bagsvolumebot[.]com

The domain www.bagsvolumebot.com is currently classified as a high‑risk brand‑impersonation site targeting the Across brand. The page title returned by the server reads “Bags.fm Volume Bot – #1 Solana Volume Bot for Trending,” indicating a cryptocurrency‑related lure. The site was registered on August 19 2025 through Name.com, Inc. and resolves to the Cloudflare‑owned address 188.114.96.3 (AS13335, United States). Infrastructure analysis shows the site is served behind Cloudflare, using HTTP/3 and the TLS certificate issued by Google Trust Services under the WE1 root. The DNS configuration lists the authoritative nameservers elinore.ns.cloudflare.com and ned.ns.cloudflare.com. Detected front‑end libraries include Tailwind CSS and jsDelivr, suggesting a modern web stack but providing no indication of malicious code delivery. Reputation signals are strongly negative: the domain appears on one security blocklist, is listed as blocked by PhishDestroy, and received a Gridinsoft trust score of 0 / 100. VirusTotal analysis shows that a single out of ninety‑five scanning engines flagged the domain, reinforcing the likelihood of abuse. The HTTP response is a 301 redirect, a technique often used to hide the final malicious landing page. Defenders should treat www.bagsvolumebot.com as hostile. Immediate actions include adding the domain to URL filtering and DNS blocklists, monitoring for any outbound connections to the resolved IP, and reviewing logs for attempts to access the site. Because the site’s content has not been captured, continued threat‑intel collection is advised to verify any payload or credential‑harvesting mechanisms that may be introduced later.