ptzhc3.pw
Classification: Malicious
ptzhc3.pw is a malicious hostname. Linked to Remcos malware. Reported by ThreatFox Abuse.ch, last seen 2026-09-18.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 04:37:52.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: REMCOS (S0332)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Remcos | ThreatFox Abuse.ch | 2026-09-18 18:19:54 | 2026-09-18 18:25:05 | botnet malicious-activity | S0332 Remcos |
Tags
remcos remcosrat remvio socmerIP addresses resolved by this hostname
- 2606:4700:3033::ac43:cf6e (2026-10-01 12:33:56)
- 2606:4700:3030::6815:456b (2026-10-01 12:33:56)
- 104.21.69.107 (2026-10-09 00:40:02)
- 172.67.207.110 (2026-10-09 00:40:02)
- 172.64.80.1 (2026-10-18 04:37:52)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-10-18 04:37:52)
Whois information
- Domain
- ptzhc3.pw
- TLD
- pw
- DNSSEC
- ['unsigned']
- Nameservers
- ignat.ns.cloudflare.com, liv.ns.cloudflare.com
- Registrant
- DYNADOT LLC
- Address
- PO Box 701
- City
- San Mateo
- State
- California
- Country
- US — United States 🇺🇸
- Contact email
- [email protected]
- Domain created
- 2026-09-01 05:52:26
- Domain expires
- 2027-09-01 05:52:26
- First indexed
- 2026-09-18 18:25:05
- Last updated
- 2026-10-18 04:37:52