Risk Level: CRITICAL — Threat Score: 100/100

Assessment: emwqkekwqmekwq.work.gd is actively hosting 30 malware URLs across 1 resolved IP address. The number of active endpoints suggests ongoing, organized malware distribution. This domain should be blocked at the DNS or firewall level. Malware families associated with this domain include mirai, botnetdomain, elf.

Recommendation: Block immediately at DNS and firewall level

Total Malware URLs: 31 — Active: 30 — Resolved IPs: 1 — Abuse Reports: 732

First Seen: 2026-10-03T10:49:26 — Last Online: 2026-10-04T00:39:49

emwqkekwqmekwq.work.gd has been associated with 31 malware URLs , of which 30 are currently active . The primary threat types are malware_download.

Active threat. This domain is currently serving malicious content. Multiple malware URLs have been identified on this domain. Network administrators should consider blocking this domain or monitoring traffic to it closely.

Associated malware families include: botnetdomain, elf, mirai.