ip-check-server.vercel.app
Classification: Malicious
ip-check-server.vercel.app is a malicious hostname. Linked to Beavertail malware. 7 sightings, last seen 2026-09-14. Seen in BR.
Current activity
- Offline — no longer resolving. Last online 2026-10-13 10:32:24.
- Command & Control server — Used by cybercriminals to control victim computers.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: BEAVERTAIL (S1246)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in BR, across technology, manufacturing and education networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Maltiverse Threat Observatory | 2026-09-14 13:10:13 | 2026-09-14 13:10:13 | country_code:br industry:technology-and-telecommunications malicious-activity malware | |
| Beavertail | Maltiverse Threat Observatory | 2026-09-14 12:30:09 | 2026-09-14 12:55:05 | botnet country_code:br industry:manufacturing industry:technology-and-telecommunications malicious-activity | S1246 BeaverTail |
| BeaverTail | ThreatFox Abuse.ch | 2026-09-14 12:20:24 | 2026-09-14 12:25:03 | malicious-activity | S1246 BeaverTail |
| Malicious behavior | Maltiverse Threat Observatory | 2026-05-04 00:01:11 | 2026-05-04 00:01:11 | country_code:br industry:education-and-nonprofits industry:technology-and-telecommunications |
Tags
c2 contagious-interview nodejsIP addresses resolved by this hostname
- 64.29.17.3 (2026-09-30 00:38:57)
- 216.198.79.3 (2026-09-30 00:38:57)
- 216.198.79.195 (2026-10-01 04:38:29)
- 64.29.17.195 (2026-10-01 04:38:29)
- 64.29.17.131 (2026-10-11 00:38:57)
- 216.198.79.131 (2026-10-11 00:38:57)
- 216.198.79.67 (2026-10-12 04:39:05)
- 64.29.17.67 (2026-10-12 04:39:05)
Whois information
- Domain
- vercel.app
- TLD
- app
- First indexed
- 2026-05-04 02:55:58
- Last updated
- 2026-10-13 10:32:24