`ext-checkdin.vercel.app`

ext-checkdin.vercel.app is a hosted site that 3 published sources report in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Snyk, The Hacker News and Kieran Miyamoto (kmsec). The earliest of those reports is dated 2026-02-26 and the most recent 2026-10-18.

hosted site Contagious Interview MATCHED IN SOURCE

First seen 2026-02-26 · last seen 2026-10-18

Sources

…The fallbacks barely registered. Platform-specific payload delivery The decoded C2 URL points to a Vercel deployment ( ext-checkdin.vercel.app ), with 31 fallback domains using patterns like cleverstack-ext301 , brightlaunch-app615 , neuraldock-ext126 .…
Inside StegaBin: How a DPRK Steganography Campaign Generated Headlines | Snyk — Snyk · under “Platform-specific payload delivery” · published 2026-03-12 · pulled 2026-09-09
…One such domain, "ext-checkdin.vercel.app" has been found to serve a shell script, which then contacts the same URL to retrieve a RAT component. The Trojan connects to…
North Korean Hackers Publish 26 npm Packages Hiding Pastebin C2 for Cross-Platform RAT — The Hacker News · under “North Korean Hackers Publish 26 npm Packages Hiding Pastebin C2 for Cross-Platform RAT” · published 2026-03-02 · pulled 2026-09-18
…{ // Silent fail to avoid alerting the user if there's a network/permission error } } ℹ️ Note Only the first domain (ext-checkdin.vercel.app) actually returns a status 200. All subsequent domains return a 404 The deployment could not be found on Vercel . That said, this long…
Novel DPRK stager using Pastebin and text steganography — Kieran Miyamoto (kmsec) · under “Analysis” · published 2026-02-26 · pulled 2026-10-01

Find this indicator in the index, or see every hosted site this site holds under Hosted sites in the browse listing.

Related indicators

Cited by the same report: Inside StegaBin: How a DPRK Steganography Campaign Generated Headlines | Snyk

Snyk lists 7 other indicators in this source. 5 are shown, chosen across types.

All 8 indicators from this source

Cited by the same report: Novel DPRK stager using Pastebin and text steganography

Kieran Miyamoto (kmsec) lists 22 other indicators in this source. 7 are shown, chosen across types.

All 23 indicators from this source