php2shell.jp - dns.ninja
php2shell.jp
| DNSSEC | β οΈ Not signed | ||||||
| A | 2606:4700:3032::6815:5005πΊπΈ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US β In HTTPS hints | ||||||
| A | 2606:4700:3033::ac43:ac56πΊπΈ Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US β In HTTPS hints | ||||||
| A | 104.21.80.5Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US β In HTTPS hints | ||||||
| A | 172.67.172.86πΊπΈ Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US β In HTTPS hints | ||||||
| NS | coraline.ns.cloudflare.com β | ||||||
| A | 2606:4700:50::a29f:2658πΊπΈ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | coraline.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c258π¨π· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | coraline.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:2258πΊπΈ Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | coraline.ns.cloudflare.com | ||||||
| A | 108.162.194.88πΊπΈ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | coraline.ns.cloudflare.com | ||||||
| A | 162.159.38.88Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | coraline.ns.cloudflare.com | ||||||
| A | 172.64.34.88πΊπΈ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | coraline.ns.cloudflare.com | ||||||
| NS | yisroel.ns.cloudflare.com | ||||||
| A | 2606:4700:58::a29f:2cb9πΊπΈ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | yisroel.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c3b9π¨π· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | yisroel.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:23b9πΊπΈ Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | yisroel.ns.cloudflare.com | ||||||
| A | 108.162.195.185πΊπΈ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | yisroel.ns.cloudflare.com | ||||||
| A | 162.159.44.185Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | yisroel.ns.cloudflare.com | ||||||
| A | 172.64.35.185πΊπΈ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | yisroel.ns.cloudflare.com | ||||||
| MX | route2.mx.cloudflare.net β | ||||||
| A | 2606:4700:f5::eπΊπΈ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | route2.mx.cloudflare.net | ||||||
| A | 2606:4700:f5::fπΊπΈ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | route2.mx.cloudflare.net | ||||||
| A | 2606:4700:f5::10πΊπΈ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | route2.mx.cloudflare.net | ||||||
| A | 162.159.205.17Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | route2.mx.cloudflare.net | ||||||
| A | 162.159.205.18Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | route2.mx.cloudflare.net | ||||||
| A | 162.159.205.19Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | route2.mx.cloudflare.net | ||||||
| MX | route3.mx.cloudflare.net(66) | ||||||
| A | 2606:4700:f5::11πΊπΈ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | route3.mx.cloudflare.net | ||||||
| A | 2606:4700:f5::12πΊπΈ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | route3.mx.cloudflare.net | ||||||
| A | 2606:4700:f5::13πΊπΈ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | route3.mx.cloudflare.net | ||||||
| A | 162.159.205.23Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | route3.mx.cloudflare.net | ||||||
| A | 162.159.205.24Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | route3.mx.cloudflare.net | ||||||
| A | 162.159.205.25Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | route3.mx.cloudflare.net | ||||||
| MX | route1.mx.cloudflare.net(77) | ||||||
| A | 2606:4700:f5::bπΊπΈ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | route1.mx.cloudflare.net | ||||||
| A | 2606:4700:f5::cπΊπΈ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | route1.mx.cloudflare.net | ||||||
| A | 2606:4700:f5::dπΊπΈ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | route1.mx.cloudflare.net | ||||||
| A | 162.159.205.11Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | route1.mx.cloudflare.net | ||||||
| A | 162.159.205.12Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | route1.mx.cloudflare.net | ||||||
| A | 162.159.205.13Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | route1.mx.cloudflare.net | ||||||
| TXT | google-site-verification=_qqvXS5BdUDSQ0Ld_-q1IeM_jaRW7ZqIYQkivT6jxTw | ||||||
| TXT | v=spf1 include:_spf.mx.cloudflare.net ~all | ||||||
| HTTPS | HTTP/3, HTTP/2 β hints match | ||||||
| IPv4 hints | 104.21.80.5, 172.67.172.86 | ||||||
| IPv6 hints | 2606:4700:3032::6815:5005, 2606:4700:3033::ac43:ac56 | ||||||
| ECH | X25519, HKDF-SHA256 + AES-128-GCM draft, id=165, name=cloudflare-ech.com | ||||||
| SOA | coraline.ns.cloudflare.comdns@cloudflare.com serial=2418569414 | ||||||
jp
| DNSSEC | π Signed (DS record present) | ||||||
| NS | z.dns.jp β | ||||||
| NS | a.dns.jp | ||||||
| NS | b.dns.jp | ||||||
| NS | c.dns.jp | ||||||
| NS | d.dns.jp | ||||||
| NS | e.dns.jp | ||||||
| NS | f.dns.jp | ||||||
| NS | g.dns.jp | ||||||
| NS | h.dns.jp | ||||||
| SOA | z.dns.jproot@dns.jp serial=1793081703 | ||||||
Same first word
Previous names
Next names
DNS History
9 records (9 active, 0 former)
βNScoraline.ns.cloudflare.com2026-10-23 β 2026-10-27 Β· 2 obs
β 2026-10-27 06:51:40
βNSyisroel.ns.cloudflare.com2026-10-23 β 2026-10-27 Β· 2 obs
β 2026-10-27 06:51:40
βMXroute1.mx.cloudflare.net2026-10-23 β 2026-10-27 Β· 2 obs
β 2026-10-27 06:51:40
βMXroute2.mx.cloudflare.net2026-10-23 β 2026-10-27 Β· 2 obs
β 2026-10-27 06:51:40
βMXroute3.mx.cloudflare.net2026-10-23 β 2026-10-27 Β· 2 obs
β 2026-10-27 06:51:40
βA104.21.80.52026-10-23 β 2026-10-27 Β· 2 obs
β 2026-10-27 06:51:40
βA172.67.172.862026-10-23 β 2026-10-27 Β· 2 obs
β 2026-10-27 06:51:40
βA2606:4700:3032::6815:50052026-10-23 β 2026-10-27 Β· 2 obs
β 2026-10-27 06:51:40
βA2606:4700:3033::ac43:ac562026-10-23 β 2026-10-27 Β· 2 obs
β 2026-10-27 06:51:40
π DNS Trace
π Delegation Chain
| Zone | Nameservers | Glue |
|---|---|---|
| jp | a.dns.jp, b.dns.jp, c.dns.jp, d.dns.jp... | - |
| php2shell.jp | yisroel.ns.cloudflare.com, coraline.ns.cloudflare.com | - |
β Authoritative Response
Server:172.64.34.88
NS records: yisroel.ns.cloudflare.com, coraline.ns.cloudflare.com
π DNSSEC Status
β οΈ Insecure (no DNSSEC)
Root DNSKEY fetch failed: Error: connect EADDRNOTAVAIL 198.41.0.4:53 - Local (0.0.0.0:0)
β±οΈ Timing
Total: 1457ms | Queries: -
π Records
| Type | Count | Sample Data |
|---|---|---|
| A | 2 | 172.67.172.86, 104.21.80.5 |
| AAAA | 2 | 2606:4700:3032::6815:5005, 2606:4700:3033::ac43:ac56 |
| NS | 2 | coraline.ns.cloudflare.com, yisroel.ns.cloudflare.com |
| MX | 3 | route2.mx.cloudflare.net (pri: 54), route3.mx.cloudflare.net (pri: 66)... |
| TXT | 2 | google-site-verification=_qqvXS5BdUDSQ0L, v=spf1 include:_spf.mx.cloudflare.net ~a |
| HTTPS | 1 | {"priority":1,"target":".","alpn":["h3", |
| SOA | 1 | coraline.ns.cloudflare.com dns.cloudflar |
Analysis
IP Addresses
php2shell.jp resolves to four IP addresses: 104.21.80.5, 172.67.172.86, 2606:4700:3032::6815:5005 and 2606:4700:3033::ac43:ac56.
infectedlands.wiki, salomonsracing.nl, flingybots.click plus two other host names have IP numbers in common with php2shell.jp.
Name Servers
php2shell.jp is served by two delegated name servers, coraline.ns.cloudflare.com and yisroel.ns.cloudflare.com.
The name server configuration of php2shell.jp is shared with other domains, for instance nexaday.today, elk-studios.net, florentine-quotation.workers.dev and two others.
php2shell.jp has at least partial name server overlap with other domains, such as foundationrepairsat.com, bmwcarleasespecials.com, tiqiuzhe190aajishizhishu7u.asia and two others.
It is common to find these name servers paired with the name servers alexa.ns.cloudflare.com.
Hosts with 6 IP addresses each:
coraline.ns.cloudflare.com carries IP addresses 108.162.194.88, 162.159.38.88 and 172.64.34.88, with 3 other addresses beyond those.
yisroel.ns.cloudflare.com carries IP addresses 108.162.195.185, 162.159.44.185 and 172.64.35.185, with 3 other addresses beyond those.
Mail Servers
php2shell.jp has three mail servers: route1.mx.cloudflare.net, route2.mx.cloudflare.net and route3.mx.cloudflare.net.
At least some of the mail servers used by php2shell.jp are shared with other domains: retem.dev, airportsenroute.com, oksio.fi and two others among them.
Hosts with 6 IP addresses each:
route1.mx.cloudflare.net carries IP addresses 162.159.205.11, 162.159.205.12 and 162.159.205.13, with 3 other addresses beyond those.
route2.mx.cloudflare.net carries IP addresses 162.159.205.17, 162.159.205.18 and 162.159.205.19, with 3 other addresses beyond those.
route3.mx.cloudflare.net carries IP addresses 162.159.205.23, 162.159.205.24 and 162.159.205.25, with 3 other addresses beyond those.