json-project-opal.vercel.app

json-project-opal.vercel.app is a hosted site that one published source reports in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Mees van Wickeren (Medium). The report is dated 2025-11-29.

hosted site Contagious Interview RESEARCHER POST

First seen 2025-11-29 · last seen 2025-11-29

Source

  • Transcribed by hand on 18 September 2026 from the researcher's follow-up to an earlier post on the DredSoftLabs front company, which the scraper cannot read because Medium answers it with a bot check and both archive services refused automated fetches the same day. The post reports that the Dredsoft-Labs GitHub organisation and its Telegram account were renamed JSoft Labs and that a further front company, MetaMint Studio, had appeared on LinkedIn, credits Travis Simcox for the latter, and pivots from one loader string to 116 repositories, nine delivery hostnames and three command-and-control addresses. The three addresses, two of which the post gives with port 4558 and one with port 8353, and the three Vercel hosts are the values carried here; the loader paths on shared JSON-hosting services are recorded above rather than as indicators. Values are re-fanged from the post's hxxp and bracketed-dot form and nothing else is altered.
    medium.com/@meeswicky1100/follow-up-blog-on-fake-dprk-dredsoftlabs-company-1f7721214acf — Mees van Wickeren (Medium) · under “DredSoftLabs, JSoft Labs and MetaMint Studio loader infrastructure (Mees van Wickeren)” · published 2025-11-29 · pulled 2026-09-18

Find this indicator in the index, or see every hosted site this site holds under Hosted sites in the browse listing.

Related indicators

Cited by the same report: medium.com/@meeswicky1100/follow-up-blog-on-fake-dprk-dredsoftlabs-company-1f7721214acf

Mees van Wickeren (Medium) lists 5 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.