SlickRockWeb 🇺🇲🇺🇦 Profile picture
Feb 12, 2020 4 tweets 6 min read Read on X
Current scam targeting political campaigns. Not sure if its purely a financial scam or if the links might include malspam. Campaign receives an ominous email saying its campaign web domain will expire if it not immediately renewed. #malware #spam #malspam #infosec #elections2020 Image
Clicking on the bit(.)ly URL shortened link takes the user through a javascript redirect chain & likely redirects depending on a variety of factors (victim fingerprinting) to another site. Here the user lands on domainremit(.)com #malware #spam #malspam #infosec #elections2020 Image
Here the user is asked to enter their information and eventually enter online payment information. The thing is the domain in question was NOT in danger of expiring & the language is clever by saying "search engine registration" #malware #spam #malspam #infosec #elections2020 Image
The original email was sent from an IP address (104.194.139.99) hosted at the Bulletproof hosting company FranTech Solutions out of Wyoming. Some of you will recognize them from other campaigns. I will leave it at that. #malware #spam #malspam #infosec #elections2020 Image

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with SlickRockWeb 🇺🇲🇺🇦

SlickRockWeb 🇺🇲🇺🇦 Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @SlickRockWeb

Jul 12
Seems to be a very interesting coordinated effort that is very well funded and links to almost all of the House Democrats that have come out against Biden. Are these House Dems just really naive or are they all part of the scheme. 🔥🔥 I have a feeling this is going to blow up.
And I wasn't even talking about this .... the leaked Ted Cruz fund raisers a month or two back .... but wow why would Ted Cruz be meeting with a guy who is now helping to fund House Dem backstabbers? 🤔 You know this @RepAngieCraig Image
Read 8 tweets
Oct 23, 2023
🔥🔥 Now that Sidney Powell has flipped on everyone else in the #BigLie (Michael Flynn as well possibly)… these prior details about David Hancock apparently having a phone recording between Donald Trump and Sidney Powell at Lin Wood’s Tomotley about the time General Flynn got his pardon from Trump … well 💥💥
From @visionsurreal earlier this summer …
@visionsurreal Outstanding article just out by @emptywheel that follows along this line of thinking that there may in fact be some damning evidence of a quid pro quo for the pardon Trump gave to Flynn while they were all at Lin Wood’s plantation in Georgia. emptywheel.net/2023/10/22/don…
Read 6 tweets
Aug 22, 2023
I have become fascinated with one of the more obscure defendants that was named in the @faniforDA indictment that most prominently included Donald Trump and his efforts to reverse the Presidential outcome (his loss) in Georgia. The name is Rev. Stephen Lee and he is an ordained Missouri Synod Lutheran minister & a connection to NAR (New Apostolic Reformation). 1/9
Here is the relevant section of the @faniforDA indictmetn that discusses Rev. Stephen Lee's invovlement and the relevant charges. Basically he traveled to Georgia to help with the efforts of overturning Trump's loss there after the 2020 election. Lee was indicted for attempting to coerce election worker Ruby Freeman into falsely admitting election fraud. 2/9
First it should be noted that the doctrine of the Missouri Synod Lutheran Church (LCMS) is very very different from that of the ELCA Lutheran church with LCMS being much more conservative and rigid. Anti-LGBTQ, anti-reproductive rights, forbids women being ministers and oddly states a position against Freemasonry ect... 3/9
Read 9 tweets
Jul 16, 2023
There is alot of talk that the new Qanon movie "Sound of Freedom" is being heavily astroturfed and this thread by @CyKoore sure seems to support that idea. Lots of talk that big blocks of tickets are being bought up by unknown dark money sources and lots of videos of empty… twitter.com/i/web/status/1…
In fact Angel Studios themselves crowd-sourced the purchase of tickets to the #SoundOfFeeedom movie that supposedly were then provided free of charge to patrons wanting to watch the movie. It would appear millions of tickets were procured in this manner both by Angel Studios and… twitter.com/i/web/status/1…
So is the supposed talk of box office success of #SoundOfFeeedom actually being astroturfed? Its difficult to empirically assess something like this but one way is to look at Google trends data and compare it to other movie openings. We found a few things of interest. One thing… https://t.co/KS6fPXmayktwitter.com/i/web/status/1…
Image
Read 9 tweets
Apr 7, 2023
This is looking more and more like a classic Kremlin hack and leak disinfo Op. Pretty clear with the fabricated Russian vs Ukrainian troop losses. We have found a couple pro-Kremlin accounts dispersing the documents on Twitter well before the NYTimes. Accounts involved in prior Kremlin #disinfo
Here is one pro-Kremlin troll account that has a clear past history of pushing out / boosting prior Kremlin disinformation operations. This account pushed out a portion of the leaked document hours before the New York Times article and promoted the part that was fabricated showing a significantly lower level of Russian troop losses than that of Ukrainian troop losses. Oddly levels lower than what even the Russian MoD has admitted to in the past. We redacted the sensitive parts of the screenshot of the original tweet.

Without having the original un-rendered image its difficult to assess how it might have been photoshopped / manipulated but it does appear text insertions were made in the "Total Assessed Losses" section. See image 2. Because the documents appear to have been leaked as photos of the physical copies there are bends and warpage in the final image. This was not fully taken into account in the manipulated / fabricated image.
And here is possible confirmation. Before and after ... insertions and deletions in the numbers of troop losses and equipment losses. Since this was also posted by someone else anonymously still no way to vouch for authenticity but seems to align with what others are saying in private. Still not clear how these classified documents detailing secret U.S. and NATO plans for aiding Ukraine were leaked and how much of them are even real. #NATO leaks #activemeasures #InfoOp cc @Dragnet_News
Read 14 tweets
Mar 29, 2023
So remember a few months back when @NickKnudsenUS and I believe @visionsurreal also before that brought this to our attention .... this crazy Watchman Decree pledge / NAR adjacent video? One part of it seemed especially odd? The part that pledged "we declare we will be energy… twitter.com/i/web/status/1…
This section in particular in Emma Brown's new @washingtonpost article talking about how Ginni Brown's CRC group was only ever on one amicus brief and it was with the "American Fuel and Petrochemical Manufacturers" group. Who here would be shocked to learn that we may soon find… twitter.com/i/web/status/1…
Here is the tweet from @NickKnudsenUS again that shows the full video. Please watch it. Note the part about the "seven mountains" ... something very integral to NAR ideology. And the reference to "wokeness" is no mistake. This is "Christofascism"
Read 5 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us!

:(