whataburgermenus.com
Classification: Malicious
whataburgermenus.com is a malicious hostname. Linked to Qakbot malware. 4 sightings from 3 threat sources (2023-05-30 16:51:14), last seen 2023-05-30.
Current activity
- Online — resolving/reachable. Last checked 2026-11-06 08:40:13.
MITRE ATT&CK associations
Malware families: QAKBOT (S0650)
Intrusion sets: TA551 (G0127)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| 2023-05-30 16:51:14 | URLhaus Abuse.ch | 2023-05-30 17:18:44 | 2023-05-30 17:18:44 | malicious-activity | |
| Gold Cabin | Maltiverse | 2023-04-26 04:12:49 | 2023-04-27 12:16:33 | malicious-activity | G0127 TA551 |
| Ta570 | Maltiverse | 2023-04-26 04:12:53 | 2023-04-27 12:15:34 | malicious-activity | |
| QakBot | ThreatFox Abuse.ch | 2023-04-25 13:17:37 | 2023-04-25 13:17:37 | malicious-activity | S0650 QakBot |
Tags
malware_download apt bb25 qakbot qbot quakbot tr wsf zip oakboat pinkslipbotIP addresses resolved by this hostname
- 66.29.141.142 (2023-05-03 21:19:30)
- 104.21.64.159 (2023-07-06 09:26:15)
- 172.67.186.173 (2023-07-06 09:26:15)
- 86.38.202.90 (2024-07-24 16:50:04)
- 172.64.80.1 (2026-11-06 08:40:13)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-11-06 08:40:13)
Whois information
- AS name
- AS19538 Advantagecom Networks, Inc.
- Domain
- whataburgermenus.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- ADI.NS.CLOUDFLARE.COM, ALEX.NS.CLOUDFLARE.COM
- Registrant
- Dynadot Inc
- Contact email
- [email protected]
- Domain created
- 2026-07-21 19:47:05
- Domain expires
- 2027-07-21 19:47:05
- First indexed
- 2023-04-25 13:17:37
- Last updated
- 2026-11-06 08:40:13