`shadowrocket.win`

DNSSEC	🔒 Signed (DS record present)
A	104.21.22.8^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.201.176^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`chloe.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a55^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`chloe.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c055^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`chloe.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2055^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`chloe.ns.cloudflare.com`
		A	108.162.192.85^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`chloe.ns.cloudflare.com`
		A	172.64.32.85^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`chloe.ns.cloudflare.com`
		A	173.245.58.85^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`chloe.ns.cloudflare.com`
NS	`coby.ns.cloudflare.com`
		A	2606:4700:58::adf5:3b5c^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`coby.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c15c^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`coby.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:215c^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`coby.ns.cloudflare.com`
		A	108.162.193.92^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`coby.ns.cloudflare.com`
		A	172.64.33.92^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`coby.ns.cloudflare.com`
		A	173.245.59.92^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`coby.ns.cloudflare.com`
TXT	`google-site-verification=2X2bowMrMzUBjCPAVlKSjy5igylGqVYV6L3DUYfn86U`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.22.8, 172.67.201.176
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=17, name=cloudflare-ech.com
SOA	`chloe.ns.cloudflare.com`dns@cloudflare.com serial=2410921599

`win`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns1.dns.nic.win` ⭐
	NS	`a.nic.win`
	NS	`b.nic.win`
	NS	`c.nic.win`
	NS	`ns2.dns.nic.win`
	NS	`ns3.dns.nic.win`
	SOA	`ns1.dns.nic.win`admin@tldns.godaddy serial=1786382258

⚠️ On DNS blocklist: doh-vpn-proxy-bypass
⚠️ On DNS blocklist: spam-tlds

Same first word

Similar names

cathodeworks.com

DNS History

4 records (4 active, 0 former)

●NSchloe.ns.cloudflare.com2026-08-02 → 2026-08-10 · 2 obs

● 2026-08-02 04:21:38
● 2026-08-10 17:57:36

●NScoby.ns.cloudflare.com2026-08-02 → 2026-08-10 · 2 obs

● 2026-08-02 04:21:38
● 2026-08-10 17:57:36

●A104.21.22.82026-08-02 → 2026-08-10 · 2 obs

● 2026-08-02 04:21:38
● 2026-08-10 17:57:36

●A172.67.201.1762026-08-02 → 2026-08-10 · 2 obs

● 2026-08-02 04:21:38
● 2026-08-10 17:57:36

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
win	b.nic.win, ns3.dns.nic.win, a.nic.win, ns2.dns.nic.win...	12 records
shadowrocket.win	coby.ns.cloudflare.com, chloe.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.193.92

NS records: coby.ns.cloudflare.com, chloe.ns.cloudflare.com

🔒 DNSSEC Status

🔐 Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 611ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.201.176, 104.21.22.8`
NS	2	`chloe.ns.cloudflare.com, coby.ns.cloudflare.com`
TXT	1	`google-site-verification=2X2bowMrMzUBjCP`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`chloe.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (ns3.dns.nic.win, ns2.dns.nic.win, ns1.dns.nic.win...)

Analysis

IP Addresses

shadowrocket.win resolves to the IP addresses 104.21.22.8 and 172.67.201.176

covingtonscorner.com, upgaruda55.com, lelivre.com.br plus two other host names have IP numbers in common with shadowrocket.win.

Name Servers

shadowrocket.win has two authoritative name servers — chloe.ns.cloudflare.com and coby.ns.cloudflare.com.

The name server configuration of shadowrocket.win is shared with other domains, for instance remaxdeha.com, flow2api.com, intelepeer.info and two others.

shadowrocket.win partially shares its NS delegation with several other domains, including izi.hu, centralstlnews.com, ncindiananews.com and two others.

These name servers are regularly seen alongside robert.ns.cloudflare.com and jonah.ns.cloudflare.com as name servers.

Hosts with 6 IP addresses each:

chloe.ns.cloudflare.com points to 108.162.192.85, 172.64.32.85, 173.245.58.85 and 3 other IP addresses.

coby.ns.cloudflare.com points to 108.162.193.92, 172.64.33.92, 173.245.59.92 and 3 other IP addresses.

shadowrocket.win - robtex.com