api.go8.plus
Classification: Malicious
api.go8.plus is a malicious hostname. Linked to Remcos malware. Reported by ThreatFox Abuse.ch, last seen 2026-09-06. Resolves to 43.174.197.80 and 1 more.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 04:38:38.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: REMCOS (S0332)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Remcos | ThreatFox Abuse.ch | 2026-09-06 19:50:21 | 2026-09-06 20:25:04 | botnet malicious-activity | S0332 Remcos |
Tags
remcos remcosrat remvio socmerIP addresses resolved by this hostname
- 43.174.197.80 (2026-10-14 00:40:59)
- 43.174.196.80 (2026-10-18 04:38:38)
Whois information
- Domain
- go8.plus
- TLD
- plus
- First indexed
- 2026-09-06 20:25:04
- Last updated
- 2026-10-18 04:38:38