7c2c8610cb96dfa7b81d76cc699f3ac3075542d3d8b836c3aa84a5c7dbb5194ff2736a447732379db5173c1a203
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser