darkstack.co - dns.ninja

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

darkstack.co

DNSSEC⚠️ Not signed
A2606:4700:3032::6815:11daπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3032::ac43:b258πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.17.218Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.178.88πŸ‡ΊπŸ‡Έ Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSjocelyn.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3aaeπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjocelyn.ns.cloudflare.com
A2803:f800:50::6ca2:c0aeπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRjocelyn.ns.cloudflare.com
A2a06:98c1:50::ac40:20aeπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRjocelyn.ns.cloudflare.com
A108.162.192.174πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjocelyn.ns.cloudflare.com
A172.64.32.174πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjocelyn.ns.cloudflare.com
A173.245.58.174πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjocelyn.ns.cloudflare.com
NSphil.ns.cloudflare.com
A2606:4700:58::adf5:3b89πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRphil.ns.cloudflare.com
A2803:f800:50::6ca2:c189πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRphil.ns.cloudflare.com
A2a06:98c1:50::ac40:2189πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRphil.ns.cloudflare.com
A108.162.193.137πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRphil.ns.cloudflare.com
A172.64.33.137πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRphil.ns.cloudflare.com
A173.245.59.137πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRphil.ns.cloudflare.com
MXdarkstack-co.mail.protection.outlook.com ⭐
A2a01:111:f403:c95d::4πŸ‡¬πŸ‡§ Microsoft2a01:111:f000::/36
PTRmail-ph6pr04cu00104.inbound.protection.outlook.com
A2a01:111:f403:c95d::8πŸ‡¬πŸ‡§ Microsoft2a01:111:f000::/36
PTRmail-ph8pr21cu00200.inbound.protection.outlook.com
A2a01:111:f403:f906::πŸ‡ΊπŸ‡Έ Microsoft2a01:111:f000::/36
PTRmail-dm8pr21cu00100.inbound.protection.outlook.com
A2a01:111:f403:f912::πŸ‡ΊπŸ‡Έ Microsoft2a01:111:f000::/36
PTRmail-cy7pr21cu00100.inbound.protection.outlook.com
A52.101.41.201πŸ‡ΊπŸ‡Έ Microsoft52.96.0.0/12 MICROSOFT
PTRmail-byapr03cu00201.inbound.protection.outlook.com
A52.101.42.84πŸ‡ΊπŸ‡Έ Microsoft52.96.0.0/12 MICROSOFT
PTRmail-co1pr02cu00204.inbound.protection.outlook.com
A52.101.194.13πŸ‡ΊπŸ‡Έ Microsoft52.96.0.0/12 MICROSOFT
PTRmail-ch0pr04cu00605.inbound.protection.outlook.com
A52.101.194.152πŸ‡ΊπŸ‡Έ Microsoft52.96.0.0/12 MICROSOFT
TXTv=spf1 include:spf.protection.outlook.com include:amazonses.com -all
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.17.218, 172.67.178.88
IPv6 hints2606:4700:3032::6815:11da, 2606:4700:3032::ac43:b258
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=56, name=cloudflare-ech.com
SOAjocelyn.ns.cloudflare.comdns@cloudflare.com serial=2418078515

co

DNSSECπŸ”’ Signed (DS record present)
NSns0.centralnic.net ⭐
NSa.registrydns.co
NSb.registrydns.co
NSc.registrydns.co
NSd.registrydns.co
SOAns0.centralnic.nethostmaster@centralnic.net serial=1759787561

Subdomains

Same first word

Similar names

Previous names

Next names

DNS History

16 records (7 active, 9 former)

20162017201820192020202120222023202420252026NSjocelyn.ns.cloudflare.comphil.ns.cloudflare.comns1.hover.comns2.hover.comMXdarkstack-co.mail.protection.outlook.commx.hover.com.cust.hostedemail.comA104.21.17.218172.67.178.882606:4700:3032::6815:11da2606:4700:3032::ac43:b258104.131.169.5552.7.155.1852.7.179.554.172.237.31CNAMEpr-co-suspensions.go.coreg-pr-web-suspensionpages-go-co-1680484254.us-east-1.elb.amazonaws.com
●NSjocelyn.ns.cloudflare.com2026-09-07 β†’ 2026-10-23 Β· 3 obs
β—‹ 2016-08-12 03:33:32
● 2026-09-07 13:50:42
● 2026-10-23 14:48:20
β—‹NSns1.hover.com2015-05-30 β†’ 2016-03-25 Β· 4 obs
● 2015-05-30 01:07:58
● 2016-03-25 07:09:24
β—‹ 2016-08-12 03:33:32
β—‹ 2026-10-23 14:48:20
β—‹NSns2.hover.com2015-05-30 β†’ 2016-03-25 Β· 4 obs
● 2015-05-30 01:07:58
● 2016-03-25 07:09:24
β—‹ 2016-08-12 03:33:32
β—‹ 2026-10-23 14:48:20
●NSphil.ns.cloudflare.com2026-09-07 β†’ 2026-10-23 Β· 3 obs
β—‹ 2016-08-12 03:33:32
● 2026-09-07 13:50:42
● 2026-10-23 14:48:20
●MXdarkstack-co.mail.protection.outlook.com2026-09-07 β†’ 2026-10-23 Β· 3 obs
β—‹ 2016-08-12 03:33:32
● 2026-09-07 13:50:42
● 2026-10-23 14:48:20
β—‹MXmx.hover.com.cust.hostedemail.com2015-05-30 β†’ 2016-03-25 Β· 4 obs
● 2015-05-30 01:07:58
● 2016-03-25 07:09:24
β—‹ 2016-08-12 03:33:32
β—‹ 2026-10-23 14:48:20
β—‹A104.131.169.552015-05-30 β†’ 2016-03-25 Β· 4 obs
● 2015-05-30 01:07:58
● 2016-03-25 07:09:24
β—‹ 2016-08-12 03:33:32
β—‹ 2026-10-23 14:48:20
●A104.21.17.2182026-09-07 β†’ 2026-10-23 Β· 3 obs
β—‹ 2017-04-03 16:05:58
● 2026-09-07 13:50:42
● 2026-10-23 14:48:20
●A172.67.178.882026-09-07 β†’ 2026-10-23 Β· 3 obs
β—‹ 2017-04-03 16:05:58
● 2026-09-07 13:50:42
● 2026-10-23 14:48:20
●A2606:4700:3032::6815:11da2026-09-07 β†’ 2026-10-23 Β· 3 obs
β—‹ 2017-04-03 16:05:58
● 2026-09-07 13:50:42
● 2026-10-23 14:48:20
●A2606:4700:3032::ac43:b2582026-09-07 β†’ 2026-10-23 Β· 3 obs
β—‹ 2017-04-03 16:05:58
● 2026-09-07 13:50:42
● 2026-10-23 14:48:20
β—‹A52.7.155.182016-08-12 β†’ 2016-08-12 Β· 4 obs
β—‹ 2016-03-25 07:09:24
● 2016-08-12 03:33:32
β—‹ 2017-04-03 16:05:58
β—‹ 2026-10-23 14:48:20
β—‹A52.7.179.52016-08-12 β†’ 2016-08-12 Β· 4 obs
β—‹ 2016-03-25 07:09:24
● 2016-08-12 03:33:32
β—‹ 2017-04-03 16:05:58
β—‹ 2026-10-23 14:48:20
β—‹A54.172.237.312016-08-12 β†’ 2016-08-12 Β· 4 obs
β—‹ 2016-03-25 07:09:24
● 2016-08-12 03:33:32
β—‹ 2017-04-03 16:05:58
β—‹ 2026-10-23 14:48:20
β—‹CNAMEpr-co-suspensions.go.co2016-08-12 β†’ 2016-08-12 Β· 3 obs
● 2016-08-12 03:33:32
β—‹ 2017-04-03 16:05:58
β—‹ 2026-10-23 14:48:20
β—‹CNAMEreg-pr-web-suspensionpages-go-co-1680484254.us-east-1.elb.amazonaws.com2016-08-12 β†’ 2016-08-12 Β· 3 obs
● 2016-08-12 03:33:32
β—‹ 2017-04-03 16:05:58
β—‹ 2026-10-23 14:48:20

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
coc.registrydns.co, b.registrydns.co, d.registrydns.co, a.registrydns.co-
darkstack.cophil.ns.cloudflare.com, jocelyn.ns.cloudflare.com-

βœ… Authoritative Response

Server:172.64.33.137

NS records: phil.ns.cloudflare.com, jocelyn.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for darkstack.co (unsigned zone)

⏱️ Timing

Total: 1949ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2104.21.17.218, 172.67.178.88
AAAA22606:4700:3032::ac43:b258, 2606:4700:3032::6815:11da
NS2jocelyn.ns.cloudflare.com, phil.ns.cloudflare.com
MX1darkstack-co.mail.protection.outlook.com
TXT1v=spf1 include:spf.protection.outlook.co
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1jocelyn.ns.cloudflare.com dns.cloudflare

Analysis

Hierarchy

The domain microsoft-decoder.darkstack.co falls under the parent darkstack.co.

IP Addresses

darkstack.co points to the four IP addresses 104.21.17.218, 172.67.178.88, 2606:4700:3032::6815:11da and 2606:4700:3032::ac43:b258.

Two other host names, along with medicabilevde.com, 91baoliaow.top and shadowstack.dev, also share IP numbers with darkstack.co.

Name Servers

DNS delegation for darkstack.co points to two name servers: jocelyn.ns.cloudflare.com and phil.ns.cloudflare.com.

darkstack.co shares its NS records with other domains, for example paulprime.net, cf-workers-docker-io-ae0.pages.dev, lattitude-astro.pages.dev and two others.

At least some of darkstack.co's name servers are shared with other domains, for example 9cavnhtzgkqbv.workers.dev, inmo-pro.es, alexanderkaran.com and two more.

It is common for these name servers to be used in conjunction with the name servers malavika.ns.cloudflare.com, guy.ns.cloudflare.com and kurt.ns.cloudflare.com.

DNS names with 6 IP addresses:

jocelyn.ns.cloudflare.com has IP addresses 108.162.192.174, 172.64.32.174 and 173.245.58.174, plus 3 other.

phil.ns.cloudflare.com has IP addresses 108.162.193.137, 172.64.33.137 and 173.245.59.137, plus 3 other.

Mail Servers

The sole mail server for darkstack.co is darkstack-co.mail.protection.outlook.com.

With 8 IP addresses total, darkstack-co.mail.protection.outlook.com resolves to 52.101.41.201, 52.101.42.84, 52.101.194.13 and 5 others.