returnpath.net

Observed Jul 27, 2026, 22:06 UTC (5d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Email byMimecast

Secured byLet's Encrypt

Also usesGoogle Search Console

IPv6 · 8 subdomains · tranco

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat returnpath.net actually stands on - every host below is a signed observation

returnpath.net

A / AAAA

23.185.0.12620:12a:8000::12620:12a:8001::1

2620serves the site

ns-101.awsdns-12.comns-1475.awsdns-56.orgns-1620.awsdns-10.co.ukns-631.awsdns-14.net

awsdns-12.com + awsdns-56.org + moreanswers its DNS

us-smtp-inbound-1.mimecast.comus-smtp-inbound-2.mimecast.com

Mimecastreceives its email

TLS

billing.returnpath.com

Let's Encryptissued its certificate

DNS Records

A 1

23.185.0.1

AAAA 2

2620:12a:8000::1
2620:12a:8001::1

MX 2

10us-smtp-inbound-1.mimecast.com
10us-smtp-inbound-2.mimecast.com

TXT 8

0ed1fe018ace777b29070049c3a79a257424185b98
MS=ms66930696
google-site-verification=c20Rj4uPClnFa7pw2wMcY9DicJQKO0lyikhc00OA_gU
google-site-verification=zXxSd7HJdXBLXK4EEyyzeM11PEeAUjxFejy7CSs8vcU
v=spf1 ip4:50.201.69.7 ip4:50.201.69.9 ip4:50.201.69.133 include:spf.returnpath.net -all
validity-domain-monitoring=xhrvTxQCa26lHpkd0J2n0y6zq
v=DMARC1; p=none; rua=mailto:dmarc_agg@dmarc.250ok.net; ruf=mailto:dmarc_fr@dmarc.250ok.net; fo=1; pct=100; rf=afrf
v1=BIMI1; f=svg; z=128x128; l=https://returnpath.com/rpstatic/images/rp/logos/

NS 4

ns-101.awsdns-12.com
ns-1475.awsdns-56.org
ns-1620.awsdns-10.co.uk
ns-631.awsdns-14.net

SOA 1

ns-1620.awsdns-10.co.uk awsdns-hostmaster.amazon.com

TLS Certificates (3)

Common Name	Issuer	Expires
`billing.returnpath.com`	C=US, O=Let's Encrypt, CN=YR2	Tue, 29 Sep 2026 12:53:58 +0000
`YR2`	C=US, O=ISRG, CN=Root YR	Sat, 02 Sep 2028 23:59:59 +0000
`Root YR`	C=US, O=Internet Security Research Group, CN=ISRG Root X1	Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (8)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for returnpath.net. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/returnpath.net">
  <img src="https://domaindrift.io/badge/returnpath.net.svg"
       width="300" height="64" alt="DomainDrift signed observations for returnpath.net">
</a>

Ed25519 Receipt

Receipt ID: rcpt_d9acbb74869cf6f0
Output Hash: 71c68d2ccbb4e0e2f2f3ad7ee58d14dca70f91454f584dcbed9dcc19386d7582
Signature: ed25519:8715267bf3972dccc5775536d131cda1ba4314934c6e1b90589a84797c0c2c00d75b9d7e42d8fc7f84333892e7496368db2df77f1a4b18afb0f1b37628731a08
Public Key: ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/returnpath.net