remoo7.theworkpc.com
Classification: Malicious
remoo7.theworkpc.com is a malicious hostname. Linked to Remcos malware. Reported by ThreatFox Abuse.ch, last seen 2026-09-18. Resolves to 193.142.146.179.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 04:37:52.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: REMCOS (S0332)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Remcos | ThreatFox Abuse.ch | 2026-09-18 18:19:57 | 2026-09-18 18:25:05 | botnet compromised malicious-activity | S0332 Remcos |
Tags
remcos remcosrat remvio socmerIP addresses resolved by this hostname
- 193.142.146.179 (2026-10-18 04:37:52)
Whois information
- Domain
- theworkpc.com
- TLD
- com
- DNSSEC
- ['unsigned, Unsigned']
- Nameservers
- NS0.DYNU.COM, NS1.DYNU.COM, NS3.DYNU.COM, NS4.DYNU.COM, NS5.DYNU.COM, NS6.DYNU.COM
- Registrant
- Dynu Systems, Inc.
- Address
- Statutory Masking Enabled
- City
- Statutory Masking Enabled
- State
- AZ
- Country
- US — United States 🇺🇸
- Contact email
- [email protected]
- Domain created
- 2017-02-02 20:40:03
- Domain expires
- 2029-02-02 20:40:03
- First indexed
- 2026-09-18 18:25:05
- Last updated
- 2026-10-18 04:37:52