ghoststack.info - dns.ninja

๐Ÿ›ก๏ธDomain Reputation CheckBlocklist, phishing & malware statusโ†’

ghoststack.info

DNSSECโš ๏ธ Not signed
A2606:4700:3031::6815:268e๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US โœ“ In HTTPS hints
A2606:4700:3034::ac43:dfa3๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US โœ“ In HTTPS hints
A104.21.38.142Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US โœ“ In HTTPS hints
A172.67.223.163๐Ÿ‡บ๐Ÿ‡ธ Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US โœ“ In HTTPS hints
NScraig.ns.cloudflare.com โญ
A2606:4700:58::a29f:2cc0๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcraig.ns.cloudflare.com
A2803:f800:50::6ca2:c3c0๐Ÿ‡จ๐Ÿ‡ท Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRcraig.ns.cloudflare.com
A2a06:98c1:50::ac40:23c0๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2a06:98c1:50::/45
PTRcraig.ns.cloudflare.com
A108.162.195.192๐Ÿ‡บ๐Ÿ‡ธ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcraig.ns.cloudflare.com
A162.159.44.192Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcraig.ns.cloudflare.com
A172.64.35.192๐Ÿ‡บ๐Ÿ‡ธ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcraig.ns.cloudflare.com
NSjillian.ns.cloudflare.com
A2606:4700:50::a29f:262c๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjillian.ns.cloudflare.com
A2803:f800:50::6ca2:c22c๐Ÿ‡จ๐Ÿ‡ท Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRjillian.ns.cloudflare.com
A2a06:98c1:50::ac40:222c๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2a06:98c1:50::/45
PTRjillian.ns.cloudflare.com
A108.162.194.44๐Ÿ‡บ๐Ÿ‡ธ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjillian.ns.cloudflare.com
A162.159.38.44Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjillian.ns.cloudflare.com
A172.64.34.44๐Ÿ‡บ๐Ÿ‡ธ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjillian.ns.cloudflare.com
MXaspmx.l.google.com โญ
A2607:f8b0:4004:c1d::1a๐Ÿ‡บ๐Ÿ‡ธ Google2607:f8b0:4004::/48
PTRww-in-f26.1e100.net
A142.251.111.27๐Ÿ‡บ๐Ÿ‡ธ Google142.251.111.0/24
PTRbk-in-f27.1e100.net
MXalt1.aspmx.l.google.com(5)
A2800:3f0:4003:c14::1b๐Ÿ‡จ๐Ÿ‡ฑ Google2800:3f0:4003::/48
A192.178.234.26๐Ÿ‡บ๐Ÿ‡ธ Google192.178.0.0/15
PTRncsclj-in-f26.1e100.net
MXalt2.aspmx.l.google.com(5)
A2a00:1450:400b:c02::1a๐Ÿ‡ฎ๐Ÿ‡ช Google2a00:1450:400b::/48
PTRdj-in-f26.1e100.net
A172.253.116.26๐Ÿ‡บ๐Ÿ‡ธ Google172.253.116.0/24
PTRdj-in-f26.1e100.net
MXalt3.aspmx.l.google.com(10)
A2a00:1450:4009:c0f::1b๐Ÿ‡ฌ๐Ÿ‡ง Google2a00:1450:4009::/48
PTRyulhrs-in-f27.1e100.net
A192.178.223.27๐Ÿ‡บ๐Ÿ‡ธ Google192.178.223.0/24
PTRyulhrs-in-f27.1e100.net
MXalt4.aspmx.l.google.com(10)
A2a00:1450:400c:c23::1b๐Ÿ‡ง๐Ÿ‡ช Google2a00:1450:400c::/48
PTRyubrupd-in-f27.1e100.net
A172.253.157.26๐Ÿ‡บ๐Ÿ‡ธ Google172.253.0.0/16
PTRyubrupd-in-f26.1e100.net
TXTgoogle-site-verification=5pqe0UcbNH2mQFUwPzqQiYcof8qeK4EeKNC50x1QElg
TXTv=spf1 include:_spf.google.com ~all
HTTPSHTTP/3, HTTP/2 โœ“ hints match
IPv4 hints104.21.38.142, 172.67.223.163
IPv6 hints2606:4700:3031::6815:268e, 2606:4700:3034::ac43:dfa3
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=146, name=cloudflare-ech.com
SOAcraig.ns.cloudflare.comdns@cloudflare.com serial=2414043688

info

DNSSEC๐Ÿ”’ Signed (DS record present)
NSa0.info.afilias-nst.info โญ
NSa2.info.afilias-nst.info
NSb0.info.afilias-nst.org โš ๏ธ Not in parent delegation
NSb2.info.afilias-nst.org โš ๏ธ Not in parent delegation
NSc0.info.afilias-nst.info
NSd0.info.afilias-nst.org โš ๏ธ Not in parent delegation
SOAa0.info.afilias-nst.infohostmaster@donuts.email serial=1788701064

Same first word

Similar names

Previous names

Next names

DNS History

15 records (11 active, 4 former)

NScraig.ns.cloudflare.comjillian.ns.cloudflare.comMXalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comaspmx.l.google.comA104.21.38.142172.67.223.1632606:4700:3031::6815:268e2606:4700:3034::ac43:dfa3188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
โ—NScraig.ns.cloudflare.com2026-09-05 โ†’ 2026-09-06 ยท 2 obs
โ— 2026-09-05 08:56:36
โ— 2026-09-06 13:58:30
โ—NSjillian.ns.cloudflare.com2026-09-05 โ†’ 2026-09-06 ยท 2 obs
โ— 2026-09-05 08:56:36
โ— 2026-09-06 13:58:30
โ—MXalt1.aspmx.l.google.com2026-09-05 โ†’ 2026-09-06 ยท 2 obs
โ— 2026-09-05 08:56:36
โ— 2026-09-06 13:58:30
โ—MXalt2.aspmx.l.google.com2026-09-05 โ†’ 2026-09-06 ยท 2 obs
โ— 2026-09-05 08:56:36
โ— 2026-09-06 13:58:30
โ—MXalt3.aspmx.l.google.com2026-09-05 โ†’ 2026-09-06 ยท 2 obs
โ— 2026-09-05 08:56:36
โ— 2026-09-06 13:58:30
โ—MXalt4.aspmx.l.google.com2026-09-05 โ†’ 2026-09-06 ยท 2 obs
โ— 2026-09-05 08:56:36
โ— 2026-09-06 13:58:30
โ—MXaspmx.l.google.com2026-09-05 โ†’ 2026-09-06 ยท 2 obs
โ— 2026-09-05 08:56:36
โ— 2026-09-06 13:58:30
โ—A104.21.38.1422026-09-06 โ†’ 2026-09-06 ยท 3 obs
โ—‹ 2026-09-05 08:56:36
โ— 2026-09-06 13:58:26
โ— 2026-09-06 13:58:30
โ—A172.67.223.1632026-09-06 โ†’ 2026-09-06 ยท 3 obs
โ—‹ 2026-09-05 08:56:36
โ— 2026-09-06 13:58:26
โ— 2026-09-06 13:58:30
โ—‹A188.114.96.02026-09-05 โ†’ 2026-09-05 ยท 3 obs
โ— 2026-09-05 08:56:36
โ—‹ 2026-09-06 13:58:26
โ—‹ 2026-09-06 13:58:30
โ—‹A188.114.97.02026-09-05 โ†’ 2026-09-05 ยท 3 obs
โ— 2026-09-05 08:56:36
โ—‹ 2026-09-06 13:58:26
โ—‹ 2026-09-06 13:58:30
โ—A2606:4700:3031::6815:268e2026-09-06 โ†’ 2026-09-06 ยท 3 obs
โ—‹ 2026-09-05 08:56:36
โ— 2026-09-06 13:58:26
โ— 2026-09-06 13:58:30
โ—A2606:4700:3034::ac43:dfa32026-09-06 โ†’ 2026-09-06 ยท 3 obs
โ—‹ 2026-09-05 08:56:36
โ— 2026-09-06 13:58:26
โ— 2026-09-06 13:58:30
โ—‹A2a06:98c1:3120::2026-09-05 โ†’ 2026-09-05 ยท 3 obs
โ— 2026-09-05 08:56:36
โ—‹ 2026-09-06 13:58:26
โ—‹ 2026-09-06 13:58:30
โ—‹A2a06:98c1:3121::2026-09-05 โ†’ 2026-09-05 ยท 3 obs
โ— 2026-09-05 08:56:36
โ—‹ 2026-09-06 13:58:26
โ—‹ 2026-09-06 13:58:30

๐Ÿ” DNS Trace

๐Ÿ“‹ Delegation Chain

ZoneNameserversGlue
infoc0.info.afilias-nst.info, a2.info.afilias-nst.info, a0.info.afilias-nst.info-
ghoststack.infocraig.ns.cloudflare.com, jillian.ns.cloudflare.com-

โœ… Authoritative Response

Server:162.159.44.192

NS records: craig.ns.cloudflare.com, jillian.ns.cloudflare.com

๐Ÿ”’ DNSSEC Status

โš ๏ธ Insecure (no DNSSEC)

No DS record for ghoststack.info (unsigned zone)

โฑ๏ธ Timing

Total: 644ms | Queries: -

๐Ÿ“„ Records

TypeCountSample Data
A2104.21.38.142, 172.67.223.163
AAAA22606:4700:3031::6815:268e, 2606:4700:3034::ac43:dfa3
NS2craig.ns.cloudflare.com, jillian.ns.cloudflare.com
MX5aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...
TXT2google-site-verification=5pqe0UcbNH2mQFU, v=spf1 include:_spf.google.com ~all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1craig.ns.cloudflare.com dns.cloudflare.c

Analysis

IP Addresses

ghoststack.info directs to four IP numbers, which are 104.21.38.142, 172.67.223.163, 2606:4700:3031::6815:268e and 2606:4700:3034::ac43:dfa3.

Two other host names, along with webhooked.dev, solsqueezer.io and lecirlcle.com, also share IP numbers with ghoststack.info.

Name Servers

ghoststack.info uses two name servers for its delegation: craig.ns.cloudflare.com and jillian.ns.cloudflare.com.

ghoststack.info shares its NS records with other domains, for example teentechstudio.workers.dev, j6pfly.net, 58-okx.com.cn and two others.

There is at least partial name server overlap between ghoststack.info and other domains โ€” new-feedweaver-dewacash.pages.dev, qbukn.pages.dev, kyouikugakubu-bunko.workers.dev and two more among them.

These name servers frequently co-occur with the name servers diva.ns.cloudflare.com and benedict.ns.cloudflare.com.

DNS names with 6 IP addresses:

Hostname craig.ns.cloudflare.com directs to 108.162.195.192, 162.159.44.192 and 172.64.35.192 along with 3 other IP addresses.

Hostname jillian.ns.cloudflare.com directs to 108.162.194.44, 162.159.38.44 and 172.64.34.44 along with 3 other IP addresses.

Mail Servers

Five mail servers handle ghoststack.info: aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com and two others.

There is at least a partial MX overlap between ghoststack.info and other domains, including rivedix.com, cardinalbaths.com, gettaskpilot.com and two others.

alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, aspmx2.googlemail.com and aspmx3.googlemail.com are mail servers that frequently appear together with these mail servers.

Host names that have two IP addresses:

aspmx.l.google.com directs traffic to 142.251.111.27 and 2607:f8b0:4004:c1d::1a.

alt1.aspmx.l.google.com directs traffic to 192.178.234.26 and 2800:3f0:4003:c14::1b.

alt2.aspmx.l.google.com directs traffic to 172.253.116.26 and 2a00:1450:400b:c02::1a.

alt3.aspmx.l.google.com directs traffic to 192.178.223.27 and 2a00:1450:4009:c0f::1b.

alt4.aspmx.l.google.com directs traffic to 172.253.157.26 and 2a00:1450:400c:c23::1b.