🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`ghostcoder.app`

DNSSEC	⚠️ Not signed
A	2606:4700:3034::ac43:bbfa^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::6815:7c0^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.7.192^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.187.250^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`gordon.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3baa^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`gordon.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1aa^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`gordon.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21aa^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`gordon.ns.cloudflare.com`
		A	108.162.193.170^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`gordon.ns.cloudflare.com`
		A	172.64.33.170^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`gordon.ns.cloudflare.com`
		A	173.245.59.170^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`gordon.ns.cloudflare.com`
NS	`kehlani.ns.cloudflare.com`
		A	2606:4700:50::a29f:26df^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kehlani.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c2df^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`kehlani.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:22df^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`kehlani.ns.cloudflare.com`
		A	108.162.194.223^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kehlani.ns.cloudflare.com`
		A	162.159.38.223^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kehlani.ns.cloudflare.com`
		A	172.64.34.223^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kehlani.ns.cloudflare.com`
MX	`mx1.improvmx.com` ⭐
		A	2a05:d012:412:e201:88aa:e7b9:7a43:12d7^{🇫🇷 Amazon2a05:d012:400::/38 AMAZON AWS}
		A	2a05:d012:412:e202:f36:2c1f:1a49:d38a^{🇫🇷 Amazon2a05:d012:400::/38 AMAZON AWS}
		A	2a05:d012:412:e203:373a:f51a:4a85:1d25^{🇫🇷 Amazon2a05:d012:400::/38 AMAZON AWS}
		A	13.37.195.136^{🇫🇷 Amazon13.36.0.0/14 EC2 CDG Prefix}
			PTR	`ec2-13-37-195-136.eu-west-3.compute.amazonaws.com`
		A	15.236.236.160^{🇫🇷 Amazon15.236.0.0/15 EC2 CDG prefix}
			PTR	`ec2-15-236-236-160.eu-west-3.compute.amazonaws.com`
		A	35.181.18.45^{🇫🇷 Amazon35.181.0.0/16 EC2 CDG prefix}
			PTR	`ec2-35-181-18-45.eu-west-3.compute.amazonaws.com`
MX	`mx2.improvmx.com`⁽²⁰⁾
		A	2a05:d012:412:e201:1f6e:f6e4:8fd7:4678^{🇫🇷 Amazon2a05:d012:400::/38 AMAZON AWS}
		A	2a05:d012:412:e202:e81e:cc44:3b53:8a3d^{🇫🇷 Amazon2a05:d012:400::/38 AMAZON AWS}
		A	2a05:d012:412:e203:7e33:3d9c:28d7:ee20^{🇫🇷 Amazon2a05:d012:400::/38 AMAZON AWS}
		A	13.36.107.63^{🇫🇷 Amazon13.36.0.0/14 EC2 CDG Prefix}
			PTR	`ec2-13-36-107-63.eu-west-3.compute.amazonaws.com`
		A	13.36.222.39^{🇫🇷 Amazon13.36.0.0/14 EC2 CDG Prefix}
			PTR	`ec2-13-36-222-39.eu-west-3.compute.amazonaws.com`
		A	15.236.61.92^{🇫🇷 Amazon15.236.0.0/15 EC2 CDG prefix}
			PTR	`ec2-15-236-61-92.eu-west-3.compute.amazonaws.com`
TXT	`google-site-verification=gq6XHoOVVO8HW-P-jIWRR(0x354558)j2rsu40sVS6mFccWsqw`
TXT	`v=spf1 include:spf.improvmx.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.7.192, 172.67.187.250
		IPv6 hints	2606:4700:3034::ac43:bbfa, 2606:4700:3035::6815:7c0
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=139, name=cloudflare-ech.com
SOA	`gordon.ns.cloudflare.com`dns@cloudflare.com serial=2415142998

`app`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns-tld1.charlestonroadregistry.com` ⭐
	NS	`ns-tld2.charlestonroadregistry.com`
	NS	`ns-tld3.charlestonroadregistry.com`
	NS	`ns-tld4.charlestonroadregistry.com`
	NS	`ns-tld5.charlestonroadregistry.com`
	SOA	`ns-tld1.charlestonroadregistry.com`cloud-dns-hostmaster@google.com serial=101427

🔒 HSTS Preload (+subdomains)

Same first word

ghostcoder.xyz

ghostcoder.de

ghostcoder.com

ghostcoder.dev

ghostcoder.ru

ghostcoder.app

ghostcoder.codes

Similar names

redghostco.com

ghostdecor.com

gestochord.com

Previous names

Next names

DNS History

8 records (8 active, 0 former)

●NSgordon.ns.cloudflare.com2026-09-05 → 2026-09-30 · 2 obs

● 2026-09-05 13:09:46
● 2026-09-30 17:01:16

●NSkehlani.ns.cloudflare.com2026-09-05 → 2026-09-30 · 2 obs

● 2026-09-05 13:09:46
● 2026-09-30 17:01:16

●MXmx1.improvmx.com2026-09-05 → 2026-09-30 · 2 obs

● 2026-09-05 13:09:46
● 2026-09-30 17:01:16

●MXmx2.improvmx.com2026-09-05 → 2026-09-30 · 2 obs

● 2026-09-05 13:09:46
● 2026-09-30 17:01:16

●A104.21.7.1922026-09-05 → 2026-09-30 · 2 obs

● 2026-09-05 13:09:46
● 2026-09-30 17:01:16

●A172.67.187.2502026-09-05 → 2026-09-30 · 2 obs

● 2026-09-05 13:09:46
● 2026-09-30 17:01:16

●A2606:4700:3034::ac43:bbfa2026-09-05 → 2026-09-30 · 2 obs

● 2026-09-05 13:09:46
● 2026-09-30 17:01:16

●A2606:4700:3035::6815:7c02026-09-05 → 2026-09-30 · 2 obs

● 2026-09-05 13:09:46
● 2026-09-30 17:01:16

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
app	ns-tld2.charlestonroadregistry.com, ns-tld1.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com...	10 records
ghostcoder.app	kehlani.ns.cloudflare.com, gordon.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.193.170

NS records: kehlani.ns.cloudflare.com, gordon.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for ghostcoder.app (unsigned zone)

⏱️ Timing

Total: 1045ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.187.250, 104.21.7.192`
AAAA	2	`2606:4700:3035::6815:7c0, 2606:4700:3034::ac43:bbfa`
NS	2	`gordon.ns.cloudflare.com, kehlani.ns.cloudflare.com`
MX	2	`mx1.improvmx.com (pri: 10), mx2.improvmx.com (pri: 20)`
TXT	2	`google-site-verification=gq6XHoOVVO8HW-P, v=spf1 include:spf.improvmx.com ~all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`gordon.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 10

Out-of-bailiwick: 10 (ns-tld5.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com...)

Analysis

IP Addresses

ghostcoder.app directs to four IP numbers, which are 104.21.7.192, 172.67.187.250, 2606:4700:3034::ac43:bbfa and 2606:4700:3035::6815:7c0.

Additional host names — redj-77neon.shop, juicyjangles.com, pmadvdev.com and two others — share IP numbers with ghostcoder.app.

Name Servers

ghostcoder.app uses two name servers for its delegation: gordon.ns.cloudflare.com and kehlani.ns.cloudflare.com.

ghostcoder.app shares its name server setup with other domains, including qd77tsnnxs.workers.dev, dryveai-site.pages.dev, 5minutsr0dki.cfd and two others.

There is at least partial name server overlap between ghostcoder.app and other domains — byyc2lp.com, q7vl59p1.buzz, rapertoire.com and two more among them.

These name servers are routinely deployed together with the name servers aspen.ns.cloudflare.com.

Host names with 6 IP numbers:

Hostname gordon.ns.cloudflare.com directs to 108.162.193.170, 172.64.33.170 and 173.245.59.170 along with 3 other IP addresses.

Hostname kehlani.ns.cloudflare.com directs to 108.162.194.223, 162.159.38.223 and 172.64.34.223 along with 3 other IP addresses.

Mail Servers

ghostcoder.app has two mail servers: mx1.improvmx.com and mx2.improvmx.com.

ghostcoder.app shares the same mail server setup as other domains, including koshermap.net, jcmt.org.uk, matiwon.com and two others.

At least some of ghostcoder.app's mail servers are shared with other domains, among them ivanfandino.net, brothsmen.in and ehw.uk.

Host names with 6 IP numbers:

Hostname mx1.improvmx.com directs to 13.37.195.136, 15.236.236.160 and 35.181.18.45 along with 3 other IP addresses.

Hostname mx2.improvmx.com directs to 13.36.107.63, 13.36.222.39 and 15.236.61.92 along with 3 other IP addresses.

ghostcoder.app - robtex.com

ghostcoder.app

app

Same first word

Similar names

Previous names

Next names

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

Mail Servers

`ghostcoder.app`

`app`