malware.cc - dns.ninja

malware.cc

cc

DNSSECπŸ”’ Signed (DS record present)
NSac1.nstld.com ⭐
NSac2.nstld.com
NSac3.nstld.com
NSac4.nstld.com
SOAac1.nstld.cominfo@verisign-grs.com serial=1781970899

Same first word

Similar names

DNS History

11 records (5 active, 6 former)

20162017201820192020202120222023202420252026NSns1.afternic.comns2.afternic.comverification-g8nwd62kj7zf8ncceqa5pj.ns101.verify.hnns1.sedoparking.comns2.sedoparking.comMXlocalhostmail.nickstel.comA13.248.169.4876.223.54.14664.190.63.22272.52.4.91
●NSns1.afternic.com2026-05-01 β†’ 2026-06-20 Β· 3 obs
β—‹ 2016-11-29 04:17:42
● 2026-05-01 03:30:38
● 2026-06-20 16:08:32
β—‹NSns1.sedoparking.com2015-06-25 β†’ 2016-11-29 Β· 4 obs
● 2015-06-25 15:35:48
● 2016-11-29 04:17:42
β—‹ 2026-05-01 03:30:38
β—‹ 2026-06-20 16:08:32
●NSns2.afternic.com2026-05-01 β†’ 2026-06-20 Β· 3 obs
β—‹ 2016-11-29 04:17:42
● 2026-05-01 03:30:38
● 2026-06-20 16:08:32
β—‹NSns2.sedoparking.com2015-06-25 β†’ 2016-11-29 Β· 4 obs
● 2015-06-25 15:35:48
● 2016-11-29 04:17:42
β—‹ 2026-05-01 03:30:38
β—‹ 2026-06-20 16:08:32
●NSverification-g8nwd62kj7zf8ncceqa5pj.ns101.verify.hn2026-05-01 β†’ 2026-06-20 Β· 3 obs
β—‹ 2016-11-29 04:17:42
● 2026-05-01 03:30:38
● 2026-06-20 16:08:32
β—‹MXlocalhost2016-11-21 β†’ 2016-11-29 Β· 5 obs
β—‹ 2016-05-17 13:10:50
● 2016-11-21 22:02:36
● 2016-11-29 04:17:42
β—‹ 2026-05-01 03:30:38
β—‹ 2026-06-20 16:08:32
β—‹MXmail.nickstel.com2015-06-25 β†’ 2016-05-17 Β· 4 obs
● 2015-06-25 15:35:48
● 2016-05-17 13:10:50
β—‹ 2016-11-21 22:02:36
β—‹ 2026-06-20 16:08:32
●A13.248.169.482026-05-01 β†’ 2026-06-20 Β· 3 obs
β—‹ 2016-11-29 04:17:42
● 2026-05-01 03:30:38
● 2026-06-20 16:08:32
β—‹A64.190.63.2222026-05-01 β†’ 2026-06-20 Β· 2 obs
β—‹ 2026-05-01 03:30:38
β—‹ 2026-06-20 16:08:32
β—‹A72.52.4.912015-06-25 β†’ 2016-11-29 Β· 4 obs
● 2015-06-25 15:35:48
● 2016-11-29 04:17:42
β—‹ 2026-05-01 03:30:38
β—‹ 2026-06-20 16:08:32
●A76.223.54.1462026-05-01 β†’ 2026-06-20 Β· 3 obs
β—‹ 2016-11-29 04:17:42
● 2026-05-01 03:30:38
● 2026-06-20 16:08:32

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
ccac1.nstld.com, ac2.nstld.com, ac3.nstld.com, ac4.nstld.com-
malware.ccverification-g8nwd62kj7zf8ncceqa5pj.ns101.verify.hn, ns1.afternic.com, ns2.afternic.com-

βœ… Authoritative Response

Server:173.201.66.69

NS records: verification-g8nwd62kj7zf8ncceqa5pj.ns101.verify.hn, ns1.afternic.com, ns2.afternic.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for malware.cc (unsigned zone)

⏱️ Timing

Total: 3331ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A276.223.54.146, 13.248.169.48
NS2ns1.afternic.com, ns2.afternic.com
MX1. (pri: 0)
TXT1v=spf1 -all
SOA1ns2.afternic.com dns.jomax.net

Analysis

IP Addresses

malware.cc resolves to the IP addresses 13.248.169.48 and 76.223.54.146

Among the host names that share IP numbers with malware.cc are mansun.com, www.kpromo.com, bioai.net and two others.

Name Servers

The authoritative name servers for malware.cc are ns1.afternic.com, ns2.afternic.com and verification-g8nwd62kj7zf8ncceqa5pj.ns101.verify.hn β€” three in total.

malware.cc has at least partial name server overlap with other domains, such as co(0x736578)-bezotkaza.hostingsiteforfree.com, zhengguiwangshangzhenqianyulecheng.bodog80.com, progoalie.com and two others.

It is common to find these name servers paired with the name servers verification-d3jclucsp89ganyqbydeny.ns101.verify.hn.

ns1.afternic.com, ns2.afternic.com and verification-g8nwd62kj7zf8ncceqa5pj.ns101.verify.hn all resolve to exactly two IP numbers apiece: ns1.afternic.com β†’ 97.74.98.69 and 2603:5:2126::45; ns2.afternic.com β†’ 173.201.66.69 and 2603:5:2226::45; verification-g8nwd62kj7zf8ncceqa5pj.ns101.verify.hn β†’ 13.248.169.48 and 76.223.54.146.