qh88eu.com
Classification: Malicious
qh88eu.com is a malicious hostname. Linked to Remcos malware. 3 sightings from ThreatFox Abuse.ch and Maltiverse (Compromised verdict), last seen 2026-10-18.
Current activity
- Offline — no longer resolving. Last online 2026-10-18 09:25:04.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: REMCOS (S0332)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Remcos | ThreatFox Abuse.ch | 2026-10-16 13:12:24 | 2026-10-18 09:25:04 | botnet malicious-activity | S0332 Remcos |
| Compromised verdict | Maltiverse | 2026-10-16 13:25:07 | 2026-10-16 13:25:07 | compromised |
Tags
remcosrat remvio socmer c2 remcosIP addresses resolved by this hostname
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-10-16 13:25:06)
- 172.64.80.1 (2026-10-16 13:25:06)
Whois information
- Domain
- qh88eu.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- JAKUB.NS.CLOUDFLARE.COM, VERA.NS.CLOUDFLARE.COM
- Registrant
- GoDaddy.com, LLC
- Contact email
- [email protected]
- Domain created
- 2024-11-22 13:00:32
- Domain expires
- 2027-11-22 13:00:32
- First indexed
- 2026-10-16 13:25:04
- Last updated
- 2026-10-18 09:25:04