`paypalexpress.com`

DNSSEC	⚠️ Not signed
NS	`mark.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b82^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`mark.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c182^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`mark.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2182^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`mark.ns.cloudflare.com`
		A	108.162.193.130^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`mark.ns.cloudflare.com`
		A	172.64.33.130^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`mark.ns.cloudflare.com`
		A	173.245.59.130^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`mark.ns.cloudflare.com`
NS	`romina.ns.cloudflare.com`
		A	2606:4700:50::a29f:269f^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`romina.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c29f^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`romina.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:229f^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`romina.ns.cloudflare.com`
		A	108.162.194.159^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`romina.ns.cloudflare.com`
		A	162.159.38.159^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`romina.ns.cloudflare.com`
		A	172.64.34.159^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`romina.ns.cloudflare.com`
MX	`mx0002.neo.space` ⭐
		A	3.216.184.238^{🇺🇸 Amazon3.208.0.0/12 EC2 IAD prefix}
			PTR	`ec2-3-216-184-238.compute-1.amazonaws.com`
		A	34.193.137.124^{🇺🇸 Amazon34.192.0.0/12 EC2 IAD prefix}
			PTR	`ec2-34-193-137-124.compute-1.amazonaws.com`
		A	52.204.2.2^{🇺🇸 Amazon52.200.0.0/13 EC2 IAD prefix}
			PTR	`ec2-52-204-2-2.compute-1.amazonaws.com`
MX	`mx0001.neo.space`⁽²⁰⁾
		A	3.216.184.238^{🇺🇸 Amazon3.208.0.0/12 EC2 IAD prefix}
			PTR	`ec2-3-216-184-238.compute-1.amazonaws.com`
		A	34.193.137.124^{🇺🇸 Amazon34.192.0.0/12 EC2 IAD prefix}
			PTR	`ec2-34-193-137-124.compute-1.amazonaws.com`
		A	52.204.2.2^{🇺🇸 Amazon52.200.0.0/13 EC2 IAD prefix}
			PTR	`ec2-52-204-2-2.compute-1.amazonaws.com`
TXT	`neo-verification=ftVEVnDRWb`
TXT	`v=spf1 include:spf0001.neo.space ~all`
SOA	`mark.ns.cloudflare.com`dns@cloudflare.com serial=2399020958

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1778533516

⚠️ On DNS blocklist: tif

Same first word

paypalexpress.com

DNS History

12 records (4 active, 8 former)

●NSmark.ns.cloudflare.com2026-04-11 → 2026-05-11 · 3 obs

○ 2019-05-01 19:39:18
● 2026-04-11 18:52:56
● 2026-05-11 21:31:00

○NSns01.domaincontrol.com2015-07-17 → 2017-03-14 · 4 obs

● 2015-07-17 02:06:16
● 2017-03-14 05:26:18
○ 2019-05-01 19:39:18
○ 2026-05-11 21:31:00

○NSns02.domaincontrol.com2015-07-17 → 2017-03-14 · 4 obs

● 2015-07-17 02:06:16
● 2017-03-14 05:26:18
○ 2019-05-01 19:39:18
○ 2026-05-11 21:31:00

○NSns1.above.com2019-05-01 → 2019-05-01 · 4 obs

○ 2017-03-14 05:26:18
● 2019-05-01 19:39:18
○ 2026-04-11 18:52:56
○ 2026-05-11 21:31:00

○NSns2.above.com2019-05-01 → 2019-05-01 · 4 obs

○ 2017-03-14 05:26:18
● 2019-05-01 19:39:18
○ 2026-04-11 18:52:56
○ 2026-05-11 21:31:00

●NSromina.ns.cloudflare.com2026-04-11 → 2026-05-11 · 3 obs

○ 2019-05-01 19:39:18
● 2026-04-11 18:52:56
● 2026-05-11 21:31:00

○MXmailstore1.secureserver.net2015-07-17 → 2017-03-14 · 4 obs

● 2015-07-17 02:06:16
● 2017-03-14 05:26:18
○ 2019-05-01 19:39:18
○ 2026-05-11 21:31:00

●MXmx0001.neo.space2026-04-11 → 2026-05-11 · 3 obs

○ 2019-05-01 19:39:18
● 2026-04-11 18:52:56
● 2026-05-11 21:31:00

●MXmx0002.neo.space2026-04-11 → 2026-05-11 · 3 obs

○ 2019-05-01 19:39:18
● 2026-04-11 18:52:56
● 2026-05-11 21:31:00

○MXsmtp.secureserver.net2015-07-17 → 2017-03-14 · 4 obs

● 2015-07-17 02:06:16
● 2017-03-14 05:26:18
○ 2019-05-01 19:39:18
○ 2026-05-11 21:31:00

○A103.224.182.2452019-05-01 → 2019-05-01 · 4 obs

○ 2017-03-14 05:26:18
● 2019-05-01 19:39:18
○ 2026-04-11 18:52:56
○ 2026-05-11 21:31:00

○A50.63.202.872015-07-17 → 2017-03-14 · 4 obs

● 2015-07-17 02:06:16
● 2017-03-14 05:26:18
○ 2019-05-01 19:39:18
○ 2026-05-11 21:31:00

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
paypalexpress.com	mark.ns.cloudflare.com, romina.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.194.159

NS records: mark.ns.cloudflare.com, romina.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for paypalexpress.com (unsigned zone)

⏱️ Timing

Total: 281ms | Queries: -

📄 Records

Type	Count	Sample Data
NS	2	`mark.ns.cloudflare.com, romina.ns.cloudflare.com`
MX	2	`mx0002.neo.space (pri: 10), mx0001.neo.space (pri: 20)`
TXT	2	`neo-verification=ftVEVnDRWb, v=spf1 include:spf0001.neo.space ~all`
SOA	1	`mark.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (mark.ns.cloudflare.com, mark.ns.cloudflare.com, mark.ns.cloudflare.com...)

Analysis

Name Servers

paypalexpress.com is delegated to two name servers: mark.ns.cloudflare.com and romina.ns.cloudflare.com.

paypalexpress.com uses the same name server setup as other domains, for instance flyonline.it, marcesociety.it, fvdrc.com, bitroot.co and chaptter.com.

paypalexpress.com shares name servers with other domains at least partially, for instance hypnotica.com, ecshy.com, glxaads.com, fitofortificantes.es and cbilling.live.

these name servers are often used with jo.ns.cloudflare.com, leah.ns.cloudflare.com and princess.ns.cloudflare.com.

Host names with six IP numbers: mark.ns.cloudflare.com points to 2606:4700:58::adf5:3b82, 2803:f800:50::6ca2:c182, 2a06:98c1:50::ac40:2182, 108.162.193.130, 172.64.33.130 and 173.245.59.130; romina.ns.cloudflare.com points to 2606:4700:50::a29f:269f, 2803:f800:50::6ca2:c29f, 2a06:98c1:50::ac40:229f, 108.162.194.159, 162.159.38.159 and 172.64.34.159.

Mail Servers

paypalexpress.com is handled by two mail servers: mx0001.neo.space and mx0002.neo.space.

paypalexpress.com shares the same mail server setup as other domains, including yourglamlb.com, meetmage.com, mikegingerich.com, ufcleaning.com and ddym.us.

paypalexpress.com shares some mail servers with other domains, including harbridge.online, bitsport.gg, divinecoins.com, finallymebeauty.com and gbstore.ru.

Host names with three IP numbers:

mx0001.neo.space points to 3.216.184.238, 34.193.137.124 and 52.204.2.2; mx0002.neo.space points to 3.216.184.238, 34.193.137.124 and 52.204.2.2.

Host names that point to 3.216.184.238: mx0001.neo.space and mx0002.neo.space.

Host names that point to 34.193.137.124: mx0001.neo.space and mx0002.neo.space.

Host names that point to 52.204.2.2: mx0001.neo.space and mx0002.neo.space.

paypalexpress.com - robtex.com