riversidebreakingnews.com
Classification: Malicious
riversidebreakingnews.com is a malicious hostname. Linked to Plugx malware. 17 sightings from ThreatFox Abuse.ch, last seen 2025-03-22.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 16:36:38.
MITRE ATT&CK associations
Malware families: PLUGX (S0013)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| PlugX | ThreatFox Abuse.ch | 2025-03-20 06:49:45 | 2025-03-22 06:25:39 | malicious-activity | S0013 PlugX |
Tags
darkpeony operation controlplug osint recorded future destroy rat kaba korplug sogu tigerplug reddeltaIP addresses resolved by this hostname
- 160.16.200.77 (2026-10-17 16:36:38)
Whois information
- Domain
- riversidebreakingnews.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS11.VALUE-DOMAIN.COM, NS12.VALUE-DOMAIN.COM, NS13.VALUE-DOMAIN.COM
- Registrant
- GMO Internet Group, Inc. d/b/a Onamae.com
- Contact email
- [email protected]
- Domain created
- 2025-10-28 01:36:31
- Domain expires
- 2026-10-28 01:36:31
- First indexed
- 2025-03-20 07:17:09
- Last updated
- 2026-10-17 16:36:38