duquicks[.]com

Analysis indicates that duquicks.com was registered on 21 February 2026 through NiceNIC International Group Co., Limited. The domain resolves to 188.114.97.3, an address owned by AS13335 Cloudflare, Inc. in the United States, and is served via Cloudflare’s DNS (ashton.ns.cloudflare.com, virginia.ns.cloudflare.com). Technical fingerprinting shows a WordPress front‑end backed by MySQL and PHP, with Cloudflare providing HTTP/3 transport. No TLS certificate was observed, meaning the site operated without HTTPS encryption. The page title returned by the server is the literal string “duquicks.com”.

VirusTotal scans report that three of ninety‑five AV engines flagged the domain, and it is listed on a single external blocklist. PhishDestroy has also added duquicks.com to its blocklist. Current monitoring shows the site is offline, and no further HTTP response data are available. The lack of TLS combined with the use of a popular CMS suggests the operators leveraged a readily available web‑hosting stack to reduce development overhead. The presence of three vendor detections on VirusTotal, despite the overall low count, aligns with typical phishing hosting patterns where malicious payloads are identified by heuristics.

The single blocklist entry indicates limited exposure, but the inclusion by PhishDestroy underscores that security communities have already taken action. Because the site is currently offline, active exploitation cannot be observed, however the infrastructure components remain in place and could be re‑activated. Continuous threat‑intel feeds should be consulted for any resurgence, and security teams should audit outbound traffic for connections to 188.114.97.3 or its Cloudflare‑associated ranges. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑hosting on alternative IPs, and treat any future resolution of duquicks.com as malicious until a thorough re‑assessment confirms otherwise.