ocmtancmi2c4t.xyz
Classification: Malicious
ocmtancmi2c4t.xyz is a malicious hostname. Linked to Amadey malware. Reported by ThreatFox Abuse.ch and Hybrid-Analysis (Malicious URL), last seen 2023-10-19.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 16:34:41.
MITRE ATT&CK associations
Malware families: AMADEY (S1025)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2024-07-28 10:28:26 | 2025-05-11 15:25:59 | benign | |
| Malicious URL | Hybrid-Analysis | 2023-10-19 18:45:09 | 2023-10-19 18:45:09 | ||
| Amadey | ThreatFox Abuse.ch | 2023-08-03 18:36:03 | 2023-08-05 18:22:26 | malicious-activity | S1025 Amadey |
Tags
amadey viriback botnet c2 connectorIP addresses resolved by this hostname
- 172.235.7.46 (2024-07-24 16:54:42)
- 13.248.213.45 (2024-05-14 00:39:15)
- 76.223.67.189 (2024-05-14 00:39:15)
- 91.103.253.12 (2023-08-06 00:16:17)
- 193.106.174.121 (2023-09-19 04:26:45)
- 193.106.174.170 (2023-09-19 16:53:47)
- 31.44.5.51 (2023-09-19 23:09:31)
- 193.106.174.151 (2023-10-04 22:01:14)
- 46.17.248.120 (2024-03-30 08:38:03)
- 34.41.139.193 (2026-09-15 16:33:34)
- 2600:1900:4001:96e:8000:1:3fcb:3c48 (2026-09-15 16:33:34)
- 54.146.6.253 (2026-10-17 16:34:41)
Whois information
- Domain
- ocmtancmi2c4t.xyz
- TLD
- xyz
- DNSSEC
- ['unsigned']
- Nameservers
- NS3.DNSOWL.COM, NS1.DNSOWL.COM, NS2.DNSOWL.COM, NS2.HWRN.NET, NS1.HWRN.NET, NS1.CSOF.NET, NS2.CSOF.NET, NS3.CSOF.NET, NS4.CSOF.NET
- Registrant
- Dynadot Inc
- Address
- 1928 E. Highland Ave. Ste F104 PMB# 255
- City
- Phoenix
- State
- AZ
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected]
- Domain created
- 2025-08-29 01:46:42
- Domain expires
- 2027-08-29 23:59:59
- First indexed
- 2023-08-03 19:21:23
- Last updated
- 2026-10-17 16:34:41