ghostclient.dev - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

ghostclient.dev

DNSSEC⚠️ Not signed
A2606:4700:3034::ac43:b225🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3037::6815:2b6b🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.43.107Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.178.37🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSerin.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3a71🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRerin.ns.cloudflare.com
A2803:f800:50::6ca2:c071🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRerin.ns.cloudflare.com
A2a06:98c1:50::ac40:2071🇺🇸 Cloudflare2a06:98c1:50::/45
PTRerin.ns.cloudflare.com
A108.162.192.113🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRerin.ns.cloudflare.com
A172.64.32.113🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRerin.ns.cloudflare.com
A173.245.58.113🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRerin.ns.cloudflare.com
NSseth.ns.cloudflare.com
A2606:4700:58::adf5:3b8e🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRseth.ns.cloudflare.com
A2803:f800:50::6ca2:c18e🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRseth.ns.cloudflare.com
A2a06:98c1:50::ac40:218e🇺🇸 Cloudflare2a06:98c1:50::/45
PTRseth.ns.cloudflare.com
A108.162.193.142🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRseth.ns.cloudflare.com
A172.64.33.142🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRseth.ns.cloudflare.com
A173.245.59.142🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRseth.ns.cloudflare.com
MXfwd1.porkbun.com ⭐
A44.226.226.6🇺🇸 Amazon44.224.0.0/11 EC2 PDX prefix
PTRfwd1.porkbun.com
MXfwd2.porkbun.com(20)
A52.10.201.111🇺🇸 Amazon52.10.0.0/15 EC2 PDX Prefix
PTRfwd2.porkbun.com
TXTv=spf1 include:_spf.porkbun.com ~all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.43.107, 172.67.178.37
IPv6 hints2606:4700:3034::ac43:b225, 2606:4700:3037::6815:2b6b
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=26, name=cloudflare-ech.com
SOAerin.ns.cloudflare.comdns@cloudflare.com serial=2412331507

dev

DNSSEC🔒 Signed (DS record present)
NSns-tld1.charlestonroadregistry.com ⭐
NSns-tld2.charlestonroadregistry.com
NSns-tld3.charlestonroadregistry.com
NSns-tld4.charlestonroadregistry.com
NSns-tld5.charlestonroadregistry.com
SOAns-tld1.charlestonroadregistry.comcloud-dns-hostmaster@google.com serial=1
🔒 HSTS Preload (+subdomains)

Same first word

ghostclient.dev
ghostclient.site
ghostclient.xyz
ghostclient.online
ghostclient.net

Similar names

theclosingt.org.ph
glitchstone.online
estclothing.com
theclosingt.com.ph
technlogist.com
nightcloset.net
closetthing.com
etsclothing.co.uk
glitchstone.com
gthotelsinc.com
setclothing.com
nightcloset.com

Previous names

ghost3.dev
ghostagent.dev
ghostagentics.dev
ghostai.dev
ghostapi.dev
ghostapp.dev
ghostapps.dev
ghostarmy.dev
ghostboard.dev
ghostbot.dev
ghostboy.dev
ghostbrowser.dev
ghostburn.dev
ghostbusterscli.dev
ghostbyte.dev
ghostcall.dev
ghostcap.dev
ghostchat.dev
ghostcli.dev

Next names

ghostcluster.dev
ghostcompany.dev
ghostcorp.dev
ghostcortex.dev
ghostcrawl.dev
ghostcto.dev
ghostcue.dev
ghostcv.dev
ghostdb.dev
ghostdeck.dev
ghostdesk.dev
ghostdoc.dev
ghostedit.dev
ghoster.dev
ghosters.dev
ghostexp.dev
ghostfi.dev
ghostfleet.dev
ghostflyby.dev
ghostfolio.dev

DNS History

8 records (8 active, 0 former)

NSerin.ns.cloudflare.comseth.ns.cloudflare.comMXfwd1.porkbun.comfwd2.porkbun.comA104.21.43.107172.67.178.372606:4700:3034::ac43:b2252606:4700:3037::6815:2b6b
●NSerin.ns.cloudflare.com2026-08-20 → 2026-09-10 · 2 obs
● 2026-08-20 02:32:36
● 2026-09-10 02:11:26
●NSseth.ns.cloudflare.com2026-08-20 → 2026-09-10 · 2 obs
● 2026-08-20 02:32:36
● 2026-09-10 02:11:26
●MXfwd1.porkbun.com2026-08-20 → 2026-09-10 · 2 obs
● 2026-08-20 02:32:36
● 2026-09-10 02:11:26
●MXfwd2.porkbun.com2026-08-20 → 2026-09-10 · 2 obs
● 2026-08-20 02:32:36
● 2026-09-10 02:11:26
●A104.21.43.1072026-08-20 → 2026-09-10 · 2 obs
● 2026-08-20 02:32:36
● 2026-09-10 02:11:26
●A172.67.178.372026-08-20 → 2026-09-10 · 2 obs
● 2026-08-20 02:32:36
● 2026-09-10 02:11:26
●A2606:4700:3034::ac43:b2252026-08-20 → 2026-09-10 · 2 obs
● 2026-08-20 02:32:36
● 2026-09-10 02:11:26
●A2606:4700:3037::6815:2b6b2026-08-20 → 2026-09-10 · 2 obs
● 2026-08-20 02:32:36
● 2026-09-10 02:11:26

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
devns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com...10 records
ghostclient.devseth.ns.cloudflare.com, erin.ns.cloudflare.com-

✅ Authoritative Response

Server:172.64.33.142

NS records: seth.ns.cloudflare.com, erin.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for ghostclient.dev (unsigned zone)

⏱️ Timing

Total: 776ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.178.37, 104.21.43.107
AAAA22606:4700:3037::6815:2b6b, 2606:4700:3034::ac43:b225
NS2erin.ns.cloudflare.com, seth.ns.cloudflare.com
MX2fwd1.porkbun.com (pri: 10), fwd2.porkbun.com (pri: 20)
TXT1v=spf1 include:_spf.porkbun.com ~all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1erin.ns.cloudflare.com dns.cloudflare.co

📌 Glue Records Collected

Total: 10

Out-of-bailiwick: 10 (ns-tld1.charlestonroadregistry.com, ns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com...)

Analysis

IP Addresses

ghostclient.dev directs to four IP numbers, which are 104.21.43.107, 172.67.178.37, 2606:4700:3034::ac43:b225 and 2606:4700:3037::6815:2b6b.

facterapie.ro, cornwagon.store, aaronoverseas.com plus two other host names have IP numbers in common with ghostclient.dev.

Name Servers

ghostclient.dev uses two name servers for its delegation: erin.ns.cloudflare.com and seth.ns.cloudflare.com.

The name server configuration of ghostclient.dev is shared with other domains, for instance sd.com.br, holameanshola.com, blackhatspot.com and two others.

At least some of ghostclient.dev's name servers are shared with other domains, for example jiliko123.com, geekpwn.help, michaelmcduffee89app.workers.dev and two more.

These name servers tend to be used in conjunction with the name servers ivan.ns.cloudflare.com.

Hosts with 6 IP addresses each:

Hostname erin.ns.cloudflare.com directs to 108.162.192.113, 172.64.32.113 and 173.245.58.113 along with 3 other IP addresses.

Hostname seth.ns.cloudflare.com directs to 108.162.193.142, 172.64.33.142 and 173.245.59.142 along with 3 other IP addresses.

Mail Servers

ghostclient.dev uses two mail servers, fwd1.porkbun.com and fwd2.porkbun.com.

The mail server setup of ghostclient.dev matches that of other domains such as giftquestionnaire.com, gostature.com, monetenmaschine.com and two others.

Each of fwd1.porkbun.com and fwd2.porkbun.com has one IP address: fwd1.porkbun.com uses 44.226.226.6 and fwd2.porkbun.com uses 52.10.201.111.