thumbs up for your investigating work. Clearly you got a point here and i think would be good for cdx to explain this .
I have reached out to Sten Loor 5 hours ago and he hasn't responded yet. This was reason enough for me to reach out to our backup dev team. I have asked them to send us a video showing each of their team members introducing themselves. And to send us each members' LinkedIn and Github pages as well, so that we can easily verify that they are who they claim to be.
In the meantime I will be reaching out to Upwork where I met Sten Loor and will be reporting him for identity theft. I will do the same for his two buddies because they might not be who they pretend to be either.
I have to thank the OP for bringing this to my attention. Thankfully, we have not entered into any actual software development with these people, so there is zero negative impact from their attempted fraud.