buff.dev - dns.ninja

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

buff.dev

DNSSEC⚠️ Not signed
A2600:9000:a413:2068:7cac:af4e:cf97:8818πŸ‡ΊπŸ‡Έ Amazon2600:9000:a400::/43
PTRad335c4aa70861008.dualstack.awsglobalaccelerator.com
A3.33.224.147πŸ‡ΊπŸ‡Έ Amazon3.33.224.0/20
NSns1.aftermarket.com ⭐
A2600:1f16:529:db01::53πŸ‡ΊπŸ‡Έ Amazon2600:1f16:400::/38 AMAZON AWS
A3.141.121.8πŸ‡ΊπŸ‡Έ Amazon3.136.0.0/13 EC2 CMH prefix
PTRns1.aftermarket.com
NSns2.aftermarket.com
A2600:1f16:529:db00::53πŸ‡ΊπŸ‡Έ Amazon2600:1f16:400::/38 AMAZON AWS
A3.15.73.134πŸ‡ΊπŸ‡Έ Amazon3.14.0.0/15 EC2 CMH prefix
PTRns2.aftermarket.com
MXmx1.simplelogin.co ⭐
A176.119.200.136πŸ‡¨πŸ‡­ Proton176.119.200.0/24
PTRmx1.simplelogin.co
PTRmx2.simplelogin.co
A185.205.70.136πŸ‡«πŸ‡· Proton185.205.70.0/24
PTRmx1.simplelogin.co
PTRmx2.simplelogin.co
MXmx2.simplelogin.co(5)
A176.119.200.136πŸ‡¨πŸ‡­ Proton176.119.200.0/24
PTRmx1.simplelogin.co
PTRmx2.simplelogin.co
A185.205.70.136πŸ‡«πŸ‡· Proton185.205.70.0/24
PTRmx1.simplelogin.co
PTRmx2.simplelogin.co
TXT38528a2e91f7e340aea4b4d1b1213a870c081ed6
TXTb1198016f11f430d90bc203138862a91
TXT29f4cd4b7d6e460d84c74ae48fd24d84
TXTaftermarket-verification=cURAUA==
TXT37a35edbe5b525922f98ea969ce27af0abe0088b
TXT9b291e26-36b4-4798-8c54-b3eee39b08b8
TXTv=spf1 include:simplelogin.co ~all
TXTsl-verification=
TXTafternic-verification-2YE7qnRyyzDRdUip7SmukM
SOAns1.aftermarket.comsupport@aftermarket.com 2026-11-12 #1

dev

DNSSEC⚠️ Not signed
NSns-tld1.charlestonroadregistry.com ⭐
NSns-tld2.charlestonroadregistry.com
NSns-tld3.charlestonroadregistry.com
NSns-tld4.charlestonroadregistry.com
NSns-tld5.charlestonroadregistry.com
SOAns-tld1.charlestonroadregistry.comcloud-dns-hostmaster@google.com serial=1
πŸ”’ HSTS Preload (+subdomains)

Same first word

Similar names

Previous names

Next names

DNS History

6 records (6 active, 0 former)

NSns1.aftermarket.comns2.aftermarket.comMXmx1.simplelogin.comx2.simplelogin.coA2600:9000:a413:2068:7cac:af4e:cf97:88183.33.224.147
●NSns1.aftermarket.com2026-09-10 β†’ 2026-11-15 Β· 2 obs
● 2026-09-10 05:35:30
● 2026-11-15 15:27:42
●NSns2.aftermarket.com2026-09-10 β†’ 2026-11-15 Β· 2 obs
● 2026-09-10 05:35:30
● 2026-11-15 15:27:42
●MXmx1.simplelogin.co2026-09-10 β†’ 2026-11-15 Β· 4 obs
● 2026-09-10 05:35:30
β—‹ 2026-09-10 09:25:20
● 2026-09-10 18:22:24
● 2026-11-15 15:27:42
●MXmx2.simplelogin.co2026-09-10 β†’ 2026-11-15 Β· 4 obs
● 2026-09-10 05:35:30
β—‹ 2026-09-10 09:25:20
● 2026-09-10 18:22:24
● 2026-11-15 15:27:42
●A2600:9000:a413:2068:7cac:af4e:cf97:88182026-09-10 β†’ 2026-11-15 Β· 4 obs
● 2026-09-10 05:35:30
β—‹ 2026-09-10 09:25:20
● 2026-09-10 18:22:24
● 2026-11-15 15:27:42
●A3.33.224.1472026-09-10 β†’ 2026-11-15 Β· 4 obs
● 2026-09-10 05:35:30
β—‹ 2026-09-10 09:25:20
● 2026-09-10 18:22:24
● 2026-11-15 15:27:42

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
devns-tld5.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld1.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com...-
buff.devns2.aftermarket.com, ns1.aftermarket.com-

βœ… Authoritative Response

Server:3.15.73.134

NS records: ns2.aftermarket.com, ns1.aftermarket.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for buff.dev (unsigned zone)

⏱️ Timing

Total: 591ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A13.33.224.147
AAAA12600:9000:a413:2068:7cac:af4e:cf97:8818
NS2ns1.aftermarket.com, ns2.aftermarket.com
MX2mx1.simplelogin.co (pri: 1), mx2.simplelogin.co (pri: 5)
TXT9sl-verification=, 9b291e26-36b4-4798-8c54-b3eee39b08b8...
SOA1ns1.aftermarket.com support.aftermarket.

Analysis

IP Addresses

buff.dev has two IP addresses: 3.33.224.147 and 2600:9000:a413:2068:7cac:af4e:cf97:8818

medea.app, restos.be, justbeing.co.uk plus two other host names have IP numbers in common with buff.dev.

Name Servers

DNS delegation for buff.dev points to two name servers: ns1.aftermarket.com and ns2.aftermarket.com.

The name server configuration of buff.dev is shared with other domains, for instance 3355.bet, 3131.bet, bigbuild.uk and two others.

At least some of buff.dev's name servers are shared with other domains, for example textpay.uk, plumbmedic.co.uk, superslots.uk and two more.

These name servers are often deployed together with the name servers ns1.domain.io, ns2.domain.io, ns1.afternic.com and ns2.afternic.com.

ns1.aftermarket.com directs to 3.141.121.8 and 2600:1f16:529:db01::53. ns2.aftermarket.com directs to 3.15.73.134 and 2600:1f16:529:db00::53. Each host name carries two IP addresses.

Mail Servers

buff.dev uses two mail servers, mx1.simplelogin.co and mx2.simplelogin.co.

The mail server setup of buff.dev matches that of other domains such as slovin.us, keyatomcute.com, karniks.in and two others.

buff.dev overlaps on mail servers with certain other domains, pameia.me among them.

mx1.simplelogin.co resolves to 176.119.200.136 and 185.205.70.136; mx2.simplelogin.co resolves to the same two IP addresses: 176.119.200.136 and 185.205.70.136.

Host names pointing to 176.119.200.136 IP addresses: mx1.simplelogin.co and mx2.simplelogin.co.

Host names pointing to 185.205.70.136 IP addresses: mx1.simplelogin.co and mx2.simplelogin.co.