ebase.duckdns.org
Classification: Malicious
ebase.duckdns.org is a malicious hostname. Linked to Warzonerat malware. Reported by ThreatFox Abuse.ch and Hybrid-Analysis (Ave Maria), last seen 2023-09-29.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 04:38:37.
MITRE ATT&CK associations
Malware families: WARZONERAT (S0670)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Ave Maria | ThreatFox Abuse.ch | 2023-09-27 13:53:33 | 2023-09-29 13:54:57 | malicious-activity | S0670 WarzoneRAT |
| Gen:Variant.Strictor | Hybrid-Analysis | 2019-09-03 21:00:31 | 2019-09-03 21:00:31 |
Tags
c2 historicalandnew warzonerat ave_maria avemariarat warzone rat avemariaIP addresses resolved by this hostname
- 194.5.98.56 (2019-09-03 21:00:31)
- 192.169.69.25 (2026-10-18 04:38:37)
Whois information
- Domain
- duckdns.org
- TLD
- org
- First indexed
- 2019-09-03 21:00:31
- Last updated
- 2026-10-18 04:38:37