Chollima Hunter

← All actor clusters

qorexa-labs.com

qorexa-labs.com is a domain that one published source reports in connection with Moonstone Sleet activity, which public reporting attributes to North Korea (DPRK). It is cited here from @banthisguy9349. The report is dated 2026-11-06.

domain Moonstone Sleet RESEARCHER POST

First seen 2026-11-06 · last seen 2026-11-06

Registration

Registered2026-05-14
RegistrarNameCheap, Inc.
Expires2027-05-14
Last changed2026-05-14
Statusclient transfer prohibited

From the registry’s RDAP record for qorexa-labs.com, looked up 2026-11-13.

Source

  • In a reply to bbsz's post on Qorexa Labs (AS402425), which Doug Madory of Kentik says is believed to be a Moonstone Sleet front, the researcher reports that qorexa-labs.com is live with the same tank game as qorexalabs.com. The tie to North Korea is the quoted claim, not this site's finding. Read on 12 November 2026.
    x.com/banthisguy9349/status/2118849964017434669 — @banthisguy9349 · under “Qorexa Labs: second site with the same tank game” · published 2026-11-06 · pulled 2026-11-12

Find this indicator in the index, or see every domain this site holds under Domains in the browse listing.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.