mscript.click - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`mscript.click`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::ac43:c326^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3034::6815:ca1^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.12.161^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.195.38^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`galilea.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:26e9^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`galilea.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c2e9^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`galilea.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:22e9^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`galilea.ns.cloudflare.com`
		A	108.162.194.233^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`galilea.ns.cloudflare.com`
		A	162.159.38.233^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`galilea.ns.cloudflare.com`
		A	172.64.34.233^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`galilea.ns.cloudflare.com`
NS	`osmar.ns.cloudflare.com`
		A	2606:4700:58::a29f:2c7c^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`osmar.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c37c^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`osmar.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:237c^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`osmar.ns.cloudflare.com`
		A	108.162.195.124^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`osmar.ns.cloudflare.com`
		A	162.159.44.124^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`osmar.ns.cloudflare.com`
		A	172.64.35.124^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`osmar.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.12.161, 172.67.195.38
		IPv6 hints	2606:4700:3030::ac43:c326, 2606:4700:3034::6815:ca1
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=86, name=cloudflare-ech.com
SOA	`galilea.ns.cloudflare.com`dns@cloudflare.com serial=2412386004

`click`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns01.trs-dns.com` ⭐
	NS	`ns.trs-dns.com`
	NS	`ns01.trs-dns.net`
	NS	`ns10.trs-dns.info`
	NS	`ns10.trs-dns.org`
	SOA	`ns.trs-dns.com`trs-ops@tucows.com serial=1789433447

⚠️ On DNS blocklist: spam-tlds

Same first word

mscript.ai

mscript.fr

mscript.co

mscript.cn

mscript.de

mscript.workers.dev

mscript.biz

mscript.click

mscript.com

Similar names

tripscm.com

scriptm.ru

tripcms.com

trimpcs.com

prismtc.com

tipscrm.ru

rtmpics.com

tipscrm.co

rmpicts.com

scrimpt.com

stirmcp.xyz

prismtc.co.uk

impctrs.org

mctrips.co.uk

spctrim.com

scriptm.com

impctrs.com

crmtips.com

mcstrip.de

pcmistr.cz

ctmrisp.ph

itpscrm.com

stripcm.com

tmcrisp.workers.dev

tmrpics.com

crmtips.net

picstrm.com

tipscrm.nl

prismct.com

crmtips.online

critsmp.net

mistrpc.com

prismtc.net

tripcms.co

pscmitr.com

mcsprit.de

pcmistr.pages.dev

mistrpc.cz

mctrips.com

Previous names

Next names

DNS History

15 records (11 active, 4 former)

●NSgalilea.ns.cloudflare.com2026-08-25 → 2026-09-15 · 2 obs

● 2026-08-25 22:01:12
● 2026-09-15 01:25:04

●NSosmar.ns.cloudflare.com2026-08-25 → 2026-09-15 · 2 obs

● 2026-08-25 22:01:12
● 2026-09-15 01:25:04

●MXeforward1.registrar-servers.com2026-08-25 → 2026-09-15 · 2 obs

● 2026-08-25 22:01:12
● 2026-09-15 01:25:04

●MXeforward2.registrar-servers.com2026-08-25 → 2026-09-15 · 2 obs

● 2026-08-25 22:01:12
● 2026-09-15 01:25:04

●MXeforward3.registrar-servers.com2026-08-25 → 2026-09-15 · 2 obs

● 2026-08-25 22:01:12
● 2026-09-15 01:25:04

●MXeforward4.registrar-servers.com2026-08-25 → 2026-09-15 · 2 obs

● 2026-08-25 22:01:12
● 2026-09-15 01:25:04

●MXeforward5.registrar-servers.com2026-08-25 → 2026-09-15 · 2 obs

● 2026-08-25 22:01:12
● 2026-09-15 01:25:04

●A104.21.12.1612026-09-13 → 2026-09-15 · 3 obs

○ 2026-08-25 22:01:12
● 2026-09-13 16:52:16
● 2026-09-15 01:25:04

●A172.67.195.382026-09-13 → 2026-09-15 · 3 obs

○ 2026-08-25 22:01:12
● 2026-09-13 16:52:16
● 2026-09-15 01:25:04

○A188.114.96.02026-08-25 → 2026-08-25 · 3 obs

● 2026-08-25 22:01:12
○ 2026-09-13 16:52:16
○ 2026-09-15 01:25:04

○A188.114.97.02026-08-25 → 2026-08-25 · 3 obs

● 2026-08-25 22:01:12
○ 2026-09-13 16:52:16
○ 2026-09-15 01:25:04

●A2606:4700:3030::ac43:c3262026-09-13 → 2026-09-15 · 3 obs

○ 2026-08-25 22:01:12
● 2026-09-13 16:52:16
● 2026-09-15 01:25:04

●A2606:4700:3034::6815:ca12026-09-13 → 2026-09-15 · 3 obs

○ 2026-08-25 22:01:12
● 2026-09-13 16:52:16
● 2026-09-15 01:25:04

○A2a06:98c1:3120::2026-08-25 → 2026-08-25 · 3 obs

● 2026-08-25 22:01:12
○ 2026-09-13 16:52:16
○ 2026-09-15 01:25:04

○A2a06:98c1:3121::2026-08-25 → 2026-08-25 · 3 obs

● 2026-08-25 22:01:12
○ 2026-09-13 16:52:16
○ 2026-09-15 01:25:04

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
click	ns01.trs-dns.com, ns01.trs-dns.net, ns10.trs-dns.org, ns10.trs-dns.info	8 records
mscript.click	osmar.ns.cloudflare.com, galilea.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.195.124

NS records: osmar.ns.cloudflare.com, galilea.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for mscript.click (unsigned zone)

⏱️ Timing

Total: 773ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.195.38, 104.21.12.161`
AAAA	2	`2606:4700:3034::6815:ca1, 2606:4700:3030::ac43:c326`
NS	2	`galilea.ns.cloudflare.com, osmar.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	1	`v=spf1 include:spf.efwd.registrar-server`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`galilea.ns.cloudflare.com dns.cloudflare`

📌 Glue Records Collected

Total: 8

Out-of-bailiwick: 8 (ns01.trs-dns.com, ns01.trs-dns.com, ns01.trs-dns.net...)

Analysis

IP Addresses

mscript.click points to the four IP addresses 104.21.12.161, 172.67.195.38, 2606:4700:3030::ac43:c326 and 2606:4700:3034::6815:ca1.

mftk.cn, w1orcapg7.com, 6658.top and two other host names share IP numbers with mscript.click.

Name Servers

mscript.click is served by two delegated name servers, galilea.ns.cloudflare.com and osmar.ns.cloudflare.com.

mscript.click uses the same name servers as several other domains — among them peocpa.com, vividitsolutions.co.uk, geosoft.uz and two more.

There is at least partial name server overlap between mscript.click and other domains — notepass.pages.dev, crfshiperkampgnbugn.cfd, riskynotes.space and two more among them.

These name servers tend to appear in combination with the name servers leia.ns.cloudflare.com, luciane.ns.cloudflare.com, theo.ns.cloudflare.com and lee.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

galilea.ns.cloudflare.com carries IP addresses 108.162.194.233, 162.159.38.233 and 172.64.34.233, with 3 other addresses beyond those.

osmar.ns.cloudflare.com carries IP addresses 108.162.195.124, 162.159.44.124 and 172.64.35.124, with 3 other addresses beyond those.

Mail Servers

mscript.click has five mail servers, which are eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

mscript.click has at least partial mail server overlap with other domains such as rowaedit.com, hafta.app, dreamcometrue.live and two more.

These mail servers are routinely seen in conjunction with the mail servers eforward4.registrar-servers.com and eforward5.registrar-servers.com.

Hosts with just one IP address:

eforward1.registrar-servers.com points to the IP address 162.255.118.51.

eforward2.registrar-servers.com points to the IP address 162.255.118.52.

eforward3.registrar-servers.com points to the IP address 162.255.118.51.

eforward4.registrar-servers.com points to the IP address 162.255.118.52.

eforward5.registrar-servers.com points to the IP address 162.255.118.51.

The host names eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com each resolve to 162.255.118.51.

These two host names — eforward2.registrar-servers.com and eforward4.registrar-servers.com — each point to 162.255.118.52 IP addresses.