`groupbuy1.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::ac43:cea2^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::6815:16bd^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.22.189^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.206.162^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`eva.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a72^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`eva.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c072^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`eva.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2072^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`eva.ns.cloudflare.com`
		A	108.162.192.114^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`eva.ns.cloudflare.com`
		A	172.64.32.114^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`eva.ns.cloudflare.com`
		A	173.245.58.114^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`eva.ns.cloudflare.com`
NS	`maciej.ns.cloudflare.com`
		A	2606:4700:58::a29f:2c2a^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`maciej.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c32a^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`maciej.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:232a^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`maciej.ns.cloudflare.com`
		A	108.162.195.42^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`maciej.ns.cloudflare.com`
		A	162.159.44.42^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`maciej.ns.cloudflare.com`
		A	172.64.35.42^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`maciej.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.22.189, 172.67.206.162
		IPv6 hints	2606:4700:3032::ac43:cea2, 2606:4700:3037::6815:16bd
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=159, name=cloudflare-ech.com
SOA	`eva.ns.cloudflare.com`dns@cloudflare.com serial=2403660174

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1778470891

Same first word

groupbuy1.com

DNS History

15 records (6 active, 9 former)

●NSeva.ns.cloudflare.com2026-03-13 → 2026-05-11 · 3 obs

○ 2017-05-25 10:11:36
● 2026-03-13 01:44:42
● 2026-05-11 04:01:10

●NSmaciej.ns.cloudflare.com2026-03-13 → 2026-05-11 · 3 obs

○ 2017-05-25 10:11:36
● 2026-03-13 01:44:42
● 2026-05-11 04:01:10

○NSns33.domaincontrol.com2017-05-25 → 2017-05-25 · 3 obs

● 2017-05-25 10:11:36
○ 2026-03-13 01:44:42
○ 2026-05-11 04:01:10

○NSns34.domaincontrol.com2017-05-25 → 2017-05-25 · 3 obs

● 2017-05-25 10:11:36
○ 2026-03-13 01:44:42
○ 2026-05-11 04:01:10

○MXmailstore1.secureserver.net2017-05-25 → 2017-05-25 · 3 obs

● 2017-05-25 10:11:36
○ 2026-03-13 01:44:42
○ 2026-05-11 04:01:10

○MXsmtp.secureserver.net2017-05-25 → 2017-05-25 · 3 obs

● 2017-05-25 10:11:36
○ 2026-03-13 01:44:42
○ 2026-05-11 04:01:10

●A104.21.22.1892026-03-13 → 2026-05-11 · 7 obs

○ 2017-05-25 10:11:36
● 2026-03-13 01:44:42
● 2026-04-07 06:43:16
○ 2026-04-22 08:40:56
○ 2026-04-25 15:59:26
● 2026-05-03 01:25:12
● 2026-05-11 04:01:10

●A172.67.206.1622026-03-13 → 2026-05-11 · 7 obs

○ 2017-05-25 10:11:36
● 2026-03-13 01:44:42
● 2026-04-07 06:43:16
○ 2026-04-22 08:40:56
○ 2026-04-25 15:59:26
● 2026-05-03 01:25:12
● 2026-05-11 04:01:10

○A188.114.96.02026-04-22 → 2026-04-25 · 5 obs

○ 2026-04-07 06:43:16
● 2026-04-22 08:40:56
● 2026-04-25 15:59:26
○ 2026-05-03 01:25:12
○ 2026-05-11 04:01:10

○A188.114.97.02026-04-22 → 2026-04-25 · 5 obs

○ 2026-04-07 06:43:16
● 2026-04-22 08:40:56
● 2026-04-25 15:59:26
○ 2026-05-03 01:25:12
○ 2026-05-11 04:01:10

●A2606:4700:3032::ac43:cea22026-03-13 → 2026-05-11 · 7 obs

○ 2017-05-25 10:11:36
● 2026-03-13 01:44:42
● 2026-04-07 06:43:16
○ 2026-04-22 08:40:56
○ 2026-04-25 15:59:26
● 2026-05-03 01:25:12
● 2026-05-11 04:01:10

●A2606:4700:3037::6815:16bd2026-03-13 → 2026-05-11 · 7 obs

○ 2017-05-25 10:11:36
● 2026-03-13 01:44:42
● 2026-04-07 06:43:16
○ 2026-04-22 08:40:56
○ 2026-04-25 15:59:26
● 2026-05-03 01:25:12
● 2026-05-11 04:01:10

○A2a06:98c1:3120::2026-04-22 → 2026-04-25 · 5 obs

○ 2026-04-07 06:43:16
● 2026-04-22 08:40:56
● 2026-04-25 15:59:26
○ 2026-05-03 01:25:12
○ 2026-05-11 04:01:10

○A2a06:98c1:3121::2026-04-22 → 2026-04-25 · 5 obs

○ 2026-04-07 06:43:16
● 2026-04-22 08:40:56
● 2026-04-25 15:59:26
○ 2026-05-03 01:25:12
○ 2026-05-11 04:01:10

○A50.63.202.322017-05-25 → 2017-05-25 · 3 obs

● 2017-05-25 10:11:36
○ 2026-03-13 01:44:42
○ 2026-05-11 04:01:10

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	l.gtld-servers.net, j.gtld-servers.net, h.gtld-servers.net, d.gtld-servers.net...	-
groupbuy1.com	eva.ns.cloudflare.com, maciej.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.114

NS records: eva.ns.cloudflare.com, maciej.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for groupbuy1.com (unsigned zone)

⏱️ Timing

Total: 183ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.22.189, 172.67.206.162`
AAAA	2	`2606:4700:3032::ac43:cea2, 2606:4700:3037::6815:16bd`
NS	2	`eva.ns.cloudflare.com, maciej.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`eva.ns.cloudflare.com dns.cloudflare.com`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (eva.ns.cloudflare.com, eva.ns.cloudflare.com, eva.ns.cloudflare.com...)

Analysis

IP Addresses

groupbuy1.com maps to four IP numbers: 2606:4700:3032::ac43:cea2, 2606:4700:3037::6815:16bd, 104.21.22.189 and 172.67.206.162.

other host names include moumentec.com, hagigim.net, www.eymenyapimarket.com, cloudsignage.my and bdww.com.cn; they share IP numbers with groupbuy1.com.

Name Servers

Two name servers eva.ns.cloudflare.com and maciej.ns.cloudflare.com handle the delegation for groupbuy1.com.

groupbuy1.com shares the same name server setup as other domains, for instance id8233.com, blackforest-reservconfrm.com, confirmation-id73253.com, confirmation-id90173.com and update-info8764423.com.

groupbuy1.com at least partially shares name servers with other domains, for instance communitycliq.com, realtyprometrodenver.com, afvags.ru, uadentist.com and 72242g.com.

These name servers are commonly used with eve.ns.cloudflare.com and sreeni.ns.cloudflare.com.

Six IP addresses per host:

eva.ns.cloudflare.com points to 2606:4700:50::adf5:3a72, 2803:f800:50::6ca2:c072, 2a06:98c1:50::ac40:2072, 108.162.192.114, 172.64.32.114 and 173.245.58.114; maciej.ns.cloudflare.com points to 2606:4700:58::a29f:2c2a, 2803:f800:50::6ca2:c32a, 2a06:98c1:50::ac40:232a, 108.162.195.42, 162.159.44.42 and 172.64.35.42

groupbuy1.com - robtex.com

groupbuy1.com

com

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

`groupbuy1.com`

`com`