https://ip-check-server.vercel.app/api/ip-check-encrypted/3aeb34a35
Classification: Malicious
https://ip-check-server.vercel.app/api/ip-check-encrypted/3aeb34a35 is a malicious URL. Linked to Beavertail malware. 6 sightings, last seen 2026-09-14.
Current activity
- Offline — no longer resolving. Last online 2026-10-13 10:32:24.
- Command & Control server — Used by cybercriminals to control victim computers.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: BEAVERTAIL (S1246)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in BR, across technology and manufacturing networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Maltiverse Threat Observatory | 2026-09-14 13:10:13 | 2026-09-14 13:10:13 | country_code:br industry:technology-and-telecommunications malicious-activity malware | |
| Beavertail | Maltiverse Threat Observatory | 2026-09-14 12:30:09 | 2026-09-14 12:55:05 | botnet country_code:br industry:manufacturing industry:technology-and-telecommunications malicious-activity | |
| BeaverTail | ThreatFox Abuse.ch | 2026-09-14 12:20:24 | 2026-09-14 12:25:03 | malicious-activity | S1246 BeaverTail |
Tags
c2 contagious-interview nodejsURL information
- Hostname
- ip-check-server.vercel.app
- Domain
- vercel.app
- TLD
- app
- SHA-256
66efef3b256462ac6724aacd190b7d037db0c8c03221834816b3ce56e66ed3da- First indexed
- 2026-09-14 12:25:03
- Last updated
- 2026-10-13 10:32:24
- Last online
- 2026-10-13 10:32:24