oxy01.duckdns.org
Classification: Malicious
oxy01.duckdns.org is a malicious hostname. Linked to Quasarrat, Asyncrat malware. Reported by ThreatFox Abuse.ch and Maltrail, last seen 2025-03-27.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 04:38:37.
MITRE ATT&CK associations
Malware families: QUASARRAT (S0262) ASYNCRAT (S1087)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Asyncrat | Maltrail | 2025-03-27 13:55:00 | 2025-03-27 13:55:00 | malicious-activity | S1087 AsyncRAT |
| Quasar RAT | ThreatFox Abuse.ch | 2023-09-10 21:12:10 | 2023-09-12 20:35:21 | malicious-activity | S0262 QuasarRAT |
Tags
c2 historicalandnew quasarrat cinarat yggdrasilIP addresses resolved by this hostname
- 43.248.166.127 (2023-09-13 02:33:24)
- 156.198.127.113 (2023-10-06 04:31:49)
- 102.47.120.226 (2023-10-10 04:26:26)
- 62.139.223.142 (2026-10-18 04:38:37)
Whois information
- AS name
- AS9381 Wharf T&T Ltd.
- Domain
- duckdns.org
- TLD
- org
- First indexed
- 2023-09-10 22:26:34
- Last updated
- 2026-10-18 04:38:37