CONTINUOUS INTERNET TELEMETRY24H DRIFT7,064 material changesacross 6,687 domains · 24h to ~75m ago · -1,699 vs yesterdayNOW560 curated domains not reachablelast probe, steadySITE ERRORS34,304 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 156,289 sites429 rate-limit / 403 bot-block, a posture signalMOVERokta.comNo mail routes in the latest observation

returnpath.net

Observed Aug 3, 2026, 00:08 UTC (1h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain
Up right now
Email byMimecast
Secured byLet's Encrypt
Also usesGoogle Search Console
IPv6 · 8 subdomains · tranco
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat returnpath.net actually stands on - every host below is a signed observation
returnpath.net
A / AAAA
23.185.0.12620:12a:8001::12620:12a:8000::1
2620serves the site
NS
ns-101.awsdns-12.comns-1475.awsdns-56.orgns-1620.awsdns-10.co.ukns-631.awsdns-14.net
awsdns-12.com + awsdns-56.org + moreanswers its DNS
MX
us-smtp-inbound-1.mimecast.comus-smtp-inbound-2.mimecast.com
Mimecastreceives its email
TLS
billing.returnpath.com
Let's Encryptissued its certificate

DNS Records

A 1

  • 23.185.0.1

AAAA 2

  • 2620:12a:8001::1
  • 2620:12a:8000::1

MX 2

  • 10us-smtp-inbound-1.mimecast.com
  • 10us-smtp-inbound-2.mimecast.com

TXT 6

  • 0ed1fe018ace777b29070049c3a79a257424185b98
  • MS=ms66930696
  • google-site-verification=c20Rj4uPClnFa7pw2wMcY9DicJQKO0lyikhc00OA_gU
  • google-site-verification=zXxSd7HJdXBLXK4EEyyzeM11PEeAUjxFejy7CSs8vcU
  • v=spf1 ip4:50.201.69.7 ip4:50.201.69.9 ip4:50.201.69.133 include:spf.returnpath.net -all
  • validity-domain-monitoring=xhrvTxQCa26lHpkd0J2n0y6zq

NS 4

  • ns-101.awsdns-12.com
  • ns-1475.awsdns-56.org
  • ns-1620.awsdns-10.co.uk
  • ns-631.awsdns-14.net

SOA 1

  • ns-1620.awsdns-10.co.uk awsdns-hostmaster.amazon.com

DMARC_RECORDS 1

  • v=DMARC1; p=none; rua=mailto:dmarc_agg@dmarc.everest.email; ruf=mailto:dmarc_fr@dmarc.everest.email; fo=1; pct=100; rf=afrf

BIMI_RECORDS 1

  • v1=BIMI1; f=svg; z=128x128; l=https://returnpath.com/rpstatic/images/rp/logos/

TLS Certificates (3)

Common NameIssuerExpires
billing.returnpath.com C=US, O=Let's Encrypt, CN=YR2 Tue, 29 Sep 2026 12:53:58 +0000
YR2 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (8)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Ed25519 Receipt

Receipt ID
rcpt_efd75c82172fe319
Output Hash
03862b5b2b48d86a15f82e4ac46c413ab31e05499668f67d392f16ea1e90f78a
Signature
ed25519:8c804e90081a2a7d4b7969ff8764fb658613caa9eebba7e5ce6573f7903280e01fb3e22ac370d82f099e454b638bf03e754105aa33a4603b0cc37df795a4a40a
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser