https://www.jsonkeeper.com/b/HTCVE
Classification: Malicious
https://www.jsonkeeper.com/b/HTCVE is a malicious URL. Linked to Beavertail malware. 121 sightings, last seen 2026-09-12. Seen in CO, US.
Current activity
- Offline — no longer resolving. Last online 2026-10-15 03:50:18.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: BEAVERTAIL (S1246)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in CO and US, across education networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Beavertail | Maltiverse Threat Observatory | 2026-09-12 21:20:06 | 2026-09-12 21:35:05 | country_code:co industry:education-and-nonprofits malicious-activity malware | |
| Generic Malware | Maltiverse Threat Observatory | 2026-09-12 21:10:12 | 2026-09-12 21:10:12 | country_code:us industry:education-and-nonprofits malicious-activity malware | |
| BeaverTail | ThreatFox Abuse.ch | 2026-09-12 19:54:43 | 2026-09-12 20:25:04 | malicious-activity | S1246 BeaverTail |
Tags
contagious-interview dead-drop c2-locatorURL information
- Hostname
- www.jsonkeeper.com
- Domain
- jsonkeeper.com
- TLD
- com
- SHA-256
7fb0d186326152af68749596faee51d9d04132395b5a26f9ea31b5d6a81f1596- First indexed
- 2026-09-12 20:25:04
- Last updated
- 2026-10-15 03:50:18
- Last online
- 2026-10-15 03:50:18