replace.so - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

replace.so

DNSSEC⚠️ Not signed
A2606:4700:3035::6815:29b0πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3037::ac43:9513πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.41.176Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.149.19πŸ‡ΊπŸ‡Έ Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSaisha.ns.cloudflare.com ⭐
A2606:4700:50::a29f:26baπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRaisha.ns.cloudflare.com
A2803:f800:50::6ca2:c2baπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRaisha.ns.cloudflare.com
A2a06:98c1:50::ac40:22baπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRaisha.ns.cloudflare.com
A108.162.194.186πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRaisha.ns.cloudflare.com
A162.159.38.186Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRaisha.ns.cloudflare.com
A172.64.34.186πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRaisha.ns.cloudflare.com
NSburt.ns.cloudflare.com
A2606:4700:58::adf5:3b4fπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRburt.ns.cloudflare.com
A2803:f800:50::6ca2:c14fπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRburt.ns.cloudflare.com
A2a06:98c1:50::ac40:214fπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRburt.ns.cloudflare.com
A108.162.193.79πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRburt.ns.cloudflare.com
A172.64.33.79πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRburt.ns.cloudflare.com
A173.245.59.79πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRburt.ns.cloudflare.com
TXTgoogle-site-verification=dtWc4URbnRKKWgPfESqArA5Olm1rXKagpOI_-dRxuwU
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.41.176, 172.67.149.19
IPv6 hints2606:4700:3035::6815:29b0, 2606:4700:3037::ac43:9513
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=101, name=cloudflare-ech.com
SOAaisha.ns.cloudflare.comdns@cloudflare.com serial=2416529255

so

DNSSEC⚠️ Not signed
NSd.nic.so ⭐
NSe.nic.so
TXTGeneration Time ISO 8601: 2026-10-22 02:00:03
TXTGeneration Time: 1792634403
SOAd.nic.sohostmaster@nic.so 2026-10-22 #2

Same first word

Similar names

Previous names

Next names

DNS History

10 records (6 active, 4 former)

NSaisha.ns.cloudflare.comburt.ns.cloudflare.comA104.21.41.176172.67.149.192606:4700:3035::6815:29b02606:4700:3037::ac43:9513188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSaisha.ns.cloudflare.com2026-10-03 β†’ 2026-10-22 Β· 2 obs
● 2026-10-03 19:36:34
● 2026-10-22 02:18:04
●NSburt.ns.cloudflare.com2026-10-03 β†’ 2026-10-22 Β· 2 obs
● 2026-10-03 19:36:34
● 2026-10-22 02:18:04
●A104.21.41.1762026-10-15 β†’ 2026-10-22 Β· 3 obs
β—‹ 2026-10-03 19:36:34
● 2026-10-15 11:18:22
● 2026-10-22 02:18:04
●A172.67.149.192026-10-15 β†’ 2026-10-22 Β· 3 obs
β—‹ 2026-10-03 19:36:34
● 2026-10-15 11:18:22
● 2026-10-22 02:18:04
β—‹A188.114.96.02026-10-03 β†’ 2026-10-03 Β· 3 obs
● 2026-10-03 19:36:34
β—‹ 2026-10-15 11:18:22
β—‹ 2026-10-22 02:18:04
β—‹A188.114.97.02026-10-03 β†’ 2026-10-03 Β· 3 obs
● 2026-10-03 19:36:34
β—‹ 2026-10-15 11:18:22
β—‹ 2026-10-22 02:18:04
●A2606:4700:3035::6815:29b02026-10-15 β†’ 2026-10-22 Β· 3 obs
β—‹ 2026-10-03 19:36:34
● 2026-10-15 11:18:22
● 2026-10-22 02:18:04
●A2606:4700:3037::ac43:95132026-10-15 β†’ 2026-10-22 Β· 3 obs
β—‹ 2026-10-03 19:36:34
● 2026-10-15 11:18:22
● 2026-10-22 02:18:04
β—‹A2a06:98c1:3120::2026-10-03 β†’ 2026-10-03 Β· 3 obs
● 2026-10-03 19:36:34
β—‹ 2026-10-15 11:18:22
β—‹ 2026-10-22 02:18:04
β—‹A2a06:98c1:3121::2026-10-03 β†’ 2026-10-03 Β· 3 obs
● 2026-10-03 19:36:34
β—‹ 2026-10-15 11:18:22
β—‹ 2026-10-22 02:18:04

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
sod.nic.so, e.nic.so4 records
replace.soaisha.ns.cloudflare.com, burt.ns.cloudflare.com-

βœ… Authoritative Response

Server:172.64.33.79

NS records: aisha.ns.cloudflare.com, burt.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for so (unsigned zone)

⏱️ Timing

Total: 1560ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.149.19, 104.21.41.176
AAAA22606:4700:3035::6815:29b0, 2606:4700:3037::ac43:9513
NS2aisha.ns.cloudflare.com, burt.ns.cloudflare.com
TXT1google-site-verification=dtWc4URbnRKKWgP
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1aisha.ns.cloudflare.com dns.cloudflare.c

πŸ“Œ Glue Records Collected

Total: 4

In-bailiwick: 4 (d.nic.so, e.nic.so, d.nic.so...)

Analysis

IP Addresses

replace.so has four IP addresses: 104.21.41.176, 172.67.149.19, 2606:4700:3035::6815:29b0 and 2606:4700:3037::ac43:9513.

ialubeji.xyz, newfieldboro.net, sarkaricyber.in plus two other host names have IP numbers in common with replace.so.

Name Servers

Two name servers handle the delegation for replace.so: aisha.ns.cloudflare.com and burt.ns.cloudflare.com.

The name server configuration of replace.so is shared with other domains, for instance holosfiduc.autos, 641d.buzz, zfhs.cc and two others.

replace.so partially shares its NS delegation with several other domains, including marco-deb.workers.dev, amber-bird-cloud.pages.dev, mnirqwt.info and two others.

These name servers are regularly seen alongside greg.ns.cloudflare.com and desi.ns.cloudflare.com as name servers.

Hosts with 6 IP addresses each:

aisha.ns.cloudflare.com resolves to 108.162.194.186, 162.159.38.186 and 172.64.34.186 among others, with 3 other IP addresses in total.

burt.ns.cloudflare.com resolves to 108.162.193.79, 172.64.33.79 and 173.245.59.79 among others, with 3 other IP addresses in total.