info1.duckdns.org
Classification: Malicious
info1.duckdns.org is a malicious hostname. Linked to Netwire malware. 38 sightings from 4 threat sources (NetWire RC, Malware site), last seen 2025-10-02.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 00:40:12.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: NETWIRE (S0198)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Netwire | Maltiverse Threat Observatory | 2025-10-02 02:01:06 | 2025-10-02 02:01:06 | S0198 NETWIRE | |
| NetWire RC | ThreatFox Abuse.ch | 2025-01-30 14:03:20 | 2025-02-01 13:44:22 | malicious-activity | |
| Malware site | Hybrid-Analysis | 2021-06-29 01:15:21 | 2021-06-29 01:15:21 | ||
| Malicious site | Hybrid-Analysis | 2021-06-29 01:00:10 | 2021-06-29 01:00:10 | ||
| Threats200220200050 | CronUp Threat Intel | 2020-02-20 03:52:26 | 2020-02-20 03:52:26 | ||
| TOP AMENAZAS - 19022020 | CronUp Threat Intel | 2020-02-19 16:42:34 | 2020-02-19 16:42:34 | ||
| Trojan.Generic | Hybrid-Analysis | 2019-01-07 13:45:12 | 2019-01-07 13:45:12 | ||
| Generic.Malware | Hybrid-Analysis | 2018-12-18 09:30:04 | 2018-12-18 09:30:04 | ||
| Kryptik.QHB | Hybrid-Analysis | 2018-11-30 14:15:07 | 2018-11-30 14:15:07 | ||
| Kryptik.OUA | Hybrid-Analysis | 2018-07-20 11:45:28 | 2018-07-20 11:45:28 |
Tags
30january2025 iocbottest netweird netwire recamIP addresses resolved by this hostname
- 185.125.205.94 (2018-07-20 11:45:28)
- 192.169.69.25 (2026-10-17 00:40:12)
Whois information
- AS name
- AS202750 Weiss Web LLC
- Domain
- duckdns.org
- TLD
- org
- First indexed
- 2018-07-20 11:45:28
- Last updated
- 2026-10-17 00:40:12