qh88b3.com

Classification: Malicious

qh88b3.com is a malicious hostname. Linked to Remcos malware. Reported by ThreatFox Abuse.ch, last seen 2026-10-18.

Current activity

Online — resolving/reachable. Last checked 2026-10-18 09:25:05.
Command & Control server — Used by cybercriminals to control victim computers.

MITRE ATT&CK associations

Malware families: REMCOS (S0332)

Blacklist sightings

Description	Source	First seen	Last seen	Labels	MITRE ATT&CK
Remcos	ThreatFox Abuse.ch	2026-10-18 09:06:31	2026-10-18 09:25:04	botnet compromised malicious-activity	S0332 Remcos

Tags

c2 remcos remcosrat remvio socmer

IP addresses resolved by this hostname

2606:4700:130:436c:6f75:6466:6c61:7265 (2026-10-18 09:25:05)
172.64.80.1 (2026-10-18 09:25:05)

Whois information

Domain: qh88b3.com
TLD: com
DNSSEC: ['unsigned']
Nameservers: NICOLAS.NS.CLOUDFLARE.COM, TARA.NS.CLOUDFLARE.COM
Registrant: GoDaddy.com, LLC
Contact email: [email protected]
Domain created: 2025-07-09 08:31:47
Domain expires: 2027-07-09 08:31:47
First indexed: 2026-10-18 09:25:04
Last updated: 2026-10-18 09:25:04