⚠️ A fake French Ministry of Armed Forces website was taken down today.
was claiming to be recruiting 200,000 French people to go to fight in #Ukraine.
It also stated on the website:
*LES IMMIGRÉS SONT PRIORITAIRES (immigrants will be given priority)
Probable Motivations:
➡️ To spread #disinformation on #France sending troops to Ukraine soon
➡️ To cause general panic amongst the French population
➡️ To get the personal data of the French people who used the contact form. (salaries were put very high in order to maximise requests to join the army)
➡️ To track visitor numbers to see how many people are interested in the war in Ukraine.
➡️ To gain intelligence on the number of people interested and willing to go to fight in Ukraine
Thread 🧵2/11:
The domain name was purchased on 15 March 2024.
Only 24 hours after Macron's speech on French TV, he said on 14 March 2024: “If the situation were to deteriorate, we must be ready and we will be ready”
If we look at the creation date and time, and the update date and time, it's always around 15h30. (Modifications to a WHOIS record are typically initiated by the domain owner or someone with administrative rights over the domain)
domain:
Expiry Date: 2025-03-15T15:29:04.242295Z
created: 2024-03-15T15:29:04.260955Z
last-update: 2024-03-20T15:37:23.350728Zsengager-ukraine.fr sengager-ukraine.fr
Thread 🧵3/11:
The domain was purchased with 1API GmbH
1API GmbH
Kaiserstraße 172-174
66386 St. Ingbert, Germany
Phone: +49.6894.9396-760
Email: abuse@1api.net
CEO: Oliver Fries & Johannes Steck
Tax ID: 075/108/00766
V.A.T. ID: DE248636780
@Highfivelol Don't know if this had been found yet. #jordonwalker is on a photo of the The Harvard Urologic Surgery Residency Program at Massachusetts General. (top right) #OSINT#Pfizer
Seems he travelled to Europe and Budapest before Covid broke out.
🧵Thread 1/6: Many accounts (including OSINT people) across social media are still spreading this photo claiming the French Gov purchased thousands of electric vehicles left to rot. The below 👇 was posted an hour ago on LinkedIn. Let’s use some #OSINT to check it out.
🧵Thread 2/6: Let’s look closely at the photo. We can see a watermark: @greg_abandoned.
🧵Thread 3/6: Finding @greg_abandoned on Instagram wasn’t too difficult 😁, zooming in on plates, we can see the plates look nothing like French plates, the writing is in Chinese🇨🇳 : instagram.com/p/CS22ZlDJIn4/
🧵Thread! 1/8 : @jakecreps asked about what OSINT can be gathered using DevTools. One of my favorites is using Google Reviews to see what date a subject was in a location, file name used, upload time and date.
🧵2/8 : The techniques within this thread are to be used on Google Reviews, the intelligence gathered can't be seen or obtained without using Dev Tools, the first initial work on this came from @BanPangar, whom I assisted in the final steps for the different dates understanding.
🧵3/8 : Let's start with my chosen photo which is a cup of coffee. Using exiftool, we can see the photo was taken on the 27th of September 2022 at 17h57 +2 GMT. *I will change the file name to "ilovgoogle"
🧵Thread 1/17: King Charles's Protection Officer was seen on the 09th September 2022 with a strange looking handgun according to UK Press. #OSINT#KingCharlesIII#UK#SO14
🧵2/17: UK Royalty Protection Officers usually belong to SO14: eliteukforces.info/police/SO14-ro…
We can see from the photo that the pistol grip is pointing outwards, which indicates the officer is right-handed and opted for a cross-draw type carry.
🧵3/17: SO14 Officers carry a Glock 17 (9mm), the handgun does not look like a G17. The daily star newspaper states " A gun was spotted poking out of the armed guard's blazer". To support the claims about officers carrying a Glock 17, read this article:theguardian.com/uk/2000/jun/16…