SlickRockWeb 🇺🇲🇺🇦 Profile picture
CEO of SlickRockWeb, SEO guy & part time citizen journalist. A numbers cruncher, problem solver, and now @DFRLab trained Digital Sherlock #infoSec #infoOps

Sep 11, 2020, 11 tweets

This redirecting of Antifa(.)com to the Joe Biden campaign website seems more & more well thought out & planned. Using a headerless 302 redirect was not accidental. Using @Namecheap as ur registrar also makes getting any response from them near impossible.

But the one thing they may not have accounted for is to have the Antifa(.)com domain get flagged as malicious by Google. And given this domain is likely worth 10's of thousands of dollars on the open market. Having all its value erased by Google isn't insignificant @Namecheap

Hopefully the Biden campaign can just block the incoming IP address given the headerless 302 redirect is proving more problematic than we thought. Which begs the question ... why is this even allowed anymore? Is there ever a legitimate use for allowing headerless 302 redirects?

I am glad the Biden campaign @Rob_Flaherty is finally aware of this and attempting a solution. Because right-wing accounts like these continue to exploit a situation that appears to have some possible (unconfirmed) Russian connections / involvement.

Its still not clear if Antifa(.)com actually exchanged hands earlier this yr, or remains under the control of a previous Russian registrar. Whats know is that on 4-14-20 at 3:30 am the Antifa(.)com domain changed 2 private Namecheap registrar & pointed its DNS 2 Siteground

A wordpress CMS based website using the WP theme Coming Soon was constructed soon after on Siteground. There is a fair amount of interesting things in the archived code including links to the Twitter and Youtube accounts that were also created in April. #infoOps #infosec #osint

The Twitter account they used @AntifaWebsite was suspended in August by Twitter. Not sure why or for what reason. This original bio description talking about "financial opportunities" is quite interesting and reminiscent of recent Russian operations uncovered by @Graphika_NYC

This may be completely coincidental but I believe Siteground is a Bulgarian company and its interesting that Google for whatever reason archived a copy of the @AntifaWebsite twitter page with the Bulgarian lang tag

Here is one archived screen of the Antifa(.)com website. It also isn't clear where on the website one could sign up anonymously to join the "worldwide" Antifa fight and start getting ur Soros checks. Sorry a little #disinfo humor.

The operatives behind this #infoOps experimented with a few different redirects of Antifa(.)com starting in late July I believe. Briefly redirected it at a @KamalaHarris website and then finally pointed it at the JoeBiden(.)com website where it continues to redirect. #osint

The accounts @File411 and @ushadrons were on this story early and this is one of their threads. And so many others have contributed to flushing alot of this out like @IdeaGov and @ChiefCovfefe #disinfo #osint

Share this Scrolly Tale with your friends.

A Scrolly Tale is a new way to read Twitter threads with a more visually immersive experience.
Discover more beautiful Scrolly Tales like this.

Keep scrolling