www.jsonkeeper.com
Classification: Malicious
www.jsonkeeper.com is a malicious hostname. Linked to Beavertail malware. 324 sightings from Threat Observatory and ThreatFox Abuse.ch, last seen 2026-10-07.
Current activity
- Offline — no longer resolving. Last online 2026-10-17 20:51:25.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: BEAVERTAIL (S1246)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in CO and US, across education and financial services networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Maltiverse Threat Observatory | 2026-01-23 12:35:04 | 2026-10-07 11:15:28 | country_code:co country_code:us industry:education-and-nonprofits industry:financial-services malicious-activity malware | |
| ContagiousDrop | ThreatFox Abuse.ch | 2026-10-07 10:21:07 | 2026-10-07 10:25:03 | malicious-activity | |
| Ottercookie | Maltiverse Threat Observatory | 2026-09-18 05:20:06 | 2026-09-18 05:40:06 | country_code:co industry:education-and-nonprofits malicious-activity malware | |
| OtterCookie | ThreatFox Abuse.ch | 2026-09-17 19:50:43 | 2026-09-17 20:25:04 | malicious-activity | |
| Beavertail | Maltiverse Threat Observatory | 2026-09-12 21:20:06 | 2026-09-12 21:35:05 | country_code:co industry:education-and-nonprofits malicious-activity malware | S1246 BeaverTail |
| BeaverTail | ThreatFox Abuse.ch | 2026-09-12 19:54:43 | 2026-09-12 20:25:04 | compromised malicious-activity | S1246 BeaverTail |
Tags
contagious-interview dead-drop c2-locator c2 contagious-interview nodejs ottercookie contagiousinterview vscode vscode-tasks-folderopenIP addresses resolved by this hostname
- 64.227.108.217 (2026-09-21 07:08:34)
Whois information
- Domain
- jsonkeeper.com
- TLD
- com
- DNSSEC
- ['unsigned, Unsigned']
- Nameservers
- DNS1.BIGROCK.IN, DNS2.BIGROCK.IN, DNS3.BIGROCK.IN, DNS4.BIGROCK.IN, dns1.bigrock.in, dns2.bigrock.in, dns3.bigrock.in, dns4.bigrock.in
- Registrant
- BigRock Solutions Ltd.
- Address
- 3-TA-1, Jawahar Nagar Near Post Office
- City
- Jaipur
- State
- Rajasthan
- Country
- IN — India 🇮🇳
- Contact email
- [email protected], [email protected]
- Domain created
- 2018-06-25 08:04:49
- Domain expires
- 2029-06-25 08:04:49
- First indexed
- 2026-01-23 18:34:27
- Last updated
- 2026-10-17 20:51:25