`shopandtravelusa.com`

shopandtravelusa.com is a domain that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Cybergeeks. The report is dated 2022-01-31.

domain Lazarus Group MATCHED IN SOURCE

First seen 2022-01-31 · last seen 2022-01-31

Registration

Registered	2017-04-06
Registrar	GoDaddy.com, LLC
Expires	2028-04-06
Last changed	2026-04-07
Status	client delete prohibited, client renew prohibited, client transfer prohibited, client update prohibited

From the registry’s RDAP record for shopandtravelusa.com, looked up 2026-10-05.

Source

…INDICATORS OF COMPROMISE C2 domains: mante.li bmanal.com shopandtravelusa.com industryinfostructure.com SHA256: 803dda6c8dc426f1005acdf765d9ef897dd502cd8a80632eef4738d1d7947269 URLs:…
A DETAILED ANALYSIS OF LAZARUS APT MALWARE DISGUISED AS NOTEPAD++ SHELL EXTENSION — Cybergeeks · under “A detailed analysis of Lazarus APT malware disguised as Notepad++ Shell Extension” · published 2022-01-31 · pulled 2026-09-12

Find this indicator in the index, or see every domain this site holds under Domains in the browse listing.

Related indicators

Cited by the same report: A DETAILED ANALYSIS OF LAZARUS APT MALWARE DISGUISED AS NOTEPAD++ SHELL EXTENSION

Cybergeeks lists 4 other indicators in this source.