🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`scriptedghosts.ai`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::ac43:8acb^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3034::6815:46c0^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.70.192^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.138.203^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`mario.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3bcb^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`mario.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1cb^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`mario.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21cb^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`mario.ns.cloudflare.com`
		A	108.162.193.203^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`mario.ns.cloudflare.com`
		A	172.64.33.203^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`mario.ns.cloudflare.com`
		A	173.245.59.203^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`mario.ns.cloudflare.com`
NS	`shubhi.ns.cloudflare.com`
		A	2606:4700:50::a29f:263f^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`shubhi.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c23f^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`shubhi.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:223f^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`shubhi.ns.cloudflare.com`
		A	108.162.194.63^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`shubhi.ns.cloudflare.com`
		A	162.159.38.63^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`shubhi.ns.cloudflare.com`
		A	172.64.34.63^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`shubhi.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.70.192, 172.67.138.203
		IPv6 hints	2606:4700:3031::ac43:8acb, 2606:4700:3034::6815:46c0
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=189, name=cloudflare-ech.com
SOA	`mario.ns.cloudflare.com`dns@cloudflare.com serial=2414570177

`ai`

	DNSSEC	🔒 Signed (DS record present)
	NS	`v0n0.nic.ai` ⭐
	NS	`v0n1.nic.ai`
	NS	`v0n2.nic.ai`
	NS	`v0n3.nic.ai`
	NS	`v2n0.nic.ai`
	NS	`v2n1.nic.ai`
	SOA	`v0n0.nic.ai`hostmaster@donuts.email serial=1790279952

Same first word

scriptedghosts.ai

Previous names

Next names

DNS History

15 records (11 active, 4 former)

●NSmario.ns.cloudflare.com2026-09-14 → 2026-09-24 · 2 obs

● 2026-09-14 00:34:14
● 2026-09-24 20:02:38

●NSshubhi.ns.cloudflare.com2026-09-14 → 2026-09-24 · 2 obs

● 2026-09-14 00:34:14
● 2026-09-24 20:02:38

●MXeforward1.registrar-servers.com2026-09-14 → 2026-09-24 · 2 obs

● 2026-09-14 00:34:14
● 2026-09-24 20:02:38

●MXeforward2.registrar-servers.com2026-09-14 → 2026-09-24 · 2 obs

● 2026-09-14 00:34:14
● 2026-09-24 20:02:38

●MXeforward3.registrar-servers.com2026-09-14 → 2026-09-24 · 2 obs

● 2026-09-14 00:34:14
● 2026-09-24 20:02:38

●MXeforward4.registrar-servers.com2026-09-14 → 2026-09-24 · 2 obs

● 2026-09-14 00:34:14
● 2026-09-24 20:02:38

●MXeforward5.registrar-servers.com2026-09-14 → 2026-09-24 · 2 obs

● 2026-09-14 00:34:14
● 2026-09-24 20:02:38

●A104.21.70.1922026-09-24 → 2026-09-24 · 3 obs

○ 2026-09-14 00:34:14
● 2026-09-24 10:22:02
● 2026-09-24 20:02:38

●A172.67.138.2032026-09-24 → 2026-09-24 · 3 obs

○ 2026-09-14 00:34:14
● 2026-09-24 10:22:02
● 2026-09-24 20:02:38

○A188.114.96.02026-09-14 → 2026-09-14 · 3 obs

● 2026-09-14 00:34:14
○ 2026-09-24 10:22:02
○ 2026-09-24 20:02:38

○A188.114.97.02026-09-14 → 2026-09-14 · 3 obs

● 2026-09-14 00:34:14
○ 2026-09-24 10:22:02
○ 2026-09-24 20:02:38

●A2606:4700:3031::ac43:8acb2026-09-24 → 2026-09-24 · 3 obs

○ 2026-09-14 00:34:14
● 2026-09-24 10:22:02
● 2026-09-24 20:02:38

●A2606:4700:3034::6815:46c02026-09-24 → 2026-09-24 · 3 obs

○ 2026-09-14 00:34:14
● 2026-09-24 10:22:02
● 2026-09-24 20:02:38

○A2a06:98c1:3120::2026-09-14 → 2026-09-14 · 3 obs

● 2026-09-14 00:34:14
○ 2026-09-24 10:22:02
○ 2026-09-24 20:02:38

○A2a06:98c1:3121::2026-09-14 → 2026-09-14 · 3 obs

● 2026-09-14 00:34:14
○ 2026-09-24 10:22:02
○ 2026-09-24 20:02:38

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
ai	v0n0.nic.ai, v0n1.nic.ai, v0n2.nic.ai, v0n3.nic.ai...	-
scriptedghosts.ai	shubhi.ns.cloudflare.com, mario.ns.cloudflare.com	-

✅ Authoritative Response

Server:162.159.38.63

NS records: shubhi.ns.cloudflare.com, mario.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for scriptedghosts.ai (unsigned zone)

⏱️ Timing

Total: 565ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.70.192, 172.67.138.203`
AAAA	2	`2606:4700:3034::6815:46c0, 2606:4700:3031::ac43:8acb`
NS	2	`mario.ns.cloudflare.com, shubhi.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	1	`v=spf1 include:spf.efwd.registrar-server`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`mario.ns.cloudflare.com dns.cloudflare.c`

Analysis

IP Addresses

scriptedghosts.ai has four IP addresses: 104.21.70.192, 172.67.138.203, 2606:4700:3031::ac43:8acb and 2606:4700:3034::6815:46c0.

Among the host names that share IP numbers with scriptedghosts.ai are dcxiit.cn, runtimecreative.com, viraldisney.net and two others.

Name Servers

The NS records for scriptedghosts.ai delegate to mario.ns.cloudflare.com and shubhi.ns.cloudflare.com.

scriptedghosts.ai has the same name server delegation as a number of other domains, such as inatogel125jpx.site, eliaracarflex.cfd, cowboy-spin-ink-d2042533.pages.dev and two more.

scriptedghosts.ai has at least partial name server overlap with other domains, such as melissa-jamaica.pages.dev, talos-project.co.uk, tinggal.click and two others.

It is common to find these name servers paired with the name servers newt.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

mario.ns.cloudflare.com maps to 108.162.193.203, 172.64.33.203, 173.245.59.203 and 3 additional IP addresses.

shubhi.ns.cloudflare.com maps to 108.162.194.63, 162.159.38.63, 172.64.34.63 and 3 additional IP addresses.

Mail Servers

Mail for scriptedghosts.ai is handled by five mail servers, namely eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

scriptedghosts.ai shares at least some of its mail servers with other domains — for example tributaryeth.com, favouronyinye.design, losangelesapparel.boutique and two more.

These mail servers tend to be used in combination with the mail servers eforward4.registrar-servers.com and eforward5.registrar-servers.com.

Hosts that resolve to one IP address:

eforward1.registrar-servers.com resolves to the IP address 162.255.118.51.

eforward2.registrar-servers.com resolves to the IP address 162.255.118.52.

eforward3.registrar-servers.com resolves to the IP address 162.255.118.51.

eforward4.registrar-servers.com resolves to the IP address 162.255.118.52.

eforward5.registrar-servers.com resolves to the IP address 162.255.118.51.

eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com all direct to 162.255.118.51.

eforward2.registrar-servers.com and eforward4.registrar-servers.com each have 162.255.118.52 IP addresses.