php2shell.app - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

php2shell.app

DNSSEC⚠️ Not signed
A2606:4700:3032::6815:5dbf🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3032::ac43:d605🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.93.191Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.214.5🇺🇸 Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSharleigh.ns.cloudflare.com ⭐
A2606:4700:50::a29f:263a🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRharleigh.ns.cloudflare.com
A2803:f800:50::6ca2:c23a🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRharleigh.ns.cloudflare.com
A2a06:98c1:50::ac40:223a🇺🇸 Cloudflare2a06:98c1:50::/45
PTRharleigh.ns.cloudflare.com
A108.162.194.58🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRharleigh.ns.cloudflare.com
A162.159.38.58Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRharleigh.ns.cloudflare.com
A172.64.34.58🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRharleigh.ns.cloudflare.com
NState.ns.cloudflare.com
A2606:4700:58::a29f:2cbf🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtate.ns.cloudflare.com
A2803:f800:50::6ca2:c3bf🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRtate.ns.cloudflare.com
A2a06:98c1:50::ac40:23bf🇺🇸 Cloudflare2a06:98c1:50::/45
PTRtate.ns.cloudflare.com
A108.162.195.191🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtate.ns.cloudflare.com
A162.159.44.191Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtate.ns.cloudflare.com
A172.64.35.191🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtate.ns.cloudflare.com
MXroute1.mx.cloudflare.net ⭐
A2606:4700:f5::b🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::c🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::d🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.11Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.12Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.13Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
MXroute3.mx.cloudflare.net(42)
A2606:4700:f5::11🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::12🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::13🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.23Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.24Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.25Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
MXroute2.mx.cloudflare.net(100)
A2606:4700:f5::e🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::f🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::10🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.17Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.18Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.19Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
TXTgoogle-site-verification=l-bZ9kqyVjOOZqbwyGBbAbjczgrMVGumVwXEy80480Q
TXTv=spf1 include:_spf.mx.cloudflare.net ~all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.93.191, 172.67.214.5
IPv6 hints2606:4700:3032::6815:5dbf, 2606:4700:3032::ac43:d605
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=102, name=cloudflare-ech.com
SOAharleigh.ns.cloudflare.comdns@cloudflare.com serial=2418353437

app

DNSSEC🔒 Signed (DS record present)
NSns-tld1.charlestonroadregistry.com ⭐
NSns-tld2.charlestonroadregistry.com
NSns-tld3.charlestonroadregistry.com
NSns-tld4.charlestonroadregistry.com
NSns-tld5.charlestonroadregistry.com
SOAns-tld1.charlestonroadregistry.comcloud-dns-hostmaster@google.com serial=101427
🔒 HSTS Preload (+subdomains)

Same first word

php2shell.tech
php2shell.run
php2shell.co.kr
php2shell.fyi
php2shell.dev
php2shell.top
php2shell.live
php2shell.com.tr
php2shell.cn
php2shell.at
php2shell.ru
php2shell.link
php2shell.help
php2shell.com
php2shell.cc
php2shell.in
php2shell.ph
php2shell.net
php2shell.si
php2shell.kr
php2shell.org
php2shell.tr
php2shell.de
php2shell.info
php2shell.eu
php2shell.ch
php2shell.hu
php2shell.pro
php2shell.uk
php2shell.tw
php2shell.dk
php2shell.wtf
php2shell.sh
php2shell.us
php2shell.co.uk
php2shell.jp
php2shell.io
php2shell.is
php2shell.click
php2shell.app
php2shell.pl
php2shell.pages.dev
php2shell.fun
php2shell.es
php2shell.ai
php2shell.quest
php2shell.workers.dev
php2shell.gr
php2shell.support
php2shell.fr
php2shell.ro

Previous names

photup.app
photure.app
photuris.app
photy.app
phound.app
phoundit.app
phoundry.app
phova.app
phovi.app
phovia.app
phovip.app
phovo.app
phox.app
phoxel.app
php-c.app
php.app
php123.app
php22.app
php222.app
php288.app

Next names

php33.app
php356.app
php36.app
php365.app
php38.app
php444.app
php456.app
php59.app
php646.app
php65.app
php747.app
php77.app
php777.app
php7777.app
php788.app
php789.app
php797.app
php828.app
php877.app
php88.app

DNS History

9 records (9 active, 0 former)

NSharleigh.ns.cloudflare.comtate.ns.cloudflare.comMXroute1.mx.cloudflare.netroute2.mx.cloudflare.netroute3.mx.cloudflare.netA104.21.93.191172.67.214.52606:4700:3032::6815:5dbf2606:4700:3032::ac43:d605
●NSharleigh.ns.cloudflare.com2026-10-22 → 2026-10-28 · 2 obs
● 2026-10-22 05:43:30
● 2026-10-28 17:23:50
●NState.ns.cloudflare.com2026-10-22 → 2026-10-28 · 2 obs
● 2026-10-22 05:43:30
● 2026-10-28 17:23:50
●MXroute1.mx.cloudflare.net2026-10-22 → 2026-10-28 · 2 obs
● 2026-10-22 05:43:30
● 2026-10-28 17:23:50
●MXroute2.mx.cloudflare.net2026-10-22 → 2026-10-28 · 2 obs
● 2026-10-22 05:43:30
● 2026-10-28 17:23:50
●MXroute3.mx.cloudflare.net2026-10-22 → 2026-10-28 · 2 obs
● 2026-10-22 05:43:30
● 2026-10-28 17:23:50
●A104.21.93.1912026-10-22 → 2026-10-28 · 2 obs
● 2026-10-22 05:43:30
● 2026-10-28 17:23:50
●A172.67.214.52026-10-22 → 2026-10-28 · 2 obs
● 2026-10-22 05:43:30
● 2026-10-28 17:23:50
●A2606:4700:3032::6815:5dbf2026-10-22 → 2026-10-28 · 2 obs
● 2026-10-22 05:43:30
● 2026-10-28 17:23:50
●A2606:4700:3032::ac43:d6052026-10-22 → 2026-10-28 · 2 obs
● 2026-10-22 05:43:30
● 2026-10-28 17:23:50

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
appns-tld2.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld1.charlestonroadregistry.com...-
php2shell.appharleigh.ns.cloudflare.com, tate.ns.cloudflare.com-

✅ Authoritative Response

Server:172.64.35.191

NS records: harleigh.ns.cloudflare.com, tate.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for php2shell.app (unsigned zone)

⏱️ Timing

Total: 1727ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.93.191, 172.67.214.5
AAAA22606:4700:3032::6815:5dbf, 2606:4700:3032::ac43:d605
NS2harleigh.ns.cloudflare.com, tate.ns.cloudflare.com
MX3route2.mx.cloudflare.net (pri: 100), route1.mx.cloudflare.net (pri: 16)...
TXT2google-site-verification=l-bZ9kqyVjOOZqb, v=spf1 include:_spf.mx.cloudflare.net ~a
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1harleigh.ns.cloudflare.com dns.cloudflar

Analysis

IP Addresses

php2shell.app directs to four IP numbers, which are 104.21.93.191, 172.67.214.5, 2606:4700:3032::6815:5dbf and 2606:4700:3032::ac43:d605.

Among the host names that share IP numbers with php2shell.app are skylinechurch.tech, cdnimages2378.shop, immivietnam.com and two others.

Name Servers

The NS records for php2shell.app delegate to harleigh.ns.cloudflare.com and tate.ns.cloudflare.com.

php2shell.app has the same name server delegation as a number of other domains, such as best-games.io, liq.bio, northsidepartnership.org and two more.

At least some of php2shell.app's name servers are shared with other domains, for example hiphopproducersbible.com, ktgdw.com, j9rx9930pgr3.workers.dev and two more.

These name servers tend to be used in conjunction with the name servers armando.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

harleigh.ns.cloudflare.com maps to 108.162.194.58, 162.159.38.58, 172.64.34.58 and 3 additional IP addresses.

tate.ns.cloudflare.com maps to 108.162.195.191, 162.159.44.191, 172.64.35.191 and 3 additional IP addresses.

Mail Servers

The MX records for php2shell.app list three mail servers: route1.mx.cloudflare.net, route2.mx.cloudflare.net and route3.mx.cloudflare.net.

php2shell.app shares at least some of its mail servers with other domains — for example sondages-remuneres.net.net, breakingmozart.de, frontierequity.my.id and two more.

Host names resolving to 6 IP numbers:

route1.mx.cloudflare.net maps to 162.159.205.11, 162.159.205.12, 162.159.205.13 and 3 additional IP addresses.

route2.mx.cloudflare.net maps to 162.159.205.17, 162.159.205.18, 162.159.205.19 and 3 additional IP addresses.

route3.mx.cloudflare.net maps to 162.159.205.23, 162.159.205.24, 162.159.205.25 and 3 additional IP addresses.