php2shell.wtf - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

php2shell.wtf

DNSSECπŸ”’ Signed (DS record present)
A2a0f:b240:e:146::42WEYRO2a0f:b240:e::/48
A103.109.234.78πŸ‡¦πŸ‡Ί WEYRO103.109.234.0/24
NSlaunch1.spaceship.net ⭐
A2400:cb00:2049:1::a29f:1a26πŸ‡ΊπŸ‡Έ Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A162.159.26.38Cloudflare162.159.26.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
NSlaunch2.spaceship.net
A2400:cb00:2049:1::a29f:1b20πŸ‡ΊπŸ‡Έ Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A162.159.27.32Cloudflare162.159.27.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
SOAlaunch1.spaceship.netsupport@spaceship.com serial=1792590553

wtf

DNSSECπŸ”’ Signed (DS record present)
NSv0n0.nic.wtf ⭐
NSv0n1.nic.wtf
NSv0n2.nic.wtf
NSv0n3.nic.wtf
NSv2n0.nic.wtf
NSv2n1.nic.wtf
SOAv0n0.nic.wtfhostmaster@donuts.email serial=1794156230
⚠️ On DNS blocklist: spam-tlds

Same first word

Previous names

Next names

DNS History

4 records (4 active, 0 former)

NSlaunch1.spaceship.netlaunch2.spaceship.netA103.109.234.782a0f:b240:e:146::42
●NSlaunch1.spaceship.net2026-10-22 β†’ 2026-11-08 Β· 2 obs
● 2026-10-22 10:12:42
● 2026-11-08 17:08:12
●NSlaunch2.spaceship.net2026-10-22 β†’ 2026-11-08 Β· 2 obs
● 2026-10-22 10:12:42
● 2026-11-08 17:08:12
●A103.109.234.782026-10-22 β†’ 2026-11-08 Β· 2 obs
● 2026-10-22 10:12:42
● 2026-11-08 17:08:12
●A2a0f:b240:e:146::422026-10-22 β†’ 2026-11-08 Β· 2 obs
● 2026-10-22 10:12:42
● 2026-11-08 17:08:12

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
wtfv0n0.nic.wtf, v0n1.nic.wtf, v0n2.nic.wtf, v0n3.nic.wtf...12 records
php2shell.wtflaunch2.spaceship.net, launch1.spaceship.net-

βœ… Authoritative Response

Server:162.159.27.32

NS records: launch2.spaceship.net, launch1.spaceship.net

πŸ”’ DNSSEC Status

πŸ” Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 692ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A1103.109.234.78
AAAA12a0f:b240:e:146::42
NS2launch1.spaceship.net, launch2.spaceship.net
SOA1launch1.spaceship.net support.spaceship.

πŸ“Œ Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.wtf, v0n0.nic.wtf, v0n1.nic.wtf...)

Analysis

IP Addresses

php2shell.wtf has two IP addresses: 103.109.234.78 and 2a0f:b240:e:146::42

Two other host names, along with (0x666167676f74).top, scam.ceo and nojs.club, also share IP numbers with php2shell.wtf.

Name Servers

DNS delegation for php2shell.wtf points to two name servers: launch1.spaceship.net and launch2.spaceship.net.

php2shell.wtf shares its NS records with other domains, for example zaya.chat, erionindus.site, claycarter.co and two others.

php2shell.wtf has partial name server overlap with other domains, including emarax.com.

launch1.spaceship.net directs to 162.159.26.38 and 2400:cb00:2049:1::a29f:1a26. launch2.spaceship.net directs to 162.159.27.32 and 2400:cb00:2049:1::a29f:1b20. Each host name carries two IP addresses.