php2shell.run - robtex.com

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

php2shell.run

DNSSEC⚠️ Not signed
A2606:4700:3031::ac43:c360🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3037::6815:342e🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.52.46Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.195.96🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSdee.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3a5d🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdee.ns.cloudflare.com
A2803:f800:50::6ca2:c05d🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRdee.ns.cloudflare.com
A2a06:98c1:50::ac40:205d🇺🇸 Cloudflare2a06:98c1:50::/45
PTRdee.ns.cloudflare.com
A108.162.192.93🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdee.ns.cloudflare.com
A172.64.32.93🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdee.ns.cloudflare.com
A173.245.58.93🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdee.ns.cloudflare.com
NSdoug.ns.cloudflare.com
A2606:4700:58::adf5:3b9f🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdoug.ns.cloudflare.com
A2803:f800:50::6ca2:c19f🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRdoug.ns.cloudflare.com
A2a06:98c1:50::ac40:219f🇺🇸 Cloudflare2a06:98c1:50::/45
PTRdoug.ns.cloudflare.com
A108.162.193.159🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdoug.ns.cloudflare.com
A172.64.33.159🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdoug.ns.cloudflare.com
A173.245.59.159🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdoug.ns.cloudflare.com
TXTgoogle-site-verification=seN0kVFb5UME3URAd6w9siblUbS_DMd5LQ9xqhCCYBI
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.52.46, 172.67.195.96
IPv6 hints2606:4700:3031::ac43:c360, 2606:4700:3037::6815:342e
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=110, name=cloudflare-ech.com
SOAdee.ns.cloudflare.comdns@cloudflare.com serial=2418165012

run

DNSSEC🔒 Signed (DS record present)
NSv0n0.nic.run ⭐
NSv0n1.nic.run
NSv0n2.nic.run
NSv0n3.nic.run
NSv2n0.nic.run
NSv2n1.nic.run
SOAv0n0.nic.runhostmaster@donuts.email serial=1794136014

Same first word

php2shell.wtf
php2shell.sh
php2shell.us
php2shell.co.uk
php2shell.jp
php2shell.io
php2shell.is
php2shell.click
php2shell.app
php2shell.pl
php2shell.pages.dev
php2shell.fun
php2shell.es
php2shell.ai
php2shell.quest
php2shell.workers.dev
php2shell.gr
php2shell.support
php2shell.fr
php2shell.ro
php2shell.tech
php2shell.run
php2shell.site
php2shell.xyz
php2shell.co.kr
php2shell.fyi
php2shell.dev
php2shell.top
php2shell.live
php2shell.com.tr
php2shell.cn
php2shell.at
php2shell.ru
php2shell.me
php2shell.link
php2shell.help
php2shell.com
php2shell.cc
php2shell.in
php2shell.ph
php2shell.net
php2shell.si
php2shell.kr
php2shell.org
php2shell.tr
php2shell.de
php2shell.info
php2shell.eu
php2shell.ch
php2shell.hu
php2shell.pro
php2shell.uk
php2shell.tw
php2shell.dk

Previous names

phoenixwebra.run
phok.run
phonefarm.run
phones.run
phopen.run
phosphoky.run
phosphor.run
photo.run
photoai.run
photobrunei.run
photocraft.run
photographer.run
photography.run
photolab.run
photos.run
phoutha77.run
phox.run
php.run

Next names

php777.run
phpagcor.run
phpnull.run
phpvip.run
phsaya.run
phsayo.run
phsky.run
phspin.run
phsugar.run
phtara.run
phtaya.run
phu.run
phuket.run
phuketborder.run
phuketvisa.run
phw.run
phwin.run
phx.run
phybox.run
phyl.run

DNS History

10 records (6 active, 4 former)

NSdee.ns.cloudflare.comdoug.ns.cloudflare.comA104.21.52.46172.67.195.962606:4700:3031::ac43:c3602606:4700:3037::6815:342e188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSdee.ns.cloudflare.com2026-10-22 → 2026-11-08 · 2 obs
● 2026-10-22 20:38:02
● 2026-11-08 11:59:36
●NSdoug.ns.cloudflare.com2026-10-22 → 2026-11-08 · 2 obs
● 2026-10-22 20:38:02
● 2026-11-08 11:59:36
●A104.21.52.462026-10-26 → 2026-11-08 · 3 obs
○ 2026-10-22 20:38:02
● 2026-10-26 14:29:00
● 2026-11-08 11:59:36
●A172.67.195.962026-10-26 → 2026-11-08 · 3 obs
○ 2026-10-22 20:38:02
● 2026-10-26 14:29:00
● 2026-11-08 11:59:36
○A188.114.96.02026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 20:38:02
○ 2026-10-26 14:29:00
○ 2026-11-08 11:59:36
○A188.114.97.02026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 20:38:02
○ 2026-10-26 14:29:00
○ 2026-11-08 11:59:36
●A2606:4700:3031::ac43:c3602026-10-26 → 2026-11-08 · 3 obs
○ 2026-10-22 20:38:02
● 2026-10-26 14:29:00
● 2026-11-08 11:59:36
●A2606:4700:3037::6815:342e2026-10-26 → 2026-11-08 · 3 obs
○ 2026-10-22 20:38:02
● 2026-10-26 14:29:00
● 2026-11-08 11:59:36
○A2a06:98c1:3120::2026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 20:38:02
○ 2026-10-26 14:29:00
○ 2026-11-08 11:59:36
○A2a06:98c1:3121::2026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 20:38:02
○ 2026-10-26 14:29:00
○ 2026-11-08 11:59:36

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
runv0n0.nic.run, v0n1.nic.run, v0n2.nic.run, v0n3.nic.run...12 records
php2shell.rundee.ns.cloudflare.com, doug.ns.cloudflare.com-

✅ Authoritative Response

Server:173.245.58.93

NS records: dee.ns.cloudflare.com, doug.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for php2shell.run (unsigned zone)

⏱️ Timing

Total: 944ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.195.96, 104.21.52.46
AAAA22606:4700:3037::6815:342e, 2606:4700:3031::ac43:c360
NS2dee.ns.cloudflare.com, doug.ns.cloudflare.com
TXT1google-site-verification=seN0kVFb5UME3UR
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1dee.ns.cloudflare.com dns.cloudflare.com

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.run, v0n1.nic.run, v0n2.nic.run...)

Analysis

IP Addresses

php2shell.run has four IP addresses: 104.21.52.46, 172.67.195.96, 2606:4700:3031::ac43:c360 and 2606:4700:3037::6815:342e.

Among the host names that share IP numbers with php2shell.run are aiscout.top, priyankapal.in, britishveterinaryemployeeowned.co.uk and two others.

Name Servers

php2shell.run uses two name servers for its delegation: dee.ns.cloudflare.com and doug.ns.cloudflare.com.

php2shell.run has the same name server delegation as a number of other domains, such as metro-5wv.pages.dev, vikramsingh7104.workers.dev, casinoipanema.com and two more.

php2shell.run has at least partial name server overlap with other domains, such as dongdonglianthony.workers.dev, sanuuysahil.workers.dev, 4c2dsn5t77.workers.dev and two others.

It is common to find these name servers paired with the name servers chan.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

Hostname dee.ns.cloudflare.com directs to 108.162.192.93, 172.64.32.93 and 173.245.58.93 along with 3 other IP addresses.

Hostname doug.ns.cloudflare.com directs to 108.162.193.159, 172.64.33.159 and 173.245.59.159 along with 3 other IP addresses.