`fairyland0926@gmail.com`

fairyland0926@gmail.com is an email address that 2 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from tayvano (lazarus-bluenoroff-research) and The Raven File. The earliest of those reports is dated 2025-08-19 and the most recent 2026-10-18.

email address IT Worker Fraud MATCHED IN SOURCE

First seen 2025-08-19 · last seen 2026-10-18

Sources

Nearby text:

…x.com/j7771122 - github.com/jbb1122 - IP: 223.165.6.13 - gombau1212@gmail.com - jbangbang1122@gmail.com - johnkalp1106@gmail.com - fairyland0926@gmail.com - talenteddolphin619@gmail.com - https://x.com/browsercookies/status/1932956578090770818 - ![](./1932956578090770818-1.png) -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Jin Bang, Primoz Bernard” · published 2025-06-19 · pulled 2026-08-30
Nearby text:

…com ericvadim23@gmail.com erosgod19921118@gmail.com etd.multidisciplinary@gmail.com eugenedanner0105@gmail.com f.a.lth.e.jak.se.n@gmail.com fairyland0926@gmail.com fantasticdev1992@gmail.com fastdevboy@gmail.com fathersonstu827@gmail.com feature0209@gmail.com felix44291@gmail.com fifed97599@favilu.com…
Unmasking DPRK IT Workers: Email Address Patterns as Hiring Red Flags — The Raven File · under “CONCLUSION” · published 2025-08-19 · pulled 2026-09-01

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: DPRK IT Workers

tayvano (lazarus-bluenoroff-research) lists 854 other indicators in this source. 7 are shown, chosen across types.

All 855 indicators from this source

Cited by the same report: Unmasking DPRK IT Workers: Email Address Patterns as Hiring Red Flags

The Raven File lists 1,741 other indicators in this source. 5 are shown, chosen across types.

All 1,742 indicators from this source