malware.net - dns.ninja

`malware.net`

DNSSEC	⚠️ Not signed
A	2606:4700:3034::ac43:d0cd^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::6815:1727^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.23.39^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.208.205^{🇺🇸 Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`gabriella.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:2686^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`gabriella.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c286^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`gabriella.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2286^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`gabriella.ns.cloudflare.com`
		A	108.162.194.134^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`gabriella.ns.cloudflare.com`
		A	162.159.38.134^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`gabriella.ns.cloudflare.com`
		A	172.64.34.134^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`gabriella.ns.cloudflare.com`
NS	`tosana.ns.cloudflare.com`
		A	2606:4700:58::a29f:2c2b^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tosana.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c32b^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`tosana.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:232b^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`tosana.ns.cloudflare.com`
		A	108.162.195.43^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tosana.ns.cloudflare.com`
		A	162.159.44.43^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tosana.ns.cloudflare.com`
		A	172.64.35.43^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tosana.ns.cloudflare.com`
MX	`in1-smtp.messagingengine.com` ⭐
		A	103.168.172.216^{🇺🇸 TELX-AS151847103.168.172.0/24 Fastmail Pty Ltd Level 2, 114 William Street}
			PTR	`phl-mx-01.messagingengine.com`
		A	103.168.172.217^{🇺🇸 TELX-AS151847103.168.172.0/24 Fastmail Pty Ltd Level 2, 114 William Street}
			PTR	`phl-mx-02.messagingengine.com`
		A	103.168.172.218^{🇺🇸 TELX-AS151847103.168.172.0/24 Fastmail Pty Ltd Level 2, 114 William Street}
			PTR	`phl-mx-03.messagingengine.com`
		A	103.168.172.219^{🇺🇸 TELX-AS151847103.168.172.0/24 Fastmail Pty Ltd Level 2, 114 William Street}
			PTR	`phl-mx-04.messagingengine.com`
		A	103.168.172.220^{🇺🇸 TELX-AS151847103.168.172.0/24 Fastmail Pty Ltd Level 2, 114 William Street}
			PTR	`phl-mx-05.messagingengine.com`
		A	103.168.172.221^{🇺🇸 TELX-AS151847103.168.172.0/24 Fastmail Pty Ltd Level 2, 114 William Street}
			PTR	`phl-mx-06.messagingengine.com`
		A	103.168.172.222^{🇺🇸 TELX-AS151847103.168.172.0/24 Fastmail Pty Ltd Level 2, 114 William Street}
			PTR	`phl-mx-07.messagingengine.com`
		A	103.168.172.223^{🇺🇸 TELX-AS151847103.168.172.0/24 Fastmail Pty Ltd Level 2, 114 William Street}
			PTR	`phl-mx-08.messagingengine.com`
MX	`in2-smtp.messagingengine.com`⁽²⁰⁾
		A	202.12.124.216^{TELX-AS151847202.12.124.0/24 Fastmail Pty Ltd Level 2, 114 William Street}
			PTR	`stl-mx-01.messagingengine.com`
		A	202.12.124.217^{TELX-AS151847202.12.124.0/24 Fastmail Pty Ltd Level 2, 114 William Street}
			PTR	`stl-mx-02.messagingengine.com`
		A	202.12.124.218^{TELX-AS151847202.12.124.0/24 Fastmail Pty Ltd Level 2, 114 William Street}
			PTR	`stl-mx-03.messagingengine.com`
		A	202.12.124.219^{TELX-AS151847202.12.124.0/24 Fastmail Pty Ltd Level 2, 114 William Street}
			PTR	`stl-mx-04.messagingengine.com`
TXT	`v=spf1 include:spf.messagingengine.com ?all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.23.39, 172.67.208.205
		IPv6 hints	2606:4700:3034::ac43:d0cd, 2606:4700:3036::6815:1727
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=18, name=cloudflare-ech.com
SOA	`gabriella.ns.cloudflare.com`dns@cloudflare.com serial=2408479870

`net`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1786001024

⚠️ On DNS blocklist: tif
WOT: SAFE (48/100)

Same first word

malware.me

malware.boutique

malware.watch

malware.no

malware.cz

malware.careers

malware.report

malware.es

malware.at

malware.exposed

malware.hosting

malware.com

malware.business

malware.services

malware.eu

malware.guide

malware.net

malware.pl

malware.fox

malware.be

malware.(0x706f726e)

malware.exchange

malware.today

malware.cn

malware.cc

malware.biz

malware.center

malware.se

malware.farm

malware.sx

malware.wtf

malware.cl

malware.directory

malware.su

malware.expert

malware.builders

malware.win

malware.mobi

malware.onl

malware.com.br

malware.zip

malware.ai

malware.xyz

malware.email

malware.ru

malware.guru

malware.tv

malware.fr

malware.ro

malware.nu

malware.lu

malware.community

malware.org

malware.re

Similar names

lawream.com

mawlare.net

wealarm.com

malwear.co

malwear.org

realawm.com

amerlaw.com

reamlaw.net

reamlaw.com

meralaw.com

walmare.com

marwael.fr

malwear.wtf

amlware.com

elmarwa.com

malwear.com

amrelaw.com

rawmale.com

DNS History

17 records (8 active, 9 former)

●NSgabriella.ns.cloudflare.com2026-02-15 → 2026-08-06 · 3 obs

○ 2016-11-14 05:27:06
● 2026-02-15 19:17:30
● 2026-08-06 07:30:50

○NSivy.ns.cloudflare.com2015-08-21 → 2016-11-14 · 4 obs

● 2015-08-21 04:20:02
● 2016-11-14 05:27:06
○ 2026-02-15 19:17:30
○ 2026-08-06 07:30:50

●NStosana.ns.cloudflare.com2026-02-15 → 2026-08-06 · 3 obs

○ 2016-11-14 05:27:06
● 2026-02-15 19:17:30
● 2026-08-06 07:30:50

○NSwoz.ns.cloudflare.com2015-08-21 → 2016-11-14 · 4 obs

● 2015-08-21 04:20:02
● 2016-11-14 05:27:06
○ 2026-02-15 19:17:30
○ 2026-08-06 07:30:50

●MXin1-smtp.messagingengine.com2026-02-15 → 2026-08-06 · 3 obs

○ 2016-11-14 05:27:06
● 2026-02-15 19:17:30
● 2026-08-06 07:30:50

●MXin2-smtp.messagingengine.com2026-02-15 → 2026-08-06 · 3 obs

○ 2016-11-14 05:27:06
● 2026-02-15 19:17:30
● 2026-08-06 07:30:50

○MXmail.malware.net2015-08-21 → 2016-11-14 · 4 obs

● 2015-08-21 04:20:02
● 2016-11-14 05:27:06
○ 2026-02-15 19:17:30
○ 2026-08-06 07:30:50

●A104.21.23.392026-02-15 → 2026-08-06 · 3 obs

○ 2016-11-14 05:27:06
● 2026-02-15 19:17:30
● 2026-08-06 07:30:50

○A104.31.92.1412015-08-21 → 2016-11-14 · 4 obs

● 2015-08-21 04:20:02
● 2016-11-14 05:27:06
○ 2026-02-15 19:17:30
○ 2026-08-06 07:30:50

○A104.31.93.1412015-08-21 → 2016-11-14 · 4 obs

● 2015-08-21 04:20:02
● 2016-11-14 05:27:06
○ 2026-02-15 19:17:30
○ 2026-08-06 07:30:50

●A172.67.208.2052026-02-15 → 2026-08-06 · 3 obs

○ 2016-11-14 05:27:06
● 2026-02-15 19:17:30
● 2026-08-06 07:30:50

○A2400:cb00:2048:1::681f:5c8d2015-08-21 → 2016-11-14 · 4 obs

● 2015-08-21 04:20:02
● 2016-11-14 05:27:06
○ 2026-02-15 19:17:30
○ 2026-08-06 07:30:50

○A2400:cb00:2048:1::681f:5d8d2015-08-21 → 2016-11-14 · 4 obs

● 2015-08-21 04:20:02
● 2016-11-14 05:27:06
○ 2026-02-15 19:17:30
○ 2026-08-06 07:30:50

○A2606:4700:3033::6815:17272026-02-15 → 2026-02-15 · 4 obs

○ 2016-11-14 05:27:06
● 2026-02-15 19:17:30
○ 2026-07-10 08:35:22
○ 2026-08-06 07:30:50

○A2606:4700:3033::ac43:d0cd2026-02-15 → 2026-02-15 · 4 obs

○ 2016-11-14 05:27:06
● 2026-02-15 19:17:30
○ 2026-07-10 08:35:22
○ 2026-08-06 07:30:50

●A2606:4700:3034::ac43:d0cd2026-07-10 → 2026-08-06 · 3 obs

○ 2026-02-15 19:17:30
● 2026-07-10 08:35:22
● 2026-08-06 07:30:50

●A2606:4700:3036::6815:17272026-07-10 → 2026-08-06 · 3 obs

○ 2026-02-15 19:17:30
● 2026-07-10 08:35:22
● 2026-08-06 07:30:50

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
net	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
malware.net	gabriella.ns.cloudflare.com, tosana.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.35.43

NS records: gabriella.ns.cloudflare.com, tosana.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for malware.net (unsigned zone)

⏱️ Timing

Total: 384ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.23.39, 172.67.208.205`
AAAA	2	`2606:4700:3036::6815:1727, 2606:4700:3034::ac43:d0cd`
NS	2	`gabriella.ns.cloudflare.com, tosana.ns.cloudflare.com`
MX	2	`in1-smtp.messagingengine.com (pri: 10), in2-smtp.messagingengine.com (pri: 20)`
TXT	1	`v=spf1 include:spf.messagingengine.com ?`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`gabriella.ns.cloudflare.com dns.cloudfla`

Analysis

IP Addresses

malware.net resolves to four IP addresses: 104.21.23.39, 172.67.208.205, 2606:4700:3034::ac43:d0cd and 2606:4700:3036::6815:1727.

Among the host names that share IP numbers with malware.net are us-bioovanish.com, grouptech.co.il, 136085.com and two others.

Name Servers

Two name servers handle the delegation for malware.net: gabriella.ns.cloudflare.com and tosana.ns.cloudflare.com.

malware.net has the same name server delegation as a number of other domains, such as slgmsog.com, winnercircle.win, rhslgm.com and two more.

malware.net shares at least some of its name servers with other domains, including lineoff.xyz, mud.com, ogty.jp and two others.

These name servers are frequently paired with the name servers jeremy.ns.cloudflare.com and harvey.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

gabriella.ns.cloudflare.com resolves to 108.162.194.134, 162.159.38.134 and 172.64.34.134 among others, with 3 other IP addresses in total.

tosana.ns.cloudflare.com resolves to 108.162.195.43, 162.159.44.43 and 172.64.35.43 among others, with 3 other IP addresses in total.

Mail Servers

The MX records for malware.net point to two mail servers: in1-smtp.messagingengine.com and in2-smtp.messagingengine.com.

malware.net has the same mail server arrangement as a number of other domains, for example gathr.tv, potts.es, cc-lp.com and two more.

malware.net shares at least some of its mail servers with other domains, such as dailyzen.com.

Host names resolving to 8 IP numbers:

in1-smtp.messagingengine.com resolves to 103.168.172.216, 103.168.172.217 and 103.168.172.218 among others, with 5 other IP addresses in total.

Hosts pointing to four IP addresses:

in2-smtp.messagingengine.com points to 202.12.124.216, 202.12.124.217, 202.12.124.218 and 202.12.124.219.