acttwindows.duckdns.org

Classification: Malicious

acttwindows.duckdns.org is a malicious hostname. Linked to Remcos malware. 101 sightings from Threat Observatory and ThreatFox Abuse.ch, last seen 2025-02-09.

Current activity

  • Online — resolving/reachable. Last checked 2026-10-18 04:39:30.
  • Command & Control server — Used by cybercriminals to control victim computers.
  • Malware distribution — This indicator is distributing malware.

MITRE ATT&CK associations

Malware families: REMCOS (S0332)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Remcos Maltiverse Threat Observatory 2025-01-31 11:05:09 2025-02-09 18:40:06 S0332 Remcos
Remcos ThreatFox Abuse.ch 2025-01-31 09:44:14 2025-02-02 09:42:21 malicious-activity S0332 Remcos

Tags

c2 remcos remcosrat remvio socmer

IP addresses resolved by this hostname

Whois information

Domain
duckdns.org
TLD
org
First indexed
2025-01-31 10:17:04
Last updated
2026-10-18 04:39:30