🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`returnoptimizer.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3034::ac43:98fe^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::6815:31e0^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.49.224^{Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.152.254^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`elmo.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3ba3^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1a3^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`elmo.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21a3^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`elmo.ns.cloudflare.com`
		A	108.162.193.163^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	172.64.33.163^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	173.245.59.163^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
NS	`lilith.ns.cloudflare.com`
		A	2606:4700:50::a29f:268f^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lilith.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c28f^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`lilith.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:228f^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`lilith.ns.cloudflare.com`
		A	108.162.194.143^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lilith.ns.cloudflare.com`
		A	162.159.38.143^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lilith.ns.cloudflare.com`
		A	172.64.34.143^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lilith.ns.cloudflare.com`
TXT	`43f0739398604a8e8cb2c7a4e51f22c9`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.49.224, 172.67.152.254
		IPv6 hints	2606:4700:3034::ac43:98fe, 2606:4700:3035::6815:31e0
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=198, name=cloudflare-ech.com
SOA	`elmo.ns.cloudflare.com`dns@cloudflare.com serial=2416286689

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1791001139

Same first word

returnoptimizer.com

Previous names

Next names

DNS History

6 records (6 active, 0 former)

●NSelmo.ns.cloudflare.com2026-09-30 → 2026-10-03 · 2 obs

● 2026-09-30 08:08:56
● 2026-10-03 04:32:40

●NSlilith.ns.cloudflare.com2026-09-30 → 2026-10-03 · 2 obs

● 2026-09-30 08:08:56
● 2026-10-03 04:32:40

●A104.21.49.2242026-10-01 → 2026-10-03 · 2 obs

● 2026-10-01 14:18:00
● 2026-10-03 04:32:40

●A172.67.152.2542026-10-01 → 2026-10-03 · 2 obs

● 2026-10-01 14:18:00
● 2026-10-03 04:32:40

●A2606:4700:3034::ac43:98fe2026-10-01 → 2026-10-03 · 2 obs

● 2026-10-01 14:18:00
● 2026-10-03 04:32:40

●A2606:4700:3035::6815:31e02026-10-01 → 2026-10-03 · 2 obs

● 2026-10-01 14:18:00
● 2026-10-03 04:32:40

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	l.gtld-servers.net, e.gtld-servers.net, m.gtld-servers.net, b.gtld-servers.net...	-
returnoptimizer.com	elmo.ns.cloudflare.com, lilith.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.193.163

NS records: elmo.ns.cloudflare.com, lilith.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for returnoptimizer.com (unsigned zone)

⏱️ Timing

Total: 167ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.152.254, 104.21.49.224`
AAAA	2	`2606:4700:3035::6815:31e0, 2606:4700:3034::ac43:98fe`
NS	2	`elmo.ns.cloudflare.com, lilith.ns.cloudflare.com`
TXT	1	`43f0739398604a8e8cb2c7a4e51f22c9`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`elmo.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (elmo.ns.cloudflare.com, elmo.ns.cloudflare.com, elmo.ns.cloudflare.com...)

Analysis

IP Addresses

returnoptimizer.com has four IP addresses: 104.21.49.224, 172.67.152.254, 2606:4700:3034::ac43:98fe and 2606:4700:3035::6815:31e0.

Additional host names — wangpanhezi.com, jamesonmovingandstorage.com, bobditty.com and two others — share IP numbers with returnoptimizer.com.

Name Servers

Two name servers handle the delegation for returnoptimizer.com: elmo.ns.cloudflare.com and lilith.ns.cloudflare.com.

returnoptimizer.com shares its name server setup with other domains, including yarevo.com, getvalidity.com, raportai.com and two others.

returnoptimizer.com has at least partial name server overlap with other domains, such as herafactory.com, paylesspaints.co.nz, deviceonapp.digital and two others.

It is common to find these name servers paired with the name servers deb.ns.cloudflare.com, adi.ns.cloudflare.com, rex.ns.cloudflare.com and todd.ns.cloudflare.com.

Host names with 6 IP numbers:

elmo.ns.cloudflare.com resolves to 108.162.193.163, 172.64.33.163 and 173.245.59.163 among others, with 3 other IP addresses in total.

lilith.ns.cloudflare.com resolves to 108.162.194.143, 162.159.38.143 and 172.64.34.143 among others, with 3 other IP addresses in total.

returnoptimizer.com - robtex.com