ghostshell.us - robtex.com

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

ghostshell.us

DNSSEC🔒 Signed (DS record present)
A2606:4700:3035::6815:3b60🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3035::ac43:aebf🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.59.96Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.174.191🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSpiotr.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3bde🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRpiotr.ns.cloudflare.com
A2803:f800:50::6ca2:c1de🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRpiotr.ns.cloudflare.com
A2a06:98c1:50::ac40:21de🇺🇸 Cloudflare2a06:98c1:50::/45
PTRpiotr.ns.cloudflare.com
A108.162.193.222🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRpiotr.ns.cloudflare.com
A172.64.33.222🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRpiotr.ns.cloudflare.com
A173.245.59.222🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRpiotr.ns.cloudflare.com
NSval.ns.cloudflare.com
A2606:4700:50::adf5:3aea🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRval.ns.cloudflare.com
A2803:f800:50::6ca2:c0ea🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRval.ns.cloudflare.com
A2a06:98c1:50::ac40:20ea🇺🇸 Cloudflare2a06:98c1:50::/45
PTRval.ns.cloudflare.com
A108.162.192.234🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRval.ns.cloudflare.com
A172.64.32.234🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRval.ns.cloudflare.com
A173.245.58.234🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRval.ns.cloudflare.com
MXmx2.zoho.com ⭐
A204.141.43.44🇺🇸 ZohoAS204.141.42.0/23 Zoho Corporation
PTRmx2.zoho.com
PTRmx3.zoho.com
PTRmx6.zoho.com
PTRmx7.zoho.com
PTRmx8.zoho.com
PTRmx.zoho.com
PTRmx2.zohomail.com
PTRmx3.zohomail.com
PTRmx.zohomail.com
MXmx3.zoho.com(20)
A204.141.43.44🇺🇸 ZohoAS204.141.42.0/23 Zoho Corporation
PTRmx2.zoho.com
PTRmx3.zoho.com
PTRmx6.zoho.com
PTRmx7.zoho.com
PTRmx8.zoho.com
PTRmx.zoho.com
PTRmx2.zohomail.com
PTRmx3.zohomail.com
PTRmx.zohomail.com
MXmx.zoho.com(50)
A204.141.43.44🇺🇸 ZohoAS204.141.42.0/23 Zoho Corporation
PTRmx2.zoho.com
PTRmx3.zoho.com
PTRmx6.zoho.com
PTRmx7.zoho.com
PTRmx8.zoho.com
PTRmx.zoho.com
PTRmx2.zohomail.com
PTRmx3.zohomail.com
PTRmx.zohomail.com
TXTv=spf1 include:zohomail.com ~all
TXTzoho-verification=zb02647795.zmverify.zoho.com
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.59.96, 172.67.174.191
IPv6 hints2606:4700:3035::6815:3b60, 2606:4700:3035::ac43:aebf
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=107, name=cloudflare-ech.com
SOApiotr.ns.cloudflare.comdns@cloudflare.com serial=2418844911

us

DNSSEC⚠️ Not signed
NSa.cctld.us ⭐
NSb.cctld.us
NSf.cctld.us
NSk.cctld.us
NSm.cctld.us
NSn.cctld.us
NSw.cctld.us
NSx.cctld.us
NSy.cctld.us
SOAa.cctld.usadmin@tldns.godaddy serial=1794579281

Same first word

Similar names

Previous names

Next names

DNS History

13 records (9 active, 4 former)

NSpiotr.ns.cloudflare.comval.ns.cloudflare.comMXmx.zoho.commx2.zoho.commx3.zoho.comA104.21.59.96172.67.174.1912606:4700:3035::6815:3b602606:4700:3035::ac43:aebf188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSpiotr.ns.cloudflare.com2026-10-30 → 2026-11-13 · 2 obs
● 2026-10-30 21:21:04
● 2026-11-13 14:55:36
●NSval.ns.cloudflare.com2026-10-30 → 2026-11-13 · 2 obs
● 2026-10-30 21:21:04
● 2026-11-13 14:55:36
●MXmx.zoho.com2026-10-30 → 2026-11-13 · 2 obs
● 2026-10-30 21:21:04
● 2026-11-13 14:55:36
●MXmx2.zoho.com2026-10-30 → 2026-11-13 · 2 obs
● 2026-10-30 21:21:04
● 2026-11-13 14:55:36
●MXmx3.zoho.com2026-10-30 → 2026-11-13 · 2 obs
● 2026-10-30 21:21:04
● 2026-11-13 14:55:36
●A104.21.59.962026-11-13 → 2026-11-13 · 3 obs
○ 2026-10-30 21:21:04
● 2026-11-13 14:55:32
● 2026-11-13 14:55:36
●A172.67.174.1912026-11-13 → 2026-11-13 · 3 obs
○ 2026-10-30 21:21:04
● 2026-11-13 14:55:32
● 2026-11-13 14:55:36
○A188.114.96.02026-10-30 → 2026-10-30 · 3 obs
● 2026-10-30 21:21:04
○ 2026-11-13 14:55:32
○ 2026-11-13 14:55:36
○A188.114.97.02026-10-30 → 2026-10-30 · 3 obs
● 2026-10-30 21:21:04
○ 2026-11-13 14:55:32
○ 2026-11-13 14:55:36
●A2606:4700:3035::6815:3b602026-11-13 → 2026-11-13 · 3 obs
○ 2026-10-30 21:21:04
● 2026-11-13 14:55:32
● 2026-11-13 14:55:36
●A2606:4700:3035::ac43:aebf2026-11-13 → 2026-11-13 · 3 obs
○ 2026-10-30 21:21:04
● 2026-11-13 14:55:32
● 2026-11-13 14:55:36
○A2a06:98c1:3120::2026-10-30 → 2026-10-30 · 3 obs
● 2026-10-30 21:21:04
○ 2026-11-13 14:55:32
○ 2026-11-13 14:55:36
○A2a06:98c1:3121::2026-10-30 → 2026-10-30 · 3 obs
● 2026-10-30 21:21:04
○ 2026-11-13 14:55:32
○ 2026-11-13 14:55:36

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
usb.cctld.us, f.cctld.us, k.cctld.us, m.cctld.us...-
ghostshell.uspiotr.ns.cloudflare.com, val.ns.cloudflare.com-

✅ Authoritative Response

Server:173.245.58.234

NS records: piotr.ns.cloudflare.com, val.ns.cloudflare.com

🔒 DNSSEC Status

🔐 Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 1262ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.174.191, 104.21.59.96
AAAA22606:4700:3035::ac43:aebf, 2606:4700:3035::6815:3b60
NS2piotr.ns.cloudflare.com, val.ns.cloudflare.com
MX3mx.zoho.com (pri: 10), mx2.zoho.com (pri: 20)...
TXT2v=spf1 include:zohomail.com ~all, zoho-verification=zb02647795.zmverify.zo
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1piotr.ns.cloudflare.com dns.cloudflare.c

Analysis

IP Addresses

ghostshell.us has four IP addresses: 104.21.59.96, 172.67.174.191, 2606:4700:3035::6815:3b60 and 2606:4700:3035::ac43:aebf.

Additional host names — chatterino.nl, buymotorizedblinds.com, mulaibola.pro and two others — share IP numbers with ghostshell.us.

Name Servers

ghostshell.us has two authoritative name servers — piotr.ns.cloudflare.com and val.ns.cloudflare.com.

ghostshell.us shares its name server setup with other domains, including mars-mon314.workers.dev, appliedefforts.com, loveuvw-xyz-webapp.pages.dev and two others.

ghostshell.us partially shares its NS delegation with several other domains, including monarchbraille.org, exsile.co.il, rixb-bitm.digital and two others.

The name servers mark.ns.cloudflare.com, betty.ns.cloudflare.com, dimitris.ns.cloudflare.com and nova.ns.cloudflare.com are often found in use alongside these name servers.

Host names with 6 IP numbers:

piotr.ns.cloudflare.com points to 108.162.193.222, 172.64.33.222, 173.245.59.222 and 3 other IP addresses.

val.ns.cloudflare.com points to 108.162.192.234, 172.64.32.234, 173.245.58.234 and 3 other IP addresses.

Mail Servers

ghostshell.us uses three mail servers — mx2.zoho.com, mx3.zoho.com and mx.zoho.com.

ghostshell.us shares mail servers — at least in part — with other domains, including elysiancloth.shop, stricklandtechnology.net, meucontratobr.com.br and two others.

mx2.zoho.com, mx3.zoho.com and mx.zoho.com all point to the same IP address — 204.141.43.44.

mx2.zoho.com, mx3.zoho.com and mx.zoho.com are host names that all point to 204.141.43.44.