🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`ghostrunner.dev`

DNSSEC	⚠️ Not signed
A	3.132.94.197^{🇺🇸 Amazon3.132.0.0/14 EC2 CMH prefix}
		PTR	`ec2-3-132-94-197.us-east-2.compute.amazonaws.com`
A	3.137.122.141^{🇺🇸 Amazon3.136.0.0/13 EC2 CMH prefix}
A	18.217.107.134^{🇺🇸 Amazon18.216.0.0/14 EC2 CMH prefix}
NS	`leanna.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:2697^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`leanna.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c297^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`leanna.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2297^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`leanna.ns.cloudflare.com`
		A	108.162.194.151^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`leanna.ns.cloudflare.com`
		A	162.159.38.151^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`leanna.ns.cloudflare.com`
		A	172.64.34.151^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`leanna.ns.cloudflare.com`
NS	`marty.ns.cloudflare.com`
		A	2606:4700:58::adf5:3bcc^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`marty.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1cc^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`marty.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21cc^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`marty.ns.cloudflare.com`
		A	108.162.193.204^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`marty.ns.cloudflare.com`
		A	172.64.33.204^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`marty.ns.cloudflare.com`
		A	173.245.59.204^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`marty.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
SOA	`leanna.ns.cloudflare.com`dns@cloudflare.com serial=2412848065

`dev`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns-tld1.charlestonroadregistry.com` ⭐
	NS	`ns-tld2.charlestonroadregistry.com`
	NS	`ns-tld3.charlestonroadregistry.com`
	NS	`ns-tld4.charlestonroadregistry.com`
	NS	`ns-tld5.charlestonroadregistry.com`
	SOA	`ns-tld1.charlestonroadregistry.com`cloud-dns-hostmaster@google.com serial=1

🔒 HSTS Preload (+subdomains)

Same first word

ghostrunner.dev

ghostrunner.eu

ghostrunner.me

ghostrunner.at

ghostrunner.delivery

ghostrunner.co.uk

ghostrunner.ph

ghostrunner.net

ghostrunner.se

ghostrunner.club

Previous names

Next names

DNS History

10 records (10 active, 0 former)

●NSleanna.ns.cloudflare.com2026-08-20 → 2026-08-31 · 2 obs

● 2026-08-20 02:32:36
● 2026-08-31 04:33:28

●NSmarty.ns.cloudflare.com2026-08-20 → 2026-08-31 · 2 obs

● 2026-08-20 02:32:36
● 2026-08-31 04:33:28

●MXeforward1.registrar-servers.com2026-08-20 → 2026-08-31 · 2 obs

● 2026-08-20 02:32:36
● 2026-08-31 04:33:28

●MXeforward2.registrar-servers.com2026-08-20 → 2026-08-31 · 2 obs

● 2026-08-20 02:32:36
● 2026-08-31 04:33:28

●MXeforward3.registrar-servers.com2026-08-20 → 2026-08-31 · 2 obs

● 2026-08-20 02:32:36
● 2026-08-31 04:33:28

●MXeforward4.registrar-servers.com2026-08-20 → 2026-08-31 · 2 obs

● 2026-08-20 02:32:36
● 2026-08-31 04:33:28

●MXeforward5.registrar-servers.com2026-08-20 → 2026-08-31 · 2 obs

● 2026-08-20 02:32:36
● 2026-08-31 04:33:28

●A18.217.107.1342026-08-20 → 2026-08-31 · 2 obs

● 2026-08-20 02:32:36
● 2026-08-31 04:33:28

●A3.132.94.1972026-08-20 → 2026-08-31 · 2 obs

● 2026-08-20 02:32:36
● 2026-08-31 04:33:28

●A3.137.122.1412026-08-20 → 2026-08-31 · 2 obs

● 2026-08-20 02:32:36
● 2026-08-31 04:33:28

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
dev	ns-tld1.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld5.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com...	-
ghostrunner.dev	leanna.ns.cloudflare.com, marty.ns.cloudflare.com	-

✅ Authoritative Response

Server:173.245.59.204

NS records: leanna.ns.cloudflare.com, marty.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for ghostrunner.dev (unsigned zone)

⏱️ Timing

Total: 1569ms | Queries: -

📄 Records

Type	Count	Sample Data
A	3	`18.217.107.134, 3.137.122.141...`
NS	2	`leanna.ns.cloudflare.com, marty.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	1	`v=spf1 include:spf.efwd.registrar-server`
SOA	1	`leanna.ns.cloudflare.com dns.cloudflare.`

Analysis

IP Addresses

ghostrunner.dev directs to three IP numbers: 3.132.94.197, 3.137.122.141 and 18.217.107.134.

Further host names like ec2-3-132-94-197.us-east-2.compute.amazonaws.com and jt5p6bbeef.us-east-2.awsapprunner.com overlap in IP numbers with ghostrunner.dev.

Name Servers

ghostrunner.dev has two authoritative name servers — leanna.ns.cloudflare.com and marty.ns.cloudflare.com.

ghostrunner.dev has the same name server delegation as a number of other domains, such as spotmelo.com, v-laq11.workers.dev, stilladrink.com and two more.

There is at least partial name server overlap between ghostrunner.dev and other domains — justintimemedia.com, rosarioarellanes57.workers.dev, zgsdgc.cn and two more among them.

These name servers are routinely deployed together with the name servers alexa.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

leanna.ns.cloudflare.com points to 108.162.194.151, 162.159.38.151, 172.64.34.151 and 3 other IP addresses.

marty.ns.cloudflare.com points to 108.162.193.204, 172.64.33.204, 173.245.59.204 and 3 other IP addresses.

Mail Servers

Five mail servers handle ghostrunner.dev: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

ghostrunner.dev shares at least some of its mail servers with other domains — for example fcforever.com, clacguanaskabocdrinu.digital, bettys(0x626f6f62)cams.club and two more.

It is common for these mail servers to co-occur with eforward4.registrar-servers.com, eforward5.registrar-servers.com, eforward6.registrar-servers.com and eforward7.registrar-servers.com as mail servers.

Hosts that resolve to one IP address:

eforward1.registrar-servers.com resolves to 162.255.118.51.

eforward2.registrar-servers.com resolves to 162.255.118.52.

eforward3.registrar-servers.com resolves to 162.255.118.51.

eforward4.registrar-servers.com resolves to 162.255.118.52.

eforward5.registrar-servers.com resolves to 162.255.118.51.

eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com all direct to 162.255.118.51.

The host names eforward2.registrar-servers.com and eforward4.registrar-servers.com both resolve to 162.255.118.52 IP addresses.