malware.zip - dns.ninja

malware.zip

DNSSEC⚠️ Not signed
A88.198.57.211🇩🇪 Hetzner88.198.0.0/16 HETZNER-RZ-NBG-BLK4
PTRstatic.88-198-57-211.clients.your-server.de
NSsandy.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3adb🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsandy.ns.cloudflare.com
A2803:f800:50::6ca2:c0db🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRsandy.ns.cloudflare.com
A2a06:98c1:50::ac40:20db🇺🇸 Cloudflare2a06:98c1:50::/45
PTRsandy.ns.cloudflare.com
A108.162.192.219🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsandy.ns.cloudflare.com
A172.64.32.219🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsandy.ns.cloudflare.com
A173.245.58.219🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsandy.ns.cloudflare.com
NStrace.ns.cloudflare.com
A2606:4700:58::a29f:2cac🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtrace.ns.cloudflare.com
A2803:f800:50::6ca2:c3ac🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRtrace.ns.cloudflare.com
A2a06:98c1:50::ac40:23ac🇺🇸 Cloudflare2a06:98c1:50::/45
PTRtrace.ns.cloudflare.com
A108.162.195.172🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtrace.ns.cloudflare.com
A162.159.44.172Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtrace.ns.cloudflare.com
A172.64.35.172🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtrace.ns.cloudflare.com
SOAsandy.ns.cloudflare.comdns@cloudflare.com serial=2411401261

zip

DNSSEC🔒 Signed (DS record present)
NSns-tld1.charlestonroadregistry.com ⭐
NSns-tld2.charlestonroadregistry.com
NSns-tld3.charlestonroadregistry.com
NSns-tld4.charlestonroadregistry.com
NSns-tld5.charlestonroadregistry.com
SOAns-tld1.charlestonroadregistry.comcloud-dns-hostmaster@google.com serial=1
⚠️ On DNS blocklist: spam-tlds
🔒 HSTS Preload (+subdomains)

Same first word

malware.careers
malware.report
malware.es
malware.at
malware.exposed
malware.hosting
malware.com
malware.business
malware.services
malware.eu
malware.guide
malware.net
malware.pl
malware.fox
malware.be
malware.(0x706f726e)
malware.exchange
malware.today
malware.cn
malware.cc
malware.biz
malware.center
malware.se
malware.farm
malware.sx
malware.wtf
malware.cl
malware.directory
malware.su
malware.expert
malware.builders
malware.win
malware.mobi
malware.onl
malware.com.br
malware.zip
malware.ai
malware.xyz
malware.email
malware.ru
malware.guru
malware.tv
malware.fr
malware.ro
malware.nu
malware.lu
malware.org
malware.re
malware.me
malware.boutique
malware.watch
malware.no
malware.cz

Similar names

malwear.org
realawm.com
amerlaw.com
reamlaw.net
reamlaw.com
meralaw.com
walmare.com
marwael.fr
malwear.wtf
amlware.com
elmarwa.com
malwear.com
amrelaw.com
rawmale.com
lawream.com
mawlare.net
wealarm.com
malwear.co

DNS History

3 records (3 active, 0 former)

NSsandy.ns.cloudflare.comtrace.ns.cloudflare.comA88.198.57.211
●NSsandy.ns.cloudflare.com2026-06-06 → 2026-08-07 · 2 obs
● 2026-06-06 17:36:12
● 2026-08-07 09:40:52
●NStrace.ns.cloudflare.com2026-06-06 → 2026-08-07 · 2 obs
● 2026-06-06 17:36:12
● 2026-08-07 09:40:52
●A88.198.57.2112026-06-06 → 2026-08-07 · 2 obs
● 2026-06-06 17:36:12
● 2026-08-07 09:40:52

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
zipns-tld2.charlestonroadregistry.com, ns-tld1.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com...10 records
malware.ziptrace.ns.cloudflare.com, sandy.ns.cloudflare.com-

✅ Authoritative Response

Server:162.159.44.172

NS records: trace.ns.cloudflare.com, sandy.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for malware.zip (unsigned zone)

⏱️ Timing

Total: 420ms | Queries: -

📄 Records

TypeCountSample Data
A188.198.57.211
NS2sandy.ns.cloudflare.com, trace.ns.cloudflare.com
SOA1sandy.ns.cloudflare.com dns.cloudflare.c

📌 Glue Records Collected

Total: 10

Out-of-bailiwick: 10 (ns-tld5.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com...)

Analysis

IP Addresses

malware.zip resolves to one IP address: 88.198.57.211.

Host names like static.88-198-57-211.clients.your-server.de are further examples that share IP numbers with malware.zip.

Name Servers

Two name servers handle the delegation for malware.zip: sandy.ns.cloudflare.com and trace.ns.cloudflare.com.

malware.zip uses the same name servers as several other domains — among them id-331.digital, srtshopreview.vip, callteam.org and two more.

malware.zip has at least partial name server overlap with other domains, such as syhlz21.top, asd-amd.com, gading.de and two others.

It is common to find these name servers paired with the name servers becky.ns.cloudflare.com, elsa.ns.cloudflare.com, jerry.ns.cloudflare.com and terin.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

sandy.ns.cloudflare.com resolves to 108.162.192.219, 172.64.32.219 and 173.245.58.219 among others, with 3 other IP addresses in total.

trace.ns.cloudflare.com resolves to 108.162.195.172, 162.159.44.172 and 172.64.35.172 among others, with 3 other IP addresses in total.