coronabuyback.com - robtex.com

coronabuyback.com

DNSSEC⚠️ Not signed
A2606:4700:3032::6815:42c5🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3032::ac43:a41d🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.66.197Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.164.29🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSnikon.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2cb0🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnikon.ns.cloudflare.com
A2803:f800:50::6ca2:c3b0🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRnikon.ns.cloudflare.com
A2a06:98c1:50::ac40:23b0🇺🇸 Cloudflare2a06:98c1:50::/45
PTRnikon.ns.cloudflare.com
A108.162.195.176🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnikon.ns.cloudflare.com
A162.159.44.176Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnikon.ns.cloudflare.com
A172.64.35.176🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnikon.ns.cloudflare.com
NSrayne.ns.cloudflare.com
A2606:4700:50::a29f:260b🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrayne.ns.cloudflare.com
A2803:f800:50::6ca2:c20b🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRrayne.ns.cloudflare.com
A2a06:98c1:50::ac40:220b🇺🇸 Cloudflare2a06:98c1:50::/45
PTRrayne.ns.cloudflare.com
A108.162.194.11🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrayne.ns.cloudflare.com
A162.159.38.11Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrayne.ns.cloudflare.com
A172.64.34.11🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrayne.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.66.197, 172.67.164.29
IPv6 hints2606:4700:3032::6815:42c5, 2606:4700:3032::ac43:a41d
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=1, name=cloudflare-ech.com
SOAnikon.ns.cloudflare.comdns@cloudflare.com serial=2402163716

com

DNSSEC🔒 Signed (DS record present)
NSa.gtld-servers.net ⭐
NSb.gtld-servers.net
NSc.gtld-servers.net
NSd.gtld-servers.net
NSe.gtld-servers.net
NSf.gtld-servers.net
NSg.gtld-servers.net
NSh.gtld-servers.net
NSi.gtld-servers.net
NSj.gtld-servers.net
NSk.gtld-servers.net
NSl.gtld-servers.net
NSm.gtld-servers.net
SOAa.gtld-servers.netnstld@verisign-grs.com serial=1778555591
⚠️ On DNS blocklist: tif

Same first word

coronabuyback.com

DNS History

9 records (6 active, 3 former)

202120222023202420252026NSnikon.ns.cloudflare.comrayne.ns.cloudflare.compdns07.domaincontrol.compdns08.domaincontrol.comA104.21.66.197172.67.164.292606:4700:3032::6815:42c52606:4700:3032::ac43:a41d184.168.221.62
●NSnikon.ns.cloudflare.com2026-04-29 → 2026-05-12 · 3 obs
○ 2020-04-02 09:16:02
● 2026-04-29 06:55:26
● 2026-05-12 03:16:02
○NSpdns07.domaincontrol.com2020-04-02 → 2020-04-02 · 3 obs
● 2020-04-02 09:16:02
○ 2026-04-29 06:55:26
○ 2026-05-12 03:16:02
○NSpdns08.domaincontrol.com2020-04-02 → 2020-04-02 · 3 obs
● 2020-04-02 09:16:02
○ 2026-04-29 06:55:26
○ 2026-05-12 03:16:02
●NSrayne.ns.cloudflare.com2026-04-29 → 2026-05-12 · 3 obs
○ 2020-04-02 09:16:02
● 2026-04-29 06:55:26
● 2026-05-12 03:16:02
●A104.21.66.1972026-04-29 → 2026-05-12 · 3 obs
○ 2020-04-02 09:16:02
● 2026-04-29 06:55:26
● 2026-05-12 03:16:02
●A172.67.164.292026-04-29 → 2026-05-12 · 3 obs
○ 2020-04-02 09:16:02
● 2026-04-29 06:55:26
● 2026-05-12 03:16:02
○A184.168.221.622020-04-02 → 2020-04-02 · 3 obs
● 2020-04-02 09:16:02
○ 2026-04-29 06:55:26
○ 2026-05-12 03:16:02
●A2606:4700:3032::6815:42c52026-04-29 → 2026-05-12 · 3 obs
○ 2020-04-02 09:16:02
● 2026-04-29 06:55:26
● 2026-05-12 03:16:02
●A2606:4700:3032::ac43:a41d2026-04-29 → 2026-05-12 · 3 obs
○ 2020-04-02 09:16:02
● 2026-04-29 06:55:26
● 2026-05-12 03:16:02

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
coml.gtld-servers.net, j.gtld-servers.net, h.gtld-servers.net, d.gtld-servers.net...-
coronabuyback.comrayne.ns.cloudflare.com, nikon.ns.cloudflare.com12 records

✅ Authoritative Response

Server:108.162.195.176

NS records: rayne.ns.cloudflare.com, nikon.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for coronabuyback.com (unsigned zone)

⏱️ Timing

Total: 87ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.164.29, 104.21.66.197
AAAA22606:4700:3032::6815:42c5, 2606:4700:3032::ac43:a41d
NS2nikon.ns.cloudflare.com, rayne.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1nikon.ns.cloudflare.com dns.cloudflare.c

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (rayne.ns.cloudflare.com, rayne.ns.cloudflare.com, rayne.ns.cloudflare.com...)

Analysis

IP Addresses

coronabuyback.com maps to four IP numbers: 2606:4700:3032::6815:42c5, 2606:4700:3032::ac43:a41d, 104.21.66.197 and 172.67.164.29.

Other host names such as tailwaggin.ca, star12.org, hzhyty.com, git33share.mom and helloquasar.fr share IPs with coronabuyback.com.

Name Servers

Two name servers nikon.ns.cloudflare.com and rayne.ns.cloudflare.com handle the delegation for coronabuyback.com.

coronabuyback.com shares the same name server setup as other domains, for example daydeuce.com, ink-on-the-web.com, 2000km.com, e76543.com and diuy.cn.

coronabuyback.com at least partially shares name servers with other domains, for example traffix.es, strategieroulette.de, bi2r.com, debres.org and gruenweg.de.

These name servers are often used with cris.ns.cloudflare.com, ada.ns.cloudflare.com, damiete.ns.cloudflare.com, jermaine.ns.cloudflare.com and kareem.ns.cloudflare.com.

Host names with six IP numbers:

nikon.ns.cloudflare.com points to 2606:4700:58::a29f:2cb0, 2803:f800:50::6ca2:c3b0, 2a06:98c1:50::ac40:23b0, 108.162.195.176, 162.159.44.176 and 172.64.35.176.

rayne.ns.cloudflare.com points to 2606:4700:50::a29f:260b, 2803:f800:50::6ca2:c20b, 2a06:98c1:50::ac40:220b, 108.162.194.11, 162.159.38.11 and 172.64.34.11.