http://sfrclak.com:8000/6202033
http://sfrclak.com:8000/6202033 is a payload URL
that one published source reports
in connection with Contagious Interview activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from N3mes1s.
The report is dated 2026-03-31.
payload url Contagious Interview MATCHED IN SOURCE
Source
-
…Network IOCs Type Indicator Context Domain sfrclak.com Primary C2 IP 142.11.206.73 C2 server URL http://sfrclak.com:8000/6202033 Payload endpoint Port 8000 (HTTP) C2 listener User-Agent mozilla/4.0 (compatible; msie 8.0; windows nt 5.1; trident/4.0)…
Axios npm Supply Chain Compromise (2026-03-31) — Full RE + Dynamic Analysis + BlueNoroff Attribution — N3mes1s
Find this indicator in the index, or see every payload URL this site holds under Payload URLs in the browse listing.