financemydeductible.com
financemydeductible.com is a domain
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Cookie Connoisseur (@browsercookies).
The report is dated 2025-05-26.
The reporting files it under the persona Li Qiang, alongside 6 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
domain IT Worker Fraud RESEARCHER POST
Registration
| Registered | 2025-12-15 |
|---|---|
| Registrar | GoDaddy.com, LLC |
| Expires | 2026-12-15 |
| Last changed | 2025-12-15 |
| Status | client delete prohibited, client renew prohibited, client transfer prohibited, client update prohibited |
Source
-
The post names the operator as Li Qiang, says the operator has a large number of online personas, and lists six domains under which the operator owns email addresses. The domains are transcribed from the post text, where they appear defanged; they are recorded here refanged, which is the form the rest of this dataset uses. The post also tags another account, which is a credit to a fellow researcher rather than an operator identifier, and is not recorded.
x.com/browsercookies/status/1926881589801202002 — Cookie Connoisseur (@browsercookies)
Find this indicator in the index, or see every domain this site holds under Domains in the browse listing.