malware.bagtownmiami.com - robtex.com

malware.bagtownmiami.com

DNSSEC⚠️ Not signed
A2606:4700:3032::6815:1cc8πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3037::ac43:9387πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.28.200Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.147.135πŸ‡ΊπŸ‡Έ Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.28.200, 172.67.147.135
IPv6 hints2606:4700:3032::6815:1cc8, 2606:4700:3037::ac43:9387
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=113, name=cloudflare-ech.com

bagtownmiami.com

DNSSEC⚠️ Not signed
A2606:4700:3032::6815:1cc8πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3037::ac43:9387πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.28.200Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.147.135πŸ‡ΊπŸ‡Έ Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSolof.ns.cloudflare.com ⭐
NSwalk.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.28.200, 172.67.147.135
IPv6 hints2606:4700:3032::6815:1cc8, 2606:4700:3037::ac43:9387
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=113, name=cloudflare-ech.com
SOAolof.ns.cloudflare.comdns@cloudflare.com serial=2409061853
⚠️ On DNS blocklist: tif

Same first word

Similar names

DNS History

8 records (4 active, 4 former)

A104.21.28.200172.67.147.1352606:4700:3032::6815:1cc82606:4700:3037::ac43:9387188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●A104.21.28.2002026-08-08 β†’ 2026-08-08 Β· 2 obs
β—‹ 2026-07-25 12:15:16
● 2026-08-08 15:59:24
●A172.67.147.1352026-08-08 β†’ 2026-08-08 Β· 2 obs
β—‹ 2026-07-25 12:15:16
● 2026-08-08 15:59:24
β—‹A188.114.96.02026-07-25 β†’ 2026-07-25 Β· 2 obs
● 2026-07-25 12:15:16
β—‹ 2026-08-08 15:59:24
β—‹A188.114.97.02026-07-25 β†’ 2026-07-25 Β· 2 obs
● 2026-07-25 12:15:16
β—‹ 2026-08-08 15:59:24
●A2606:4700:3032::6815:1cc82026-08-08 β†’ 2026-08-08 Β· 2 obs
β—‹ 2026-07-25 12:15:16
● 2026-08-08 15:59:24
●A2606:4700:3037::ac43:93872026-08-08 β†’ 2026-08-08 Β· 2 obs
β—‹ 2026-07-25 12:15:16
● 2026-08-08 15:59:24
β—‹A2a06:98c1:3120::2026-07-25 β†’ 2026-07-25 Β· 2 obs
● 2026-07-25 12:15:16
β—‹ 2026-08-08 15:59:24
β—‹A2a06:98c1:3121::2026-07-25 β†’ 2026-07-25 Β· 2 obs
● 2026-07-25 12:15:16
β—‹ 2026-08-08 15:59:24

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
coma.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...-
bagtownmiami.comwalk.ns.cloudflare.com, olof.ns.cloudflare.com12 records

βœ… Authoritative Response

Server:108.162.194.128

NS records: walk.ns.cloudflare.com, olof.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for bagtownmiami.com (unsigned zone)

⏱️ Timing

Total: 652ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.147.135, 104.21.28.200
AAAA22606:4700:3032::6815:1cc8, 2606:4700:3037::ac43:9387
HTTPS1{"priority":1,"target":".","alpn":["h3",

πŸ“Œ Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (walk.ns.cloudflare.com, walk.ns.cloudflare.com, walk.ns.cloudflare.com...)

Analysis

IP Addresses

malware.bagtownmiami.com resolves to four IP addresses: 104.21.28.200, 172.67.147.135, 2606:4700:3032::6815:1cc8 and 2606:4700:3037::ac43:9387.

Additional host names β€” 982bet14.com, woonro.com, db02.ilist.co and two others β€” share IP numbers with malware.bagtownmiami.com.