darkstack.co - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

darkstack.co

DNSSEC⚠️ Not signed
A2606:4700:3032::6815:11daπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3032::ac43:b258Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.17.218Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.178.88Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSjocelyn.ns.cloudflare.com ⭐
NSphil.ns.cloudflare.com
A2606:4700:58::adf5:3b89Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A2803:f800:50::6ca2:c189Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
A2a06:98c1:50::ac40:2189Cloudflare2a06:98c1:50::/45
A108.162.193.137Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A172.64.33.137Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A173.245.59.137Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
MXdarkstack-co.mail.protection.outlook.com ⭐
TXTv=spf1 include:spf.protection.outlook.com -all
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.17.218, 172.67.178.88
IPv6 hints2606:4700:3032::6815:11da, 2606:4700:3032::ac43:b258
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=232, name=cloudflare-ech.com
SOAjocelyn.ns.cloudflare.comdns@cloudflare.com serial=2413915513

co

DNSSECπŸ”’ Signed (DS record present)
NSns0.centralnic.net ⭐
NSa.registrydns.co
NSb.registrydns.co
NSc.registrydns.co
NSd.registrydns.co
SOAns0.centralnic.nethostmaster@centralnic.net serial=1759771792

Subdomains

Same first word

Similar names

DNS History

16 records (7 active, 9 former)

20162017201820192020202120222023202420252026NSjocelyn.ns.cloudflare.comphil.ns.cloudflare.comns1.hover.comns2.hover.comMXdarkstack-co.mail.protection.outlook.commx.hover.com.cust.hostedemail.comA104.21.17.218172.67.178.882606:4700:3032::6815:11da2606:4700:3032::ac43:b258104.131.169.5552.7.155.1852.7.179.554.172.237.31CNAMEpr-co-suspensions.go.coreg-pr-web-suspensionpages-go-co-1680484254.us-east-1.elb.amazonaws.com
●NSjocelyn.ns.cloudflare.com2026-09-07 β†’ 2026-10-02 Β· 3 obs
β—‹ 2016-08-12 03:33:32
● 2026-09-07 13:50:42
● 2026-10-02 15:20:44
β—‹NSns1.hover.com2015-05-30 β†’ 2016-03-25 Β· 4 obs
● 2015-05-30 01:07:58
● 2016-03-25 07:09:24
β—‹ 2016-08-12 03:33:32
β—‹ 2026-10-02 15:20:44
β—‹NSns2.hover.com2015-05-30 β†’ 2016-03-25 Β· 4 obs
● 2015-05-30 01:07:58
● 2016-03-25 07:09:24
β—‹ 2016-08-12 03:33:32
β—‹ 2026-10-02 15:20:44
●NSphil.ns.cloudflare.com2026-09-07 β†’ 2026-10-02 Β· 3 obs
β—‹ 2016-08-12 03:33:32
● 2026-09-07 13:50:42
● 2026-10-02 15:20:44
●MXdarkstack-co.mail.protection.outlook.com2026-09-07 β†’ 2026-10-02 Β· 3 obs
β—‹ 2016-08-12 03:33:32
● 2026-09-07 13:50:42
● 2026-10-02 15:20:44
β—‹MXmx.hover.com.cust.hostedemail.com2015-05-30 β†’ 2016-03-25 Β· 4 obs
● 2015-05-30 01:07:58
● 2016-03-25 07:09:24
β—‹ 2016-08-12 03:33:32
β—‹ 2026-10-02 15:20:44
β—‹A104.131.169.552015-05-30 β†’ 2016-03-25 Β· 4 obs
● 2015-05-30 01:07:58
● 2016-03-25 07:09:24
β—‹ 2016-08-12 03:33:32
β—‹ 2026-10-02 15:20:44
●A104.21.17.2182026-09-07 β†’ 2026-10-02 Β· 3 obs
β—‹ 2017-04-03 16:05:58
● 2026-09-07 13:50:42
● 2026-10-02 15:20:44
●A172.67.178.882026-09-07 β†’ 2026-10-02 Β· 3 obs
β—‹ 2017-04-03 16:05:58
● 2026-09-07 13:50:42
● 2026-10-02 15:20:44
●A2606:4700:3032::6815:11da2026-09-07 β†’ 2026-10-02 Β· 3 obs
β—‹ 2017-04-03 16:05:58
● 2026-09-07 13:50:42
● 2026-10-02 15:20:44
●A2606:4700:3032::ac43:b2582026-09-07 β†’ 2026-10-02 Β· 3 obs
β—‹ 2017-04-03 16:05:58
● 2026-09-07 13:50:42
● 2026-10-02 15:20:44
β—‹A52.7.155.182016-08-12 β†’ 2016-08-12 Β· 4 obs
β—‹ 2016-03-25 07:09:24
● 2016-08-12 03:33:32
β—‹ 2017-04-03 16:05:58
β—‹ 2026-10-02 15:20:44
β—‹A52.7.179.52016-08-12 β†’ 2016-08-12 Β· 4 obs
β—‹ 2016-03-25 07:09:24
● 2016-08-12 03:33:32
β—‹ 2017-04-03 16:05:58
β—‹ 2026-10-02 15:20:44
β—‹A54.172.237.312016-08-12 β†’ 2016-08-12 Β· 4 obs
β—‹ 2016-03-25 07:09:24
● 2016-08-12 03:33:32
β—‹ 2017-04-03 16:05:58
β—‹ 2026-10-02 15:20:44
β—‹CNAMEpr-co-suspensions.go.co2016-08-12 β†’ 2016-08-12 Β· 3 obs
● 2016-08-12 03:33:32
β—‹ 2017-04-03 16:05:58
β—‹ 2026-10-02 15:20:44
β—‹CNAMEreg-pr-web-suspensionpages-go-co-1680484254.us-east-1.elb.amazonaws.com2016-08-12 β†’ 2016-08-12 Β· 3 obs
● 2016-08-12 03:33:32
β—‹ 2017-04-03 16:05:58
β—‹ 2026-10-02 15:20:44

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
coa.registrydns.co, b.registrydns.co, c.registrydns.co, d.registrydns.co-
darkstack.cophil.ns.cloudflare.com, jocelyn.ns.cloudflare.com-

βœ… Authoritative Response

Server:173.245.58.174

NS records: phil.ns.cloudflare.com, jocelyn.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for darkstack.co (unsigned zone)

⏱️ Timing

Total: 1651ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2104.21.17.218, 172.67.178.88
AAAA22606:4700:3032::ac43:b258, 2606:4700:3032::6815:11da
NS2jocelyn.ns.cloudflare.com, phil.ns.cloudflare.com
MX1darkstack-co.mail.protection.outlook.com
TXT1v=spf1 include:spf.protection.outlook.co
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1jocelyn.ns.cloudflare.com dns.cloudflare

Analysis

Hierarchy

microsoft-decoder.darkstack.co is delegated beneath darkstack.co.

IP Addresses

darkstack.co points to the four IP addresses 104.21.17.218, 172.67.178.88, 2606:4700:3032::6815:11da and 2606:4700:3032::ac43:b258.

Name Servers

darkstack.co uses two name servers for its delegation: jocelyn.ns.cloudflare.com and phil.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

Hostname phil.ns.cloudflare.com directs to 108.162.193.137, 172.64.33.137 and 173.245.59.137 along with 3 other IP addresses.

Mail Servers

darkstack.co routes its mail through a single mail server, darkstack-co.mail.protection.outlook.com.