ripaelit1111@gmail.com

ripaelit1111@gmail.com is an email address that 2 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Group-IB and The Raven File. The earliest of those reports is dated 2025-08-19 and the most recent 2026-04-08.

email address IT Worker Fraud MATCHED IN SOURCE

First seen 2025-08-19 · last seen 2026-04-08

Sources

  • Nearby text:

    …ikov0413@gmail.com oliwerpalm@outlook.com progdev77@gmail.com proharvester@outlook.com raikovskyi830@gmail.com ranko746.dev@gmail.com ripaelit1111@gmail.com smartdev531@gmail.com starmastar1126@gmail.com superdev00527@gmail.com tech.veteran71@gmail.com ubiuquitosutrusty@gmail.com web.fan.0…
    Cyber Saga: In the Footsteps of the DPRK IT Workers | Group-IB Blog — Group-IB · under “Email Indicators” · published 2026-04-08 · pulled 2026-08-30
  • Nearby text:

    …om ribcage_nastiness263@simplelogin.com richardclawsondv@gmail.com richardjones0928@gmail.com richbondjames@gmail.com richman5225@gmail.com ripaelit1111@gmail.com risingdev000@gmail.com riyaislamsjajhsshsh@gmail.com rizalyousoffdevelopment@gmail.com rmonet1203@gmail.com rob760331234567890@gmail.com ro…
    Unmasking DPRK IT Workers: Email Address Patterns as Hiring Red Flags — The Raven File · under “CONCLUSION” · published 2025-08-19 · pulled 2026-09-01

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: Cyber Saga: In the Footsteps of the DPRK IT Workers | Group-IB Blog

Group-IB lists 105 other indicators in this source. 7 are shown, chosen across types.

All 106 indicators from this source

Cited by the same report: Unmasking DPRK IT Workers: Email Address Patterns as Hiring Red Flags

The Raven File lists 1,741 other indicators in this source. 5 are shown, chosen across types.

All 1,742 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.