php2shell.quest - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

php2shell.quest

quest

DNSSECπŸ”’ Signed (DS record present)
NSns0.centralnic.net ⭐
NSa-cnic.nic.quest
NSb-cnic.nic.quest
NSc-cnic.nic.quest
NSd-cnic.nic.quest
SOAns0.centralnic.nethostmaster@centralnic.net serial=1794139094
⚠️ On DNS blocklist: spam-tlds

Same first word

Previous names

Next names

DNS History

4 records (4 active, 0 former)

NSns29.domaincontrol.comns30.domaincontrol.comA15.197.148.333.33.130.190
●NSns29.domaincontrol.com2026-10-25 β†’ 2026-11-08 Β· 2 obs
● 2026-10-25 19:03:50
● 2026-11-08 11:59:32
●NSns30.domaincontrol.com2026-10-25 β†’ 2026-11-08 Β· 2 obs
● 2026-10-25 19:03:50
● 2026-11-08 11:59:32
●A15.197.148.332026-10-25 β†’ 2026-11-08 Β· 2 obs
● 2026-10-25 19:03:50
● 2026-11-08 11:59:32
●A3.33.130.1902026-10-25 β†’ 2026-11-08 Β· 2 obs
● 2026-10-25 19:03:50
● 2026-11-08 11:59:32

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
questa-cnic.nic.quest, b-cnic.nic.quest, c-cnic.nic.quest, d-cnic.nic.quest8 records
php2shell.questns30.domaincontrol.com, ns29.domaincontrol.com-

βœ… Authoritative Response

Server:97.74.104.15

NS records: ns30.domaincontrol.com, ns29.domaincontrol.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

Root DNSKEY fetch failed: Error: connect EADDRNOTAVAIL 198.41.0.4:53 - Local (0.0.0.0:0)

⏱️ Timing

Total: 1057ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A23.33.130.190, 15.197.148.33
NS2ns29.domaincontrol.com, ns30.domaincontrol.com
SOA1ns29.domaincontrol.com dns.jomax.net

πŸ“Œ Glue Records Collected

Total: 8

In-bailiwick: 8 (a-cnic.nic.quest, a-cnic.nic.quest, b-cnic.nic.quest...)

Analysis

IP Addresses

php2shell.quest directs to two IP numbers, 3.33.130.190 and 15.197.148.33

kahaniwood.com, breathingmatters.xyz, canadiandraperyhardware.com and two other host names share IP numbers with php2shell.quest.

Name Servers

php2shell.quest has two authoritative name servers β€” ns29.domaincontrol.com and ns30.domaincontrol.com.

php2shell.quest uses the same name servers as several other domains β€” among them preventivecaremd.com, kuyiessentials.store, wfmhoa.com and two more.

Both ns29.domaincontrol.com and ns30.domaincontrol.com have two IP addresses each. ns29.domaincontrol.com resolves to 97.74.104.15 and 2603:5:2181::f; ns30.domaincontrol.com resolves to 173.201.72.15 and 2603:5:2281::f.