Chollima Hunter

← Potential DPRK Profiles

pipu.cc listing 3693

A profile a reviewer opened and left under review. It matches screening signals of DPRK IT-worker personas; no connection to those operations is stated.

Statusunder review
Confidencemedium
Profile pipu.cc/en/item_detail.php?item_id=3693
Account created2023-09-15
Network —
Claims —
Line type VOIP
Skype
Photograph —
SignalsMarketplace CVVoIP numberName mismatch dev0926 (GitHub, displays cofDev)
Surfaced bypipu.cc listing 3693
Found byA per-number line-type lookup, run by the site's operator on 21 September 2026 over 61 pipu.cc listings and handed to the queue as a table of name, address, role, telephone number, line type, and any account or republished copy of the CV found beside it
First seen2026-09-21
Last checked2026-10-03

Indicators

Indexed in the Remote Workers search, each with its own page:

Review

Recovered from pipu.cc listing 3693, one of 1,882 developer resumes uploaded to that marketplace between 26 June and 2 July 2025, each from its own fresh seller account named after the resume's subject. The name the resume is filed under is withheld here. A per-number lookup run on 21 September 2026 resolves the telephone number on the CV to a Skype number, an interconnected VoIP line bought online rather than a carrier handset, which is the line type behind 33 of the 44 telephone numbers this site had already looked up on published IT-worker personas. The listing's product image is not shared with any other listing in the set. Nothing here reaches the index by a shared value. A LinkedIn people search on the CV's name, run under an authenticated session on 21 September 2026 because the codewithsadaf account behind listing 3657 had been reachable that way and by nothing in the listing itself, found nothing that is the CV's account. No account under the name. Chollima Hunter research named the same address and number on 3 October 2026, independently of pipu.cc. A GitHub commit search the same day shows the address authoring commits as dev0926, an account created in September 2023 that displays the name cofDev; the account's My-Portfolio repository begins with eight commits by another author, dantaeil (danjohnson0037@gmail.com), titled as the first release of a Dan Johnson portfolio, so the portfolio was taken from someone else and re-skinned. The about.me page under the same name places the developer in Maastricht, the Netherlands, while the number is a Virginia Skype line. Chollima Hunter research also recorded a LinkedIn account, since removed, a Vercel portfolio, three about.me pages and WayUp, RocketReach and beBee profiles under the name, all listed here. One dev0926 commit is authored as guillermo at Gtays@prontotrak.com.

Sources

Unconfirmed lead under review An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. The heading is the name or account the profile presents under, not established to be the name of whoever operates it. The confidence is this site’s own screening score, not a source’s. If this entry concerns you, see the guidance for listed people.