backdoor.qh88b3.com

Classification: Malicious

backdoor.qh88b3.com is a malicious hostname. Linked to Remcos malware. Reported by ThreatFox Abuse.ch, last seen 2026-10-18.

Current activity

  • Offline — no longer resolving. Last online 2026-10-18 09:25:04.
  • Command & Control server — Used by cybercriminals to control victim computers.

MITRE ATT&CK associations

Malware families: REMCOS (S0332)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Remcos ThreatFox Abuse.ch 2026-10-18 09:06:31 2026-10-18 09:25:04 botnet compromised malicious-activity S0332 Remcos

Tags

c2 remcos remcosrat remvio socmer

Whois information

Domain
qh88b3.com
TLD
com
DNSSEC
['unsigned']
Nameservers
NICOLAS.NS.CLOUDFLARE.COM, TARA.NS.CLOUDFLARE.COM
Registrant
GoDaddy.com, LLC
Contact email
[email protected]
Domain created
2025-07-09 08:31:47
Domain expires
2027-07-09 08:31:47
First indexed
2026-10-18 09:25:04
Last updated
2026-10-18 09:25:04