luckygodnesstan@gmail.com

luckygodnesstan@gmail.com is an email address that 2 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from tayvano (lazarus-bluenoroff-research) and The Raven File. The earliest of those reports is dated 2025-08-19 and the most recent 2026-10-18.

email address IT Worker Fraud MATCHED IN SOURCE

Listed as lucky.godness.tan@gmail.com

First seen 2025-08-19 · last seen 2026-10-18

Sources

  • Nearby text:

    …TalentKingDev - codewarrier3000 - codewarrier3000@gmail.com - github.com/TalentKingDev - linkedin.com/in/jvmontero-35/ - lucky.godness.tan@gmail.com - t.me/expertvetted7 (ID: 7030416097) • [Messages](./user-7030416097-@expertvetted7-codewarrier3000.txt) - +380 97 432 9217 -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Julian Valentino Montero / Eugene Tan / TalentKingDev” · published 2025-06-19 · pulled 2026-08-30
  • Nearby text:

    …mail.com loyal.dev1125@gmail.com lprfacial247@gmail.com lucas.wong1216@gmail.com lucaschan95s@gmail.com lucky.freelancer.user6129@gmail.com lucky.godness.tan@gmail.com luckybaymax9518@gmail.com luckycrocodile2261@gmail.com luckycyber1129@gmail.com luckydev2350@gmail.com luckydeveloper1113@gmail.com luckyma…
    Unmasking DPRK IT Workers: Email Address Patterns as Hiring Red Flags — The Raven File · under “CONCLUSION” · published 2025-08-19 · pulled 2026-09-01

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: DPRK IT Workers

tayvano (lazarus-bluenoroff-research) lists 854 other indicators in this source. 7 are shown, chosen across types.

All 855 indicators from this source

Cited by the same report: Unmasking DPRK IT Workers: Email Address Patterns as Hiring Red Flags

The Raven File lists 1,741 other indicators in this source. 5 are shown, chosen across types.

All 1,742 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.