OK I don't think the http:// in the cross domains xml was nessasary.
Open the XML file that was in that zip file. And replace these two lines
<allow-access-from domain="
harabara.com/" />
<allow-access-from domain="
www.harabara.com/" />
WITH
<allow-access-from domain="harabara.com/" />
<allow-access-from domain="
www.harabara.com/" />
I always use the public_html, whack it in there.
Joomlabear has the same crossdomain.xml with
<allow-access-from domain="
www.joomlabear.com" />
<allow-access-from domain="joomlabear.com" />
Which must be why Joomlabear.com is working.