checkaml-bot.com - dns.ninja

`checkaml-bot.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::6815:19c2^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:8680^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.25.194^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.134.128^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`lennon.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2ca5^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lennon.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3a5^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`lennon.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23a5^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`lennon.ns.cloudflare.com`
		A	108.162.195.165^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lennon.ns.cloudflare.com`
		A	162.159.44.165^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lennon.ns.cloudflare.com`
		A	172.64.35.165^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lennon.ns.cloudflare.com`
NS	`robin.ns.cloudflare.com`
		A	2606:4700:50::adf5:3ada^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`robin.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0da^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`robin.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20da^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`robin.ns.cloudflare.com`
		A	108.162.192.218^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`robin.ns.cloudflare.com`
		A	172.64.32.218^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`robin.ns.cloudflare.com`
		A	173.245.58.218^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`robin.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.25.194, 172.67.134.128
		IPv6 hints	2606:4700:3033::6815:19c2, 2606:4700:3036::ac43:8680
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=148, name=cloudflare-ech.com
SOA	`lennon.ns.cloudflare.com`dns@cloudflare.com serial=2411081165

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1785956904

⚠️ On DNS blocklist: tif

Same first word

checkaml-bot.com

Similar names

amlcheck-bot.net

check-amlbot.com

DNS History

8 records (6 active, 2 former)

●NSlennon.ns.cloudflare.com2026-05-05 → 2026-08-05 · 2 obs

● 2026-05-05 17:27:50
● 2026-08-05 19:37:30

●NSrobin.ns.cloudflare.com2026-05-05 → 2026-08-05 · 2 obs

● 2026-05-05 17:27:50
● 2026-08-05 19:37:30

●A104.21.25.1942026-05-05 → 2026-08-05 · 2 obs

● 2026-05-05 17:27:50
● 2026-08-05 19:37:30

●A172.67.134.1282026-05-05 → 2026-08-05 · 2 obs

● 2026-05-05 17:27:50
● 2026-08-05 19:37:30

○A2606:4700:3030::6815:19c22026-05-05 → 2026-05-05 · 3 obs

● 2026-05-05 17:27:50
○ 2026-07-19 19:34:24
○ 2026-08-05 19:37:30

○A2606:4700:3032::ac43:86802026-05-05 → 2026-05-05 · 3 obs

● 2026-05-05 17:27:50
○ 2026-07-19 19:34:24
○ 2026-08-05 19:37:30

●A2606:4700:3033::6815:19c22026-07-19 → 2026-08-05 · 3 obs

○ 2026-05-05 17:27:50
● 2026-07-19 19:34:24
● 2026-08-05 19:37:30

●A2606:4700:3036::ac43:86802026-07-19 → 2026-08-05 · 3 obs

○ 2026-05-05 17:27:50
● 2026-07-19 19:34:24
● 2026-08-05 19:37:30

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	b.gtld-servers.net, i.gtld-servers.net, h.gtld-servers.net, g.gtld-servers.net...	-
checkaml-bot.com	robin.ns.cloudflare.com, lennon.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.195.165

NS records: robin.ns.cloudflare.com, lennon.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for checkaml-bot.com (unsigned zone)

⏱️ Timing

Total: 372ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.134.128, 104.21.25.194`
AAAA	2	`2606:4700:3036::ac43:8680, 2606:4700:3033::6815:19c2`
NS	2	`lennon.ns.cloudflare.com, robin.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`lennon.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (robin.ns.cloudflare.com, robin.ns.cloudflare.com, robin.ns.cloudflare.com...)

Analysis

IP Addresses

checkaml-bot.com points to the four IP addresses 104.21.25.194, 172.67.134.128, 2606:4700:3033::6815:19c2 and 2606:4700:3036::ac43:8680.

Two other host names, along with com-forge-app.pro, www.ahassl.com and skycrowncasinositeau.com, also share IP numbers with checkaml-bot.com.

Name Servers

checkaml-bot.com has two authoritative name servers — lennon.ns.cloudflare.com and robin.ns.cloudflare.com.

checkaml-bot.com shares its NS records with other domains, for example hampdenmaine.gov, geometrydash-meltdown.org, cardwiz.com and two others.

There is at least partial name server overlap between checkaml-bot.com and other domains — casino-3343.buzz, kapoorpeds.com, 2ji.pink and two more among them.

The name servers nelly.ns.cloudflare.com, alina.ns.cloudflare.com and jasmine.ns.cloudflare.com are often found in combination with these name servers.

DNS names with 6 IP addresses:

lennon.ns.cloudflare.com points to 108.162.195.165, 162.159.44.165, 172.64.35.165 and 3 other IP addresses.

robin.ns.cloudflare.com points to 108.162.192.218, 172.64.32.218, 173.245.58.218 and 3 other IP addresses.