php2shell.jp - dns.ninja

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

php2shell.jp

DNSSEC⚠️ Not signed
A2606:4700:3032::6815:5005πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3033::ac43:ac56πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.80.5Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.172.86πŸ‡ΊπŸ‡Έ Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NScoraline.ns.cloudflare.com ⭐
A2606:4700:50::a29f:2658πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcoraline.ns.cloudflare.com
A2803:f800:50::6ca2:c258πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRcoraline.ns.cloudflare.com
A2a06:98c1:50::ac40:2258πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRcoraline.ns.cloudflare.com
A108.162.194.88πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcoraline.ns.cloudflare.com
A162.159.38.88Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcoraline.ns.cloudflare.com
A172.64.34.88πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcoraline.ns.cloudflare.com
NSyisroel.ns.cloudflare.com
A2606:4700:58::a29f:2cb9πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRyisroel.ns.cloudflare.com
A2803:f800:50::6ca2:c3b9πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRyisroel.ns.cloudflare.com
A2a06:98c1:50::ac40:23b9πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRyisroel.ns.cloudflare.com
A108.162.195.185πŸ‡ΊπŸ‡Έ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRyisroel.ns.cloudflare.com
A162.159.44.185Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRyisroel.ns.cloudflare.com
A172.64.35.185πŸ‡ΊπŸ‡Έ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRyisroel.ns.cloudflare.com
MXroute2.mx.cloudflare.net ⭐
A2606:4700:f5::eπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::fπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::10πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.17Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.18Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.19Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
MXroute3.mx.cloudflare.net(66)
A2606:4700:f5::11πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::12πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::13πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.23Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.24Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.25Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
MXroute1.mx.cloudflare.net(77)
A2606:4700:f5::bπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::cπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::dπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.11Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.12Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.13Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
TXTgoogle-site-verification=_qqvXS5BdUDSQ0Ld_-q1IeM_jaRW7ZqIYQkivT6jxTw
TXTv=spf1 include:_spf.mx.cloudflare.net ~all
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.80.5, 172.67.172.86
IPv6 hints2606:4700:3032::6815:5005, 2606:4700:3033::ac43:ac56
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=165, name=cloudflare-ech.com
SOAcoraline.ns.cloudflare.comdns@cloudflare.com serial=2418569414

jp

DNSSECπŸ”’ Signed (DS record present)
NSz.dns.jp ⭐
NSa.dns.jp
NSb.dns.jp
NSc.dns.jp
NSd.dns.jp
NSe.dns.jp
NSf.dns.jp
NSg.dns.jp
NSh.dns.jp
SOAz.dns.jproot@dns.jp serial=1793081703

Same first word

Previous names

Next names

DNS History

9 records (9 active, 0 former)

NScoraline.ns.cloudflare.comyisroel.ns.cloudflare.comMXroute1.mx.cloudflare.netroute2.mx.cloudflare.netroute3.mx.cloudflare.netA104.21.80.5172.67.172.862606:4700:3032::6815:50052606:4700:3033::ac43:ac56
●NScoraline.ns.cloudflare.com2026-10-23 β†’ 2026-10-27 Β· 2 obs
● 2026-10-23 15:37:12
● 2026-10-27 06:51:40
●NSyisroel.ns.cloudflare.com2026-10-23 β†’ 2026-10-27 Β· 2 obs
● 2026-10-23 15:37:12
● 2026-10-27 06:51:40
●MXroute1.mx.cloudflare.net2026-10-23 β†’ 2026-10-27 Β· 2 obs
● 2026-10-23 15:37:12
● 2026-10-27 06:51:40
●MXroute2.mx.cloudflare.net2026-10-23 β†’ 2026-10-27 Β· 2 obs
● 2026-10-23 15:37:12
● 2026-10-27 06:51:40
●MXroute3.mx.cloudflare.net2026-10-23 β†’ 2026-10-27 Β· 2 obs
● 2026-10-23 15:37:12
● 2026-10-27 06:51:40
●A104.21.80.52026-10-23 β†’ 2026-10-27 Β· 2 obs
● 2026-10-23 15:37:12
● 2026-10-27 06:51:40
●A172.67.172.862026-10-23 β†’ 2026-10-27 Β· 2 obs
● 2026-10-23 15:37:12
● 2026-10-27 06:51:40
●A2606:4700:3032::6815:50052026-10-23 β†’ 2026-10-27 Β· 2 obs
● 2026-10-23 15:37:12
● 2026-10-27 06:51:40
●A2606:4700:3033::ac43:ac562026-10-23 β†’ 2026-10-27 Β· 2 obs
● 2026-10-23 15:37:12
● 2026-10-27 06:51:40

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
jpa.dns.jp, b.dns.jp, c.dns.jp, d.dns.jp...-
php2shell.jpyisroel.ns.cloudflare.com, coraline.ns.cloudflare.com-

βœ… Authoritative Response

Server:172.64.34.88

NS records: yisroel.ns.cloudflare.com, coraline.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

Root DNSKEY fetch failed: Error: connect EADDRNOTAVAIL 198.41.0.4:53 - Local (0.0.0.0:0)

⏱️ Timing

Total: 1457ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.172.86, 104.21.80.5
AAAA22606:4700:3032::6815:5005, 2606:4700:3033::ac43:ac56
NS2coraline.ns.cloudflare.com, yisroel.ns.cloudflare.com
MX3route2.mx.cloudflare.net (pri: 54), route3.mx.cloudflare.net (pri: 66)...
TXT2google-site-verification=_qqvXS5BdUDSQ0L, v=spf1 include:_spf.mx.cloudflare.net ~a
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1coraline.ns.cloudflare.com dns.cloudflar

Analysis

IP Addresses

php2shell.jp resolves to four IP addresses: 104.21.80.5, 172.67.172.86, 2606:4700:3032::6815:5005 and 2606:4700:3033::ac43:ac56.

infectedlands.wiki, salomonsracing.nl, flingybots.click plus two other host names have IP numbers in common with php2shell.jp.

Name Servers

php2shell.jp is served by two delegated name servers, coraline.ns.cloudflare.com and yisroel.ns.cloudflare.com.

The name server configuration of php2shell.jp is shared with other domains, for instance nexaday.today, elk-studios.net, florentine-quotation.workers.dev and two others.

php2shell.jp has at least partial name server overlap with other domains, such as foundationrepairsat.com, bmwcarleasespecials.com, tiqiuzhe190aajishizhishu7u.asia and two others.

It is common to find these name servers paired with the name servers alexa.ns.cloudflare.com.

Hosts with 6 IP addresses each:

coraline.ns.cloudflare.com carries IP addresses 108.162.194.88, 162.159.38.88 and 172.64.34.88, with 3 other addresses beyond those.

yisroel.ns.cloudflare.com carries IP addresses 108.162.195.185, 162.159.44.185 and 172.64.35.185, with 3 other addresses beyond those.

Mail Servers

php2shell.jp has three mail servers: route1.mx.cloudflare.net, route2.mx.cloudflare.net and route3.mx.cloudflare.net.

At least some of the mail servers used by php2shell.jp are shared with other domains: retem.dev, airportsenroute.com, oksio.fi and two others among them.

Hosts with 6 IP addresses each:

route1.mx.cloudflare.net carries IP addresses 162.159.205.11, 162.159.205.12 and 162.159.205.13, with 3 other addresses beyond those.

route2.mx.cloudflare.net carries IP addresses 162.159.205.17, 162.159.205.18 and 162.159.205.19, with 3 other addresses beyond those.

route3.mx.cloudflare.net carries IP addresses 162.159.205.23, 162.159.205.24 and 162.159.205.25, with 3 other addresses beyond those.