`aml-crypto-bot.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::6815:36a5^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3032::ac43:8c67^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.54.165^{Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.140.103^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`itzel.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:262a^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`itzel.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c22a^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`itzel.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:222a^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`itzel.ns.cloudflare.com`
		A	108.162.194.42^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`itzel.ns.cloudflare.com`
		A	162.159.38.42^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`itzel.ns.cloudflare.com`
		A	172.64.34.42^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`itzel.ns.cloudflare.com`
NS	`mitch.ns.cloudflare.com`
		A	2606:4700:58::adf5:3bd0^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`mitch.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1d0^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`mitch.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21d0^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`mitch.ns.cloudflare.com`
		A	108.162.193.208^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`mitch.ns.cloudflare.com`
		A	172.64.33.208^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`mitch.ns.cloudflare.com`
		A	173.245.59.208^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`mitch.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.54.165, 172.67.140.103
		IPv6 hints	2606:4700:3030::6815:36a5, 2606:4700:3032::ac43:8c67
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=177, name=cloudflare-ech.com
SOA	`itzel.ns.cloudflare.com`dns@cloudflare.com serial=2399412365

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1775992297

⚠️ On DNS blocklist: tif

Same first word

aml-crypto-bot.com

aml-crypto-bot.org

aml-crypto-bot.one

DNS History

6 records (6 active, 0 former)

●NSitzel.ns.cloudflare.com2026-03-05 → 2026-04-12 · 2 obs

● 2026-03-05 04:26:48
● 2026-04-12 11:18:24

●NSmitch.ns.cloudflare.com2026-03-05 → 2026-04-12 · 2 obs

● 2026-03-05 04:26:48
● 2026-04-12 11:18:24

●A104.21.54.1652026-03-05 → 2026-04-12 · 2 obs

● 2026-03-05 04:26:48
● 2026-04-12 11:18:24

●A172.67.140.1032026-03-05 → 2026-04-12 · 2 obs

● 2026-03-05 04:26:48
● 2026-04-12 11:18:24

●A2606:4700:3030::6815:36a52026-03-05 → 2026-04-12 · 2 obs

● 2026-03-05 04:26:48
● 2026-04-12 11:18:24

●A2606:4700:3032::ac43:8c672026-03-05 → 2026-04-12 · 2 obs

● 2026-03-05 04:26:48
● 2026-04-12 11:18:24

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	k.gtld-servers.net, e.gtld-servers.net, d.gtld-servers.net, b.gtld-servers.net...	-
aml-crypto-bot.com	mitch.ns.cloudflare.com, itzel.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:162.159.38.42

NS records: mitch.ns.cloudflare.com, itzel.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for aml-crypto-bot.com (unsigned zone)

⏱️ Timing

Total: 108ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.140.103, 104.21.54.165`
AAAA	2	`2606:4700:3032::ac43:8c67, 2606:4700:3030::6815:36a5`
NS	2	`itzel.ns.cloudflare.com, mitch.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`itzel.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (mitch.ns.cloudflare.com, mitch.ns.cloudflare.com, mitch.ns.cloudflare.com...)

Analysis

IP Addresses

aml-crypto-bot.com points to four IP numbers: 2606:4700:3030::6815:36a5, 2606:4700:3032::ac43:8c67, 104.21.54.165 and 172.67.140.103.

For instance, other host names dienteseimplantes.com, 8e880.club, kalingaquartz.com, www.blognotizie.info and ryden.cn share IP numbers with aml-crypto-bot.com.

Name Servers

aml-crypto-bot.com is delegated to two name servers: itzel.ns.cloudflare.com and mitch.ns.cloudflare.com.

aml-crypto-bot.com uses the same name server setup as other domains such as tourofpa.com, 20.10.204.in-addr.arpa, myveeamcloud.com, sportalnow.com and sportovnihry.com.

aml-crypto-bot.com shares name servers with other domains at least partially, for example tooshocking.com, wairakeitouristpark.co.nz, shoppit.org, renowire.net and ecotoki.com.

These name servers are commonly used with jason.ns.cloudflare.com.

Host names with six IP numbers: host name itzel.ns.cloudflare.com points to: 2606:4700:50::a29f:262a, 2803:f800:50::6ca2:c22a, 2a06:98c1:50::ac40:222a, 108.162.194.42, 162.159.38.42 and 172.64.34.42; host name mitch.ns.cloudflare.com points to: 2606:4700:58::adf5:3bd0, 2803:f800:50::6ca2:c1d0, 2a06:98c1:50::ac40:21d0, 108.162.193.208, 172.64.33.208 and 173.245.59.208.

aml-crypto-bot.com - robtex.com