pipu.cc listing 5246
A profile a reviewer opened and left under review. It matches screening signals of DPRK IT-worker personas; no connection to those operations is stated.
| Status | under review |
|---|---|
| Confidence | medium |
| Profile |
github.com/xzeromcpe
|
| Account created | 2015-08 |
| Network | — |
| Claims | — |
| Line type |
Wireless
|
| Photograph |
NOT A PHOTO
|
| Signals | Marketplace CVName mismatchIndeed relay xzeromcpe as Zero |
| Surfaced by | pipu.cc listing 5246 |
| Found by | pipu.cc item_detail.php — full crawl of item_id 3446-5343 |
| First seen | 2026-09-12 |
| Last checked | 2026-09-13 |
Indicators
-
EMAIL ADDRESS
andreleon8_mdb@indeedemail.com -
PHONE NUMBER
+1 786 247 4921 - GITHUB PROFILE github.com/xzeromcpe
Indexed in the Remote Workers search, each with its own page:
Review
Recovered from pipu.cc listing 5246, one of 1,882 developer resumes uploaded to that marketplace between 26 June and 2 July 2025, each from its own fresh seller account named after the resume's subject. The name the resume is filed under is withheld here. This dataset is as likely to hold a job applicant's harvested CV as an operator's own, item 4590 in this file is a case where the name on one belonged to an uninvolved engineer whose identity had been taken, and the finding is the account rather than the person named on the page. The GitHub account on it, xzeromcpe, states the name "Zero" instead, and was created 2015-08, giving a location of Miami, Florida. The telephone number on the resume is a wireless line on VERIZON WIRELESS, which is what an ordinary applicant has and is a point against this being a fabricated identity. This is a thin entry. The account is years old and the name it states may be a shortening or a company account rather than a different person, which is why it is marked medium rather than high. Nothing here is corroborated by a cited report or by a shared indicator with any persona this site holds. Read item 4590 in this file before drawing a conclusion from a name mismatch: there, the mismatch was an identity theft and the name on the resume belonged to an uninvolved engineer. A resume in this dataset is as likely to have been harvested from a real job applicant as to have been written by an operator, and telling those apart is the whole of the work still outstanding. The photograph published with the listing was examined on 13 September 2026 and is an outdoor photograph of a man holding his glasses. It carries no camera metadata and no generator provenance, but neither does any other image on pipu, which re-encodes every upload to an 800x800 thumbnail — so nothing follows from the absence. No AI-image detector has been run against it. The account's own avatar is an anime-style illustration of a figure at a laptop. There is no face here for an AI-image detector to score, so the AI-generated-photograph heuristic does not apply to this account.