php2shell.es - dns.ninja

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

php2shell.es

DNSSEC⚠️ Not signed
A2606:4700:3033::ac43:8560πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3037::6815:575πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.5.117Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.133.96πŸ‡ΊπŸ‡Έ Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSholly.ns.cloudflare.com ⭐
A2606:4700:50::a29f:2685πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRholly.ns.cloudflare.com
A2803:f800:50::6ca2:c285πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRholly.ns.cloudflare.com
A2a06:98c1:50::ac40:2285πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRholly.ns.cloudflare.com
A108.162.194.133πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRholly.ns.cloudflare.com
A162.159.38.133Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRholly.ns.cloudflare.com
A172.64.34.133πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRholly.ns.cloudflare.com
NSleonidas.ns.cloudflare.com
A2606:4700:58::a29f:2c65πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRleonidas.ns.cloudflare.com
A2803:f800:50::6ca2:c365πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRleonidas.ns.cloudflare.com
A2a06:98c1:50::ac40:2365πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRleonidas.ns.cloudflare.com
A108.162.195.101πŸ‡ΊπŸ‡Έ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRleonidas.ns.cloudflare.com
A162.159.44.101Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRleonidas.ns.cloudflare.com
A172.64.35.101πŸ‡ΊπŸ‡Έ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRleonidas.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.5.117, 172.67.133.96
IPv6 hints2606:4700:3033::ac43:8560, 2606:4700:3037::6815:575
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=147, name=cloudflare-ech.com
SOAholly.ns.cloudflare.comdns@cloudflare.com serial=2418163286

es

DNSSECπŸ”’ Signed (DS record present)
NSns1.nic.es ⭐
NSa.nic.es
NSc.nic.es
NSg.nic.es
NSh.nic.es
SOAns1.nic.eshostmaster@nic.es 2026-10-28 #3

Same first word

Previous names

Next names

DNS History

6 records (6 active, 0 former)

NSholly.ns.cloudflare.comleonidas.ns.cloudflare.comA104.21.5.117172.67.133.962606:4700:3033::ac43:85602606:4700:3037::6815:575
●NSholly.ns.cloudflare.com2026-10-22 β†’ 2026-10-28 Β· 2 obs
● 2026-10-22 20:36:42
● 2026-10-28 03:47:10
●NSleonidas.ns.cloudflare.com2026-10-22 β†’ 2026-10-28 Β· 2 obs
● 2026-10-22 20:36:42
● 2026-10-28 03:47:10
●A104.21.5.1172026-10-22 β†’ 2026-10-28 Β· 2 obs
● 2026-10-22 20:36:42
● 2026-10-28 03:47:10
●A172.67.133.962026-10-22 β†’ 2026-10-28 Β· 2 obs
● 2026-10-22 20:36:42
● 2026-10-28 03:47:10
●A2606:4700:3033::ac43:85602026-10-22 β†’ 2026-10-28 Β· 2 obs
● 2026-10-22 20:36:42
● 2026-10-28 03:47:10
●A2606:4700:3037::6815:5752026-10-22 β†’ 2026-10-28 Β· 2 obs
● 2026-10-22 20:36:42
● 2026-10-28 03:47:10

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
esa.nic.es, c.nic.es, g.nic.es, h.nic.es-
php2shell.esholly.ns.cloudflare.com, leonidas.ns.cloudflare.com-

βœ… Authoritative Response

Server:162.159.44.101

NS records: holly.ns.cloudflare.com, leonidas.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for php2shell.es (unsigned zone)

⏱️ Timing

Total: 1119ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.133.96, 104.21.5.117
AAAA22606:4700:3033::ac43:8560, 2606:4700:3037::6815:575
NS2holly.ns.cloudflare.com, leonidas.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1holly.ns.cloudflare.com dns.cloudflare.c

Analysis

IP Addresses

php2shell.es resolves to four IP addresses: 104.21.5.117, 172.67.133.96, 2606:4700:3033::ac43:8560 and 2606:4700:3037::6815:575.

csglc.com, siparista.com, optinovabold.shop and two other host names share IP numbers with php2shell.es.

Name Servers

The NS records for php2shell.es delegate to holly.ns.cloudflare.com and leonidas.ns.cloudflare.com.

php2shell.es uses the same name servers as several other domains β€” among them xn----8sbadkiaabzc8afx0d2b0b.xn--p1ai, irajumandala.workers.dev, eng-ops-ae637c.workers.dev and two more.

php2shell.es partially shares its NS delegation with several other domains, including indusbetapp.top, pidr90.workers.dev, shreadr911.xyz and two others.

The name servers olivia.ns.cloudflare.com, chip.ns.cloudflare.com, phoenix.ns.cloudflare.com and vita.ns.cloudflare.com are often found in use alongside these name servers.

Hostnames that resolve to 6 IP addresses:

holly.ns.cloudflare.com maps to 108.162.194.133, 162.159.38.133, 172.64.34.133 and 3 additional IP addresses.

leonidas.ns.cloudflare.com maps to 108.162.195.101, 162.159.44.101, 172.64.35.101 and 3 additional IP addresses.