ghostdev.wtf - dns.ninja
ghostdev.wtf
wtf
| DNSSEC | 🔒 Signed (DS record present) | ||||||
| NS | v0n0.nic.wtf ⭐ | ||||||
| NS | v0n1.nic.wtf | ||||||
| NS | v0n2.nic.wtf | ||||||
| NS | v0n3.nic.wtf | ||||||
| NS | v2n0.nic.wtf | ||||||
| NS | v2n1.nic.wtf | ||||||
| SOA | v0n0.nic.wtfhostmaster@donuts.email serial=1783800280 | ||||||
Same first word
DNS History
9 records (6 active, 3 former)
●NS5014.ns1.abovedomains.com2026-07-11 → 2026-07-11 · 3 obs
● 2026-07-11 20:36:20
● 2026-07-11 20:36:22
●NS5014.ns2.abovedomains.com2026-07-11 → 2026-07-11 · 3 obs
● 2026-07-11 20:36:20
● 2026-07-11 20:36:22
●NSns1.abovedomains.com2026-07-11 → 2026-07-11 · 3 obs
● 2026-07-11 20:36:20
● 2026-07-11 20:36:22
○NSns1.dyna-ns.net2026-03-21 → 2026-03-28 · 4 obs
● 2026-03-28 02:00:14
○ 2026-07-11 20:36:20
○ 2026-07-11 20:36:22
●NSns2.abovedomains.com2026-07-11 → 2026-07-11 · 3 obs
● 2026-07-11 20:36:20
● 2026-07-11 20:36:22
○NSns2.dyna-ns.net2026-03-21 → 2026-03-28 · 4 obs
● 2026-03-28 02:00:14
○ 2026-07-11 20:36:20
○ 2026-07-11 20:36:22
●A103.224.212.1092026-07-11 → 2026-07-11 · 3 obs
● 2026-07-11 20:36:20
● 2026-07-11 20:36:22
○A34.111.179.2082026-03-21 → 2026-03-28 · 4 obs
● 2026-03-28 02:00:14
○ 2026-07-11 20:36:20
○ 2026-07-11 20:36:22
🔍 DNS Trace
📋 Delegation Chain
| Zone | Nameservers | Glue |
|---|---|---|
| wtf | v0n1.nic.wtf, v0n3.nic.wtf, v2n1.nic.wtf, v2n0.nic.wtf... | 12 records |
| ghostdev.wtf | 5014.ns1.abovedomains.com, 5014.ns2.abovedomains.com | - |
✅ Authoritative Response
Server:103.224.212.9
NS records: 5014.ns1.abovedomains.com, 5014.ns2.abovedomains.com
🔒 DNSSEC Status
⚠️ Insecure (no DNSSEC)
No DS record for ghostdev.wtf (unsigned zone)
⏱️ Timing
Total: 1297ms | Queries: -
📄 Records
| Type | Count | Sample Data |
|---|---|---|
| A | 1 | 103.224.212.109 |
| NS | 2 | ns1.abovedomains.com, ns2.abovedomains.com |
| MX | 1 | park-mx.above.com (pri: 10) |
| TXT | 1 | v=spf1 ip6:fdcf:abda:4154::/48 -all |
| SOA | 1 | ns1.abovedomains.com hostmaster.trellian |
📌 Glue Records Collected
Total: 12
In-bailiwick: 12 (v2n1.nic.wtf, v2n0.nic.wtf, v0n3.nic.wtf...)
Analysis
IP Addresses
ghostdev.wtf points to a single IP number: 103.224.212.109.
Additional host names — freslot.com, viral(0x706f726e)o.com, www.mftad.cc and two others — share IP numbers with ghostdev.wtf.
Name Servers
ghostdev.wtf has four authoritative name servers: ns1.abovedomains.com, ns2.abovedomains.com, 5014.ns1.abovedomains.com and 5014.ns2.abovedomains.com.
There is at least partial name server overlap between ghostdev.wtf and other domains — ggalanti.com, locali.co, lowesportal.com and two more among them.
These name servers regularly appear alongside ns15.abovedomains.com, ns16.abovedomains.com, contact-us-at.edoms.biz and 5 other name servers in NS record sets.
The hosts ns1.abovedomains.com, ns2.abovedomains.com, 5014.ns1.abovedomains.com and 5014.ns2.abovedomains.com each have four IP numbers: ns1.abovedomains.com resolves to 103.224.182.9, 103.224.182.77, 103.224.182.85 and 103.224.212.9; ns2.abovedomains.com resolves to 103.224.182.10, 103.224.212.10, 103.224.212.51 and 103.224.212.53; 5014.ns1.abovedomains.com resolves to 103.224.182.9, 103.224.182.77, 103.224.182.85 and 103.224.212.9; 5014.ns2.abovedomains.com resolves to 103.224.182.10, 103.224.212.10, 103.224.212.51 and 103.224.212.53.
These two host names — ns1.abovedomains.com and 5014.ns1.abovedomains.com — each point to 103.224.182.9 IP addresses.
These two host names — ns1.abovedomains.com and 5014.ns1.abovedomains.com — each point to 103.224.182.77 IP addresses.
These two host names — ns1.abovedomains.com and 5014.ns1.abovedomains.com — each point to 103.224.182.85 IP addresses.
These two host names — ns1.abovedomains.com and 5014.ns1.abovedomains.com — each point to 103.224.212.9 IP addresses.
These two host names — ns2.abovedomains.com and 5014.ns2.abovedomains.com — each point to 103.224.182.10 IP addresses.
These two host names — ns2.abovedomains.com and 5014.ns2.abovedomains.com — each point to 103.224.212.10 IP addresses.
These two host names — ns2.abovedomains.com and 5014.ns2.abovedomains.com — each point to 103.224.212.51 IP addresses.
These two host names — ns2.abovedomains.com and 5014.ns2.abovedomains.com — each point to 103.224.212.53 IP addresses.
Mail Servers
ghostdev.wtf has one mail server: park-mx.above.com.
ghostdev.wtf shares the same mail server setup as other domains, including worldprice.it, asklend.com, seconds.com.au and two others.
There is one IP number for park-mx.above.com: 103.224.212.34.