specialblue.pm
Classification: Malicious
specialblue.pm is a malicious hostname. Linked to Amadey malware. Reported by ThreatFox Abuse.ch, last seen 2023-04-23. Resolves to 141.98.6.35 and 2 more.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 08:41:49.
MITRE ATT&CK associations
Malware families: AMADEY (S1025)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2024-07-29 00:08:28 | 2025-05-11 16:19:32 | benign | |
| Amadey | ThreatFox Abuse.ch | 2023-04-12 13:17:48 | 2023-04-23 02:18:37 | malicious-activity | S1025 Amadey |
Tags
amadey viriback viasmokeloader botnet c2 panelIP addresses resolved by this hostname
- 141.98.6.35 (2023-05-18 09:05:01)
- 2600:1900:4001:96e:8000:1:3b69:b408 (2026-10-17 08:41:49)
- 34.41.139.193 (2026-10-17 08:41:49)
Whois information
- Domain
- specialblue.pm
- TLD
- pm
- Registrant
- Dynadot Inc
- Contact email
- [email protected], [email protected]
- Domain expires
- 2027-09-13 04:28:34
- First indexed
- 2023-04-12 13:17:48
- Last updated
- 2026-10-17 08:41:49