second.amadgood.com
Classification: Malicious
second.amadgood.com is a malicious hostname. Linked to Amadey malware. 43 sightings from ThreatFox Abuse.ch, last seen 2024-04-06.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 16:35:17.
MITRE ATT&CK associations
Malware families: AMADEY (S1025)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2024-07-29 12:05:03 | 2025-05-11 15:32:47 | benign | |
| Amadey | ThreatFox Abuse.ch | 2023-12-13 12:36:02 | 2024-04-06 07:20:45 | malicious-activity | S1025 Amadey |
Tags
amadey viriback c2IP addresses resolved by this hostname
- 91.195.240.117 (2024-05-17 00:38:11)
- 104.21.61.178 (2024-04-01 16:40:42)
- 172.67.212.154 (2024-04-01 16:40:42)
- 172.64.80.1 (2024-04-09 04:26:23)
- 52.16.171.153 (2026-10-17 16:35:17)
Whois information
- Domain
- amadgood.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS1.CSOF.NET, NS2.CSOF.NET, NS3.CSOF.NET, NS4.CSOF.NET
- Registrant
- Dynadot Inc
- Contact email
- [email protected]
- Domain created
- 2025-05-31 09:30:42
- Domain expires
- 2027-05-31 09:30:42
- First indexed
- 2023-12-13 13:17:02
- Last updated
- 2026-10-17 16:35:17