php2shell.help - robtex.com

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

php2shell.help

DNSSEC⚠️ Not signed
A2606:4700:3031::ac43:9e6e🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3036::6815:425f🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.66.95Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.158.110🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSlady.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3a7f🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRlady.ns.cloudflare.com
A2803:f800:50::6ca2:c07f🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRlady.ns.cloudflare.com
A2a06:98c1:50::ac40:207f🇺🇸 Cloudflare2a06:98c1:50::/45
PTRlady.ns.cloudflare.com
A108.162.192.127🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRlady.ns.cloudflare.com
A172.64.32.127🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRlady.ns.cloudflare.com
A173.245.58.127🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRlady.ns.cloudflare.com
NSvicky.ns.cloudflare.com
A2606:4700:58::a29f:2c45🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRvicky.ns.cloudflare.com
A2803:f800:50::6ca2:c345🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRvicky.ns.cloudflare.com
A2a06:98c1:50::ac40:2345🇺🇸 Cloudflare2a06:98c1:50::/45
PTRvicky.ns.cloudflare.com
A108.162.195.69🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRvicky.ns.cloudflare.com
A162.159.44.69Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRvicky.ns.cloudflare.com
A172.64.35.69🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRvicky.ns.cloudflare.com
MXroute2.mx.cloudflare.net ⭐
A2606:4700:f5::e🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::f🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::10🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.17Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.18Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.19Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
MXroute1.mx.cloudflare.net(73)
A2606:4700:f5::b🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::c🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::d🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.11Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.12Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.13Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
MXroute3.mx.cloudflare.net(93)
A2606:4700:f5::11🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::12🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::13🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.23Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.24Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.25Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
TXTgoogle-site-verification=k7nDNDhOFFDk3UsFDjRsQthMmHYBIYwiD3f0cV4aGl0
TXTv=spf1 -all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.66.95, 172.67.158.110
IPv6 hints2606:4700:3031::ac43:9e6e, 2606:4700:3036::6815:425f
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=110, name=cloudflare-ech.com
SOAlady.ns.cloudflare.comdns@cloudflare.com serial=2419225177

help

DNSSEC🔒 Signed (DS record present)
NSns0.centralnic.net ⭐
NSa.nic.help
NSb.nic.help
NSc.nic.help
NSd.nic.help
SOAns0.centralnic.nethostmaster@centralnic.net serial=1794135620
⚠️ On DNS blocklist: spam-tlds

Same first word

php2shell.us
php2shell.co.uk
php2shell.jp
php2shell.io
php2shell.is
php2shell.click
php2shell.app
php2shell.pl
php2shell.pages.dev
php2shell.fun
php2shell.es
php2shell.ai
php2shell.quest
php2shell.workers.dev
php2shell.gr
php2shell.support
php2shell.fr
php2shell.ro
php2shell.tech
php2shell.run
php2shell.site
php2shell.xyz
php2shell.co.kr
php2shell.fyi
php2shell.dev
php2shell.top
php2shell.live
php2shell.com.tr
php2shell.cn
php2shell.at
php2shell.ru
php2shell.me
php2shell.link
php2shell.help
php2shell.com
php2shell.cc
php2shell.in
php2shell.ph
php2shell.net
php2shell.si
php2shell.kr
php2shell.org
php2shell.tr
php2shell.de
php2shell.info
php2shell.eu
php2shell.ch
php2shell.hu
php2shell.pro
php2shell.uk
php2shell.tw
php2shell.dk
php2shell.wtf
php2shell.sh

Previous names

photos-assitancelcloud.help
photos-idicloud.help
photos-it.help
photos-mysupporticloud.help
photos-sharingappleid.help
photosapp-helpid.help
photosappleid.help
photoshare.help
photoshoot.help
photospage.help
photostrictive.help
photostrictivex.help
photostudio.help
photosync.help
photowelo.help
photto-sttudio.help
photto-studio.help
php.help
php288.help

Next names

php797.help
php877.help
phpark43.help
phpfmo.help
phpgames47.help
phph1.help
phph8.help
phph9.help
phpoststore.help
phpplay71.help
phpsec.help
phpvip.help
phqivlze.help
phqknp.help
phr903.help
phraseguard.help
phraseyneedy.help
phrasingauthorscribechapters.help
phrasingbioauthorbook.help

DNS History

13 records (9 active, 4 former)

NSlady.ns.cloudflare.comvicky.ns.cloudflare.comMXroute1.mx.cloudflare.netroute2.mx.cloudflare.netroute3.mx.cloudflare.netA104.21.66.95172.67.158.1102606:4700:3031::ac43:9e6e2606:4700:3036::6815:425f188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSlady.ns.cloudflare.com2026-10-22 → 2026-11-08 · 2 obs
● 2026-10-22 05:33:36
● 2026-11-08 11:58:46
●NSvicky.ns.cloudflare.com2026-10-22 → 2026-11-08 · 2 obs
● 2026-10-22 05:33:36
● 2026-11-08 11:58:46
●MXroute1.mx.cloudflare.net2026-10-22 → 2026-11-08 · 2 obs
● 2026-10-22 05:33:36
● 2026-11-08 11:58:46
●MXroute2.mx.cloudflare.net2026-10-22 → 2026-11-08 · 2 obs
● 2026-10-22 05:33:36
● 2026-11-08 11:58:46
●MXroute3.mx.cloudflare.net2026-10-22 → 2026-11-08 · 2 obs
● 2026-10-22 05:33:36
● 2026-11-08 11:58:46
●A104.21.66.952026-10-25 → 2026-11-08 · 5 obs
○ 2026-10-22 05:33:36
● 2026-10-25 23:09:56
○ 2026-11-05 13:51:20
● 2026-11-07 12:00:06
● 2026-11-08 11:58:46
●A172.67.158.1102026-10-25 → 2026-11-08 · 5 obs
○ 2026-10-22 05:33:36
● 2026-10-25 23:09:56
○ 2026-11-05 13:51:20
● 2026-11-07 12:00:06
● 2026-11-08 11:58:46
○A188.114.96.02026-10-22 → 2026-11-05 · 5 obs
● 2026-10-22 05:33:36
○ 2026-10-25 23:09:56
● 2026-11-05 13:51:20
○ 2026-11-07 12:00:06
○ 2026-11-08 11:58:46
○A188.114.97.02026-10-22 → 2026-11-05 · 5 obs
● 2026-10-22 05:33:36
○ 2026-10-25 23:09:56
● 2026-11-05 13:51:20
○ 2026-11-07 12:00:06
○ 2026-11-08 11:58:46
●A2606:4700:3031::ac43:9e6e2026-10-25 → 2026-11-08 · 5 obs
○ 2026-10-22 05:33:36
● 2026-10-25 23:09:56
○ 2026-11-05 13:51:20
● 2026-11-07 12:00:06
● 2026-11-08 11:58:46
●A2606:4700:3036::6815:425f2026-10-25 → 2026-11-08 · 5 obs
○ 2026-10-22 05:33:36
● 2026-10-25 23:09:56
○ 2026-11-05 13:51:20
● 2026-11-07 12:00:06
● 2026-11-08 11:58:46
○A2a06:98c1:3120::2026-10-22 → 2026-11-05 · 5 obs
● 2026-10-22 05:33:36
○ 2026-10-25 23:09:56
● 2026-11-05 13:51:20
○ 2026-11-07 12:00:06
○ 2026-11-08 11:58:46
○A2a06:98c1:3121::2026-10-22 → 2026-11-05 · 5 obs
● 2026-10-22 05:33:36
○ 2026-10-25 23:09:56
● 2026-11-05 13:51:20
○ 2026-11-07 12:00:06
○ 2026-11-08 11:58:46

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
helpc.nic.help, a.nic.help, b.nic.help, d.nic.help8 records
php2shell.helplady.ns.cloudflare.com, vicky.ns.cloudflare.com-

✅ Authoritative Response

Server:172.64.32.127

NS records: lady.ns.cloudflare.com, vicky.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for php2shell.help (unsigned zone)

⏱️ Timing

Total: 1037ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.66.95, 172.67.158.110
AAAA22606:4700:3036::6815:425f, 2606:4700:3031::ac43:9e6e
NS2lady.ns.cloudflare.com, vicky.ns.cloudflare.com
MX3route2.mx.cloudflare.net (pri: 40), route1.mx.cloudflare.net (pri: 73)...
TXT2google-site-verification=k7nDNDhOFFDk3Us, v=spf1 -all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1lady.ns.cloudflare.com dns.cloudflare.co

📌 Glue Records Collected

Total: 8

In-bailiwick: 8 (a.nic.help, b.nic.help, c.nic.help...)

Analysis

IP Addresses

php2shell.help resolves to four IP addresses: 104.21.66.95, 172.67.158.110, 2606:4700:3031::ac43:9e6e and 2606:4700:3036::6815:425f.

Two other host names, along with auvernet.com, bio-energetics.nl and mail.mea-door.ru, also share IP numbers with php2shell.help.

Name Servers

The NS records for php2shell.help delegate to lady.ns.cloudflare.com and vicky.ns.cloudflare.com.

php2shell.help shares its NS records with other domains, for example quintyn.ca, royaltonrealty.ca, gregory-petipre.workers.dev and two others.

php2shell.help has at least partial name server overlap with other domains, such as bulan77jedd.top, papier-preview-pr-49.pages.dev, bitcoinkursdollar.se and two others.

The name servers norm.ns.cloudflare.com, diana.ns.cloudflare.com, norman.ns.cloudflare.com and two others are commonly seen in use alongside these name servers.

DNS names with 6 IP addresses:

lady.ns.cloudflare.com maps to 108.162.192.127, 172.64.32.127, 173.245.58.127 and 3 additional IP addresses.

vicky.ns.cloudflare.com maps to 108.162.195.69, 162.159.44.69, 172.64.35.69 and 3 additional IP addresses.

Mail Servers

php2shell.help has three mail servers: route1.mx.cloudflare.net, route2.mx.cloudflare.net and route3.mx.cloudflare.net.

There is at least a partial MX overlap between php2shell.help and other domains, including emerif.com, mapass.click, studentsfreedom.com and two others.

DNS names with 6 IP addresses:

route1.mx.cloudflare.net maps to 162.159.205.11, 162.159.205.12, 162.159.205.13 and 3 additional IP addresses.

route2.mx.cloudflare.net maps to 162.159.205.17, 162.159.205.18, 162.159.205.19 and 3 additional IP addresses.

route3.mx.cloudflare.net maps to 162.159.205.23, 162.159.205.24, 162.159.205.25 and 3 additional IP addresses.