php2shell.cc - robtex.com

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

php2shell.cc

DNSSEC⚠️ Not signed
A2606:4700:3030::6815:515e🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3033::ac43:9ef2🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.81.94Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.158.242🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSdonald.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3b9e🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdonald.ns.cloudflare.com
A2803:f800:50::6ca2:c19e🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRdonald.ns.cloudflare.com
A2a06:98c1:50::ac40:219e🇺🇸 Cloudflare2a06:98c1:50::/45
PTRdonald.ns.cloudflare.com
A108.162.193.158🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdonald.ns.cloudflare.com
A172.64.33.158🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdonald.ns.cloudflare.com
A173.245.59.158🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdonald.ns.cloudflare.com
NSmariah.ns.cloudflare.com
A2606:4700:50::a29f:26c8🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmariah.ns.cloudflare.com
A2803:f800:50::6ca2:c2c8🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRmariah.ns.cloudflare.com
A2a06:98c1:50::ac40:22c8🇺🇸 Cloudflare2a06:98c1:50::/45
PTRmariah.ns.cloudflare.com
A108.162.194.200🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmariah.ns.cloudflare.com
A162.159.38.200Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmariah.ns.cloudflare.com
A172.64.34.200🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmariah.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.81.94, 172.67.158.242
IPv6 hints2606:4700:3030::6815:515e, 2606:4700:3033::ac43:9ef2
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=110, name=cloudflare-ech.com
SOAdonald.ns.cloudflare.comdns@cloudflare.com serial=2418122802

cc

DNSSEC🔒 Signed (DS record present)
NSac1.nstld.com ⭐
NSac2.nstld.com
NSac3.nstld.com
NSac4.nstld.com
SOAac1.nstld.cominfo@verisign-grs.com serial=1794136840
⚠️ On DNS blocklist: spam-tlds

Same first word

Previous names

Next names

DNS History

10 records (6 active, 4 former)

NSdonald.ns.cloudflare.commariah.ns.cloudflare.comA104.21.81.94172.67.158.2422606:4700:3030::6815:515e2606:4700:3033::ac43:9ef2188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSdonald.ns.cloudflare.com2026-10-22 → 2026-11-08 · 2 obs
● 2026-10-22 10:19:42
● 2026-11-08 11:59:02
●NSmariah.ns.cloudflare.com2026-10-22 → 2026-11-08 · 2 obs
● 2026-10-22 10:19:42
● 2026-11-08 11:59:02
●A104.21.81.942026-10-22 → 2026-11-08 · 3 obs
○ 2026-10-22 10:19:42
● 2026-10-22 12:36:00
● 2026-11-08 11:59:02
●A172.67.158.2422026-10-22 → 2026-11-08 · 3 obs
○ 2026-10-22 10:19:42
● 2026-10-22 12:36:00
● 2026-11-08 11:59:02
○A188.114.96.02026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 10:19:42
○ 2026-10-22 12:36:00
○ 2026-11-08 11:59:02
○A188.114.97.02026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 10:19:42
○ 2026-10-22 12:36:00
○ 2026-11-08 11:59:02
●A2606:4700:3030::6815:515e2026-10-22 → 2026-11-08 · 3 obs
○ 2026-10-22 10:19:42
● 2026-10-22 12:36:00
● 2026-11-08 11:59:02
●A2606:4700:3033::ac43:9ef22026-10-22 → 2026-11-08 · 3 obs
○ 2026-10-22 10:19:42
● 2026-10-22 12:36:00
● 2026-11-08 11:59:02
○A2a06:98c1:3120::2026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 10:19:42
○ 2026-10-22 12:36:00
○ 2026-11-08 11:59:02
○A2a06:98c1:3121::2026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 10:19:42
○ 2026-10-22 12:36:00
○ 2026-11-08 11:59:02

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
ccac1.nstld.com, ac2.nstld.com, ac3.nstld.com, ac4.nstld.com-
php2shell.ccmariah.ns.cloudflare.com, donald.ns.cloudflare.com-

✅ Authoritative Response

Server:108.162.194.200

NS records: mariah.ns.cloudflare.com, donald.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

Root DNSKEY fetch failed: Error: connect EADDRNOTAVAIL 198.41.0.4:53 - Local (0.0.0.0:0)

⏱️ Timing

Total: 622ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.81.94, 172.67.158.242
AAAA22606:4700:3033::ac43:9ef2, 2606:4700:3030::6815:515e
NS2donald.ns.cloudflare.com, mariah.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1donald.ns.cloudflare.com dns.cloudflare.

Analysis

IP Addresses

php2shell.cc resolves to four IP addresses: 104.21.81.94, 172.67.158.242, 2606:4700:3030::6815:515e and 2606:4700:3033::ac43:9ef2.

Additional host names — 948jj.com, quickbet1.uk, eaccountablemarketingstudio.info and two others — share IP numbers with php2shell.cc.

Name Servers

Two name servers handle the delegation for php2shell.cc: donald.ns.cloudflare.com and mariah.ns.cloudflare.com.

php2shell.cc shares its name server setup with other domains, including jake-da1.workers.dev, spicyerotiek.nl, freemapp.com and two others.

php2shell.cc partially shares its NS delegation with several other domains, including odakbilgi.org, wangshan-aqi.workers.dev, continly.info and two others.

These name servers often co-occur with the name servers deb.ns.cloudflare.com.

Host names with 6 IP numbers:

donald.ns.cloudflare.com resolves to 108.162.193.158, 172.64.33.158 and 173.245.59.158 among others, with 3 other IP addresses in total.

mariah.ns.cloudflare.com resolves to 108.162.194.200, 162.159.38.200 and 172.64.34.200 among others, with 3 other IP addresses in total.