chengzhi888.co
Classification: Malicious
chengzhi888.co is a malicious hostname. Linked to Remcos malware. Reported by ThreatFox Abuse.ch, last seen 2026-09-30. Resolves to 104.21.38.249 and 5 more.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 04:39:56.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: REMCOS (S0332)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Remcos | ThreatFox Abuse.ch | 2026-09-30 18:04:57 | 2026-09-30 18:25:05 | botnet malicious-activity | S0332 Remcos |
Tags
remcos remcosrat remvio socmerIP addresses resolved by this hostname
- 104.21.38.249 (2026-10-04 04:39:53)
- 172.67.168.217 (2026-10-04 04:39:53)
- 2606:4700:3036::6815:26f9 (2026-10-15 16:38:47)
- 2606:4700:3033::ac43:a8d9 (2026-10-15 16:38:47)
- 172.64.80.1 (2026-10-18 04:39:56)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-10-18 04:39:56)
Whois information
- Domain
- chengzhi888.co
- TLD
- co
- First indexed
- 2026-09-30 18:25:05
- Last updated
- 2026-10-18 04:39:56