🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`ghostshell.dev`

DNSSEC	⚠️ Not signed
A	74.78.90.28^{🇺🇸 RoadRunner74.76.0.0/14 RR-Route}
		PTR	`syn-074-078-090-028.res.spectrum.com`
NS	`elliot.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3ba2^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elliot.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1a2^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`elliot.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21a2^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`elliot.ns.cloudflare.com`
		A	108.162.193.162^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elliot.ns.cloudflare.com`
		A	172.64.33.162^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elliot.ns.cloudflare.com`
		A	173.245.59.162^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elliot.ns.cloudflare.com`
NS	`irma.ns.cloudflare.com`
		A	2606:4700:50::adf5:3aa6^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`irma.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0a6^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`irma.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20a6^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`irma.ns.cloudflare.com`
		A	108.162.192.166^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`irma.ns.cloudflare.com`
		A	172.64.32.166^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`irma.ns.cloudflare.com`
		A	173.245.58.166^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`irma.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
SOA	`elliot.ns.cloudflare.com`dns@cloudflare.com serial=2414319689

`dev`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns-tld1.charlestonroadregistry.com` ⭐
	NS	`ns-tld2.charlestonroadregistry.com`
	NS	`ns-tld3.charlestonroadregistry.com`
	NS	`ns-tld4.charlestonroadregistry.com`
	NS	`ns-tld5.charlestonroadregistry.com`
	SOA	`ns-tld1.charlestonroadregistry.com`cloud-dns-hostmaster@google.com serial=1

🔒 HSTS Preload (+subdomains)

Same first word

Previous names

Next names

DNS History

8 records (8 active, 0 former)

●NSelliot.ns.cloudflare.com2026-09-06 → 2026-09-09 · 2 obs

● 2026-09-06 11:11:50
● 2026-09-09 15:45:04

●NSirma.ns.cloudflare.com2026-09-06 → 2026-09-09 · 2 obs

● 2026-09-06 11:11:50
● 2026-09-09 15:45:04

●MXeforward1.registrar-servers.com2026-09-06 → 2026-09-09 · 2 obs

● 2026-09-06 11:11:50
● 2026-09-09 15:45:04

●MXeforward2.registrar-servers.com2026-09-06 → 2026-09-09 · 2 obs

● 2026-09-06 11:11:50
● 2026-09-09 15:45:04

●MXeforward3.registrar-servers.com2026-09-06 → 2026-09-09 · 2 obs

● 2026-09-06 11:11:50
● 2026-09-09 15:45:04

●MXeforward4.registrar-servers.com2026-09-06 → 2026-09-09 · 2 obs

● 2026-09-06 11:11:50
● 2026-09-09 15:45:04

●MXeforward5.registrar-servers.com2026-09-06 → 2026-09-09 · 2 obs

● 2026-09-06 11:11:50
● 2026-09-09 15:45:04

●A74.78.90.282026-09-06 → 2026-09-09 · 2 obs

● 2026-09-06 11:11:50
● 2026-09-09 15:45:04

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
dev	ns-tld3.charlestonroadregistry.com, ns-tld5.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com...	-
ghostshell.dev	irma.ns.cloudflare.com, elliot.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.193.162

NS records: irma.ns.cloudflare.com, elliot.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for ghostshell.dev (unsigned zone)

⏱️ Timing

Total: 731ms | Queries: -

📄 Records

Type	Count	Sample Data
A	1	`74.78.90.28`
NS	2	`elliot.ns.cloudflare.com, irma.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	1	`v=spf1 include:spf.efwd.registrar-server`
SOA	1	`elliot.ns.cloudflare.com dns.cloudflare.`

Analysis

IP Addresses

ghostshell.dev resolves to one IP address: 74.78.90.28.

blindrabbit.net, for instance, is one of the other host names sharing IP numbers with ghostshell.dev.

Name Servers

ghostshell.dev uses two name servers for its delegation: elliot.ns.cloudflare.com and irma.ns.cloudflare.com.

ghostshell.dev uses the same name servers as several other domains — among them freemotcheck.com, getcarscan.com, gape.co.nz and two more.

ghostshell.dev shares at least some of its name servers with other domains, including ft-c1437f03d9.pages.dev, patakpranav8423.workers.dev, bongdaso666.org and two others.

These name servers are frequently seen alongside the name servers tori.ns.cloudflare.com, laila.ns.cloudflare.com, virginia.ns.cloudflare.com and keaton.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

Hostname elliot.ns.cloudflare.com directs to 108.162.193.162, 172.64.33.162 and 173.245.59.162 along with 3 other IP addresses.

Hostname irma.ns.cloudflare.com directs to 108.162.192.166, 172.64.32.166 and 173.245.58.166 along with 3 other IP addresses.

Mail Servers

ghostshell.dev is handled by five mail servers: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

ghostshell.dev has at least partial mail server overlap with other domains such as arcwaygrowthpartners.com, aabbgg1.net, mediausers.shop and two more.

These mail servers frequently appear alongside the mail servers eforward5.registrar-servers.com and eforward4.registrar-servers.com.

Hosts with just one IP address:

eforward1.registrar-servers.com has the IP address 162.255.118.51.

eforward2.registrar-servers.com has the IP address 162.255.118.52.

eforward3.registrar-servers.com has the IP address 162.255.118.51.

eforward4.registrar-servers.com has the IP address 162.255.118.52.

eforward5.registrar-servers.com has the IP address 162.255.118.51.

The host names eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com each resolve to 162.255.118.51.

Both eforward2.registrar-servers.com and eforward4.registrar-servers.com resolve to 162.255.118.52 IP addresses each.