php2shellchecker.io - dns.ninja

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

php2shellchecker.io

DNSSEC⚠️ Not signed
A2606:4700:3036::ac43:b1f6πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3037::6815:4855πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.72.85Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.177.246πŸ‡ΊπŸ‡Έ Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSjustin.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3bbbπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjustin.ns.cloudflare.com
A2803:f800:50::6ca2:c1bbπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRjustin.ns.cloudflare.com
A2a06:98c1:50::ac40:21bbπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRjustin.ns.cloudflare.com
A108.162.193.187πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjustin.ns.cloudflare.com
A172.64.33.187πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjustin.ns.cloudflare.com
A173.245.59.187πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjustin.ns.cloudflare.com
NSphoenix.ns.cloudflare.com
A2606:4700:50::a29f:26c9πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRphoenix.ns.cloudflare.com
A2803:f800:50::6ca2:c2c9πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRphoenix.ns.cloudflare.com
A2a06:98c1:50::ac40:22c9πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRphoenix.ns.cloudflare.com
A108.162.194.201πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRphoenix.ns.cloudflare.com
A162.159.38.201Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRphoenix.ns.cloudflare.com
A172.64.34.201πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRphoenix.ns.cloudflare.com
TXTgoogle-site-verification=-s-V9xgrLUvrDRh9EsAWO6hpleco1xpdnsgsqyPQvG4
TXTv=spf1 -all
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.72.85, 172.67.177.246
IPv6 hints2606:4700:3036::ac43:b1f6, 2606:4700:3037::6815:4855
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=27, name=cloudflare-ech.com
SOAjustin.ns.cloudflare.comdns@cloudflare.com serial=2418171655

io

DNSSEC⚠️ Not signed
NSa0.nic.io ⭐
NSa2.nic.io
NSb0.nic.io
NSc0.nic.io
SOAa0.nic.iohostmaster@donuts.email serial=1793189047

Same first word

Previous names

Next names

DNS History

10 records (6 active, 4 former)

NSjustin.ns.cloudflare.comphoenix.ns.cloudflare.comA104.21.72.85172.67.177.2462606:4700:3036::ac43:b1f62606:4700:3037::6815:4855188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSjustin.ns.cloudflare.com2026-10-23 β†’ 2026-10-28 Β· 2 obs
● 2026-10-23 04:15:18
● 2026-10-28 12:31:06
●NSphoenix.ns.cloudflare.com2026-10-23 β†’ 2026-10-28 Β· 2 obs
● 2026-10-23 04:15:18
● 2026-10-28 12:31:06
●A104.21.72.852026-10-27 β†’ 2026-10-28 Β· 3 obs
β—‹ 2026-10-23 04:15:18
● 2026-10-27 09:45:24
● 2026-10-28 12:31:06
●A172.67.177.2462026-10-27 β†’ 2026-10-28 Β· 3 obs
β—‹ 2026-10-23 04:15:18
● 2026-10-27 09:45:24
● 2026-10-28 12:31:06
β—‹A188.114.96.02026-10-23 β†’ 2026-10-23 Β· 3 obs
● 2026-10-23 04:15:18
β—‹ 2026-10-27 09:45:24
β—‹ 2026-10-28 12:31:06
β—‹A188.114.97.02026-10-23 β†’ 2026-10-23 Β· 3 obs
● 2026-10-23 04:15:18
β—‹ 2026-10-27 09:45:24
β—‹ 2026-10-28 12:31:06
●A2606:4700:3036::ac43:b1f62026-10-27 β†’ 2026-10-28 Β· 3 obs
β—‹ 2026-10-23 04:15:18
● 2026-10-27 09:45:24
● 2026-10-28 12:31:06
●A2606:4700:3037::6815:48552026-10-27 β†’ 2026-10-28 Β· 3 obs
β—‹ 2026-10-23 04:15:18
● 2026-10-27 09:45:24
● 2026-10-28 12:31:06
β—‹A2a06:98c1:3120::2026-10-23 β†’ 2026-10-23 Β· 3 obs
● 2026-10-23 04:15:18
β—‹ 2026-10-27 09:45:24
β—‹ 2026-10-28 12:31:06
β—‹A2a06:98c1:3121::2026-10-23 β†’ 2026-10-23 Β· 3 obs
● 2026-10-23 04:15:18
β—‹ 2026-10-27 09:45:24
β—‹ 2026-10-28 12:31:06

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
ioc0.nic.io, a2.nic.io, a0.nic.io, b0.nic.io8 records
php2shellchecker.iojustin.ns.cloudflare.com, phoenix.ns.cloudflare.com-

βœ… Authoritative Response

Server:172.64.34.201

NS records: justin.ns.cloudflare.com, phoenix.ns.cloudflare.com

πŸ”’ DNSSEC Status

πŸ” Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 827ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.177.246, 104.21.72.85
AAAA22606:4700:3036::ac43:b1f6, 2606:4700:3037::6815:4855
NS2justin.ns.cloudflare.com, phoenix.ns.cloudflare.com
TXT2google-site-verification=-s-V9xgrLUvrDRh, v=spf1 -all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1justin.ns.cloudflare.com dns.cloudflare.

πŸ“Œ Glue Records Collected

Total: 8

In-bailiwick: 8 (c0.nic.io, c0.nic.io, a2.nic.io...)

Analysis

IP Addresses

php2shellchecker.io resolves to four IP addresses: 104.21.72.85, 172.67.177.246, 2606:4700:3036::ac43:b1f6 and 2606:4700:3037::6815:4855.

Two other host names, along with 5t1m9.com, superslotninja.com and xn--orc-so-yc8b.com, also share IP numbers with php2shellchecker.io.

Name Servers

php2shellchecker.io is served by two delegated name servers, justin.ns.cloudflare.com and phoenix.ns.cloudflare.com.

php2shellchecker.io shares the same name server setup with other domains, for instance cagdas-cimenli.workers.dev, goldskill.org, silverfoxzjm.workers.dev and two other.

php2shellchecker.io shares at least some of its name servers with other domains, including ververeel.com, kayuy.workers.dev, sigmapulse.digital and two others.

These name servers are frequently paired with the name servers april.ns.cloudflare.com and chelsea.ns.cloudflare.com.

DNS names with 6 IP addresses:

justin.ns.cloudflare.com carries IP addresses 108.162.193.187, 172.64.33.187 and 173.245.59.187, with 3 other addresses beyond those.

phoenix.ns.cloudflare.com carries IP addresses 108.162.194.201, 162.159.38.201 and 172.64.34.201, with 3 other addresses beyond those.