ghswitch.dev - dns.ninja

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

ghswitch.dev

DNSSEC⚠️ Not signed
A2606:4700:3032::6815:7e2Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3036::ac43:9c81Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.7.226Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.156.129Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NScoco.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3a68πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcoco.ns.cloudflare.com
A2803:f800:50::6ca2:c068πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRcoco.ns.cloudflare.com
A2a06:98c1:50::ac40:2068πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRcoco.ns.cloudflare.com
A108.162.192.104πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcoco.ns.cloudflare.com
A172.64.32.104πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcoco.ns.cloudflare.com
A173.245.58.104πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcoco.ns.cloudflare.com
NSnick.ns.cloudflare.com
A2606:4700:58::adf5:3bd5πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnick.ns.cloudflare.com
A2803:f800:50::6ca2:c1d5πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRnick.ns.cloudflare.com
A2a06:98c1:50::ac40:21d5πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRnick.ns.cloudflare.com
A108.162.193.213πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnick.ns.cloudflare.com
A172.64.33.213πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnick.ns.cloudflare.com
A173.245.59.213πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnick.ns.cloudflare.com
MXeforward1.registrar-servers.com ⭐
A162.255.118.51πŸ‡ΊπŸ‡Έ AS22612162.255.118.0/24
PTReforward1.registrar-servers.com
PTReforward3.registrar-servers.com
MXeforward2.registrar-servers.com ⭐
A162.255.118.52πŸ‡ΊπŸ‡Έ AS22612162.255.118.0/24
PTReforward2.registrar-servers.com
MXeforward3.registrar-servers.com ⭐
A162.255.118.51πŸ‡ΊπŸ‡Έ AS22612162.255.118.0/24
PTReforward1.registrar-servers.com
PTReforward3.registrar-servers.com
MXeforward4.registrar-servers.com(15)
A162.255.118.52πŸ‡ΊπŸ‡Έ AS22612162.255.118.0/24
PTReforward2.registrar-servers.com
MXeforward5.registrar-servers.com(20)
A162.255.118.51πŸ‡ΊπŸ‡Έ AS22612162.255.118.0/24
PTReforward1.registrar-servers.com
PTReforward3.registrar-servers.com
TXTv=spf1 include:spf.efwd.registrar-servers.com ~all
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.7.226, 172.67.156.129
IPv6 hints2606:4700:3032::6815:7e2, 2606:4700:3036::ac43:9c81
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=27, name=cloudflare-ech.com
SOAcoco.ns.cloudflare.comdns@cloudflare.com serial=2416622686

dev

DNSSECπŸ”’ Signed (DS record present)
NSns-tld1.charlestonroadregistry.com ⭐
NSns-tld2.charlestonroadregistry.com
NSns-tld3.charlestonroadregistry.com
NSns-tld4.charlestonroadregistry.com
NSns-tld5.charlestonroadregistry.com
SOAns-tld1.charlestonroadregistry.comcloud-dns-hostmaster@google.com serial=1
πŸ”’ HSTS Preload (+subdomains)

Same first word

Previous names

Next names

DNS History

15 records (11 active, 4 former)

NScoco.ns.cloudflare.comnick.ns.cloudflare.comMXeforward1.registrar-servers.comeforward2.registrar-servers.comeforward3.registrar-servers.comeforward4.registrar-servers.comeforward5.registrar-servers.comA104.21.7.226172.67.156.1292606:4700:3032::6815:7e22606:4700:3036::ac43:9c81188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NScoco.ns.cloudflare.com2026-10-04 β†’ 2026-10-28 Β· 2 obs
● 2026-10-04 15:31:54
● 2026-10-28 12:37:02
●NSnick.ns.cloudflare.com2026-10-04 β†’ 2026-10-28 Β· 2 obs
● 2026-10-04 15:31:54
● 2026-10-28 12:37:02
●MXeforward1.registrar-servers.com2026-10-04 β†’ 2026-10-28 Β· 4 obs
● 2026-10-04 15:31:54
β—‹ 2026-10-24 18:27:18
● 2026-10-28 12:36:58
● 2026-10-28 12:37:02
●MXeforward2.registrar-servers.com2026-10-04 β†’ 2026-10-28 Β· 4 obs
● 2026-10-04 15:31:54
β—‹ 2026-10-24 18:27:18
● 2026-10-28 12:36:58
● 2026-10-28 12:37:02
●MXeforward3.registrar-servers.com2026-10-04 β†’ 2026-10-28 Β· 4 obs
● 2026-10-04 15:31:54
β—‹ 2026-10-24 18:27:18
● 2026-10-28 12:36:58
● 2026-10-28 12:37:02
●MXeforward4.registrar-servers.com2026-10-04 β†’ 2026-10-28 Β· 4 obs
● 2026-10-04 15:31:54
β—‹ 2026-10-24 18:27:18
● 2026-10-28 12:36:58
● 2026-10-28 12:37:02
●MXeforward5.registrar-servers.com2026-10-04 β†’ 2026-10-28 Β· 4 obs
● 2026-10-04 15:31:54
β—‹ 2026-10-24 18:27:18
● 2026-10-28 12:36:58
● 2026-10-28 12:37:02
●A104.21.7.2262026-10-06 β†’ 2026-10-28 Β· 5 obs
β—‹ 2026-10-04 15:31:54
● 2026-10-06 04:26:48
β—‹ 2026-10-24 18:27:18
● 2026-10-28 12:36:58
● 2026-10-28 12:37:02
●A172.67.156.1292026-10-06 β†’ 2026-10-28 Β· 5 obs
β—‹ 2026-10-04 15:31:54
● 2026-10-06 04:26:48
β—‹ 2026-10-24 18:27:18
● 2026-10-28 12:36:58
● 2026-10-28 12:37:02
β—‹A188.114.96.02026-10-04 β†’ 2026-10-04 Β· 3 obs
● 2026-10-04 15:31:54
β—‹ 2026-10-06 04:26:48
β—‹ 2026-10-28 12:37:02
β—‹A188.114.97.02026-10-04 β†’ 2026-10-04 Β· 3 obs
● 2026-10-04 15:31:54
β—‹ 2026-10-06 04:26:48
β—‹ 2026-10-28 12:37:02
●A2606:4700:3032::6815:7e22026-10-06 β†’ 2026-10-28 Β· 5 obs
β—‹ 2026-10-04 15:31:54
● 2026-10-06 04:26:48
β—‹ 2026-10-24 18:27:18
● 2026-10-28 12:36:58
● 2026-10-28 12:37:02
●A2606:4700:3036::ac43:9c812026-10-06 β†’ 2026-10-28 Β· 5 obs
β—‹ 2026-10-04 15:31:54
● 2026-10-06 04:26:48
β—‹ 2026-10-24 18:27:18
● 2026-10-28 12:36:58
● 2026-10-28 12:37:02
β—‹A2a06:98c1:3120::2026-10-04 β†’ 2026-10-04 Β· 3 obs
● 2026-10-04 15:31:54
β—‹ 2026-10-06 04:26:48
β—‹ 2026-10-28 12:37:02
β—‹A2a06:98c1:3121::2026-10-04 β†’ 2026-10-04 Β· 3 obs
● 2026-10-04 15:31:54
β—‹ 2026-10-06 04:26:48
β—‹ 2026-10-28 12:37:02

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
devns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com...-
ghswitch.devnick.ns.cloudflare.com, coco.ns.cloudflare.com-

βœ… Authoritative Response

Server:172.64.32.104

NS records: nick.ns.cloudflare.com, coco.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for ghswitch.dev (unsigned zone)

⏱️ Timing

Total: 553ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.156.129, 104.21.7.226
AAAA22606:4700:3032::6815:7e2, 2606:4700:3036::ac43:9c81
NS2coco.ns.cloudflare.com, nick.ns.cloudflare.com
MX5eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...
TXT1v=spf1 include:spf.efwd.registrar-server
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1coco.ns.cloudflare.com dns.cloudflare.co

Analysis

IP Addresses

ghswitch.dev points to the four IP addresses 104.21.7.226, 172.67.156.129, 2606:4700:3032::6815:7e2 and 2606:4700:3036::ac43:9c81.

Name Servers

Two name servers handle the delegation for ghswitch.dev: coco.ns.cloudflare.com and nick.ns.cloudflare.com.

ghswitch.dev shares its NS records with other domains, for example munly-backend.workers.dev, copiwa2458-2538-0-jty.pages.dev, sqtpbx.com and two others.

At least some of ghswitch.dev's name servers are shared with other domains, for example medorganizer.gr, myhvacheroes-com.pages.dev, celpxwin.pages.dev and two more.

It is common for these name servers to be used in conjunction with the name servers vin.ns.cloudflare.com, greg.ns.cloudflare.com and ulla.ns.cloudflare.com.

DNS names with 6 IP addresses:

coco.ns.cloudflare.com resolves to 108.162.192.104, 172.64.32.104 and 173.245.58.104 among others, with 3 other IP addresses in total.

nick.ns.cloudflare.com resolves to 108.162.193.213, 172.64.33.213 and 173.245.59.213 among others, with 3 other IP addresses in total.

Mail Servers

ghswitch.dev has five mail servers, which are eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

Host names that point to one IP address:

The hostname eforward1.registrar-servers.com resolves to 162.255.118.51.

The hostname eforward2.registrar-servers.com resolves to 162.255.118.52.

The hostname eforward3.registrar-servers.com resolves to 162.255.118.51.

The hostname eforward4.registrar-servers.com resolves to 162.255.118.52.

The hostname eforward5.registrar-servers.com resolves to 162.255.118.51.

Each of eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com resolves to 162.255.118.51.

Host names that point to 162.255.118.52 : eforward2.registrar-servers.com and eforward4.registrar-servers.com.