ghostshell.dev - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`ghostshell.dev`

DNSSEC	⚠️ Not signed
A	74.78.90.28^{🇺🇸 RoadRunner74.76.0.0/14 RR-Route}
		PTR	`syn-074-078-090-028.res.spectrum.com`
NS	`elliot.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3ba2^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elliot.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1a2^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`elliot.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21a2^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`elliot.ns.cloudflare.com`
		A	108.162.193.162^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elliot.ns.cloudflare.com`
		A	172.64.33.162^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elliot.ns.cloudflare.com`
		A	173.245.59.162^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elliot.ns.cloudflare.com`
NS	`irma.ns.cloudflare.com`
		A	2606:4700:50::adf5:3aa6^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`irma.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0a6^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`irma.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20a6^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`irma.ns.cloudflare.com`
		A	108.162.192.166^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`irma.ns.cloudflare.com`
		A	172.64.32.166^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`irma.ns.cloudflare.com`
		A	173.245.58.166^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`irma.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
SOA	`elliot.ns.cloudflare.com`dns@cloudflare.com serial=2414319689

`dev`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns-tld1.charlestonroadregistry.com` ⭐
	NS	`ns-tld2.charlestonroadregistry.com`
	NS	`ns-tld3.charlestonroadregistry.com`
	NS	`ns-tld4.charlestonroadregistry.com`
	NS	`ns-tld5.charlestonroadregistry.com`
	SOA	`ns-tld1.charlestonroadregistry.com`cloud-dns-hostmaster@google.com serial=1

🔒 HSTS Preload (+subdomains)

Same first word

Previous names

Next names

DNS History

8 records (8 active, 0 former)

●NSelliot.ns.cloudflare.com2026-09-06 → 2026-09-08 · 2 obs

● 2026-09-06 11:11:50
● 2026-09-08 15:22:04

●NSirma.ns.cloudflare.com2026-09-06 → 2026-09-08 · 2 obs

● 2026-09-06 11:11:50
● 2026-09-08 15:22:04

●MXeforward1.registrar-servers.com2026-09-06 → 2026-09-08 · 2 obs

● 2026-09-06 11:11:50
● 2026-09-08 15:22:04

●MXeforward2.registrar-servers.com2026-09-06 → 2026-09-08 · 2 obs

● 2026-09-06 11:11:50
● 2026-09-08 15:22:04

●MXeforward3.registrar-servers.com2026-09-06 → 2026-09-08 · 2 obs

● 2026-09-06 11:11:50
● 2026-09-08 15:22:04

●MXeforward4.registrar-servers.com2026-09-06 → 2026-09-08 · 2 obs

● 2026-09-06 11:11:50
● 2026-09-08 15:22:04

●MXeforward5.registrar-servers.com2026-09-06 → 2026-09-08 · 2 obs

● 2026-09-06 11:11:50
● 2026-09-08 15:22:04

●A74.78.90.282026-09-06 → 2026-09-08 · 2 obs

● 2026-09-06 11:11:50
● 2026-09-08 15:22:04

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
dev	ns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com...	10 records
ghostshell.dev	elliot.ns.cloudflare.com, irma.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.32.166

NS records: elliot.ns.cloudflare.com, irma.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for ghostshell.dev (unsigned zone)

⏱️ Timing

Total: 1127ms | Queries: -

📄 Records

Type	Count	Sample Data
A	1	`74.78.90.28`
NS	2	`elliot.ns.cloudflare.com, irma.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	1	`v=spf1 include:spf.efwd.registrar-server`
SOA	1	`elliot.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 10

Out-of-bailiwick: 10 (ns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com...)

Analysis

IP Addresses

ghostshell.dev resolves to just one IP address, 74.78.90.28.

Other host names share IP numbers with ghostshell.dev; blindrabbit.net is one such example.

Name Servers

ghostshell.dev is served by two delegated name servers, elliot.ns.cloudflare.com and irma.ns.cloudflare.com.

ghostshell.dev shares its NS records with other domains, for example freemotcheck.com, getcarscan.com, gape.co.nz and two others.

At least some of ghostshell.dev's name servers are shared with other domains, for example ft-c1437f03d9.pages.dev, patakpranav8423.workers.dev, bongdaso666.org and two more.

These name servers are often deployed together with the name servers tori.ns.cloudflare.com, laila.ns.cloudflare.com, virginia.ns.cloudflare.com and keaton.ns.cloudflare.com.

DNS names with 6 IP addresses:

elliot.ns.cloudflare.com carries IP addresses 108.162.193.162, 172.64.33.162 and 173.245.59.162, with 3 other addresses beyond those.

irma.ns.cloudflare.com carries IP addresses 108.162.192.166, 172.64.32.166 and 173.245.58.166, with 3 other addresses beyond those.

Mail Servers

Five mail servers handle ghostshell.dev: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

There is at least a partial MX overlap between ghostshell.dev and other domains, including arcwaygrowthpartners.com, aabbgg1.net, mediausers.shop and two others.

It is common to find these mail servers used together with the mail servers eforward5.registrar-servers.com and eforward4.registrar-servers.com.

Host names that point to one IP address:

eforward1.registrar-servers.com points to the IP address 162.255.118.51.

eforward2.registrar-servers.com points to the IP address 162.255.118.52.

eforward3.registrar-servers.com points to the IP address 162.255.118.51.

eforward4.registrar-servers.com points to the IP address 162.255.118.52.

eforward5.registrar-servers.com points to the IP address 162.255.118.51.

Each of eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com resolves to 162.255.118.51.

These two host names — eforward2.registrar-servers.com and eforward4.registrar-servers.com — each point to 162.255.118.52 IP addresses.