php2shell.live - robtex.com

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

php2shell.live

DNSSEC⚠️ Not signed
A2606:4700:3033::ac43:9651🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3035::6815:4ff5🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.79.245Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.150.81🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSbrenda.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3a4d🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbrenda.ns.cloudflare.com
A2803:f800:50::6ca2:c04d🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
A2a06:98c1:50::ac40:204d🇺🇸 Cloudflare2a06:98c1:50::/45
PTRbrenda.ns.cloudflare.com
A108.162.192.77🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbrenda.ns.cloudflare.com
A172.64.32.77🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbrenda.ns.cloudflare.com
A173.245.58.77🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbrenda.ns.cloudflare.com
NSganz.ns.cloudflare.com
A2606:4700:58::a29f:2c28🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRganz.ns.cloudflare.com
A2803:f800:50::6ca2:c328🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRganz.ns.cloudflare.com
A2a06:98c1:50::ac40:2328🇺🇸 Cloudflare2a06:98c1:50::/45
PTRganz.ns.cloudflare.com
A108.162.195.40🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A162.159.44.40Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A172.64.35.40🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
MXroute1.mx.cloudflare.net ⭐
A2606:4700:f5::b🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::c🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::d🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.11Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.12Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.13Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
MXroute2.mx.cloudflare.net(17)
A2606:4700:f5::e🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::f🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::10🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.17Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.18Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.19Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
MXroute3.mx.cloudflare.net(43)
A2606:4700:f5::11🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::12🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::13🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.23Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.24Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.25Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
TXTgoogle-site-verification=x4dYbrMKrN1qzcIaY9BKPv5iwljgdZz4f-Dl8XsWPXc
TXTv=spf1 include:_spf.mx.cloudflare.net ~all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.79.245, 172.67.150.81
IPv6 hints2606:4700:3033::ac43:9651, 2606:4700:3035::6815:4ff5
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=110, name=cloudflare-ech.com
SOAbrenda.ns.cloudflare.comdns@cloudflare.com serial=2418858206

live

DNSSEC🔒 Signed (DS record present)
NSv0n0.nic.live ⭐
NSv0n1.nic.live
NSv0n2.nic.live
NSv0n3.nic.live
NSv2n0.nic.live
NSv2n1.nic.live
SOAv0n0.nic.livehostmaster@donuts.email serial=1794138169

Same first word

php2shell.sh
php2shell.us
php2shell.co.uk
php2shell.jp
php2shell.io
php2shell.is
php2shell.click
php2shell.app
php2shell.pl
php2shell.pages.dev
php2shell.fun
php2shell.es
php2shell.ai
php2shell.quest
php2shell.workers.dev
php2shell.gr
php2shell.support
php2shell.fr
php2shell.ro
php2shell.tech
php2shell.run
php2shell.site
php2shell.xyz
php2shell.co.kr
php2shell.fyi
php2shell.dev
php2shell.top
php2shell.live
php2shell.com.tr
php2shell.cn
php2shell.at
php2shell.ru
php2shell.me
php2shell.link
php2shell.help
php2shell.com
php2shell.cc
php2shell.in
php2shell.ph
php2shell.net
php2shell.si
php2shell.kr
php2shell.org
php2shell.tr
php2shell.de
php2shell.info
php2shell.eu
php2shell.ch
php2shell.hu
php2shell.pro
php2shell.uk
php2shell.tw
php2shell.dk
php2shell.wtf

Previous names

phoungerh.live
phoungern.live
phoungvich.live
phoupalin.live
phoupharnaja.live
phouphounaja.live
phousdar.live
phouthavongs.live
phoutsava.live
phoutsavan.live
phoutsavanh.live
phoutsavnh.live
phoutthakhan.live
phoutthasone.live
phouufalaos.live
phouvieng.live
phovaprike.live
phoxis.live
phozobos.live
php-check.live

Next names

phparch.live
phpark0i16.live
phpark4l31.live
phpdigitian.live
phpdigitianmergentest.live
phpearl.live
phpentertainment.live
phpetrshbenefits.live
phpfamous.live
phpfest.live
phpgames.live
phpgames2i8.live
phpgames4l3.live
phph1.live
phph2.live
phph8.live
phph9.live
phpjobs.live
phpmyadmin.live
phpopular.live

DNS History

9 records (9 active, 0 former)

NSbrenda.ns.cloudflare.comganz.ns.cloudflare.comMXroute1.mx.cloudflare.netroute2.mx.cloudflare.netroute3.mx.cloudflare.netA104.21.79.245172.67.150.812606:4700:3033::ac43:96512606:4700:3035::6815:4ff5
●NSbrenda.ns.cloudflare.com2026-10-23 → 2026-11-08 · 2 obs
● 2026-10-23 17:44:50
● 2026-11-08 11:53:54
●NSganz.ns.cloudflare.com2026-10-23 → 2026-11-08 · 2 obs
● 2026-10-23 17:44:50
● 2026-11-08 11:53:54
●MXroute1.mx.cloudflare.net2026-10-23 → 2026-11-08 · 2 obs
● 2026-10-23 17:44:50
● 2026-11-08 11:53:54
●MXroute2.mx.cloudflare.net2026-10-23 → 2026-11-08 · 2 obs
● 2026-10-23 17:44:50
● 2026-11-08 11:53:54
●MXroute3.mx.cloudflare.net2026-10-23 → 2026-11-08 · 2 obs
● 2026-10-23 17:44:50
● 2026-11-08 11:53:54
●A104.21.79.2452026-10-23 → 2026-11-08 · 2 obs
● 2026-10-23 17:44:50
● 2026-11-08 11:53:54
●A172.67.150.812026-10-23 → 2026-11-08 · 2 obs
● 2026-10-23 17:44:50
● 2026-11-08 11:53:54
●A2606:4700:3033::ac43:96512026-10-23 → 2026-11-08 · 2 obs
● 2026-10-23 17:44:50
● 2026-11-08 11:53:54
●A2606:4700:3035::6815:4ff52026-10-23 → 2026-11-08 · 2 obs
● 2026-10-23 17:44:50
● 2026-11-08 11:53:54

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
livev0n0.nic.live, v2n0.nic.live, v0n1.nic.live, v0n3.nic.live...-
php2shell.livebrenda.ns.cloudflare.com, ganz.ns.cloudflare.com-

✅ Authoritative Response

Server:172.64.35.40

NS records: brenda.ns.cloudflare.com, ganz.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for php2shell.live (unsigned zone)

⏱️ Timing

Total: 656ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.150.81, 104.21.79.245
AAAA22606:4700:3033::ac43:9651, 2606:4700:3035::6815:4ff5
NS2brenda.ns.cloudflare.com, ganz.ns.cloudflare.com
MX3route2.mx.cloudflare.net (pri: 17), route1.mx.cloudflare.net (pri: 3)...
TXT2google-site-verification=x4dYbrMKrN1qzcI, v=spf1 include:_spf.mx.cloudflare.net ~a
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1brenda.ns.cloudflare.com dns.cloudflare.

Analysis

IP Addresses

php2shell.live directs to four IP numbers, which are 104.21.79.245, 172.67.150.81, 2606:4700:3033::ac43:9651 and 2606:4700:3035::6815:4ff5.

Two other host names, along with xa8qug.com, rellmont.xyz and zebrapartytoys.com, also share IP numbers with php2shell.live.

Name Servers

php2shell.live is served by two delegated name servers, brenda.ns.cloudflare.com and ganz.ns.cloudflare.com.

php2shell.live shares its NS records with other domains, for example fn9t4t8np7.workers.dev, dealrewarddirect.pro, nppcj.buzz and two others.

At least some of php2shell.live's name servers are shared with other domains, for example nino-nenov.workers.dev, fuyouli.net, raid-golfe-morbihan.org and two more.

The name servers jonah.ns.cloudflare.com, hans.ns.cloudflare.com, janet.ns.cloudflare.com and two others are commonly seen in use alongside these name servers.

DNS names with 6 IP addresses:

brenda.ns.cloudflare.com carries IP addresses 108.162.192.77, 172.64.32.77 and 173.245.58.77, with 3 other addresses beyond those.

ganz.ns.cloudflare.com carries IP addresses 108.162.195.40, 162.159.44.40 and 172.64.35.40, with 3 other addresses beyond those.

Mail Servers

The MX records for php2shell.live list three mail servers: route1.mx.cloudflare.net, route2.mx.cloudflare.net and route3.mx.cloudflare.net.

There is at least a partial MX overlap between php2shell.live and other domains, including drivepartsuk.com, ghayeth.tech, motokoai.us and two others.

DNS names with 6 IP addresses:

route1.mx.cloudflare.net carries IP addresses 162.159.205.11, 162.159.205.12 and 162.159.205.13, with 3 other addresses beyond those.

route2.mx.cloudflare.net carries IP addresses 162.159.205.17, 162.159.205.18 and 162.159.205.19, with 3 other addresses beyond those.

route3.mx.cloudflare.net carries IP addresses 162.159.205.23, 162.159.205.24 and 162.159.205.25, with 3 other addresses beyond those.