Welcome @ ZINKHOLE.org

What is this?
So you have found a domain which has IP address with revDNS pointing to *.zinkhole.org. All IP addresses which have revDNS pointing to *.zinkhole.org are used to sinkhole the malware. Click here to read more about sinkholing.

Why is this?
When the domain used by malware is sinkholed we can gather information about IP addresses which are infected with given malware. The gathered information about IP addresses from sinkholes are distributed to ISPs and CERTs so we can decrease amount of zombie infections.

Do I have to pay for this?
Absolutly not. We sinkhole the malware in the name of safer internet.

How can I check do you have collected my IP address?
We do not provide website where you can check this information. However if we find your IP (which is totally anonymous for us) then only your ISP can contact you.

How can I contact you?
If you would like to contact us, send an e-mail to

gerhard12@opereal.net witkacy58@opereal.net helmut95@opereal.com david46@opereal.com rolf49@csirt.pl helmut83@csirt.pl agnes71@bite-network.com radoslaw41@bite-network.com