🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`php2shell.app`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::6815:5dbf^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3032::ac43:d605^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.93.191^{Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.214.5^{🇺🇸 Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`harleigh.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:263a^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`harleigh.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c23a^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`harleigh.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:223a^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`harleigh.ns.cloudflare.com`
		A	108.162.194.58^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`harleigh.ns.cloudflare.com`
		A	162.159.38.58^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`harleigh.ns.cloudflare.com`
		A	172.64.34.58^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`harleigh.ns.cloudflare.com`
NS	`tate.ns.cloudflare.com`
		A	2606:4700:58::a29f:2cbf^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tate.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3bf^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`tate.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23bf^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`tate.ns.cloudflare.com`
		A	108.162.195.191^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tate.ns.cloudflare.com`
		A	162.159.44.191^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tate.ns.cloudflare.com`
		A	172.64.35.191^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tate.ns.cloudflare.com`
MX	`route1.mx.cloudflare.net` ⭐
		A	2606:4700:f5::b^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	2606:4700:f5::c^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	2606:4700:f5::d^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	162.159.205.11^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	162.159.205.12^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	162.159.205.13^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
MX	`route3.mx.cloudflare.net`⁽⁴²⁾
		A	2606:4700:f5::11^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	2606:4700:f5::12^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	2606:4700:f5::13^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	162.159.205.23^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	162.159.205.24^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	162.159.205.25^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
MX	`route2.mx.cloudflare.net`⁽¹⁰⁰⁾
		A	2606:4700:f5::e^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	2606:4700:f5::f^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	2606:4700:f5::10^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	162.159.205.17^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	162.159.205.18^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	162.159.205.19^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
TXT	`google-site-verification=l-bZ9kqyVjOOZqbwyGBbAbjczgrMVGumVwXEy80480Q`
TXT	`v=spf1 include:_spf.mx.cloudflare.net ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.93.191, 172.67.214.5
		IPv6 hints	2606:4700:3032::6815:5dbf, 2606:4700:3032::ac43:d605
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=110, name=cloudflare-ech.com
SOA	`harleigh.ns.cloudflare.com`dns@cloudflare.com serial=2418912737

`app`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns-tld1.charlestonroadregistry.com` ⭐
	NS	`ns-tld2.charlestonroadregistry.com`
	NS	`ns-tld3.charlestonroadregistry.com`
	NS	`ns-tld4.charlestonroadregistry.com`
	NS	`ns-tld5.charlestonroadregistry.com`
	SOA	`ns-tld1.charlestonroadregistry.com`cloud-dns-hostmaster@google.com serial=101427

🔒 HSTS Preload (+subdomains)

Same first word

Previous names

photure.app

photuris.app

photy.app

phound.app

phoundit.app

phoundry.app

phova.app

phovi.app

phovia.app

phovip.app

phovo.app

phox.app

phoxel.app

phoya.app

php-c.app

php.app

php123.app

php22.app

php222.app

php288.app

Next names

php33.app

php356.app

php36.app

php365.app

php38.app

php444.app

php456.app

php59.app

php646.app

php65.app

php747.app

php77.app

php777.app

php7777.app

php788.app

php789.app

php797.app

php828.app

php877.app

php88.app

DNS History

9 records (9 active, 0 former)

●NSharleigh.ns.cloudflare.com2026-10-22 → 2026-11-08 · 2 obs

● 2026-10-22 05:43:30
● 2026-11-08 11:59:30

●NState.ns.cloudflare.com2026-10-22 → 2026-11-08 · 2 obs

● 2026-10-22 05:43:30
● 2026-11-08 11:59:30

●MXroute1.mx.cloudflare.net2026-10-22 → 2026-11-08 · 2 obs

● 2026-10-22 05:43:30
● 2026-11-08 11:59:30

●MXroute2.mx.cloudflare.net2026-10-22 → 2026-11-08 · 2 obs

● 2026-10-22 05:43:30
● 2026-11-08 11:59:30

●MXroute3.mx.cloudflare.net2026-10-22 → 2026-11-08 · 2 obs

● 2026-10-22 05:43:30
● 2026-11-08 11:59:30

●A104.21.93.1912026-10-22 → 2026-11-08 · 2 obs

● 2026-10-22 05:43:30
● 2026-11-08 11:59:30

●A172.67.214.52026-10-22 → 2026-11-08 · 2 obs

● 2026-10-22 05:43:30
● 2026-11-08 11:59:30

●A2606:4700:3032::6815:5dbf2026-10-22 → 2026-11-08 · 2 obs

● 2026-10-22 05:43:30
● 2026-11-08 11:59:30

●A2606:4700:3032::ac43:d6052026-10-22 → 2026-11-08 · 2 obs

● 2026-10-22 05:43:30
● 2026-11-08 11:59:30

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
app	ns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com...	10 records
php2shell.app	harleigh.ns.cloudflare.com, tate.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.195.191

NS records: harleigh.ns.cloudflare.com, tate.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for php2shell.app (unsigned zone)

⏱️ Timing

Total: 1232ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.93.191, 172.67.214.5`
AAAA	2	`2606:4700:3032::ac43:d605, 2606:4700:3032::6815:5dbf`
NS	2	`harleigh.ns.cloudflare.com, tate.ns.cloudflare.com`
MX	3	`route2.mx.cloudflare.net (pri: 100), route1.mx.cloudflare.net (pri: 16)...`
TXT	2	`google-site-verification=l-bZ9kqyVjOOZqb, v=spf1 include:_spf.mx.cloudflare.net ~a`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`harleigh.ns.cloudflare.com dns.cloudflar`

📌 Glue Records Collected

Total: 10

Out-of-bailiwick: 10 (ns-tld1.charlestonroadregistry.com, ns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com...)

Analysis

IP Addresses

php2shell.app points to the four IP addresses 104.21.93.191, 172.67.214.5, 2606:4700:3032::6815:5dbf and 2606:4700:3032::ac43:d605.

Among the host names that share IP numbers with php2shell.app are skylinechurch.tech, cdnimages2378.shop, immivietnam.com and two others.

Name Servers

php2shell.app is served by two delegated name servers, harleigh.ns.cloudflare.com and tate.ns.cloudflare.com.

php2shell.app has the same name server delegation as a number of other domains, such as best-games.io, liq.bio, northsidepartnership.org and two more.

The name servers of php2shell.app overlap at least partially with those of other domains — among them hiphopproducersbible.com, ktgdw.com, j9rx9930pgr3.workers.dev and two more.

These name servers commonly appear in combination with the name servers armando.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

harleigh.ns.cloudflare.com carries IP addresses 108.162.194.58, 162.159.38.58 and 172.64.34.58, with 3 other addresses beyond those.

tate.ns.cloudflare.com carries IP addresses 108.162.195.191, 162.159.44.191 and 172.64.35.191, with 3 other addresses beyond those.

Mail Servers

Mail for php2shell.app is routed through three mail servers — route1.mx.cloudflare.net, route2.mx.cloudflare.net and route3.mx.cloudflare.net.

php2shell.app shares at least some of its mail servers with other domains — for example sondages-remuneres.net.net, breakingmozart.de, frontierequity.my.id and two more.

Host names resolving to 6 IP numbers:

route1.mx.cloudflare.net carries IP addresses 162.159.205.11, 162.159.205.12 and 162.159.205.13, with 3 other addresses beyond those.

route2.mx.cloudflare.net carries IP addresses 162.159.205.17, 162.159.205.18 and 162.159.205.19, with 3 other addresses beyond those.

route3.mx.cloudflare.net carries IP addresses 162.159.205.23, 162.159.205.24 and 162.159.205.25, with 3 other addresses beyond those.

php2shell.app - robtex.com

php2shell.app

app

Same first word

Previous names

Next names

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

Mail Servers

`php2shell.app`

`app`