CF1757236032837-tsm20250906182357

DNSWHOIS.INFO - ghost.sh

Search for IP or hostnames:

ghost.sh checked at 2025-09-07T09:07:12.821Z 247ms 152/152/152 100% R:19

ghost.sh

NSevan.ns.cloudflare.com
A2606:4700:58::adf5:3ba5 🇺🇸 Cloudflare
PTRevan.ns.cloudflare.com
A2803:f800:50::6ca2:c1a5 🇨🇷 Cloudflare
PTRevan.ns.cloudflare.com
A2a06:98c1:50::ac40:21a5 🇺🇸 Cloudflare
PTRevan.ns.cloudflare.com
A108.162.193.165🇺🇸 Cloudflare
PTRevan.ns.cloudflare.com
A172.64.33.165🇺🇸 Cloudflare
PTRevan.ns.cloudflare.com
A173.245.59.165🇺🇸 Cloudflare
PTRevan.ns.cloudflare.com
NStess.ns.cloudflare.com
A2606:4700:50::adf5:3ae3 🇺🇸 Cloudflare
PTRtess.ns.cloudflare.com
A2803:f800:50::6ca2:c0e3 🇨🇷 Cloudflare
PTRtess.ns.cloudflare.com
A2a06:98c1:50::ac40:20e3 🇺🇸 Cloudflare
PTRtess.ns.cloudflare.com
A108.162.192.227🇺🇸 Cloudflare
PTRtess.ns.cloudflare.com
A172.64.32.227🇺🇸 Cloudflare
PTRtess.ns.cloudflare.com
A173.245.58.227🇺🇸 Cloudflare
PTRtess.ns.cloudflare.com
MXaspmx2.l.google.com
MXaspmx3.l.google.com
MXaspmx.l.google.com
A2607:f8b0:4004:c21::1b 🇺🇸 Google
PTRpe-in-f27.1e100.net
A64.233.180.27🇺🇸 Google
PTRon-in-f27.1e100.net
PTRpe-in-f27.1e100.net
MXalt1.aspmx.l.google.com
A2a00:1450:400b:c02::1a 🇮🇪 Google
PTRdj-in-f26.1e100.net
A172.253.116.26🇺🇸 Google
PTRdj-in-f26.1e100.net
MXalt2.aspmx.l.google.com
A2a00:1450:400c:c00::1b 🇧🇪 Google
PTRws-in-f27.1e100.net
PTRws-in-x1b.1e100.net
A173.194.76.27🇺🇸 Google
PTRws-in-f27.1e100.net
A2606:4700:3033::ac43:a1cc 🇺🇸 Cloudflare
A2606:4700:3034::6815:a03 🇺🇸 Cloudflare
A104.21.10.3 Cloudflare
A172.67.161.204🇺🇸 Cloudflare

sh

NSa0.nic.sh
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh

AI analysis

ghost.sh points to the following four IP numbers: 2606:4700:3033::ac43:a1cc, 2606:4700:3034::6815:a03, 104.21.10.3, and 172.67.161.204.

IP numbers are shared between ghost.sh and other host names such as ekshome.no, infinitydatasolution.ro, themaidsplano.com, www.colorblindprogramming.com, and cardmates.cc.

Two name servers, evan.ns.cloudflare.com and tess.ns.cloudflare.com, have been delegated for ghost.sh.

Other domains like clayoquotwildernesslodge.com, exhibitprinting.co.uk, twcoupon.com, rehabresourceguide.com, and southernoceanlodge.com.au, share the same name server setup as ghost.sh.

The name servers of ghost.sh are at least partially shared with other domains such as erlang-mnesia-video.ru, bennettrwu.com, electrichead.co.th, parkingforceuk.co.uk, and clearly.app.

The name servers kami.ns.cloudflare.com are frequently utilized in conjunction.

evan.ns.cloudflare.com and tess.ns.cloudflare.com each point to six IP numbers: 2606:4700:58::adf5:3ba5, 2803:f800:50::6ca2:c1a5, 2a06:98c1:50::ac40:21a5, 108.162.193.165, 172.64.33.165, and 173.245.59.165 for evan.ns.cloudflare.com, and 2606:4700:50::adf5:3ae3, 2803:f800:50::6ca2:c0e3, 2a06:98c1:50::ac40:20e3, 108.162.192.227, 172.64.32.227, and 173.245.58.227 for tess.ns.cloudflare.com.

The five mail servers, aspmx2.l.google.com, aspmx3.l.google.com, aspmx.l.google.com, alt1.aspmx.l.google.com, and alt2.aspmx.l.google.com, are responsible for handling ghost.sh.

Domains such as www.propsmart.com, fm1047.ca, dhc-it.com, charleycrockett.com, and paneco.com share some mail servers, at least partially, with ghost.sh.

The mail servers frequently used in conjunction are aspmx4.l.google.com, aspmx5.l.google.com, alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, aspmx2.googlemail.com, aspmx3.googlemail.com, and aspmx1.l.google.com.

aspmx.l.google.com, 2607:f8b0:4004:c21::1b, and 64.233.180.27 are associated with each other.

alt1.aspmx.l.google.com, 2a00:1450:400b:c02::1a, and 172.253.116.26 are linked together.

alt2.aspmx.l.google.com, 2a00:1450:400c:c00::1b, and 173.194.76.27 are connected as well.

Perform reverse DNS lookup as well as normal forward DNS. Check Autonomous System Numbers (ASNs) and BGP connections between Internet Service Providers.
dbq

frwDNOs CF johedugfp 2025-09-07