php2shell.site - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

php2shell.site

DNSSEC⚠️ Not signed
A2a01:4f8:13b:b4a:0:999:0:2187πŸ‡©πŸ‡ͺ Hetzner2a01:4f8::/32 HETZNER-IPv6-BLK
A195.201.12.217πŸ‡©πŸ‡ͺ Hetzner195.201.0.0/16 HETZNER-DC
NSdns1.registrar-servers.com ⭐
A2610:a1:1024::200πŸ‡ΊπŸ‡Έ MAINT-ID-120082610:a1:1024::/48 Neustar
PTRdns1.namecheaphosting.com
PTRdns1.registrar-servers.com
A156.154.132.200πŸ‡ΊπŸ‡Έ MAINT-ID-12008156.154.132.0/24 Neustar
PTRdns1.namecheaphosting.com
PTRdns1.registrar-servers.com
NSdns2.registrar-servers.com
A2610:a1:1025::200πŸ‡ΊπŸ‡Έ MAINT-ID-120082610:a1:1025::/48 Neustar
PTRdns2.namecheaphosting.com
PTRdns2.registrar-servers.com
A156.154.133.200πŸ‡ΊπŸ‡Έ MAINT-ID-12008156.154.133.0/24 Neustar
PTRdns2.namecheaphosting.com
PTRdns2.registrar-servers.com
MXeforward1.registrar-servers.com ⭐
A162.255.118.51πŸ‡ΊπŸ‡Έ NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward1.registrar-servers.com
PTReforward3.registrar-servers.com
MXeforward2.registrar-servers.com ⭐
A162.255.118.52πŸ‡ΊπŸ‡Έ NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward2.registrar-servers.com
MXeforward3.registrar-servers.com ⭐
A162.255.118.51πŸ‡ΊπŸ‡Έ NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward1.registrar-servers.com
PTReforward3.registrar-servers.com
MXeforward4.registrar-servers.com(15)
A162.255.118.52πŸ‡ΊπŸ‡Έ NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward2.registrar-servers.com
MXeforward5.registrar-servers.com(20)
A162.255.118.51πŸ‡ΊπŸ‡Έ NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward1.registrar-servers.com
PTReforward3.registrar-servers.com
TXTv=spf1 include:spf.efwd.registrar-servers.com ~all
SOAdns1.registrar-servers.comhostmaster@registrar-servers.com serial=1793794378

site

DNSSECπŸ”’ Signed (DS record present)
NSns01.trs-dns.com ⭐
NSns.trs-dns.com
NSns01.trs-dns.net
NSns10.trs-dns.info
NSns10.trs-dns.org
SOAns.trs-dns.comtrs-ops@tucows.com serial=1794135852
⚠️ On DNS blocklist: spam-tlds

Same first word

Previous names

Next names

DNS History

11 records (9 active, 2 former)

NSdns1.registrar-servers.comdns2.registrar-servers.comMXeforward1.registrar-servers.comeforward2.registrar-servers.comeforward3.registrar-servers.comeforward4.registrar-servers.comeforward5.registrar-servers.comA195.201.12.2172a01:4f8:13b:b4a:0:999:0:2187204.168.161.432a01:4f9:c014:4ae1::1337
●NSdns1.registrar-servers.com2026-10-31 β†’ 2026-11-08 Β· 2 obs
● 2026-10-31 20:10:06
● 2026-11-08 11:57:48
●NSdns2.registrar-servers.com2026-10-31 β†’ 2026-11-08 Β· 2 obs
● 2026-10-31 20:10:06
● 2026-11-08 11:57:48
●MXeforward1.registrar-servers.com2026-10-31 β†’ 2026-11-08 Β· 2 obs
● 2026-10-31 20:10:06
● 2026-11-08 11:57:48
●MXeforward2.registrar-servers.com2026-10-31 β†’ 2026-11-08 Β· 2 obs
● 2026-10-31 20:10:06
● 2026-11-08 11:57:48
●MXeforward3.registrar-servers.com2026-10-31 β†’ 2026-11-08 Β· 2 obs
● 2026-10-31 20:10:06
● 2026-11-08 11:57:48
●MXeforward4.registrar-servers.com2026-10-31 β†’ 2026-11-08 Β· 2 obs
● 2026-10-31 20:10:06
● 2026-11-08 11:57:48
●MXeforward5.registrar-servers.com2026-10-31 β†’ 2026-11-08 Β· 2 obs
● 2026-10-31 20:10:06
● 2026-11-08 11:57:48
●A195.201.12.2172026-11-08 β†’ 2026-11-08 Β· 3 obs
β—‹ 2026-10-31 20:10:06
● 2026-11-08 11:57:42
● 2026-11-08 11:57:48
β—‹A204.168.161.432026-10-31 β†’ 2026-10-31 Β· 3 obs
● 2026-10-31 20:10:06
β—‹ 2026-11-08 11:57:42
β—‹ 2026-11-08 11:57:48
●A2a01:4f8:13b:b4a:0:999:0:21872026-11-08 β†’ 2026-11-08 Β· 3 obs
β—‹ 2026-10-31 20:10:06
● 2026-11-08 11:57:42
● 2026-11-08 11:57:48
β—‹A2a01:4f9:c014:4ae1::13372026-10-31 β†’ 2026-10-31 Β· 3 obs
● 2026-10-31 20:10:06
β—‹ 2026-11-08 11:57:42
β—‹ 2026-11-08 11:57:48

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
sitens10.trs-dns.org, ns10.trs-dns.info, ns01.trs-dns.com, ns01.trs-dns.net-
php2shell.sitedns1.registrar-servers.com, dns2.registrar-servers.com-

βœ… Authoritative Response

Server:156.154.132.200

NS records: dns1.registrar-servers.com, dns2.registrar-servers.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for php2shell.site (unsigned zone)

⏱️ Timing

Total: 647ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A1195.201.12.217
AAAA12a01:4f8:13b:b4a:0:999:0:2187
NS2dns1.registrar-servers.com, dns2.registrar-servers.com
MX5eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...
TXT1v=spf1 include:spf.efwd.registrar-server
SOA1dns1.registrar-servers.com hostmaster.re

Analysis

IP Addresses

php2shell.site resolves to the IP addresses 195.201.12.217 and 2a01:4f8:13b:b4a:0:999:0:2187

Two other host names, along with btcwiki.nl, bitcoinpartij.com and gouda.cheeserobot.org, also share IP numbers with php2shell.site.

Name Servers

php2shell.site is served by two delegated name servers, dns1.registrar-servers.com and dns2.registrar-servers.com.

php2shell.site shares its NS records with other domains, for example marolythara.sbs, finmexsolutions.com, smehdisons.com and two others.

Each of the two host names carries two IP addresses: dns1.registrar-servers.com points to 156.154.132.200 and 2610:a1:1024::200, and dns2.registrar-servers.com points to 156.154.133.200 and 2610:a1:1025::200.

Mail Servers

php2shell.site is handled by five mail servers: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

There is at least a partial MX overlap between php2shell.site and other domains, including ambercustom.com, benyeh.com, wakeywakeyfarm.com and two others.

These mail servers frequently appear alongside the mail servers eforward4.registrar-servers.com and eforward5.registrar-servers.com.

Host names that point to one IP address:

eforward1.registrar-servers.com points to the IP address 162.255.118.51.

eforward2.registrar-servers.com points to the IP address 162.255.118.52.

eforward3.registrar-servers.com points to the IP address 162.255.118.51.

eforward4.registrar-servers.com points to the IP address 162.255.118.52.

eforward5.registrar-servers.com points to the IP address 162.255.118.51.

Each of eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com resolves to 162.255.118.51.

These two host names β€” eforward2.registrar-servers.com and eforward4.registrar-servers.com β€” each point to 162.255.118.52 IP addresses.