{
  "website": "*.duckdns.org",
  "tags": [
    "Phishing",
    "C&C"
  ],
  "service_provider": "DuckDNS",
  "phishing": "Attackers use the Dynamic DNS service DuckDNS for phishing purposes.",
  "command_and_control": "New Norman Cryptominer used DuckDNS as a C&C server.",
  "exfiltration": "None",
  "download": "None",
  "sample_url": "https://www.joesandbox.com/analysis/510752/0/html",
  "created": "2021-11-10",
  "last_update": "2021-11-10",
  "credits": "mr.d0x",
  "detail_path": "/site/2a2e6475636b646e732e6f7267",
  "detail_slug": "2a2e6475636b646e732e6f7267",
  "detail_url": "https://lots-project.com/site/2a2e6475636b646e732e6f7267",
  "scraped_at": "2026-06-16T11:57:56Z"
}