Welcome @ ZINKHOLE.org

What is this?
So you have found a domain which has IP address with revDNS pointing to *.zinkhole.org. All IP addresses which have revDNS pointing to *.zinkhole.org are used to sinkhole the malware. Click here to read more about sinkholing.

Why is this?
When the domain used by malware is sinkholed we can gather information about IP addresses which are infected with given malware. The gathered information about IP addresses from sinkholes are distributed to ISPs and CERTs so we can decrease amount of zombie infections.

Do I have to pay for this?
Absolutly not. We sinkhole the malware in the name of safer internet.

How can I check do you have collected my IP address?
We do not provide website where you can check this information. However if we find your IP (which is totally anonymous for us) then only your ISP can contact you.

How can I contact you?
If you would like to contact us, send an e-mail to

witkacy44@opereal.net agnes22@opereal.net witkacy16@opereal.com alison93@opereal.com witkacy14@csirt.pl radoslaw58@csirt.pl agnes79@bite-network.com anton52@bite-network.com