returnflows.com

Observed Jul 24, 2026, 20:31 UTC (8d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Email byGoogle Workspace

Secured byLet's Encrypt

Also usesGoogle Search Console

tranco

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat returnflows.com actually stands on - every host below is a signed observation

returnflows.com

A / AAAA

216.150.16.193216.150.1.193

unattributedserves the site

karl.ns.cloudflare.comnadia.ns.cloudflare.com

cloudflare.comanswers its DNS

aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comms72943781.msv1.invalid+2 more

Google Workspacereceives its email

TLS

returnflows.com

Let's Encryptissued its certificate

DNS Records

A 2

216.150.16.193
216.150.1.193

MX 6

1aspmx.l.google.com
10alt3.aspmx.l.google.com
10alt4.aspmx.l.google.com
32767ms72943781.msv1.invalid
5alt1.aspmx.l.google.com
5alt2.aspmx.l.google.com

TXT 6

MS=ms72943781
google-site-verification=FebHCqDTgLOdj7AqewY9Qe0o0lB2jKVE2_3k6Tt6CNg
google-site-verification=qxzZP1jCdgQsk0-MhxNax1p3w3Etk5D4DWflQazm9jM
klaviyo-site-verification=SAATat
v=spf1 include:dc-aa8e722993._spfm.returnflows.com ~all
v=DMARC1; p=none; rua=mailto:f484bbd640e746fb92d48fd64885e057@dmarc-reports.cloudflare.net

NS 2

karl.ns.cloudflare.com
nadia.ns.cloudflare.com

SOA 1

karl.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (3)

Common Name	Issuer	Expires
`returnflows.com`	C=US, O=Let's Encrypt, CN=YR2	Sun, 20 Sep 2026 09:18:47 +0000
`YR2`	C=US, O=ISRG, CN=Root YR	Sat, 02 Sep 2028 23:59:59 +0000
`Root YR`	C=US, O=Internet Security Research Group, CN=ISRG Root X1	Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for returnflows.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/returnflows.com">
  <img src="https://domaindrift.io/badge/returnflows.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for returnflows.com">
</a>

Ed25519 Receipt

Receipt ID: rcpt_304c661cc91ad9b2
Output Hash: de40c6f279c3f08836773fd9431a8e43290230a007b7a2e654adba8bd0caba27
Signature: ed25519:8376129242db84e5805e8a057d5b472cc3baffbd992c7a3205b77b218e25db73a232074cbae186bd931a6ccf39d059e5e1cab8db72b15eab0c0ff30b4be49708
Public Key: ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/returnflows.com