`log-server-lovat.vercel.app`

log-server-lovat.vercel.app is a domain that 3 published sources report in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Socket and Kieran Miyamoto (kmsec). The earliest of those reports is dated 2025-06-25 and the most recent 2026-02-13.

domain Contagious Interview CURATED

First seen 2025-06-25 · last seen 2026-02-13

Sources

C2/exfiltration endpoint for the HexEval Loader wave of Contagious Interview npm packages, which deploys BeaverTail and InvisibleFerret.
North Korean Contagious Interview Campaign Drops 35 New Malicious npm Packages — Socket · published 2025-06-25 · pulled 2026-08-30
Nearby text:

…https://ip-check-server.vercel.app/api/ip-check/208 https://json-project-hazel.vercel.app/apikey/QWERTYU890T12HML https://log-server-lovat.vercel.app/api/ipcheck/703 https://process-log.vercel.app/api/ipcheck https://process-log-update.vercel.app/api/ipcheck Malicious npm…
North Korea’s Contagious Interview Campaign Escalates: 338 Malicious npm Packages, 50,000 Downloads | Socket — Socket · under “C2 Endpoints #” · published 2025-10-10 · pulled 2026-09-01
Nearby text:

…# https://bitbucket.org/notion-dex/ultrax https://bitbucket.org/zoro-workspace/ Command and Control (C2) Endpoints # https://log-server-lovat.vercel.app/api/ipcheck/703 https://ip-check-server.vercel.app/api/ip-check/208 https://ip-check-api.vercel.app/api/ipcheck/703 172.86.80.145…
Another Wave: North Korean Contagious Interview Campaign Drops 35 New Malicious npm Packages | Socket — Socket · under “Command and Control (C2) Endpoints #” · published 2025-06-25 · pulled 2026-09-12
…react-babel-purify v1.0.7 meirjacob (meirjacob727@gmail.com) 2025-06-12 y f290db50ffe64d4fb5fe409d3d1c8eca6f6711e4bbd85a13c9dce055508cc1b3 log-server-lovat.vercel.app ℹ️ Note Do you want to see these packages for yourself? Download the package tgz files from my research site!…
VMWare artifacts left by a FAMOUS CHOLLIMA operator — Kieran Miyamoto (kmsec) · under “Notable findings” · published 2026-02-13 · pulled 2026-10-01

Find this indicator in the index, or see every domain this site holds under Domains in the browse listing.

Related indicators

Cited by the same report: North Korean Contagious Interview Campaign Drops 35 New Malicious npm Packages

Socket lists 59 other indicators in this source. 7 are shown, chosen across types.

All 60 indicators from this source

Cited by the same report: North Korea’s Contagious Interview Campaign Escalates: 338 Malicious npm Packages, 50,000 Downloads | Socket

Socket lists 563 other indicators in this source. 5 are shown, chosen across types.

All 564 indicators from this source