recoveryfirst.org

Observed Jul 28, 2026, 10:18 UTC (14h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

INFRASTRUCTURE MAPwhat recoveryfirst.org actually stands on - every host below is a signed observation

recoveryfirst.org

A / AAAA

104.26.12.102172.67.72.231104.26.13.1022606:4700:20::681a:c66+2 more

2606serves the site

boyd.ns.cloudflare.comlia.ns.cloudflare.com

cloudflare.comanswers its DNS

route2.mx.cloudflare.netroute1.mx.cloudflare.netroute3.mx.cloudflare.net

cloudflare.netreceives its email

TLS

recoveryfirst.org

Google Trust Servicesissued its certificate

DNS Records

A 3

104.26.12.102
172.67.72.231
104.26.13.102

AAAA 3

2606:4700:20::681a:c66
2606:4700:20::ac43:48e7
2606:4700:20::681a:d66

MX 3

43route2.mx.cloudflare.net
65route1.mx.cloudflare.net
79route3.mx.cloudflare.net

TXT 5

MS=ms28549797
google-site-verification=Bd4hTifVsmQA-gbhCmpV4eeiC37HooOcEK3znvtavGQ
google-site-verification=N-DQrtE5flQe3tt5wK4Vxb_BEseLSUX3ghXdObz8DRg
google-site-verification=VS8MtSyaAx0wMiEkVfo2UtCEnwc1pOQ0V3Dpf4WEewM
v=spf1 include:_spf.mx.cloudflare.net ~all

NS 2

boyd.ns.cloudflare.com
lia.ns.cloudflare.com

SOA 1

boyd.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (3)

Common Name	Issuer	Expires
`recoveryfirst.org`	C=US, O=Google Trust Services, CN=WE1	Tue, 13 Oct 2026 20:30:21 +0000
`WE1`	C=US, O=Google Trust Services LLC, CN=GTS Root R4	Tue, 20 Feb 2029 14:00:00 +0000
`GTS Root R4`	C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA	Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for recoveryfirst.org. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/recoveryfirst.org">
  <img src="https://domaindrift.io/badge/recoveryfirst.org.svg"
       width="300" height="64" alt="DomainDrift signed observations for recoveryfirst.org">
</a>

Ed25519 Receipt

Receipt ID: rcpt_504959078f567ebe
Output Hash: e91dcd53a24f168e9a612b28946ab41643424cb23647ee2aa232d02d02052f81
Signature: ed25519:00c04dd361619f75e123a1316cd742b59add57a538a491ebe1a0f1effa0887da4b5da17880bfb84349218db824627bc90bd606531d601dc8e683c148eb422d0f
Public Key: ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/recoveryfirst.org