`shadowrocket.buzz`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::ac43:a0b6^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::6815:2158^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.33.88^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.160.182^{🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`jeff.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b7c^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jeff.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c17c^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`jeff.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:217c^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`jeff.ns.cloudflare.com`
		A	108.162.193.124^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jeff.ns.cloudflare.com`
		A	172.64.33.124^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jeff.ns.cloudflare.com`
		A	173.245.59.124^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jeff.ns.cloudflare.com`
NS	`saanvi.ns.cloudflare.com`
		A	2606:4700:50::a29f:2650^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`saanvi.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c250^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`saanvi.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2250^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`saanvi.ns.cloudflare.com`
		A	108.162.194.80^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`saanvi.ns.cloudflare.com`
		A	162.159.38.80^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`saanvi.ns.cloudflare.com`
		A	172.64.34.80^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`saanvi.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.33.88, 172.67.160.182
		IPv6 hints	2606:4700:3031::ac43:a0b6, 2606:4700:3035::6815:2158
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=103, name=cloudflare-ech.com
SOA	`jeff.ns.cloudflare.com`dns@cloudflare.com serial=2411748755

`buzz`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns1.dns.nic.buzz` ⭐
	NS	`a.nic.buzz`
	NS	`b.nic.buzz`
	NS	`c.nic.buzz`
	NS	`ns2.dns.nic.buzz`
	NS	`ns3.dns.nic.buzz`
	SOA	`ns1.dns.nic.buzz`admin@tldns.godaddy serial=1786440244

⚠️ On DNS blocklist: doh-vpn-proxy-bypass
⚠️ On DNS blocklist: spam-tlds

Same first word

Similar names

cathodeworks.com

DNS History

10 records (6 active, 4 former)

●NSjeff.ns.cloudflare.com2026-08-01 → 2026-08-11 · 2 obs

● 2026-08-01 22:43:20
● 2026-08-11 09:33:02

●NSsaanvi.ns.cloudflare.com2026-08-01 → 2026-08-11 · 2 obs

● 2026-08-01 22:43:20
● 2026-08-11 09:33:02

●A104.21.33.882026-08-05 → 2026-08-11 · 3 obs

○ 2026-08-01 22:43:20
● 2026-08-05 07:59:38
● 2026-08-11 09:33:02

●A172.67.160.1822026-08-05 → 2026-08-11 · 3 obs

○ 2026-08-01 22:43:20
● 2026-08-05 07:59:38
● 2026-08-11 09:33:02

○A188.114.96.02026-08-01 → 2026-08-01 · 3 obs

● 2026-08-01 22:43:20
○ 2026-08-05 07:59:38
○ 2026-08-11 09:33:02

○A188.114.97.02026-08-01 → 2026-08-01 · 3 obs

● 2026-08-01 22:43:20
○ 2026-08-05 07:59:38
○ 2026-08-11 09:33:02

●A2606:4700:3031::ac43:a0b62026-08-05 → 2026-08-11 · 3 obs

○ 2026-08-01 22:43:20
● 2026-08-05 07:59:38
● 2026-08-11 09:33:02

●A2606:4700:3035::6815:21582026-08-05 → 2026-08-11 · 3 obs

○ 2026-08-01 22:43:20
● 2026-08-05 07:59:38
● 2026-08-11 09:33:02

○A2a06:98c1:3120::42026-08-01 → 2026-08-01 · 3 obs

● 2026-08-01 22:43:20
○ 2026-08-05 07:59:38
○ 2026-08-11 09:33:02

○A2a06:98c1:3121::42026-08-01 → 2026-08-01 · 3 obs

● 2026-08-01 22:43:20
○ 2026-08-05 07:59:38
○ 2026-08-11 09:33:02

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
buzz	a.nic.buzz, b.nic.buzz, c.nic.buzz, ns1.dns.nic.buzz...	12 records
shadowrocket.buzz	jeff.ns.cloudflare.com, saanvi.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.34.80

NS records: jeff.ns.cloudflare.com, saanvi.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for shadowrocket.buzz (unsigned zone)

⏱️ Timing

Total: 377ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.160.182, 104.21.33.88`
AAAA	2	`2606:4700:3035::6815:2158, 2606:4700:3031::ac43:a0b6`
NS	2	`jeff.ns.cloudflare.com, saanvi.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`jeff.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (a.nic.buzz, a.nic.buzz, b.nic.buzz...)

Analysis

IP Addresses

shadowrocket.buzz points to the four IP addresses 104.21.33.88, 172.67.160.182, 2606:4700:3031::ac43:a0b6 and 2606:4700:3035::6815:2158.

Two other host names, along with worknet.gov.ge, draxeviontur.sbs and kletsmee.nl, also share IP numbers with shadowrocket.buzz.

Name Servers

shadowrocket.buzz is served by two delegated name servers, jeff.ns.cloudflare.com and saanvi.ns.cloudflare.com.

shadowrocket.buzz shares its NS records with other domains, for example letsvpn.lat, 2brosgroup.co.tz, campaigncircus.com and two others.

There is at least partial name server overlap between shadowrocket.buzz and other domains — fickheute.com, brandsbery.ru, casino13et.com and two more among them.

These name servers are routinely deployed together with the name servers fay.ns.cloudflare.com.

DNS names with 6 IP addresses:

jeff.ns.cloudflare.com carries IP addresses 108.162.193.124, 172.64.33.124 and 173.245.59.124, with 3 other addresses beyond those.

saanvi.ns.cloudflare.com carries IP addresses 108.162.194.80, 162.159.38.80 and 172.64.34.80, with 3 other addresses beyond those.

shadowrocket.buzz - robtex.com