It runs PHP 8.4.26 (and nginx). Might be useful for others.
Also, the only pages I found are static and not an actual PHP entry point. If it doesn't run any PHP, it's not vulnerable to PHP2Shell. At least I think that's how it works.
Also, the only pages I found are static and not an actual PHP entry point. If it doesn't run any PHP, it's not vulnerable to PHP2Shell. At least I think that's how it works.
curl -sI http://stealmybitcoin.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 24 Oct 2026 22:01:11 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://stealmybitcoin.com/
$ curl -sS -D - -o /dev/null -X FOO https://stealmybitcoin.com/
HTTP/1.1 501 Not Implemented
Server: nginx
Date: Sat, 24 Oct 2026 22:06:58 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 495
Connection: keep-alive
Host: stealmybitcoin.com
X-Powered-By: PHP/8.4.26