`hermesreplicabag.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3034::6815:141^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3034::ac43:80bc^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.1.65^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.128.188^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`ali.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a3b^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ali.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c03b^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ali.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:203b^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ali.ns.cloudflare.com`
		A	108.162.192.59^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ali.ns.cloudflare.com`
		A	172.64.32.59^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ali.ns.cloudflare.com`
		A	173.245.58.59^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ali.ns.cloudflare.com`
NS	`memphis.ns.cloudflare.com`
		A	2606:4700:58::a29f:2cbd^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`memphis.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3bd^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`memphis.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23bd^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`memphis.ns.cloudflare.com`
		A	108.162.195.189^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`memphis.ns.cloudflare.com`
		A	162.159.44.189^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`memphis.ns.cloudflare.com`
		A	172.64.35.189^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`memphis.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4	104.21.1.65, 172.67.128.188
		IPv6	2606:4700:3034::6815:141, 2606:4700:3034::ac43:80bc
SOA	`ali.ns.cloudflare.com`dns@cloudflare.com serial=2399291241

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1771291435

⚠️ On DNS blocklist: tif
WOT: SUSPICIOUS (1/100)

Previously MX for

hermesreplicabag.com

Same first word

hermesreplicabag.com

DNS History

16 records (6 active, 10 former)

●NSali.ns.cloudflare.com2026-03-21 → 2026-03-23 · 3 obs

○ 2017-04-20 05:21:38
● 2026-03-21 01:49:08
● 2026-03-23 06:06:32

●NSmemphis.ns.cloudflare.com2026-03-21 → 2026-03-23 · 3 obs

○ 2017-04-20 05:21:38
● 2026-03-21 01:49:08
● 2026-03-23 06:06:32

○NSns1.s015jp6664.info2017-04-20 → 2017-04-20 · 4 obs

○ 2016-07-17 13:49:46
● 2017-04-20 05:21:38
○ 2026-03-21 01:49:08
○ 2026-03-23 06:06:32

○NSns1.xserver.jp2015-07-14 → 2016-07-17 · 4 obs

● 2015-07-14 00:15:16
● 2016-07-17 13:49:46
○ 2017-04-20 05:21:38
○ 2026-03-23 06:06:32

○NSns2.s015jp6664.info2017-04-20 → 2017-04-20 · 4 obs

○ 2016-07-17 13:49:46
● 2017-04-20 05:21:38
○ 2026-03-21 01:49:08
○ 2026-03-23 06:06:32

○NSns2.xserver.jp2015-07-14 → 2016-07-17 · 4 obs

● 2015-07-14 00:15:16
● 2016-07-17 13:49:46
○ 2017-04-20 05:21:38
○ 2026-03-23 06:06:32

○NSns3.xserver.jp2015-07-14 → 2016-07-17 · 4 obs

● 2015-07-14 00:15:16
● 2016-07-17 13:49:46
○ 2017-04-20 05:21:38
○ 2026-03-23 06:06:32

○NSns4.xserver.jp2015-07-14 → 2016-07-17 · 4 obs

● 2015-07-14 00:15:16
● 2016-07-17 13:49:46
○ 2017-04-20 05:21:38
○ 2026-03-23 06:06:32

○NSns5.xserver.jp2015-07-14 → 2016-07-17 · 4 obs

● 2015-07-14 00:15:16
● 2016-07-17 13:49:46
○ 2017-04-20 05:21:38
○ 2026-03-23 06:06:32

○MXhermesreplicabag.com2015-07-14 → 2017-04-20 · 4 obs

● 2015-07-14 00:15:16
● 2017-04-20 05:21:38
○ 2026-03-21 01:49:08
○ 2026-03-23 06:06:32

●A104.21.1.652026-03-21 → 2026-03-23 · 3 obs

○ 2017-04-20 05:21:38
● 2026-03-21 01:49:08
● 2026-03-23 06:06:32

●A172.67.128.1882026-03-21 → 2026-03-23 · 3 obs

○ 2017-04-20 05:21:38
● 2026-03-21 01:49:08
● 2026-03-23 06:06:32

○A210.188.201.1342015-07-14 → 2016-07-17 · 4 obs

● 2015-07-14 00:15:16
● 2016-07-17 13:49:46
○ 2017-04-20 05:21:38
○ 2026-03-23 06:06:32

●A2606:4700:3034::6815:1412026-03-21 → 2026-03-23 · 3 obs

○ 2017-04-20 05:21:38
● 2026-03-21 01:49:08
● 2026-03-23 06:06:32

●A2606:4700:3034::ac43:80bc2026-03-21 → 2026-03-23 · 3 obs

○ 2017-04-20 05:21:38
● 2026-03-21 01:49:08
● 2026-03-23 06:06:32

○A59.106.213.2102017-04-20 → 2017-04-20 · 4 obs

○ 2016-07-17 13:49:46
● 2017-04-20 05:21:38
○ 2026-03-21 01:49:08
○ 2026-03-23 06:06:32

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
hermesreplicabag.com	ali.ns.cloudflare.com, memphis.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.59

NS records: ali.ns.cloudflare.com, memphis.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for hermesreplicabag.com (unsigned zone)

⏱️ Timing

Total: 135ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.1.65, 172.67.128.188`
AAAA	2	`2606:4700:3034::ac43:80bc, 2606:4700:3034::6815:141`
NS	2	`ali.ns.cloudflare.com, memphis.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`ali.ns.cloudflare.com dns.cloudflare.com`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (ali.ns.cloudflare.com, ali.ns.cloudflare.com, ali.ns.cloudflare.com...)

Analysis

IP Addresses

hermesreplicabag.com refers to four IP numbers: 2606:4700:3034::6815:141, 2606:4700:3034::ac43:80bc, 104.21.1.65 and 172.67.128.188.

Other host names, for instance teielrwfvd.click, femtechberkeley.com, lauj.net, smtp.canedifamiglia.it and kos4me.com share IP numbers with hermesreplicabag.com.

Name Servers

hermesreplicabag.com's delegation uses two name servers: ali.ns.cloudflare.com and memphis.ns.cloudflare.com.

hermesreplicabag.com uses the same name server setup as other domains, such as complaintbusinesscommunity.com, mr-jat.in, usasmartservice.com, yeahmob.com and discountvacuumandsewing.com.

hermesreplicabag.com at least partially shares name servers with other domains, including salleprivee.ca, tap4278kxq.cc, lagazzetta.ge, chandu.com and trumanwl.com.

These name servers are often used with venus.ns.cloudflare.com and earl.ns.cloudflare.com.

Host names with six IP numbers:

ali.ns.cloudflare.com points to 2606:4700:50::adf5:3a3b, 2803:f800:50::6ca2:c03b, 2a06:98c1:50::ac40:203b, 108.162.192.59, 172.64.32.59 and 173.245.58.59.

memphis.ns.cloudflare.com points to 2606:4700:58::a29f:2cbd, 2803:f800:50::6ca2:c3bd, 2a06:98c1:50::ac40:23bd, 108.162.195.189, 162.159.44.189 and 172.64.35.189.

hermesreplicabag.com - robtex.com