hone32.work.gd
Classification: Malicious
hone32.work.gd is a malicious hostname. Linked to Asyncrat malware. 49 sightings from ThreatFox Abuse.ch, last seen 2025-09-01.
Current activity
- Online — resolving/reachable. Last checked 2026-11-07 04:39:21.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: ASYNCRAT (S1087)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| AsyncRAT | ThreatFox Abuse.ch | 2025-09-01 18:00:48 | 2025-09-01 18:00:49 | botnet malicious-activity | S1087 AsyncRAT |
Tags
asyncrat c2 domain rat triageIP addresses resolved by this hostname
- 45.74.8.89 (2025-09-01 18:17:04)
- 104.243.248.63 (2026-11-07 04:39:21)
Whois information
- Domain
- work.gd
- TLD
- gd
- First indexed
- 2025-09-01 18:17:03
- Last updated
- 2026-11-07 04:39:21