billtrust.com

Observed 2026-07-12T18:10:38.790Z (14h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email byProofpoint

Registered withGoDaddy.com, LLC

Also usesZoomAtlassianNotionFacebook/Meta

fintech_expanded

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat billtrust.com actually stands on - every host below is a signed observation

billtrust.com

A / AAAA

141.193.213.20141.193.213.21

Cloudflareserves the site

ns14.dnsmadeeasy.comns12.dnsmadeeasy.comns10.dnsmadeeasy.comns15.dnsmadeeasy.com+2 more

dnsmadeeasy.comanswers its DNS

mxa-004da101.gslb.pphosted.commxb-004da101.gslb.pphosted.com

Proofpointreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.billtrust.com/

HTTP status301

Servercloudflare

TLS protocolHTTP/3

TLS issuernot observed

Behind Cloudflareyes

Response time43 ms

DNS resolutionNOERROR

Redirect chain

https://www.billtrust.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

141.193.213.20
141.193.213.21

MX 2

1mxa-004da101.gslb.pphosted.com
1mxb-004da101.gslb.pphosted.com

TXT 20

ppe-7bf0f4c1c8c5318774c5
MS=34F888BF80AE6BF22F1FBB395FE143F60A475161
jl8kdk1bt9b7hv90ic2dt9omca
anthropic-domain-verification-rma6w3=5JyjCuXW5Ptbvw6G2EMdfX78k
v=spf1 mx ip4:198.244.59.30 ip4:198.244.59.33 ip4:198.244.59.35 ip4:103.151.192.0/23 ip4:185.12.80.0/22 ip4:188.172.128.0/20 ip4:192.161.144.0/20 ip4:216.198.0.0/18 ip4:69.72.40.93 ip4:69.72.40.94 ip4:69.72.40.95 ip4:69.72.40.96 ip4:69.72.40.97 ip4:69.72.40.98 ip4:69.72.40.99 ip4:69.72.47.205 ip4:185.250.239.190 ip4:185.250.239.148 ip4:185.250.239.168 ip4:109.68.163.0/26 ip4:109.68.167.96/27 ip4:109.68.163.128/26 ip4:109.68.163.192/26 ip4:208.86.168.7 include:mktomail.com ip4:52.38.191.241 include:_spf.salesforce.com ip4:64.106.173.0/25 ip4:3.213.143.227 ip4:184.72.174.126 ip4:34.235.62.90 ip4:149.72.223.71 ip4:168.245.37.116 ip4:168.245.106.109 ip4:205.220.176.160 ip4:205.220.164.160 ip4:209.18.87.189 ip4:209.18.87.130 ip4:208.42.228.67 ip4:208.42.228.68 ip4:148.163.128.0/19 ip4:159.183.160.166 include:spf-004da101.pphosted.com include:_spf.google.com ~all
mongodb-site-verification=vgtteDdBUcW8y71FjJILI6Jci5xLJhl1
reachdesk-verification=RVr0UB1hyZuXyjM1sJ820PJmLDcCJ1yQYs0Rt5CUSODkalhBsf7xeXUIpRCjVuUo
ZOOM_verify_TPffpGXMt5SErA97L9NZgH
atlassian-domain-verification=MoGHlvFVeGoMzJDJ9ax5Pj1v0gusna8aFq8o2TeRgrPff7FpVMNud8fNaXzUrhBV
asv=deb37c12c1049598a050864ca1ffa16d

NS 6

ns14.dnsmadeeasy.com
ns12.dnsmadeeasy.com
ns10.dnsmadeeasy.com
ns15.dnsmadeeasy.com
ns11.dnsmadeeasy.com
ns13.dnsmadeeasy.com

SOA 1

ns20.digicertdns.com dns.digicertdns.com

TLS Certificates (0)

None.

Subdomains (96)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for billtrust.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/billtrust.com">
  <img src="https://domaindrift.io/badge/billtrust.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for billtrust.com">
</a>

Ed25519 Receipt

Receipt ID: 9bfbdc9a-49df-4a80-b787-3fb6b8969e47
Output Hash: 4b3e5879deacebdbbd252de4d55090a2d2a27e57f5d3a97b0e88c8414f51985f
Signature: ed25519:446732b3a399ff9236132772f58a333fe64968189c31c216b2f628173ffbddeb5e7f826e1c1f66e04b472441b624a0464763bb633188ce6a21bd605c54b8080a
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/billtrust.com