`fatihafariya8@gmail.com`

fatihafariya8@gmail.com is an email address that 3 published sources report in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Chollima Hunter and bryanchriswhite (dev-trap-dossiers). The earliest of those reports is dated 2026-05-13 and the most recent 2026-09-28.

email address Contagious Interview CURATED

Listed as fatihafariya8+2@gmail.com

First seen 2026-05-13 · last seen 2026-09-28

Sources

Found on 28 September 2026 by reading every commit author in the 39 impersonation-company lure repositories filed the same day. Leaving out three long-established developers whose projects the lures copy (their commits are the copied history), every other author account now returns 404: GitHub has removed them, in a batch whose names follow farm patterns (CodeBlock and a number, aitechbuild and a number, 0xroaman-N, GitWorkHub8 and 9, williamwagle1 to 14, gitworkspace17, everdreamsoft variants) and whose addresses are plus-addressed Gmail variants and look-alike company domains (remotely-limitbreak.com, celestium.store and celestium.exchange, lukso.bet, everdream-soft.com, astrabytesync.com). Each address is carried with the account GitHub credits it to, which is the account that registered it. Four addresses at domains that may belong to real businesses are left out, though the accounts that used them are carried.
github.com/GitWorkHub8 — Chollima Hunter · under “Deleted accounts committing to the impersonation-company lure repositories (Contagious Interview)” · pulled 2026-09-28
…The operator's commit-author Gmail (`fatihafariya8+2@gmail.com`) sits on a single parent inbox (`fatihafariya8@gmail.com`) that the `+N` alias convention routes every persona's mail back to.…
bryanchriswhite/dev-trap-dossiers — README — bryanchriswhite (dev-trap-dossiers) · under “📮 You're filing a takedown report against any repo in this campaign” · published 2026-05-18 · pulled 2026-10-27
…created the same day | | `GitWorkHub9` | User | 272514006 | (pre-2026) | (search-restricted) | Sole committer to `AjunaVerse_MVP`; email `fatihafariya8+2@gmail.com` (Gmail `+2` alias) | | `GitWorkHub99` | User | 213663943 | older | 21 | Sibling user account; **credibility-farming**: hosts personal…
bryanchriswhite/dev-trap-dossiers — incidents/2026-05-13-ajunaverse-mvp/README — bryanchriswhite (dev-trap-dossiers) · under “6.1 The two organizations and the single committer” · published 2026-05-13 · pulled 2026-10-27

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: github.com/GitWorkHub8

Chollima Hunter lists 112 other indicators in this source. 5 are shown, chosen across types.

All 113 indicators from this source

Cited by the same report: bryanchriswhite/dev-trap-dossiers — README

bryanchriswhite (dev-trap-dossiers) lists 19 other indicators in this source. 4 are shown, chosen across types.

All 20 indicators from this source

Cited by the same report: bryanchriswhite/dev-trap-dossiers — incidents/2026-05-13-ajunaverse-mvp/README

bryanchriswhite (dev-trap-dossiers) lists 4 other indicators in this source. 3 are shown, chosen across types.

All 5 indicators from this source