ghostcode.work - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

ghostcode.work

DNSSEC🔒 Signed (DS record present)
A2606:4700:3031::ac43:cda7🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3036::6815:16a2🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.22.162Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.205.167🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSaaden.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2c5c🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRaaden.ns.cloudflare.com
A2803:f800:50::6ca2:c35c🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRaaden.ns.cloudflare.com
A2a06:98c1:50::ac40:235c🇺🇸 Cloudflare2a06:98c1:50::/45
PTRaaden.ns.cloudflare.com
A108.162.195.92🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRaaden.ns.cloudflare.com
A162.159.44.92Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRaaden.ns.cloudflare.com
A172.64.35.92🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRaaden.ns.cloudflare.com
NStiffany.ns.cloudflare.com
A2606:4700:50::a29f:263c🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtiffany.ns.cloudflare.com
A2803:f800:50::6ca2:c23c🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRtiffany.ns.cloudflare.com
A2a06:98c1:50::ac40:223c🇺🇸 Cloudflare2a06:98c1:50::/45
PTRtiffany.ns.cloudflare.com
A108.162.194.60🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtiffany.ns.cloudflare.com
A162.159.38.60Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtiffany.ns.cloudflare.com
A172.64.34.60🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtiffany.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.22.162, 172.67.205.167
IPv6 hints2606:4700:3031::ac43:cda7, 2606:4700:3036::6815:16a2
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=215, name=cloudflare-ech.com
SOAaaden.ns.cloudflare.comdns@cloudflare.com serial=2413603362

work

DNSSEC🔒 Signed (DS record present)
NSa.nic.work ⭐
NSb.nic.work
NSc.nic.work
NSx.nic.work
NSy.nic.work
NSz.nic.work
SOAa.nic.workadmin@tldns.godaddy serial=1788175940
⚠️ On DNS blocklist: spam-tlds

Same first word

ghostcode.com
ghostcode.lima-city.de
ghostcode.win
ghostcode.in
ghostcode.work
ghostcode.dk
ghostcode.ai
ghostcode.ru
ghostcode.de
ghostcode.net
ghostcode.space

Similar names

codeghost.space
goodtechs.eu
techgoods.net
goodstech.com
gostehdoc.top
techgoods.xyz
etchgoods.com
codeghost.de
techgoods.ru
codeghost.org
codeghost.online
techgoods.de
goodtechs.com
codeghost.com
techgoods.com

Previous names

ghdb4-j8fqh-xtgcwy.work
ghdl.work
ghdqj-26vv2-udjwlt.work
ghedeon.work
gherkin-labs.work
gherkin.work
ghevh-2v06m-zovvsl.work
ghfr.work
ghhd3-w961f-phbzgt.work
ghhuf-72x7l-mhncpd.work
ghhwm-z4doe-zimzzq.work
ghienphim.work
ghijkl.work
ghiklm.work
ghjlab.work
ghlqkji.work
ghlul-curyr-gzladc.work
ghngal-sfnyajrhbz.work
ghostcheck.work

Next names

ghosted.work
ghostlabhomecenter.work
ghostlabs.work
ghostless.work
ghostlify.work
ghostmode.work
ghostpost.work
ghostwriter.work
ghpx8m.work
ghrgb.work
ghrhrghu.work
ghsa.work
ghscl-kzk78-sdnybg.work
ghsmw-ayjhm-lnqpvh.work
ghtgbh.work
ghu97-xotp4-yuvius.work
ghub.work
ghubrahtech.work
ghxhz-ze2di-mxarfc.work

DNS History

10 records (6 active, 4 former)

NSaaden.ns.cloudflare.comtiffany.ns.cloudflare.comA104.21.22.162172.67.205.1672606:4700:3031::ac43:cda72606:4700:3036::6815:16a2188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSaaden.ns.cloudflare.com2026-08-30 → 2026-08-31 · 2 obs
● 2026-08-30 17:47:22
● 2026-08-31 11:34:54
●NStiffany.ns.cloudflare.com2026-08-30 → 2026-08-31 · 2 obs
● 2026-08-30 17:47:22
● 2026-08-31 11:34:54
●A104.21.22.1622026-08-31 → 2026-08-31 · 3 obs
○ 2026-08-30 17:47:22
● 2026-08-31 11:34:50
● 2026-08-31 11:34:54
●A172.67.205.1672026-08-31 → 2026-08-31 · 3 obs
○ 2026-08-30 17:47:22
● 2026-08-31 11:34:50
● 2026-08-31 11:34:54
○A188.114.96.02026-08-30 → 2026-08-30 · 3 obs
● 2026-08-30 17:47:22
○ 2026-08-31 11:34:50
○ 2026-08-31 11:34:54
○A188.114.97.02026-08-30 → 2026-08-30 · 3 obs
● 2026-08-30 17:47:22
○ 2026-08-31 11:34:50
○ 2026-08-31 11:34:54
●A2606:4700:3031::ac43:cda72026-08-31 → 2026-08-31 · 3 obs
○ 2026-08-30 17:47:22
● 2026-08-31 11:34:50
● 2026-08-31 11:34:54
●A2606:4700:3036::6815:16a22026-08-31 → 2026-08-31 · 3 obs
○ 2026-08-30 17:47:22
● 2026-08-31 11:34:50
● 2026-08-31 11:34:54
○A2a06:98c1:3120::2026-08-30 → 2026-08-30 · 3 obs
● 2026-08-30 17:47:22
○ 2026-08-31 11:34:50
○ 2026-08-31 11:34:54
○A2a06:98c1:3121::2026-08-30 → 2026-08-30 · 3 obs
● 2026-08-30 17:47:22
○ 2026-08-31 11:34:50
○ 2026-08-31 11:34:54

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
workz.nic.work, x.nic.work, a.nic.work, c.nic.work...12 records
ghostcode.workaaden.ns.cloudflare.com, tiffany.ns.cloudflare.com-

✅ Authoritative Response

Server:162.159.44.92

NS records: aaden.ns.cloudflare.com, tiffany.ns.cloudflare.com

🔒 DNSSEC Status

🔐 Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 677ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.22.162, 172.67.205.167
AAAA22606:4700:3031::ac43:cda7, 2606:4700:3036::6815:16a2
NS2aaden.ns.cloudflare.com, tiffany.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1aaden.ns.cloudflare.com dns.cloudflare.c

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (a.nic.work, b.nic.work, c.nic.work...)

Analysis

IP Addresses

ghostcode.work points to the four IP addresses 104.21.22.162, 172.67.205.167, 2606:4700:3031::ac43:cda7 and 2606:4700:3036::6815:16a2.

adroite-capitorc.sbs, seanlangan.co.uk, collectioniodesi.world plus two other host names have IP numbers in common with ghostcode.work.

Name Servers

DNS delegation for ghostcode.work points to two name servers: aaden.ns.cloudflare.com and tiffany.ns.cloudflare.com.

The name server configuration of ghostcode.work is shared with other domains, for instance kcmportal.com, pioneereliteproperties.ae, vrelvanisto.online and two others.

There is at least partial name server overlap between ghostcode.work and other domains — tapquill.com, www-rntimes-in.pages.dev, pilotsetup.com and two more among them.

These name servers frequently co-occur with the name servers brenna.ns.cloudflare.com and jakub.ns.cloudflare.com.

Hosts with 6 IP addresses each:

aaden.ns.cloudflare.com has IP addresses 108.162.195.92, 162.159.44.92 and 172.64.35.92, plus 3 other.

tiffany.ns.cloudflare.com has IP addresses 108.162.194.60, 162.159.38.60 and 172.64.34.60, plus 3 other.