ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain zpwtceh.com.

Database Entry


IOC ID:1747462
IOC: zpwtceh.com
IOC Type :domain
Threat Type :botnet_cc
Malware: Remcos
Malware alias:RemcosRAT, Remvio, Socmer
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS399486 VIRTUO
Country:- CA
First seen:2026-02-13 08:52:13 UTC
Last seen:2026-02-23 12:00:09 UTC
UUID:4a74370e-08b9-11f1-a068-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:remcos
Reference: https://bazaar.abuse.ch/sample/1ae0ea0b093ec70869d063af5cef9255c6857e3b43e7f910bc2174cf05ee2ac3/

Avatar
abuse_ch
remcos (aka RemcosRAT,Remvio,Socmer) botnet C2 on port 2404 TCP