richwoodgrill.com
Classification: Malicious
richwoodgrill.com is a malicious hostname. Linked to Plugx malware. 49 sightings from ThreatFox Abuse.ch, last seen 2024-08-03.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 08:40:11.
MITRE ATT&CK associations
Malware families: PLUGX (S0013)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| PlugX | ThreatFox Abuse.ch | 2024-08-01 04:35:25 | 2024-08-03 04:20:14 | malicious-activity | S0013 PlugX |
Tags
darkpeony operationcontrolplug destroy rat kaba korplug sogu tigerplug reddeltaIP addresses resolved by this hostname
- 172.64.80.1 (2024-08-25 00:53:19)
- 13.248.169.48 (2026-10-01 08:39:00)
- 76.223.54.146 (2026-10-01 08:39:00)
- 103.224.182.253 (2026-10-05 00:34:48)
- 103.224.212.141 (2026-10-17 08:40:11)
Whois information
- Domain
- richwoodgrill.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS1.AFTERNIC.COM, NS2.AFTERNIC.COM
- Registrant
- Dynadot Inc
- Contact email
- [email protected]
- Domain created
- 2025-10-01 18:23:04
- Domain expires
- 2026-10-01 18:23:04
- First indexed
- 2024-08-01 05:17:04
- Last updated
- 2026-10-17 08:40:11