haruhana-happytown.com
haruhana-happytown.com is a domain
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Cookie Connoisseur (@browsercookies).
The report is dated 2025-05-29.
The reporting files it under the persona David, alongside 23 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
domain IT Worker Fraud RESEARCHER POST
Registration
The registry had no record of haruhana-happytown.com when it was looked up on 2026-10-05: the registration had lapsed or been deleted.
Source
-
The researcher presents all of these as addresses used by one operator he calls David. The three on haruhana-happytown.com are described as belonging to a Korean-named application, Haru Hana; the remaining addresses follow in two further posts of the same thread.
x.com/browsercookies/status/1927878202610843680 — Cookie Connoisseur (@browsercookies)
Find this indicator in the index, or see every domain this site holds under Domains in the browse listing.