`foxbuying.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::ac43:c322^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::6815:ca0^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.12.160^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.195.34^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`bella.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a4a^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bella.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c04a^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`bella.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:204a^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`bella.ns.cloudflare.com`
		A	108.162.192.74^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bella.ns.cloudflare.com`
		A	172.64.32.74^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bella.ns.cloudflare.com`
		A	173.245.58.74^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bella.ns.cloudflare.com`
NS	`nile.ns.cloudflare.com`
		A	2606:4700:58::adf5:3bd6^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nile.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1d6^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`nile.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21d6^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`nile.ns.cloudflare.com`
		A	108.162.193.214^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nile.ns.cloudflare.com`
		A	172.64.33.214^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nile.ns.cloudflare.com`
		A	173.245.59.214^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nile.ns.cloudflare.com`
MX	`mxbiz1.qq.com`⁽¹⁰⁾
TXT	`google-site-verification=IOInlb77xHjHSNnpoAlUqn28AG8agcpoOIOJ7rnCnCU`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.12.160, 172.67.195.34
		IPv6 hints	2606:4700:3030::ac43:c322, 2606:4700:3035::6815:ca0
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=109, name=cloudflare-ech.com
SOA	`bella.ns.cloudflare.com`dns@cloudflare.com serial=2401699197

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1777333181

WOT: SUSPICIOUS (6/100)

Same first word

foxbuying.com

DNS History

16 records (7 active, 9 former)

●NSbella.ns.cloudflare.com2017-03-28 → 2026-04-27 · 3 obs

○ 2016-07-19 23:43:46
● 2017-03-28 02:19:08
● 2026-04-27 23:43:22

○NSdns1.name-services.com2016-02-08 → 2016-07-19 · 4 obs

● 2016-02-08 08:51:48
● 2016-07-19 23:43:46
○ 2017-03-28 02:19:08
○ 2026-04-27 23:43:22

○NSdns2.name-services.com2016-02-08 → 2016-07-19 · 4 obs

● 2016-02-08 08:51:48
● 2016-07-19 23:43:46
○ 2017-03-28 02:19:08
○ 2026-04-27 23:43:22

○NSdns3.name-services.com2016-02-08 → 2016-07-19 · 4 obs

● 2016-02-08 08:51:48
● 2016-07-19 23:43:46
○ 2017-03-28 02:19:08
○ 2026-04-27 23:43:22

○NSdns4.name-services.com2016-02-08 → 2016-07-19 · 4 obs

● 2016-02-08 08:51:48
● 2016-07-19 23:43:46
○ 2017-03-28 02:19:08
○ 2026-04-27 23:43:22

○NSdns5.name-services.com2016-02-08 → 2016-07-19 · 4 obs

● 2016-02-08 08:51:48
● 2016-07-19 23:43:46
○ 2017-03-28 02:19:08
○ 2026-04-27 23:43:22

●NSnile.ns.cloudflare.com2017-03-28 → 2026-04-27 · 3 obs

○ 2016-07-19 23:43:46
● 2017-03-28 02:19:08
● 2026-04-27 23:43:22

●MXmxbiz1.qq.com2016-02-08 → 2026-04-27 · 2 obs

● 2016-02-08 08:51:48
● 2026-04-27 23:43:22

○MXmxbiz2.qq.com2016-02-08 → 2020-03-29 · 4 obs

● 2016-02-08 08:51:48
● 2020-03-29 08:11:56
○ 2026-04-14 04:33:26
○ 2026-04-27 23:43:22

○A104.18.58.2452017-03-28 → 2020-03-29 · 5 obs

○ 2016-07-19 23:43:46
● 2017-03-28 02:19:08
● 2020-03-29 08:11:56
○ 2026-04-14 04:33:26
○ 2026-04-27 23:43:22

○A104.18.59.2452017-03-28 → 2020-03-29 · 5 obs

○ 2016-07-19 23:43:46
● 2017-03-28 02:19:08
● 2020-03-29 08:11:56
○ 2026-04-14 04:33:26
○ 2026-04-27 23:43:22

●A104.21.12.1602026-04-14 → 2026-04-27 · 3 obs

○ 2020-03-29 08:11:56
● 2026-04-14 04:33:26
● 2026-04-27 23:43:22

●A172.67.195.342026-04-14 → 2026-04-27 · 3 obs

○ 2020-03-29 08:11:56
● 2026-04-14 04:33:26
● 2026-04-27 23:43:22

●A2606:4700:3030::ac43:c3222026-04-14 → 2026-04-27 · 3 obs

○ 2020-03-29 08:11:56
● 2026-04-14 04:33:26
● 2026-04-27 23:43:22

●A2606:4700:3035::6815:ca02026-04-14 → 2026-04-27 · 3 obs

○ 2020-03-29 08:11:56
● 2026-04-14 04:33:26
● 2026-04-27 23:43:22

○A52.33.112.922016-02-08 → 2016-07-19 · 4 obs

● 2016-02-08 08:51:48
● 2016-07-19 23:43:46
○ 2017-03-28 02:19:08
○ 2026-04-27 23:43:22

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	d.gtld-servers.net, l.gtld-servers.net, k.gtld-servers.net, f.gtld-servers.net...	-
foxbuying.com	bella.ns.cloudflare.com, nile.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.74

NS records: bella.ns.cloudflare.com, nile.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for foxbuying.com (unsigned zone)

⏱️ Timing

Total: 158ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.12.160, 172.67.195.34`
AAAA	2	`2606:4700:3035::6815:ca0, 2606:4700:3030::ac43:c322`
NS	2	`bella.ns.cloudflare.com, nile.ns.cloudflare.com`
MX	2	`mxbiz1.qq.com (pri: 10), mxbiz1.qq.com (pri: 5)`
TXT	1	`google-site-verification=IOInlb77xHjHSNn`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`bella.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (bella.ns.cloudflare.com, bella.ns.cloudflare.com, bella.ns.cloudflare.com...)

Analysis

IP Addresses

foxbuying.com maps to four IP numbers: 2606:4700:3030::ac43:c322, 2606:4700:3035::6815:ca0, 104.21.12.160 and 172.67.195.34.

Other host names, for instance haiyule.cn, www.umihra.fr, diplom-and-attestat.ru, ga-oil.com and crearmeme.com share IP numbers with foxbuying.com.

Name Servers

Two name servers bella.ns.cloudflare.com and nile.ns.cloudflare.com handle delegation for foxbuying.com.

foxbuying.com uses the same name server setup as other domains, for example siteo.com, ust-tarka.ru, grupofriotec.ind.br, scalemyecommerce.com and fx5.at.

foxbuying.com partially shares name servers with other domains; examples include 174.4.195.in-addr.arpa, electraplan.hu, skinpickingsupport.com, altgempa100i.cfd and toonzone.net.

These name servers are often used with the name servers sue.ns.cloudflare.com and sasha.ns.cloudflare.com.

Host names with six IP numbers: bella.ns.cloudflare.com points to: 2606:4700:50::adf5:3a4a, 2803:f800:50::6ca2:c04a, 2a06:98c1:50::ac40:204a, 108.162.192.74, 172.64.32.74 and 173.245.58.74; nile.ns.cloudflare.com points to: 2606:4700:58::adf5:3bd6, 2803:f800:50::6ca2:c1d6, 2a06:98c1:50::ac40:21d6, 108.162.193.214, 172.64.33.214 and 173.245.59.214.

Mail Servers

foxbuying.com is handled by a single mail server, mxbiz1.qq.com.

foxbuying.com has the same mail server setup as other domains, including fomind.com, cmsk1979.com, zhiyuanhe.cn, quba360.com and wshuttle.com.

foxbuying.com shares some mail servers with other domains, at least partially, such as bg56.cn, chaichejian.com.cn, hopescmservice.com, myiciel.com and rebornet.com.

These mail servers are often used with the mail servers mxbiz2.qq.com.

foxbuying.com - robtex.com

foxbuying.com

com

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

Mail Servers

`foxbuying.com`

`com`