php2shell.org - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

php2shell.org

DNSSEC⚠️ Not signed
A2606:4700:3036::6815:429fπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3036::ac43:cd6cπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.66.159Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.205.108πŸ‡ΊπŸ‡Έ Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSjasmine.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3aaaπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjasmine.ns.cloudflare.com
A2803:f800:50::6ca2:c0aaπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRjasmine.ns.cloudflare.com
A2a06:98c1:50::ac40:20aaπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRjasmine.ns.cloudflare.com
A108.162.192.170πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjasmine.ns.cloudflare.com
A172.64.32.170πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjasmine.ns.cloudflare.com
A173.245.58.170πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjasmine.ns.cloudflare.com
NSkevin.ns.cloudflare.com
A2606:4700:58::adf5:3bbfπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkevin.ns.cloudflare.com
A2803:f800:50::6ca2:c1bfπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRkevin.ns.cloudflare.com
A2a06:98c1:50::ac40:21bfπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRkevin.ns.cloudflare.com
A108.162.193.191πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkevin.ns.cloudflare.com
A172.64.33.191πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkevin.ns.cloudflare.com
A173.245.59.191πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkevin.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.66.159, 172.67.205.108
IPv6 hints2606:4700:3036::6815:429f, 2606:4700:3036::ac43:cd6c
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=110, name=cloudflare-ech.com
SOAjasmine.ns.cloudflare.comdns@cloudflare.com serial=2418078539

org

DNSSECπŸ”’ Signed (DS record present)
NSv0n0.pir-ns.org ⭐
NSa2.org.afilias-nst.info ⚠️ Not in parent delegation
NSb2.org.afilias-nst.org
NSd0.org.afilias-nst.org
NSv0n1.pir-ns.org
NSv0n2.pir-ns.org
SOAv0n0.pir-ns.orghostmaster@donuts.email serial=1794136258

Same first word

Previous names

Next names

DNS History

10 records (6 active, 4 former)

NSjasmine.ns.cloudflare.comkevin.ns.cloudflare.comA104.21.66.159172.67.205.1082606:4700:3036::6815:429f2606:4700:3036::ac43:cd6c188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSjasmine.ns.cloudflare.com2026-10-21 β†’ 2026-11-08 Β· 2 obs
● 2026-10-21 16:18:36
● 2026-11-08 11:51:34
●NSkevin.ns.cloudflare.com2026-10-21 β†’ 2026-11-08 Β· 2 obs
● 2026-10-21 16:18:36
● 2026-11-08 11:51:34
●A104.21.66.1592026-10-26 β†’ 2026-11-08 Β· 3 obs
β—‹ 2026-10-21 16:18:36
● 2026-10-26 17:15:38
● 2026-11-08 11:51:34
●A172.67.205.1082026-10-26 β†’ 2026-11-08 Β· 3 obs
β—‹ 2026-10-21 16:18:36
● 2026-10-26 17:15:38
● 2026-11-08 11:51:34
β—‹A188.114.96.02026-10-21 β†’ 2026-10-21 Β· 3 obs
● 2026-10-21 16:18:36
β—‹ 2026-10-26 17:15:38
β—‹ 2026-11-08 11:51:34
β—‹A188.114.97.02026-10-21 β†’ 2026-10-21 Β· 3 obs
● 2026-10-21 16:18:36
β—‹ 2026-10-26 17:15:38
β—‹ 2026-11-08 11:51:34
●A2606:4700:3036::6815:429f2026-10-26 β†’ 2026-11-08 Β· 3 obs
β—‹ 2026-10-21 16:18:36
● 2026-10-26 17:15:38
● 2026-11-08 11:51:34
●A2606:4700:3036::ac43:cd6c2026-10-26 β†’ 2026-11-08 Β· 3 obs
β—‹ 2026-10-21 16:18:36
● 2026-10-26 17:15:38
● 2026-11-08 11:51:34
β—‹A2a06:98c1:3120::2026-10-21 β†’ 2026-10-21 Β· 3 obs
● 2026-10-21 16:18:36
β—‹ 2026-10-26 17:15:38
β—‹ 2026-11-08 11:51:34
β—‹A2a06:98c1:3121::2026-10-21 β†’ 2026-10-21 Β· 3 obs
● 2026-10-21 16:18:36
β—‹ 2026-10-26 17:15:38
β—‹ 2026-11-08 11:51:34

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
orgv0n0.pir-ns.org, v0n1.pir-ns.org, d0.org.afilias-nst.org, v0n2.pir-ns.org...-
php2shell.orgkevin.ns.cloudflare.com, jasmine.ns.cloudflare.com-

βœ… Authoritative Response

Server:172.64.32.170

NS records: kevin.ns.cloudflare.com, jasmine.ns.cloudflare.com

πŸ”’ DNSSEC Status

❌ Bogus (DNSSEC validation failed)

Validation error at org: Error: DNS query timeout: 199.19.56.1 for DNSKEY org

⏱️ Timing

Total: 4228ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.205.108, 104.21.66.159
AAAA22606:4700:3036::ac43:cd6c, 2606:4700:3036::6815:429f
NS2jasmine.ns.cloudflare.com, kevin.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1jasmine.ns.cloudflare.com dns.cloudflare

Analysis

IP Addresses

php2shell.org points to the four IP addresses 104.21.66.159, 172.67.205.108, 2606:4700:3036::6815:429f and 2606:4700:3036::ac43:cd6c.

Additional host names β€” epithalamysw.live, wolfe-exchange.info, novarium.com.ar and two others β€” share IP numbers with php2shell.org.

Name Servers

The NS records for php2shell.org delegate to jasmine.ns.cloudflare.com and kevin.ns.cloudflare.com.

php2shell.org shares its name server setup with other domains, including fact-fart-check.pages.dev, shrillrain7ds6.workers.dev, casinor9n.buzz and two others.

At least some of php2shell.org's name servers are shared with other domains, for example zephyrgrillbrentwood.com, chibulawezzy33.workers.dev, security-c85.workers.dev and two more.

These name servers are often deployed together with the name servers miles.ns.cloudflare.com, melody.ns.cloudflare.com, woz.ns.cloudflare.com and malavika.ns.cloudflare.com.

Host names with 6 IP numbers:

jasmine.ns.cloudflare.com maps to 108.162.192.170, 172.64.32.170, 173.245.58.170 and 3 additional IP addresses.

kevin.ns.cloudflare.com maps to 108.162.193.191, 172.64.33.191, 173.245.59.191 and 3 additional IP addresses.