CF1758800080070-tsm20250925112947

NSLIST.NET - malware.watch

Search for IP or hostnames:

malware.watch checked at 2025-09-25T11:34:40.057Z 307ms 126/126/126 100% R:16

malware.watch

MXmail.protonmail.ch
A176.119.200.128🇨🇭 Proton AG
PTRmail.protonmail.ch
A185.70.42.128🇨🇭 Proton AG
PTRmail.protonmail.ch
A185.205.70.128🇫🇷 Proton AG
PTRmail.protonmail.ch
MXmailsec.protonmail.ch
A176.119.200.129🇨🇭 Proton AG
PTRmailsec.protonmail.ch
A185.70.42.129🇨🇭 Proton AG
PTRmailsec.protonmail.ch
A185.205.70.129🇫🇷 Proton AG
PTRmailsec.protonmail.ch
NSjosh.ns.cloudflare.com
A2606:4700:58::adf5:3b7e 🇺🇸 Cloudflare
PTRjosh.ns.cloudflare.com
A2803:f800:50::6ca2:c17e 🇨🇷 Cloudflare
PTRjosh.ns.cloudflare.com
A2a06:98c1:50::ac40:217e 🇺🇸 Cloudflare
PTRjosh.ns.cloudflare.com
A108.162.193.126🇺🇸 Cloudflare
PTRjosh.ns.cloudflare.com
A172.64.33.126🇺🇸 Cloudflare
PTRjosh.ns.cloudflare.com
A173.245.59.126🇺🇸 Cloudflare
PTRjosh.ns.cloudflare.com
NSlara.ns.cloudflare.com
A2606:4700:50::adf5:3a80 🇺🇸 Cloudflare
PTRlara.ns.cloudflare.com
A2803:f800:50::6ca2:c080 🇨🇷 Cloudflare
PTRlara.ns.cloudflare.com
A2a06:98c1:50::ac40:2080 🇺🇸 Cloudflare
PTRlara.ns.cloudflare.com
A108.162.192.128🇺🇸 Cloudflare
PTRlara.ns.cloudflare.com
A172.64.32.128🇺🇸 Cloudflare
PTRlara.ns.cloudflare.com
A173.245.58.128🇺🇸 Cloudflare
PTRlara.ns.cloudflare.com

watch

NSv0n0.nic.watch
NSv0n1.nic.watch
NSv0n2.nic.watch
NSv0n3.nic.watch
NSv2n0.nic.watch
NSv2n1.nic.watch

Up

Starts with same word

Starts similarily

AI analysis

malware.watch is the parent of lists.malware.watch.

malware.watch is delegated to two name servers: josh.ns.cloudflare.com and lara.ns.cloudflare.com.

malware.watch uses the same name server setup as other domains such as longviewadvisors.com, greeneforcongress2020.com, teamcam.org, spirepress.com and nwnn.org.

malware.watch shares name servers with other domains at least partially, for example hashtagchatter.com, ewastech.com, asfl.us, tigertropin.com and yazilimtoplulugu.com.

These name servers are commonly used with jeff.ns.cloudflare.com, alice.ns.cloudflare.com and amy.ns.cloudflare.com.

Host names with six IP numbers: host name josh.ns.cloudflare.com points to: 2606:4700:58::adf5:3b7e, 2803:f800:50::6ca2:c17e, 2a06:98c1:50::ac40:217e, 108.162.193.126, 172.64.33.126 and 173.245.59.126; host name lara.ns.cloudflare.com points to: 2606:4700:50::adf5:3a80, 2803:f800:50::6ca2:c080, 2a06:98c1:50::ac40:2080, 108.162.192.128, 172.64.32.128 and 173.245.58.128.

Two mail servers mail.protonmail.ch and mailsec.protonmail.ch handle malware.watch.

malware.watch shares the same mail server setup as other domains, for instance sjablonen4you.nl, djrefor.com, jewishmafia.org, pro-tech.fr and playerate.com.

malware.watch shares mail servers with other domains at least partially; for instance synhack.org, lodwich.net, celsmail.com, maestrosoft.gr and tolbert.us.

these mail servers are commonly used alongside alt1.aspmx.l.google.com and alt2.aspmx.l.google.com.

Host names with three IP numbers:

mail.protonmail.ch points to: 176.119.200.128, 185.70.42.128 and 185.205.70.128.

mailsec.protonmail.ch points to: 176.119.200.129, 185.70.42.129 and 185.205.70.129.

Perform reverse DNS lookup as well as normal forward DNS. Check Autonomous System Numbers (ASNs) and BGP connections between Internet Service Providers.
dbq

iwnVrNA CF johedugfp 2025-09-25