`expense-reduction.net`

DNSSEC	⚠️ Not signed
A	2606:4700:3034::ac43:d1c2^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::6815:100d^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.16.13^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.209.194^{🇺🇸 Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`cloe.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a56^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cloe.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c056^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`cloe.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2056^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`cloe.ns.cloudflare.com`
		A	108.162.192.86^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cloe.ns.cloudflare.com`
		A	172.64.32.86^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cloe.ns.cloudflare.com`
		A	173.245.58.86^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cloe.ns.cloudflare.com`
NS	`pete.ns.cloudflare.com`
		A	2606:4700:58::adf5:3b88^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`pete.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c188^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`pete.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2188^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`pete.ns.cloudflare.com`
		A	108.162.193.136^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`pete.ns.cloudflare.com`
		A	172.64.33.136^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`pete.ns.cloudflare.com`
		A	173.245.59.136^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`pete.ns.cloudflare.com`
MX	`eu-smtp-inbound-1.mimecast.com` ⭐
		A	91.220.42.201^{🇬🇧 MIMECAST-UK91.220.42.0/24 MIMECAST-NET2}
			PTR	`eu-smtp-inbound-1.mimecast.com`
			PTR	`eu-smtp-inbound-2.mimecast.com`
		A	91.220.42.211^{🇬🇧 MIMECAST-UK91.220.42.0/24 MIMECAST-NET2}
			PTR	`eu-smtp-inbound-1.mimecast.com`
			PTR	`eu-smtp-inbound-2.mimecast.com`
		A	91.220.42.241^{🇬🇧 MIMECAST-UK91.220.42.0/24 MIMECAST-NET2}
			PTR	`eu-smtp-inbound-1.mimecast.com`
			PTR	`eu-smtp-inbound-2.mimecast.com`
		A	195.130.217.201^{🇬🇧 MIMECAST-UK195.130.217.0/24}
			PTR	`eu-smtp-inbound-1.mimecast.com`
			PTR	`eu-smtp-inbound-2.mimecast.com`
		A	195.130.217.211^{🇬🇧 MIMECAST-UK195.130.217.0/24}
			PTR	`eu-smtp-inbound-1.mimecast.com`
			PTR	`eu-smtp-inbound-2.mimecast.com`
		A	195.130.217.241^{🇬🇧 MIMECAST-UK195.130.217.0/24}
			PTR	`eu-smtp-inbound-1.mimecast.com`
			PTR	`eu-smtp-inbound-2.mimecast.com`
MX	`eu-smtp-inbound-2.mimecast.com` ⭐
		A	91.220.42.201^{🇬🇧 MIMECAST-UK91.220.42.0/24 MIMECAST-NET2}
			PTR	`eu-smtp-inbound-1.mimecast.com`
			PTR	`eu-smtp-inbound-2.mimecast.com`
		A	91.220.42.211^{🇬🇧 MIMECAST-UK91.220.42.0/24 MIMECAST-NET2}
			PTR	`eu-smtp-inbound-1.mimecast.com`
			PTR	`eu-smtp-inbound-2.mimecast.com`
		A	91.220.42.241^{🇬🇧 MIMECAST-UK91.220.42.0/24 MIMECAST-NET2}
			PTR	`eu-smtp-inbound-1.mimecast.com`
			PTR	`eu-smtp-inbound-2.mimecast.com`
		A	195.130.217.201^{🇬🇧 MIMECAST-UK195.130.217.0/24}
			PTR	`eu-smtp-inbound-1.mimecast.com`
			PTR	`eu-smtp-inbound-2.mimecast.com`
		A	195.130.217.211^{🇬🇧 MIMECAST-UK195.130.217.0/24}
			PTR	`eu-smtp-inbound-1.mimecast.com`
			PTR	`eu-smtp-inbound-2.mimecast.com`
		A	195.130.217.241^{🇬🇧 MIMECAST-UK195.130.217.0/24}
			PTR	`eu-smtp-inbound-1.mimecast.com`
			PTR	`eu-smtp-inbound-2.mimecast.com`
TXT	`MS=ms37147834`
TXT	`v=spf1 include:spf.protection.outlook.com include:sendgrid.net include:eu._ne...`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.16.13, 172.67.209.194
		IPv6 hints	2606:4700:3034::ac43:d1c2, 2606:4700:3036::6815:100d
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=180, name=cloudflare-ech.com
SOA	`cloe.ns.cloudflare.com`dns@cloudflare.com serial=2408342751

`net`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1786179604

WOT: UNKNOWN (72/100)

Same first word

Similar names

indecent-exposure.com

DNS History

20 records (8 active, 12 former)

●NScloe.ns.cloudflare.com2026-04-17 → 2026-08-08 · 3 obs

○ 2020-01-17 19:30:38
● 2026-04-17 11:36:12
● 2026-08-08 09:12:38

○NSns1.livedns.co.uk2015-07-05 → 2020-01-17 · 4 obs

● 2015-07-05 04:10:52
● 2020-01-17 19:30:38
○ 2026-04-17 11:36:12
○ 2026-08-08 09:12:38

○NSns2.livedns.co.uk2015-07-05 → 2020-01-17 · 4 obs

● 2015-07-05 04:10:52
● 2020-01-17 19:30:38
○ 2026-04-17 11:36:12
○ 2026-08-08 09:12:38

○NSns3.livedns.co.uk2015-07-05 → 2020-01-17 · 4 obs

● 2015-07-05 04:10:52
● 2020-01-17 19:30:38
○ 2026-04-17 11:36:12
○ 2026-08-08 09:12:38

●NSpete.ns.cloudflare.com2026-04-17 → 2026-08-08 · 3 obs

○ 2020-01-17 19:30:38
● 2026-04-17 11:36:12
● 2026-08-08 09:12:38

●MXeu-smtp-inbound-1.mimecast.com2026-04-17 → 2026-08-08 · 3 obs

○ 2020-01-17 19:30:38
● 2026-04-17 11:36:12
● 2026-08-08 09:12:38

●MXeu-smtp-inbound-2.mimecast.com2026-04-17 → 2026-08-08 · 3 obs

○ 2020-01-17 19:30:38
● 2026-04-17 11:36:12
● 2026-08-08 09:12:38

○MXmailserver.expense-reduction.net2015-07-05 → 2020-01-17 · 4 obs

● 2015-07-05 04:10:52
● 2020-01-17 19:30:38
○ 2026-04-17 11:36:12
○ 2026-08-08 09:12:38

●A104.21.16.132026-04-17 → 2026-08-08 · 8 obs

○ 2020-01-17 19:30:38
● 2026-04-17 11:36:12
● 2026-05-14 03:08:24
○ 2026-05-14 21:34:16
● 2026-05-30 09:51:46
○ 2026-07-03 15:16:52
● 2026-07-09 21:35:46
● 2026-08-08 09:12:38

●A172.67.209.1942026-04-17 → 2026-08-08 · 8 obs

○ 2020-01-17 19:30:38
● 2026-04-17 11:36:12
● 2026-05-14 03:08:24
○ 2026-05-14 21:34:16
● 2026-05-30 09:51:46
○ 2026-07-03 15:16:52
● 2026-07-09 21:35:46
● 2026-08-08 09:12:38

○A188.114.96.02026-05-14 → 2026-07-03 · 6 obs

○ 2026-05-14 03:08:24
● 2026-05-14 21:34:16
○ 2026-05-30 09:51:46
● 2026-07-03 15:16:52
○ 2026-07-09 21:35:46
○ 2026-08-08 09:12:38

○A188.114.97.02026-05-14 → 2026-07-03 · 6 obs

○ 2026-05-14 03:08:24
● 2026-05-14 21:34:16
○ 2026-05-30 09:51:46
● 2026-07-03 15:16:52
○ 2026-07-09 21:35:46
○ 2026-08-08 09:12:38

○A213.171.195.1052015-11-14 → 2020-01-17 · 5 obs

○ 2015-07-05 04:10:52
● 2015-11-14 17:41:38
● 2020-01-17 19:30:38
○ 2026-04-17 11:36:12
○ 2026-08-08 09:12:38

○A2606:4700:3034::6815:100d2026-04-17 → 2026-05-30 · 7 obs

○ 2020-01-17 19:30:38
● 2026-04-17 11:36:12
● 2026-05-14 03:08:24
○ 2026-05-14 21:34:16
● 2026-05-30 09:51:46
○ 2026-07-03 15:16:52
○ 2026-08-08 09:12:38

●A2606:4700:3034::ac43:d1c22026-07-09 → 2026-08-08 · 3 obs

○ 2026-07-03 15:16:52
● 2026-07-09 21:35:46
● 2026-08-08 09:12:38

●A2606:4700:3036::6815:100d2026-07-09 → 2026-08-08 · 3 obs

○ 2026-07-03 15:16:52
● 2026-07-09 21:35:46
● 2026-08-08 09:12:38

○A2606:4700:3037::ac43:d1c22026-04-17 → 2026-05-30 · 7 obs

○ 2020-01-17 19:30:38
● 2026-04-17 11:36:12
● 2026-05-14 03:08:24
○ 2026-05-14 21:34:16
● 2026-05-30 09:51:46
○ 2026-07-03 15:16:52
○ 2026-08-08 09:12:38

○A2a06:98c1:3120::2026-05-14 → 2026-07-03 · 6 obs

○ 2026-05-14 03:08:24
● 2026-05-14 21:34:16
○ 2026-05-30 09:51:46
● 2026-07-03 15:16:52
○ 2026-07-09 21:35:46
○ 2026-08-08 09:12:38

○A2a06:98c1:3121::2026-05-14 → 2026-07-03 · 6 obs

○ 2026-05-14 03:08:24
● 2026-05-14 21:34:16
○ 2026-05-30 09:51:46
● 2026-07-03 15:16:52
○ 2026-07-09 21:35:46
○ 2026-08-08 09:12:38

○A88.208.252.92015-07-05 → 2015-07-05 · 3 obs

● 2015-07-05 04:10:52
○ 2015-11-14 17:41:38
○ 2026-08-08 09:12:38

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
net	b.gtld-servers.net, a.gtld-servers.net, f.gtld-servers.net, c.gtld-servers.net...	-
expense-reduction.net	pete.ns.cloudflare.com, cloe.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.33.136

NS records: pete.ns.cloudflare.com, cloe.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for expense-reduction.net (unsigned zone)

⏱️ Timing

Total: 525ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.16.13, 172.67.209.194`
AAAA	2	`2606:4700:3036::6815:100d, 2606:4700:3034::ac43:d1c2`
NS	2	`cloe.ns.cloudflare.com, pete.ns.cloudflare.com`
MX	2	`eu-smtp-inbound-1.mimecast.com (pri: 10), eu-smtp-inbound-2.mimecast.com (pri: 10)`
TXT	2	`MS=ms37147834, v=spf1 include:spf.protection.outlook.co`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`cloe.ns.cloudflare.com dns.cloudflare.co`

Analysis

IP Addresses

expense-reduction.net has four IP addresses: 104.21.16.13, 172.67.209.194, 2606:4700:3034::ac43:d1c2 and 2606:4700:3036::6815:100d.

Two other host names, along with kryptos.cc, www.tykn.tech and amcv.cn, also share IP numbers with expense-reduction.net.

Name Servers

DNS delegation for expense-reduction.net points to two name servers: cloe.ns.cloudflare.com and pete.ns.cloudflare.com.

expense-reduction.net shares its NS records with other domains, for example radioesperanzadevida.net, goldhands-samara.ru, gazeteciler.com and two others.

expense-reduction.net shares at least some of its name servers with other domains, including dailypresentationtemplates.com, emitus.com, tzinz.com and two others.

These name servers are frequently seen alongside the name servers norman.ns.cloudflare.com.

DNS names with 6 IP addresses:

cloe.ns.cloudflare.com has IP addresses 108.162.192.86, 172.64.32.86 and 173.245.58.86, plus 3 other.

pete.ns.cloudflare.com has IP addresses 108.162.193.136, 172.64.33.136 and 173.245.59.136, plus 3 other.

Mail Servers

expense-reduction.net is served by two mail servers, eu-smtp-inbound-1.mimecast.com and eu-smtp-inbound-2.mimecast.com.

Among the domains sharing a mail server setup with expense-reduction.net are e3consulting.co.uk, surveyconnection.co.uk, wearefield.co.uk and two others.

There is at least a partial MX overlap between expense-reduction.net and other domains, including shepwedd.co.uk, barackobamaplaza.ie, mccloskeyinternational.ca and two others.

DNS names with 6 IP addresses:

eu-smtp-inbound-1.mimecast.com has IP addresses 91.220.42.201, 91.220.42.211 and 91.220.42.241, plus 3 other.

eu-smtp-inbound-2.mimecast.com has IP addresses 91.220.42.201, 91.220.42.211 and 91.220.42.241, plus 3 other.

Host names pointing to 91.220.42.201 IP addresses: eu-smtp-inbound-1.mimecast.com and eu-smtp-inbound-2.mimecast.com.

Host names pointing to 91.220.42.211 IP addresses: eu-smtp-inbound-1.mimecast.com and eu-smtp-inbound-2.mimecast.com.

Host names pointing to 91.220.42.241 IP addresses: eu-smtp-inbound-1.mimecast.com and eu-smtp-inbound-2.mimecast.com.

Host names pointing to 195.130.217.201 IP addresses: eu-smtp-inbound-1.mimecast.com and eu-smtp-inbound-2.mimecast.com.

Host names pointing to 195.130.217.211 IP addresses: eu-smtp-inbound-1.mimecast.com and eu-smtp-inbound-2.mimecast.com.

Host names pointing to 195.130.217.241 IP addresses: eu-smtp-inbound-1.mimecast.com and eu-smtp-inbound-2.mimecast.com.