maprim[.]duckdns[.]org

PhishDestroy classifies maprim.duckdns.org as a credential harvesting phishing domain with an elevated risk level. This domain was flagged for actively attempting to steal user credentials by mimicking legitimate login portals.

This domain resolves to IP 185.80.128.26 and holds a valid Let's Encrypt SSL certificate. VirusTotal analysis shows 6 out of 95 security vendors have flagged this domain, indicating widespread suspicion. The domain is hosted on a dynamic DNS service (duckdns.org), a common tactic among phishing operators to rapidly deploy and rotate infrastructure. While the exact creation date is not provided, the use of a free dynamic DNS provider and the presence of a Let's Encrypt certificate suggest recent deployment and an attempt to appear legitimate. The low trust score and active phishing activity place users at significant risk of account compromise if they interact with this domain.

Users should avoid entering any credentials or sensitive information on maprim.duckdns.org. Organizations should block this domain at the network perimeter and warn employees about the risks of dynamic DNS services and phishing pages hosted on them. Immediate takedown requests should be filed with the hosting provider and domain registrar. Implementing email filtering rules to detect and quarantine messages referencing this domain is strongly recommended to prevent initial exposure.