returnflows.com - robtex.com
returnflows.com
com
| DNSSEC | π Signed (DS record present) | ||||||
| NS | a.gtld-servers.net β | ||||||
| NS | b.gtld-servers.net | ||||||
| NS | c.gtld-servers.net | ||||||
| NS | d.gtld-servers.net | ||||||
| NS | e.gtld-servers.net | ||||||
| NS | f.gtld-servers.net | ||||||
| NS | g.gtld-servers.net | ||||||
| NS | h.gtld-servers.net | ||||||
| NS | i.gtld-servers.net | ||||||
| NS | j.gtld-servers.net | ||||||
| NS | k.gtld-servers.net | ||||||
| NS | l.gtld-servers.net | ||||||
| NS | m.gtld-servers.net | ||||||
| SOA | a.gtld-servers.netnstld@verisign-grs.com serial=1774502327 | ||||||
Subdomains
static.returnflows.com |
Same first word
returnflows.com |
DNS History
9 records (9 active, 0 former)
βNSkarl.ns.cloudflare.com2026-03-09 β 2026-03-26 Β· 2 obs
β 2026-03-26 05:38:54
βNSnadia.ns.cloudflare.com2026-03-09 β 2026-03-26 Β· 2 obs
β 2026-03-26 05:38:54
βMXalt1.aspmx.l.google.com2026-03-09 β 2026-03-26 Β· 2 obs
β 2026-03-26 05:38:54
βMXalt2.aspmx.l.google.com2026-03-09 β 2026-03-26 Β· 2 obs
β 2026-03-26 05:38:54
βMXalt3.aspmx.l.google.com2026-03-09 β 2026-03-26 Β· 2 obs
β 2026-03-26 05:38:54
βMXalt4.aspmx.l.google.com2026-03-09 β 2026-03-26 Β· 2 obs
β 2026-03-26 05:38:54
βMXaspmx.l.google.com2026-03-09 β 2026-03-26 Β· 2 obs
β 2026-03-26 05:38:54
βMXms72943781.msv1.invalid2026-03-09 β 2026-03-26 Β· 2 obs
β 2026-03-26 05:38:54
βA76.76.21.212026-03-09 β 2026-03-26 Β· 2 obs
β 2026-03-26 05:38:54
π DNS Trace
π Delegation Chain
| Zone | Nameservers | Glue |
|---|---|---|
| com | a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net... | - |
| returnflows.com | karl.ns.cloudflare.com, nadia.ns.cloudflare.com | 12 records |
β Authoritative Response
Server:108.162.192.207
NS records: karl.ns.cloudflare.com, nadia.ns.cloudflare.com
π DNSSEC Status
β οΈ Insecure (no DNSSEC)
No DS record for returnflows.com (unsigned zone)
β±οΈ Timing
Total: 155ms | Queries: -
π Records
| Type | Count | Sample Data |
|---|---|---|
| A | 1 | 76.76.21.21 |
| NS | 2 | karl.ns.cloudflare.com, nadia.ns.cloudflare.com |
| MX | 6 | aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)... |
| TXT | 5 | MS=ms72943781, google-site-verification=FebHCqDTgLOdj7A... |
| SOA | 1 | karl.ns.cloudflare.com dns.cloudflare.co |
π Glue Records Collected
Total: 12
Out-of-bailiwick: 12 (karl.ns.cloudflare.com, karl.ns.cloudflare.com, karl.ns.cloudflare.com...)
Analysis
Hierarchy
The parent of static.returnflows.com is returnflows.com.
IP Addresses
returnflows.com points to an IP address: 76.76.21.21.
other host names include cerebroapp.com, govconinabox.com, memory-watch.com, gulez.net and chatlima.com; they share IP numbers with returnflows.com.
Name Servers
Two name servers karl.ns.cloudflare.com and nadia.ns.cloudflare.com handle the delegation for returnflows.com.
returnflows.com shares the same name server setup as other domains, for instance therealpizzacompany.co.uk, poehalsam.kz, bitso.com.gt, mehlvilletermiteandpestcontrolinc.com and deliriumcafeamsterdam.nl.
returnflows.com at least partially shares name servers with other domains, for instance purevicky.com, malatyabeyazesyaservisim.com, ioncasino.edu.pl, methhelp.org.nz and maisonlebonheur.com.
These name servers are commonly used with dakota.ns.cloudflare.com and tori.ns.cloudflare.com.
Six IP addresses per host:
karl.ns.cloudflare.com points to 2606:4700:58::adf5:3bbe, 2803:f800:50::6ca2:c1be, 2a06:98c1:50::ac40:21be, 108.162.193.190, 172.64.33.190 and 173.245.59.190; nadia.ns.cloudflare.com points to 2606:4700:50::adf5:3acf, 2803:f800:50::6ca2:c0cf, 2a06:98c1:50::ac40:20cf, 108.162.192.207, 172.64.32.207 and 173.245.58.207
Mail Servers
Six mail servers handle returnflows.com: ms72943781.msv1.invalid, aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, alt3.aspmx.l.google.com and alt4.aspmx.l.google.com.
returnflows.com shares at least partially some mail servers with other domains, for instance hharpercpa.com, ns500698.ns500759.ns500758.ns500759.ns500698.ns500698.ns500736.ns500735.ns500736.ns500708.ns500576.ns500698.ns500698.ns500619.ns500619.ns500619.trackreceptor.com, ns500731.ns500742.ns500754.ns500731.ns500688.ns500671.ns500705.ns500678.ns500649.ns500291.ns500153.tenderladiesbz.com, davidperez.us and cryptonews.com.
Mail servers frequently appear alongside aspmx2.googlemail.com, aspmx3.googlemail.com, aspmx4.googlemail.com and aspmx5.googlemail.com.
Hostnames with two IP numbers:
aspmx.l.google.com points to 2a00:1450:4009:c0f::1b and 192.178.223.26
alt1.aspmx.l.google.com points to 2800:3f0:4003:c0f::1a and 108.177.123.27
alt2.aspmx.l.google.com points to 2607:f8b0:4023:1015::1a and 172.253.135.27
alt3.aspmx.l.google.com points to 2a00:1450:4009:c0f::1b and 192.178.223.27
alt4.aspmx.l.google.com points to 2a00:1450:4025:c01::1a and 142.250.147.26
Hostnames that point to 2a00:1450:4009:c0f::1b are aspmx.l.google.com and alt3.aspmx.l.google.com