ghost.security - robtex.com

๐Ÿ›ก๏ธDomain Reputation CheckBlocklist, phishing & malware statusโ†’

ghost.security

DNSSECโš ๏ธ Not signed
A2606:4700:3030::6815:1eb3๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US โœ“ In HTTPS hints
A2606:4700:3031::ac43:ad7f๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US โœ“ In HTTPS hints
A104.21.30.179Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US โœ“ In HTTPS hints
A172.67.173.127๐Ÿ‡บ๐Ÿ‡ธ Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US โœ“ In HTTPS hints
NSdolly.ns.cloudflare.com โญ
A2606:4700:50::adf5:3a62๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdolly.ns.cloudflare.com
A2803:f800:50::6ca2:c062๐Ÿ‡จ๐Ÿ‡ท Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRdolly.ns.cloudflare.com
A2a06:98c1:50::ac40:2062๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2a06:98c1:50::/45
PTRdolly.ns.cloudflare.com
A108.162.192.98๐Ÿ‡บ๐Ÿ‡ธ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdolly.ns.cloudflare.com
A172.64.32.98๐Ÿ‡บ๐Ÿ‡ธ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdolly.ns.cloudflare.com
A173.245.58.98๐Ÿ‡บ๐Ÿ‡ธ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdolly.ns.cloudflare.com
NSzeus.ns.cloudflare.com
A2606:4700:58::adf5:3bf9๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzeus.ns.cloudflare.com
A2803:f800:50::6ca2:c1f9๐Ÿ‡จ๐Ÿ‡ท Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRzeus.ns.cloudflare.com
A2a06:98c1:50::ac40:21f9๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2a06:98c1:50::/45
PTRzeus.ns.cloudflare.com
A108.162.193.249๐Ÿ‡บ๐Ÿ‡ธ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzeus.ns.cloudflare.com
A172.64.33.249๐Ÿ‡บ๐Ÿ‡ธ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzeus.ns.cloudflare.com
A173.245.59.249๐Ÿ‡บ๐Ÿ‡ธ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzeus.ns.cloudflare.com
MXaspmx.l.google.com โญ
A2607:f8b0:4004:c23::1b๐Ÿ‡บ๐Ÿ‡ธ Google2607:f8b0:4004::/48
PTRyuiadrs-in-f27.1e100.net
A192.178.155.27๐Ÿ‡บ๐Ÿ‡ธ Google192.178.155.0/24
PTRyuiadrs-in-f27.1e100.net
MXalt1.aspmx.l.google.com(5)
A2800:3f0:4003:c14::1a๐Ÿ‡จ๐Ÿ‡ฑ Google2800:3f0:4003::/48
A192.178.234.26๐Ÿ‡บ๐Ÿ‡ธ Google192.178.0.0/15
PTRncsclj-in-f26.1e100.net
MXalt2.aspmx.l.google.com(5)
A2a00:1450:400b:c02::1b๐Ÿ‡ฎ๐Ÿ‡ช Google2a00:1450:400b::/48
PTRdj-in-f27.1e100.net
A172.253.116.27๐Ÿ‡บ๐Ÿ‡ธ Google172.253.116.0/24
PTRdj-in-f27.1e100.net
MXaspmx2.googlemail.com(10)
A2800:3f0:4003:c14::1b๐Ÿ‡จ๐Ÿ‡ฑ Google2800:3f0:4003::/48
A192.178.234.26๐Ÿ‡บ๐Ÿ‡ธ Google192.178.0.0/15
PTRncsclj-in-f26.1e100.net
MXaspmx3.googlemail.com(10)
A2a00:1450:400b:c02::1b๐Ÿ‡ฎ๐Ÿ‡ช Google2a00:1450:400b::/48
PTRdj-in-f27.1e100.net
A172.253.116.26๐Ÿ‡บ๐Ÿ‡ธ Google172.253.116.0/24
PTRdj-in-f26.1e100.net
TXTMS=ms66018470
TXT_gitlab-pages-verification-code.ghost.security TXT gitlab-pages-verification-...
TXTgoogle-site-verification=dZfgeY6ajT0UlZlrbUKq9hQ4zfJc-6agzCVfSYSBns0
TXTgoogle-site-verification=k6v6gWucBRVs76AEYuE2pSfsNXHoHIxiUhThZDACduA
TXTslack-domain-verification=kNLwM67CQ5DdP4VJVGZmi3tWBxnKgk6umDZN3sQR
TXTv=spf1 include:_spf.google.com ~all
HTTPSHTTP/3, HTTP/2 โœ“ hints match
IPv4 hints104.21.30.179, 172.67.173.127
IPv6 hints2606:4700:3030::6815:1eb3, 2606:4700:3031::ac43:ad7f
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=15, name=cloudflare-ech.com
SOAdolly.ns.cloudflare.comdns@cloudflare.com serial=2412535955

security

DNSSEC๐Ÿ”’ Signed (DS record present)
NSns0.centralnic.net โญ
NSa.nic.security
NSb.nic.security
NSe.nic.security
NSf.nic.security
SOAns0.centralnic.nethostmaster@centralnic.net serial=225971

Same first word

Similar names

Previous names

Next names

DNS History

15 records (11 active, 4 former)

NSdolly.ns.cloudflare.comzeus.ns.cloudflare.comMXalt1.aspmx.l.google.comalt2.aspmx.l.google.comaspmx.l.google.comaspmx2.googlemail.comaspmx3.googlemail.comA104.21.30.179172.67.173.1272606:4700:3030::6815:1eb32606:4700:3031::ac43:ad7f188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
โ—NSdolly.ns.cloudflare.com2026-08-28 โ†’ 2026-09-11 ยท 2 obs
โ— 2026-08-28 13:40:14
โ— 2026-09-11 20:21:12
โ—NSzeus.ns.cloudflare.com2026-08-28 โ†’ 2026-09-11 ยท 2 obs
โ— 2026-08-28 13:40:14
โ— 2026-09-11 20:21:12
โ—MXalt1.aspmx.l.google.com2026-08-28 โ†’ 2026-09-11 ยท 2 obs
โ— 2026-08-28 13:40:14
โ— 2026-09-11 20:21:12
โ—MXalt2.aspmx.l.google.com2026-08-28 โ†’ 2026-09-11 ยท 2 obs
โ— 2026-08-28 13:40:14
โ— 2026-09-11 20:21:12
โ—MXaspmx.l.google.com2026-08-28 โ†’ 2026-09-11 ยท 2 obs
โ— 2026-08-28 13:40:14
โ— 2026-09-11 20:21:12
โ—MXaspmx2.googlemail.com2026-08-28 โ†’ 2026-09-11 ยท 2 obs
โ— 2026-08-28 13:40:14
โ— 2026-09-11 20:21:12
โ—MXaspmx3.googlemail.com2026-08-28 โ†’ 2026-09-11 ยท 2 obs
โ— 2026-08-28 13:40:14
โ— 2026-09-11 20:21:12
โ—A104.21.30.1792026-08-30 โ†’ 2026-09-11 ยท 5 obs
โ—‹ 2026-08-28 13:40:14
โ— 2026-08-30 07:48:42
โ—‹ 2026-09-11 15:00:02
โ— 2026-09-11 19:35:40
โ— 2026-09-11 20:21:12
โ—A172.67.173.1272026-08-30 โ†’ 2026-09-11 ยท 5 obs
โ—‹ 2026-08-28 13:40:14
โ— 2026-08-30 07:48:42
โ—‹ 2026-09-11 15:00:02
โ— 2026-09-11 19:35:40
โ— 2026-09-11 20:21:12
โ—‹A188.114.96.02026-08-28 โ†’ 2026-09-11 ยท 5 obs
โ— 2026-08-28 13:40:14
โ—‹ 2026-08-30 07:48:42
โ— 2026-09-11 15:00:02
โ—‹ 2026-09-11 19:35:40
โ—‹ 2026-09-11 20:21:12
โ—‹A188.114.97.02026-08-28 โ†’ 2026-09-11 ยท 5 obs
โ— 2026-08-28 13:40:14
โ—‹ 2026-08-30 07:48:42
โ— 2026-09-11 15:00:02
โ—‹ 2026-09-11 19:35:40
โ—‹ 2026-09-11 20:21:12
โ—A2606:4700:3030::6815:1eb32026-08-30 โ†’ 2026-09-11 ยท 5 obs
โ—‹ 2026-08-28 13:40:14
โ— 2026-08-30 07:48:42
โ—‹ 2026-09-11 15:00:02
โ— 2026-09-11 19:35:40
โ— 2026-09-11 20:21:12
โ—A2606:4700:3031::ac43:ad7f2026-08-30 โ†’ 2026-09-11 ยท 5 obs
โ—‹ 2026-08-28 13:40:14
โ— 2026-08-30 07:48:42
โ—‹ 2026-09-11 15:00:02
โ— 2026-09-11 19:35:40
โ— 2026-09-11 20:21:12
โ—‹A2a06:98c1:3120::2026-08-28 โ†’ 2026-09-11 ยท 5 obs
โ— 2026-08-28 13:40:14
โ—‹ 2026-08-30 07:48:42
โ— 2026-09-11 15:00:02
โ—‹ 2026-09-11 19:35:40
โ—‹ 2026-09-11 20:21:12
โ—‹A2a06:98c1:3121::2026-08-28 โ†’ 2026-09-11 ยท 5 obs
โ— 2026-08-28 13:40:14
โ—‹ 2026-08-30 07:48:42
โ— 2026-09-11 15:00:02
โ—‹ 2026-09-11 19:35:40
โ—‹ 2026-09-11 20:21:12

๐Ÿ” DNS Trace

๐Ÿ“‹ Delegation Chain

ZoneNameserversGlue
securitya.nic.security, b.nic.security, e.nic.security, f.nic.security8 records
ghost.securityzeus.ns.cloudflare.com, dolly.ns.cloudflare.com-

โœ… Authoritative Response

Server:172.64.33.249

NS records: zeus.ns.cloudflare.com, dolly.ns.cloudflare.com

๐Ÿ”’ DNSSEC Status

โš ๏ธ Insecure (no DNSSEC)

No DS record for ghost.security (unsigned zone)

โฑ๏ธ Timing

Total: 866ms | Queries: -

๐Ÿ“„ Records

TypeCountSample Data
A2104.21.30.179, 172.67.173.127
AAAA22606:4700:3030::6815:1eb3, 2606:4700:3031::ac43:ad7f
NS2dolly.ns.cloudflare.com, zeus.ns.cloudflare.com
MX5aspmx.l.google.com (pri: 1), aspmx2.googlemail.com (pri: 10)...
TXT6MS=ms66018470, _gitlab-pages-verification-code.ghost.se...
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1dolly.ns.cloudflare.com dns.cloudflare.c

๐Ÿ“Œ Glue Records Collected

Total: 8

In-bailiwick: 8 (a.nic.security, b.nic.security, e.nic.security...)

Analysis

IP Addresses

ghost.security points to the four IP addresses 104.21.30.179, 172.67.173.127, 2606:4700:3030::6815:1eb3 and 2606:4700:3031::ac43:ad7f.

kfcpemuda.org, mail.irr52.ru, aistockbriefdesk.top plus two other host names have IP numbers in common with ghost.security.

Name Servers

Two name servers handle the delegation for ghost.security: dolly.ns.cloudflare.com and zeus.ns.cloudflare.com.

The name server configuration of ghost.security is shared with other domains, for instance perdido-quay-board.workers.dev, adhithadhi007.workers.dev, ghostsec.net and two others.

At least some of ghost.security's name servers are shared with other domains, for example login-iescarlosbousono.pages.dev, keyhanartbiz.workers.dev, 77jx.xyz and two more.

These name servers tend to be deployed in combination with the name servers dom.ns.cloudflare.com and fattouche.ns.cloudflare.com.

Hosts with 6 IP addresses each:

dolly.ns.cloudflare.com resolves to 108.162.192.98, 172.64.32.98 and 173.245.58.98 among others, with 3 other IP addresses in total.

zeus.ns.cloudflare.com resolves to 108.162.193.249, 172.64.33.249 and 173.245.59.249 among others, with 3 other IP addresses in total.

Mail Servers

ghost.security has five mail servers, which are aspmx2.googlemail.com, aspmx3.googlemail.com, aspmx.l.google.com and two others.

At least some of the mail servers used by ghost.security are shared with other domains: hyelan.net, catbox.dev, xplorationresources.com and two others among them.

These mail servers are often deployed together with alt2.aspmx.l.google.com, alt1.aspmx.l.google.com, alt3.aspmx.l.google.com and 3 other mail servers.

Host names pointing to two IP addresses:

aspmx2.googlemail.com resolves to two addresses: 192.178.234.26 and 2800:3f0:4003:c14::1b.

aspmx3.googlemail.com resolves to two addresses: 172.253.116.26 and 2a00:1450:400b:c02::1b.

aspmx.l.google.com resolves to two addresses: 192.178.155.27 and 2607:f8b0:4004:c23::1b.

alt1.aspmx.l.google.com resolves to two addresses: 192.178.234.26 and 2800:3f0:4003:c14::1a.

alt2.aspmx.l.google.com resolves to two addresses: 172.253.116.27 and 2a00:1450:400b:c02::1b.

aspmx2.googlemail.com along with alt1.aspmx.l.google.com each resolve to 192.178.234.26 IP addresses.

aspmx3.googlemail.com along with alt2.aspmx.l.google.com each resolve to 2a00:1450:400b:c02::1b IP addresses.