🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`php2shell.kr`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::6815:acb^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3033::ac43:bed6^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.10.203^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.190.214^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`irma.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3aa6^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`irma.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0a6^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`irma.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20a6^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`irma.ns.cloudflare.com`
		A	108.162.192.166^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`irma.ns.cloudflare.com`
		A	172.64.32.166^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`irma.ns.cloudflare.com`
		A	173.245.58.166^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`irma.ns.cloudflare.com`
NS	`titan.ns.cloudflare.com`
		A	2606:4700:58::a29f:2c5d^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`titan.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c35d^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`titan.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:235d^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`titan.ns.cloudflare.com`
		A	108.162.195.93^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`titan.ns.cloudflare.com`
		A	162.159.44.93^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`titan.ns.cloudflare.com`
		A	172.64.35.93^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`titan.ns.cloudflare.com`
MX	`route3.mx.cloudflare.net` ⭐
		A	2606:4700:f5::11^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	2606:4700:f5::12^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	2606:4700:f5::13^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	162.159.205.23^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	162.159.205.24^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	162.159.205.25^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
MX	`route1.mx.cloudflare.net`⁽¹⁴⁾
		A	2606:4700:f5::b^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	2606:4700:f5::c^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	2606:4700:f5::d^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	162.159.205.11^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	162.159.205.12^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	162.159.205.13^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
MX	`route2.mx.cloudflare.net`⁽²⁷⁾
		A	2606:4700:f5::e^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	2606:4700:f5::f^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	2606:4700:f5::10^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	162.159.205.17^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	162.159.205.18^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	162.159.205.19^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
TXT	`v=spf1 include:_spf.mx.cloudflare.net ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.10.203, 172.67.190.214
		IPv6 hints	2606:4700:3032::6815:acb, 2606:4700:3033::ac43:bed6
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=110, name=cloudflare-ech.com
SOA	`irma.ns.cloudflare.com`dns@cloudflare.com serial=2418202907

`kr`

	DNSSEC	🔒 Signed (DS record present)
	NS	`g.dns.kr` ⭐
	NS	`b.dns.kr`
	NS	`c.dns.kr`
	NS	`d.dns.kr`
	NS	`e.dns.kr`
	NS	`f.dns.kr`
	SOA	`g.dns.kr`domain-manager@nic.or.kr serial=2611080770

Same first word

Previous names

photoslife.kr

photosm.kr

photospot.kr

photospots.kr

photostation.kr

photostyle.kr

phototag.kr

phototalk.kr

photothink.kr

phototimeskorea.kr

phototv.kr

photour.kr

photovibe.kr

photowalk.kr

photowall.kr

photoya.kr

phouse.kr

phovi.kr

phovia.kr

php.kr

Next names

php79.kr

phpay.kr

phper.kr

phpinfo.kr

phpis.kr

phpoc.kr

phponchip.kr

phps.kr

phpstudy.kr

phpwork.kr

phrm.kr

phronesis.kr

phrozen.kr

phrozen3d.kr

phs-work.kr

phsh1995.kr

phsical-ai-systems.kr

phsisul.kr

phslab.kr

phsungan.kr

DNS History

13 records (9 active, 4 former)

●NSirma.ns.cloudflare.com2026-10-23 → 2026-11-08 · 2 obs

● 2026-10-23 05:49:42
● 2026-11-08 11:51:48

●NStitan.ns.cloudflare.com2026-10-23 → 2026-11-08 · 2 obs

● 2026-10-23 05:49:42
● 2026-11-08 11:51:48

●MXroute1.mx.cloudflare.net2026-10-23 → 2026-11-08 · 2 obs

● 2026-10-23 05:49:42
● 2026-11-08 11:51:48

●MXroute2.mx.cloudflare.net2026-10-23 → 2026-11-08 · 2 obs

● 2026-10-23 05:49:42
● 2026-11-08 11:51:48

●MXroute3.mx.cloudflare.net2026-10-23 → 2026-11-08 · 2 obs

● 2026-10-23 05:49:42
● 2026-11-08 11:51:48

●A104.21.10.2032026-10-23 → 2026-11-08 · 7 obs

○ 2026-10-23 05:49:42
● 2026-10-23 14:31:52
○ 2026-10-24 21:52:58
● 2026-10-26 17:10:34
○ 2026-11-06 23:50:06
● 2026-11-07 07:49:44
● 2026-11-08 11:51:48

●A172.67.190.2142026-10-23 → 2026-11-08 · 7 obs

○ 2026-10-23 05:49:42
● 2026-10-23 14:31:52
○ 2026-10-24 21:52:58
● 2026-10-26 17:10:34
○ 2026-11-06 23:50:06
● 2026-11-07 07:49:44
● 2026-11-08 11:51:48

○A188.114.96.02026-10-23 → 2026-11-06 · 7 obs

● 2026-10-23 05:49:42
○ 2026-10-23 14:31:52
● 2026-10-24 21:52:58
○ 2026-10-26 17:10:34
● 2026-11-06 23:50:06
○ 2026-11-07 07:49:44
○ 2026-11-08 11:51:48

○A188.114.97.02026-10-23 → 2026-11-06 · 7 obs

● 2026-10-23 05:49:42
○ 2026-10-23 14:31:52
● 2026-10-24 21:52:58
○ 2026-10-26 17:10:34
● 2026-11-06 23:50:06
○ 2026-11-07 07:49:44
○ 2026-11-08 11:51:48

●A2606:4700:3032::6815:acb2026-10-23 → 2026-11-08 · 7 obs

○ 2026-10-23 05:49:42
● 2026-10-23 14:31:52
○ 2026-10-24 21:52:58
● 2026-10-26 17:10:34
○ 2026-11-06 23:50:06
● 2026-11-07 07:49:44
● 2026-11-08 11:51:48

●A2606:4700:3033::ac43:bed62026-10-23 → 2026-11-08 · 7 obs

○ 2026-10-23 05:49:42
● 2026-10-23 14:31:52
○ 2026-10-24 21:52:58
● 2026-10-26 17:10:34
○ 2026-11-06 23:50:06
● 2026-11-07 07:49:44
● 2026-11-08 11:51:48

○A2a06:98c1:3120::2026-10-23 → 2026-11-06 · 7 obs

● 2026-10-23 05:49:42
○ 2026-10-23 14:31:52
● 2026-10-24 21:52:58
○ 2026-10-26 17:10:34
● 2026-11-06 23:50:06
○ 2026-11-07 07:49:44
○ 2026-11-08 11:51:48

○A2a06:98c1:3121::2026-10-23 → 2026-11-06 · 7 obs

● 2026-10-23 05:49:42
○ 2026-10-23 14:31:52
● 2026-10-24 21:52:58
○ 2026-10-26 17:10:34
● 2026-11-06 23:50:06
○ 2026-11-07 07:49:44
○ 2026-11-08 11:51:48

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
kr	b.dns.kr, c.dns.kr, d.dns.kr, e.dns.kr...	10 records
php2shell.kr	titan.ns.cloudflare.com, irma.ns.cloudflare.com	-

✅ Authoritative Response

Server:173.245.58.166

NS records: titan.ns.cloudflare.com, irma.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for php2shell.kr (unsigned zone)

⏱️ Timing

Total: 1232ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.190.214, 104.21.10.203`
AAAA	2	`2606:4700:3032::6815:acb, 2606:4700:3033::ac43:bed6`
NS	2	`irma.ns.cloudflare.com, titan.ns.cloudflare.com`
MX	3	`route1.mx.cloudflare.net (pri: 14), route2.mx.cloudflare.net (pri: 27)...`
TXT	1	`v=spf1 include:_spf.mx.cloudflare.net ~a`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`irma.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 10

In-bailiwick: 10 (b.dns.kr, c.dns.kr, d.dns.kr...)

Analysis

IP Addresses

php2shell.kr has four IP addresses: 104.21.10.203, 172.67.190.214, 2606:4700:3032::6815:acb and 2606:4700:3033::ac43:bed6.

Two other host names, along with oo809.com, sayapatriconnect.com and 85102479.com.cdn.cloudflare.net, also share IP numbers with php2shell.kr.

Name Servers

php2shell.kr uses two name servers for its delegation: irma.ns.cloudflare.com and titan.ns.cloudflare.com.

php2shell.kr shares its NS records with other domains, for example rubenahr.workers.dev, treysucks83.workers.dev, must-eliquid.com and two others.

php2shell.kr shares at least some of its name servers with other domains, including dyihdt.cyou, ujawanu.top, laurivalsilva.adm.br and two others.

These name servers are frequently paired with the name servers treasure.ns.cloudflare.com and keaton.ns.cloudflare.com.

DNS names with 6 IP addresses:

Hostname irma.ns.cloudflare.com directs to 108.162.192.166, 172.64.32.166 and 173.245.58.166 along with 3 other IP addresses.

Hostname titan.ns.cloudflare.com directs to 108.162.195.93, 162.159.44.93 and 172.64.35.93 along with 3 other IP addresses.

Mail Servers

php2shell.kr is handled by three mail servers: route1.mx.cloudflare.net, route2.mx.cloudflare.net and route3.mx.cloudflare.net.

There is at least a partial MX overlap between php2shell.kr and other domains, including jxqianyuan.shop, 100thomas.com, portoenoticias.com.br and two others.

DNS names with 6 IP addresses:

Hostname route1.mx.cloudflare.net directs to 162.159.205.11, 162.159.205.12 and 162.159.205.13 along with 3 other IP addresses.

Hostname route2.mx.cloudflare.net directs to 162.159.205.17, 162.159.205.18 and 162.159.205.19 along with 3 other IP addresses.

Hostname route3.mx.cloudflare.net directs to 162.159.205.23, 162.159.205.24 and 162.159.205.25 along with 3 other IP addresses.

php2shell.kr - robtex.com

php2shell.kr

kr

Same first word

Previous names

Next names

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

Mail Servers

`php2shell.kr`

`kr`