hik.gettingheadfromduckysmom.st
Classification: Malicious
hik.gettingheadfromduckysmom.st is a malicious hostname. Linked to Menupass activity. Reported by ThreatFox Abuse.ch (Potassium), last seen 2026-10-02.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 00:39:18.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Intrusion sets: MENUPASS (G0045)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Potassium | ThreatFox Abuse.ch | 2026-10-02 07:28:38 | 2026-10-02 08:25:04 | botnet malicious-activity | G0045 menuPass |
Tags
botnet ddos mirai potassium woofIP addresses resolved by this hostname
- 45.198.224.124 (2026-10-16 08:40:52)
- 45.198.224.123 (2026-10-16 08:40:52)
- 224.124.45.198 (2026-10-18 00:39:18)
- 224.123.45.198 (2026-10-18 00:39:18)
- 203.219.204.76 (2026-10-18 00:39:18)
Whois information
- Domain
- gettingheadfromduckysmom.st
- TLD
- st
- Nameservers
- ns1.istanco.com, ns2.istanco.com
- Registrant
- Sirdio
- Contact email
- [email protected]
- Domain created
- 2026-09-29 00:00:00
- Domain expires
- 2027-09-29 00:00:00
- First indexed
- 2026-10-02 08:25:04
- Last updated
- 2026-10-18 00:39:18