php2shell.cc - dns.ninja

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

php2shell.cc

DNSSEC⚠️ Not signed
A2606:4700:3030::6815:515eπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3033::ac43:9ef2πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.81.94Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.158.242πŸ‡ΊπŸ‡Έ Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSdonald.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3b9eπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdonald.ns.cloudflare.com
A2803:f800:50::6ca2:c19eπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRdonald.ns.cloudflare.com
A2a06:98c1:50::ac40:219eπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRdonald.ns.cloudflare.com
A108.162.193.158πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdonald.ns.cloudflare.com
A172.64.33.158πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdonald.ns.cloudflare.com
A173.245.59.158πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdonald.ns.cloudflare.com
NSmariah.ns.cloudflare.com
A2606:4700:50::a29f:26c8πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmariah.ns.cloudflare.com
A2803:f800:50::6ca2:c2c8πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRmariah.ns.cloudflare.com
A2a06:98c1:50::ac40:22c8πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRmariah.ns.cloudflare.com
A108.162.194.200πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmariah.ns.cloudflare.com
A162.159.38.200Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmariah.ns.cloudflare.com
A172.64.34.200πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmariah.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.81.94, 172.67.158.242
IPv6 hints2606:4700:3030::6815:515e, 2606:4700:3033::ac43:9ef2
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=162, name=cloudflare-ech.com
SOAdonald.ns.cloudflare.comdns@cloudflare.com serial=2418122802

cc

DNSSECπŸ”’ Signed (DS record present)
NSac1.nstld.com ⭐
NSac2.nstld.com
NSac3.nstld.com
NSac4.nstld.com
SOAac1.nstld.cominfo@verisign-grs.com serial=1793144865
⚠️ On DNS blocklist: spam-tlds

Same first word

Previous names

Next names

DNS History

10 records (6 active, 4 former)

NSdonald.ns.cloudflare.commariah.ns.cloudflare.comA104.21.81.94172.67.158.2422606:4700:3030::6815:515e2606:4700:3033::ac43:9ef2188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSdonald.ns.cloudflare.com2026-10-22 β†’ 2026-10-28 Β· 2 obs
● 2026-10-22 10:19:42
● 2026-10-28 00:17:22
●NSmariah.ns.cloudflare.com2026-10-22 β†’ 2026-10-28 Β· 2 obs
● 2026-10-22 10:19:42
● 2026-10-28 00:17:22
●A104.21.81.942026-10-22 β†’ 2026-10-28 Β· 3 obs
β—‹ 2026-10-22 10:19:42
● 2026-10-22 12:36:00
● 2026-10-28 00:17:22
●A172.67.158.2422026-10-22 β†’ 2026-10-28 Β· 3 obs
β—‹ 2026-10-22 10:19:42
● 2026-10-22 12:36:00
● 2026-10-28 00:17:22
β—‹A188.114.96.02026-10-22 β†’ 2026-10-22 Β· 3 obs
● 2026-10-22 10:19:42
β—‹ 2026-10-22 12:36:00
β—‹ 2026-10-28 00:17:22
β—‹A188.114.97.02026-10-22 β†’ 2026-10-22 Β· 3 obs
● 2026-10-22 10:19:42
β—‹ 2026-10-22 12:36:00
β—‹ 2026-10-28 00:17:22
●A2606:4700:3030::6815:515e2026-10-22 β†’ 2026-10-28 Β· 3 obs
β—‹ 2026-10-22 10:19:42
● 2026-10-22 12:36:00
● 2026-10-28 00:17:22
●A2606:4700:3033::ac43:9ef22026-10-22 β†’ 2026-10-28 Β· 3 obs
β—‹ 2026-10-22 10:19:42
● 2026-10-22 12:36:00
● 2026-10-28 00:17:22
β—‹A2a06:98c1:3120::2026-10-22 β†’ 2026-10-22 Β· 3 obs
● 2026-10-22 10:19:42
β—‹ 2026-10-22 12:36:00
β—‹ 2026-10-28 00:17:22
β—‹A2a06:98c1:3121::2026-10-22 β†’ 2026-10-22 Β· 3 obs
● 2026-10-22 10:19:42
β—‹ 2026-10-22 12:36:00
β—‹ 2026-10-28 00:17:22

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
ccac3.nstld.com, ac1.nstld.com, ac4.nstld.com, ac2.nstld.com-
php2shell.ccdonald.ns.cloudflare.com, mariah.ns.cloudflare.com-

βœ… Authoritative Response

Server:172.64.34.200

NS records: donald.ns.cloudflare.com, mariah.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for php2shell.cc (unsigned zone)

⏱️ Timing

Total: 1055ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2104.21.81.94, 172.67.158.242
AAAA22606:4700:3033::ac43:9ef2, 2606:4700:3030::6815:515e
NS2donald.ns.cloudflare.com, mariah.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1donald.ns.cloudflare.com dns.cloudflare.

Analysis

IP Addresses

php2shell.cc directs to four IP numbers, which are 104.21.81.94, 172.67.158.242, 2606:4700:3030::6815:515e and 2606:4700:3033::ac43:9ef2.

Two other host names, along with 948jj.com, quickbet1.uk and eaccountablemarketingstudio.info, also share IP numbers with php2shell.cc.

Name Servers

php2shell.cc is served by two delegated name servers, donald.ns.cloudflare.com and mariah.ns.cloudflare.com.

php2shell.cc shares its NS records with other domains, for example jake-da1.workers.dev, spicyerotiek.nl, freemapp.com and two others.

At least some of php2shell.cc's name servers are shared with other domains, for example odakbilgi.org, wangshan-aqi.workers.dev, continly.info and two more.

DNS names with 6 IP addresses:

donald.ns.cloudflare.com carries IP addresses 108.162.193.158, 172.64.33.158 and 173.245.59.158, with 3 other addresses beyond those.

mariah.ns.cloudflare.com carries IP addresses 108.162.194.200, 162.159.38.200 and 172.64.34.200, with 3 other addresses beyond those.