`ph-expresss.top`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::6815:2b68^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:b222^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.43.104^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.178.34^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`keira.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:26ce^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`keira.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c2ce^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`keira.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:22ce^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`keira.ns.cloudflare.com`
		A	108.162.194.206^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`keira.ns.cloudflare.com`
		A	162.159.38.206^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`keira.ns.cloudflare.com`
		A	172.64.34.206^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`keira.ns.cloudflare.com`
NS	`logan.ns.cloudflare.com`
		A	2606:4700:58::adf5:3bc6^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`logan.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1c6^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`logan.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21c6^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`logan.ns.cloudflare.com`
		A	108.162.193.198^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`logan.ns.cloudflare.com`
		A	172.64.33.198^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`logan.ns.cloudflare.com`
		A	173.245.59.198^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`logan.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.43.104, 172.67.178.34
		IPv6 hints	2606:4700:3033::6815:2b68, 2606:4700:3036::ac43:b222
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=241, name=cloudflare-ech.com
SOA	`keira.ns.cloudflare.com`dns@cloudflare.com serial=2396568027

`top`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.zdnscloud.com` ⭐
	NS	`a.zdnscloud.cn`
	NS	`b.zdnscloud.cn`
	NS	`c.zdnscloud.com`
	NS	`d.zdnscloud.com`
	NS	`e.zdnscloud.cn` ⚠️ Not in parent delegation
	NS	`f.zdnscloud.cn`
	NS	`g.zdnscloud.com` ⚠️ Not in zone NS records
	NS	`i.zdnscloud.cn`
	NS	`j.zdnscloud.com`
	TXT	`2026-04-13_21:45:01`
	SOA	`a.zdnscloud.com`td_dns_gtld@knet.cn serial=1395529722

⚠️ On DNS blocklist: tif

Same first word

ph-expresss.top

DNS History

10 records (6 active, 4 former)

●NSkeira.ns.cloudflare.com2026-02-25 → 2026-04-13 · 2 obs

● 2026-02-25 07:18:18
● 2026-04-13 13:49:16

●NSlogan.ns.cloudflare.com2026-02-25 → 2026-04-13 · 2 obs

● 2026-02-25 07:18:18
● 2026-04-13 13:49:16

●A104.21.43.1042026-02-25 → 2026-04-13 · 6 obs

● 2026-02-25 07:18:18
● 2026-03-12 03:29:56
○ 2026-03-19 07:28:02
○ 2026-03-19 08:04:42
● 2026-04-13 13:49:14
● 2026-04-13 13:49:16

●A172.67.178.342026-02-25 → 2026-04-13 · 6 obs

● 2026-02-25 07:18:18
● 2026-03-12 03:29:56
○ 2026-03-19 07:28:02
○ 2026-03-19 08:04:42
● 2026-04-13 13:49:14
● 2026-04-13 13:49:16

○A188.114.96.02026-03-19 → 2026-03-19 · 5 obs

○ 2026-03-12 03:29:56
● 2026-03-19 07:28:02
● 2026-03-19 08:04:42
○ 2026-04-13 13:49:14
○ 2026-04-13 13:49:16

○A188.114.97.02026-03-19 → 2026-03-19 · 5 obs

○ 2026-03-12 03:29:56
● 2026-03-19 07:28:02
● 2026-03-19 08:04:42
○ 2026-04-13 13:49:14
○ 2026-04-13 13:49:16

●A2606:4700:3033::6815:2b682026-02-25 → 2026-04-13 · 6 obs

● 2026-02-25 07:18:18
● 2026-03-12 03:29:56
○ 2026-03-19 07:28:02
○ 2026-03-19 08:04:42
● 2026-04-13 13:49:14
● 2026-04-13 13:49:16

●A2606:4700:3036::ac43:b2222026-02-25 → 2026-04-13 · 6 obs

● 2026-02-25 07:18:18
● 2026-03-12 03:29:56
○ 2026-03-19 07:28:02
○ 2026-03-19 08:04:42
● 2026-04-13 13:49:14
● 2026-04-13 13:49:16

○A2a06:98c1:3120::2026-03-19 → 2026-03-19 · 5 obs

○ 2026-03-12 03:29:56
● 2026-03-19 07:28:02
● 2026-03-19 08:04:42
○ 2026-04-13 13:49:14
○ 2026-04-13 13:49:16

○A2a06:98c1:3121::2026-03-19 → 2026-03-19 · 5 obs

○ 2026-03-12 03:29:56
● 2026-03-19 07:28:02
● 2026-03-19 08:04:42
○ 2026-04-13 13:49:14
○ 2026-04-13 13:49:16

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
top	c.zdnscloud.com, f.zdnscloud.cn, a.zdnscloud.cn, g.zdnscloud.com...	-
ph-expresss.top	keira.ns.cloudflare.com, logan.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.193.198

NS records: keira.ns.cloudflare.com, logan.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for ph-expresss.top (unsigned zone)

⏱️ Timing

Total: 170ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.178.34, 104.21.43.104`
AAAA	2	`2606:4700:3036::ac43:b222, 2606:4700:3033::6815:2b68`
NS	2	`keira.ns.cloudflare.com, logan.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`keira.ns.cloudflare.com dns.cloudflare.c`

Analysis

IP Addresses

ph-expresss.top maps to four IP numbers: 2606:4700:3033::6815:2b68, 2606:4700:3036::ac43:b222, 104.21.43.104 and 172.67.178.34.

Other host names such as h3zbrawl.com, confirmation-id3973211.com, ufafeya.top, www.travuchka.ru and f722a636676a.f722a636676a.xmebel.pl share IPs with ph-expresss.top.

Name Servers

Two name servers keira.ns.cloudflare.com and logan.ns.cloudflare.com handle the delegation for ph-expresss.top.

ph-expresss.top shares the same name server setup as other domains, for example www.protechnologiesllc.com, protechnologiesllc.com, redwingclub.ch, digiti.be and sacatulicencia.cl.

ph-expresss.top at least partially shares name servers with other domains, for example juwelierkremer.nl, hihiglobal.com, cfdcb00cd081b618.com, flowers-tula.ru and turismodeushuaia.com.

These name servers are commonly used with davina.ns.cloudflare.com and cheryl.ns.cloudflare.com and adaline.ns.cloudflare.com.

Host names with six IP numbers:

keira.ns.cloudflare.com points to 2606:4700:50::a29f:26ce, 2803:f800:50::6ca2:c2ce, 2a06:98c1:50::ac40:22ce, 108.162.194.206, 162.159.38.206 and 172.64.34.206.

logan.ns.cloudflare.com points to 2606:4700:58::adf5:3bc6, 2803:f800:50::6ca2:c1c6, 2a06:98c1:50::ac40:21c6, 108.162.193.198, 172.64.33.198 and 173.245.59.198.

ph-expresss.top - robtex.com

ph-expresss.top

top

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

Analysis

IP Addresses

Name Servers

`ph-expresss.top`

`top`