php2shell.fyi - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

php2shell.fyi

DNSSEC🔒 Signed (DS record present)
A2606:4700:3030::6815:3790🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3031::ac43:9522🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.55.144Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.149.34🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSdamon.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3b60🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdamon.ns.cloudflare.com
A2803:f800:50::6ca2:c160🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRdamon.ns.cloudflare.com
A2a06:98c1:50::ac40:2160🇺🇸 Cloudflare2a06:98c1:50::/45
PTRdamon.ns.cloudflare.com
A108.162.193.96🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdamon.ns.cloudflare.com
A172.64.33.96🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdamon.ns.cloudflare.com
A173.245.59.96🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdamon.ns.cloudflare.com
NSetta.ns.cloudflare.com
A2606:4700:50::adf5:3a9c🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRetta.ns.cloudflare.com
A2803:f800:50::6ca2:c09c🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRetta.ns.cloudflare.com
A2a06:98c1:50::ac40:209c🇺🇸 Cloudflare2a06:98c1:50::/45
PTRetta.ns.cloudflare.com
A108.162.192.156🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRetta.ns.cloudflare.com
A172.64.32.156🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRetta.ns.cloudflare.com
A173.245.58.156🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRetta.ns.cloudflare.com
MXroute1.mx.cloudflare.net ⭐
A2606:4700:f5::b🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::c🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::d🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.11Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.12Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.13Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
MXroute2.mx.cloudflare.net(71)
A2606:4700:f5::e🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::f🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::10🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.17Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.18Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.19Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
MXroute3.mx.cloudflare.net(78)
A2606:4700:f5::11🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::12🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::13🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.23Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.24Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.25Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
TXTgoogle-site-verification=Gg9arg48e8Wi6H7DmMtVHt4zq9Rl0l1Whn4MVFOhEZI
TXTv=spf1 include:_spf.mx.cloudflare.net ~all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.55.144, 172.67.149.34
IPv6 hints2606:4700:3030::6815:3790, 2606:4700:3031::ac43:9522
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=1, name=cloudflare-ech.com
SOAdamon.ns.cloudflare.comdns@cloudflare.com serial=2418197414

fyi

DNSSEC🔒 Signed (DS record present)
NSv0n0.nic.fyi ⭐
NSv0n1.nic.fyi
NSv0n2.nic.fyi
NSv0n3.nic.fyi
NSv2n0.nic.fyi
NSv2n1.nic.fyi
SOAv0n0.nic.fyihostmaster@donuts.email serial=1793282193
⚠️ On DNS blocklist: spam-tlds

Same first word

php2shell.net
php2shell.si
php2shell.kr
php2shell.org
php2shell.tr
php2shell.de
php2shell.info
php2shell.eu
php2shell.ch
php2shell.hu
php2shell.pro
php2shell.uk
php2shell.tw
php2shell.dk
php2shell.wtf
php2shell.sh
php2shell.us
php2shell.co.uk
php2shell.jp
php2shell.io
php2shell.is
php2shell.click
php2shell.app
php2shell.pl
php2shell.pages.dev
php2shell.fun
php2shell.es
php2shell.ai
php2shell.quest
php2shell.workers.dev
php2shell.gr
php2shell.support
php2shell.fr
php2shell.ro
php2shell.tech
php2shell.run
php2shell.co.kr
php2shell.fyi
php2shell.dev
php2shell.top
php2shell.live
php2shell.com.tr
php2shell.cn
php2shell.at
php2shell.ru
php2shell.link
php2shell.help
php2shell.com
php2shell.cc
php2shell.in
php2shell.ph

Previous names

photoblogs.fyi
photodubna.fyi
photofromai.fyi
photogallery.fyi
photographer.fyi
photographers.fyi
photography.fyi
photolabplus.fyi
photolarimiz.fyi
photon.fyi
photonics.fyi
photopicker.fyi
photoprompts.fyi
photos.fyi
photoshare.fyi
photosp.fyi
photowalks.fyi
phoveran.fyi
php.fyi

Next names

phptr.fyi
phpvip.fyi
phramory.fyi
phrases.fyi
phrrr.fyi
phs.fyi
ph(0x733378)bwvnydwz7mqazfd.fyi
phtaya.fyi
phu.fyi
phuc.fyi
phucai.fyi
phuket.fyi
phuquoc.fyi
phvpg.fyi
phy.fyi
physica.fyi
physicalai.fyi
physicalintelligence.fyi
physicaltherapist.fyi
physicaltherapy.fyi

DNS History

13 records (9 active, 4 former)

NSdamon.ns.cloudflare.cometta.ns.cloudflare.comMXroute1.mx.cloudflare.netroute2.mx.cloudflare.netroute3.mx.cloudflare.netA104.21.55.144172.67.149.342606:4700:3030::6815:37902606:4700:3031::ac43:9522188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSdamon.ns.cloudflare.com2026-10-22 → 2026-10-29 · 2 obs
● 2026-10-22 10:55:34
● 2026-10-29 14:14:46
●NSetta.ns.cloudflare.com2026-10-22 → 2026-10-29 · 2 obs
● 2026-10-22 10:55:34
● 2026-10-29 14:14:46
●MXroute1.mx.cloudflare.net2026-10-22 → 2026-10-29 · 2 obs
● 2026-10-22 10:55:34
● 2026-10-29 14:14:46
●MXroute2.mx.cloudflare.net2026-10-22 → 2026-10-29 · 2 obs
● 2026-10-22 10:55:34
● 2026-10-29 14:14:46
●MXroute3.mx.cloudflare.net2026-10-22 → 2026-10-29 · 2 obs
● 2026-10-22 10:55:34
● 2026-10-29 14:14:46
●A104.21.55.1442026-10-24 → 2026-10-29 · 3 obs
○ 2026-10-22 10:55:34
● 2026-10-24 15:00:30
● 2026-10-29 14:14:46
●A172.67.149.342026-10-24 → 2026-10-29 · 3 obs
○ 2026-10-22 10:55:34
● 2026-10-24 15:00:30
● 2026-10-29 14:14:46
○A188.114.96.02026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 10:55:34
○ 2026-10-24 15:00:30
○ 2026-10-29 14:14:46
○A188.114.97.02026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 10:55:34
○ 2026-10-24 15:00:30
○ 2026-10-29 14:14:46
●A2606:4700:3030::6815:37902026-10-24 → 2026-10-29 · 3 obs
○ 2026-10-22 10:55:34
● 2026-10-24 15:00:30
● 2026-10-29 14:14:46
●A2606:4700:3031::ac43:95222026-10-24 → 2026-10-29 · 3 obs
○ 2026-10-22 10:55:34
● 2026-10-24 15:00:30
● 2026-10-29 14:14:46
○A2a06:98c1:3120::2026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 10:55:34
○ 2026-10-24 15:00:30
○ 2026-10-29 14:14:46
○A2a06:98c1:3121::2026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 10:55:34
○ 2026-10-24 15:00:30
○ 2026-10-29 14:14:46

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
fyiv0n0.nic.fyi, v0n1.nic.fyi, v0n2.nic.fyi, v0n3.nic.fyi...12 records
php2shell.fyietta.ns.cloudflare.com, damon.ns.cloudflare.com-

✅ Authoritative Response

Server:173.245.58.156

NS records: etta.ns.cloudflare.com, damon.ns.cloudflare.com

🔒 DNSSEC Status

🔐 Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 1323ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.55.144, 172.67.149.34
AAAA22606:4700:3031::ac43:9522, 2606:4700:3030::6815:3790
NS2damon.ns.cloudflare.com, etta.ns.cloudflare.com
MX3route1.mx.cloudflare.net (pri: 42), route2.mx.cloudflare.net (pri: 71)...
TXT2google-site-verification=Gg9arg48e8Wi6H7, v=spf1 include:_spf.mx.cloudflare.net ~a
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1damon.ns.cloudflare.com dns.cloudflare.c

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.fyi, v0n0.nic.fyi, v0n1.nic.fyi...)

Analysis

IP Addresses

php2shell.fyi directs to four IP numbers, which are 104.21.55.144, 172.67.149.34, 2606:4700:3030::6815:3790 and 2606:4700:3031::ac43:9522.

Among the host names that share IP numbers with php2shell.fyi are lxibgw.com, jonbea.com, pyntheriola.sbs and two others.

Name Servers

php2shell.fyi has two authoritative name servers — damon.ns.cloudflare.com and etta.ns.cloudflare.com.

php2shell.fyi has the same name server delegation as a number of other domains, such as anthony-5c7.workers.dev, hbxcvdpbfde.pages.dev, zvxjkndorkpoos.pages.dev and two more.

At least some of php2shell.fyi's name servers are shared with other domains, for example jljl66link.com, ritamarj.xyz, shopdarkomo.workers.dev and two more.

These name servers tend to be deployed in combination with the name servers arvind.ns.cloudflare.com and abby.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

damon.ns.cloudflare.com points to 108.162.193.96, 172.64.33.96, 173.245.59.96 and 3 other IP addresses.

etta.ns.cloudflare.com points to 108.162.192.156, 172.64.32.156, 173.245.58.156 and 3 other IP addresses.

Mail Servers

The MX records for php2shell.fyi list three mail servers: route1.mx.cloudflare.net, route2.mx.cloudflare.net and route3.mx.cloudflare.net.

php2shell.fyi shares at least some of its mail servers with other domains — for example ctmaterialscan.com, yuyx.eu.org, nasturtium.io and two more.

Host names resolving to 6 IP numbers:

route1.mx.cloudflare.net points to 162.159.205.11, 162.159.205.12, 162.159.205.13 and 3 other IP addresses.

route2.mx.cloudflare.net points to 162.159.205.17, 162.159.205.18, 162.159.205.19 and 3 other IP addresses.

route3.mx.cloudflare.net points to 162.159.205.23, 162.159.205.24, 162.159.205.25 and 3 other IP addresses.