returnmode.com - robtex.com

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

returnmode.com

DNSSEC⚠️ Not signed
A2606:4700:3030::6815:1fe1🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3037::ac43:b409🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.31.225Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.180.9🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSkarina.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3ab2Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A2803:f800:50::6ca2:c0b2Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
A2a06:98c1:50::ac40:20b2Cloudflare2a06:98c1:50::/45
A108.162.192.178Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A172.64.32.178Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A173.245.58.178Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
NSpiers.ns.cloudflare.com
A2606:4700:58::a29f:2c10Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A2803:f800:50::6ca2:c310Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
A2a06:98c1:50::ac40:2310Cloudflare2a06:98c1:50::/45
A108.162.195.16Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A162.159.44.16Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A172.64.35.16Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.31.225, 172.67.180.9
IPv6 hints2606:4700:3030::6815:1fe1, 2606:4700:3037::ac43:b409
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=30, name=cloudflare-ech.com
SOAkarina.ns.cloudflare.comdns@cloudflare.com serial=2418962571

com

DNSSEC🔒 Signed (DS record present)
NSa.gtld-servers.net ⭐
NSb.gtld-servers.net
NSc.gtld-servers.net
NSd.gtld-servers.net
NSe.gtld-servers.net
NSf.gtld-servers.net
NSg.gtld-servers.net
NSh.gtld-servers.net
NSi.gtld-servers.net
NSj.gtld-servers.net
NSk.gtld-servers.net
NSl.gtld-servers.net
NSm.gtld-servers.net
SOAa.gtld-servers.netnstld@verisign-grs.com serial=1793504101

Same first word

returnmode.com

Similar names

trenerdomu.cz
dermonteur.de
murdernote.com
murdertone.com
truemodern.com
truemodern.tw
undermetro.com
truemodern.xyz
neutroderm.com
demoreturn.xyz
merodruten.nl
neutroderm.com.pk
meterround.com

Previous names

returnmi.com
returnmicrotogel88.com
returnmigration.com
returnmii.com
returnmind.com
returnminder.com
returnmine.com
returnministries.com
returnmint.com
returnminusone.com
returnmissing.com
returnmissionary.com
returnmkt.com
returnml.com
returnmo.com
returnmobile.com
returnmobility.com

Next names

returnmodeler.com
returnmoi.com
returnmoipets.com
returnmom.com
returnmon.com
returnmoney.com
returnmoneyonline.com
returnmoneypro.com
returnmonitor.com
returnmonk.com
returnmore.com
returnmortgagequity.com
returnmountain.com
returnmovement.com
returnmu.com
returnmultiple.com

DNS History

10 records (6 active, 4 former)

NSkarina.ns.cloudflare.compiers.ns.cloudflare.comA104.21.31.225172.67.180.92606:4700:3030::6815:1fe12606:4700:3037::ac43:b409188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSkarina.ns.cloudflare.com2026-10-30 → 2026-11-01 · 2 obs
● 2026-10-30 13:49:22
● 2026-11-01 03:45:32
●NSpiers.ns.cloudflare.com2026-10-30 → 2026-11-01 · 2 obs
● 2026-10-30 13:49:22
● 2026-11-01 03:45:32
●A104.21.31.2252026-10-31 → 2026-11-01 · 3 obs
○ 2026-10-30 13:49:22
● 2026-10-31 00:29:20
● 2026-11-01 03:45:32
●A172.67.180.92026-10-31 → 2026-11-01 · 3 obs
○ 2026-10-30 13:49:22
● 2026-10-31 00:29:20
● 2026-11-01 03:45:32
○A188.114.96.02026-10-30 → 2026-10-30 · 3 obs
● 2026-10-30 13:49:22
○ 2026-10-31 00:29:20
○ 2026-11-01 03:45:32
○A188.114.97.02026-10-30 → 2026-10-30 · 3 obs
● 2026-10-30 13:49:22
○ 2026-10-31 00:29:20
○ 2026-11-01 03:45:32
●A2606:4700:3030::6815:1fe12026-10-31 → 2026-11-01 · 3 obs
○ 2026-10-30 13:49:22
● 2026-10-31 00:29:20
● 2026-11-01 03:45:32
●A2606:4700:3037::ac43:b4092026-10-31 → 2026-11-01 · 3 obs
○ 2026-10-30 13:49:22
● 2026-10-31 00:29:20
● 2026-11-01 03:45:32
○A2a06:98c1:3120::2026-10-30 → 2026-10-30 · 3 obs
● 2026-10-30 13:49:22
○ 2026-10-31 00:29:20
○ 2026-11-01 03:45:32
○A2a06:98c1:3121::2026-10-30 → 2026-10-30 · 3 obs
● 2026-10-30 13:49:22
○ 2026-10-31 00:29:20
○ 2026-11-01 03:45:32

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
coma.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...-
returnmode.comkarina.ns.cloudflare.com, piers.ns.cloudflare.com12 records

✅ Authoritative Response

Server:108.162.195.16

NS records: karina.ns.cloudflare.com, piers.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for returnmode.com (unsigned zone)

⏱️ Timing

Total: 488ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.31.225, 172.67.180.9
AAAA22606:4700:3037::ac43:b409, 2606:4700:3030::6815:1fe1
NS2karina.ns.cloudflare.com, piers.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1karina.ns.cloudflare.com dns.cloudflare.

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (karina.ns.cloudflare.com, karina.ns.cloudflare.com, karina.ns.cloudflare.com...)

Analysis

IP Addresses

returnmode.com directs to four IP numbers, which are 104.21.31.225, 172.67.180.9, 2606:4700:3030::6815:1fe1 and 2606:4700:3037::ac43:b409.

Among the host names that share IP numbers with returnmode.com are transgruasdecolombia.com, mariosg33.co.uk, mail.eks-technik.de and two others.

Name Servers

returnmode.com is delegated to two name servers: karina.ns.cloudflare.com and piers.ns.cloudflare.com.

returnmode.com has the same name server delegation as a number of other domains, such as cartes-de-lecture.pages.dev, bisko-daniel.workers.dev, develop-supportextend-j7p.pages.dev and two more.

There is at least partial name server overlap between returnmode.com and other domains — jumbodordrecht.nl, masif-seed.pages.dev, freesubtitlegenerator.org and two more among them.

These name servers are routinely deployed together with the name servers june.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

karina.ns.cloudflare.com resolves to 108.162.192.178, 172.64.32.178, 173.245.58.178 and 3 other IP addresses.

piers.ns.cloudflare.com resolves to 108.162.195.16, 162.159.44.16, 172.64.35.16 and 3 other IP addresses.