ip-check-api.vercel.app
Classification: Malicious
ip-check-api.vercel.app is a malicious hostname. Linked to Beavertail malware. 4 sightings, last seen 2026-09-14. Seen in BR.
Current activity
- Offline — no longer resolving. Last online 2026-10-13 09:45:56.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: BEAVERTAIL (S1246)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in BR, across manufacturing and education networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Beavertail | Maltiverse Threat Observatory | 2026-09-14 12:30:09 | 2026-09-14 12:55:05 | anomalous-activity botnet country_code:br industry:manufacturing | |
| BeaverTail | ThreatFox Abuse.ch | 2026-09-14 12:20:23 | 2026-09-14 12:25:03 | malicious-activity | S1246 BeaverTail |
| Malicious behavior | Maltiverse Threat Observatory | 2026-05-05 00:01:24 | 2026-05-05 00:01:24 | country_code:br industry:education-and-nonprofits |
Tags
c2 contagious-interview nodejsIP addresses resolved by this hostname
- 64.29.17.131 (2026-10-02 00:33:26)
- 216.198.79.131 (2026-10-02 00:33:26)
- 64.29.17.195 (2026-10-07 20:34:20)
- 216.198.79.195 (2026-10-07 20:34:20)
- 216.198.79.3 (2026-10-10 04:37:53)
- 64.29.17.3 (2026-10-10 04:37:53)
- 216.198.79.67 (2026-10-12 12:34:17)
- 64.29.17.67 (2026-10-12 12:34:17)
Whois information
- Domain
- vercel.app
- TLD
- app
- First indexed
- 2026-05-06 23:17:25
- Last updated
- 2026-10-13 09:45:56