way2ship.in
Classification: Malicious
way2ship.in is a malicious hostname. Linked to Remcos malware. 2 sightings from ThreatFox Abuse.ch, last seen 2026-10-16.
Current activity
- Offline — no longer resolving. Last online 2026-10-16 13:25:05.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: REMCOS (S0332)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Remcos | ThreatFox Abuse.ch | 2026-10-16 11:55:21 | 2026-10-16 13:25:05 | botnet malicious-activity | S0332 Remcos |
Tags
remcos remcosrat remvio socmerIP addresses resolved by this hostname
- 2606:4700:3034::ac43:b84f (2026-10-16 12:25:10)
- 104.21.43.191 (2026-10-16 12:25:10)
- 2606:4700:3033::6815:2bbf (2026-10-16 12:25:10)
- 172.67.184.79 (2026-10-16 12:25:10)
Whois information
- Domain
- way2ship.in
- TLD
- in
- First indexed
- 2026-10-16 12:25:06
- Last updated
- 2026-10-16 13:25:05