Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

amlwatcher.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of amlwatcher.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans

DNS Records

A
104.20.40.241, 172.66.166.95
AAAA
2606:4700:10::6814:28f1, 2606:4700:10::ac42:a65f
MX
1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
darwin.ns.cloudflare.com, molly.ns.cloudflare.com
TXT
google-gws-recovery-domain-verification=48730402, google-site-verification=xdgKKftOp4f7PQPIpdpQeOPhIegoMz319rrkBUeDYBs, openai-domain-verification=dv-ZdKEeT4wkJlItd4yrHoE86ES, v=spf1 include:_spf.google.com include:44393875.spf02.hubspotemail.net include:sendgrid.net include:_spf.salesforce.com include:one.zoho.com ~all
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

91.98.6.9:443 4f04425b66e2…
Subject: CloudFlare Origin Certificate
Issuer: C=US, O=CloudFlare\, Inc., OU=CloudFlare Origin SSL Certificate Authority, L=San Francisco, ST=California
SANs: *.amlwatcher.com, amlwatcher.com
116.202.229.215:443 4f04425b66e2…
Subject: CloudFlare Origin Certificate
Issuer: C=US, O=CloudFlare\, Inc., OU=CloudFlare Origin SSL Certificate Authority, L=San Francisco, ST=California
SANs: *.amlwatcher.com, amlwatcher.com

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
91.98.6.9 AS24940 AS13335 95% cert 4f04425b… served by 91.98.6.9 (AS24940) carries SAN amlwatcher.com which currently resolves through Cloudflare (AS13335) at 172.66.166.95, 104.20.40.241, 2606:4700:10::ac42:a65f, 2606:4700:10::6814:28f1
116.202.229.215 AS24940 AS13335 95% cert 4f04425b… served by 116.202.229.215 (AS24940) carries SAN amlwatcher.com which currently resolves through Cloudflare (AS13335) at 172.66.166.95, 104.20.40.241, 2606:4700:10::ac42:a65f, 2606:4700:10::6814:28f1

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.