`expressvipblack.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3034::6815:3db6^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:d4c5^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.61.182^{Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.212.197^{🇺🇸 Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`nucum.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:2691^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nucum.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c291^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`nucum.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2291^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`nucum.ns.cloudflare.com`
		A	108.162.194.145^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nucum.ns.cloudflare.com`
		A	162.159.38.145^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nucum.ns.cloudflare.com`
		A	172.64.34.145^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nucum.ns.cloudflare.com`
NS	`rustam.ns.cloudflare.com`
		A	2606:4700:58::a29f:2c94^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rustam.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c394^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`rustam.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2394^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`rustam.ns.cloudflare.com`
		A	108.162.195.148^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rustam.ns.cloudflare.com`
		A	162.159.44.148^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rustam.ns.cloudflare.com`
		A	172.64.35.148^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rustam.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.61.182, 172.67.212.197
		IPv6 hints	2606:4700:3034::6815:3db6, 2606:4700:3036::ac43:d4c5
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=190, name=cloudflare-ech.com
SOA	`nucum.ns.cloudflare.com`dns@cloudflare.com serial=2401225802

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1775995977

⚠️ On DNS blocklist: tif

Same first word

expressvipblack.com

Similar names

vipexpressblack.com

blackexpressvip.com

DNS History

10 records (6 active, 4 former)

●NSnucum.ns.cloudflare.com2026-02-28 → 2026-04-12 · 2 obs

● 2026-02-28 13:29:16
● 2026-04-12 12:23:06

●NSrustam.ns.cloudflare.com2026-02-28 → 2026-04-12 · 2 obs

● 2026-02-28 13:29:16
● 2026-04-12 12:23:06

●A104.21.61.1822026-02-28 → 2026-04-12 · 4 obs

● 2026-02-28 13:29:16
○ 2026-03-01 00:06:26
● 2026-03-26 18:51:56
● 2026-04-12 12:23:06

●A172.67.212.1972026-02-28 → 2026-04-12 · 4 obs

● 2026-02-28 13:29:16
○ 2026-03-01 00:06:26
● 2026-03-26 18:51:56
● 2026-04-12 12:23:06

○A188.114.96.02026-03-01 → 2026-03-01 · 4 obs

○ 2026-02-28 13:29:16
● 2026-03-01 00:06:26
○ 2026-03-26 18:51:56
○ 2026-04-12 12:23:06

○A188.114.97.02026-03-01 → 2026-03-01 · 4 obs

○ 2026-02-28 13:29:16
● 2026-03-01 00:06:26
○ 2026-03-26 18:51:56
○ 2026-04-12 12:23:06

●A2606:4700:3034::6815:3db62026-02-28 → 2026-04-12 · 4 obs

● 2026-02-28 13:29:16
○ 2026-03-01 00:06:26
● 2026-03-26 18:51:56
● 2026-04-12 12:23:06

●A2606:4700:3036::ac43:d4c52026-02-28 → 2026-04-12 · 4 obs

● 2026-02-28 13:29:16
○ 2026-03-01 00:06:26
● 2026-03-26 18:51:56
● 2026-04-12 12:23:06

○A2a06:98c1:3120::2026-03-01 → 2026-03-01 · 4 obs

○ 2026-02-28 13:29:16
● 2026-03-01 00:06:26
○ 2026-03-26 18:51:56
○ 2026-04-12 12:23:06

○A2a06:98c1:3121::2026-03-01 → 2026-03-01 · 4 obs

○ 2026-02-28 13:29:16
● 2026-03-01 00:06:26
○ 2026-03-26 18:51:56
○ 2026-04-12 12:23:06

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	e.gtld-servers.net, j.gtld-servers.net, m.gtld-servers.net, d.gtld-servers.net...	-
expressvipblack.com	nucum.ns.cloudflare.com, rustam.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.195.148

NS records: nucum.ns.cloudflare.com, rustam.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for expressvipblack.com (unsigned zone)

⏱️ Timing

Total: 117ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.61.182, 172.67.212.197`
AAAA	2	`2606:4700:3034::6815:3db6, 2606:4700:3036::ac43:d4c5`
NS	2	`nucum.ns.cloudflare.com, rustam.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`nucum.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (nucum.ns.cloudflare.com, nucum.ns.cloudflare.com, nucum.ns.cloudflare.com...)

Analysis

IP Addresses

expressvipblack.com resolves to four IPs: 2606:4700:3034::6815:3db6, 2606:4700:3036::ac43:d4c5, 104.21.61.182 and 172.67.212.197.

Other host names such as villamirabella.com, thr.one, sharpe.tv, ugansu.com and chengdufukang.com share IP numbers with expressvipblack.com.

Name Servers

expressvipblack.com is delegated to two name servers: nucum.ns.cloudflare.com and rustam.ns.cloudflare.com.

expressvipblack.com uses the same name server setup as other domains, including certnet.work, feceg.com, infopublic.net, gestion-patrimoine-et-finance.fr and iberley.es.

At least part of the name servers for expressvipblack.com are shared with other domains, for instance fitwells.ca, launchasis.com, zmonitors.com, horisone.pl and dsvv.org.

These name servers are often used together with dalary.ns.cloudflare.com, cosmin.ns.cloudflare.com and nelci.ns.cloudflare.com.

Host names with six IP numbers:

nucum.ns.cloudflare.com points to: 2606:4700:50::a29f:2691, 2803:f800:50::6ca2:c291, 2a06:98c1:50::ac40:2291, 108.162.194.145, 162.159.38.145 and 172.64.34.145.

rustam.ns.cloudflare.com points to: 2606:4700:58::a29f:2c94, 2803:f800:50::6ca2:c394, 2a06:98c1:50::ac40:2394, 108.162.195.148, 162.159.44.148 and 172.64.35.148.

expressvipblack.com - robtex.com