Hosted sites

142 hosted sites reported in published sources on North Korean (DPRK) cyber operations, ordered by value. Each value links to its own page, which carries every source that reported it and the text around it. Other types are listed in the browse directory.

ValueCampaignFiled underSources
0g-rollplay.netlify.app Contagious Interview 1
ake-test.vercel.app Contagious Interview 1
api-server-mocha.vercel.app Contagious InterviewIT Worker Fraud 3
apikey-six.vercel.app Contagious Interview 1
aplore.kesug.com DPRK (cluster unattributed) 1
apparatus-contributions-understood-accommodation.trycloudflare.com EtherHiding / UNC5342DPRK (cluster unattributed) 1
arky-drab.vercel.app IT Worker Fraud 1
artndesign2.cafe24.com APT37 1
astrahub.vercel.app Contagious Interview 1
astraluck-vercel.vercel.app IT Worker FraudContagious Interview 2
auth-rho-dun.vercel.app Contagious Interview 1
awesome-profile-storm-runners-projects.vercel.app IT Worker Fraud Yi Ting Huang 1
axioshealthcheck.vercel.app Contagious Interview 1
bian0151.cafe24.com APT37 1
bitfancy-solana-tradingbot.vercel.app IT Worker Fraud Banana 1
blockchainprofile.vercel.app IT Worker Fraud Boris Anderson 1
brics-phi.vercel.app IT Worker Fraud 1
bs-production.up.railway.app IT Worker FraudContagious Interview 1
cdn-static-server.vercel.app Contagious Interview 1
chalk-logger.vercel.app Contagious Interview 1
chase-allen.netlify.app IT Worker Fraud 1
checkmyip-address.vercel.app Contagious Interview 1
checkmyip-mu.vercel.app Contagious Interview 1
chules-git-main-mr-new-0509.vercel.app IT Worker Fraud 1
chules.vercel.app IT Worker Fraud 1
coffee-code.netlify.app IT Worker Fraud 2
conditioning-freelance-norman-harrison.trycloudflare.com EtherHiding / UNC5342DPRK (cluster unattributed) 1
cookie-xi-seven.vercel.app Contagious Interview 2
csec-supply-chain-attack-1tcq.onrender.com DPRK (cluster unattributed) 1
cupid-portfolio.vercel.app IT Worker Fraud Liu Yuan 1
curly-spoon-sigma.vercel.app Kimsuky 1
data-kappa.vercel.app Contagious Interview 1
decoy-nu.vercel.app IT Worker Fraud 1
depot-reunion-listings-targets.trycloudflare.com EtherHiding / UNC5342DPRK (cluster unattributed) 1
dreampioneer.vercel.app IT Worker Fraud Wang Yu Long 1
eric-jin-portfolio.netlify.app IT Worker Fraud 1
eslint-helper.vercel.app Contagious Interview 1
evmrpc-testnet-0g.vercel.app APT38Contagious Interview 1
express-project-ifm6fa.fly.dev Contagious Interview 1
ext-checkdin.vercel.app Contagious Interview 3
fe29jf323.kesug.com Konni 2
fusionlayer-app463.vercel.app Contagious Interview 1
getapilatency.onrender.com IT Worker FraudContagious Interview 1
getpngdata.vercel.app IT Worker FraudContagious Interview 1
gglab-poker.netlify.app Contagious Interview 1
googlezauthtoken.vercel.app IT Worker FraudContagious Interview 1
heulw-29-1uew-11jj2aw-2i93.xo.je Konni 1
hireproflix-iauhsmsuv-gabriels-projects-75362d20.vercel.app Contagious Interview 1
hook-server2.vercel.app Contagious Interview headhunter705 1
hylb9pbsjaqkl03g75jomhrsitz0msicjttolxo.pages.dev Contagious Interview 1
imported-spread-amplifier-chemicals.trycloudflare.com EtherHiding / UNC5342DPRK (cluster unattributed) 1
improbable-check1.vercel.app Contagious Interview 1
ip-api-server.vercel.app Contagious InterviewLazarus Group 1
ip-api-test.vercel.app IT Worker FraudContagious Interview 1
ip-checking-notification-firebase-2.vercel.app Contagious Interview 1
ip-checking-psi.vercel.app DPRK (cluster unattributed) 1
ip-core-api-one.vercel.app Contagious Interview 1
ipcheck-hashed.vercel.app Contagious Interview 1
ipcheck-production.up.railway.app Contagious Interview 1
ipcheck-six.vercel.app Contagious Interview 1
isvalid-region.vercel.app Contagious InterviewLazarus GroupPolinRider 1
iwnw-1knwni-21siw.xo.je Konni 1
jacksonmori.vercel.app IT Worker Fraud Jackson Mori 2
jankowski.vercel.app IT Worker Fraud Michal Jankowski 1
jeij29jcjwhfik.kesug.com Konni 1
joiner-for.vercel.app IT Worker Fraud 2
joseph-jackson.vercel.app IT Worker Fraud Michael Liu Liang 1
json-project-opal.vercel.app Contagious Interview 1
jwt-alpha-woad.vercel.app IT Worker FraudContagious Interview 1
kanbei-profile.vercel.app IT Worker Fraud 1
kauai-site.vercel.app IT Worker Fraud Kauai Santana 1
keo.pages.dev Contagious Interview 1
larry-levine.vercel.app IT Worker Fraud Larry Levine 1
liu-liang.vercel.app IT Worker Fraud Michael Liu Liang 1
ljs5950.cafe24.com APT37 1
locate-my-ip.vercel.app Contagious Interview 1
logkit.vercel.app IT Worker Fraud 1
louie-iota.vercel.app IT Worker Fraud 1
metric-analytics.vercel.app IT Worker FraudContagious Interview 1
michael-liang.vercel.app IT Worker Fraud Michael Liu Liang 1
miej293-qk2insn-12nnsiw.xo.je KimsukyDPRK (cluster unattributed) 2
milanzubic.vercel.app IT Worker Fraud Milan Zubic 1
mnmski.cafe24.com Lazarus Group 1
multibank-poker.netlify.app Contagious Interview 1
my-portfolio-pi-snowy.vercel.app IT Worker Fraud Jackson Mori 1
my-website-iota-liard.vercel.app IT Worker Fraud Jackson Mori 1
naruhito-kaide.netlify.app IT Worker Fraud 1
ned.kesug.com Kimsuky 1
nikosamofa.netlify.app IT Worker Fraud Nikos Amofa 1
online-mobile-portfolio.vercel.app IT Worker Fraud 1
openmatrix-app882.vercel.app Contagious Interview 1
orken.vercel.app IT Worker Fraud 1
peku.vercel.app IT Worker Fraud 1
permission-resident-lots-ebooks.trycloudflare.com EtherHiding / UNC5342DPRK (cluster unattributed) 1
peterson-assets-visible-secrets.trycloudflare.com EtherHiding / UNC5342DPRK (cluster unattributed) 1
pngconvert-p0kl4fodi-jhones-projects-f8ddbcbe.vercel.app IT Worker FraudContagious Interview 1
polymarket-cli-testing.vercel.app Contagious Interview 1
portfolio-29-6.vercel.app IT Worker Fraud 1
portfolio-ideal-softer.vercel.app IT Worker Fraud 1
portfolio-jamesmiller-git-master-ares-dev.vercel.app IT Worker Fraud James Abram Miller 1
portfolio-one-navy-24.vercel.app IT Worker Fraud Naoyuki Tanaka 1
portfolio-santiagourregobotero.vercel.app IT Worker Fraud William Harris 1
portfolio-sebastian-robinson-74.vercel.app IT Worker Fraud Sebastian Robinson 1
portfolio-williamharris0214.vercel.app IT Worker Fraud William Harris 1
precommit.vercel.app Contagious InterviewLazarus Group 1
quantapath-app914.vercel.app Contagious Interview 1
quantapath-ext275.vercel.app Contagious Interview 1
rentbarker.vercel.app IT Worker Fraud 2
rgg-test.vercel.app Contagious Interview 1
rgg-vercel.vercel.app Contagious Interview 1
ronel-resume.vercel.app IT Worker Fraud Chae Gwang Jin 1
ruijin-ai-dev0801.vercel.app IT Worker Fraud Rui Jin 1
ryan-choi-me.netlify.app IT Worker Fraud Tyler Knapp 1
serve-cookie.vercel.app Contagious Interview 1
server-victory5.vercel.app Contagious Interview 1
sha256-validate-rpc.vercel.app Contagious Interview 1
shaorun-portfolio.vercel.app IT Worker Fraud Shaorun Zhang 1
sos-security.vercel.app IT Worker Fraud 2
taro-aikuchi.vercel.app IT Worker Fraud Taro Aikuchi 1
tech-veteran.onrender.com IT Worker Fraud 1
terminal-labels-fan-witness.trycloudflare.com EtherHiding / UNC5342DPRK (cluster unattributed) 1
treppr.vercel.app IT Worker Fraud 2
trumpshair.vercel.app IT Worker Fraud 1
trumpx-dusky.vercel.app IT Worker Fraud 1
ufobirddog.vercel.app IT Worker Fraud 1
updated-portfolio-rust-six.vercel.app IT Worker Fraud 1
vodcat-self.vercel.app IT Worker Fraud 1
vscode-config-settings.vercel.app IT Worker FraudContagious Interview 1
vscode-config.vercel.app Contagious InterviewLazarus GroupPolinRider 1
vscode-ext-git.vercel.app Contagious Interview 1
vscode-extension-260120.vercel.app Contagious Interview 1
vscode-load.vercel.app IT Worker FraudContagious Interview 1
vscode-settings-0506.vercel.app Contagious Interview 1
vscode-setup.vercel.app Contagious InterviewLazarus GroupPolinRider 1
vscode-toolkit-bootstrap.vercel.app Contagious Interview 1
vscodesettingstask.vercel.app Contagious Interview 1
w92nhw-2j19w-wooaj2.xo.je Konni 1
wallet-management-tg-bot.vercel.app Contagious Interview 1
web3-metric-analytics.vercel.app IT Worker FraudContagious Interview 1
wi20a-1kkan-llam2.xo.je Konni 1
youthdream.vercel.app IT Worker Fraud Liu Jian Hua 1
zone-api-navy.vercel.app IT Worker FraudContagious Interview 1
Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Compromised packages and repositories name victims. See the sourcing methodology.