php2shell.help - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

php2shell.help

DNSSEC⚠️ Not signed
A2606:4700:3031::ac43:9e6e🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3036::6815:425f🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.66.95Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.158.110🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSlady.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3a7f🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRlady.ns.cloudflare.com
A2803:f800:50::6ca2:c07f🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRlady.ns.cloudflare.com
A2a06:98c1:50::ac40:207f🇺🇸 Cloudflare2a06:98c1:50::/45
PTRlady.ns.cloudflare.com
A108.162.192.127🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRlady.ns.cloudflare.com
A172.64.32.127🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRlady.ns.cloudflare.com
A173.245.58.127🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRlady.ns.cloudflare.com
NSvicky.ns.cloudflare.com
A2606:4700:58::a29f:2c45🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRvicky.ns.cloudflare.com
A2803:f800:50::6ca2:c345🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRvicky.ns.cloudflare.com
A2a06:98c1:50::ac40:2345🇺🇸 Cloudflare2a06:98c1:50::/45
PTRvicky.ns.cloudflare.com
A108.162.195.69🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRvicky.ns.cloudflare.com
A162.159.44.69Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRvicky.ns.cloudflare.com
A172.64.35.69🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRvicky.ns.cloudflare.com
MXroute2.mx.cloudflare.net ⭐
A2606:4700:f5::e🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::f🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::10🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.17Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.18Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.19Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
MXroute1.mx.cloudflare.net(73)
A2606:4700:f5::b🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::c🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::d🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.11Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.12Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.13Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
MXroute3.mx.cloudflare.net(93)
A2606:4700:f5::11🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::12🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::13🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.23Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.24Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.25Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
TXTgoogle-site-verification=k7nDNDhOFFDk3UsFDjRsQthMmHYBIYwiD3f0cV4aGl0
TXTv=spf1 -all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.66.95, 172.67.158.110
IPv6 hints2606:4700:3031::ac43:9e6e, 2606:4700:3036::6815:425f
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=248, name=cloudflare-ech.com
SOAlady.ns.cloudflare.comdns@cloudflare.com serial=2418445740

help

DNSSEC🔒 Signed (DS record present)
NSns0.centralnic.net ⭐
NSa.nic.help
NSb.nic.help
NSc.nic.help
NSd.nic.help
SOAns0.centralnic.nethostmaster@centralnic.net serial=1793212663
⚠️ On DNS blocklist: spam-tlds

Same first word

php2shell.us
php2shell.co.uk
php2shell.jp
php2shell.io
php2shell.is
php2shell.click
php2shell.app
php2shell.pl
php2shell.pages.dev
php2shell.fun
php2shell.es
php2shell.ai
php2shell.quest
php2shell.workers.dev
php2shell.gr
php2shell.support
php2shell.fr
php2shell.ro
php2shell.tech
php2shell.run
php2shell.co.kr
php2shell.fyi
php2shell.dev
php2shell.top
php2shell.live
php2shell.com.tr
php2shell.cn
php2shell.at
php2shell.ru
php2shell.link
php2shell.help
php2shell.com
php2shell.cc
php2shell.in
php2shell.ph
php2shell.net
php2shell.si
php2shell.kr
php2shell.org
php2shell.tr
php2shell.de
php2shell.info
php2shell.eu
php2shell.ch
php2shell.hu
php2shell.pro
php2shell.uk
php2shell.tw
php2shell.dk
php2shell.wtf
php2shell.sh

Previous names

photos-assitancelcloud.help
photos-idicloud.help
photos-it.help
photos-mysupporticloud.help
photos-sharingappleid.help
photosapp-helpid.help
photosappleid.help
photoshare.help
photoshoot.help
photospage.help
photostrictive.help
photostrictivex.help
photostudio.help
photosync.help
photowelo.help
photto-sttudio.help
photto-studio.help
php.help
php288.help

Next names

php797.help
php877.help
phpark43.help
phpfmo.help
phpgames47.help
phph1.help
phph8.help
phph9.help
phpoststore.help
phpplay71.help
phpvip.help
phqivlze.help
phqknp.help
phr903.help
phraseguard.help
phraseyneedy.help
phrasingauthorscribechapters.help
phrasingbioauthorbook.help
phrasingbioghostwriterprint.help

DNS History

13 records (9 active, 4 former)

NSlady.ns.cloudflare.comvicky.ns.cloudflare.comMXroute1.mx.cloudflare.netroute2.mx.cloudflare.netroute3.mx.cloudflare.netA104.21.66.95172.67.158.1102606:4700:3031::ac43:9e6e2606:4700:3036::6815:425f188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSlady.ns.cloudflare.com2026-10-22 → 2026-10-28 · 2 obs
● 2026-10-22 05:33:36
● 2026-10-28 19:05:06
●NSvicky.ns.cloudflare.com2026-10-22 → 2026-10-28 · 2 obs
● 2026-10-22 05:33:36
● 2026-10-28 19:05:06
●MXroute1.mx.cloudflare.net2026-10-22 → 2026-10-28 · 2 obs
● 2026-10-22 05:33:36
● 2026-10-28 19:05:06
●MXroute2.mx.cloudflare.net2026-10-22 → 2026-10-28 · 2 obs
● 2026-10-22 05:33:36
● 2026-10-28 19:05:06
●MXroute3.mx.cloudflare.net2026-10-22 → 2026-10-28 · 2 obs
● 2026-10-22 05:33:36
● 2026-10-28 19:05:06
●A104.21.66.952026-10-25 → 2026-10-28 · 3 obs
○ 2026-10-22 05:33:36
● 2026-10-25 23:09:56
● 2026-10-28 19:05:06
●A172.67.158.1102026-10-25 → 2026-10-28 · 3 obs
○ 2026-10-22 05:33:36
● 2026-10-25 23:09:56
● 2026-10-28 19:05:06
○A188.114.96.02026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 05:33:36
○ 2026-10-25 23:09:56
○ 2026-10-28 19:05:06
○A188.114.97.02026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 05:33:36
○ 2026-10-25 23:09:56
○ 2026-10-28 19:05:06
●A2606:4700:3031::ac43:9e6e2026-10-25 → 2026-10-28 · 3 obs
○ 2026-10-22 05:33:36
● 2026-10-25 23:09:56
● 2026-10-28 19:05:06
●A2606:4700:3036::6815:425f2026-10-25 → 2026-10-28 · 3 obs
○ 2026-10-22 05:33:36
● 2026-10-25 23:09:56
● 2026-10-28 19:05:06
○A2a06:98c1:3120::2026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 05:33:36
○ 2026-10-25 23:09:56
○ 2026-10-28 19:05:06
○A2a06:98c1:3121::2026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 05:33:36
○ 2026-10-25 23:09:56
○ 2026-10-28 19:05:06

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
helpc.nic.help, a.nic.help, d.nic.help, b.nic.help8 records
php2shell.helplady.ns.cloudflare.com, vicky.ns.cloudflare.com-

✅ Authoritative Response

Server:173.245.58.127

NS records: lady.ns.cloudflare.com, vicky.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for php2shell.help (unsigned zone)

⏱️ Timing

Total: 1014ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.66.95, 172.67.158.110
AAAA22606:4700:3031::ac43:9e6e, 2606:4700:3036::6815:425f
NS2lady.ns.cloudflare.com, vicky.ns.cloudflare.com
MX3route2.mx.cloudflare.net (pri: 40), route1.mx.cloudflare.net (pri: 73)...
TXT2google-site-verification=k7nDNDhOFFDk3Us, v=spf1 -all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1lady.ns.cloudflare.com dns.cloudflare.co

📌 Glue Records Collected

Total: 8

In-bailiwick: 8 (c.nic.help, c.nic.help, a.nic.help...)

Analysis

IP Addresses

php2shell.help directs to four IP numbers, which are 104.21.66.95, 172.67.158.110, 2606:4700:3031::ac43:9e6e and 2606:4700:3036::6815:425f.

auvernet.com, bio-energetics.nl, mail.mea-door.ru and two other host names share IP numbers with php2shell.help.

Name Servers

php2shell.help is served by two delegated name servers, lady.ns.cloudflare.com and vicky.ns.cloudflare.com.

php2shell.help uses the same name servers as several other domains — among them quintyn.ca, royaltonrealty.ca, gregory-petipre.workers.dev and two more.

At least some of php2shell.help's name servers are shared with other domains, for example bulan77jedd.top, papier-preview-pr-49.pages.dev, amazingworking591.pages.dev and two more.

It is common for these name servers to be used in conjunction with the name servers norm.ns.cloudflare.com, quincy.ns.cloudflare.com and diana.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

lady.ns.cloudflare.com carries IP addresses 108.162.192.127, 172.64.32.127 and 173.245.58.127, with 3 other addresses beyond those.

vicky.ns.cloudflare.com carries IP addresses 108.162.195.69, 162.159.44.69 and 172.64.35.69, with 3 other addresses beyond those.

Mail Servers

The MX records for php2shell.help list three mail servers: route1.mx.cloudflare.net, route2.mx.cloudflare.net and route3.mx.cloudflare.net.

php2shell.help has at least partial mail server overlap with other domains such as emerif.com, annex.team, studentsfreedom.com and two more.

Hostnames that resolve to 6 IP addresses:

route1.mx.cloudflare.net carries IP addresses 162.159.205.11, 162.159.205.12 and 162.159.205.13, with 3 other addresses beyond those.

route2.mx.cloudflare.net carries IP addresses 162.159.205.17, 162.159.205.18 and 162.159.205.19, with 3 other addresses beyond those.

route3.mx.cloudflare.net carries IP addresses 162.159.205.23, 162.159.205.24 and 162.159.205.25, with 3 other addresses beyond those.