Domain > burrito.wut.re

More information on this domain is in AlienVault OTX

Files that talk to burrito.wut.re

MD5	A/V
e55338d68c87a967fd8faf03249c3e8c	[Artemis!E55338D68C87] [Trojan] [W32/Behav-Heuristic-070] [W32/Heuristic-210!Eldorado] [Packed_PeSpin.B] [Trojan.Win32.Scar.byba] [Trojan.Scar!C3TDD28EaUk] [UnclassifiedMalware] [TR/Spy.444416.1] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [Mal/Packer] [Win32.Troj.Scar.by.(kcloud)] [Trojan/Win32.Scar] [Virus.Win32.Heur.c] [W32/Scar.BYBA!tr] [Trj/CI.A]
ac5b059a66ab7005051e0afa598a7757	[HW32.TsCabk.buww] [RDN/Sdbot.worm!bp] [Trojan.Ircbot.ED] [Trojan] [WS.Reputation.1] [Ircbot.CRKE] [BKDR_IRCBOT.SMPA] [Trojan.Win32.IRCbot.aan] [UnclassifiedMalware] [BackDoor.IRC.Bot.2628] [Heuristic.LooksLike.Win32.Suspicious.J!89] [Trojan/IRCBot.ad] [Trojan/Win32.IRCbot] [Win32.Troj.IRCBot.A.(kcloud)] [Backdoor:Win32/IRCbot.HI] [W32/Trojan.TMSG-3064] [Trojan/Win32.IRCBot] [SScope.Backdoor.Athena] [Trj/CI.A] [Suspicious] [Backdoor.Win32.Ursap] [W32/IRCBot.NIH!tr] [BackDoor.Ircbot.ZIP] [Backdoor.Win32.IRCbot.adVe]
6ee14aad7f098a9e7044f0b97c0d5145	[Backdoor/W32.SdBot.78848.L] [Backdoor.Gaertob] [RDN/Sdbot.worm!bm] [Backdoor] [Trojan.Win32.Ragebot.ccbyjy] [WS.Reputation.1] [Malware] [Mal/IRCBot-C] [UnclassifiedMalware] [BackDoor.Ragebot.4] [Backdoor:Win32/Gaertob.A] [Backdoor.Win32.S.IRCBot.78848.N] [Worm/Win32.IRCBot] [Backdoor.IRCBot] [Virus.Win32.SdBot.4556] [W32/AGbot.AB!tr] [Win32/DH{fQAJNQ9EICQi}]

DNS Resolutions

Date	IP Address
2013-07-11	176.31.123.56 (ClassC)
2013-10-17	166.78.137.118 (ClassC)
2013-10-28	37.59.53.162 (ClassC)
2023-12-24	67.209.115.148 (ClassC)
2024-09-14	138.197.78.18 (ClassC)
2025-01-25	165.22.252.132 (ClassC)
2025-03-24	106.14.242.136 (ClassC)
2025-04-06	14.116.153.82 (ClassC)

Port 80

HTTP/1.1 403 ForbiddenDate: Sun, 03 Dec 2023 09:53:22 GMTServer: ApacheAccept-Ranges: bytesVary: Accept-EncodingContent-Length: 2968Connection: closeContent-Type: text/html; charsetUTF-8

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>html xmlnshttp://www.w3.org/1999/xhtml>head>title>Softaculous Webuzo | Default Website Page/title>style typetext/css>body,h1,div,class,p{	padding:0;	margin:0;	font-family:verdana,sans,serif;}p{	font-size:12px;	line-height:25px;	color:#333;	}a{	color:#333;	text-decoration:none;	border-bottom:2px dashed #333;}a:hover{	border-bottom:0px dashed #333;}.logo{	width:250px;	height:80px;	margin-left:100px;	}#content{	width: 600px; height: 250px;		background: #f4f4f4;	padding:0px 50px;		border-radius: 150px;	-webkit-border-radius: 150px;	-moz-border-radius: 150px;		position: relative;	margin: 60px auto 20px;	border-left:2px solid #a2dbf5;	border-right:2px solid #a2dbf5;	border-bottom:2px solid #a2dbf5;	box-shadow: 0 10px 10px -5px #666;}#content:after, #content:before{	content: ;	position: absolute;	background: #f4f4f4;	z-index: -1;	border-left:2px solid #a2dbf5;	border-right:1px solid #a2dbf5;	border-top:2px solid #a2dbf5;}#content:after{	width: 300px; height: 300px;	top: -120px; 	left: 120px;		border-radius: 250px;	-webkit-border-radius: 250px;	-moz-border-radius: 250px;}#content:before{	width: 250px; height: 250px;	top: -80px; 	right: 120px;		border-radius: 250px;	-webkit-border-radius: 250px;	-moz-border-radius: 250px;}.cloud{	width:100%;	height:265px;	background-image:url(https://images.softaculous.com/webuzo/noindex/cloud.png);	background-repeat:no-repeat;	background-size:100%;	position:fixed;	bottom:0px;	z-index:9;}.cloud_bg{	width:100%;	height:100px;	background-color:#a2dbf5;	position:fixed;	bottom:0;	z-index:0;}/style>/head>body>		div classlogo>img srchttps://images.softaculous.com/webuzo/noindex/webuzo_logo.png altSoftaculous Webuzo />/div>	center>				div idcontent>						p stylefont-size:20px;font-weight:bolder;text-align:center;>Default Website Page/p>				p>					This page is generated by a hrefhttps://www.webuzo.com>Softaculous Webuzo/a>, a leading provider of software for the webhosting industry.

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > burrito.wut.re

Is this malicious?

Files that talk to burrito.wut.re

DNS Resolutions

Port 80