Skip to content
Bulwark BlackBulwark Black LLC
Latest
AI Infrastructure Is Becoming a Control Plane Attack SurfaceQScan and QTRouter Show Why Proxy Infrastructure Is an Espionage Force MultipliervCenter Exploitation Shows Patching Alone Is Not Incident ResponseEdge Infrastructure Convergence Shows Why Perimeter Devices Need Their Own Patch SLAsSigned ClickOnce Lures Show Why Hiring Workflows Need Endpoint GuardrailsShieldBreak Shows Why Endpoint Protection Needs Compensating ControlsAI-Enabled Malware Still Behaves Like MalwarePrivate APNs Are Becoming OT Attack PathsvCenter Exploitation Shows Why Control Planes Need ContainmentApollo Breach Shows Why Helpdesk Vishing Is a Cloud-Control ProblemBTR.sys Shows Why Trusted Security Drivers Need Behavioral MonitoringWeedHack Shows SEO Poisoning Is Malware Delivery InfrastructureAI Agent Incidents Need Task-Scoped Incident ResponseSDLC Supply-Chain Attacks Show Why Developer Tools Need Runtime Controls

Indicator of Compromise

duckdns[.]org

DomainSeen in 2 reportsWatch this →

A domain observed in malicious infrastructure. Block or monitor it in DNS and web proxies. Shown defanged for safe viewing; use Copy live value for the functional form.

Included in theDomains feed(live, machine-readable).

Seen in these reports

Cyber Security Blog·Aug 10, 2026

Aeternum Shows Why Blockchain-Based C2 Is a Practical Defense Problem

Cyber Security Blog·Jul 1, 2026

Ousaban Shows Banking Trojans Are Learning to Hide From Sandboxes

Related indicators

Indicators that appear alongside this one in the same reporting, often shared infrastructure or the same campaign.

0x04E25a563f159308FC3E15fE9Ccc9D2CF623D0cc0x16dA95799CB8aB203f83e01AFC030B1217198Da40x1D50703722729dD68e89D819F69eFc5Fb206bBe70x27c7c36981c1ed5cFA2DCDb4B43C27A6BaF6bEa80x4dcE7d4b1229F3705BDB70341484cF2EEE36432e0x55b4F951d5Ac035C21B170C73C0A930a641b718C0x6da31EB2A016074ffd5519326573E78E2677E4C80x737791081A398151195a753Fb49f9c1b8bc1fCDB0x75cD25791A60ab3451E2d2feB5ec46c6f541C2B80x7D2D8A4A6E8D89cf5C151C4f68A521490D9779B00x8d2BaEc2687F59eE1EE7BFd322D33325f5E004ee0xb0874252a7359AA701F3F144A1f03A6e0DA8aE6D0xb3EF2D08Bf25a7daB9d8b98d64E564eA1f6Db9240xb8fB2bfb182A172b29C365AD6CF743449975C4180xbD6e817Cc510EC3DA5651B5a3AC595d34C0CF1af0xC37fB924cF5996C9e676BBA399bDfc5F936B35720xC41342908f98E813862EDFe47Ac3af676F8098C90xc7199C1dbCd82c4E002327Aa3EC9158F434a6aCE0xcaf2c54e400437da717cf215181b170f65187abf0xCE476E6f4d83a7a086Cbcdf0FE2E8f221e47e81C0xD69A36439FffD145ADAcacB94fDe6f8b3546a3610xf9438b4E3200AE1611eD3d03310c803FDdf676720xfbC267200f9e5749045f32dbB55BB16615f1CE5F0xFDB8b139EeacD17ea7c10c256eA77Ba6Dff18D7d0xFdfB8c4e827c2d053749C8F2f2058548dde0d0731505eda3da68e2ff9919b55a31018bd30a991236f041aee835f3bc4e430ce505162[.]33[.]179[.]4618fd38988d58dd930f5992d448cc09a9400c1eafba76b820b9a83239ac48cf4e193[.]221[.]200[.]21919ac18a50abb48dc0ea9524850acfaec49359e6b3bcc67c6193c2d56da812c711e77992666acbbfa0d01fcefa9cc8fbdac291e0681b35745be27c6dfb159a375213[.]159[.]64[.]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
Browse all indicators →Machine-readable feeds →Extract IOCs from text →

Newsletter

The House-Of-L Brief.

Two short reads a day on markets, cyber threats, AI, and geopolitics. A "why it matters" line on every story.

Double opt-in. One-click unsubscribe on every issue. We never share your address.