`cnreplicabags.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::6815:4bd1^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:b5fe^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.75.209^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.181.254^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`dee.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a5d^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dee.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c05d^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`dee.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:205d^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`dee.ns.cloudflare.com`
		A	108.162.192.93^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dee.ns.cloudflare.com`
		A	172.64.32.93^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dee.ns.cloudflare.com`
		A	173.245.58.93^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dee.ns.cloudflare.com`
NS	`giancarlo.ns.cloudflare.com`
		A	2606:4700:58::a29f:2c05^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`giancarlo.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c305^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`giancarlo.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2305^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`giancarlo.ns.cloudflare.com`
		A	108.162.195.5^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`giancarlo.ns.cloudflare.com`
		A	162.159.44.5^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`giancarlo.ns.cloudflare.com`
		A	172.64.35.5^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`giancarlo.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.75.209, 172.67.181.254
		IPv6 hints	2606:4700:3031::6815:4bd1, 2606:4700:3036::ac43:b5fe
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=146, name=cloudflare-ech.com
SOA	`dee.ns.cloudflare.com`dns@cloudflare.com serial=2400323035

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1776040182

WOT: SUSPICIOUS (1/100)

Same first word

cnreplicabags.com

DNS History

12 records (6 active, 6 former)

●NSdee.ns.cloudflare.com2026-03-28 → 2026-04-13 · 3 obs

○ 2017-05-13 15:42:02
● 2026-03-28 09:48:08
● 2026-04-13 00:42:54

●NSgiancarlo.ns.cloudflare.com2026-03-28 → 2026-04-13 · 3 obs

○ 2017-05-13 15:42:02
● 2026-03-28 09:48:08
● 2026-04-13 00:42:54

○NSivy.ns.cloudflare.com2017-05-13 → 2017-05-13 · 3 obs

● 2017-05-13 15:42:02
○ 2026-03-28 09:48:08
○ 2026-04-13 00:42:54

○NSrodney.ns.cloudflare.com2017-05-13 → 2017-05-13 · 3 obs

● 2017-05-13 15:42:02
○ 2026-03-28 09:48:08
○ 2026-04-13 00:42:54

●A104.21.75.2092026-03-28 → 2026-04-13 · 3 obs

○ 2017-05-13 15:42:02
● 2026-03-28 09:48:08
● 2026-04-13 00:42:54

○A104.27.190.1752017-05-13 → 2017-05-13 · 3 obs

● 2017-05-13 15:42:02
○ 2026-03-28 09:48:08
○ 2026-04-13 00:42:54

○A104.27.191.1752017-05-13 → 2017-05-13 · 3 obs

● 2017-05-13 15:42:02
○ 2026-03-28 09:48:08
○ 2026-04-13 00:42:54

●A172.67.181.2542026-03-28 → 2026-04-13 · 3 obs

○ 2017-05-13 15:42:02
● 2026-03-28 09:48:08
● 2026-04-13 00:42:54

○A2400:cb00:2048:1::681b:beaf2017-05-13 → 2017-05-13 · 3 obs

● 2017-05-13 15:42:02
○ 2026-03-28 09:48:08
○ 2026-04-13 00:42:54

○A2400:cb00:2048:1::681b:bfaf2017-05-13 → 2017-05-13 · 3 obs

● 2017-05-13 15:42:02
○ 2026-03-28 09:48:08
○ 2026-04-13 00:42:54

●A2606:4700:3031::6815:4bd12026-03-28 → 2026-04-13 · 3 obs

○ 2017-05-13 15:42:02
● 2026-03-28 09:48:08
● 2026-04-13 00:42:54

●A2606:4700:3036::ac43:b5fe2026-03-28 → 2026-04-13 · 3 obs

○ 2017-05-13 15:42:02
● 2026-03-28 09:48:08
● 2026-04-13 00:42:54

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	h.gtld-servers.net, m.gtld-servers.net, d.gtld-servers.net, i.gtld-servers.net...	-
cnreplicabags.com	dee.ns.cloudflare.com, giancarlo.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.195.5

NS records: dee.ns.cloudflare.com, giancarlo.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for cnreplicabags.com (unsigned zone)

⏱️ Timing

Total: 140ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.75.209, 172.67.181.254`
AAAA	2	`2606:4700:3031::6815:4bd1, 2606:4700:3036::ac43:b5fe`
NS	2	`dee.ns.cloudflare.com, giancarlo.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`dee.ns.cloudflare.com dns.cloudflare.com`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (dee.ns.cloudflare.com, dee.ns.cloudflare.com, dee.ns.cloudflare.com...)

Analysis

IP Addresses

cnreplicabags.com points to four IP numbers: 2606:4700:3031::6815:4bd1, 2606:4700:3036::ac43:b5fe, 104.21.75.209 and 172.67.181.254.

Other host names including xxnx.video.xxnx.com, xirelloquenta.pro, avtokrat.com.ua, mail.an8.ru and www.aaarims.com share IP numbers with cnreplicabags.com.

Name Servers

cnreplicabags.com's delegation uses two name servers, dee.ns.cloudflare.com and giancarlo.ns.cloudflare.com.

cnreplicabags.com shares the same name server setup as other domains, for example landscapingmagnoliatx.info, uzletresz.com, sattamatkatb.com, kodim1406.id and travisbar.com.

cnreplicabags.com at least partially shares name servers with other domains, including chaptershealth.com, defatoonline.com.br, mellerbraggins.com, shopiforge.com.ua and vlxx88.biz.

These name servers are often used together with ligia.ns.cloudflare.com.

Host names with six IP numbers:

dee.ns.cloudflare.com points to: 2606:4700:50::adf5:3a5d, 2803:f800:50::6ca2:c05d, 2a06:98c1:50::ac40:205d, 108.162.192.93, 172.64.32.93 and 173.245.58.93.

giancarlo.ns.cloudflare.com points to: 2606:4700:58::a29f:2c05, 2803:f800:50::6ca2:c305, 2a06:98c1:50::ac40:2305, 108.162.195.5, 162.159.44.5 and 172.64.35.5.

cnreplicabags.com - robtex.com