php2shell.run - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

php2shell.run

DNSSEC⚠️ Not signed
A2606:4700:3031::ac43:c360🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3037::6815:342e🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.52.46Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.195.96🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSdee.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3a5d🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdee.ns.cloudflare.com
A2803:f800:50::6ca2:c05d🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRdee.ns.cloudflare.com
A2a06:98c1:50::ac40:205d🇺🇸 Cloudflare2a06:98c1:50::/45
PTRdee.ns.cloudflare.com
A108.162.192.93🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdee.ns.cloudflare.com
A172.64.32.93🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdee.ns.cloudflare.com
A173.245.58.93🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdee.ns.cloudflare.com
NSdoug.ns.cloudflare.com
A2606:4700:58::adf5:3b9f🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdoug.ns.cloudflare.com
A2803:f800:50::6ca2:c19f🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRdoug.ns.cloudflare.com
A2a06:98c1:50::ac40:219f🇺🇸 Cloudflare2a06:98c1:50::/45
PTRdoug.ns.cloudflare.com
A108.162.193.159🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdoug.ns.cloudflare.com
A172.64.33.159🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdoug.ns.cloudflare.com
A173.245.59.159🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdoug.ns.cloudflare.com
TXTgoogle-site-verification=seN0kVFb5UME3URAd6w9siblUbS_DMd5LQ9xqhCCYBI
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.52.46, 172.67.195.96
IPv6 hints2606:4700:3031::ac43:c360, 2606:4700:3037::6815:342e
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=239, name=cloudflare-ech.com
SOAdee.ns.cloudflare.comdns@cloudflare.com serial=2418165012

run

DNSSEC🔒 Signed (DS record present)
NSv0n0.nic.run ⭐
NSv0n1.nic.run
NSv0n2.nic.run
NSv0n3.nic.run
NSv2n0.nic.run
NSv2n1.nic.run
SOAv0n0.nic.runhostmaster@donuts.email serial=1793023019

Same first word

php2shell.wtf
php2shell.sh
php2shell.us
php2shell.co.uk
php2shell.jp
php2shell.io
php2shell.is
php2shell.click
php2shell.app
php2shell.pl
php2shell.pages.dev
php2shell.fun
php2shell.es
php2shell.ai
php2shell.quest
php2shell.workers.dev
php2shell.gr
php2shell.support
php2shell.fr
php2shell.ro
php2shell.tech
php2shell.run
php2shell.co
php2shell.co.kr
php2shell.fyi
php2shell.dev
php2shell.top
php2shell.live
php2shell.com.tr
php2shell.cn
php2shell.at
php2shell.ru
php2shell.link
php2shell.help
php2shell.com
php2shell.cc
php2shell.in
php2shell.ph
php2shell.net
php2shell.si
php2shell.kr
php2shell.org
php2shell.tr
php2shell.de
php2shell.info
php2shell.eu
php2shell.ch
php2shell.hu
php2shell.pro
php2shell.uk
php2shell.tw
php2shell.dk

Previous names

phoenixwebra.run
phok.run
phonefarm.run
phones.run
phopen.run
phosphoky.run
phosphor.run
photo.run
photoai.run
photobrunei.run
photocraft.run
photographer.run
photography.run
photolab.run
photos.run
phoutha77.run
phox.run
php.run

Next names

php777.run
phpagcor.run
phpnull.run
phpvip.run
phsaya.run
phsayo.run
phsky.run
phspin.run
phsugar.run
phtara.run
phtaya.run
phu.run
phuket.run
phuketborder.run
phuketvisa.run
phw.run
phwin.run
phx.run
phybox.run
phyl.run

DNS History

10 records (6 active, 4 former)

NSdee.ns.cloudflare.comdoug.ns.cloudflare.comA104.21.52.46172.67.195.962606:4700:3031::ac43:c3602606:4700:3037::6815:342e188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSdee.ns.cloudflare.com2026-10-22 → 2026-10-26 · 2 obs
● 2026-10-22 20:38:02
● 2026-10-26 14:29:02
●NSdoug.ns.cloudflare.com2026-10-22 → 2026-10-26 · 2 obs
● 2026-10-22 20:38:02
● 2026-10-26 14:29:02
●A104.21.52.462026-10-26 → 2026-10-26 · 3 obs
○ 2026-10-22 20:38:02
● 2026-10-26 14:29:00
● 2026-10-26 14:29:02
●A172.67.195.962026-10-26 → 2026-10-26 · 3 obs
○ 2026-10-22 20:38:02
● 2026-10-26 14:29:00
● 2026-10-26 14:29:02
○A188.114.96.02026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 20:38:02
○ 2026-10-26 14:29:00
○ 2026-10-26 14:29:02
○A188.114.97.02026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 20:38:02
○ 2026-10-26 14:29:00
○ 2026-10-26 14:29:02
●A2606:4700:3031::ac43:c3602026-10-26 → 2026-10-26 · 3 obs
○ 2026-10-22 20:38:02
● 2026-10-26 14:29:00
● 2026-10-26 14:29:02
●A2606:4700:3037::6815:342e2026-10-26 → 2026-10-26 · 3 obs
○ 2026-10-22 20:38:02
● 2026-10-26 14:29:00
● 2026-10-26 14:29:02
○A2a06:98c1:3120::2026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 20:38:02
○ 2026-10-26 14:29:00
○ 2026-10-26 14:29:02
○A2a06:98c1:3121::2026-10-22 → 2026-10-22 · 3 obs
● 2026-10-22 20:38:02
○ 2026-10-26 14:29:00
○ 2026-10-26 14:29:02

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
runv0n0.nic.run, v0n1.nic.run, v0n2.nic.run, v0n3.nic.run...12 records
php2shell.rundoug.ns.cloudflare.com, dee.ns.cloudflare.com-

✅ Authoritative Response

Server:173.245.59.159

NS records: doug.ns.cloudflare.com, dee.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

Root DNSKEY fetch failed: Error: connect EADDRNOTAVAIL 198.41.0.4:53 - Local (0.0.0.0:0)

⏱️ Timing

Total: 714ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.52.46, 172.67.195.96
AAAA22606:4700:3031::ac43:c360, 2606:4700:3037::6815:342e
NS2dee.ns.cloudflare.com, doug.ns.cloudflare.com
TXT1google-site-verification=seN0kVFb5UME3UR
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1dee.ns.cloudflare.com dns.cloudflare.com

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.run, v0n0.nic.run, v0n1.nic.run...)

Analysis

IP Addresses

php2shell.run resolves to four IP addresses: 104.21.52.46, 172.67.195.96, 2606:4700:3031::ac43:c360 and 2606:4700:3037::6815:342e.

aiscout.top, priyankapal.in, sbc4dh.cfd and two other host names share IP numbers with php2shell.run.

Name Servers

DNS delegation for php2shell.run points to two name servers: dee.ns.cloudflare.com and doug.ns.cloudflare.com.

php2shell.run uses the same name servers as several other domains — among them metro-5wv.pages.dev, vikramsingh7104.workers.dev, casinoipanema.com and two more.

php2shell.run partially shares its NS delegation with several other domains, including dongdonglianthony.workers.dev, sanuuysahil.workers.dev, 4c2dsn5t77.workers.dev and two others.

These name servers often co-occur with the name servers chan.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

dee.ns.cloudflare.com has IP addresses 108.162.192.93, 172.64.32.93 and 173.245.58.93, plus 3 other.

doug.ns.cloudflare.com has IP addresses 108.162.193.159, 172.64.33.159 and 173.245.59.159, plus 3 other.