162.0.239.85
162.0.239.85 is an IP address
that 2 published sources report
in connection with Contagious Interview activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Jamf Threat Labs and Newton Paul.
The earliest of those reports is dated 2026-09-11 and the most recent 2026-10-29.
ip address Contagious Interview MATCHED IN SOURCE
Network
| Kind | data centre |
|---|---|
| Network | Namecheap, Inc. |
| Announced by | AS22612 Namecheap, Inc. |
| Country | United States |
| Flags | hosting range |
Sources
-
…com.apple.quarantine from the standard binary (Mole) Launches the app as a decoy with open -a Curls down /task/mac from C2 at 162.0.239.85 The modified application is effectively set up to run the .macos executable upon double-clicking the app, which then goes on to display…
Contagious Interview: Trojanized macOS Installers — Jamf Threat Labs -
…decoys 2026-10-26 162.0.239.85:3000 Access permanently suspended.…
DPRK's Contagious Interview Meets ErrTraffic — Newton Paul
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.