php2shell.ai - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

php2shell.ai

DNSSEC⚠️ Not signed
A216.150.1.1πŸ‡¨πŸ‡¦ Amazon216.150.1.0/24 EC2 Prefix
A216.150.16.1πŸ‡¨πŸ‡¦ Amazon216.150.16.0/24 EC2 Prefix
NScasey.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2c9eπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcasey.ns.cloudflare.com
A2803:f800:50::6ca2:c39eπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRcasey.ns.cloudflare.com
A2a06:98c1:50::ac40:239eπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRcasey.ns.cloudflare.com
A108.162.195.158πŸ‡ΊπŸ‡Έ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcasey.ns.cloudflare.com
A162.159.44.158Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcasey.ns.cloudflare.com
A172.64.35.158πŸ‡ΊπŸ‡Έ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcasey.ns.cloudflare.com
NShazel.ns.cloudflare.com
A2606:4700:50::a29f:269dπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhazel.ns.cloudflare.com
A2803:f800:50::6ca2:c29dπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRhazel.ns.cloudflare.com
A2a06:98c1:50::ac40:229dπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRhazel.ns.cloudflare.com
A108.162.194.157πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhazel.ns.cloudflare.com
A162.159.38.157Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhazel.ns.cloudflare.com
A172.64.34.157πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhazel.ns.cloudflare.com
TXTgoogle-site-verification=nvNaxLXu7RgYVZ3T393olhA2-Sz1jd_fP-iDDnyNM_Y
SOAcasey.ns.cloudflare.comdns@cloudflare.com serial=2419284372

ai

DNSSECπŸ”’ Signed (DS record present)
NSv0n0.nic.ai ⭐
NSv0n1.nic.ai
NSv0n2.nic.ai
NSv0n3.nic.ai
NSv2n0.nic.ai
NSv2n1.nic.ai
SOAv0n0.nic.aihostmaster@donuts.email serial=1794136740

Same first word

Previous names

Next names

DNS History

4 records (4 active, 0 former)

NScasey.ns.cloudflare.comhazel.ns.cloudflare.comA216.150.1.1216.150.16.1
●NScasey.ns.cloudflare.com2026-10-22 β†’ 2026-11-08 Β· 2 obs
● 2026-10-22 11:04:58
● 2026-11-08 11:57:12
●NShazel.ns.cloudflare.com2026-10-22 β†’ 2026-11-08 Β· 2 obs
● 2026-10-22 11:04:58
● 2026-11-08 11:57:12
●A216.150.1.12026-10-22 β†’ 2026-11-08 Β· 2 obs
● 2026-10-22 11:04:58
● 2026-11-08 11:57:12
●A216.150.16.12026-10-22 β†’ 2026-11-08 Β· 2 obs
● 2026-10-22 11:04:58
● 2026-11-08 11:57:12

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
aiv2n0.nic.ai, v2n1.nic.ai, v0n0.nic.ai, v0n2.nic.ai...12 records
php2shell.aicasey.ns.cloudflare.com, hazel.ns.cloudflare.com-

βœ… Authoritative Response

Server:108.162.195.158

NS records: casey.ns.cloudflare.com, hazel.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for php2shell.ai (unsigned zone)

⏱️ Timing

Total: 632ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2216.150.16.1, 216.150.1.1
NS2casey.ns.cloudflare.com, hazel.ns.cloudflare.com
TXT1google-site-verification=nvNaxLXu7RgYVZ3
SOA1casey.ns.cloudflare.com dns.cloudflare.c

πŸ“Œ Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.ai, v0n1.nic.ai, v0n2.nic.ai...)

Analysis

IP Addresses

php2shell.ai points to the IP addresses 216.150.1.1 and 216.150.16.1

gaijinbuddy.com, betaroo.com.au, milliondollarhurdle.com plus two other host names have IP numbers in common with php2shell.ai.

Name Servers

php2shell.ai uses two name servers for its delegation: casey.ns.cloudflare.com and hazel.ns.cloudflare.com.

The name server configuration of php2shell.ai is shared with other domains, for instance helped-boostingforce-p4m7qt.pages.dev, rokokslot.co, bigbassbonanzas-es.es and two others.

The name servers of php2shell.ai overlap at least partially with those of other domains β€” among them solomonkpogo008.workers.dev, holdent.com.au, thunderblitzz-th.top and two more.

The name servers rodrigo.ns.cloudflare.com, barbara.ns.cloudflare.com and algin.ns.cloudflare.com are commonly seen alongside these name servers.

Hosts with 6 IP addresses each:

Hostname casey.ns.cloudflare.com directs to 108.162.195.158, 162.159.44.158 and 172.64.35.158 along with 3 other IP addresses.

Hostname hazel.ns.cloudflare.com directs to 108.162.194.157, 162.159.38.157 and 172.64.34.157 along with 3 other IP addresses.