random5444[.]duckdns[.]org

The domain random5444.duckdns.org is currently active and poses a risk as a phishing entity. It has a VirusTotal detection score of 17 out of 95, indicating potential malicious intent. This domain does not clearly impersonate any legitimate service, but its existence on a dynamic DNS service raises concerns about its use for deceptive practices.

Registered with Gandi SAS, this domain has been active for over 12 years, suggesting a well-established presence. It operates from the IP address 198.18.0.241 and is listed on 2 blocklists, signaling that it has been flagged for suspicious behavior. The longevity of this domain combined with its current status indicates it may be used for ongoing phishing campaigns.

PhishDestroy is actively monitoring random5444.duckdns.org and has taken steps to report its malicious activities. We continue to assess the situation and will implement further actions as necessary to mitigate potential threats arising from this domain.