api-server-mocha.vercel.app
Classification: Malicious
api-server-mocha.vercel.app is a malicious hostname. Linked to Beavertail malware. Reported by 2 threat sources, last seen 2026-09-13. Seen in ES.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 16:35:22.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: BEAVERTAIL (S1246)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in ES, across financial services networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Maltiverse Threat Observatory | 2026-09-13 15:10:12 | 2026-09-13 15:10:12 | country_code:es industry:financial-services malicious-activity malware | |
| BeaverTail | ThreatFox Abuse.ch | 2026-09-13 13:55:12 | 2026-09-13 14:25:03 | malicious-activity | S1246 BeaverTail |
Tags
c2 contagious-interview nodejsIP addresses resolved by this hostname
- 216.198.79.3 (2026-10-14 22:49:43)
- 64.29.17.3 (2026-10-14 22:49:43)
- 216.198.79.131 (2026-10-16 12:35:50)
- 64.29.17.131 (2026-10-16 12:35:50)
- 216.198.79.67 (2026-10-17 16:35:22)
- 64.29.17.67 (2026-10-17 16:35:22)
Whois information
- Domain
- vercel.app
- TLD
- app
- First indexed
- 2026-09-13 14:25:03
- Last updated
- 2026-10-17 16:35:22