primaryjet.duckdns.org
Classification: Malicious
primaryjet.duckdns.org is a malicious hostname. Linked to Nanocore malware. 3 sightings from Hybrid-Analysis and ThreatFox Abuse.ch, last seen 2023-09-29.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 08:39:36.
MITRE ATT&CK associations
Malware families: NANOCORE (S0336)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Nanocore RAT | ThreatFox Abuse.ch | 2023-09-27 18:44:50 | 2023-09-29 18:21:51 | malicious-activity | S0336 NanoCore |
| Kryptik.RPA | Hybrid-Analysis | 2019-05-22 18:45:36 | 2019-05-22 18:45:36 | ||
| Generic.Malware | Hybrid-Analysis | 2019-05-17 19:30:09 | 2019-05-17 19:30:09 |
Tags
c2 historicalandnew nanocore rat nancratIP addresses resolved by this hostname
- 54.37.235.82 (2019-05-17 19:30:11)
- 192.169.69.25 (2026-10-17 08:39:36)
Whois information
- Domain
- duckdns.org
- TLD
- org
- First indexed
- 2019-05-17 19:30:09
- Last updated
- 2026-10-17 08:39:36