`bundlepayment.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::6815:a83^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3033::ac43:837a^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.10.131^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.131.122^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`hal.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3bae^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`hal.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1ae^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`hal.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21ae^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`hal.ns.cloudflare.com`
		A	108.162.193.174^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`hal.ns.cloudflare.com`
		A	172.64.33.174^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`hal.ns.cloudflare.com`
		A	173.245.59.174^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`hal.ns.cloudflare.com`
NS	`margot.ns.cloudflare.com`
		A	2606:4700:50::a29f:26a7^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`margot.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c2a7^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`margot.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:22a7^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`margot.ns.cloudflare.com`
		A	108.162.194.167^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`margot.ns.cloudflare.com`
		A	162.159.38.167^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`margot.ns.cloudflare.com`
		A	172.64.34.167^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`margot.ns.cloudflare.com`
MX	`mx1.improvmx.com` ⭐
		A	2a05:d012:412:e201:88aa:e7b9:7a43:12d7^{🇫🇷 Amazon2a05:d012:400::/38 AMAZON AWS}
		A	2a05:d012:412:e202:f36:2c1f:1a49:d38a^{🇫🇷 Amazon2a05:d012:400::/38 AMAZON AWS}
		A	2a05:d012:412:e203:373a:f51a:4a85:1d25^{🇫🇷 Amazon2a05:d012:400::/38 AMAZON AWS}
		A	13.37.195.136^{🇫🇷 Amazon13.36.0.0/14 EC2 CDG Prefix}
			PTR	`ec2-13-37-195-136.eu-west-3.compute.amazonaws.com`
		A	15.236.236.160^{🇫🇷 Amazon15.236.0.0/15 EC2 CDG prefix}
			PTR	`ec2-15-236-236-160.eu-west-3.compute.amazonaws.com`
		A	35.181.18.45^{🇫🇷 Amazon35.181.0.0/16 EC2 CDG prefix}
			PTR	`ec2-35-181-18-45.eu-west-3.compute.amazonaws.com`
MX	`mx2.improvmx.com`⁽²⁰⁾
		A	2a05:d012:412:e201:1f6e:f6e4:8fd7:4678^{🇫🇷 Amazon2a05:d012:400::/38 AMAZON AWS}
		A	2a05:d012:412:e202:e81e:cc44:3b53:8a3d^{🇫🇷 Amazon2a05:d012:400::/38 AMAZON AWS}
		A	2a05:d012:412:e203:7e33:3d9c:28d7:ee20^{🇫🇷 Amazon2a05:d012:400::/38 AMAZON AWS}
		A	13.36.107.63^{🇫🇷 Amazon13.36.0.0/14 EC2 CDG Prefix}
			PTR	`ec2-13-36-107-63.eu-west-3.compute.amazonaws.com`
		A	13.36.222.39^{🇫🇷 Amazon13.36.0.0/14 EC2 CDG Prefix}
			PTR	`ec2-13-36-222-39.eu-west-3.compute.amazonaws.com`
		A	15.236.61.92^{🇫🇷 Amazon15.236.0.0/15 EC2 CDG prefix}
			PTR	`ec2-15-236-61-92.eu-west-3.compute.amazonaws.com`
TXT	`google-site-verification=neLOEkQB_ffe1g0v_mSb9hn0LFACLcoTX4SbVs-0ms8`
TXT	`v=spf1 include:_spf.sparkpostmail.com include:cust-spf.exacttarget.com includ...`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.10.131, 172.67.131.122
		IPv6 hints	2606:4700:3030::6815:a83, 2606:4700:3033::ac43:837a
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=58, name=cloudflare-ech.com
SOA	`hal.ns.cloudflare.com`dns@cloudflare.com serial=2411063278

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1786281489

Same first word

bundlepayment.com

DNS History

30 records (8 active, 22 former)

●NShal.ns.cloudflare.com2026-07-12 → 2026-08-09 · 3 obs

○ 2018-07-13 04:15:16
● 2026-07-12 23:20:36
● 2026-08-09 13:31:40

●NSmargot.ns.cloudflare.com2026-07-12 → 2026-08-09 · 3 obs

○ 2018-07-13 04:15:16
● 2026-07-12 23:20:36
● 2026-08-09 13:31:40

○NSns-1494.awsdns-58.org2018-07-13 → 2018-07-13 · 4 obs

○ 2017-01-08 03:04:04
● 2018-07-13 04:15:16
○ 2026-07-12 23:20:36
○ 2026-08-09 13:31:40

○NSns-1548.awsdns-01.co.uk2018-07-13 → 2018-07-13 · 4 obs

○ 2017-01-08 03:04:04
● 2018-07-13 04:15:16
○ 2026-07-12 23:20:36
○ 2026-08-09 13:31:40

○NSns-344.awsdns-43.com2018-07-13 → 2018-07-13 · 4 obs

○ 2017-01-08 03:04:04
● 2018-07-13 04:15:16
○ 2026-07-12 23:20:36
○ 2026-08-09 13:31:40

○NSns-805.awsdns-36.net2018-07-13 → 2018-07-13 · 4 obs

○ 2017-01-08 03:04:04
● 2018-07-13 04:15:16
○ 2026-07-12 23:20:36
○ 2026-08-09 13:31:40

○NSns51.1and1.com2015-06-29 → 2017-01-08 · 4 obs

● 2015-06-29 18:58:38
● 2017-01-08 03:04:04
○ 2018-07-13 04:15:16
○ 2026-08-09 13:31:40

○NSns52.1and1.com2015-06-29 → 2017-01-08 · 4 obs

● 2015-06-29 18:58:38
● 2017-01-08 03:04:04
○ 2018-07-13 04:15:16
○ 2026-08-09 13:31:40

○MXmx-fwd-1.nearlyfreespeech.net2018-07-13 → 2018-07-13 · 4 obs

○ 2017-01-08 03:04:04
● 2018-07-13 04:15:16
○ 2026-07-12 23:20:36
○ 2026-08-09 13:31:40

○MXmx00.1and1.com2015-06-29 → 2017-01-08 · 4 obs

● 2015-06-29 18:58:38
● 2017-01-08 03:04:04
○ 2018-07-13 04:15:16
○ 2026-08-09 13:31:40

○MXmx01.1and1.com2015-06-29 → 2017-01-08 · 4 obs

● 2015-06-29 18:58:38
● 2017-01-08 03:04:04
○ 2018-07-13 04:15:16
○ 2026-08-09 13:31:40

●MXmx1.improvmx.com2026-07-12 → 2026-08-09 · 3 obs

○ 2018-07-13 04:15:16
● 2026-07-12 23:20:36
● 2026-08-09 13:31:40

●MXmx2.improvmx.com2026-07-12 → 2026-08-09 · 3 obs

○ 2018-07-13 04:15:16
● 2026-07-12 23:20:36
● 2026-08-09 13:31:40

●A104.21.10.1312026-07-12 → 2026-08-09 · 3 obs

○ 2018-07-13 04:15:16
● 2026-07-12 23:20:36
● 2026-08-09 13:31:40

○A108.175.14.2442015-06-29 → 2016-01-22 · 4 obs

● 2015-06-29 18:58:38
● 2016-01-22 14:26:10
○ 2016-04-30 09:25:16
○ 2026-08-09 13:31:40

●A172.67.131.1222026-07-12 → 2026-08-09 · 3 obs

○ 2018-07-13 04:15:16
● 2026-07-12 23:20:36
● 2026-08-09 13:31:40

○A192.195.77.1282016-04-30 → 2017-01-08 · 5 obs

○ 2016-01-22 14:26:10
● 2016-04-30 09:25:16
● 2017-01-08 03:04:04
○ 2018-07-13 04:15:16
○ 2026-08-09 13:31:40

●A2606:4700:3030::6815:a832026-07-12 → 2026-08-09 · 3 obs

○ 2018-07-13 04:15:16
● 2026-07-12 23:20:36
● 2026-08-09 13:31:40

●A2606:4700:3033::ac43:837a2026-07-12 → 2026-08-09 · 3 obs

○ 2018-07-13 04:15:16
● 2026-07-12 23:20:36
● 2026-08-09 13:31:40

○A2607:f1c0:1000:606a:9024:bc42:1922:122015-06-29 → 2016-01-22 · 4 obs

● 2015-06-29 18:58:38
● 2016-01-22 14:26:10
○ 2016-04-30 09:25:16
○ 2026-08-09 13:31:40

○A2607:f1c0:1000:606a:bab0:a71:2b00:c2af2016-04-30 → 2017-01-08 · 5 obs

○ 2016-01-22 14:26:10
● 2016-04-30 09:25:16
● 2017-01-08 03:04:04
○ 2018-07-13 04:15:16
○ 2026-08-09 13:31:40

○A52.218.128.152018-07-13 → 2018-07-13 · 4 obs

○ 2017-01-08 03:04:04
● 2018-07-13 04:15:16
○ 2026-07-12 23:20:36
○ 2026-08-09 13:31:40

○A52.218.128.1592018-07-13 → 2018-07-13 · 4 obs

○ 2017-01-08 03:04:04
● 2018-07-13 04:15:16
○ 2026-07-12 23:20:36
○ 2026-08-09 13:31:40

○A52.218.201.352018-07-13 → 2018-07-13 · 4 obs

○ 2017-01-08 03:04:04
● 2018-07-13 04:15:16
○ 2026-07-12 23:20:36
○ 2026-08-09 13:31:40

○A52.218.204.1552018-07-13 → 2018-07-13 · 4 obs

○ 2017-01-08 03:04:04
● 2018-07-13 04:15:16
○ 2026-07-12 23:20:36
○ 2026-08-09 13:31:40

○A52.218.209.1632018-07-13 → 2018-07-13 · 4 obs

○ 2017-01-08 03:04:04
● 2018-07-13 04:15:16
○ 2026-07-12 23:20:36
○ 2026-08-09 13:31:40

○A52.218.209.1952018-07-13 → 2018-07-13 · 4 obs

○ 2017-01-08 03:04:04
● 2018-07-13 04:15:16
○ 2026-07-12 23:20:36
○ 2026-08-09 13:31:40

○A52.218.240.2192018-07-13 → 2018-07-13 · 4 obs

○ 2017-01-08 03:04:04
● 2018-07-13 04:15:16
○ 2026-07-12 23:20:36
○ 2026-08-09 13:31:40

○A52.218.244.1312018-07-13 → 2018-07-13 · 4 obs

○ 2017-01-08 03:04:04
● 2018-07-13 04:15:16
○ 2026-07-12 23:20:36
○ 2026-08-09 13:31:40

○A54.231.184.1872018-07-13 → 2018-07-13 · 4 obs

○ 2017-01-08 03:04:04
● 2018-07-13 04:15:16
○ 2026-07-12 23:20:36
○ 2026-08-09 13:31:40

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	d.gtld-servers.net, m.gtld-servers.net, b.gtld-servers.net, i.gtld-servers.net...	-
bundlepayment.com	hal.ns.cloudflare.com, margot.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.194.167

NS records: hal.ns.cloudflare.com, margot.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for bundlepayment.com (unsigned zone)

⏱️ Timing

Total: 205ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.10.131, 172.67.131.122`
AAAA	2	`2606:4700:3030::6815:a83, 2606:4700:3033::ac43:837a`
NS	2	`hal.ns.cloudflare.com, margot.ns.cloudflare.com`
MX	2	`mx1.improvmx.com (pri: 10), mx2.improvmx.com (pri: 20)`
TXT	2	`google-site-verification=neLOEkQB_ffe1g0, v=spf1 include:_spf.sparkpostmail.com in`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`hal.ns.cloudflare.com dns.cloudflare.com`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (hal.ns.cloudflare.com, hal.ns.cloudflare.com, hal.ns.cloudflare.com...)

Analysis

IP Addresses

bundlepayment.com directs to four IP numbers, which are 104.21.10.131, 172.67.131.122, 2606:4700:3030::6815:a83 and 2606:4700:3033::ac43:837a.

neb-alert.com, 789slots.win, sauerworld.org plus two other host names have IP numbers in common with bundlepayment.com.

Name Servers

bundlepayment.com is served by two delegated name servers, hal.ns.cloudflare.com and margot.ns.cloudflare.com.

The name server configuration of bundlepayment.com is shared with other domains, for instance teen(0x736578).webcam, wpzys.top, 7w72cq.lol and two others.

There is at least partial name server overlap between bundlepayment.com and other domains — ulookubook.com, infoplay.pt, playful(0x6d696c66)s.com and two more among them.

These name servers are routinely deployed together with the name servers treasure.ns.cloudflare.com.

Hosts with 6 IP addresses each:

hal.ns.cloudflare.com carries IP addresses 108.162.193.174, 172.64.33.174 and 173.245.59.174, with 3 other addresses beyond those.

margot.ns.cloudflare.com carries IP addresses 108.162.194.167, 162.159.38.167 and 172.64.34.167, with 3 other addresses beyond those.

Mail Servers

bundlepayment.com uses two mail servers, mx1.improvmx.com and mx2.improvmx.com.

The mail server setup of bundlepayment.com matches that of other domains such as vumo.app, zonafrancaibague.com, mypointspal.co.uk and two others.

There is at least a partial overlap in mail servers between bundlepayment.com and other domains like yishares.com, enzymes.bio and cotswold.company.

Hosts with 6 IP addresses each:

mx1.improvmx.com carries IP addresses 13.37.195.136, 15.236.236.160 and 35.181.18.45, with 3 other addresses beyond those.

mx2.improvmx.com carries IP addresses 13.36.107.63, 13.36.222.39 and 15.236.61.92, with 3 other addresses beyond those.

bundlepayment.com - robtex.com