php2shell.click - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

php2shell.click

DNSSEC⚠️ Not signed
A2606:4700:3030::6815:40d8🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3030::ac43:bbe3🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.64.216Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.187.227🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSnitin.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3bd7🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnitin.ns.cloudflare.com
A2803:f800:50::6ca2:c1d7🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRnitin.ns.cloudflare.com
A2a06:98c1:50::ac40:21d7🇺🇸 Cloudflare2a06:98c1:50::/45
PTRnitin.ns.cloudflare.com
A108.162.193.215🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnitin.ns.cloudflare.com
A172.64.33.215🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnitin.ns.cloudflare.com
A173.245.59.215🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnitin.ns.cloudflare.com
NStegan.ns.cloudflare.com
A2606:4700:50::adf5:3ae2🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtegan.ns.cloudflare.com
A2803:f800:50::6ca2:c0e2🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRtegan.ns.cloudflare.com
A2a06:98c1:50::ac40:20e2🇺🇸 Cloudflare2a06:98c1:50::/45
PTRtegan.ns.cloudflare.com
A108.162.192.226🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtegan.ns.cloudflare.com
A172.64.32.226🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtegan.ns.cloudflare.com
A173.245.58.226🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtegan.ns.cloudflare.com
MXeforward1.registrar-servers.com ⭐
A162.255.118.51🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward1.registrar-servers.com
PTReforward3.registrar-servers.com
MXeforward2.registrar-servers.com ⭐
A162.255.118.52🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward2.registrar-servers.com
MXeforward3.registrar-servers.com ⭐
A162.255.118.51🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward1.registrar-servers.com
PTReforward3.registrar-servers.com
MXeforward4.registrar-servers.com(15)
A162.255.118.52🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward2.registrar-servers.com
MXeforward5.registrar-servers.com(20)
A162.255.118.51🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward1.registrar-servers.com
PTReforward3.registrar-servers.com
TXTv=spf1 include:spf.efwd.registrar-servers.com ~all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.64.216, 172.67.187.227
IPv6 hints2606:4700:3030::6815:40d8, 2606:4700:3030::ac43:bbe3
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=41, name=cloudflare-ech.com
SOAnitin.ns.cloudflare.comdns@cloudflare.com serial=2418106927

click

DNSSEC🔒 Signed (DS record present)
NSns01.trs-dns.com ⭐
NSns.trs-dns.com
NSns01.trs-dns.net
NSns10.trs-dns.info
NSns10.trs-dns.org
SOAns.trs-dns.comtrs-ops@tucows.com serial=1793107534
⚠️ On DNS blocklist: spam-tlds

Same first word

php2shell.ro
php2shell.tech
php2shell.run
php2shell.co.kr
php2shell.fyi
php2shell.dev
php2shell.top
php2shell.live
php2shell.com.tr
php2shell.cn
php2shell.at
php2shell.ru
php2shell.link
php2shell.help
php2shell.com
php2shell.cc
php2shell.in
php2shell.ph
php2shell.net
php2shell.si
php2shell.kr
php2shell.org
php2shell.tr
php2shell.de
php2shell.info
php2shell.eu
php2shell.ch
php2shell.hu
php2shell.pro
php2shell.uk
php2shell.tw
php2shell.dk
php2shell.wtf
php2shell.sh
php2shell.us
php2shell.co.uk
php2shell.jp
php2shell.io
php2shell.is
php2shell.click
php2shell.app
php2shell.pl
php2shell.pages.dev
php2shell.fun
php2shell.es
php2shell.ai
php2shell.quest
php2shell.workers.dev
php2shell.gr
php2shell.support
php2shell.fr

Previous names

photovibrance.click
photovirtue.click
photovisionary.click
photovistacreations.click
photovoltaic-system-and-storage.click
photowave.click
photowhisper.click
photox.click
photrealm.click
photto-sttudio.click
photuriastudio.click
phourge.click
phourm.click
phousihill.click
phovis.click
phoyu.click
php-color.click
php-famous.click
php-s.click
php288.click

Next names

php33.click
php365.click
php38.click
php3e5en6uis5.click
php777login.click
php777win.click
phpanel.click
phparadise.click
phpark.click
phpdailyhome.click
phpdrink.click
phpearl.click
phpfamous.click
phpg.click
phpgroup.click
phphomesolution.click
phphostings.click
phpinas.click

DNS History

15 records (11 active, 4 former)

NSnitin.ns.cloudflare.comtegan.ns.cloudflare.comMXeforward1.registrar-servers.comeforward2.registrar-servers.comeforward3.registrar-servers.comeforward4.registrar-servers.comeforward5.registrar-servers.comA104.21.64.216172.67.187.2272606:4700:3030::6815:40d82606:4700:3030::ac43:bbe3188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSnitin.ns.cloudflare.com2026-10-22 → 2026-10-27 · 2 obs
● 2026-10-22 05:30:46
● 2026-10-27 13:34:48
●NStegan.ns.cloudflare.com2026-10-22 → 2026-10-27 · 2 obs
● 2026-10-22 05:30:46
● 2026-10-27 13:34:48
●MXeforward1.registrar-servers.com2026-10-22 → 2026-10-27 · 2 obs
● 2026-10-22 05:30:46
● 2026-10-27 13:34:48
●MXeforward2.registrar-servers.com2026-10-22 → 2026-10-27 · 2 obs
● 2026-10-22 05:30:46
● 2026-10-27 13:34:48
●MXeforward3.registrar-servers.com2026-10-22 → 2026-10-27 · 2 obs
● 2026-10-22 05:30:46
● 2026-10-27 13:34:48
●MXeforward4.registrar-servers.com2026-10-22 → 2026-10-27 · 2 obs
● 2026-10-22 05:30:46
● 2026-10-27 13:34:48
●MXeforward5.registrar-servers.com2026-10-22 → 2026-10-27 · 2 obs
● 2026-10-22 05:30:46
● 2026-10-27 13:34:48
●A104.21.64.2162026-10-27 → 2026-10-27 · 3 obs
○ 2026-10-22 05:30:46
● 2026-10-27 13:34:44
● 2026-10-27 13:34:48
●A172.67.187.2272026-10-27 → 2026-10-27 · 3 obs
○ 2026-10-22 05:30:46
● 2026-10-27 13:34:44
● 2026-10-27 13:34:48
○A188.114.96.02026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 05:30:46
○ 2026-10-27 13:34:44
○ 2026-10-27 13:34:48
○A188.114.97.02026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 05:30:46
○ 2026-10-27 13:34:44
○ 2026-10-27 13:34:48
●A2606:4700:3030::6815:40d82026-10-27 → 2026-10-27 · 3 obs
○ 2026-10-22 05:30:46
● 2026-10-27 13:34:44
● 2026-10-27 13:34:48
●A2606:4700:3030::ac43:bbe32026-10-27 → 2026-10-27 · 3 obs
○ 2026-10-22 05:30:46
● 2026-10-27 13:34:44
● 2026-10-27 13:34:48
○A2a06:98c1:3120::2026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 05:30:46
○ 2026-10-27 13:34:44
○ 2026-10-27 13:34:48
○A2a06:98c1:3121::2026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 05:30:46
○ 2026-10-27 13:34:44
○ 2026-10-27 13:34:48

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
clickns01.trs-dns.com, ns10.trs-dns.info, ns10.trs-dns.org, ns01.trs-dns.net8 records
php2shell.clicktegan.ns.cloudflare.com, nitin.ns.cloudflare.com-

✅ Authoritative Response

Server:108.162.193.215

NS records: tegan.ns.cloudflare.com, nitin.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for php2shell.click (unsigned zone)

⏱️ Timing

Total: 837ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.64.216, 172.67.187.227
AAAA22606:4700:3030::6815:40d8, 2606:4700:3030::ac43:bbe3
NS2nitin.ns.cloudflare.com, tegan.ns.cloudflare.com
MX5eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...
TXT1v=spf1 include:spf.efwd.registrar-server
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1nitin.ns.cloudflare.com dns.cloudflare.c

📌 Glue Records Collected

Total: 8

Out-of-bailiwick: 8 (ns10.trs-dns.info, ns10.trs-dns.org, ns01.trs-dns.net...)

Analysis

IP Addresses

php2shell.click directs to four IP numbers, which are 104.21.64.216, 172.67.187.227, 2606:4700:3030::6815:40d8 and 2606:4700:3030::ac43:bbe3.

Two other host names, along with reetstreet.com, cachohq.com and nghmaty.top, also share IP numbers with php2shell.click.

Name Servers

php2shell.click uses two name servers for its delegation: nitin.ns.cloudflare.com and tegan.ns.cloudflare.com.

php2shell.click shares its NS records with other domains, for example allgamekeyshop.com, junior-jve.workers.dev, myorder.sk and two others.

The name servers of php2shell.click overlap at least partially with those of other domains — among them swettyboomer.workers.dev, fuzzyarbor.click, galaxy5.com.au and two more.

The name servers mustafa.ns.cloudflare.com, kate.ns.cloudflare.com, linda.ns.cloudflare.com and two others are commonly seen in use alongside these name servers.

DNS names with 6 IP addresses:

Hostname nitin.ns.cloudflare.com directs to 108.162.193.215, 172.64.33.215 and 173.245.59.215 along with 3 other IP addresses.

Hostname tegan.ns.cloudflare.com directs to 108.162.192.226, 172.64.32.226 and 173.245.58.226 along with 3 other IP addresses.

Mail Servers

Five mail servers handle php2shell.click: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

There is at least a partial MX overlap between php2shell.click and other domains, including whilerosesfade.com, dailywigglenews.ca, 85kfnx1.pro and two others.

The mail servers eforward4.registrar-servers.com and eforward5.registrar-servers.com are commonly paired with these mail servers.

Host names that point to one IP address:

eforward1.registrar-servers.com has the IP address 162.255.118.51.

eforward2.registrar-servers.com has the IP address 162.255.118.52.

eforward3.registrar-servers.com has the IP address 162.255.118.51.

eforward4.registrar-servers.com has the IP address 162.255.118.52.

eforward5.registrar-servers.com has the IP address 162.255.118.51.

Each of eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com resolves to 162.255.118.51.

Both eforward2.registrar-servers.com and eforward4.registrar-servers.com resolve to 162.255.118.52 IP addresses each.