returnonfocus.com - dns.ninja

`returnonfocus.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3036::ac43:9931^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::6815:20b2^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.32.178^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.153.49^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`tim.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b91^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tim.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c191^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`tim.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2191^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`tim.ns.cloudflare.com`
		A	108.162.193.145^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tim.ns.cloudflare.com`
		A	172.64.33.145^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tim.ns.cloudflare.com`
		A	173.245.59.145^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tim.ns.cloudflare.com`
NS	`vera.ns.cloudflare.com`
		A	2606:4700:50::adf5:3a93^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`vera.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c093^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`vera.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2093^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`vera.ns.cloudflare.com`
		A	108.162.192.147^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`vera.ns.cloudflare.com`
		A	172.64.32.147^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`vera.ns.cloudflare.com`
		A	173.245.58.147^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`vera.ns.cloudflare.com`
MX	`returnonfocus-com.mail.protection.outlook.com` ⭐
		A	2a01:111:f403:c901::1^{🇺🇸 Microsoft2a01:111:f000::/36}
			PTR	`mail-bl2pr04cu00201.inbound.protection.outlook.com`
		A	2a01:111:f403:c92c::3^{🇺🇸 Microsoft2a01:111:f000::/36}
			PTR	`mail-dm5pr04cu00103.inbound.protection.outlook.com`
		A	2a01:111:f403:c92c::4^{🇺🇸 Microsoft2a01:111:f000::/36}
			PTR	`mail-dm6pr05cu00404.inbound.protection.outlook.com`
		A	2a01:111:f403:f802::1^{🇺🇸 Microsoft2a01:111:f000::/36}
			PTR	`mail-sj2pr05cu00101.inbound.protection.outlook.com`
		A	52.101.10.12^{🇺🇸 Microsoft52.96.0.0/12 MICROSOFT}
		A	52.101.10.14^{🇺🇸 Microsoft52.96.0.0/12 MICROSOFT}
		A	52.101.11.9^{🇺🇸 Microsoft52.96.0.0/12 MICROSOFT}
		A	52.101.41.28^{🇺🇸 Microsoft52.96.0.0/12 MICROSOFT}
TXT	`MS=ms74398707`
TXT	`apple-domain-verification=5MoU4n8VE1xBF8P5`
TXT	`duo_sso_verification=bhDnSO73Eu0pX5Hfl99kW4WkKfyeR1tAaf45RFFoZ0HMFysIPcven86Y...`
TXT	`google-site-verification=Oo0BA6glx9-Nup-Es62R07yK3FPiRvH7iTrr1SrP7qM`
TXT	`v=spf1 include:spf.protection.outlook.com -all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.32.178, 172.67.153.49
		IPv6 hints	2606:4700:3036::ac43:9931, 2606:4700:3037::6815:20b2
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=200, name=cloudflare-ech.com
SOA	`tim.ns.cloudflare.com`dns@cloudflare.com serial=2406945471

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1785240232

Same first word

returnonfocus.com

DNS History

18 records (7 active, 11 former)

○NShugh.ns.cloudflare.com2015-07-22 → 2016-02-26 · 4 obs

● 2015-07-22 13:23:46
● 2016-02-26 22:56:36
○ 2016-08-31 04:19:32
○ 2026-07-28 12:08:40

○NSiris.ns.cloudflare.com2015-07-22 → 2016-02-26 · 4 obs

● 2015-07-22 13:23:46
● 2016-02-26 22:56:36
○ 2016-08-31 04:19:32
○ 2026-07-28 12:08:40

○NSns.inmotionhosting.com2016-08-31 → 2017-05-14 · 5 obs

○ 2016-02-26 22:56:36
● 2016-08-31 04:19:32
● 2017-05-14 11:47:00
○ 2026-02-17 16:03:08
○ 2026-07-28 12:08:40

○NSns2.inmotionhosting.com2016-08-31 → 2017-05-14 · 5 obs

○ 2016-02-26 22:56:36
● 2016-08-31 04:19:32
● 2017-05-14 11:47:00
○ 2026-02-17 16:03:08
○ 2026-07-28 12:08:40

●NStim.ns.cloudflare.com2026-02-17 → 2026-07-28 · 3 obs

○ 2017-05-14 11:47:00
● 2026-02-17 16:03:08
● 2026-07-28 12:08:40

●NSvera.ns.cloudflare.com2026-02-17 → 2026-07-28 · 3 obs

○ 2017-05-14 11:47:00
● 2026-02-17 16:03:08
● 2026-07-28 12:08:40

○MXmx1.gothamemail.com2015-07-22 → 2017-05-14 · 4 obs

● 2015-07-22 13:23:46
● 2017-05-14 11:47:00
○ 2026-02-17 16:03:08
○ 2026-07-28 12:08:40

○MXmx2.gothamemail.com2015-07-22 → 2017-05-14 · 4 obs

● 2015-07-22 13:23:46
● 2017-05-14 11:47:00
○ 2026-02-17 16:03:08
○ 2026-07-28 12:08:40

●MXreturnonfocus-com.mail.protection.outlook.com2026-02-17 → 2026-07-28 · 3 obs

○ 2017-05-14 11:47:00
● 2026-02-17 16:03:08
● 2026-07-28 12:08:40

●A104.21.32.1782026-02-17 → 2026-07-28 · 3 obs

○ 2017-05-14 11:47:00
● 2026-02-17 16:03:08
● 2026-07-28 12:08:40

○A104.28.14.82015-07-22 → 2016-02-26 · 4 obs

● 2015-07-22 13:23:46
● 2016-02-26 22:56:36
○ 2016-08-31 04:19:32
○ 2026-07-28 12:08:40

○A104.28.15.82015-07-22 → 2016-02-26 · 4 obs

● 2015-07-22 13:23:46
● 2016-02-26 22:56:36
○ 2016-08-31 04:19:32
○ 2026-07-28 12:08:40

●A172.67.153.492026-02-17 → 2026-07-28 · 3 obs

○ 2017-05-14 11:47:00
● 2026-02-17 16:03:08
● 2026-07-28 12:08:40

○A23.235.193.552016-08-31 → 2017-05-14 · 5 obs

○ 2016-02-26 22:56:36
● 2016-08-31 04:19:32
● 2017-05-14 11:47:00
○ 2026-02-17 16:03:08
○ 2026-07-28 12:08:40

○A2606:4700:3031::6815:20b22026-02-17 → 2026-06-11 · 5 obs

○ 2017-05-14 11:47:00
● 2026-02-17 16:03:08
● 2026-06-11 13:15:16
○ 2026-06-21 22:07:10
○ 2026-07-28 12:08:40

○A2606:4700:3035::ac43:99312026-02-17 → 2026-06-11 · 5 obs

○ 2017-05-14 11:47:00
● 2026-02-17 16:03:08
● 2026-06-11 13:15:16
○ 2026-06-21 22:07:10
○ 2026-07-28 12:08:40

●A2606:4700:3036::ac43:99312026-06-21 → 2026-07-28 · 3 obs

○ 2026-06-11 13:15:16
● 2026-06-21 22:07:10
● 2026-07-28 12:08:40

●A2606:4700:3037::6815:20b22026-06-21 → 2026-07-28 · 3 obs

○ 2026-06-11 13:15:16
● 2026-06-21 22:07:10
● 2026-07-28 12:08:40

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
returnonfocus.com	tim.ns.cloudflare.com, vera.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.147

NS records: tim.ns.cloudflare.com, vera.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for returnonfocus.com (unsigned zone)

⏱️ Timing

Total: 197ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.153.49, 104.21.32.178`
AAAA	2	`2606:4700:3037::6815:20b2, 2606:4700:3036::ac43:9931`
NS	2	`tim.ns.cloudflare.com, vera.ns.cloudflare.com`
MX	1	`returnonfocus-com.mail.protection.outloo`
TXT	5	`MS=ms74398707, apple-domain-verification=5MoU4n8VE1xBF8...`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`tim.ns.cloudflare.com dns.cloudflare.com`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (tim.ns.cloudflare.com, tim.ns.cloudflare.com, tim.ns.cloudflare.com...)

Analysis

IP Addresses

returnonfocus.com directs to four IP numbers, which are 104.21.32.178, 172.67.153.49, 2606:4700:3036::ac43:9931 and 2606:4700:3037::6815:20b2.

hellys.nl, www.q.inc, tkts.land and two other host names share IP numbers with returnonfocus.com.

Name Servers

returnonfocus.com has two authoritative name servers — tim.ns.cloudflare.com and vera.ns.cloudflare.com.

returnonfocus.com uses the same name servers as several other domains — among them tusaar.com, petersonklein.com, generateur-clashroyale.com and two more.

At least some of returnonfocus.com's name servers are shared with other domains, for example jlbhost.net, pregunari.sbs, 18945289287.com and two more.

These name servers tend to be deployed in combination with the name servers adrian.ns.cloudflare.com and rita.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

tim.ns.cloudflare.com points to 108.162.193.145, 172.64.33.145, 173.245.59.145 and 3 other IP addresses.

vera.ns.cloudflare.com points to 108.162.192.147, 172.64.32.147, 173.245.58.147 and 3 other IP addresses.

Mail Servers

Mail for returnonfocus.com is handled by a single mail server, returnonfocus-com.mail.protection.outlook.com.

returnonfocus-com.mail.protection.outlook.com resolves to 8 IP addresses — 52.101.10.12, 52.101.10.14, 52.101.11.9 and 5 others.