php2shell.click - robtex.com

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

php2shell.click

DNSSEC⚠️ Not signed
A2606:4700:3030::6815:40d8🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3030::ac43:bbe3🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.64.216Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.187.227🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSnitin.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3bd7🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnitin.ns.cloudflare.com
A2803:f800:50::6ca2:c1d7🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRnitin.ns.cloudflare.com
A2a06:98c1:50::ac40:21d7🇺🇸 Cloudflare2a06:98c1:50::/45
PTRnitin.ns.cloudflare.com
A108.162.193.215🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnitin.ns.cloudflare.com
A172.64.33.215🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnitin.ns.cloudflare.com
A173.245.59.215🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnitin.ns.cloudflare.com
NStegan.ns.cloudflare.com
A2606:4700:50::adf5:3ae2🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtegan.ns.cloudflare.com
A2803:f800:50::6ca2:c0e2🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRtegan.ns.cloudflare.com
A2a06:98c1:50::ac40:20e2🇺🇸 Cloudflare2a06:98c1:50::/45
PTRtegan.ns.cloudflare.com
A108.162.192.226🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtegan.ns.cloudflare.com
A172.64.32.226🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtegan.ns.cloudflare.com
A173.245.58.226🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtegan.ns.cloudflare.com
MXeforward1.registrar-servers.com ⭐
A162.255.118.51🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward1.registrar-servers.com
PTReforward3.registrar-servers.com
MXeforward2.registrar-servers.com ⭐
A162.255.118.52🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward2.registrar-servers.com
MXeforward3.registrar-servers.com ⭐
A162.255.118.51🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward1.registrar-servers.com
PTReforward3.registrar-servers.com
MXeforward4.registrar-servers.com(15)
A162.255.118.52🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward2.registrar-servers.com
MXeforward5.registrar-servers.com(20)
A162.255.118.51🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward1.registrar-servers.com
PTReforward3.registrar-servers.com
TXTv=spf1 include:spf.efwd.registrar-servers.com ~all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.64.216, 172.67.187.227
IPv6 hints2606:4700:3030::6815:40d8, 2606:4700:3030::ac43:bbe3
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=110, name=cloudflare-ech.com
SOAnitin.ns.cloudflare.comdns@cloudflare.com serial=2418106927

click

DNSSEC🔒 Signed (DS record present)
NSns01.trs-dns.com ⭐
NSns.trs-dns.com
NSns01.trs-dns.net
NSns10.trs-dns.info
NSns10.trs-dns.org
SOAns.trs-dns.comtrs-ops@tucows.com serial=1794138934
⚠️ On DNS blocklist: spam-tlds

Same first word

php2shell.ro
php2shell.tech
php2shell.run
php2shell.site
php2shell.xyz
php2shell.co.kr
php2shell.fyi
php2shell.dev
php2shell.top
php2shell.live
php2shell.com.tr
php2shell.cn
php2shell.at
php2shell.ru
php2shell.me
php2shell.link
php2shell.help
php2shell.com
php2shell.cc
php2shell.in
php2shell.ph
php2shell.net
php2shell.si
php2shell.kr
php2shell.org
php2shell.tr
php2shell.de
php2shell.info
php2shell.eu
php2shell.ch
php2shell.hu
php2shell.pro
php2shell.uk
php2shell.tw
php2shell.dk
php2shell.wtf
php2shell.sh
php2shell.us
php2shell.co.uk
php2shell.jp
php2shell.io
php2shell.is
php2shell.click
php2shell.app
php2shell.pl
php2shell.pages.dev
php2shell.fun
php2shell.es
php2shell.ai
php2shell.quest
php2shell.workers.dev
php2shell.gr
php2shell.support
php2shell.fr

Previous names

photovirtue.click
photovisionary.click
photovistacreations.click
photovoltaic-system-and-storage.click
photowave.click
photowhisper.click
photox.click
photrealm.click
photscale.click
photto-sttudio.click
photuriastudio.click
phourge.click
phourm.click
phousihill.click
phovis.click
phoyu.click
php-color.click
php-famous.click
php-s.click
php288.click

Next names

php33.click
php365.click
php38.click
php3e5en6uis5.click
php777login.click
php777win.click
phpanel.click
phparadise.click
phpark.click
phpdailyhome.click
phpdrink.click
phpearl.click
phpfamous.click
phpg.click
phpgroup.click
phphomesolution.click
phphostings.click
phpinas.click

DNS History

15 records (11 active, 4 former)

NSnitin.ns.cloudflare.comtegan.ns.cloudflare.comMXeforward1.registrar-servers.comeforward2.registrar-servers.comeforward3.registrar-servers.comeforward4.registrar-servers.comeforward5.registrar-servers.comA104.21.64.216172.67.187.2272606:4700:3030::6815:40d82606:4700:3030::ac43:bbe3188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSnitin.ns.cloudflare.com2026-10-22 → 2026-11-08 · 2 obs
● 2026-10-22 05:30:46
● 2026-11-08 11:59:30
●NStegan.ns.cloudflare.com2026-10-22 → 2026-11-08 · 2 obs
● 2026-10-22 05:30:46
● 2026-11-08 11:59:30
●MXeforward1.registrar-servers.com2026-10-22 → 2026-11-08 · 2 obs
● 2026-10-22 05:30:46
● 2026-11-08 11:59:30
●MXeforward2.registrar-servers.com2026-10-22 → 2026-11-08 · 2 obs
● 2026-10-22 05:30:46
● 2026-11-08 11:59:30
●MXeforward3.registrar-servers.com2026-10-22 → 2026-11-08 · 2 obs
● 2026-10-22 05:30:46
● 2026-11-08 11:59:30
●MXeforward4.registrar-servers.com2026-10-22 → 2026-11-08 · 2 obs
● 2026-10-22 05:30:46
● 2026-11-08 11:59:30
●MXeforward5.registrar-servers.com2026-10-22 → 2026-11-08 · 2 obs
● 2026-10-22 05:30:46
● 2026-11-08 11:59:30
●A104.21.64.2162026-10-27 → 2026-11-08 · 5 obs
○ 2026-10-22 05:30:46
● 2026-10-27 13:34:44
○ 2026-10-29 01:41:16
● 2026-11-02 07:30:24
● 2026-11-08 11:59:30
●A172.67.187.2272026-10-27 → 2026-11-08 · 5 obs
○ 2026-10-22 05:30:46
● 2026-10-27 13:34:44
○ 2026-10-29 01:41:16
● 2026-11-02 07:30:24
● 2026-11-08 11:59:30
○A188.114.96.02026-10-22 → 2026-10-29 · 5 obs
● 2026-10-22 05:30:46
○ 2026-10-27 13:34:44
● 2026-10-29 01:41:16
○ 2026-11-02 07:30:24
○ 2026-11-08 11:59:30
○A188.114.97.02026-10-22 → 2026-10-29 · 5 obs
● 2026-10-22 05:30:46
○ 2026-10-27 13:34:44
● 2026-10-29 01:41:16
○ 2026-11-02 07:30:24
○ 2026-11-08 11:59:30
●A2606:4700:3030::6815:40d82026-10-27 → 2026-11-08 · 5 obs
○ 2026-10-22 05:30:46
● 2026-10-27 13:34:44
○ 2026-10-29 01:41:16
● 2026-11-02 07:30:24
● 2026-11-08 11:59:30
●A2606:4700:3030::ac43:bbe32026-10-27 → 2026-11-08 · 5 obs
○ 2026-10-22 05:30:46
● 2026-10-27 13:34:44
○ 2026-10-29 01:41:16
● 2026-11-02 07:30:24
● 2026-11-08 11:59:30
○A2a06:98c1:3120::2026-10-22 → 2026-10-29 · 5 obs
● 2026-10-22 05:30:46
○ 2026-10-27 13:34:44
● 2026-10-29 01:41:16
○ 2026-11-02 07:30:24
○ 2026-11-08 11:59:30
○A2a06:98c1:3121::2026-10-22 → 2026-10-29 · 5 obs
● 2026-10-22 05:30:46
○ 2026-10-27 13:34:44
● 2026-10-29 01:41:16
○ 2026-11-02 07:30:24
○ 2026-11-08 11:59:30

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
clickns10.trs-dns.info, ns01.trs-dns.net, ns01.trs-dns.com, ns10.trs-dns.org8 records
php2shell.clicknitin.ns.cloudflare.com, tegan.ns.cloudflare.com-

✅ Authoritative Response

Server:172.64.33.215

NS records: nitin.ns.cloudflare.com, tegan.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for php2shell.click (unsigned zone)

⏱️ Timing

Total: 1272ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.187.227, 104.21.64.216
AAAA22606:4700:3030::ac43:bbe3, 2606:4700:3030::6815:40d8
NS2nitin.ns.cloudflare.com, tegan.ns.cloudflare.com
MX5eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...
TXT1v=spf1 include:spf.efwd.registrar-server
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1nitin.ns.cloudflare.com dns.cloudflare.c

📌 Glue Records Collected

Total: 8

Out-of-bailiwick: 8 (ns10.trs-dns.info, ns10.trs-dns.org, ns01.trs-dns.net...)

Analysis

IP Addresses

php2shell.click points to the four IP addresses 104.21.64.216, 172.67.187.227, 2606:4700:3030::6815:40d8 and 2606:4700:3030::ac43:bbe3.

Among the host names that share IP numbers with php2shell.click are reetstreet.com, cachohq.com, xn--otokma-yua60d.com.tr and two others.

Name Servers

DNS delegation for php2shell.click points to two name servers: nitin.ns.cloudflare.com and tegan.ns.cloudflare.com.

php2shell.click has the same name server delegation as a number of other domains, such as allgamekeyshop.com, junior-jve.workers.dev, myorder.sk and two more.

At least some of php2shell.click's name servers are shared with other domains, for example swettyboomer.workers.dev, fuzzyarbor.click, vlad-mackarov2013.workers.dev and two more.

These name servers are often deployed together with the name servers mustafa.ns.cloudflare.com, kate.ns.cloudflare.com, linda.ns.cloudflare.com and norman.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

nitin.ns.cloudflare.com has IP addresses 108.162.193.215, 172.64.33.215 and 173.245.59.215, plus 3 other.

tegan.ns.cloudflare.com has IP addresses 108.162.192.226, 172.64.32.226 and 173.245.58.226, plus 3 other.

Mail Servers

php2shell.click has five mail servers, which are eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

php2shell.click shares at least some of its mail servers with other domains — for example whilerosesfade.com, dailywigglenews.ca, 85kfnx1.pro and two more.

It is common to find these mail servers used together with the mail servers eforward4.registrar-servers.com and eforward5.registrar-servers.com.

Hosts that resolve to one IP address:

eforward1.registrar-servers.com directs to 162.255.118.51.

eforward2.registrar-servers.com directs to 162.255.118.52.

eforward3.registrar-servers.com directs to 162.255.118.51.

eforward4.registrar-servers.com directs to 162.255.118.52.

eforward5.registrar-servers.com directs to 162.255.118.51.

eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com all direct to 162.255.118.51.

Host names pointing to 162.255.118.52 IP addresses: eforward2.registrar-servers.com and eforward4.registrar-servers.com.