checkip.amazonaws[.]comDomain
Reported by 2 independent sources · first reported by Elastic Security Labs · last reported
Last reported 9 days ago
What the reports say
2 reports, newest first · the exact sentence from each-
Investigating Ephemeral Supply Chain Tampering“…ation Check: Queries external domain name system (DNS) (myip.opendns.com, o-o.myaddr.l.google.com) and HTTP reflection services (checkip.amazonaws[.]com, api.ipify.org, ifconfig.me/ip, icanhazip.com) using custom User-Agents (Anyviewer-loader/1.0, Anyviewer-ipcheck/1.0).”
-
PHANTOMPULSE: anatomy of a hijackable blockchain-C2 RAT“…d" triggers full uninstall; "ip":"<value>" populates the public-IP cache, but only if local discovery (ipif.org / icanhazip.com/ checkip.amazonaws[.]com) hasn't already filled it.”
Thanks — we review every report.