← Remote Workers

AS396073

AS396073 is an autonomous system number that one published source reports in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Hacking But Legal. The report is dated 2026-07-15.

asn Contagious Interview MATCHED IN SOURCE

First seen 2026-07-15 · last seen 2026-07-15

Source

• …The :1224 servers cluster on one US bulletproof host, Majestic Hosting Solutions, AS396073, the network the SpinServers brand runs on, and the operators leave the same two doors open on each box: 1224 for the malware, 3389 for the…

  North Korea Is Hiring — Hacking But Legal · under “Following the plumbing, not the code” · published 2026-07-15 · pulled 2026-09-12

Find this indicator in the index, or see every autonomous system number this site holds under Autonomous system numbers in the browse listing.

Related indicators

Cited by the same report: North Korea Is Hiring

Hacking But Legal lists 97 other indicators in this source. 12 are shown, chosen across types.

• https://calendly.com/ritual-join Calendly account
• aaronhirotobm@gmail.com email address
• coinstar@gmail.com email address
• crew@ritualhub.net email address
• 28c9d28477ba63486a086bc02a82bf9c2734df20f2b9f37b8e0aabf3cd03833d file hash
• https://github.com/0glabs-solid GitHub account
• https://github.com/0gplayworks GitHub account
• ipcheck-six.vercel.app hosted site
• 104.192.42.117 IP address
• 107.189.16.154 IP address
• 0glabs-solid/0g-play malicious repository
• 0GPlayworks/MetaPlay malicious repository

All 98 indicators from this source