Good morning Twitter! Ready for a new thread?

Some people see the #Covid19 pandemic as an opportunity to make money on people fears. Someone on the Internet decided to sell the Oxybreath Pro, a "high-quality" crap. Let's find this assh*le ⬇️⬇️⬇️
Few days ago, I received a tip. A lot of french websites are redirected to a site which is selling a mask: jumps.me
The redirected websites are:
- cups-corp.fr
- christophe-beche.fr
- aulnois.net
- bourgeois-serigraphie.fr
- pose-ton-couplet.fr
- jeff64blog.fr
- justinepaper.fr

I can smell something here. I decided to investigate.
On jumps[.]me, if you click on "Check the availability" you are redirected to hyperstech[.]com to validate your order.
In the legal mentions of the website the name of the company is "Novads OU"
By searching this company name on the Internet, we can find the exact same legal mentions on amazingtechsale[.]com
According to the company registry, Novads OU is located in Tallinn, Estonia and they have only 2 employees dnb.com/business-direc…
They have a website novas[.]co where they sell some crappy gadgets
Did you notice the logo on the previous screenshot? The website drone720x[.]com is hosted on the same pair. This website is selling low quality drones
When you check the company address on maps, you can see... an UPS office. Weird 🤔
The reconnaisance phase is done. Now, it's time to find who is behind this company
The WHOIS record of drone720x[.]com gives us the name of "Pjotr Novikov" who is one of the Novas OU employee
Pjotr also registered shamannn[.]xyz with his personal email 😁
According to the company registry, Pjotr is the founder of Novads OU
In the WHOIS record of hyperstech[.]com, we can find a new name: "Laurent Astoul"
Laurent used the contact email address of advico[.]fr to register the website.
advico[.]fr and adscom[.]co are identical. On the website they wrote: "ADSCOM Advertising Agency is an integrated promotional advertising firm" and the credits at the bottom of the page are "Copyright © 2012 Adscom Ltd"
Adscom Ltd was a UK company dissolved on 2 July 2019 beta.companieshouse.gov.uk/company/111664…
It has been founded by Adam Harding
I'm not really surprised. Adscom Ltd also sell low quality drone on gadgethqs[.]com
This company is supposed to be dissolved. They don't have the right to sell stuff anymore...
Additional note on our friend Pjotr. Pjotr is a business man, he is part of the 6 company boards. Impressive for a 30 years old guy... teatmik.ee/en/personpriva…
That's the end of this #OSINT session. Hope you like it!

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with Baptiste Robert

Baptiste Robert Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @fs0c131y

Jul 19, 2021
Few words about #Pegasus the spyware made by #NSOGroup

Quelques mots à propos de #Pegasus le malware créé par le #NSOGroup

1/n
#Pegasus is not new. The first analyses and articles has been written in 2016

#Pegasus n'est pas nouveau. Les premières analyses et articles datent de 2016

2/n
#Pegasus is not mass surveillance. This is targeted surveillance on high profiles: lawyers, activists, journalists, ...

#Pegasus n'est pas de la surveillance de masse. C'est de la surveillance ciblée sur des profils importants: avocats, activistes, journalistes, ...

3/n
Read 13 tweets
Apr 21, 2021
#OSINT quizz: Reverse image search is not always the ultimate solution for #GEOINT

Let's try to solve this one the old way
What can we see?
- We can recognise the road signs, we are in the US.
- The building looks like NYC but it just a wild guess
- The store is in a corner
- We can read the store sign: "Hardware *umber store"
- The store sign is also in Chinese. Maybe chinatown?
Just type "Hardware *umber store" in Google. Ok, the missing letter is an l.
Read 10 tweets
Apr 7, 2021
1) After a quick image reverse search on Google Image, we can find the original publication. Yesterday, Louis de Luxembourg announced his engagement with Scarlett-Lauren Sirgue. instagram.com/p/CNUQgmaC7rm/
2) Time to check their last moves. We are in a pandemic and they are public figures, so everything should be documented. After scrolling about the last news on the Royal Family of Luxembourg, I can see they spent the last holidays in Biarritz, France parismatch.com/Royal-Blog/fam…
3) Time to open Google Maps. I can see water behind them and the building in the background is pretty far from them which suggest the beach is probably long.

Quickly, we have a possible match.
Read 10 tweets
Apr 6, 2021
Très forte attaque = Oh mon dieu on a plus que 3 utilisateurs

Venue de l’étranger = Chef on a trouvé une IP venant de Belgique dans les logs

#TraduisonsLes
Vous avez juste une infrastructure qui ne tient pas la charge. Encore une fois. Tous les parents de France font travailler leurs enfants en ce retour de week-end prolongé, ce qui a probablement provoqué la surcharge des serveurs...
On va commencer par un cours de sport. Commence à courir je te rattrape
Read 5 tweets
Mar 29, 2021
WUT? Image
I don’t know bro... stop watching porn might be a solution
Ask a French guy to block porn is not your best shot, just saying
Read 4 tweets
Feb 10, 2021
You asked so I did it. I spent 30 min on this new Koo app. The app is leaking of the personal data of his users: email, dob, name, marital status, gender, ...
*leaking the (sorry for the typo)
Read 11 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us on Twitter!

:(