php2shell-fix.com - robtex.com

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

php2shell-fix.com

DNSSEC⚠️ Not signed
A2606:4700:3032::6815:3eee🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3032::ac43:a8b9🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.62.238Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.168.185🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSmarek.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3bca🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmarek.ns.cloudflare.com
A2803:f800:50::6ca2:c1ca🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRmarek.ns.cloudflare.com
A2a06:98c1:50::ac40:21ca🇺🇸 Cloudflare2a06:98c1:50::/45
PTRmarek.ns.cloudflare.com
A108.162.193.202🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmarek.ns.cloudflare.com
A172.64.33.202🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmarek.ns.cloudflare.com
A173.245.59.202🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmarek.ns.cloudflare.com
NSsandy.ns.cloudflare.com
A2606:4700:50::adf5:3adb🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsandy.ns.cloudflare.com
A2803:f800:50::6ca2:c0db🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRsandy.ns.cloudflare.com
A2a06:98c1:50::ac40:20db🇺🇸 Cloudflare2a06:98c1:50::/45
PTRsandy.ns.cloudflare.com
A108.162.192.219🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsandy.ns.cloudflare.com
A172.64.32.219🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsandy.ns.cloudflare.com
A173.245.58.219🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsandy.ns.cloudflare.com
MXroute3.mx.cloudflare.net ⭐
A2606:4700:f5::11🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::12🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::13🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.23Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.24Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.25Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
MXroute1.mx.cloudflare.net(64)
A2606:4700:f5::b🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::c🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::d🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.11Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.12Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.13Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
MXroute2.mx.cloudflare.net(84)
A2606:4700:f5::e🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::f🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::10🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.17Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.18Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.19Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
TXTgoogle-site-verification=EnOxtotxWLZGCoAmtNN3Y94DsN5VEZS_tfwCuM1goMU
TXTv=spf1 include:_spf.mx.cloudflare.net ~all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.62.238, 172.67.168.185
IPv6 hints2606:4700:3032::6815:3eee, 2606:4700:3032::ac43:a8b9
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=110, name=cloudflare-ech.com
SOAmarek.ns.cloudflare.comdns@cloudflare.com serial=2418204006

com

DNSSEC🔒 Signed (DS record present)
NSa.gtld-servers.net ⭐
NSb.gtld-servers.net
NSc.gtld-servers.net
NSd.gtld-servers.net
NSe.gtld-servers.net
NSf.gtld-servers.net
NSg.gtld-servers.net
NSh.gtld-servers.net
NSi.gtld-servers.net
NSj.gtld-servers.net
NSk.gtld-servers.net
NSl.gtld-servers.net
NSm.gtld-servers.net
SOAa.gtld-servers.netnstld@verisign-grs.com serial=1794139836

Same first word

php2shell-fix.it
php2shell-fix.pages.dev
php2shell-fix.com

Previous names

php2java.com
php2js.com
php2json.com
php2jsp.com
php2list.com
php2me.com
php2modern.com
php2next.com
php2node.com
php2p.com
php2py.com
php2python.com
php2ranjan.com
php2rust.com
php2s.com
php2shell-checker.com
php2shell.com

Next names

php2shell-tracker.com
php2shellaudit.com
php2shellcheck.com
php2shellchecker.com
php2shellexploit.com
php2shellfix.com
php2shellscan.com
php2shellscanner.com
php2shield.com
php2sms.com
php2usdt.com
php2vnd.com
php2you.com
php3-3.com
php3.com
php30.com
php300.com
php3000.com
php3000store.com
php301.com

DNS History

9 records (9 active, 0 former)

NSmarek.ns.cloudflare.comsandy.ns.cloudflare.comMXroute1.mx.cloudflare.netroute2.mx.cloudflare.netroute3.mx.cloudflare.netA104.21.62.238172.67.168.1852606:4700:3032::6815:3eee2606:4700:3032::ac43:a8b9
●NSmarek.ns.cloudflare.com2026-10-23 → 2026-11-08 · 2 obs
● 2026-10-23 09:45:56
● 2026-11-08 12:49:10
●NSsandy.ns.cloudflare.com2026-10-23 → 2026-11-08 · 2 obs
● 2026-10-23 09:45:56
● 2026-11-08 12:49:10
●MXroute1.mx.cloudflare.net2026-10-23 → 2026-11-08 · 2 obs
● 2026-10-23 09:45:56
● 2026-11-08 12:49:10
●MXroute2.mx.cloudflare.net2026-10-23 → 2026-11-08 · 2 obs
● 2026-10-23 09:45:56
● 2026-11-08 12:49:10
●MXroute3.mx.cloudflare.net2026-10-23 → 2026-11-08 · 2 obs
● 2026-10-23 09:45:56
● 2026-11-08 12:49:10
●A104.21.62.2382026-10-23 → 2026-11-08 · 2 obs
● 2026-10-23 09:45:56
● 2026-11-08 12:49:10
●A172.67.168.1852026-10-23 → 2026-11-08 · 2 obs
● 2026-10-23 09:45:56
● 2026-11-08 12:49:10
●A2606:4700:3032::6815:3eee2026-10-23 → 2026-11-08 · 2 obs
● 2026-10-23 09:45:56
● 2026-11-08 12:49:10
●A2606:4700:3032::ac43:a8b92026-10-23 → 2026-11-08 · 2 obs
● 2026-10-23 09:45:56
● 2026-11-08 12:49:10

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
coma.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...-
php2shell-fix.commarek.ns.cloudflare.com, sandy.ns.cloudflare.com12 records

✅ Authoritative Response

Server:108.162.193.202

NS records: marek.ns.cloudflare.com, sandy.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for php2shell-fix.com (unsigned zone)

⏱️ Timing

Total: 209ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.62.238, 172.67.168.185
AAAA22606:4700:3032::ac43:a8b9, 2606:4700:3032::6815:3eee
NS2marek.ns.cloudflare.com, sandy.ns.cloudflare.com
MX3route3.mx.cloudflare.net (pri: 62), route1.mx.cloudflare.net (pri: 64)...
TXT2google-site-verification=EnOxtotxWLZGCoA, v=spf1 include:_spf.mx.cloudflare.net ~a
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1marek.ns.cloudflare.com dns.cloudflare.c

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (marek.ns.cloudflare.com, marek.ns.cloudflare.com, marek.ns.cloudflare.com...)

Analysis

IP Addresses

php2shell-fix.com directs to four IP numbers, which are 104.21.62.238, 172.67.168.185, 2606:4700:3032::6815:3eee and 2606:4700:3032::ac43:a8b9.

tellows.pl, lancetiso.com, millenarijove.cat plus two other host names have IP numbers in common with php2shell-fix.com.

Name Servers

php2shell-fix.com uses two name servers for its delegation: marek.ns.cloudflare.com and sandy.ns.cloudflare.com.

The name server configuration of php2shell-fix.com is shared with other domains, for instance riotgifts.pro, laced-thrush.workers.dev, freecp.biz and two others.

The name servers of php2shell-fix.com overlap at least partially with those of other domains — among them redmountainsolutionsgroup.com, incognito-casino.bet, vensoralinta.info and two more.

These name servers commonly appear alongside the name servers aliza.ns.cloudflare.com and dahlia.ns.cloudflare.com.

Hosts with 6 IP addresses each:

Hostname marek.ns.cloudflare.com directs to 108.162.193.202, 172.64.33.202 and 173.245.59.202 along with 3 other IP addresses.

Hostname sandy.ns.cloudflare.com directs to 108.162.192.219, 172.64.32.219 and 173.245.58.219 along with 3 other IP addresses.

Mail Servers

Mail for php2shell-fix.com is routed through three mail servers — route1.mx.cloudflare.net, route2.mx.cloudflare.net and route3.mx.cloudflare.net.

At least some of the mail servers used by php2shell-fix.com are shared with other domains: webbirdie.com, dailydoseofdutch.com, ctrlpanel.cc and two others among them.

Hosts with 6 IP addresses each:

Hostname route1.mx.cloudflare.net directs to 162.159.205.11, 162.159.205.12 and 162.159.205.13 along with 3 other IP addresses.

Hostname route2.mx.cloudflare.net directs to 162.159.205.17, 162.159.205.18 and 162.159.205.19 along with 3 other IP addresses.

Hostname route3.mx.cloudflare.net directs to 162.159.205.23, 162.159.205.24 and 162.159.205.25 along with 3 other IP addresses.