php2shellscan.com - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

php2shellscan.com

DNSSEC⚠️ Not signed
A2606:4700:3037::6815:30e7🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3037::ac43:bc56🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.48.231Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.188.86🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSjoan.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3aad🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjoan.ns.cloudflare.com
A2803:f800:50::6ca2:c0ad🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRjoan.ns.cloudflare.com
A2a06:98c1:50::ac40:20ad🇺🇸 Cloudflare2a06:98c1:50::/45
PTRjoan.ns.cloudflare.com
A108.162.192.173🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjoan.ns.cloudflare.com
A172.64.32.173🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjoan.ns.cloudflare.com
A173.245.58.173🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjoan.ns.cloudflare.com
NSroan.ns.cloudflare.com
A2606:4700:58::adf5:3be2🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroan.ns.cloudflare.com
A2803:f800:50::6ca2:c1e2🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRroan.ns.cloudflare.com
A2a06:98c1:50::ac40:21e2🇺🇸 Cloudflare2a06:98c1:50::/45
PTRroan.ns.cloudflare.com
A108.162.193.226🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroan.ns.cloudflare.com
A172.64.33.226🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroan.ns.cloudflare.com
A173.245.59.226🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroan.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.48.231, 172.67.188.86
IPv6 hints2606:4700:3037::6815:30e7, 2606:4700:3037::ac43:bc56
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=27, name=cloudflare-ech.com
SOAjoan.ns.cloudflare.comdns@cloudflare.com serial=2418186638

com

DNSSEC🔒 Signed (DS record present)
NSa.gtld-servers.net ⭐
NSb.gtld-servers.net
NSc.gtld-servers.net
NSd.gtld-servers.net
NSe.gtld-servers.net
NSf.gtld-servers.net
NSg.gtld-servers.net
NSh.gtld-servers.net
NSi.gtld-servers.net
NSj.gtld-servers.net
NSk.gtld-servers.net
NSl.gtld-servers.net
NSm.gtld-servers.net
SOAa.gtld-servers.netnstld@verisign-grs.com serial=1793189761

Same first word

php2shellscan.com

Previous names

php2next.com
php2node.com
php2p.com
php2py.com
php2python.com
php2ranjan.com
php2rust.com
php2s.com
php2shell-checker.com
php2shell-fix.com
php2shell-tracker.com
php2shell.com
php2shellaudit.com
php2shellcheck.com
php2shellchecker.com
php2shellexploit.com
php2shellfix.com

Next names

php2shellscanner.com
php2shield.com
php2sms.com
php2usdt.com
php2vnd.com
php2you.com
php3-3.com
php3.com
php30.com
php300.com
php3000.com
php3000store.com
php301.com
php31.com
php315.com
php318.com
php33.com
php330.com
php331.com
php332.com

DNS History

6 records (6 active, 0 former)

NSjoan.ns.cloudflare.comroan.ns.cloudflare.comA104.21.48.231172.67.188.862606:4700:3037::6815:30e72606:4700:3037::ac43:bc56
●NSjoan.ns.cloudflare.com2026-10-22 → 2026-10-28 · 2 obs
● 2026-10-22 15:46:50
● 2026-10-28 12:20:26
●NSroan.ns.cloudflare.com2026-10-22 → 2026-10-28 · 2 obs
● 2026-10-22 15:46:50
● 2026-10-28 12:20:26
●A104.21.48.2312026-10-26 → 2026-10-28 · 2 obs
● 2026-10-26 03:33:22
● 2026-10-28 12:20:26
●A172.67.188.862026-10-26 → 2026-10-28 · 2 obs
● 2026-10-26 03:33:22
● 2026-10-28 12:20:26
●A2606:4700:3037::6815:30e72026-10-26 → 2026-10-28 · 2 obs
● 2026-10-26 03:33:22
● 2026-10-28 12:20:26
●A2606:4700:3037::ac43:bc562026-10-26 → 2026-10-28 · 2 obs
● 2026-10-26 03:33:22
● 2026-10-28 12:20:26

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
coma.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...-
php2shellscan.comroan.ns.cloudflare.com, joan.ns.cloudflare.com12 records

✅ Authoritative Response

Server:108.162.193.226

NS records: roan.ns.cloudflare.com, joan.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for php2shellscan.com (unsigned zone)

⏱️ Timing

Total: 862ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.188.86, 104.21.48.231
AAAA22606:4700:3037::6815:30e7, 2606:4700:3037::ac43:bc56
NS2joan.ns.cloudflare.com, roan.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1joan.ns.cloudflare.com dns.cloudflare.co

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (roan.ns.cloudflare.com, roan.ns.cloudflare.com, roan.ns.cloudflare.com...)

Analysis

IP Addresses

php2shellscan.com directs to four IP numbers, which are 104.21.48.231, 172.67.188.86, 2606:4700:3037::6815:30e7 and 2606:4700:3037::ac43:bc56.

Among the host names that share IP numbers with php2shellscan.com are blackseasavunma.com, rumahpublikasi.com, jstpv.com and two others.

Name Servers

DNS delegation for php2shellscan.com points to two name servers: joan.ns.cloudflare.com and roan.ns.cloudflare.com.

php2shellscan.com has the same name server delegation as a number of other domains, such as deals-rajabotak.pages.dev, dippitymunicipal.com, tomaszgra.workers.dev and two more.

There is at least partial name server overlap between php2shellscan.com and other domains — video303.com, neko-web.pages.dev, farigidikakuswardani.workers.dev and two more among them.

These name servers are routinely deployed together with the name servers noel.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

joan.ns.cloudflare.com has IP addresses 108.162.192.173, 172.64.32.173 and 173.245.58.173, plus 3 other.

roan.ns.cloudflare.com has IP addresses 108.162.193.226, 172.64.33.226 and 173.245.59.226, plus 3 other.