🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`normalplan.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::ac43:b066^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3031::6815:484d^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.72.77^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.176.102^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`jocelyn.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3aae^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jocelyn.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0ae^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`jocelyn.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20ae^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`jocelyn.ns.cloudflare.com`
		A	108.162.192.174^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jocelyn.ns.cloudflare.com`
		A	172.64.32.174^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jocelyn.ns.cloudflare.com`
		A	173.245.58.174^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jocelyn.ns.cloudflare.com`
NS	`matteo.ns.cloudflare.com`
		A	2606:4700:58::a29f:2ce0^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`matteo.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3e0^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`matteo.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23e0^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`matteo.ns.cloudflare.com`
		A	108.162.195.224^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`matteo.ns.cloudflare.com`
		A	162.159.44.224^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`matteo.ns.cloudflare.com`
		A	172.64.35.224^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`matteo.ns.cloudflare.com`
MX	`s97.lon.krystal.io` ⭐
		A	185.194.90.34^{🇬🇧 KRYSTAL185.194.88.0/22}
			PTR	`s97.lon.krystal.io`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.72.77, 172.67.176.102
		IPv6 hints	2606:4700:3030::ac43:b066, 2606:4700:3031::6815:484d
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=49, name=cloudflare-ech.com
SOA	`jocelyn.ns.cloudflare.com`dns@cloudflare.com serial=2418712725

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1794573426

Same first word

normalplan.com

Previous names

Next names

DNS History

15 records (7 active, 8 former)

●NSjocelyn.ns.cloudflare.com2026-09-01 → 2026-11-13 · 3 obs

○ 2016-12-17 11:59:14
● 2026-09-01 01:57:16
● 2026-11-13 12:45:20

●NSmatteo.ns.cloudflare.com2026-09-01 → 2026-11-13 · 3 obs

○ 2016-12-17 11:59:14
● 2026-09-01 01:57:16
● 2026-11-13 12:45:20

○NSns5.kasserver.com2016-12-17 → 2016-12-17 · 3 obs

● 2016-12-17 11:59:14
○ 2026-09-01 01:57:16
○ 2026-11-13 12:45:20

○NSns6.kasserver.com2016-12-17 → 2016-12-17 · 3 obs

● 2016-12-17 11:59:14
○ 2026-09-01 01:57:16
○ 2026-11-13 12:45:20

●MXs97.lon.krystal.io2026-11-03 → 2026-11-13 · 3 obs

○ 2026-09-01 01:57:16
● 2026-11-03 10:27:38
● 2026-11-13 12:45:20

○MXw013c364.kasserver.com2016-12-17 → 2016-12-17 · 3 obs

● 2016-12-17 11:59:14
○ 2026-09-01 01:57:16
○ 2026-11-13 12:45:20

●A104.21.72.772026-09-02 → 2026-11-13 · 5 obs

○ 2026-09-01 01:57:16
● 2026-09-02 11:47:20
○ 2026-10-27 15:53:22
● 2026-11-03 10:27:38
● 2026-11-13 12:45:20

●A172.67.176.1022026-09-02 → 2026-11-13 · 5 obs

○ 2026-09-01 01:57:16
● 2026-09-02 11:47:20
○ 2026-10-27 15:53:22
● 2026-11-03 10:27:38
● 2026-11-13 12:45:20

○A188.114.96.02026-09-01 → 2026-10-27 · 6 obs

○ 2016-12-17 11:59:14
● 2026-09-01 01:57:16
○ 2026-09-02 11:47:20
● 2026-10-27 15:53:22
○ 2026-11-03 10:27:38
○ 2026-11-13 12:45:20

○A188.114.97.02026-09-01 → 2026-10-27 · 6 obs

○ 2016-12-17 11:59:14
● 2026-09-01 01:57:16
○ 2026-09-02 11:47:20
● 2026-10-27 15:53:22
○ 2026-11-03 10:27:38
○ 2026-11-13 12:45:20

●A2606:4700:3030::ac43:b0662026-09-02 → 2026-11-13 · 5 obs

○ 2026-09-01 01:57:16
● 2026-09-02 11:47:20
○ 2026-10-27 15:53:22
● 2026-11-03 10:27:38
● 2026-11-13 12:45:20

●A2606:4700:3031::6815:484d2026-09-02 → 2026-11-13 · 5 obs

○ 2026-09-01 01:57:16
● 2026-09-02 11:47:20
○ 2026-10-27 15:53:22
● 2026-11-03 10:27:38
● 2026-11-13 12:45:20

○A2a06:98c1:3120::2026-09-01 → 2026-10-27 · 6 obs

○ 2016-12-17 11:59:14
● 2026-09-01 01:57:16
○ 2026-09-02 11:47:20
● 2026-10-27 15:53:22
○ 2026-11-03 10:27:38
○ 2026-11-13 12:45:20

○A2a06:98c1:3121::2026-09-01 → 2026-10-27 · 6 obs

○ 2016-12-17 11:59:14
● 2026-09-01 01:57:16
○ 2026-09-02 11:47:20
● 2026-10-27 15:53:22
○ 2026-11-03 10:27:38
○ 2026-11-13 12:45:20

○A85.13.146.92016-12-17 → 2016-12-17 · 3 obs

● 2016-12-17 11:59:14
○ 2026-09-01 01:57:16
○ 2026-11-13 12:45:20

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
normalplan.com	jocelyn.ns.cloudflare.com, matteo.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:172.64.35.224

NS records: jocelyn.ns.cloudflare.com, matteo.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for normalplan.com (unsigned zone)

⏱️ Timing

Total: 1677ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.72.77, 172.67.176.102`
AAAA	2	`2606:4700:3030::ac43:b066, 2606:4700:3031::6815:484d`
NS	2	`jocelyn.ns.cloudflare.com, matteo.ns.cloudflare.com`
MX	1	`s97.lon.krystal.io (pri: 10)`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`jocelyn.ns.cloudflare.com dns.cloudflare`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (jocelyn.ns.cloudflare.com, jocelyn.ns.cloudflare.com, jocelyn.ns.cloudflare.com...)

Analysis

IP Addresses

normalplan.com directs to four IP numbers, which are 104.21.72.77, 172.67.176.102, 2606:4700:3030::ac43:b066 and 2606:4700:3031::6815:484d.

Among the host names that share IP numbers with normalplan.com are hmwmtbszfptu.lat, avirel.co, espacolojas.com.br and two others.

Name Servers

normalplan.com uses two name servers for its delegation: jocelyn.ns.cloudflare.com and matteo.ns.cloudflare.com.

normalplan.com has the same name server delegation as a number of other domains, such as garyowen.workers.dev, barracks.in, biancaandjorge.com and two more.

There is at least partial name server overlap between normalplan.com and other domains — thecarzilla.shop, mobilityworkout3.workers.dev, solidarityjobs.org and two more among them.

These name servers are routinely deployed together with the name servers ignat.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

Hostname jocelyn.ns.cloudflare.com directs to 108.162.192.174, 172.64.32.174 and 173.245.58.174 along with 3 other IP addresses.

Hostname matteo.ns.cloudflare.com directs to 108.162.195.224, 162.159.44.224 and 172.64.35.224 along with 3 other IP addresses.

Mail Servers

normalplan.com routes its mail through a single mail server, s97.lon.krystal.io.

normalplan.com has the same mail server arrangement as a number of other domains, for example cre8tivehands.co.uk, onehomeproperty.com, simonhatchardparr.com and two more.

s97.lon.krystal.io directs to just one IP number, 185.194.90.34.

normalplan.com - robtex.com

normalplan.com

com

Same first word

Previous names

Next names

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

Mail Servers

`normalplan.com`

`com`