css.tipinfolist.xyz
Classification: Malicious
css.tipinfolist.xyz is a malicious hostname. Linked to Amadey malware. Reported by ThreatFox Abuse.ch and Hybrid-Analysis, last seen 2023-11-10.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 16:35:16.
MITRE ATT&CK associations
Malware families: AMADEY (S1025)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2024-07-28 12:55:07 | 2025-05-11 16:01:03 | benign | |
| Malicious URL | Hybrid-Analysis | 2023-05-09 01:00:06 | 2023-11-10 13:15:08 | ||
| Amadey | ThreatFox Abuse.ch | 2023-04-26 18:30:00 | 2023-05-06 05:18:09 | malicious-activity | S1025 Amadey |
Tags
amadey c2 historical panel triage currentandoldIP addresses resolved by this hostname
- 72.52.178.23 (2024-11-10 04:20:32)
- 199.59.243.226 (2024-09-20 12:46:54)
- 172.232.30.16 (2023-08-29 06:10:14)
- 78.141.216.244 (2024-08-20 20:41:34)
- 104.149.152.27 (2024-08-20 20:41:34)
- 104.149.137.189 (2024-08-20 20:41:34)
- 198.135.53.41 (2024-08-20 20:41:34)
- 45.32.85.48 (2024-08-20 20:41:34)
- 104.149.137.188 (2024-08-20 20:41:34)
- 104.149.152.28 (2024-08-20 20:41:34)
- 104.149.137.187 (2024-08-20 20:41:34)
- 172.233.219.123 (2025-05-11 16:01:00)
- 172.233.219.49 (2025-05-11 16:01:00)
- 172.233.219.78 (2025-05-11 16:01:00)
- 3.222.192.211 (2026-10-17 16:35:16)
Whois information
- Domain
- tipinfolist.xyz
- TLD
- xyz
- DNSSEC
- ['unsigned']
- Nameservers
- NS1.FP261.PARKLOGIC.COM, NS2.FP261.PARKLOGIC.COM, ns1.fp261.parklogic.com, ns2.fp261.parklogic.com, NS1.CSOF.NET, NS4.CSOF.NET, NS3.CSOF.NET, NS2.CSOF.NET
- Registrant
- Dynadot Inc
- Address
- Kalkofnsvegur 2
- City
- Reykjavik
- State
- Capital Region
- Country
- IS — Iceland 🇮🇸
- Contact email
- [email protected], [email protected], [email protected]
- Domain created
- 2025-11-09 16:17:48
- Domain expires
- 2026-11-09 23:59:59
- First indexed
- 2023-04-26 19:17:57
- Last updated
- 2026-10-17 16:35:16