Hostname

express.ms

Last fetched Fri, 22 May 2026 17:44:41 GMT

express.ms resolves to 1 IPv4 address operated by PETAFUELFSCAS in RU. WHOIS lists registrar:101domain grs ltd. as the registrar.

Nutrition Label

Resolution chain

express.ms resolves to 1 distinct IPv4 address via WhisperGraph DNS data. Each row links to the IP, prefix, and announcing ASN.

IP	Prefix	ASN	Operator	Country
84.201.185.125	84.201.184.0/22	AS200350	PETAFUELFSCAS	RU

WHOIS identity

Registrar: registrar:101domain grs ltd.
Organization: redacted | eu registrar
Contact emails: —

Subdomains

14 observed subdomains of express.ms.

Subdomain
dl.express.ms
www.express.ms
vip.express.ms
updates.express.ms
rostec.express.ms
progress.express.ms
ns3.express.ms
ns2.express.ms
ns1.express.ms
node1b.express.ms
node1a.express.ms
mail.express.ms
express.express.ms
docs.express.ms

Web-graph footprint

Distinct hostnames that link to or from express.ms in the public web crawl.

223 sites link to this hostname.

Sample inbound links

Sample outbound links

Threat posture

History

Mail and authentication

MX records

mail.express.ms

SPF policy

3 SPF mechanisms authorising senders for express.ms.

Mechanism	Target
SPF_INCLUDE	spf.unisender.com
SPF_IP	31.44.10.141
SPF_IP	31.44.12.245

Pivot deeper into the graph from express.ms.

Cypher and MCP

Reproduce the resolution chain directly against graph.whisper.security:

MATCH (h:HOSTNAME {name: "express.ms"})-[:RESOLVES_TO]->(ip:IPV4)
      -[:ANNOUNCED_BY]->(ap:ANNOUNCED_PREFIX)
      -[:ROUTES]->(asn:ASN)-[:HAS_NAME]->(n:ASN_NAME)
RETURN ip.name AS ip, ap.name AS prefix, asn.name AS asn, n.name AS operator
LIMIT 20

Or query Whisper from your own LLM workflow via the Whisper MCP server.