buff.dev - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

buff.dev

DNSSEC⚠️ Not signed
A2600:9000:a413:2068:7cac:af4e:cf97:8818πŸ‡ΊπŸ‡Έ Amazon2600:9000:a400::/43
PTRad335c4aa70861008.dualstack.awsglobalaccelerator.com
A3.33.224.147πŸ‡ΊπŸ‡Έ Amazon3.33.224.0/20
NSns1.aftermarket.com ⭐
A2600:1f16:529:db01::53πŸ‡ΊπŸ‡Έ Amazon2600:1f16:400::/38 AMAZON AWS
A3.141.121.8πŸ‡ΊπŸ‡Έ Amazon3.136.0.0/13 EC2 CMH prefix
PTRns1.aftermarket.com
NSns2.aftermarket.com
A2600:1f16:529:db00::53πŸ‡ΊπŸ‡Έ Amazon2600:1f16:400::/38 AMAZON AWS
A3.15.73.134πŸ‡ΊπŸ‡Έ Amazon3.14.0.0/15 EC2 CMH prefix
PTRns2.aftermarket.com
MXmx1.simplelogin.co ⭐
A176.119.200.136πŸ‡¨πŸ‡­ Proton176.119.200.0/24
PTRmx1.simplelogin.co
PTRmx2.simplelogin.co
A185.205.70.136πŸ‡«πŸ‡· Proton185.205.70.0/24
PTRmx1.simplelogin.co
PTRmx2.simplelogin.co
MXmx2.simplelogin.co(5)
A176.119.200.136πŸ‡¨πŸ‡­ Proton176.119.200.0/24
PTRmx1.simplelogin.co
PTRmx2.simplelogin.co
A185.205.70.136πŸ‡«πŸ‡· Proton185.205.70.0/24
PTRmx1.simplelogin.co
PTRmx2.simplelogin.co
TXTv=spf1 include:simplelogin.co ~all
TXT9b291e26-36b4-4798-8c54-b3eee39b08b8
TXTafternic-verification-2YE7qnRyyzDRdUip7SmukM
TXT29f4cd4b7d6e460d84c74ae48fd24d84
TXTsl-verification=
TXT38528a2e91f7e340aea4b4d1b1213a870c081ed6
TXT37a35edbe5b525922f98ea969ce27af0abe0088b
TXTb1198016f11f430d90bc203138862a91
TXTaftermarket-verification=cURAUA==
SOAns1.aftermarket.comsupport@aftermarket.com 2026-09-10 #1

dev

DNSSECπŸ”’ Signed (DS record present)
NSns-tld1.charlestonroadregistry.com ⭐
NSns-tld2.charlestonroadregistry.com
NSns-tld3.charlestonroadregistry.com
NSns-tld4.charlestonroadregistry.com
NSns-tld5.charlestonroadregistry.com
SOAns-tld1.charlestonroadregistry.comcloud-dns-hostmaster@google.com serial=1
πŸ”’ HSTS Preload (+subdomains)

Same first word

Similar names

Previous names

Next names

DNS History

6 records (6 active, 0 former)

NSns1.aftermarket.comns2.aftermarket.comMXmx1.simplelogin.comx2.simplelogin.coA2600:9000:a413:2068:7cac:af4e:cf97:88183.33.224.147
●NSns1.aftermarket.com2026-09-10 β†’ 2026-09-11 Β· 2 obs
● 2026-09-10 05:35:30
● 2026-09-11 05:38:14
●NSns2.aftermarket.com2026-09-10 β†’ 2026-09-11 Β· 2 obs
● 2026-09-10 05:35:30
● 2026-09-11 05:38:14
●MXmx1.simplelogin.co2026-09-10 β†’ 2026-09-11 Β· 4 obs
● 2026-09-10 05:35:30
β—‹ 2026-09-10 09:25:20
● 2026-09-10 18:22:24
● 2026-09-11 05:38:14
●MXmx2.simplelogin.co2026-09-10 β†’ 2026-09-11 Β· 4 obs
● 2026-09-10 05:35:30
β—‹ 2026-09-10 09:25:20
● 2026-09-10 18:22:24
● 2026-09-11 05:38:14
●A2600:9000:a413:2068:7cac:af4e:cf97:88182026-09-10 β†’ 2026-09-11 Β· 4 obs
● 2026-09-10 05:35:30
β—‹ 2026-09-10 09:25:20
● 2026-09-10 18:22:24
● 2026-09-11 05:38:14
●A3.33.224.1472026-09-10 β†’ 2026-09-11 Β· 4 obs
● 2026-09-10 05:35:30
β—‹ 2026-09-10 09:25:20
● 2026-09-10 18:22:24
● 2026-09-11 05:38:14

πŸ” DNS Trace

Analysis

IP Addresses

buff.dev resolves to the IP addresses 3.33.224.147 and 2600:9000:a413:2068:7cac:af4e:cf97:8818

restos.be, hipverse.com, nugo.app plus two other host names have IP numbers in common with buff.dev.

Name Servers

buff.dev is served by two delegated name servers, ns1.aftermarket.com and ns2.aftermarket.com.

The name server configuration of buff.dev is shared with other domains, for instance 3355.bet, 3131.bet, bigbuild.uk and two others.

buff.dev partially shares its NS delegation with several other domains, including textpay.uk, plumbmedic.co.uk, superslots.uk and two others.

The name servers ns1.domain.io, ns2.domain.io, ns1.afternic.com and ns2.afternic.com are often found in use alongside these name servers.

Each of the two host names carries two IP addresses: ns1.aftermarket.com points to 3.141.121.8 and 2600:1f16:529:db01::53, and ns2.aftermarket.com points to 3.15.73.134 and 2600:1f16:529:db00::53.

Mail Servers

buff.dev uses two mail servers, mx1.simplelogin.co and mx2.simplelogin.co.

The mail server setup of buff.dev matches that of other domains such as slovin.us, keyatomcute.com, karniks.in and two others.

At least a portion of buff.dev's mail servers are also used by other domains, for example pameia.me.

The host names mx1.simplelogin.co and mx2.simplelogin.co both direct to 176.119.200.136 and 185.205.70.136.

These two host names β€” mx1.simplelogin.co and mx2.simplelogin.co β€” each point to 176.119.200.136 IP addresses.

These two host names β€” mx1.simplelogin.co and mx2.simplelogin.co β€” each point to 185.205.70.136 IP addresses.