`1stexpress.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::6815:1e1e^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:9673^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.30.30^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.150.115^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`johnny.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2cba^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`johnny.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3ba^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`johnny.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23ba^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`johnny.ns.cloudflare.com`
		A	108.162.195.186^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`johnny.ns.cloudflare.com`
		A	162.159.44.186^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`johnny.ns.cloudflare.com`
		A	172.64.35.186^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`johnny.ns.cloudflare.com`
NS	`joyce.ns.cloudflare.com`
		A	2606:4700:50::a29f:260e^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`joyce.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c20e^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`joyce.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:220e^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`joyce.ns.cloudflare.com`
		A	108.162.194.14^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`joyce.ns.cloudflare.com`
		A	162.159.38.14^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`joyce.ns.cloudflare.com`
		A	172.64.34.14^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`joyce.ns.cloudflare.com`
MX	`mx001.netsol.xion.oxcs.net` ⭐
		A	173.45.18.128^{🇨🇦 AMC173.45.16.0/22}
			PTR	`mx31.oxsus-vadesecure.net`
MX	`mx002.netsol.xion.oxcs.net` ⭐
		A	173.45.18.129^{🇨🇦 AMC173.45.16.0/22}
			PTR	`mx32.oxsus-vadesecure.net`
TXT	`v=spf1 include:spf.registeredsite.com include:spf.cloudus.oxcs.net ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.30.30, 172.67.150.115
		IPv6 hints	2606:4700:3033::6815:1e1e, 2606:4700:3036::ac43:9673
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=127, name=cloudflare-ech.com
SOA	`johnny.ns.cloudflare.com`dns@cloudflare.com serial=2401645321

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1776202047

Subdomains

m.1stexpress.com

Same first word

1stexpress.co.uk

1stexpress.com

DNS History

13 records (8 active, 5 former)

●NSjohnny.ns.cloudflare.com2026-04-03 → 2026-04-14 · 3 obs

○ 2020-04-13 12:30:28
● 2026-04-03 18:07:52
● 2026-04-14 21:53:24

●NSjoyce.ns.cloudflare.com2026-04-03 → 2026-04-14 · 3 obs

○ 2020-04-13 12:30:28
● 2026-04-03 18:07:52
● 2026-04-14 21:53:24

○NSns39.worldnic.com2015-05-18 → 2020-04-13 · 4 obs

● 2015-05-18 18:53:16
● 2020-04-13 12:30:28
○ 2026-04-03 18:07:52
○ 2026-04-14 21:53:24

○NSns40.worldnic.com2015-05-18 → 2020-04-13 · 4 obs

● 2015-05-18 18:53:16
● 2020-04-13 12:30:28
○ 2026-04-03 18:07:52
○ 2026-04-14 21:53:24

○MXinbound.1stexpress.com.netsolmail.net2015-05-18 → 2017-03-17 · 4 obs

● 2015-05-18 18:53:16
● 2017-03-17 05:49:02
○ 2020-04-13 12:30:28
○ 2026-04-14 21:53:24

●MXmx001.netsol.xion.oxcs.net2026-04-03 → 2026-04-14 · 3 obs

○ 2020-04-13 12:30:28
● 2026-04-03 18:07:52
● 2026-04-14 21:53:24

●MXmx002.netsol.xion.oxcs.net2026-04-03 → 2026-04-14 · 3 obs

○ 2020-04-13 12:30:28
● 2026-04-03 18:07:52
● 2026-04-14 21:53:24

○MXmx1.netsolmail.net2020-04-13 → 2020-04-13 · 4 obs

○ 2017-03-17 05:49:02
● 2020-04-13 12:30:28
○ 2026-04-03 18:07:52
○ 2026-04-14 21:53:24

●A104.21.30.302026-04-03 → 2026-04-14 · 3 obs

○ 2020-04-13 12:30:28
● 2026-04-03 18:07:52
● 2026-04-14 21:53:24

●A172.67.150.1152026-04-03 → 2026-04-14 · 3 obs

○ 2020-04-13 12:30:28
● 2026-04-03 18:07:52
● 2026-04-14 21:53:24

○A206.188.192.1752015-05-18 → 2020-04-13 · 4 obs

● 2015-05-18 18:53:16
● 2020-04-13 12:30:28
○ 2026-04-03 18:07:52
○ 2026-04-14 21:53:24

●A2606:4700:3033::6815:1e1e2026-04-03 → 2026-04-14 · 3 obs

○ 2020-04-13 12:30:28
● 2026-04-03 18:07:52
● 2026-04-14 21:53:24

●A2606:4700:3036::ac43:96732026-04-03 → 2026-04-14 · 3 obs

○ 2020-04-13 12:30:28
● 2026-04-03 18:07:52
● 2026-04-14 21:53:24

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	l.gtld-servers.net, j.gtld-servers.net, h.gtld-servers.net, d.gtld-servers.net...	-
1stexpress.com	joyce.ns.cloudflare.com, johnny.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.194.14

NS records: joyce.ns.cloudflare.com, johnny.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for 1stexpress.com (unsigned zone)

⏱️ Timing

Total: 142ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.30.30, 172.67.150.115`
AAAA	2	`2606:4700:3036::ac43:9673, 2606:4700:3033::6815:1e1e`
NS	2	`johnny.ns.cloudflare.com, joyce.ns.cloudflare.com`
MX	2	`mx001.netsol.xion.oxcs.net (pri: 10), mx002.netsol.xion.oxcs.net (pri: 10)`
TXT	1	`v=spf1 include:spf.registeredsite.com in`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`johnny.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (joyce.ns.cloudflare.com, joyce.ns.cloudflare.com, joyce.ns.cloudflare.com...)

Analysis

Hierarchy

1stexpress.com is the parent of m.1stexpress.com.

IP Addresses

Four IP numbers are pointed to by 1stexpress.com: 2606:4700:3033::6815:1e1e, 2606:4700:3036::ac43:9673, 104.21.30.30 and 172.67.150.115.

other host names including moms(0x706f726e)tube.com, digital-graveyard.com, imodididire.it, www.gk-fs.ru and replica-hermes.com share IP numbers with 1stexpress.com.

Name Servers

1stexpress.com is delegated to two name servers johnny.ns.cloudflare.com and joyce.ns.cloudflare.com.

1stexpress.com shares the same name server setup as other domains, for instance anodaequipehomeoffice.site, time-grupohomeoffice.sbs, portal-dotimehomeoffice.site, trabalho-seletivahomeoffice.sbs and registronovohomeoffice.site.

1stexpress.com at least partially shares name servers with other domains, for instance shomla.com, urzadomzone.com, jenniferragazzo.com, whjdmg.com and jannusair.com.

these name servers are often used together with jermaine.ns.cloudflare.com, marvin.ns.cloudflare.com, jeremy.ns.cloudflare.com and molly.ns.cloudflare.com.

Host names with six IP numbers:

Host name johnny.ns.cloudflare.com points to: 2606:4700:58::a29f:2cba, 2803:f800:50::6ca2:c3ba, 2a06:98c1:50::ac40:23ba, 108.162.195.186, 162.159.44.186 and 172.64.35.186.

Host name joyce.ns.cloudflare.com points to: 2606:4700:50::a29f:260e, 2803:f800:50::6ca2:c20e, 2a06:98c1:50::ac40:220e, 108.162.194.14, 162.159.38.14 and 172.64.34.14.

Mail Servers

Two mail servers handle 1stexpress.com: mx001.netsol.xion.oxcs.net and mx002.netsol.xion.oxcs.net.

1stexpress.com shares the same mail server setup as other domains, for instance ursu.com, mtdtires.com, asiinc.org, capexmd.com and accountingtaxaudit.com.

1stexpress.com shares some mail servers with other domains, at least partially, for instance gokartsusa.com, mechanicalpiping.com, alikursun.com, posterplakat.com and trailmind.com.

These mail servers are commonly used alongside mx003.netsol.xion.oxcs.net and mx004.netsol.xion.oxcs.net.

Host names with one IP number:

mx001.netsol.xion.oxcs.net points to 173.45.18.128

mx002.netsol.xion.oxcs.net points to 173.45.18.129

1stexpress.com - robtex.com

1stexpress.com

com

Subdomains

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

Hierarchy

IP Addresses

Name Servers

Mail Servers

`1stexpress.com`

`com`