skysky.duckdns.org
Classification: Malicious
skysky.duckdns.org is a malicious hostname. Linked to Nanocore, Agent Tesla malware. Reported by 3 threat sources (Nanocore RAT), last seen 2025-03-24.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 04:39:53.
MITRE ATT&CK associations
Malware families: NANOCORE (S0336) AGENT TESLA (S0331)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Agent Tesla | Maltrail | 2025-02-25 16:41:37 | 2025-03-24 11:43:20 | malicious-activity | S0331 Agent Tesla |
| Nanocore RAT | ThreatFox Abuse.ch | 2023-09-27 18:43:41 | 2023-09-29 18:22:57 | malicious-activity | S0336 NanoCore |
| Generic.Malware | Hybrid-Analysis | 2020-04-14 21:45:24 | 2020-04-14 21:45:24 |
Tags
c2 historicalandnew nanocore rat nancratIP addresses resolved by this hostname
- 23.105.131.196 (2020-04-14 21:45:24)
- 94.156.68.72 (2026-10-18 04:39:53)
Whois information
- AS name
- AS15003 Nobis Technology Group, LLC
- Domain
- duckdns.org
- TLD
- org
- First indexed
- 2020-04-14 21:45:24
- Last updated
- 2026-10-18 04:39:53