php2shell.kr - dns.ninja

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

php2shell.kr

DNSSEC⚠️ Not signed
A2606:4700:3032::6815:acbπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3033::ac43:bed6πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.10.203Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.190.214πŸ‡ΊπŸ‡Έ Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSirma.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3aa6πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRirma.ns.cloudflare.com
A2803:f800:50::6ca2:c0a6πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRirma.ns.cloudflare.com
A2a06:98c1:50::ac40:20a6πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRirma.ns.cloudflare.com
A108.162.192.166πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRirma.ns.cloudflare.com
A172.64.32.166πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRirma.ns.cloudflare.com
A173.245.58.166πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRirma.ns.cloudflare.com
NStitan.ns.cloudflare.com
A2606:4700:58::a29f:2c5dπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtitan.ns.cloudflare.com
A2803:f800:50::6ca2:c35dπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRtitan.ns.cloudflare.com
A2a06:98c1:50::ac40:235dπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRtitan.ns.cloudflare.com
A108.162.195.93πŸ‡ΊπŸ‡Έ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtitan.ns.cloudflare.com
A162.159.44.93Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtitan.ns.cloudflare.com
A172.64.35.93πŸ‡ΊπŸ‡Έ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtitan.ns.cloudflare.com
MXroute3.mx.cloudflare.net ⭐
A2606:4700:f5::11πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::12πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::13πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.23Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.24Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.25Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
MXroute1.mx.cloudflare.net(14)
A2606:4700:f5::bπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::cπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::dπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.11Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.12Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.13Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
MXroute2.mx.cloudflare.net(27)
A2606:4700:f5::eπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::fπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::10πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.17Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.18Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.19Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
TXTv=spf1 include:_spf.mx.cloudflare.net ~all
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.10.203, 172.67.190.214
IPv6 hints2606:4700:3032::6815:acb, 2606:4700:3033::ac43:bed6
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=100, name=cloudflare-ech.com
SOAirma.ns.cloudflare.comdns@cloudflare.com serial=2418202907

kr

DNSSECπŸ”’ Signed (DS record present)
NSg.dns.kr ⭐
NSb.dns.kr
NSc.dns.kr
NSd.dns.kr
NSe.dns.kr
NSf.dns.kr
SOAg.dns.krdomain-manager@nic.or.kr serial=2610261113

Same first word

Previous names

Next names

DNS History

13 records (9 active, 4 former)

NSirma.ns.cloudflare.comtitan.ns.cloudflare.comMXroute1.mx.cloudflare.netroute2.mx.cloudflare.netroute3.mx.cloudflare.netA104.21.10.203172.67.190.2142606:4700:3032::6815:acb2606:4700:3033::ac43:bed6188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSirma.ns.cloudflare.com2026-10-23 β†’ 2026-10-26 Β· 2 obs
● 2026-10-23 05:49:42
● 2026-10-26 17:10:36
●NStitan.ns.cloudflare.com2026-10-23 β†’ 2026-10-26 Β· 2 obs
● 2026-10-23 05:49:42
● 2026-10-26 17:10:36
●MXroute1.mx.cloudflare.net2026-10-23 β†’ 2026-10-26 Β· 2 obs
● 2026-10-23 05:49:42
● 2026-10-26 17:10:36
●MXroute2.mx.cloudflare.net2026-10-23 β†’ 2026-10-26 Β· 2 obs
● 2026-10-23 05:49:42
● 2026-10-26 17:10:36
●MXroute3.mx.cloudflare.net2026-10-23 β†’ 2026-10-26 Β· 2 obs
● 2026-10-23 05:49:42
● 2026-10-26 17:10:36
●A104.21.10.2032026-10-23 β†’ 2026-10-26 Β· 5 obs
β—‹ 2026-10-23 05:49:42
● 2026-10-23 14:31:52
β—‹ 2026-10-24 21:52:58
● 2026-10-26 17:10:34
● 2026-10-26 17:10:36
●A172.67.190.2142026-10-23 β†’ 2026-10-26 Β· 5 obs
β—‹ 2026-10-23 05:49:42
● 2026-10-23 14:31:52
β—‹ 2026-10-24 21:52:58
● 2026-10-26 17:10:34
● 2026-10-26 17:10:36
β—‹A188.114.96.02026-10-23 β†’ 2026-10-24 Β· 5 obs
● 2026-10-23 05:49:42
β—‹ 2026-10-23 14:31:52
● 2026-10-24 21:52:58
β—‹ 2026-10-26 17:10:34
β—‹ 2026-10-26 17:10:36
β—‹A188.114.97.02026-10-23 β†’ 2026-10-24 Β· 5 obs
● 2026-10-23 05:49:42
β—‹ 2026-10-23 14:31:52
● 2026-10-24 21:52:58
β—‹ 2026-10-26 17:10:34
β—‹ 2026-10-26 17:10:36
●A2606:4700:3032::6815:acb2026-10-23 β†’ 2026-10-26 Β· 5 obs
β—‹ 2026-10-23 05:49:42
● 2026-10-23 14:31:52
β—‹ 2026-10-24 21:52:58
● 2026-10-26 17:10:34
● 2026-10-26 17:10:36
●A2606:4700:3033::ac43:bed62026-10-23 β†’ 2026-10-26 Β· 5 obs
β—‹ 2026-10-23 05:49:42
● 2026-10-23 14:31:52
β—‹ 2026-10-24 21:52:58
● 2026-10-26 17:10:34
● 2026-10-26 17:10:36
β—‹A2a06:98c1:3120::2026-10-23 β†’ 2026-10-24 Β· 5 obs
● 2026-10-23 05:49:42
β—‹ 2026-10-23 14:31:52
● 2026-10-24 21:52:58
β—‹ 2026-10-26 17:10:34
β—‹ 2026-10-26 17:10:36
β—‹A2a06:98c1:3121::2026-10-23 β†’ 2026-10-24 Β· 5 obs
● 2026-10-23 05:49:42
β—‹ 2026-10-23 14:31:52
● 2026-10-24 21:52:58
β—‹ 2026-10-26 17:10:34
β—‹ 2026-10-26 17:10:36

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
krb.dns.kr, c.dns.kr, d.dns.kr, e.dns.kr...10 records
php2shell.krirma.ns.cloudflare.com, titan.ns.cloudflare.com-

βœ… Authoritative Response

Server:162.159.44.93

NS records: irma.ns.cloudflare.com, titan.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for php2shell.kr (unsigned zone)

⏱️ Timing

Total: 1643ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.190.214, 104.21.10.203
AAAA22606:4700:3033::ac43:bed6, 2606:4700:3032::6815:acb
NS2irma.ns.cloudflare.com, titan.ns.cloudflare.com
MX3route1.mx.cloudflare.net (pri: 14), route2.mx.cloudflare.net (pri: 27)...
TXT1v=spf1 include:_spf.mx.cloudflare.net ~a
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1irma.ns.cloudflare.com dns.cloudflare.co

πŸ“Œ Glue Records Collected

Total: 10

In-bailiwick: 10 (b.dns.kr, c.dns.kr, d.dns.kr...)

Analysis

IP Addresses

php2shell.kr has four IP addresses: 104.21.10.203, 172.67.190.214, 2606:4700:3032::6815:acb and 2606:4700:3033::ac43:bed6.

oo809.com, 85102479.com.cdn.cloudflare.net, 6699w1.app and two other host names share IP numbers with php2shell.kr.

Name Servers

php2shell.kr is delegated to two name servers: irma.ns.cloudflare.com and titan.ns.cloudflare.com.

php2shell.kr uses the same name servers as several other domains β€” among them rubenahr.workers.dev, treysucks83.workers.dev, must-eliquid.com and two more.

php2shell.kr partially shares its NS delegation with several other domains, including dyihdt.cyou, ujawanu.top, laurivalsilva.adm.br and two others.

These name servers are regularly seen alongside treasure.ns.cloudflare.com and keaton.ns.cloudflare.com as name servers.

Hostnames that resolve to 6 IP addresses:

irma.ns.cloudflare.com resolves to 108.162.192.166, 172.64.32.166, 173.245.58.166 and 3 other IP addresses.

titan.ns.cloudflare.com resolves to 108.162.195.93, 162.159.44.93, 172.64.35.93 and 3 other IP addresses.

Mail Servers

php2shell.kr uses three mail servers β€” route1.mx.cloudflare.net, route2.mx.cloudflare.net and route3.mx.cloudflare.net.

php2shell.kr has at least partial mail server overlap with other domains such as jxqianyuan.shop, portoenoticias.com.br, xykatm.info and two more.

Hostnames that resolve to 6 IP addresses:

route1.mx.cloudflare.net resolves to 162.159.205.11, 162.159.205.12, 162.159.205.13 and 3 other IP addresses.

route2.mx.cloudflare.net resolves to 162.159.205.17, 162.159.205.18, 162.159.205.19 and 3 other IP addresses.

route3.mx.cloudflare.net resolves to 162.159.205.23, 162.159.205.24, 162.159.205.25 and 3 other IP addresses.