bj88.li
Classification: Malicious
bj88.li is a malicious hostname. Linked to Remcos malware. Reported by Cyber Threat Alliance and ThreatFox Abuse.ch (Generic Malware), last seen 2026-10-10.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 04:36:54.
- Command & Control server — Used by cybercriminals to control victim computers.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: REMCOS (S0332)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Cyber Threat Alliance | 2026-10-10 15:38:35 | 2026-10-10 15:38:35 | malicious-activity | |
| Remcos | ThreatFox Abuse.ch | 2026-09-30 18:04:56 | 2026-09-30 18:25:06 | botnet malicious-activity | S0332 Remcos |
Tags
remcos remcosrat remvio socmerIP addresses resolved by this hostname
- 104.21.5.13 (2026-10-11 04:33:37)
- 172.67.132.185 (2026-10-11 04:33:37)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-10-18 04:30:20)
- 172.64.80.1 (2026-10-18 04:36:54)
- 2606:4700:3032::6815:50d (2026-10-18 04:36:54)
- 2606:4700:3031::ac43:84b9 (2026-10-18 04:36:54)
Whois information
- Domain
- bj88.li
- TLD
- li
- First indexed
- 2026-09-30 18:25:06
- Last updated
- 2026-10-18 04:30:20