immunefi.com/profile/ethprotector
immunefi.com/profile/ethprotector is a personal site
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Chollima Hunter.
The reporting files it under the persona Janul Azwan, alongside 6 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
personal site IT Worker Fraud CURATED
Registration
| Registered | 2020-09-13 |
|---|---|
| Registrar | Squarespace Domains II LLC |
| Expires | 2027-09-13 |
| Last changed | 2026-08-30 |
| Status | client delete prohibited, client transfer prohibited |
Source
-
Read on 12 September 2026 from the page cited. ethprotector is one of the names the reporting already files this operator under, and the URL appears inside a researcher’s note this site already quotes, but it had never been recorded as an indicator of its own. The profile is a bug-bounty account on Immunefi: a member since 8 April 2024, ranked 520th all time, total earnings of $13,697, one bug-bounty report rated high, and two audit-competition reports. A DPRK IT-worker persona paid through a whitehat bounty platform is being paid by the projects it reports bugs to, under a name and a payment route of its own choosing, which is a different funding path from the salaried contract work this dataset is mostly about. Nothing here establishes that the reports were not genuine security work.
immunefi.com/profile/ethprotector — Chollima Hunter
Find this indicator in the index, or see every personal site this site holds under Personal sites in the browse listing.