ghostclient.dev - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

ghostclient.dev

DNSSEC⚠️ Not signed
A2606:4700:3034::ac43:b225πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3037::6815:2b6bπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.43.107Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.178.37πŸ‡ΊπŸ‡Έ Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSerin.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3a71πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRerin.ns.cloudflare.com
A2803:f800:50::6ca2:c071πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRerin.ns.cloudflare.com
A2a06:98c1:50::ac40:2071πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRerin.ns.cloudflare.com
A108.162.192.113πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRerin.ns.cloudflare.com
A172.64.32.113πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRerin.ns.cloudflare.com
A173.245.58.113πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRerin.ns.cloudflare.com
NSseth.ns.cloudflare.com
A2606:4700:58::adf5:3b8eπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRseth.ns.cloudflare.com
A2803:f800:50::6ca2:c18eπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRseth.ns.cloudflare.com
A2a06:98c1:50::ac40:218eπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRseth.ns.cloudflare.com
A108.162.193.142πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRseth.ns.cloudflare.com
A172.64.33.142πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRseth.ns.cloudflare.com
A173.245.59.142πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRseth.ns.cloudflare.com
MXfwd1.porkbun.com ⭐
A44.226.226.6πŸ‡ΊπŸ‡Έ Amazon44.224.0.0/11 EC2 PDX prefix
PTRfwd1.porkbun.com
MXfwd2.porkbun.com(20)
A52.10.201.111πŸ‡ΊπŸ‡Έ Amazon52.10.0.0/15 EC2 PDX Prefix
PTRfwd2.porkbun.com
TXTv=spf1 include:_spf.porkbun.com ~all
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.43.107, 172.67.178.37
IPv6 hints2606:4700:3034::ac43:b225, 2606:4700:3037::6815:2b6b
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=126, name=cloudflare-ech.com
SOAerin.ns.cloudflare.comdns@cloudflare.com serial=2412331507

dev

DNSSECπŸ”’ Signed (DS record present)
NSns-tld1.charlestonroadregistry.com ⭐
NSns-tld2.charlestonroadregistry.com
NSns-tld3.charlestonroadregistry.com
NSns-tld4.charlestonroadregistry.com
NSns-tld5.charlestonroadregistry.com
SOAns-tld1.charlestonroadregistry.comcloud-dns-hostmaster@google.com serial=1
πŸ”’ HSTS Preload (+subdomains)

Same first word

Similar names

Previous names

Next names

DNS History

8 records (8 active, 0 former)

NSerin.ns.cloudflare.comseth.ns.cloudflare.comMXfwd1.porkbun.comfwd2.porkbun.comA104.21.43.107172.67.178.372606:4700:3034::ac43:b2252606:4700:3037::6815:2b6b
●NSerin.ns.cloudflare.com2026-08-20 β†’ 2026-08-30 Β· 2 obs
● 2026-08-20 02:32:36
● 2026-08-30 02:08:00
●NSseth.ns.cloudflare.com2026-08-20 β†’ 2026-08-30 Β· 2 obs
● 2026-08-20 02:32:36
● 2026-08-30 02:08:00
●MXfwd1.porkbun.com2026-08-20 β†’ 2026-08-30 Β· 2 obs
● 2026-08-20 02:32:36
● 2026-08-30 02:08:00
●MXfwd2.porkbun.com2026-08-20 β†’ 2026-08-30 Β· 2 obs
● 2026-08-20 02:32:36
● 2026-08-30 02:08:00
●A104.21.43.1072026-08-20 β†’ 2026-08-30 Β· 2 obs
● 2026-08-20 02:32:36
● 2026-08-30 02:08:00
●A172.67.178.372026-08-20 β†’ 2026-08-30 Β· 2 obs
● 2026-08-20 02:32:36
● 2026-08-30 02:08:00
●A2606:4700:3034::ac43:b2252026-08-20 β†’ 2026-08-30 Β· 2 obs
● 2026-08-20 02:32:36
● 2026-08-30 02:08:00
●A2606:4700:3037::6815:2b6b2026-08-20 β†’ 2026-08-30 Β· 2 obs
● 2026-08-20 02:32:36
● 2026-08-30 02:08:00

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
devns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com...-
ghostclient.deverin.ns.cloudflare.com, seth.ns.cloudflare.com-

βœ… Authoritative Response

Server:173.245.59.142

NS records: erin.ns.cloudflare.com, seth.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for ghostclient.dev (unsigned zone)

⏱️ Timing

Total: 891ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.178.37, 104.21.43.107
AAAA22606:4700:3037::6815:2b6b, 2606:4700:3034::ac43:b225
NS2erin.ns.cloudflare.com, seth.ns.cloudflare.com
MX2fwd1.porkbun.com (pri: 10), fwd2.porkbun.com (pri: 20)
TXT1v=spf1 include:_spf.porkbun.com ~all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1erin.ns.cloudflare.com dns.cloudflare.co

Analysis

IP Addresses

ghostclient.dev resolves to four IP addresses: 104.21.43.107, 172.67.178.37, 2606:4700:3034::ac43:b225 and 2606:4700:3037::6815:2b6b.

aaronoverseas.com, wlshbdx.com, hellhire.org and two other host names share IP numbers with ghostclient.dev.

Name Servers

ghostclient.dev uses two name servers for its delegation: erin.ns.cloudflare.com and seth.ns.cloudflare.com.

ghostclient.dev uses the same name servers as several other domains β€” among them sd.com.br, holameanshola.com, blackhatspot.com and two more.

ghostclient.dev shares at least some of its name servers with other domains, including ev4mc8qccpnnnny.workers.dev, jaapak.com, qiajye.xyz and two others.

These name servers are frequently seen alongside the name servers ivan.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

Hostname erin.ns.cloudflare.com directs to 108.162.192.113, 172.64.32.113 and 173.245.58.113 along with 3 other IP addresses.

Hostname seth.ns.cloudflare.com directs to 108.162.193.142, 172.64.33.142 and 173.245.59.142 along with 3 other IP addresses.

Mail Servers

Mail for ghostclient.dev is handled by two mail servers β€” fwd1.porkbun.com and fwd2.porkbun.com.

ghostclient.dev uses an identical mail server configuration to several other domains β€” among them gostature.com, allocara.com, jumacom.de and two more.

fwd1.porkbun.com and fwd2.porkbun.com each resolve to one IP number: fwd1.porkbun.com points to 44.226.226.6 and fwd2.porkbun.com points to 52.10.201.111.