Domains
397 domains
reported in published sources on North Korean (DPRK) cyber operations,
ordered by value, 197 to a page. This
is page 2 of 2, from luminer.work
to zvwb1ep7i.onlinewebshop.net. Each value links to its own page,
which carries every source that reported it and the text around it. Other
types are listed in the browse directory.
| Value | Campaign | Filed under | Sources |
|---|---|---|---|
luminer.work |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
luxmaxing.southafricanorth.cloudapp.azure.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
magehire.com |
IT Worker Fraud | 1 | |
magehiregroup.slack.com |
IT Worker Fraud | 1 | |
mail.blocknovas.com |
Contagious Interview | 1 | |
mail.namusoft.kr |
Lazarus Group | 2 | |
mante.li |
Lazarus Group | 1 | |
mastluner.club |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
matthiasli.com |
IT Worker Fraud | 1 | |
mbml-writer-info.info |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
mebeliotmasiv.com |
EtherHiding / UNC5342DPRK (cluster unattributed)Lazarus Group | 3 | |
mhjjh.dynv6.net |
Kimsuky | 1 | |
microsoft-tools.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
millersteel.digital |
EtherHiding / UNC5342DPRK (cluster unattributed) | 1 | |
mmdis-worls.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
mode-exit-legendary-trusted.trycloudflare.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 1 | |
mooncity.io |
IT Worker Fraud | 1 | |
moralmetrics.vercel.app |
Contagious Interview | 1 | |
motokimasuo.com |
IT Worker Fraud | 1 | |
mphteamworkspace.slack.com |
IT Worker Fraud | 1 | |
ms-office.services |
APT37 | 1 | |
ms-offices.com |
APT37 | 1 | |
mymexico.social |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
mywalletsss.store |
Contagious Interview | 1 | |
natezlx.myvnc.com |
Kimsuky | 1 | |
nationalinterestparty.com |
Konni | 1 | |
navigatorshub.com |
Contagious Interview | 1 | |
ndocs0link.dns.army |
Kimsuky | 1 | |
necropatia.com |
EtherHidingDPRK (cluster unattributed) | 1 | |
ngrok-free.vercel.app |
Contagious InterviewIT Worker Fraud | 4 | |
nid-naverbpk.onthewifi.com |
Kimsuky | 1 | |
nightflamevortex.top |
EtherHiding | 1 | |
nightstalkerwatch.top |
EtherHiding | 1 | |
ninjadev0329.github.io |
IT Worker Fraud | 1 | |
nvidiasdk.fly.dev |
Contagious Interview | 3 | |
o-parana.com |
EtherHiding / UNC5342DPRK (cluster unattributed)Lazarus Group | 3 | |
oceanvw.click |
EtherHiding | 1 | |
office.pushitlive.net |
Kimsuky | 1 | |
okhash.org |
EtherHiding / UNC5342DPRK (cluster unattributed) | 1 | |
ol.negapa.p-e.kr |
Kimsuky | 1 | |
online.check-computer.kro.kr |
Contagious InterviewKimsuky | 2 | |
online.lecture-site.kro.kr |
Contagious InterviewKimsuky | 2 | |
online.viewers.r-e.kr |
Kimsuky | 1 | |
opencode-setup-al.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
opencodeoptlons.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
openxmlformat.org |
APT37 | 1 | |
optique-leclercq.be |
Konni | 1 | |
orioncoding.com |
IT Worker Fraud | Li Qiang | 1 |
p1o2i3u4y5t6r7e8w9q0.medianewsonline.com |
Konni | 1 | |
palshona.com |
EtherHiding / UNC5342DPRK (cluster unattributed)Lazarus Group | 3 | |
payloadrpc.com |
Contagious Interview | 1 | |
peak-sea-glow-recreation.trycloudflare.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
perrine90-deltajohnsons.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
polblxpnl.space |
Contagious Interview | 1 | |
polymarket-clob.com |
Contagious Interview | 1 | |
pomozzi.com |
Konni | 1 | |
pool.swedencentral.cloudapp.azure.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
portfolio-vue-1b44e.web.app |
IT Worker Fraud | 1 | |
postal.unioncasaromanord.it |
Konni | 1 | |
process-log-update.vercel.app |
Contagious Interview | 3 | |
process-log.vercel.app |
Contagious Interview | 2 | |
publisherresolution.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 3 | |
pythonapischool.com |
Lazarus Group | 1 | |
qi.limsjo.p-e.kr |
Kimsuky | 1 | |
qorexa-labs.com |
Moonstone Sleet | 1 | |
qorexalabs.com |
Moonstone Sleet | 1 | |
qwert.mine.bz |
Kimsuky | 2 | |
rapids-lil-lending-charleston.trycloudflare.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 1 | |
ravenstonekeep.top |
EtherHiding | 1 | |
regancontrols.com |
EtherHiding / UNC5342DPRK (cluster unattributed)Lazarus Group | 3 | |
resolveissue.org |
APT37 | 1 | |
resumeacceptable.com |
EtherHidingDPRK (cluster unattributed) | 1 | |
resurce.swedencentral.cloudapp.azure.com |
EtherHidingDPRK (cluster unattributed) | 1 | |
rezept.scr |
Kimsuky | 1 | |
rg-telemetry.sbs |
EtherHiding / UNC5342Contagious Interview | 1 | |
rubysen.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
rversl.centralus.cloudapp.azure.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 3 | |
salinasrent.com |
EtherHiding / UNC5342DPRK (cluster unattributed)Lazarus Group | 3 | |
sasuke.dev |
IT Worker Fraud | 1 | |
seasonal-estimation-heating-necessarily.trycloudflare.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 1 | |
seconds.australiaeast.cloudapp.azure.com |
EtherHidingDPRK (cluster unattributed) | 1 | |
sfrclak.com |
Contagious Interview | 2 | |
shadowemberstrike.top |
EtherHiding | 1 | |
shadowrunevail.top |
EtherHiding | 1 | |
share-defence.ohbah.com |
Kimsuky | 1 | |
share-defence.uberlingen.com |
Kimsuky | 1 | |
share-defence.verymad.net |
Kimsuky | 1 | |
share.dihl-defence.o-r.kr |
Kimsuky | 1 | |
shiny-dev.com |
IT Worker Fraud | 1 | |
shopandtravelusa.com |
Lazarus Group | 1 | |
simultaneouslypower.com |
EtherHidingDPRK (cluster unattributed) | 1 | |
sistemablackatz.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
sj98xe4.xyz |
EtherHidingDPRK (cluster unattributed) | 1 | |
sjrhs.org |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
smartpeoplework.info |
EtherHiding | 2 | |
smdh7.surf |
EtherHidingDPRK (cluster unattributed) | 1 | |
soc-log.vercel.app |
Contagious Interview | 2 | |
softglide.co |
Contagious Interview | 1 | |
solidactivate.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
sparkwebsolutions.space |
Konni | 1 | |
spmoe.xyz |
IT Worker Fraud | 1 | |
spogear.click |
EtherHiding | 1 | |
sslgateway001.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
st0746.net |
APT37 | 1 | |
starbucls.xyz |
Contagious InterviewKimsukyAPT38 | 1 | |
stormvenomforge.top |
EtherHiding | 1 | |
streetfleshroyalgaming.top |
EtherHiding | 2 | |
styleanimal.com |
EtherHiding | 2 | |
stylebonus.com |
EtherHiding | 2 | |
styleboosted.com |
EtherHiding | 2 | |
stylecaving.com |
EtherHiding | 2 | |
stylecholera.com |
EtherHiding | 2 | |
styleconnectorr.com |
EtherHiding | 2 | |
styledespair.com |
EtherHiding | 2 | |
styledupstep.com |
EtherHiding | 2 | |
styleember.com |
EtherHiding | 2 | |
styleferry.com |
EtherHiding | 2 | |
stylegamagee.com |
EtherHiding | 2 | |
stylegamingg.com |
EtherHiding | 2 | |
stylehailens.com |
EtherHiding | 1 | |
stylehelloman.com |
EtherHiding | 2 | |
stylehersi.com |
EtherHiding | 2 | |
stylehipp.com |
EtherHiding | 2 | |
stylehotrod.com |
EtherHiding | 2 | |
stylejunglee.com |
EtherHiding | 2 | |
stylekanions.com |
EtherHiding | 2 | |
stylekay.com |
EtherHiding | 2 | |
styleleftt.com |
EtherHiding | 2 | |
styleouresen.com |
EtherHiding | 2 | |
styleoutspin.com |
EtherHiding | 1 | |
stylepenalty.com |
EtherHiding | 2 | |
styleranked.com |
EtherHiding | 2 | |
stylerazorr.com |
EtherHiding | 2 | |
stylerightnoww.com |
EtherHiding | 1 | |
stylerunningg.com |
EtherHiding | 2 | |
styleshort.com |
EtherHiding | 2 | |
stylestyk.com |
EtherHiding | 2 | |
styleteleport.com |
EtherHiding | 1 | |
styletimeset.com |
EtherHiding | 1 | |
styletray.com |
EtherHiding | 2 | |
styletropik.com |
EtherHiding | 2 | |
styletumor.com |
EtherHiding | 2 | |
styleussles.com |
EtherHiding | 1 | |
stylewify.com |
EtherHiding | 2 | |
sunnydaycoffees.net |
EtherHiding | 2 | |
superbluestar.wixsite.com |
IT Worker Fraud | Naoyuki Tanaka | 1 |
synctimes.australiaeast.cloudapp.azure.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
tatukikai.jp |
Konni | 1 | |
tel201-2kao0-2kame.nfy.fyi |
Konni | 1 | |
template-openxml.com |
APT37 | 1 | |
tetrismic.vercel.app |
Contagious Interview | 3 | |
th-updates.sbs |
EtherHiding / UNC5342Contagious Interview | 1 | |
times.australiaeast.cloudapp.azure.com |
EtherHidingDPRK (cluster unattributed) | 1 | |
tklovers.com |
EtherHidingDPRK (cluster unattributed) | 1 | |
tokio-sallys.net |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
tranzed.org |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
tsagent.xyz |
IT Worker Fraud | KGJ | 1 |
tsmpl.centralus.cloudapp.azure.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 4 | |
ttzcloud.com |
Konni | 1 | |
twicegrand.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
update.norwayeast.cloudapp.azure.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
uppgrede.scienceontheweb.net |
Kimsuky | 1 | |
url2.ml |
Kimsuky | 1 | |
validator.uno |
Contagious Interview | 1 | |
velnoderic.com |
EtherHiding | 1 | |
vintashmarket.com |
Konni | 1 | |
voderlence.com |
EtherHiding | 1 | |
voidravencitadel.com |
EtherHiding | 1 | |
voidravenstorm.top |
EtherHiding | 1 | |
voidwalkerforge.top |
EtherHiding | 1 | |
vscode-bootstrapper.vercel.app |
PolinRiderContagious InterviewLazarus Group | 3 | |
vscode-load-config.vercel.app |
PolinRiderContagious InterviewIT Worker Fraud | 2 | |
vscode-settings-bootstrap.vercel.app |
PolinRiderContagious Interview | 1 | |
vscode-settings-config.vercel.app |
PolinRiderContagious Interview | 1 | |
w3capi.marketing |
Contagious Interview | 1 | |
walt-messaging-affairs-occurring.trycloudflare.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 1 | |
warmcoffeetime.top |
EtherHiding | 1 | |
waygatterol002.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
webhostwatto.work.gd |
Contagious InterviewKimsukyAPT38 | 1 | |
wecreateproblems.org |
Contagious Interview | master-0420 | 1 |
westusserverfor.westus2.cloudapp.azure.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 3 | |
when-architectural-cdna-faster.trycloudflare.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 1 | |
winstonjs.site |
Contagious Interview | 1 | |
wiselystarting.com |
EtherHidingDPRK (cluster unattributed) | 1 | |
witch-skins-lip-coal.trycloudflare.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 1 | |
word-template.net |
APT37 | 1 | |
workshop-lighting-protective-customs.trycloudflare.com |
EtherHiding / UNC5342DPRK (cluster unattributed) | 1 | |
wpuadmin.shop |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
wstore.lt |
Lazarus Group | 1 | |
xkclub.hk |
Lazarus Group | 1 | |
xororand.ru |
EtherHiding | 1 | |
xuiaxwx.com |
EtherHidingDPRK (cluster unattributed) | 1 | |
xxlvbrloxvriy2c5.onion |
Lazarus Group | 1 | |
zkservice.cloud |
Contagious Interview | 1 | |
zmwebsdk.com |
APT38Contagious Interview | 1 | |
zoom-tech.us |
APT38Contagious Interview | 1 | |
zvwb1ep7i.onlinewebshop.net |
Konni | 1 |