ghostcode.work - robtex.com

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

ghostcode.work

DNSSEC🔒 Signed (DS record present)
A2606:4700:3031::ac43:cda7🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3036::6815:16a2🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.22.162Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.205.167🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSaaden.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2c5c🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRaaden.ns.cloudflare.com
A2803:f800:50::6ca2:c35c🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRaaden.ns.cloudflare.com
A2a06:98c1:50::ac40:235c🇺🇸 Cloudflare2a06:98c1:50::/45
PTRaaden.ns.cloudflare.com
A108.162.195.92🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRaaden.ns.cloudflare.com
A162.159.44.92Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRaaden.ns.cloudflare.com
A172.64.35.92🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRaaden.ns.cloudflare.com
NStiffany.ns.cloudflare.com
A2606:4700:50::a29f:263c🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtiffany.ns.cloudflare.com
A2803:f800:50::6ca2:c23c🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRtiffany.ns.cloudflare.com
A2a06:98c1:50::ac40:223c🇺🇸 Cloudflare2a06:98c1:50::/45
PTRtiffany.ns.cloudflare.com
A108.162.194.60🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtiffany.ns.cloudflare.com
A162.159.38.60Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtiffany.ns.cloudflare.com
A172.64.34.60🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtiffany.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.22.162, 172.67.205.167
IPv6 hints2606:4700:3031::ac43:cda7, 2606:4700:3036::6815:16a2
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=101, name=cloudflare-ech.com
SOAaaden.ns.cloudflare.comdns@cloudflare.com serial=2413982447

work

DNSSEC🔒 Signed (DS record present)
NSa.nic.work ⭐
NSb.nic.work
NSc.nic.work
NSx.nic.work
NSy.nic.work
NSz.nic.work
SOAa.nic.workadmin@tldns.godaddy serial=1788574900
⚠️ On DNS blocklist: spam-tlds

Same first word

ghostcode.com
ghostcode.lima-city.de
ghostcode.win
ghostcode.in
ghostcode.work
ghostcode.dk
ghostcode.ai
ghostcode.ru
ghostcode.de
ghostcode.net
ghostcode.space

Similar names

codeghost.space
goosdtech.online
goodtechs.eu
techgoods.net
goodstech.com
gostehdoc.top
techgoods.xyz
etchgoods.com
codeghost.de
techgoods.ru
goosdtech.com
ghostedoc.com
codeghost.ai
codeghost.org
codeghost.online
techgoods.de
goodtechs.com
codeghost.com
techgoods.com

Previous names

gherkin-labs.work
gherkirelish.work
ghevh-2v06m-zovvsl.work
ghfr.work
ghhd3-w961f-phbzgt.work
ghhuf-72x7l-mhncpd.work
ghhwm-z4doe-zimzzq.work
ghienphim.work
ghienphimz.work
ghijkl.work
ghiklm.work
ghjlab.work
ghlqkji.work
ghlul-curyr-gzladc.work
ghmade.work
ghngal-sfnyajrhbz.work
ghost-vault.work
ghosta4001.work
ghostcheck.work

Next names

ghostcreator.work
ghosted.work
ghostlabhomecenter.work
ghostlabs.work
ghostless.work
ghostlify.work
ghostlink.work
ghostmode.work
ghostnet.work
ghostorg.work
ghostpost.work
ghostwork.work
ghostwriter.work
ghoul.work
ghpx8m.work
ghrgb.work
ghrhrghu.work
ghsa.work
ghscl-kzk78-sdnybg.work

DNS History

10 records (6 active, 4 former)

NSaaden.ns.cloudflare.comtiffany.ns.cloudflare.comA104.21.22.162172.67.205.1672606:4700:3031::ac43:cda72606:4700:3036::6815:16a2188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSaaden.ns.cloudflare.com2026-08-30 → 2026-09-05 · 2 obs
● 2026-08-30 17:47:22
● 2026-09-05 02:42:48
●NStiffany.ns.cloudflare.com2026-08-30 → 2026-09-05 · 2 obs
● 2026-08-30 17:47:22
● 2026-09-05 02:42:48
●A104.21.22.1622026-08-31 → 2026-09-05 · 3 obs
○ 2026-08-30 17:47:22
● 2026-08-31 11:34:50
● 2026-09-05 02:42:48
●A172.67.205.1672026-08-31 → 2026-09-05 · 3 obs
○ 2026-08-30 17:47:22
● 2026-08-31 11:34:50
● 2026-09-05 02:42:48
○A188.114.96.02026-08-30 → 2026-08-30 · 3 obs
● 2026-08-30 17:47:22
○ 2026-08-31 11:34:50
○ 2026-09-05 02:42:48
○A188.114.97.02026-08-30 → 2026-08-30 · 3 obs
● 2026-08-30 17:47:22
○ 2026-08-31 11:34:50
○ 2026-09-05 02:42:48
●A2606:4700:3031::ac43:cda72026-08-31 → 2026-09-05 · 3 obs
○ 2026-08-30 17:47:22
● 2026-08-31 11:34:50
● 2026-09-05 02:42:48
●A2606:4700:3036::6815:16a22026-08-31 → 2026-09-05 · 3 obs
○ 2026-08-30 17:47:22
● 2026-08-31 11:34:50
● 2026-09-05 02:42:48
○A2a06:98c1:3120::2026-08-30 → 2026-08-30 · 3 obs
● 2026-08-30 17:47:22
○ 2026-08-31 11:34:50
○ 2026-09-05 02:42:48
○A2a06:98c1:3121::2026-08-30 → 2026-08-30 · 3 obs
● 2026-08-30 17:47:22
○ 2026-08-31 11:34:50
○ 2026-09-05 02:42:48

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
worka.nic.work, b.nic.work, c.nic.work, x.nic.work...12 records
ghostcode.workaaden.ns.cloudflare.com, tiffany.ns.cloudflare.com-

✅ Authoritative Response

Server:108.162.195.92

NS records: aaden.ns.cloudflare.com, tiffany.ns.cloudflare.com

🔒 DNSSEC Status

🔐 Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 506ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.22.162, 172.67.205.167
AAAA22606:4700:3036::6815:16a2, 2606:4700:3031::ac43:cda7
NS2aaden.ns.cloudflare.com, tiffany.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1aaden.ns.cloudflare.com dns.cloudflare.c

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (a.nic.work, a.nic.work, b.nic.work...)

Analysis

IP Addresses

ghostcode.work points to the four IP addresses 104.21.22.162, 172.67.205.167, 2606:4700:3031::ac43:cda7 and 2606:4700:3036::6815:16a2.

Among the host names that share IP numbers with ghostcode.work are lyonia.org, adroite-capitorc.sbs, seanlangan.co.uk and two others.

Name Servers

DNS delegation for ghostcode.work points to two name servers: aaden.ns.cloudflare.com and tiffany.ns.cloudflare.com.

ghostcode.work has the same name server delegation as a number of other domains, such as kcmportal.com, pioneereliteproperties.ae, vrelvanisto.online and two more.

There is at least partial name server overlap between ghostcode.work and other domains — tapquill.com, www-rntimes-in.pages.dev, pilotsetup.com and two more among them.

These name servers frequently co-occur with the name servers brenna.ns.cloudflare.com and jakub.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

aaden.ns.cloudflare.com has IP addresses 108.162.195.92, 162.159.44.92 and 172.64.35.92, plus 3 other.

tiffany.ns.cloudflare.com has IP addresses 108.162.194.60, 162.159.38.60 and 172.64.34.60, plus 3 other.