CF1760349083083-tsm20251012143351

MXLIST.NET - ghost.sh

Search for IP or hostnames:

ghost.sh checked at 2025-10-13T09:51:23.001Z 1563ms 152/152/152 100% R:18

ghost.sh

NSevan.ns.cloudflare.com
A2606:4700:58::adf5:3ba5 🇺🇸 Cloudflare
PTRevan.ns.cloudflare.com
A2803:f800:50::6ca2:c1a5 🇨🇷 Cloudflare
PTRevan.ns.cloudflare.com
A2a06:98c1:50::ac40:21a5 🇺🇸 Cloudflare
PTRevan.ns.cloudflare.com
A108.162.193.165🇺🇸 Cloudflare
PTRevan.ns.cloudflare.com
A172.64.33.165🇺🇸 Cloudflare
PTRevan.ns.cloudflare.com
A173.245.59.165🇺🇸 Cloudflare
PTRevan.ns.cloudflare.com
NStess.ns.cloudflare.com
A2606:4700:50::adf5:3ae3 🇺🇸 Cloudflare
PTRtess.ns.cloudflare.com
A2803:f800:50::6ca2:c0e3 🇨🇷 Cloudflare
PTRtess.ns.cloudflare.com
A2a06:98c1:50::ac40:20e3 🇺🇸 Cloudflare
PTRtess.ns.cloudflare.com
A108.162.192.227🇺🇸 Cloudflare
PTRtess.ns.cloudflare.com
A172.64.32.227🇺🇸 Cloudflare
PTRtess.ns.cloudflare.com
A173.245.58.227🇺🇸 Cloudflare
PTRtess.ns.cloudflare.com
MXaspmx2.l.google.com
MXaspmx3.l.google.com
MXaspmx.l.google.com
A2a00:1450:400c:c1d::1b 🇧🇪 Google
PTRwh-in-f27.1e100.net
A74.125.206.26🇺🇸 Google
PTRwk-in-f26.1e100.net
MXalt1.aspmx.l.google.com
A2a00:1450:4013:c1e::1b 🇳🇱 Google
PTRyugrqzs-in-f27.1e100.net
A192.178.213.27🇺🇸 Google
PTRyugrqzs-in-f27.1e100.net
MXalt2.aspmx.l.google.com
A2a00:1450:4025:c01::1b 🇵🇱 Google
PTRrd-in-f27.1e100.net
A142.250.147.27🇺🇸 Google
PTRrd-in-f27.1e100.net
A2606:4700:3033::ac43:a1cc 🇺🇸 Cloudflare
A2606:4700:3034::6815:a03 🇺🇸 Cloudflare
A104.21.10.3 Cloudflare
A172.67.161.204🇺🇸 Cloudflare

sh

NSa0.nic.sh
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh

Starts with same word

Starts similarily

AI analysis

ghost.sh resolves to four IPs: 2606:4700:3033::ac43:a1cc, 2606:4700:3034::6815:a03, 104.21.10.3 and 172.67.161.204.

Other host names such as ekshome.no, www.colorblindprogramming.com, cardmates.cc, chengyaohang.com and futureofwellness.info share IP numbers with ghost.sh.

ghost.sh is delegated to two name servers: evan.ns.cloudflare.com and tess.ns.cloudflare.com.

ghost.sh uses the same name server setup as other domains, including clayoquotwildernesslodge.com, exhibitprinting.co.uk, twcoupon.com, rehabresourceguide.com and southernoceanlodge.com.au.

At least part of the name servers for ghost.sh are shared with other domains, for instance erlang-mnesia-video.ru, bennettrwu.com, electrichead.co.th, parkingforceuk.co.uk and clearly.app.

These name servers are commonly used alongside the name servers kami.ns.cloudflare.com.

Host names with six IP numbers:

evan.ns.cloudflare.com points to: 2606:4700:58::adf5:3ba5, 2803:f800:50::6ca2:c1a5, 2a06:98c1:50::ac40:21a5, 108.162.193.165, 172.64.33.165 and 173.245.59.165.

tess.ns.cloudflare.com points to: 2606:4700:50::adf5:3ae3, 2803:f800:50::6ca2:c0e3, 2a06:98c1:50::ac40:20e3, 108.162.192.227, 172.64.32.227 and 173.245.58.227.

ghost.sh is handled by five mail servers: aspmx2.l.google.com, aspmx3.l.google.com, aspmx.l.google.com, alt1.aspmx.l.google.com and alt2.aspmx.l.google.com.

ghost.sh shares at least some mail servers with other domains, for example www.propsmart.com, fm1047.ca, dhc-it.com, charleycrockett.com and paneco.com.

these mail servers are commonly used alongside aspmx4.l.google.com, aspmx5.l.google.com, alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, aspmx2.googlemail.com, aspmx3.googlemail.com and aspmx1.l.google.com.

Host names with two IP numbers:

aspmx.l.google.com points to 2a00:1450:400c:c1d::1b and 74.125.206.26

alt1.aspmx.l.google.com points to 2a00:1450:4013:c1e::1b and 192.178.213.27

alt2.aspmx.l.google.com points to 2a00:1450:4025:c01::1b and 142.250.147.27

Perform reverse DNS lookup as well as normal forward DNS. Check Autonomous System Numbers (ASNs) and BGP connections between Internet Service Providers.
dbq

TlrtPOQ CF johedugfp 2025-10-13