buildagent.duckdns.org

Classification: Malicious

buildagent.duckdns.org is a malicious hostname. Linked to Remcos malware. Reported by ThreatFox Abuse.ch, last seen 2026-10-05.

Current activity

  • Online — resolving/reachable. Last checked 2026-10-18 04:37:53.
  • Command & Control server — Used by cybercriminals to control victim computers.

MITRE ATT&CK associations

Malware families: REMCOS (S0332)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Remcos ThreatFox Abuse.ch 2026-10-05 09:10:21 2026-10-05 09:25:04 botnet malicious-activity S0332 Remcos

Tags

remcos remcosrat remvio socmer

IP addresses resolved by this hostname

Whois information

Domain
duckdns.org
TLD
org
First indexed
2026-10-05 09:25:04
Last updated
2026-10-18 04:37:53